chore(deps): update all non-major dependencies

[chrisbbreuer]

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	3
🔧 System Dependencies	2
🚀 GitHub Actions	4
Total	9

📦 npm Dependencies

3 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@types/bun (source)	1.3.6 -> 1.3.8
axios (source)	1.13.2 -> 1.13.5
vue (source)	3.5.27 -> 3.5.28

🔧 System Dependencies

2 packages will be updated across 1 file(s): deps.yaml

Package	Change	Type	File
bun.com	^1.2.10 → ^1.3.1	🟡 minor	deps.yaml
redis	^7.4.2 → ^7.4.7	🟢 patch	deps.yaml

🚀 GitHub Actions

4 actions will be updated

Action	Change	Type	Files
oven-sh/setup-bun	v2 → v2.1.2	🟢 patch	ci.yml
shivammathur/setup-php	v2 → v2.36.0	🟢 patch	buddy-bot.yml
actions/cache	v5 → v5.0.3	🟢 patch	ci.yml
actions/checkout	v6 → v6.0.2	🟢 patch	ci.yml

---

Release Notes

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.6 -> 1.3.8

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

axios/axios (axios)

1.13.2 -> 1.13.5

v1.13.5

Compare Source

Release 1.13.5

Highlights

• Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
• Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

• Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

• Fix/5657. (PR #7313)
• Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

• Add input validation to isAbsoluteURL. (PR #7326)
• Refactor: bump minor package versions. (PR #7356)

Documentation

• Clarify object-check comment. (PR [#7323...

[View full release notes]

Released by jasonsaayman on 2/8/2026

v1.13.4

Compare Source

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

• fix: issues with version 1.13.3 (#7352) (ee90dfc)
  • Fixed issues discovered in v1.13.3 release
  • Cleaned up interceptor test files
  • Improved workflow configurations

Infrastructure & CI/CD

• refactor: ci and build (#7340) (8ff6c19)
  • Major refactoring of CI/CD workflows
  • Consolidated workflow files for better maintainability
  • Added mise configuration for the development environment
  • Improved sponsor block update automation
  • Enhanced issue and PR template...

[View full release notes]

Released by jasonsaayman on 1/27/2026

v1.13.3

Compare Source

Release notes:

Bug Fixes

• http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
• interceptor: handle the error in the same interceptor (#6269) (5945e40)
• main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
• package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
• silentJSONParsing=false should throw on invalid JSON ([#7253](https://gith...

[View full release notes]

Released by github-actions[bot] on 1/20/2026

vuejs/core (vue)

3.5.27 -> 3.5.28

v3.5.28

Compare Source

For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 2/9/2026

v3.6.0-beta.5

Compare Source

For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 1/30/2026

v3.6.0-beta.4

Compare Source

For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 1/23/2026

bun.com

^1.2.10 → ^1.3.1

📁 File: deps.yaml

🔗 Release Notes: bun.sh

redis

^7.4.2 → ^7.4.7

📁 File: deps.yaml

🔗 Package Info: pkgx.com

oven-sh/setup-bun

v2 → v2.1.2

Visit oven-sh/setup-bun for release notes.

shivammathur/setup-php

v2 → v2.36.0

Visit shivammathur/setup-php for release notes.

actions/cache

v5 → v5.0.3

Visit actions/cache for release notes.

actions/checkout

v6 → v6.0.2

Visit actions/checkout for release notes.

---

📊 Package Statistics

• @types/bun: 6,047,076 weekly downloads
• axios: 85,900,953 weekly downloads
• vue: 8,849,576 weekly downloads
• bun.com: Popular JavaScript runtime and package manager
• redis: Available via pkgx package manager
• oven-sh/setup-bun: GitHub Action for workflow automation
• shivammathur/setup-php: GitHub Action for workflow automation
• actions/cache: GitHub Action for workflow automation
• actions/checkout: GitHub Action for workflow automation

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Buddy 🤖

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/stacksjs/bun-queue@677

commit: ea77f0f

[chrisbbreuer]

🤖 Auto-closing obsolete PR

This PR was automatically closed because the dependency files it references are no longer present in the project.

Removed files:

• `## 📦 npm Dependencies

3 packages will be updated`

• [@types/bun](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/bun) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun))
• [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/%40types%2Fbun/1.3.6/1.3.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
• [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/axios/1.13.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
• [3.5.27->3.5.28](https://renovatebot.com/diffs/npm/vue/3.5.27/3.5.28)
• `## 🔧 System Dependencies

2 packages will be updated across 1 file(s): deps.yaml`

• `## 🚀 GitHub Actions

4 actions will be updated`

If this was closed in error, please reopen the PR and update the dependency files accordingly.