chore(deps): bump the all-dependencies group across 1 directory with 13 updates

[dependabot[bot]]

Bumps the all-dependencies group with 13 updates in the / directory:

Package	From	To
whatwg-url	14.2.0	15.0.0
@types/node	22.15.21	24.4.0
dotenv	16.5.0	17.2.2
dotenv-cli	8.0.0	10.0.0
jest	29.7.0	30.1.3
@types/jest	29.5.14	30.0.0
jest-html-reporter	4.1.0	4.3.0
prettier	3.5.3	3.6.2
ts-jest	29.3.4	29.4.1
typedoc	0.28.4	0.28.13
typedoc-plugin-markdown	4.6.3	4.8.1
typescript	5.8.3	5.9.2
webpack	5.99.9	5.101.3

Updates whatwg-url from 14.2.0 to 15.0.0

Release notes

Sourced from whatwg-url's releases.

15.0.0

Breaking change: now requires Node.js v20 or later.

Other changes make minor updates to failure cases for "host"/"hostname" and "port" state override parsing, following URL Standard changes https://github.com/whatwg/url/commit/c23aec1a9a7433282abc61c1f21554cd53923b26 and https://github.com/whatwg/url/commit/cc8b776b89a6d92b5cc74581c8d90450d3c1e762. These have no impact on usage of the high-level APIs.

Commits

• c1d45f4 15.0.0
• 98d64c5 Report more port state failures
• 1415e8d Report all hostname state failures
• 5f6ab8a Roll to latest web platform tests
• 9e57a1c Update dependencies, dev deps, and minimum Node version
• See full diff in compare view

Updates @types/node from 22.15.21 to 24.4.0

Commits

• See full diff in compare view

Updates dotenv from 16.5.0 to 17.2.2

Changelog

Sourced from dotenv's changelog.

17.2.2 (2025-09-02)

Added

• 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

• Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

• Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)
• Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})

# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"

// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)

$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js

17.1.0 (2025-07-07)

Added

• Add additional security and configuration tips to the runtime log (#884)
• Dim the tips text from the main injection information text

const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
</tr></table> 

... (truncated)

Commits

• 2ea1a76 17.2.2
• 0947a83 changelog 🪵
• c8fb4aa changelog 🪵
• a2b13d2 update README
• d92a91e remove
• 37cf55a 17.2.1
• f2d92e9 changelog 🪵
• bd27017 Merge pull request #897 from motdotla/adjust-tip-for-click
• 8a9ce45 add to tests
• 19e5ad9 adjust clickable tip
• Additional commits viewable in compare view

Updates dotenv-cli from 8.0.0 to 10.0.0

Release notes

Sourced from dotenv-cli's releases.

v10.0.0: bump dotenv-expand

Fixes entropitor/dotenv-cli#121

v9.0.0 Bump dotenv and be quiet by default

entropitor/dotenv-cli#129

Commits

• 0bf0073 10.0.0
• d4a3509 chore: bump dotenv-expand
• 6c510a3 9.0.0
• 8d377b1 Add quiet flag to suppress dotenv debug output by default (#129)
• 0da11b9 Update LICENSE with copyright information
• See full diff in compare view

Updates jest from 29.7.0 to 30.1.3

Release notes

Sourced from jest's releases.

30.1.3

Fixes

• Fix unstable_mockModule with node: prefixed core modules.

30.1.2

Fixes

• [jest-snapshot-utils] Correct snapshot header regexp to work with newline across OSes (#15803)

30.1.1

Fixes

• [jest-snapshot-utils] Fix deprecated goo.gl snapshot warning not handling Windows end-of-line sequences (#15800)

30.1.0

Features

• [jest-leak-detector] Configurable GC aggressiveness regarding to V8 heap snapshot generation (#15793)
• [jest-runtime] Reduce redundant ReferenceError messages
• [jest-core] Include test modules that failed to load when --onlyFailures is active

Fixes

• `[jest-snapshot-utils] Fix deprecated goo.gl snapshot guide link not getting replaced with fully canonical URL (#15787)
• [jest-circus] Fix it.concurrent not working with describe.skip (#15765)
• [jest-snapshot] Fix mangled inline snapshot updates when used with Prettier 3 and CRLF line endings
• [jest-runtime] Importing from @jest/globals in more than one file no longer breaks relative paths (#15772)

Chore

• [expect] Update docblock for toContain() to display info on substring check (#15789)

30.0.2

What's Changed

Fixes

• [jest-matcher-utils] Make 'deepCyclicCopyObject' safer by setting descriptors to a null-prototype object (#15689)
• [jest-util] Make garbage collection protection property writable (#15689)

Full Changelog: https://github.com/jestjs/jest/blob/main/CHANGELOG.md

Jest 30.0.1

What's Changed

Features

• [jest-resolver] Implement the defaultAsyncResolver (#15679)

... (truncated)

Changelog

Sourced from jest's changelog.

30.1.3

Fixes

• Fix unstable_mockModule with node: prefixed core modules.

30.1.2

Fixes

• [jest-snapshot-utils] Correct snapshot header regexp to work with newline across OSes (#15803)

30.1.1

Fixes

• [jest-snapshot-utils] Fix deprecated goo.gl snapshot warning not handling Windows end-of-line sequences (#15800)

30.1.0

Features

• [jest-leak-detector] Configurable GC aggressiveness regarding to V8 heap snapshot generation (#15793)
• [jest-runtime] Reduce redundant ReferenceError messages
• [jest-core] Include test modules that failed to load when --onlyFailures is active

Fixes

• [jest-snapshot-utils] Fix deprecated goo.gl snapshot guide link not getting replaced with fully canonical URL (#15787)
• [jest-circus] Fix it.concurrent not working with describe.skip (#15765)
• [jest-snapshot] Fix mangled inline snapshot updates when used with Prettier 3 and CRLF line endings
• [jest-runtime] Importing from @jest/globals in more than one file no longer breaks relative paths (#15772)

Chore

• [expect] Update docblock for toContain() to display info on substring check (#15789)

30.0.5

Features

• [jest-config] Allow testMatch to take a string value
• [jest-worker] Let workerIdleMemoryLimit accept 0 to always restart worker child processes

Fixes

• [expect] Fix bigint error (#15702)

30.0.4

... (truncated)

Commits

• da9b532 v30.1.3
• ebfa31c v30.1.2
• d347c0f v30.1.1
• 4d5f41d v30.1.0
• 22236cf v30.0.5
• f4296d2 v30.0.4
• d4a6c94 v30.0.3
• 393acbf v30.0.2
• 5ce865b v30.0.1
• 469f665 v30.0.0
• Additional commits viewable in compare view

Updates @types/jest from 29.5.14 to 30.0.0

Commits

• See full diff in compare view

Updates jest-html-reporter from 4.1.0 to 4.3.0

Release notes

Sourced from jest-html-reporter's releases.

v4.3.0

What's Changed

• Added new configuration option hideConsoleLogOrigin which will opt out of console log stack traces by @​lararojasmr in Hargne/jest-html-reporter#199
• Added theme: darkTheme by @​lararojasmr in Hargne/jest-html-reporter#199

New Contributors

• @​lararojasmr made their first contribution in Hargne/jest-html-reporter#199

Full Changelog: https://github.com/Hargne/jest-html-reporter/compare/4.2.0...4.3.0

v4.2.0

What's Changed

• Added support for Jest 30.x by @​Hargne in Hargne/jest-html-reporter#201
• Bump @​babel/helpers from 7.26.7 to 7.26.10 by @​dependabot in Hargne/jest-html-reporter#198

Full Changelog: https://github.com/Hargne/jest-html-reporter/compare/4.1.0...4.2.0

Commits

• dfcf70b Merge pull request #203 from Hargne/dev
• 3f27675 Merge branch 'dev' of https://github.com/Hargne/jest-html-reporter into dev
• e4ba721 Bump version to 4.3.0 and add prepublishOnly script
• ff6f2cc Merge pull request #199 from lararojasmr/master
• 90b43b0 Merge remote-tracking branch 'origin/master'
• aceae05 Update build script to include test step before bundling
• 07fd067 Update README.md
• ebb1483 Merge branch 'master' into master
• 9bf24a7 Rename table column to hideConsoleLogOrigin and adjust README formatting.
• a646daa Merge pull request #202 from Hargne/dev
• Additional commits viewable in compare view

Updates prettier from 3.5.3 to 3.6.2

Release notes

Sourced from prettier's releases.

3.6.2

What's Changed

• Add missing blank line around code block by @​fisker in prettier/prettier#17675

🔗 Changelog

3.6.1

• Fix "Warning: File descriptor 39 closed but not opened in unmanaged mode" error when running --experimental-cli

🔗 Changelog

3.6.0

diff

🔗 Release note "Prettier 3.6: Experimental fast CLI and new OXC and Hermes plugins!"

Changelog

Sourced from prettier's changelog.

3.6.2

diff

Markdown: Add missing blank line around code block (#17675 by @​fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block
---
foo: bar


Another
List

<!-- Prettier 3.6.1 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List



<!-- Prettier 3.6.2 -->


Some text, and code block below, with newline after code block
---
foo: bar


Another
List

3.6.1

diff

TypeScript: Allow const without initializer (#17650, #17654 by @​fisker)

// Input
</tr></table> 

... (truncated)

Commits

• 7a8b05f Release 3.6.2
• 46526b4 Add missing blank line around code block (#17675)
• a04ec11 chore(deps): update babel to v7.27.7 (#17684)
• 32be5b6 chore(deps): update dependency flow-parser to v0.274.1 (#17676)
• b55e777 Update docs about "TypeScript Configuration Files" (#17677)
• b197c99 chore(deps): update dependency @​vitejs/plugin-react to v4.6.0 (#17674)
• 1185f83 chore(deps): update dependency @​angular/compiler to v20.0.5 (#17680)
• aa1316f chore(deps): update dependency browserslist to v4.25.1 (#17671)
• c468d33 chore(deps): update dependency oxc-parser to v0.75.0 (#17672)
• 3f46d91 chore(deps): update dependency vite to v7 (#17673)
• Additional commits viewable in compare view

Updates ts-jest from 29.3.4 to 29.4.1

Release notes

Sourced from ts-jest's releases.

v29.4.1

Please refer to CHANGELOG.md for details.

v29.4.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.1 (2025-08-03)

Bug Fixes

• fix: replace ejs with handlebars due to security issues (899c9b7), closes #4969

29.4.0 (2025-06-11)

Features

• feat: support Jest 30 (84e093e)

Commits

• 9099745 chore(release): 29.4.1
• 9f0b9f2 build(deps): Update dependency @​types/handlebars to ^4.1.0
• 322a3c7 ci: add code scanning workflow
• 899c9b7 fix: replace ejs with handlebars due to security issues
• 953f239 build(deps): Update dependency memfs to ^4.36.0
• 8459897 build(deps): Update dependency memfs to ^4.35.0
• 3c41410 build(deps): Update dependency memfs to ^4.34.0
• d50ff1e build(deps): Update dependency memfs to ^4.32.0
• 5984f70 build(deps): Update dependency memfs to ^4.30.1
• 18b9665 build(deps): Update Jest packages to ^30.0.5
• Additional commits viewable in compare view

Updates typedoc from 0.28.4 to 0.28.13

Release notes

Sourced from typedoc's releases.

v0.28.13

Features

• The basePath option now also affects relative link resolution, TypeDoc will also check for paths relative to the provided base path. If you instead want TypeDoc to only change the rendered base path for sources, use the displayBasePath option, #3009.

Bug Fixes

• Fixed bug introduced in 0.28.8 where TypeDoc could not render docs with some mixin classes, #3007.
• @inheritDoc will now correctly overwrite @remarks and @returns blocks on the target comment, #3012.
• The externalSymbolLinkMappings option now works properly on links pointing to inherited/overwritten signatures, #3014.

v0.28.12

Bug Fixes

• Variables marked with @enum now work for symbols imported from another module, #3003.
• Improved magic introduced with #2999 to work with imported symbols, #3003.
• Fixed relative link resolution to file names containing percent encoded URLs, #3006.
• Linking to the project's README file with a relative link will now behave as expected, #3006.
• Reduced unnecessary HTML element rendering in default theme. API: Reflection.hasComment and Comment.hasVisibleComponent now accepts an optional notRenderedTags parameter.

v0.28.11

Features

• Object properties declared with shorthand property assignment will now use the variable's comment if they do not have their own comment, #2999.

Bug Fixes

• Fixed link resolution not working correctly in first comment on the file in some cases, #2994.
• Optional methods are now rendered with a trailing ? in the reflection preview and signature, #2995.
• The compilerOptions option now functions properly with non-boolean options, #3000.
• Configuration errors within the compilerOptions option are now handled gracefully, #3000.
• Fixed improper casing of "Type Declaration" header, #3002.

v0.28.10

Bug Fixes

• Fixed inconsistent anchors on module pages for re-exports, #2990.
• Markdown references which appear to be footnotes will no longer be checked for links, #2991.

v0.28.9

Features

... (truncated)

Changelog

Sourced from typedoc's changelog.

v0.28.13 (2025-09-14)

Features

• The basePath option now also affects relative link resolution, TypeDoc will also check for paths relative to the provided base path. If you instead want TypeDoc to only change the rendered base path for sources, use the displayBasePath option, #3009.

Bug Fixes

• Fixed bug introduced in 0.28.8 where TypeDoc could not render docs with some mixin classes, #3007.
• @inheritDoc will now correctly overwrite @remarks and @returns blocks on the target comment, #3012.
• The externalSymbolLinkMappings option now works properly on links pointing to inherited/overwritten signatures, #3014.

v0.28.12 (2025-09-01)

Bug Fixes

• Variables marked with @enum now work for symbols imported from another module, #3003.
• Improved magic introduced with #2999 to work with imported symbols, #3003.
• Fixed relative link resolution to file names containing percent encoded URLs, #3006.
• Linking to the project's README file with a relative link will now behave as expected, #3006.
• Reduced unnecessary HTML element rendering in default theme. API: Reflection.hasComment and Comment.hasVisibleComponent now accepts an optional notRenderedTags parameter.

v0.28.11 (2025-08-25)

Features

• Object properties declared with shorthand property assignment will now use the variable's comment if they do not have their own comment, #2999.

Bug Fixes

• Fixed link resolution not working correctly in first comment on the file in some cases, #2994.
• Optional methods are now rendered with a trailing ? in the reflection preview and signature, #2995.
• The compilerOptions option now functions properly with non-boolean options, #3000.
• Configuration errors within the compilerOptions option are now handled gracefully, #3000.
• Fixed improper casing of "Type Declaration" header, #3002.

v0.28.10 (2025-08-10)

Bug Fixes

• Fixed inconsistent anchors on module pages for re-exports, #2990.
• Markdown references which appear to be footnotes will no longer be checked for links, #2991.

v0.28.9 (2025-08-01)

Features

... (truncated)

Commits

• 7240906 Update changelog for release
• a57c48e Bump version to 0.28.13
• 33e4eb9 Fix externalSymbolLinkMappings with inherited methods
• 3b84d2d Use basePath option for relative links
• 12a3f3a Fix tests
• 8f94288 Fix #3012
• df88357 Merge pull request #3010 from boneskull/boneskull/packagedocumentation-link
• e0fd143 docs(tags): fix link to packageDocumentation
• 1269e3a Make parent links even more restrictive
• b3a4869 Update changelog for release
• Additional commits viewable in compare view

Updates typedoc-plugin-markdown from 4.6.3 to 4.8.1

Release notes

Sourced from typedoc-plugin-markdown's releases.

[email protected]

Patch Changes

• Correctly handle empty markdown links (#836).

[email protected]

Minor Changes

• Exposed additional placeholders in pageTitleTemplates and adjusted default templates (#831).
• Tweaked the format of abstract class page titles to include the translated abstract keyword (e.g., "Abstract Class: MyClass") for improved readability.
• Added strikeDeprecatedPageTitles option.

Patch Changes

• Fix incorrect link fragments (#832).

[email protected]

Patch Changes

• Escape square brackets in index signature types (typedoc2md/typedoc-plugin-markdown#829).
• Fix missing segments in declaration titles that contain periods.

[email protected]

Minor Changes

• Added useCustomAnchors and customAnchorsFormat options - thanks @​ocavue.

Patch Changes

• Fix incorrect overload function comments (#827).

[email protected]

Patch Changes

• Added theme translations for "de" locale.
• Fix navigation items without group or categories (@group/@category=none) (#815).
• Correctly handle sidebar groups for packages with merged modules.

Changelog

Sourced from typedoc-plugin-markdown's changelog.

4.8.1 (2025-08-12)

Patch Changes

• Correctly handle empty markdown links (#836).

4.8.0 (2025-07-29)

Minor Changes

• Exposed additional placeholders in pageTitleTemplates and adjusted default templates (#831).
• Tweaked the format of abstract class page titles to include the translated abstract keyword (e.g., "Abstract Class: MyClass") for improved readability.
• Added strikeDeprecatedPageTitles option.

Patch Changes

• Fix incorrect link fragments (#832).

4.7.1 (2025-07-19)

Patch Changes

• Escape square brackets in index signature types (#829).
• Fix missing segments in declaration titles that contain periods.

4.7.0 (2025-06-19)

Minor Changes

• Added useCustomAnchors and customAnchorsFormat options - thanks @​ocavue.

Patch Changes

• Fix incorrect overload function comments (#827).

4.6.4 (2025-06-01)

Patch Changes

• Added theme translations for "de" locale.
• Fix navigation items without group or categories (@group/@category=none) (#815).
• Correctly handle sidebar groups for packages with merged modules.

Commits

• 6682592 Version Packages
• 54b6d06 chore(all): fix npm
• f98c0b6 fix(core): correctly handle empty markdown links
• 880194d chore(all): added publish script
• 7da57e2 Version Packages
• 4f7cbf1 feat(core): exposed additional placeholders to "pageTitleTemplates" and adjus...
• 5ad7a88 fix(core): fix incorrect link fragments
• f872871 chore(core): updated changelog date
• 74a649f Version Packages
• 51b8f88 fix(core): fix missing segments in declaration titles that contain periods
• Additional commits viewable in compare view

Updates typescript from 5.8.3 to 5.9.2

Release notes

Sourced from typescript's releases.

TypeScript 5.9

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

TypeScript 5.9 RC

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

Downloads are available on:

• npm

TypeScript 5.9 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.9.0 (Beta).

Downloads are available on:

• npm

Commits

• be86783 Give more specific errors for verbatimModuleSyntax (#62113)
• 22ef577 LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250714...
• d5a414c Don't use noErrorTruncation when printing types with maximumLength set (#...
• f14b5c8 Remove unused and confusing dom.iterable.d.ts file (#62037)
• 2778e84 Restore AbortSignal.abort (#62086)
• 65cb4bd LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250710...
• 9e20e03 Clear out checker-level stacks on pop (#62016)
• 87740bc Fix for Issue 61081 (#61221)
• 833a8d4 Fix Symbol completion priority and cursor positioning (#61945)
• 0018c9f LEGO: Pull request from lego/hb_5378966c-b857-470a-8675-daebef4a6da1_20250702...
• Additional commits viewable in compare view

Updates webpack from 5.99.9 to 5.101.3

Release notes

Sourced from webpack's releases.

v5.101.3

Fixes

• Fixed resolve execution order issue from extra await in async modules
• Avoid empty block for unused statement
• Collect only specific expressions for destructuring assignment

v5.101.2

Fixes

• Fixed syntax error when comment is on the last line
• Handle var declaration for createRequire
• Distinguish free variable and tagged variable

v5.101.1

Fixes

• Filter deleted assets in processAdditionalAssets hook
• HMR failure in defer module
• Emit assets even if invalidation occurs again
• Export types for serialization and deserialization in plugins and export the ModuleFactory class
• Fixed the failure export of internal function for ES module chunk format
• Fixed GetChunkFilename failure caused by dependOn entry
• Fixed the import of missing dependency chunks
• Fixed when entry chunk depends on the runtime chunk hash
• Fixed module.exports bundle to ESM library
• Adjusted the time of adding a group depending on the fragment of execution time
• Fixed circle dependencies when require RawModule and condition of isDeferred
• Tree-shakable module library should align preconditions of allowInlineStartup

v5.101.0

Fixes

• Fixed concatenate optimization for ESM that caused undefined export
• Respect the output.environment.nodePrefixForCoreModules option everywhere
• Respect the output.importMetaName option everywhere
• Fixed await async dependencies when accepting them during HMR
• Better typescript types

Features

• Added colors helpers for CLI
• Enable tree-shaking for ESM external modules with named imports
• Added the deferImport option to parser options

Performance Improvements

• Fixed a regression in module concatenation after implementing deferred import support
• Fixed a potential performance issue in CleanPlugin
• Avoid extra require in some places

... (truncated)

Commits

• 07b1ac0 chore(release): 5.101.3
• 8d7efb8 chore(deps-dev): bump the dependencies group with 2 updates (#19816)
• 935cbd8 docs: update examples (#19812)
• dc79e95 fix: collect only specific expressions for destructuring assignment
• 90ae8af fix: avoid empty block for unused statement
• 8db97f8 fix: resolve execution order issue from extra await in async modules
• c92deaf ci: pin Node.js 24.x to 24.5.0 in CI workflow (#19813)
• c50930b refactor(test): correct the value retrieval
• 613a5ad chore(deps-dev): bump @​babel/core in the dependencies group (#19807)
• 1d9cc24 chore(release): 5.101.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot[bot]]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.