chore(deps): bump the minor-and-patch group across 1 directory with 7 updates

[dependabot]

Bumps the minor-and-patch group with 7 updates in the / directory:

Package	From	To
express-rate-limit	8.7.0	8.7.1
@googleapis/drive	26.0.1	26.0.2
libphonenumber-js	1.13.14	1.13.15
@electron/rebuild	4.2.0	4.2.1
@formatjs/icu-messageformat-parser	3.5.20	3.5.21
electron	44.5.1	44.7.0
js-yaml	5.4.2	5.4.3

Updates express-rate-limit from 8.7.0 to 8.7.1

Release notes

Sourced from express-rate-limit's releases.

v8.7.1

You can view the changelog here.

Commits

• c2e30b3 8.7.1
• b40a390 v8.7.1 changelog
• ccbee88 fix: correct es2020/es2022 version mismatch between tsconfig and esbuild comm...
• 11a143a chore: fix duplicate entries in pnpm-lockfile.yaml (#685)
• 92f685d chore(deps): bump softprops/action-gh-release from 1 to 3 (#692)
• 0c7c066 chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#694)
• 9735b69 chore(deps): bump pnpm/action-setup from 3.0.0 to 6.1.0 (#695)
• 7f401b7 chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 (#693)
• 7a49bb0 ci: add guard that fails the build on unpinned GitHub Actions (companion to #...
• 784c447 ci: pin GitHub Actions to immutable commit SHAs (#690)
• Additional commits viewable in compare view

Updates @googleapis/drive from 26.0.1 to 26.0.2

Release notes

Sourced from @​googleapis/drive's releases.

drive: v26.0.2

26.0.2 (2026-10-03)

Bug Fixes

• drive: update the API (f140632)

firestore: v26.0.2

26.0.2 (2026-10-07)

Bug Fixes

• firestore: update the API (ab6fd3e)

Commits

• 01de2bd chore: release main (#4027)
• de81ef6 feat: regenerate index files
• 06d08ca feat(youtube)!: update the API
• 608bebf fix(workstations): update the API
• 1c40b99 fix(webcontentpublisher): update the API
• f37655f feat(threatintelligence): update the API
• c02e987 fix(sts): update the API
• 37a914b feat(storagebatchoperations): update the API
• 36e4ce4 feat(storage): update the API
• 9978a9b feat(solar): update the API
• Additional commits viewable in compare view

Updates libphonenumber-js from 1.13.14 to 1.13.15

Changelog

Sourced from libphonenumber-js's changelog.

1.13.15 / 8.10.2026

• Updated metadata to version 9.0.41:
  • Updated phone metadata for region code(s): CN, IR, NG, US
  • Updated short number metadata for region code(s): CN
  • Updated carrier data for country calling code(s): 27 (en), 30 (en), 60 (en), 98 (en, fa), 234 (en), 852 (en, zh, zh_Hant)
  • Updated / refreshed time zone meta data.

Commits

• dab82d5 1.13.15
• 0465461 Updated metadata
• See full diff in compare view

Updates @electron/rebuild from 4.2.0 to 4.2.1

Release notes

Sourced from @​electron/rebuild's releases.

v4.2.1

4.2.1 (2026-10-06)

Bug Fixes

• include target platform in .forge-meta rebuild marker (#1319) (3e6bfd1), closes electron-userland/electron-builder#10031

Commits

• d62d5a2 ci: set cache-mode on release workflows (#1307)
• 3e6bfd1 fix: include target platform in .forge-meta rebuild marker (#1319)
• e355454 chore(deps): bump undici from 6.28.0 to 6.28.1 in /test/fixture/workspace-tes...
• 90f2542 chore(deps): bump brace-expansion from 5.0.7 to 5.0.12 (#1317)
• af5c214 ci: add required-ci gate job (#1312)
• 6a69b7c chore(deps): bump markdown-it from 14.2.0 to 14.3.2 (#1315)
• 037e7d9 chore(deps): bump azure/login from 3.0.1 to 3.1.0 (#1321)
• 8b14ce8 chore(deps): bump undici from 6.28.0 to 6.28.1 in /test/fixture/native-app1 (...
• 7bb45ee chore(deps): bump undici from 6.27.0 to 6.28.1 (#1313)
• dd050f3 build(deps-dev): upgrade vitest to v5 (#1310)
• Additional commits viewable in compare view

Updates @formatjs/icu-messageformat-parser from 3.5.20 to 3.5.21

Release notes

Sourced from @​formatjs/icu-messageformat-parser's releases.

@​formatjs/icu-messageformat-parser: 3.5.21

3.5.21 (2026-10-05)

Bug Fixes

• @​formatjs/icu-messageformat-parser: tolerate MicrosoftAjax startsWith override (#7549) (6b3869a)

Changelog

Sourced from @​formatjs/icu-messageformat-parser's changelog.

3.5.21 (2026-10-05)

Bug Fixes

• @​formatjs/icu-messageformat-parser: tolerate MicrosoftAjax startsWith override (#7549) (6b3869a)

Commits

• 2a07f47 chore: release main (#7517)
• 6b3869a fix(@​formatjs/icu-messageformat-parser): tolerate MicrosoftAjax startsWith ov...
• See full diff in compare view

Updates electron from 44.5.1 to 44.7.0

Release notes

Sourced from electron's releases.

electron v44.7.0

Release Notes for v44.7.0

Features

• The macOS autoUpdater now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a binary delta when the update feed offers one for the running version. #54204

Fixes

• Fixed an uncatchable TypeError in net.fetch when receiving response headers with non-ASCII characters, and preserved multiple Set-Cookie headers. #54672

Other Changes

• Backported fixes from upstream ANGLE, Chromium, Dawn, fontconfig, Skia, V8 and WebRTC. #54666
• Backported fixes from upstream ANGLE, Chromium, Skia, V8 and WebRTC. #54657

electron v44.6.0

Release Notes for v44.6.0

Features

• Added the experimental protocol.registerSource() to serve a custom scheme from directories on disk without a JavaScript handler. #54522 (Also in 45)

Fixes

• Fixed a crash on launch on macOS when the system refused to register the app for sleep/wake notifications. #54596
• Fixed a crash on navigator.usb.requestDevice() in in-memory sessions. #54616 (Also in 45)
• Fixed webview.findInPage() hanging when the host page also has an iframe. #54586 (Also in 43, 45)
• Updated time zone data to tzdata 2026d, including British Columbia's move to permanent UTC-7. #54623

Documentation

• Documentation changes: #54589

Commits

• 61f55c4 test: bound hidden overlay cold-process runs (#54689)
• a0c11d9 feat: roll Squirrel.Mac for streamed, resumable and delta update downloads (#...
• 44cac48 test: wait for stable focus before checking openExternal removes focus (#54690)
• 505edea test: wait for the webview guest to load before navigating it (#54673)
• fbb54bb test: run WebContentsView focusOnNavigation and shell.openExternal specs seri...
• 06209a5 fix(net): support non-ASCII headers and multiple cookies in net.fetch (#54672)
• 74f6399 chore: cherry-pick 47 changes from angle, chromium, dawn, fontconfig, skia, v...
• 3d7bdb5 test: add mouse-input addon for setIgnoreMouseEvents specs (#54605)
• 0498bc7 chore: cherry-pick 8 changes from angle, chromium, skia, v8 and webrtc (#54657)
• d165ab9 test: listen for both singleton exits before either can happen (#54601)
• Additional commits viewable in compare view

Updates js-yaml from 5.4.2 to 5.4.3

Changelog

Sourced from js-yaml's changelog.

[5.4.3] - 2026-10-06

Fixed

• Fixed loading a whitespace-only block scalar followed by a less indented line, #802.

Commits

• 7832624 5.4.3 released
• 0cbb471 Fix whitespace-only block scalar followed by a less indented line, close #802
• 30108cc Parse the first block mapping key once (#800)
• See full diff in compare view

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: FreeOpenSourcePOS/FloCafe/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: a35e1e77-d0a7-411a-a3a2-36f26c63be6b

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.