Update third-party minor and patch

[microbit-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@​codemirror/commands	6.10.4 → 6.11.0
@​codemirror/view	6.43.8 → 6.43.9
@formatjs/cli	6.16.16 → 6.16.19
@testing-library/user-event	14.6.4 → 14.6.5
dompurify	3.4.13 → 3.4.14
vitest (source)	4.1.10 → 4.1.11

---

Release Notes

testing-library/user-event (@​testing-library/user-event)

v14.6.5

Compare Source

Bug Fixes

• tab retargeting if focus moved during keydown (#​1296) (43efda7)

cure53/DOMPurify (dompurify)

v3.4.14: DOMPurify 3.4.14

Compare Source

• Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
• Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
• Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
• Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
• Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
• Updated several development dependencies and CI workflow actions

vitest-dev/vitest (vitest)

v4.1.11

Compare Source

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in #​10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in #​10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in #​10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in #​10974 (fe5a1)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

Preview build will be at
https://review-python-editor-v3.microbit.org/renovate-third-party-minor-and-patch/