chore(deps): update all non-major dependencies

Author: cachekit-renovate-bot[bot]

package.json

@@ -9,7 +9,7 @@
     "node": ">=22.0.0",
     "pnpm": ">=11.11.0"
   },
-  "packageManager": "pnpm@11.11.0",
+  "packageManager": "pnpm@11.28.0",
   "scripts": {
     "build": "turbo run build",
     "test": "turbo run test",

packages/cachekit-core-ts/Cargo.lock

@@ -17,11 +17,11 @@ license = "MIT"
 crate-type = ["cdylib"]
 
 [dependencies]
-wasm-bindgen = "=0.2.121"
+wasm-bindgen = "=0.2.129"
 # js-sys ships from the wasm-bindgen workspace and tracks its ABI; needed to
 # accept Uint8Array[] (previous master keys) across the boundary. Exact-pinned
 # to the release paired with wasm-bindgen 0.2.121 above.
-js-sys = "=0.3.98"
+js-sys = "=0.3.106"
 cachekit-core = { version = "0.6.0", features = ["encryption"] }
 # Wipes the owned previous-master-key staging buffers on drop (the NAPI crate
 # borrows and never copies; this crate must copy out of JS memory). Already in

packages/cachekit-core-wasm/Cargo.lock

@@ -92,13 +92,13 @@
     "ioredis": "^5.10.1"
   },
   "devDependencies": {
-    "@cloudflare/vitest-pool-workers": "0.18.7",
+    "@cloudflare/vitest-pool-workers": "0.22.0",
     "@testcontainers/redis": "^11.13.0",
     "@types/ioredis": "^5.0.0",
     "@types/memjs": "^1.3.3",
     "@types/node": "^25.5.0",
     "@vitest/coverage-v8": "^4.1.2",
-    "esbuild": "0.28.1",
+    "esbuild": "0.28.2",
     "eslint": "^10.1.0",
     "memjs": "^1.3.2",
     "prom-client": "^15.1.3",