Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/eslintrc	3.3.5 → 3.3.6
@eslint/js (source)	9.39.4 → 9.39.5
@types/node (source)	24.12.4 → 24.13.3
@typescript-eslint/eslint-plugin (source)	8.59.4 → 8.68.0
@typescript-eslint/parser (source)	8.59.4 → 8.68.0
concurrently	10.0.3 → 10.0.5
mocha (source)	11.7.5 → 11.8.0
npm-check-updates	22.2.0 → 22.2.9
prettier (source)	3.8.3 → 3.9.6
rollup (source)	4.60.4 → 4.63.1
rollup-plugin-visualizer	7.0.1 → 7.1.1
semver	7.8.0 → 7.8.5
sinon (source)	22.0.0 → 22.1.0
wireit	0.14.12 → 0.14.13

---

Release Notes

eslint/eslintrc (@​eslint/eslintrc)

v3.3.6

比较 Source

Bug Fixes

• update js-yaml to 4.3.0 to address security vulnerability (#​235) (0c5de74)

eslint/eslint (@​eslint/js)

v9.39.5

比较 Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.68.0

比较 Source

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#​12086)

🩹 Fixes

• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#​12739)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#​12646)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#​12711)
• eslint-plugin: [unified-signatures] report identical signatures (#​12678)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#​12707)
• eslint-plugin: [unified-signatures] deduplicate types in report (#​12656)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Niki @​phaux
• Younsang Na @​nayounsang

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

比较 Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

比较 Source

🩹 Fixes

• eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#​12617)
• eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#​12588)
• eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#​12607)
• eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#​12591)
• eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#​12590)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

比较 Source

🚀 Features

• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#​12578)
• add warning when TS 7 is detected (#​12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#​12527, #​19562, #​11889)

🩹 Fixes

• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#​12568)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#​12448)
• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#​12515)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

比较 Source

🚀 Features

• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#​12500)
• typescript-estree: throw for invalid definite assignment in class properties (#​12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#​12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

比较 Source

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#​12426)

🩹 Fixes

• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#​12492)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#​12491, #​12485)
• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#​12447, #​12446)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

比较 Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#​12443, #​12418)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#​12365)
• eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#​12328)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Patrick Aleite
• 송재욱

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

比较 Source

🚀 Features

• remove redundant package.json "files" (#​12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

比较 Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#​12388)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#​12413)
• eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#​12394, #​12393)
• eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#​12281)
• eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#​12396, #​10577)

❤️ Thank You

• Anas @​anasm266
• Deftera @​Deftera186
• Kirk Waiblinger @​kirkwaiblinger
• lumir
• Sarath Francis @​sarathfrancis90

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

比较 Source

🚀 Features

• ast-spec: change type of UnaryExpression.prefix to always true (#​12372)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

比较 Source

🩹 Fixes

• eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#​12182)
• eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#​12352)

❤️ Thank You

• lumir
• Nevette Bailey @​nevette-bailey

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

比较 Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.68.0

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

比较 Source

🚀 Features

• add warning when TS 7 is detected (#​12529)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#​12465)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• 송재욱

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

比较 Source

🚀 Features

• remove redundant package.json "files" (#​12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

比较 Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub 发布 for more information.

You can read about our versioning strategy and releases on our website.

open-cli-tools/concurrently (concurrently)

v10.0.5

比较 Source

What's Changed

• fix: correctly output non-ASCII text on Windows by @​DanielC000 in #​604
• fix: expand wildcards from package.json5 when package.json is missing by @​DSeaStar in #​608

新建 贡献者

• @​DanielC000 made their first contribution in #​604
• @​DSeaStar made their first contribution in #​608

Full Changelog: open-cli-tools/concurrently@v10.0.4...v10.0.5

v10.0.4

比较 Source

What's Changed

• deps: upgrade shell-quote to 1.9.0 by @​Mayvis in #​599
• fix: avoid kill timeout exit delays by @​rajanpanth in #​601

新建 贡献者

• @​Mayvis made their first contribution in #​599
• @​rajanpanth made their first contribution in #​601

Full Changelog: open-cli-tools/concurrently@v10.0.3...v10.0.4

mochajs/mocha (mocha)

v11.8.0

比较 Source

v11.7.6

比较 Source

🩹 Fixes

• make describe().timeout() work (aafe6fd)
• test: replace wmic usage with native Windows API (#​5694) (73ebdfa)

🧹 Chores

• format all code (#​5629) (0696784)
• remove Netlify (#​5630) (8d01d33)

raineorshine/npm-check-updates (npm-check-updates)

v22.2.9

比较 Source

What's Changed

• Dockerfile: use lts-alpine image by @​XhmikosR in #​1862
• Rename variable and test file by @​XhmikosR in #​1884
• eslint.config.js: drop moot jest globals by @​XhmikosR in #​1887
• replace zod with valibot to reduce bundle size by @​XhmikosR in #​1885
• CI: add prettier in lint workflow by @​XhmikosR in #​1889
• Use async glob instead of glob.sync in getAll包 by @​XhmikosR in #​1891
• Minor type tweaks by @​XhmikosR in #​1892
• Switch mocha tests to parallel by @​XhmikosR in #​1886
• Replace markdownlint-cli with markdownlint-cli2 by @​XhmikosR in #​1893

Full Changelog: raineorshine/npm-check-updates@v22.2.8...v22.2.9

v22.2.8

比较 Source

What's Changed

• CI: remove concurrency by @​XhmikosR in #​1846
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in #​1872
• Downgrade ts-json-schema-generator to v2.4.0 for Node.js 20 support by @​XhmikosR in #​1848
• prepare: add exit 0 as an extra guard by @​XhmikosR in #​1850
• ESLint: bump to es2023 globals by @​XhmikosR in #​1854
• package.json: remove redundant tests from files by @​XhmikosR in #​1855
• tsconfig: enable verbatimModuleSyntax by @​XhmikosR in #​1860
• Remove the unused libnpmconfig.d.ts by @​XhmikosR in #​1857
• Clean up run() return type JSDoc by @​XhmikosR in #​1868
• cache test: remove any previous stale cache file to prevent failures by @​XhmikosR in #​1865
• package.json: remove duplicate typecheck script by @​XhmikosR in #​1856
• Doctor tests cleanup by @​XhmikosR in #​1869
• fix: skip cache write when cooldown is active by @​XhmikosR in #​1871
• Fix stale @​param names in JSDoc by @​XhmikosR in #​1874
• Simplify tsconfig.json by @​XhmikosR in #​1858
• Add a .npmrc file enabling engine-strict by @​XhmikosR in #​1847
• Enforce node: protocol and dedupe imports by @​XhmikosR in #​1842
• Fix verbose log printing local yarn config under "user yarn config" header by @​XhmikosR in #​1875
• lint: add --continue-on-error by @​XhmikosR in #​1859
• test: cover $ override references by @​XhmikosR in #​1877
• CI updates by @​XhmikosR in #​1870
• More shell tweaks by @​XhmikosR in #​1853
• Update interactive hint for q button by @​XhmikosR in #​1879
• Vite config cleanup by @​XhmikosR in #​1861
• package.json: remove unneeded overrides by @​XhmikosR in #​1849
• build: stub unused iconv-lite out of the bundle by @​XhmikosR in #​1881
• package.json: specify allowScripts by @​XhmikosR in #​1878
• build(deps): bump softprops/action-gh-release by @​dependabot[bot] in #​1880
• refactor prettifyCooldown and share the cooldown regex by @​XhmikosR in #​1883
• build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates by @​dependabot[bot] in #​1876
• fix(cooldown): scope auto-cooldown config to active package manager only by @​raineorshine with @​Copilot in #​1882

Full Changelog: raineorshine/npm-check-updates@v22.2.7...v22.2.8

v22.2.7

比较 Source

What's Changed

• Fix CodeQL issues by @​XhmikosR in #​1813
• Escape package name and reuse escapeRegExp by @​XhmikosR in #​1838
• Remove redundant awaits and enable @​typescript-eslint/await-thenable by @​XhmikosR in #​1839
• Stop exporting the externally unused getOwnerPerDependency by @​XhmikosR in #​1840
• Perf improvements by @​XhmikosR in #​1843
• Move configs out of package.json by @​XhmikosR in #​1841
• build(deps): downgrade ini from 7.0.0 to 6.0.0 to restore Node 20 support by @​raineorshine in #​1845

Full Changelog: raineorshine/npm-check-updates@v22.2.6...v22.2.7

v22.2.6

比较 Source

What's Changed

• build(deps-dev): bump @​typescript-eslint/eslint-plugin by @​dependabot[bot] in #​1787
• build(deps-dev): bump @​typescript-eslint/parser from 8.60.1 to 8.61.0 by @​dependabot[bot] in #​1788
• build(deps-dev): bump @​microsoft/api-extractor from 7.58.7 to 7.58.8 by @​dependabot[bot] in #​1789
• build(deps-dev): bump eslint-plugin-n from 18.0.1 to 18.1.0 by @​dependabot[bot] in #​1790
• build(deps-dev): bump prettier from 3.8.3 to 3.8.4 by @​dependabot[bot] in #​1792
• build(deps-dev): bump semver from 7.8.2 to 7.8.3 by @​dependabot[bot] in #​1793
• build(deps-dev): bump cosmiconfig from 9.0.1 to 9.0.2 by @​dependabot[bot] in #​1791
• build(deps-dev): bump shell-quote from 1.8.3 to 1.8.4 by @​dependabot[bot] in #​1795
• Dependabot: add github-actions updates and group updates with a cooldown by @​XhmikosR in #​1785
• CI: harden and align GitHub 操作 workflows by @​XhmikosR in #​1786
• feat: respect min-release-age-exclude with min-release-age npm config by @​Cherry in #​1797
• feat: add Claude Code SKILL file for npm-check-updates by @​ilteoood in #​1798
• build(deps): bump esbuild from 0.28.0 to 0.28.1 by @​dependabot[bot] in #​1799
• Quote global package specs with a period in the scope for PowerShell compatibility by @​raineorshine with @​Copilot in #​1800
• Add a GitHub workflow to clean up closed PRs' caches by @​XhmikosR in #​1804
• package.json: fix npm scripts to be cross-platform by @​XhmikosR in #​1805
• Replace the unmaintained npm-run-all with npm-run-all2 and removed unused deps by @​XhmikosR in #​1806
• build workflow: add npm pack --dry-run by @​XhmikosR in #​1807
• test/e2e.sh: fix shellcheck issues by @​XhmikosR in #​1808
• Replace rfdc with native structuredClone by @​XhmikosR in #​1809
• Replace js-yaml with yaml by @​XhmikosR in #​1810
• Replace dequal with node:util isDeepStrictEqual by @​XhmikosR in #​1811
• fix: do not call semver.minVersion on non-semver package protocols by @​duniul in #​1767
• Convert inline code backticks to <code> in generated HTML tables by @​XhmikosR in #​1814
• Fix skills by @​XhmikosR in #​1815
• Vite: use 'oxc' for minify by @​XhmikosR in #​1816
• build(deps): bump form-data from 4.0.5 to 4.0.6 by @​dependabot[bot] in #​1817
• build-options.ts: split README and schema writes, drop duplicate RunOptions.json write by @​XhmikosR in #​1818
• Remove lodash-es by @​XhmikosR in #​1819
• Replace cosmiconfig with lilconfig by @​XhmikosR in #​1812
• Remove redundant Promise.resolve in fetchUpgradedPackument by @​XhmikosR in #​1823
• Switch to async/await in a few more places by @​XhmikosR in #​1824
• Replace forEach with for...of by @​XhmikosR in #​1825
• Yarn test fixes by @​XhmikosR in #​1828
• fix padLeft adding trailing spaces to blank lines by @​XhmikosR in #​1829
• Remove unused dev dependencies by @​XhmikosR in #​1820
• fix: replace async reduce with for-of loop in --deep to avoid OOM by @​XhmikosR in #​1831
• test.yml: remove redundant permissions block by @​XhmikosR in #​1832
• fix MaxListenersExceededWarning when calling run() repeatedly by @​XhmikosR in #​1833
• fix: resolve workspace paths relative to --packageFile dir, not cwd by @​XhmikosR in #​1834
• fix: inline semver-utils types in the d.ts rollup by @​XhmikosR in #​1835
• Drop rimraf in favor of Vite emptyOutDir by [@​XhmikosR](https

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.