[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
normalize-url	^9.0.1 → ^10.0.0

---

Release Notes

sindresorhus/normalize-url (normalize-url)

v10.0.0

Compare Source

Breaking

• Require Node.js 22 6c95de2
• Throw a TypeError when the defaultProtocol option is not a valid scheme, such as 'https://' a8c34ae
• The query is now always re-serialized, even with sortQueryParameters: false 65f62ef
  • Previously, disabling sorting kept the query exactly as written. Now it is written the way URLSearchParams writes it, so %20 becomes + and an escape that is not valid UTF-8, like %E9, becomes %EF%BF%BD.
• The removeDirectoryIndex option now runs after transformPath, so the function also receives the index file 65f62ef
• Many edge cases are now normalized differently (see below). If you store normalized URLs, you may want to normalize them again.

Improvements

• The defaultProtocol option now accepts any protocol, not just http and https b2e4135
• Strip all whitespace from the ends of a URL, including a non-breaking space and a byte order mark left over from copying 13f62a4
• Keep repeated query keys in their original order when sorting 5a3e67a
• Normalizing an already normalized URL now always gives the same URL
• Document the normalizations that happen regardless of the options bb685bc

Fixes

• Fix normalization of the protocol, host, port, path, query, fragment, and data URLs 65f62ef
  • http:/example.com no longer becomes http://http/example.com
  • %252F in a path no longer becomes %2F, which is a different URL
  • A trailing / in the query is no longer removed
  • normalizeProtocol: false now keeps a protocol-relative URL, even with defaultProtocol: 'https'
  • A data URL without a comma no longer throws
• Fix several data URL cases where the normalized URL was decoded differently by browsers 5d8ff58 cf2aed8 bd39d02

---

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "after 1am and before 8am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Bundle Report

Changes will decrease total bundle size by 1 bytes (-0.0%) ⬇️. This is within the configured threshold ✅

Detailed changes

Bundle name	Size	Change
contribkit-esm	128.18kB	-1 bytes (-0.0%) ⬇️

Affected Assets, Files, and Routes:

view changes for bundle: contribkit-esm

Assets Changed:

Asset Name	Size Change	Total Size	Change (%)
chunks/types-*.mjs	-1 bytes	76.15kB	-0.0%

Files in chunks/types-*.mjs:

• ./package.json → Total Size: 69 bytes