[dependabot]

Bumps otplib from 13.5.0 to 13.6.0.

Release notes

Sourced from otplib's releases.

v13.6.0

What's Changed

• fix(ci): poll npm registry instead of fixed sleep in smoke tests by @​yeojz in yeojz/otplib#882
• fix(turbo): include CI and NODE_ENV in the cache key by @​yeojz in yeojz/otplib#886
• ci: tag releases on merge and publish from the tag by @​yeojz in yeojz/otplib#884
• fix(packages): resolve attw node10 failures on subpath exports by @​yeojz in yeojz/otplib#885
• chore(deps): bump the github-actions group across 1 directory with 3 updates by @​dependabot[bot] in yeojz/otplib#896
• chore(deps-dev): bump the dev-dependencies-patch group with 8 updates by @​dependabot[bot] in yeojz/otplib#891
• chore(deps-dev): bump the dev-dependencies-minor group across 1 directory with 4 updates by @​dependabot[bot] in yeojz/otplib#890
• chore(deps): bump the dependencies-minor group across 1 directory with 2 updates by @​dependabot[bot] in yeojz/otplib#889
• chore(deps-dev): bump @​eslint/js from 9.39.4 to 9.39.5 by @​dependabot[bot] in yeojz/otplib#892
• fix(deps-dev): move docs to VitePress 2 alpha to clear vite 5 advisories by @​yeojz in yeojz/otplib#888
• fix(deps-dev): refresh stale audit overrides for fast-uri, qs and friends by @​yeojz in yeojz/otplib#897
• chore(ci): drop stale CVE suppression, dead publish token env, and input interpolation by @​yeojz in yeojz/otplib#898
• fix(otplib): pass hooks through generateSync by @​yeojz in yeojz/otplib#899
• docs(core): correct digits validation comment by @​yeojz in yeojz/otplib#901
• fix(uri): keep secrets out of error messages and validate generate params by @​yeojz in yeojz/otplib#900
• fix(adapters): honour base64, latin1 and ascii key encodings by @​yeojz in yeojz/otplib#903
• chore: isolate stryker in a separately locked internal/mutation tooling directory by @​yeojz in yeojz/otplib#904
• fix(size): measure production bundles so pnpm size matches CI by @​yeojz in yeojz/otplib#905
• fix(lint): lint the whole repo from the root and cover internal configs by @​yeojz in yeojz/otplib#908
• chore(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in yeojz/otplib#910
• chore: upgrade to pnpm 11 by @​yeojz in yeojz/otplib#906
• fix(cli): enforce 0600 on vault and key files and gitignore them by @​yeojz in yeojz/otplib#902
• ci: add non-blocking Node.js compatibility workflow by @​yeojz in yeojz/otplib#918
• chore(deps): consolidate routine dependency bumps by @​yeojz in yeojz/otplib#919
• chore(cli): raise the tsup target to node22 by @​yeojz in yeojz/otplib#921
• chore: remove Stryker mutation testing toolchain by @​yeojz in yeojz/otplib#924
• build: migrate package builds from tsup to tsdown by @​yeojz in yeojz/otplib#926
• chore: replace ESLint and Prettier with oxlint and oxfmt by @​yeojz in yeojz/otplib#927
• fix(deps): consolidate security patches and routine bumps by @​yeojz in yeojz/otplib#935
• chore(deps-dev): bump the dev-dependencies-minor group across 1 directory with 2 updates by @​dependabot[bot] in yeojz/otplib#936
• chore(deps-dev): bump the dev-dependencies-patch group across 1 directory with 4 updates by @​dependabot[bot] in yeojz/otplib#937
• fix(ci): pack release artifacts with pnpm pack by @​yeojz in yeojz/otplib#938
• build: share workspace dependency ranges through a pnpm catalog by @​yeojz in yeojz/otplib#939
• ci: skip tests on draft pull requests by @​yeojz in yeojz/otplib#940
• docs: fix base32 encoding example in plugins guide by @​yeojz in yeojz/otplib#942
• chore(deps): bump markdown-it from 14.3.2 to 14.3.3 by @​dependabot[bot] in yeojz/otplib#943
• release(packages): v13.6.0 by @​github-actions[bot] in yeojz/otplib#944

Full Changelog: yeojz/otplib@v13.5.0...v13.6.0

Commits

• 637c9bb release(packages): v13.6.0 (#944)
• 7acf171 build: share workspace dependency ranges through a pnpm catalog (#939)
• c5c11be chore: replace ESLint and Prettier with oxlint and oxfmt (#927)
• 86e712c build: migrate package builds from tsup to tsdown (#926)
• c4554ab fix(otplib): pass hooks through generateSync (#899)
• 5f3e6f9 chore(deps-dev): bump the dev-dependencies-patch group with 8 updates (#891)
• eb2f232 fix(packages): resolve attw node10 failures on subpath exports (#885)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)