deps(deps): bump the minor-and-patch group with 6 updates

[dependabot]

Bumps the minor-and-patch group with 6 updates:

Package	From	To
postgres	3.4.8	3.4.9
@electric-sql/pglite	0.4.2	0.4.3
@types/node	25.5.0	25.5.2
bits-ui	2.16.5	2.17.2
knip	6.2.0	6.3.0
vite	8.0.3	8.0.5

Updates postgres from 3.4.8 to 3.4.9

Release notes

Sourced from postgres's releases.

v3.4.9

• Fix porsager/postgres#1143 1e92809

---

porsager/postgres@v3.4.8...v3.4.9

Commits

• e7dfa14 3.4.9
• cc29931 build
• 1e92809 Fix porsager/postgres#1143
• See full diff in compare view

Updates @electric-sql/pglite from 0.4.2 to 0.4.3

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite@​0.4.3

Patch Changes

• 2ae666f: Default database, user and role are now all "postgres"
• fb95e66: Allow setting initial memory size.
• 65fc101: Disable background workers.

Changelog

Sourced from @​electric-sql/pglite's changelog.

0.4.3

Patch Changes

• 2ae666f: Default database, user and role are now all "postgres"
• fb95e66: Allow setting initial memory size.
• 65fc101: Disable background workers.

Commits

• b7ba707 Version Packages (#947)
• fb95e66 Allow set initial memory size (#957)
• 65fc101 Disable background workers (#948)
• 2ae666f Default user and role to "postgres" (#940)
• See full diff in compare view

Updates @types/node from 25.5.0 to 25.5.2

Commits

• See full diff in compare view

Updates bits-ui from 2.16.5 to 2.17.2

Release notes

Sourced from bits-ui's releases.

bits-ui@2.17.2

Patch Changes

• fix(ContextMenu): prevent left-click on nested context-menu triggers from dismissing parent layers (#2019)

• fix(Slider): use ResizeObserver to recompute thumb positioning (#2015)

• fix(TimeField): preserve current AM/PM when typing the hour in 12-hour mode so PM values no longer flip to AM (#2016)

• fix(HiddenInput): prevent page scroll in nested overflow layouts by anchoring the visually hidden input at top-left (#2018)

bits-ui@2.17.1

Patch Changes

• fix(MenuSubTriggerState): handle open delay correctly (#2013)

bits-ui@2.17.0

Minor Changes

• feat: support CSS transitions (#2010)

Patch Changes

• fix(ContextMenu): nested submenus not opening (#2010)

• fix(Menu): exit animations not firing on close (#2010)

• improve(Menu): safe area handling (#2010)

• perf(PresenceLayer): simplify and improve efficiency (#2010)

Commits

• 514ba23 Version Packages (#2017)
• fb23a91 fix(ContextMenu): prevent left-click on nested context-menu triggers from dis...
• 3857785 fix(HiddenInput): prevent page scroll in nested overflow layouts (#2018)
• 5ea1e8a fix(HiddenInput): prevent page scroll in nested overflow layouts
• 1496b3d fix(TimeField): preserve AM/PM when typing the hour in 12H mode (#2016)
• e689bab fix(Slider): thumb positioning (#2015)
• 8a6727f Version Packages (#2014)
• 5772975 fix(MenuSubTriggerState): handle open delay correctly (#2013)
• debfe01 docs: add nested demos (#2012)
• e9eec93 Version Packages (#2011)
• Additional commits viewable in compare view

Updates knip from 6.2.0 to 6.3.0

Release notes

Sourced from knip's releases.

Release 6.3.0

• Re-gen sponsorships chart (83ee4895f36d934bf9f2efaaaf3e141c33c889f8)
• Add testimonial (be16c54d379698899e3f10646bb23b280024b989)
• Add deferred resolve entries as direct entry paths to avoid ws exclusion (91a183539fb63528f900b187328c3bba1b161e88)
• Add rolldown plugin (resolve #1661) (44bfd6273375384dc0b01b2cf673b6ad1b6783f0)
• Housekeep plugins a bit (dc6986821bde185185b730e119d2c528048f9976)
• Improve module.register handling (b9e36ea42d0b2b35d6080aafc94b292a3d7fd711)
• Housekeep release script (f81bd0f5f6630c2cac9934c3b96ace0d42bd2353)

Commits

• 4b53308 Release knip@6.3.0
• f81bd0f Housekeep release script
• b9e36ea Improve module.register handling
• dc69868 Housekeep plugins a bit
• 44bfd62 Add rolldown plugin (resolve #1661)
• 91a1835 Add deferred resolve entries as direct entry paths to avoid ws exclusion
• See full diff in compare view

Updates vite from 8.0.3 to 8.0.5

Release notes

Sourced from vite's releases.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.5 (2026-04-06)

Bug Fixes

• apply server.fs check to env transport (#22159) (f02d9fd)
• avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)
• check server.fs after stripping query as well (#22160) (a9a3df2)
• disallow referencing files outside the package from sourcemap (#22158) (f05f501)

8.0.4 (2026-04-06)

Features

• allow esbuild 0.28 as peer deps (#22155) (b0da973)
• hmr: truncate list of files on hmr update (#21535) (d00e806)
• optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

• hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)
• add types for vite/modulepreload-polyfill (#22126) (17330d2)
• deps: update all non-major dependencies (#22073) (6daa10f)
• deps: update all non-major dependencies (#22143) (22b0166)
• resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)
• ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

• add environment.fetchModule documentation (#22035) (54229e7)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#21989) (0ded627)

Code Refactoring

• upgrade to typescript 6 (#22110) (cc41398)

Commits

• 1a12d4c release: v8.0.5
• 79f002f fix: avoid path traversal with optimize deps sourcemap handler (#22161)
• a9a3df2 fix: check server.fs after stripping query as well (#22160)
• f02d9fd fix: apply server.fs check to env transport (#22159)
• f05f501 fix: disallow referencing files outside the package from sourcemap (#22158)
• 7339bdc release: v8.0.4
• 54229e7 docs: add environment.fetchModule documentation (#22035)
• b0da973 feat: allow esbuild 0.28 as peer deps (#22155)
• 22b0166 fix(deps): update all non-major dependencies (#22143)
• 17330d2 fix: add types for vite/modulepreload-polyfill (#22126)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: bun. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.