⬆️ Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dotenv	17.2.1 -> 17.2.2
express-rate-limit	8.0.1 -> 8.1.0
pino (source)	9.9.0 -> 9.9.4
pnpm (source)	10.14.0 -> 10.15.1
pnpm (source)	10.14.0 -> 10.15.1
tsx (source)	4.20.4 -> 4.20.5

---

Release Notes

motdotla/dotenv (dotenv)

v17.2.2

Compare Source

Added

• 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

express-rate-limit/express-rate-limit (express-rate-limit)

v8.1.0

Compare Source

You can view the changelog here.

pinojs/pino (pino)

v9.9.4

Compare Source

v9.9.3

Compare Source

What's Changed

• fix(types): compatibility when leveraging parameters by @​rozzilla in #​2273

New Contributors

• @​rozzilla made their first contribution in #​2273

Full Changelog: pinojs/pino@v9.9.2...v9.9.3

v9.9.2

Compare Source

v9.9.1

Compare Source

What's Changed

• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​2268
• build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​2269
• fix: TypeScript regression with boolean values in %s placeholders by @​mcollina in #​2262

Full Changelog: pinojs/pino@v9.9.0...v9.9.1

pnpm/pnpm (pnpm)

v10.15.1

Compare Source

Patch Changes

• Fix .pnp.cjs crash when importing subpath #​9904.
• When resolving peer dependencies, pnpm looks whether the peer dependency is present in the root workspace project's dependencies. This change makes it so that the peer dependency is correctly resolved even from aliased npm-hosted dependencies or other types of dependencies #​9913.

v10.15.0

Compare Source

Minor Changes

• Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #​9793.
• Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #​9780.
• pnpm config get now prints an INI string for an object value #​9797.
• pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@​babel/parser"].peerDependencies["@​babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
• pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

• Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #​9835.
• When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #​9775.
• When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #​9862.
• The standalone exe version of pnpm works with glibc 2.26 again #​9734.
• Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #​9823.

privatenumber/tsx (tsx)

v4.20.5

Compare Source

Bug Fixes

• handle ambiguous packages (796053a)

---

This release is also available on:

• npm package (@​latest dist-tag)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.