[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
path-to-regexp	overrides	major	^8.4.2 → ^9.0.0

---

Release Notes

pillarjs/path-to-regexp (path-to-regexp)

v9.0.0

Compare Source

Important: This release switches the package to ESM only and node >= 22. The primary incompatible API change is to switch ambiguous matches (2+ parameters in a segment) from the first being greedy to the last. For example:

const input = "/foo.json.html";
const fn = match("/:file.:ext");

fn(input); //=> ["foo", "json.html"]

In the v8 this would have output ["foo.json", "html"]. Making the last parameter and wildcard greedy can improve performance of the regular expressions and makes it easier to build non-regex based versions of the matcher.

Changed

• Avoid duplicate trailing delimiter matches by @​vibhor-aggr in #​443
  • A path that explicitly provided the trailing delimiter (e.g. /foo/) will no longer append an extra optional delimiter
• Refactor matching to be non-greedy by @​blakeembrey in #​450
• Build project as ESM by @​blakeembrey in #​458
• Remove TokenData class and Keys type by @​blakeembrey in #​461

Fixed

• Reject an empty-string param in compile by @​spokodev in #​444
• Reject wildcard array that compiles to an empty path by @​spokodev in #​448
• Fix stringify of param names with control characters by @​chatman-media in #​445
• Quote param names followed by astral ID_Continue text by @​dylanpulver in #​451
• Fix stringify lookahead across empty text tokens by @​jakezwang in #​456

Full Changelog: pillarjs/path-to-regexp@v8.4.2...v9.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 939a8a3d-3f07-462a-86af-cfd3a8627dd7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}