chore: Bump vercel from 58.4.4 to 59.17.0

[dependabot]

Bumps vercel from 58.4.4 to 59.17.0.

Changelog

Sourced from vercel's changelog.

vercel

59.11.7

Patch Changes

• 1109c9e: Update CLI command behavior.

59.11.6

Patch Changes

• f5fd254: Stage native binary dependencies with pnpm deploy --frozen-lockfile (hoisted layout) and prune the tree to what the CLI's non-builder runtime dependencies can reach, instead of a handwritten, flattened allowlist. The binary now ships exactly the versions in pnpm-lock.yaml, nested dependency versions are preserved (fixes vercel sandbox loading lru-cache@6 instead of lru-cache@10), and platform-specific optional dependencies are resolved for the --target platform. Staging happens outside the repository so pkg cannot follow stray requires into workspace node_modules, and dependency test files are excluded from the snapshot. The binary smoke test accepts the usage exit code 2 that most --help commands return.
• e492148: Correct metrics help examples for the v1 catalog and use a rolling pageview time range.
• f5fd254: On non-native CLI, resolve URL-pinned builders from CLI dependencies when a cached .vercel/builders copy does not match the pin, instead of npm-installing the preview tarball. Publish preview tarballs at flat filenames (e.g. vercel-node.tgz) so yarn 1 and pnpm 8 can both install them. Preview pack also hoists nested registry deps of those tarball pins onto the parent (e.g. js-yaml from @vercel/python-analysis) because yarn 1 does not install them.

59.11.5

Patch Changes

• ffe0cab: Fix vercel flags split and vercel flags rules add help examples to use false/true variant values, and treat flags / @flags-sdk/vercel as notable dependencies in vercel skills.

59.11.4

Patch Changes

• a3c4302: Clarify --trigger-branch help on vercel connect create and vercel connect attach. The flag targets a git branch's preview deployment; production is selected by omitting the flag, not by passing production as a branch name.
• 2c5ed83: Fix firewall overview failing on plans without IP Bypass. The command no longer errors when the bypass endpoint is unavailable, and reports system mitigation status from the project rather than the plan-gated bypass API. With --json, a bypassUnavailable field now explains why bypass is null.
• aae0a62: Reduce vercel deploy startup time by lazy-loading modules that are only needed for first-time project setup, --dry output, and experimental services detection (@vercel/frameworks, @vercel/fs-detectors, the vercel.json schema validator, and vercel env pull).

59.11.3

Patch Changes

• 36a6a4e: Only list internal trace sampling rules with vercel traces config ls.
• Updated dependencies [1817491]
  • @​vercel/build-utils@​14.9.1
  • @​vercel/backends@​7.0.2
  • @​vercel/container@​7.0.1
  • @​vercel/elysia@​7.0.1
  • @​vercel/express@​7.0.2
  • @​vercel/fastify@​7.0.1
  • @​vercel/go@​10.0.1
  • @​vercel/h3@​7.0.1
  • @​vercel/hono@​7.0.1
  • @​vercel/hydrogen@​8.0.1
  • @​vercel/koa@​7.0.1
  • @​vercel/nestjs@​7.0.1
  • @​vercel/next@​11.0.2
  • @​vercel/node@​12.0.1

... (truncated)

Commits

• See full diff in compare view

Attestation changes

This version has no provenance attestation, while the previous version (58.4.4) was attested. Review the package versions before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.