build(deps): Bump inversify from 8.1.0 to 8.1.1 in the npm-production-dependencies group

[dependabot]

Bumps the npm-production-dependencies group with 1 update: inversify.

Updates inversify from 8.1.0 to 8.1.1

Release notes

Sourced from inversify's releases.

inversify@8.1.1

Patch Changes

• Resolution performance on transient scoped services has been improved by caching a resolver in the binding node and simplifying the core logic. Benchmarks show around 20% performance improvement on transient services with deep dependency graphs.
• Updated dependencies
  • @​inversifyjs/core@​11.0.0
  • @​inversifyjs/container@​2.0.2

Commits

• ec52cc5 Merge pull request #1965 from inversify/changeset-release/main
• 58a4ce3 docs: improve changelogs
• 7a73075 chore: bump package versions
• 3436171 Merge pull request #1964 from inversify/perf/update-instance-binding-node-wit...
• 52cc0b0 feat: update plan node bindings with resolver
• 77270c0 Merge pull request #1962 from inversify/renovate/turbo-monorepo
• ff2e49d Merge pull request #1963 from inversify/renovate/auto-merge-on-patch-or-minor
• 2519c97 fix: update auto merge on patch or minor
• fafa3e3 chore: update turbo monorepo to v2.9.18
• 9fb3179 Merge pull request #1961 from inversify/chore/update-container-benchmarks-wit...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Hi, thank you for creating your PR, we will check it out very soon

[github-actions]

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌
YAML	Pass ✅
YAML_PRETTIER	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

TRIVY

Report Summary

┌───────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│      Target       │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├───────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ pnpm-lock.yaml    │    pnpm    │        2        │         -         │    -    │
├───────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile        │ dockerfile │        -        │         0         │    -    │
├───────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ docker/Dockerfile │ dockerfile │        -        │         0         │    -    │
└───────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


pnpm-lock.yaml (pnpm)
=====================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 0, CRITICAL: 0)

┌───────────────────────┬────────────────┬──────────┬────────┬───────────────────┬──────────────────────┬────────────────────────────────────────────────────────────┐
│        Library        │ Vulnerability  │ Severity │ Status │ Installed Version │    Fixed Version     │                           Title                            │
├───────────────────────┼────────────────┼──────────┼────────┼───────────────────┼──────────────────────┼────────────────────────────────────────────────────────────┤
│ http-proxy-middleware │ CVE-2026-55602 │ MEDIUM   │ fixed  │ 2.0.9             │ 3.0.6, 4.1.0, 2.0.10 │ http-proxy-middleware: http-proxy-middleware: Unintended   │
│                       │                │          │        │                   │                      │ backend routing due to crafted Host header                 │
│                       │                │          │        │                   │                      │ https://avd.aquasec.com/nvd/cve-2026-55602                 │
├───────────────────────┼────────────────┤          │        ├───────────────────┼──────────────────────┼────────────────────────────────────────────────────────────┤
│ js-yaml               │ CVE-2026-53550 │          │        │ 3.14.2            │ 4.2.0, 3.15.0        │ js-yaml: js-yaml: Denial of Service via crafted YAML merge │
│                       │                │          │        │                   │                      │ keys                                                       │
│                       │                │          │        │                   │                      │ https://avd.aquasec.com/nvd/cve-2026-53550                 │
└───────────────────────┴────────────────┴──────────┴────────┴───────────────────┴──────────────────────┴────────────────────────────────────────────────────────────┘

YAML_PRETTIER

Checking formatting...[�[33mwarn�[39m] pnpm-lock.yaml
[�[33mwarn�[39m] Code style issues found in the above file. Run Prettier with --write to fix.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.52%. Comparing base (024fd1c) to head (df25b2c).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #354   +/-   ##
=======================================
  Coverage   88.52%   88.52%           
=======================================
  Files          99       99           
  Lines        3600     3600           
  Branches      935      935           
=======================================
  Hits         3187     3187           
  Misses        373      373           
  Partials       40       40           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dependabot]

Looks like inversify is no longer updatable, so this is no longer needed.