fix(deps): update external fixes

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
http-proxy-agent (source)	9.0.0 → 9.1.0
https-proxy-agent (source)	9.0.0 → 9.1.0
isomorphic-git (source)	1.38.3 → 1.38.4
node-diff3	3.2.0 → 3.2.1
proxy-agent (source)	8.0.1 → 8.0.2
semver	7.8.1 → 7.8.3

---

Release Notes

TooTallNate/proxy-agents (http-proxy-agent)

v9.1.0

Compare Source

Minor Changes

• d8f2926: Adds proxyConnect event emission to http-proxy-agent for parity with https-proxy-agent. The event is emitted on both the request and the agent instance when the socket connects to the proxy server.

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@​1.1.0

TooTallNate/proxy-agents (https-proxy-agent)

v9.1.0

Compare Source

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• 1852c75: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@​1.1.0

isomorphic-git/isomorphic-git (isomorphic-git)

v1.38.4

Compare Source

Bug Fixes

• pass credential config username to auth callbacks (#​2346) (d9920c5)

bhousel/node-diff3 (node-diff3)

v3.2.1

Compare Source

2026-Jun-03

• Fix LCS lookup handling so keys like constructor or __proto__ do not shadow dictionary lookups (#​87)
• Improve TypeScript declarations for diffComm and merge APIs to better match runtime output (#​88)
• Internal maintenance updates and dependency refreshes

TooTallNate/proxy-agents (proxy-agent)

v8.0.2

Compare Source

Patch Changes

• Updated dependencies [1852c75]
• Updated dependencies [d8f2926]
• Updated dependencies [84e85ed]
• Updated dependencies [8487a78]
• Updated dependencies [3ebf4b2]
• Updated dependencies [ce0243e]
  • https-proxy-agent@​9.1.0
  • http-proxy-agent@​9.1.0
  • pac-proxy-agent@​9.1.0
  • socks-proxy-agent@​10.1.0

npm/node-semver (semver)

v7.8.3

Compare Source

Bug Fixes

• 046da7f #​872 align caret includePrerelease lower bounds (#​872) (@​wayyoungboy)

Chores

• 3485dda #​866 bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#​866) (@​dependabot[bot])

v7.8.2

Compare Source

Bug Fixes

• bea6028 #​870 increment dotted prerelease identifiers (#​870) (@​liuzemei, @​SheldonNeo)

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "after 2pm on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

This PR will trigger a patch release when merged.

[tripodsan]

🎉 This PR is included in version 16.20.5 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀