fix(deps): update patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@mermaid-js/layout-elk	0.2.0 → 0.2.1
path-to-regexp	8.4.0 → 8.4.2
rollup (source)	4.60.0 → 4.60.1
io.quarkus:quarkus-bom	3.34.0 → 3.34.2
io.quarkus:quarkus-maven-plugin	3.34.0 → 3.34.2

---

Release Notes

mermaid-js/mermaid (@​mermaid-js/layout-elk)

v0.2.1

Compare Source

Patch Changes

• #​7425 f16bfbb Thanks @​knsv! - fix: use rounded right-angle edges for ELK layout

  ELK layout edges now default to rounded curve (right-angle segments with rounded corners) instead of inheriting the global basis default. This fixes ELK edges that were curving instead of routing at right angles (#​7213). Non-ELK layouts are unaffected and keep their existing basis default.

• Updated dependencies [96a766d, 32723b2, a60e615, 1a9d45a, 96ca7c0, 60f6331, fa15ce8, 33c7c72, 3c069b5, 9745f32, d6db0b0, cdacb0b, a408b55, 712c1ec, 981a62e, a4bb0b5, b0f9d5b, 981fbb8, 93aa657, 6bc6617, 73e9849, 9d0669a, acce4db, 7eed6a1, 2000680, b7c66a2, f16bfbb, aac86f7, 9745f32, 2dd29be, ace0367, 09b74f1, 33c7c72, 835de00, a9e4c72, ff15e51, 8bfd477, b136acd, e0317ac]:

  • mermaid@​11.13.0

pillarjs/path-to-regexp (path-to-regexp)

v8.4.2

Compare Source

Fixed

• Error on trailing backslash (#​434) 9a78879

Performance

• Minimize array allocations (#​437) 937c02d
• Improve compile performance (#​436) 57247e6
  • Should improve compilation performance by ~25%
• Remove internal tokenization during parse (#​435) 5844988
  • Should improve parse performance by ~20%

Bundle size to 1.93 kB, from 1.97 kB.

---

v8.4.1

Compare Source

Fixed

• Remove trie deduplication (#​431) 6bc8e84
  • Using a trie required non-greedy matching, which regressed wildcards in non-ending mode by matching them up until the first match. For example:
    • /*foo with /a/b = /a
    • /*foo.htmlwith /a/b.html/c.html = /a/b.html
• Allow backtrack handling to match itself (#​427) 5bcd30b
  • When backtracking was introduced, it rejected matching things like /:"a"_:"b" against /foo__. This makes intuitive sense because the second parameter is not going to backtrack on _ anymore, but it's somewhat unexpected since there's no reason it shouldn't match the second _.

---

rollup/rollup (rollup)

v4.60.1

Compare Source

2026-03-30

Bug Fixes

• Resolve a situation where side effect imports could be dropped due to a caching issue (#​6286)

Pull Requests

• #​6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#​6274) (@​littlegrayss, @​TrickyPi)
• #​6317: chore(deps): pin dependencies (@​renovate[bot], @​lukastaegert)
• #​6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@​renovate[bot], @​lukastaegert)
• #​6319: chore(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6320: chore(deps): pin dependency typescript to v5 (@​renovate[bot], @​lukastaegert)
• #​6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@​renovate[bot], @​lukastaegert)
• #​6322: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6323: chore(deps): lock file maintenance (@​renovate[bot])
• #​6324: chore(deps): lock file maintenance (@​renovate[bot], @​lukastaegert)

quarkusio/quarkus (io.quarkus:quarkus-bom)

v3.34.2

Compare Source

Complete changelog

• #​50392 - JFR extension not capturing Quarkus application runtime data
• #​52905 - Behavior of @ProjectedFieldName with aggregate functions
• #​53142 - build(deps): bump org.jboss.logging:jboss-logging from 3.6.2.Final to 3.6.3.Final
• #​53203 - Refactor jar building to a first-write-wins approach
• #​53222 - VertxHttpHotReplacementSetup: move the httpInitiatedReload flag check
• #​53261 - Honour the legacy resolver settings in go-offline goals
• #​53265 - Document and test @ProjectedFieldName with aggregate functions
• #​53267 - Upgrade to Vert.x 4.5.26 and Netty 4.1.132.Final
• #​53271 - JFR extension event fix
• #​53290 - Webauthn IT: move test-webauthn to the test scope
• #​53296 - Swagger UI does not mark endpoint as protected if PermissionsAllowed present multiple times
• #​53301 - OpenAPI: Detect repeated @PermissionsAllowed annotations in Swagger UI
• #​53302 - @CacheInvalidateAll does not work anymore if an exception is thrown
• #​53304 - Document that @CacheInvalidateAll only invalidates after successful method execution
• #​53322 - Bump Netty to 4.1.132.Final due to CVE-2026-33871
• #​53325 - Quarkus 3.33.1: WARN: This Gauge has been already registered
• #​53328 - Dev MCP: Return METHOD_NOT_FOUND for unsupported MCP protocol methods
• #​53331 - Prevent warning about Gauge having already been registered
• #​53336 - Cannot run JUnit Tests with maven from parent module directory
• #​53349 - Updates to Infinispan 16.0.9
• #​53352 - Some minor uberjar improvements and a test for service concatenation
• #​53374 - Add custom enforcer rule to validate dependency version alignment
• #​53379 - Detect and exclude manipulated POMs from when loading a workspace

v3.34.1

Compare Source

Complete changelog

• #​53121 - OpenShift build extension seemingly ignoring configuration properties for image/image name
• #​53154 - Fix Dev UI Extension discovery for multimodule gradle project
• #​53165 - [Mandrel 23.1] kubernetes-client native IT test fails with DeletedElementException
• #​53171 - Remove unnecessary GraalVM @Delete
• #​53191 - OpenShift Internal Registry Container Image Name
• #​53209 - quarkus-artifact.properties generation is brittle
• #​53215 - Properly set path property for quarkus-artifact.properties

---

Configuration

📅 Schedule: Branch creation - "before 7am on monday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.