[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@salesforce/source-deploy-retrieve	13.1.1 → 13.8.3

---

Release Notes

forcedotcom/source-deploy-retrieve (@​salesforce/source-deploy-retrieve)

v13.8.3

Compare Source

Bug Fixes

• merge split profile metadata @​W-17719068@ (#​1854) (6e9258b)

v13.8.2

Compare Source

Bug Fixes

• deps: bump fast-uri from 3.1.8 to 3.1.9 (#​1860) (5d70b88)

v13.8.1

Compare Source

Bug Fixes

• deps: bump undici from 8.7.0 to 8.12.3 (#​1861) (8ab2e07)

v13.8.0

Compare Source

Features

• validate mcpResources in mcp-resources.json @​W-24592777@ (#​1859) (9acd74d)

13.7.1 (2026-10-23)

Bug Fixes

• retrieve namespace-qualified metadata @​W-18220202@ (#​1852) (0d23153)

v13.7.1

Compare Source

Bug Fixes

• retrieve namespace-qualified metadata @​W-18220202@ (#​1852) (0d23153)

v13.7.0

Compare Source

Features

• @​W-24139919 Add missing type from source (#​1853) (1b2f603)

v13.6.0

Compare Source

Features

• support mcpResources in ui-bundle.json @​W-24473443@ (#​1850) (b0fbd42)

v13.5.0

Compare Source

Features

• add AttestSettings and AttestPolicy to MD registry (#​1851) (73a818b)

13.4.6 (2026-10-12)

Bug Fixes

• W-24411539: match nested inFolder deletes with truncated fullName (#​1846) (2d91506)

13.4.5 (2026-10-09)

Bug Fixes

• deps: bump ip-address from 10.2.0 to 10.7.2 (#​1842) (5bde79d)

13.4.4 (2026-10-06)

Bug Fixes

• expose covered deploy test locations - W-16286380 (#​1847) (eec91ac)

13.4.3 (2026-10-01)

Bug Fixes

• include folder entries in deploy zip count to match server limit @​W-24345651@ (#​1844) (399687d)

13.4.2 (2026-09-29)

Performance Improvements

• deploy and retrieve flow efficiency improvements @​W-24222996@ (#​1836) (c086d40)

13.4.1 (2026-09-28)

Bug Fixes

• deps: bump fast-uri from 3.0.1 to 3.1.8 (#​1830) (82cb7ec)

v13.4.6

Compare Source

Bug Fixes

• W-24411539: match nested inFolder deletes with truncated fullName (#​1846) (2d91506)

v13.4.5

Compare Source

Bug Fixes

• deps: bump ip-address from 10.2.0 to 10.7.2 (#​1842) (5bde79d)

v13.4.4

Compare Source

Bug Fixes

• expose covered deploy test locations - W-16286380 (#​1847) (eec91ac)

v13.4.3

Compare Source

Bug Fixes

• include folder entries in deploy zip count to match server limit @​W-24345651@ (#​1844) (399687d)

v13.4.2

Compare Source

Performance Improvements

• deploy and retrieve flow efficiency improvements @​W-24222996@ (#​1836) (c086d40)

v13.4.1

Compare Source

Bug Fixes

• deps: bump fast-uri from 3.0.1 to 3.1.8 (#​1830) (82cb7ec)

v13.4.0

Compare Source

Features

• add ReferralIntakeConfiguration to metadata registry (#​1837) (7c7719d)

13.3.4 (2026-09-16)

Bug Fixes

• warn when JWT access token and API version < 68 cause empty metadata results @​W-24046915@ (#​1835) (524165c)

13.3.3 (2026-09-16)

Bug Fixes

• prevent symlink traversal during retrieve (partial-delete and writes) @​W-24124120@ @​W-24138711@ (#​1833) (5637e35)

13.3.2 (2026-09-11)

Bug Fixes

• disable got retry to fix crash on Node 24.20+ (#​1834) (3d7f965)
• reject path traversal in registryCustomizations directoryName @​W-24132549@ (#​1832) (99e04dc)

13.3.1 (2026-09-04)

Bug Fixes

• support '#' version separator in AiAgentDefinitionVersion @​W-23939860@ (#​1826) (0bdc29b), closes ASA1#1

v13.3.4

Compare Source

Bug Fixes

• warn when JWT access token and API version < 68 cause empty metadata results @​W-24046915@ (#​1835) (524165c)

v13.3.3

Compare Source

Bug Fixes

• prevent symlink traversal during retrieve (partial-delete and writes) @​W-24124120@ @​W-24138711@ (#​1833) (5637e35)

v13.3.2

Compare Source

Bug Fixes

• disable got retry to fix crash on Node 24.20+ (#​1834) (3d7f965)
• reject path traversal in registryCustomizations directoryName @​W-24132549@ (#​1832) (99e04dc)

v13.3.1

Compare Source

Bug Fixes

• support '#' version separator in AiAgentDefinitionVersion @​W-23939860@ (#​1826) (0bdc29b), closes ASA1#1

v13.3.0

Compare Source

Features

• add DeployNotification type for deploy-level notifications @​W-23939851@ (#​1825) (b7a2887)

13.2.3 (2026-08-24)

Bug Fixes

• prevent ENOTDIR crash for non-component files in bundle directories @​W-23924917@ (#​1823) (e5b6a28)

13.2.2 (2026-08-24)

Bug Fixes

• linting post-fork-merge (#​1824) (d5e0be4)

13.2.1 (2026-08-24)

Bug Fixes

• resolve decomposed Permission Set parents by suffix (#​1817) (e1efcbc)

v13.2.3

Compare Source

Bug Fixes

• prevent ENOTDIR crash for non-component files in bundle directories @​W-23924917@ (#​1823) (e5b6a28)

v13.2.2

Compare Source

Bug Fixes

• linting post-fork-merge (#​1824) (d5e0be4)

v13.2.0

Compare Source

Features

• export stdValueSetRegistry.json from main index.ts to be called properly outside this repo - W-23802414 (#​1822) (54dda96)

13.1.1 (2026-08-13)

Bug Fixes

• resolved TOCTOU attack (W-23808206) (#​1820) (ce7e89a)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.