chore(deps): do not offer keyv or mermaid majors yet

[derrickmehaffy]

What changed and why

Dependabot's production group (#234) bumped keyv 5.6.0 → 6.1.0 on its own. The redis e2e suite failed on Node 22, 24 and 26 because every purge threw:

REST Cache: failed to purge "api::category.category" after "create"
TypeError: Cannot read properties of undefined (reading 'store')

That error comes from RedisCacheProvider.ts:72, which reads cache.stores[0].opts.store. keyv 6 has no opts at all.

Porting the provider isn't the fix yet:

• Both providers pass their Keyv stores to cache-manager's createCache, and cache-manager 7.2.9 (the latest) still depends on keyv ^5.6.
• @keyv/redis 6 is the release that peers on keyv ^6.1, and its major is already ignored here because the provider relies on that adapter's internals (Purge enumerates the entire keyspace: ~30k Redis round trips and 55MB transferred to invalidate one content type #131, Purge Cache - Redis Cluster #100).

Fixing the accessor wouldn't be enough either:

• keyv 6 wraps @keyv/redis 3 in a bridge adapter and no longer defaults the keyv namespace.
• Purges would skip the SMEMBERS path (Purge enumerates the entire keyspace: ~30k Redis round trips and 55MB transferred to invalidate one content type #131) and the cluster-safe delete (Purge Cache - Redis Cluster #100), then match undefined:*. They would match nothing silently instead of failing.
  So moving to keyv 6 has to be a deliberate migration once cache-manager supports it.

This does not block the move to node-redis: @keyv/redis 4 and 5 already use @redis/client and still peer on keyv ^5, so #239 (the plugin-redis v3 move) can land on keyv 5. Only @keyv/redis 6 needs keyv 6. This adds keyv to the major-version ignore list next to @keyv/redis, with the reason.

mermaid majors are ignored too:

• mermaid 12 (in chore(deps-dev): bump the dev-tooling group across 1 directory with 9 updates #231) clips the second line of our flowchart labels. look: 'classic' restores most of the old look but still clips.
• vitepress-plugin-mermaid only declares support for mermaid 10 and 11.
• No CI job renders the docs, so chore(deps-dev): bump the dev-tooling group across 1 directory with 9 updates #231 was green while visibly breaking them. Checked in headless Chromium against mermaid 11.

Once this is merged, #234 and #231 both need @dependabot recreate so it's rebuilt without the keyv bump. Its other updates (Strapi 5.57, react-router-dom, styled-components) passed every other suite.

Checklist

• Tests added or updated. N/A, Dependabot configuration only.
• Conventional commit subjects, branched from main.

🤖 Generated with Claude Code