chore(deps-dev): Bump the npm group with 2 updates

[dependabot]

Bumps the npm group with 2 updates: @langfuse/client and vite.

Updates @langfuse/client from 5.9.0 to 5.9.1

Release notes

Sourced from @​langfuse/client's releases.

v5.9.1

What's Changed

• fix: route CJS consumers to CJS declarations by @​hassiebp in langfuse/langfuse-js#852

Full Changelog: langfuse/langfuse-js@v5.9.0...v5.9.1

Commits

• ff6038a chore: release v5.9.1
• d1b8183 fix: route CJS consumers to CJS declarations (#852)
• See full diff in compare view

Updates vite from 8.1.1 to 8.1.2

Release notes

Sourced from vite's releases.

v8.1.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.2 (2026-06-30)

Bug Fixes

• deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
• restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)
• revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)
• revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

Commits

• ba31193 release: v8.1.2
• 0d3bd7c fix(deps): revert es-module-lexer to 2.1.0 (#22827)
• efb98cc fix: restore, "fix: resolve pnpm .modules.yaml from workspace root instead of...
• cf97711 fix: revert, "fix: resolve pnpm .modules.yaml from workspace root instead of ...
• cccef55 fix: revert, "fix: escape ids with multiple null bytes (#22687)"
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

LGTM — patch bumps to dev deps (@langfuse/client 5.9.0→5.9.1, vite 8.1.1→8.1.2).

Extended reasoning...

Overview

This PR bumps two dev dependencies via Dependabot: @langfuse/client from 5.9.0 to 5.9.1 (a CJS-declaration routing fix) and vite from 8.1.1 to 8.1.2 (a bug-fix release including an es-module-lexer revert and other minor reverts). Only package.json and pnpm-lock.yaml are modified.

Security risks

None apparent. These are patch-level version bumps from trusted, well-known packages, and both live under devDependencies, so they do not affect the built/published action runtime.

Level of scrutiny

Low. Patch bumps to dev-only dependencies with clear changelogs and no changes to source code, workflows, or the action's runtime bundle.

Other factors

No bugs were found by the bug hunting system, no prior reviewer comments to resolve, and CI will exercise the updated tooling via the existing test/build pipeline.

[github-actions]

Experiment Results: 5c4679a

Experiment	Status	Actions
Uppercase (py)	✅ Pass	View GitHub Action Run · View in Langfuse
Uppercase (ts)	✅ Pass	View GitHub Action Run · View in Langfuse
Mixed dir (node)	✅ Pass	View GitHub Action Run · View in Langfuse
Mixed dir (python)	✅ Pass	View GitHub Action Run · View in Langfuse
Regression fixture	❌ Regression	View GitHub Action Run · View in Langfuse

Details

✅ Uppercase (py) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

✅ Uppercase (ts) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

✅ Mixed dir (node) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

✅ Mixed dir (python) (Source)

Score	Value
avg_accuracy	1.000

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000

❌ Regression fixture (Source)

RegressionError: synthetic regression triggered by e2e fixture

Item results (3)

Item	Input	Expected	Output	exact_match
1	langfuse	LANGFUSE	LANGFUSE	1.000
2	world	WORLD	WORLD	1.000
3	hello	HELLO	HELLO	1.000