[deps]: Update type-fest to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
type-fest	4.41.0 -> 5.0.1

---

Release Notes

sindresorhus/type-fest (type-fest)

v5.0.1

Compare Source

• Add missing exports 4f9c248

---

v5.0.0

Compare Source

Breaking

• This package is now pure ESM. Please read this.
• Require TypeScript 5.9 b5b0214
• Require Node.js 20 cc2b0f2
• Reminder: type-fest requires strict: true in your tsconfig.
• StringKeyOf: Rename to KeyAsString e492c9c
• ArrayTail: Enable preserveReadonly by default and remove the option b34b1d8
• CamelCase / CamelCasedProperties / CamelCasedPropertiesDeep / PascalCase / PascalCasedProperties / PascalCasedPropertiesDeep: Disable preserveConsecutiveUppercase by default 8226c1b
  • This aligns it with the general JavaScript naming convention.
• PartialDeep: Disable allowUndefinedInNonTupleArrays by default b3c4524
• Split: Enable strictLiteralChecks by default 544a846
• Paths: Default maxRecursionDepth 5 (was 10) 2ab5dec
• ObservableLike: Move to sub-export 2a1072e
• Deprecate If* types in favor of a single If 4c2151a

New types

• Alphanumeric — Single alphanumeric character (A–Z, a–z, 0–9). 484e030
• AllExtend — Evaluates to true if every element of a tuple/array extends U. c8c6d55
• ConditionalSimplify — Simplifies a type’s unions/intersections with opt-in controls. b7a4771
• ConditionalSimplifyDeep — Deep version of ConditionalSimplify that recurses into objects. b7a4771
• DigitCharacter — Single ASCII digit character (0–9). 484e030
• ExcludeStrict — Non-distributive, stricter variant of Exclude<T, U>. e6f62a2
• ExtendsStrict — Non-distributive A extends B check. d71242a
• ExtractStrict — Non-distributive, stricter variant of Extract<T, U>. 98d24fa
• IsLowercase — Evaluates to true if a string literal is all lowercase. afe132c
• IsNullable — Evaluates to true if T includes null. 5067e25
• IsOptional — Evaluates to true if T includes undefined. 5067e25
• IsOptionalKeyOf — Evaluates to true if property K of T is optional. 93728b5
• IsReadonlyKeyOf — Evaluates to true if property K of T is readonly. 93728b5
• IsRequiredKeyOf — Evaluates to true if property K of T is required. 93728b5
• IsUnion — Evaluates to true if T is a union type. b3d92ed
• IsUndefined — Evaluates to true if the type is exactly undefined. f7bc576
• IsUppercase — Evaluates to true if a string literal is all uppercase. afe132c
• LowercaseLetter — Single lowercase Latin letter (a–z). 484e030
• RemovePrefix — Removes a specified prefix from a string literal. 18a1c04
• UppercaseLetter — Single uppercase Latin letter (A–Z). 484e030

Improvements

• Jsonify: Handle unknown as JsonValue 642bb13
• SetRequired / SetOptional / SetReadonly: Handle functions with properties a5e45d4
• Schema: Preserve arrays/remove extraneous unions 8a96def; drop undefined for recurseIntoArrays 1cb955b
• ReadonlyKeysOf / WritableKeysOf: Add object constraint a6efbe0
• TsConfigJson: Add TypeScript 5.9 fields d2bda94

Fixes

• Or: Fix with boolean, never, any 42d6106
• And: Fix with boolean, never, any b38ac60
• IsStringLiteral: Fix uncollapsed unions, and tagged types eb37799 / d1b35c7
• Paths: Fix behavior with index signatures 9926e5d
• ConditionalKeys: Fix behavior with arrays and unions 4d7cc50
• RequiredDeep: Fix with undefined bfcdbc4
• Split: Fix template strings ending with interpolation 853b881
• ArrayTail: Fix fix non-tuple arrays f3aabd8
• Fix UnionMin and UnionMax d52d5e7

Meta

Huge thanks to all the contributors to this release, especially @​som-sm 🙌

---

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-26261
• Link: https://bitwarden.atlassian.net/browse/PM-26261

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 7.67%. Comparing base (29fc4ad) to head (02cc062).
⚠️ Report is 2 commits behind head on main.
✅ All tests successful. No failed tests found.

❗ There is a different number of reports uploaded between BASE (29fc4ad) and HEAD (02cc062). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (29fc4ad)	HEAD (02cc062)
	2	1

Additional details and impacted files

@@            Coverage Diff            @@
##             main    #886      +/-   ##
=========================================
- Coverage   13.14%   7.67%   -5.48%     
=========================================
  Files          68      68              
  Lines        2776    2776              
  Branches      482     482              
=========================================
- Hits          365     213     -152     
- Misses       2382    2548     +166     
+ Partials       29      15      -14     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Checkmarx One – Scan Summary & Details – 4c7e9c88-85bc-4565-b8d0-44c3eea7e75e

New Issues (1)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2025-11460	Npm-electron-38.1.0	details Recommended version: 38.2.2 Description: Google chrome versions prior to 141.0.7390.65 is vulnerable to Use after free in Storage. Attack Vector: NETWORK Attack Complexity: LOW ID: kfBEAuYBrGmr0ocKTGAHiktf3eiQlUmrWLTn8qBPruY%3D Vulnerable Package

[jrmccannon]

Unaffected by breaking changes. no runtime issues and tests pass.