fix(deps): update safe automerge

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@datadog/pprof	5.15.1 → 5.17.0			dependencies	minor
@fastify/cors	11.2.0 → 11.3.0			devDependencies	minor
@fastify/helmet	13.0.2 → 13.1.0			devDependencies	minor
actions/checkout (changelog)	9c091bb → 3d3c42e			action	digest
eslint (source)	9.39.4 → 9.39.5			devDependencies	patch
fastify (source)	5.9.0 → 5.10.0			dependencies	minor
helmet (source)	8.2.0 → 8.3.0			devDependencies	minor
pprof-format	2.2.2 → 2.2.3			dependencies	patch

---

Release Notes

DataDog/pprof-nodejs (@​datadog/pprof)

v5.17.0

Compare Source

v5.16.0

Compare Source

fastify/fastify-cors (@​fastify/cors)

v11.3.0

Compare Source

What's Changed

• chore(deps-dev): bump @​types/node from 24.10.4 to 25.0.3 by @​dependabot[bot] in #​390
• chore(license): standardise license notice by @​Fdawgs in #​391
• style: remove trailing whitespace by @​Fdawgs in #​392
• chore(deps-dev): bump c8 from 10.1.3 to 11.0.0 by @​dependabot[bot] in #​393
• ci: remove stale.yml by @​Tony133 in #​395
• chore: upgrade typescript v6.0.2 by @​Tony133 in #​397
• chore(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @​dependabot[bot] in #​398
• chore(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in #​400
• ci: add lock-threads workflow by @​Fdawgs in #​401
• refactor(types): migrate from tsd to tstyche by @​Tony133 in #​403
• chore(.gitattributes): retain binary file eol style by @​Fdawgs in #​402
• chore: update depedabot setting by @​climba03003 in #​405
• chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group by @​dependabot[bot] in #​407
• docs(readme): update request origin link by @​Fdawgs in #​408
• chore(package.json): fix delvedor's personal url by @​Fdawgs in #​409
• test: remove remaining tap-style vary assertions by @​barry166 in #​410
• chore: bump @​types/node from 25.9.4 to 26.0.0 in the dev-dependencies-typescript group by @​dependabot[bot] in #​411

New Contributors

• @​Tony133 made their first contribution in #​395
• @​barry166 made their first contribution in #​410

Full Changelog: fastify/fastify-cors@v11.2.0...v11.3.0

fastify/fastify-helmet (@​fastify/helmet)

v13.1.0

Compare Source

What's Changed

• ci(ci): add concurrency config by @​Fdawgs in #​295
• perf(index): remove redundant optional chaining by @​Fdawgs in #​296
• build(deps-dev): bump @​types/node from 24.10.4 to 25.0.3 by @​dependabot[bot] in #​297
• ci: remove stale.yml by @​Tony133 in #​298
• build(deps-dev): bump c8 from 10.1.3 to 11.0.0 by @​dependabot[bot] in #​300
• chore(license): standardise license notice by @​Fdawgs in #​299
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in #​304
• build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @​dependabot[bot] in #​303
• ci: add lock-threads workflow by @​Fdawgs in #​306
• refactor(types): migrate from tsd to tstyche by @​Tony133 in #​307
• chore: update depedabot setting by @​climba03003 in #​309
• chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group by @​dependabot[bot] in #​312
• chore(package.json): fix delvedor's personal url by @​Fdawgs in #​313
• chore: bump @​types/node from 25.9.4 to 26.0.0 in the dev-dependencies-typescript group by @​dependabot[bot] in #​315
• docs: fix broken links by @​Fdawgs in #​314

New Contributors

• @​Tony133 made their first contribution in #​298

Full Changelog: fastify/fastify-helmet@v13.0.2...v13.1.0

eslint/eslint (eslint)

v9.39.5

Compare Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

fastify/fastify (fastify)

v5.10.0

Compare Source

helmetjs/helmet (helmet)

v8.3.0

Compare Source

Changed

• Content-Security-Policy: improved performance by ~7% when there are no dynamic directives
• Content-Security-Policy: improved error handling for invalid directive names

Fixed

• Content-Security-Policy: useDefaults: false with no directives is no longer valid, both at runtime and the type level
• Content-Security-Policy: dynamically-computed directive values would throw, not call next, when invalid
• Content-Security-Policy: dynamically-computed directive value entries would throw, not call next, when function threw

DataDog/pprof-format (pprof-format)

v2.2.3

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.