chore(deps): update npm packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@swc/core (source)	1.15.11 → 1.15.13
simple-git (source)	3.31.1 → 3.32.3

---

Release Notes

swc-project/swc (@​swc/core)

v1.15.13

Compare Source

Bug Fixes

• (errors) Avoid panic on invalid diagnostic spans (#​11561) (b24b8e0)

• (es/helpers) Fix _object_without_properties crash on primitive values (#​11571) (4f35904)

• (es/jsx) Preserve whitespace before HTML entities (#​11521) (64be077)

• (es/minifier) Do not merge if statements with different local variable values (#​11518) (3e63627)

• (es/minifier) Prevent convert_tpl_to_str when there's emoji under es5 (#​11529) (ff6cf88)

• (es/minifier) Inline before merge if (#​11526) (aa5a9ac)

• (es/minifier) Preserve array join("") nullish semantics (#​11558) (d477f61)

• (es/minifier) Inline side-effect-free default params (#​11564) (1babda7)

• (es/parser) Fix generic arrow function in TSX mode (#​11549) (366a16b)

• (es/react) Preserve first-line leading whitespace with entities (#​11568) (fc62617)

• (es/regexp) Transpile unicode property escapes in RegExp constructor (#​11554) (476d544)

Documentation

• (agents) Clarify sandbox escalation for progress (#​11574) (cb31d0d)

Features

• (es/minifier) Add unsafe_hoist_static_method_alias option (#​11493) (6e7dbe2)

• (es/minifier) Remove unused args for IIFE (#​11536) (3cc286b)

Refactor

• (es/parser) Compare token kind rather than strings (#​11531) (5872ffa)

• (es/typescript) Run typescript transform in two passes (#​11532) (b069558)

• (es/typescript) Precompute namespace import-equals usage in semantic pass (#​11534) (b7e87c7)

Testing

• (es/minifier) Add execution tests for issue #​11517 (#​11530) (01b3b64)

• Disable cva ecosystem ci temporariliy (55bc966)

Ci

• Reset closed issue and PR milestone to Planned (#​11559) (d5c4ebe)

• Add permission (431c576)

steveukx/git-js (simple-git)

v3.32.3

Compare Source

Patch Changes

• f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

  Thanks to @​CodeAnt-AI-Security for identifying the issue

v3.32.2

Compare Source

Patch Changes

• 8d02097: Enhanced clone unsafe switch detection.

v3.32.1

Compare Source

Patch Changes

• 23b070f: Fix regex for detecting unsafe clone options

  Thanks to @​stevenwdv for reporting this issue.

v3.32.0

Compare Source

Minor Changes

• 1effd8e: Enhances the unsafe plugin to block additional cases where the -u switch may be disguised
  along with other single character options.

  Thanks to @​JuHwiSang for identifying this as vulnerability.

Patch Changes

• d5fd4fe: Use task runner for logging use of deprecated (already no-op) functions.

---

Configuration

📅 Schedule: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.