chore(deps): update all non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@embroider/macros (source)	1.19.6 → 1.19.7
@types/node (source)	24.10.9 → 24.10.12
cors	2.8.5 → 2.8.6
dotenv	17.2.3 → 17.2.4
eslint-plugin-qunit	8.2.5 → 8.2.6
glob	13.0.0 → 13.0.1
msw (source)	2.12.7 → 2.12.9

---

Release Notes

embroider-build/embroider (@​embroider/macros)

v1.19.7

• @​embroider/addon-dev 8.3.0 (minor)
• @​embroider/compat 4.1.13 (patch)
• @​embroider/core 4.4.3 (patch)
• @​embroider/macros 1.19.7 (patch)
• @​embroider/template-tag-codemod 1.3.5 (patch)
• @​embroider/vite 1.5.1 (patch)

🚀 Enhancement

• @embroider/addon-dev
  • #​2651 Update addon-dev to support glint 1 and glint 2 and choose between them based on your available dependencies (@​NullVoxPopuli)

🐛 Bug Fix

• @embroider/compat, @embroider/template-tag-codemod
  • #​2656 Upgrade broccoli to ^4.0.0 and align Node requirements to >= 20.19.* (@​Copilot)
• @embroider/vite
  • #​2664 Narrow gjsFilter to not include files that happen to have .gjs in their file name (@​NullVoxPopuli)
• @embroider/macros
  • #​2665 widen the ember-cli-babel dependency range for macros (@​mansona)

🏠 Internal

• Other
  • #​2666 upgrade release-plan (@​mansona)
  • #​2653 Fix CI - content-tag whitespace (@​NullVoxPopuli)
• @embroider/addon-dev
  • #​2652 Switch addon-dev to vitest (@​NullVoxPopuli)

Committers: 3

• Chris Manson (@​mansona)
• Copilot [Bot] (@​copilot-swe-agent)
• @​NullVoxPopuli

expressjs/cors (cors)

v2.8.6

Compare Source

==================

• Improve documentation (API, context, examples...)
• Remove additional markdown files from tarball

motdotla/dotenv (dotenv)

v17.2.4

Compare Source

Changed

• Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#​915)

• Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

platinumazure/eslint-plugin-qunit (eslint-plugin-qunit)

v8.2.6

Compare Source

Bug Fixes

• add context.sourceCode fallback for ESLint 10 compatibility (#​659) (937ddec)
• switch to @​eslint-community/eslint-utils (#​660) (6031514)
• typo in peerDependencies in package.json (#​658) (83cef82)

Documentation

• update all-contributors in readme (#​617) (c0002a1)
• update eslint-doc-generator to v3 (#​657) (12554e5)

Chores

• lockfile diff (#​664) (1baf99c)
• test under ESLint v10 (#​663) (4613e82)
• update to eslint-plugin-eslint-plugin v7 (#​620) (ee52056)

isaacs/node-glob (glob)

v13.0.1

Compare Source

mswjs/msw (msw)

v2.12.9

Compare Source

v2.12.9 (2026-02-06)

Bug Fixes

• ws: support relative urls in ws.link (#​2661) (2f1d23c) @​kettanaito

v2.12.8

Compare Source

v2.12.8 (2026-02-03)

Bug Fixes

• update @mswjs/interceptors to fix a memory leak (#​2659) (e5e905f) @​kettanaito
• update rettime (#​2657) (3a7b451) @​kettanaito

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.