fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@iconify-json/carbon	1.2.13 -> 1.2.14			devDependencies	patch
@iconify-json/octicon	1.2.15 -> 1.2.16			devDependencies	patch
@types/node (source)	24.7.0 -> 24.8.1			devDependencies	minor
asciinema-player	3.11.1 -> 3.12.1			devDependencies	minor
go (source)	1.25.2 -> 1.25.3			toolchain	patch
golang	1.25.2 -> 1.25.3				patch
pnpm (source)	10.18.1 -> 10.18.3			packageManager	patch
sigs.k8s.io/controller-runtime	v0.22.2 -> v0.22.3			require	patch
unocss (source)	66.5.2 -> 66.5.4			devDependencies	patch
vite (source)	7.1.9 -> 7.1.10			devDependencies	patch

---

Release Notes

asciinema/asciinema-player (asciinema-player)

v3.12.1: 3.12.1

Compare Source

This version includes additional fix for seeking past the end of recording and restarting the playback.

v3.12.0: 3.12.0

Compare Source

Notable changes:

• Live audio stream support for WebSocket sources (see below)
• Improved adaptive buffer algorithm for WebSocket sources (see below)
• Fixed keyboard shortcuts issue (stopped working) caused by the new mute/unmute icon
• Fixed seeking after playback ended (#​282)

Live audio playback

The audioUrl option, introduced in v3.11, can now also be used with live (WebSocket) sources:

AsciinemaPlayer.create("ws://example.com/ws/stream", document.getElementById("demo"), {
  audioUrl: "http://example.com/icecast/stream.ogg"
});

The URL should be a live audio source - either a direct HTTP audio stream (.mp3, .aac, .ogg, etc) such as Icecast/Shoutcast endpoint, or HLS playlist (.m3u8).

Note that it's not recommended to use autoplay: true option together with audioUrl - browsers often require explicit user activity (click, tap) to enable sound, which in the player's case would be starting the playback by clicking on the play button. Without user click the autoplay will start the playback but the sound likely won't be there.

Also, for the audio playback to work a server that handles the audio URL (e.g. Icecast) must be configured to allow CORS requests from the page (URL) that hosts the player.

New adaptive buffering

The WebSocket driver uses adaptive buffer (expressed in time) to ensure smooth, stutter free playback of live sessions with minimal latency.

The previous algorithm used a moving average over a sliding window of N recent latencies. It did ok-ish job, but given the sparse nature of the event stream (no constant rate) it turned out to be not ideal. Here's how it performed. Red dots are measured latencies, green line is effective buffer time:

The new algorithm uses time based EMA (exponential moving average), which is much more relevant for sparse events, resulting in more stable and overall lower buffer size when applied to a wide spectrum of terminal activities (here applied to the same input latencies as the one above):

golang/go (go)

v1.25.3

pnpm/pnpm (pnpm)

v10.18.3

Compare Source

Patch Changes

• Fix a bug where pnpm would infinitely recurse when using verifyDepsBeforeInstall: install and pre/post install scripts that called other pnpm scripts #​10060.
• Fixed scoped registry keys (e.g., @scope:registry) being parsed as property paths in pnpm config get when --location=project is used #​9362.
• Remove pnpm-specific CLI options before passing to npm publish to prevent "Unknown cli config" warnings #​9646.
• Fixed EISDIR error when bin field points to a directory #​9441.
• Preserve version and hasBin for variations packages #​10022.
• Fixed pnpm config set --location=project incorrectly handling keys with slashes (auth tokens, registry settings) #​9884.
• When both pnpm-workspace.yaml and .npmrc exist, pnpm config set --location=project now writes to pnpm-workspace.yaml (matching read priority) #​10072.
• Prevent a table width error in pnpm outdated --long #​10040.
• Sync bin links after injected dependencies are updated by build scripts. This ensures that binaries created during build processes are properly linked and accessible to consuming projects #​10057.

v10.18.2

Compare Source

Patch Changes

• pnpm outdated --long should work #​10040.
• Replace ndjson with split2. Reduce the bundle size of pnpm CLI #​10054.
• pnpm dlx should request the full metadata of packages, when minimumReleaseAge is set #​9963.
• pnpm version switching should work when the pnpm home directory is in a symlinked directory #​9715.
• Fix EPIPE errors when piping output to other commands #​10027.

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.22.3

Compare Source

What's Changed

• [release-0.22] 🐛 Allow SSA after normal resource creation by @​k8s-infra-cherrypick-robot in #​3348

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.2...v0.22.3

unocss/unocss (unocss)

v66.5.4

Compare Source

   🚀 Features

• preset-wind4: Custom property output backup  -  by @​zyyv in #​4950 (b1089)

   🐞 Bug Fixes

• playground: Add reset styles for non-preset-wind4 configurations  -  by @​Jungzl in #​4938 (f36c7)
• preset-typography: Generate correct selector  -  by @​zyyv in #​4931 (d88b8)
• preset-wind4: Optimize hidden unitility for reset style  -  by @​zyyv in #​4949 (42e63)
• vscode: Update process handling and add workaround for jiti's babel.cjs  -  by @​Jungzl in #​4951 (e3298)

    View changes on GitHub

v66.5.3

Compare Source

   🚀 Features

• runtime:
  • Add preset-wind4 integration to runtime  -  by @​evnchn in #​4933 (75b25)
  • Add preset-wind3 integration to runtime  -  by @​evnchn in #​4934 (f3410)

   🐞 Bug Fixes

• transformer-directives: Add new selector for each grouping selector  -  by @​liangmiQwQ and @​zyyv in #​4940 (f7fc3)

    View changes on GitHub

vitejs/vite (vite)

v7.1.10

Compare Source

Bug Fixes

• css: avoid duplicate style for server rendered stylesheet link and client inline style during dev (#​20767) (3a92bc7)
• css: respect emitAssets when cssCodeSplit=false (#​20883) (d3e7eee)
• deps: update all non-major dependencies (879de86)
• deps: update all non-major dependencies (#​20894) (3213f90)
• dev: allow aliases starting with // (#​20760) (b95fa2a)
• dev: remove timestamp query consistently (#​20887) (6537d15)
• esbuild: inject esbuild helpers correctly for esbuild 0.25.9+ (#​20906) (446eb38)
• normalize path before calling fileToBuiltUrl (#​20898) (73b6d24)
• preserve original sourcemap file field when combining sourcemaps (#​20926) (c714776)

Documentation

• correct WebSocket spelling (#​20890) (29e98dc)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20923) (a5e3b06)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅ Successfully deployed to Cloudflare Pages

Status	URL
Success	https://b8459e7d.ollama-operator.pages.dev