chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
magic-string	^0.27.0 -> ^0.29.0
undici (source)	5.18.0 -> 5.19.1

---

Release Notes

rich-harris/magic-string

v0.29.0

Compare Source

Features

• x_google_ignoreList: initial support for ignore lists (3c711cd)

v0.28.0

Compare Source

Bug Fixes

• typings: sourcesContent may contain null (#​235) (c2b652a)

nodejs/undici

v5.19.1

Compare Source

TBD

v5.19.0

Compare Source

What's Changed

• fix(fetch): raise AbortSignal max event listeners by @​KhafraDev in https://github.com/nodejs/undici/pull/1910
• fix: content-disposition header parsing by @​climba03003 in https://github.com/nodejs/undici/pull/1911
• fix: remove test by @​KhafraDev in https://github.com/nodejs/undici/pull/1916
• feat: add Headers.prototype.getSetCookie by @​KhafraDev in https://github.com/nodejs/undici/pull/1915
• fix(headers): clone getSetCookie list & add getSetCookie type by @​KhafraDev in https://github.com/nodejs/undici/pull/1917
• doc(mock): update out-of-date reply documentation by @​p9f in https://github.com/nodejs/undici/pull/1913
• fix(types): add missing keepAlive params by @​SkeLLLa in https://github.com/nodejs/undici/pull/1918
• Make the fetch() abort test pass locally, on Linux and Mac, Node 18/19. by @​mcollina in https://github.com/nodejs/undici/pull/1927

New Contributors

• @​climba03003 made their first contribution in https://github.com/nodejs/undici/pull/1911
• @​p9f made their first contribution in https://github.com/nodejs/undici/pull/1913

Full Changelog: nodejs/undici@v5.18.0...v5.19.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[Rich-Harris]

Merging this would mean duplicate copies of magic-string in people's apps, until @rollup/plugin-commonjs and @sveltejs/vite-plugin-svelte update their dependencies

[Rich-Harris]

Ah wait, it's not vite-plugin-svelte that depends on magic-string@0.27, it's vite. I misread pnpm-lock.yaml. Either way, we should probably wait since 0.28 and 0.29 don't add anything we need

[benmccann]

Ah wait, it's not vite-plugin-svelte that depends on magic-string@0.27, it's vite. I misread pnpm-lock.yaml. Either way, we should probably wait since 0.28 and 0.29 don't add anything we need

I don't think there's too much harm in bumping it. It's easier to merge this than to let the changes stack up and try to track when the appropriate time to merge this it. We don't know what version of Vite users will be using anyway

[Rich-Harris]

The test failures look real. Something changed in undici

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

[benmccann]

should this have a changeset? it probably needs a new release of adapter-netlify to happen

lgtm besides that

[Rich-Harris]

it should, yeah — was just seeing if the fix was good first. adding that now