Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/eslintrc	3.3.5 → 3.3.6
@eslint/js (source)	9.39.4 → 9.39.5
@types/node (source)	24.12.4 → 24.13.3
@typescript-eslint/eslint-plugin (source)	8.59.4 → 8.65.0
@typescript-eslint/parser (source)	8.59.4 → 8.65.0
mocha (source)	11.7.5 → 11.7.6
npm-check-updates	22.2.0 → 22.2.9
prettier (source)	3.8.3 → 3.9.6
rollup (source)	4.60.4 → 4.62.2
semver	7.8.0 → 7.8.5
sinon (source)	22.0.0 → 22.1.0
wireit	0.14.12 → 0.14.13

---

Release Notes

eslint/eslintrc (@​eslint/eslintrc)

v3.3.6

Compare Source

Bug Fixes

• update js-yaml to 4.3.0 to address security vulnerability (#​235) (0c5de74)

eslint/eslint (@​eslint/js)

v9.39.5

Compare Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.65.0

Compare Source

🚀 Features

• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#​12578)
• add warning when TS 7 is detected (#​12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#​12527, #​19562, #​11889)

🩹 Fixes

• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#​12568)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#​12448)
• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#​12515)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

🚀 Features

• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#​12500)
• typescript-estree: throw for invalid definite assignment in class properties (#​12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#​12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

Compare Source

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#​12426)

🩹 Fixes

• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#​12492)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#​12491, #​12485)
• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#​12447, #​12446)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#​12443, #​12418)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#​12365)
• eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#​12328)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Patrick Aleite
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

Compare Source

🚀 Features

• remove redundant package.json "files" (#​12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#​12388)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#​12413)
• eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#​12394, #​12393)
• eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#​12281)
• eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#​12396, #​10577)

❤️ Thank You

• Anas @​anasm266
• Deftera @​Deftera186
• Kirk Waiblinger @​kirkwaiblinger
• lumir
• Sarath Francis @​sarathfrancis90

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

Compare Source

🚀 Features

• ast-spec: change type of UnaryExpression.prefix to always true (#​12372)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#​12182)
• eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#​12352)

❤️ Thank You

• lumir
• Nevette Bailey @​nevette-bailey

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.65.0

Compare Source

🚀 Features

• add warning when TS 7 is detected (#​12529)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#​12465)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

Compare Source

🚀 Features

• remove redundant package.json "files" (#​12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

mochajs/mocha (mocha)

v11.7.6

Compare Source

🩹 Fixes

• make describe().timeout() work (aafe6fd)
• test: replace wmic usage with native Windows API (#​5694) (73ebdfa)

🧹 Chores

• format all code (#​5629) (0696784)
• remove Netlify (#​5630) (8d01d33)

raineorshine/npm-check-updates (npm-check-updates)

v22.2.9

Compare Source

What's Changed

• Dockerfile: use lts-alpine image by @​XhmikosR in #​1862
• Rename variable and test file by @​XhmikosR in #​1884
• eslint.config.js: drop moot jest globals by @​XhmikosR in #​1887
• replace zod with valibot to reduce bundle size by @​XhmikosR in #​1885
• CI: add prettier in lint workflow by @​XhmikosR in #​1889
• Use async glob instead of glob.sync in getAllPackages by @​XhmikosR in #​1891
• Minor type tweaks by @​XhmikosR in #​1892
• Switch mocha tests to parallel by @​XhmikosR in #​1886
• Replace markdownlint-cli with markdownlint-cli2 by @​XhmikosR in #​1893

Full Changelog: raineorshine/npm-check-updates@v22.2.8...v22.2.9

v22.2.8

Compare Source

What's Changed

• CI: remove concurrency by @​XhmikosR in #​1846
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in #​1872
• Downgrade ts-json-schema-generator to v2.4.0 for Node.js 20 support by @​XhmikosR in #​1848
• prepare: add exit 0 as an extra guard by @​XhmikosR in #​1850
• ESLint: bump to es2023 globals by @​XhmikosR in #​1854
• package.json: remove redundant tests from files by @​XhmikosR in #​1855
• tsconfig: enable verbatimModuleSyntax by @​XhmikosR in #​1860
• Remove the unused libnpmconfig.d.ts by @​XhmikosR in #​1857
• Clean up run() return type JSDoc by @​XhmikosR in #​1868
• cache test: remove any previous stale cache file to prevent failures by @​XhmikosR in #​1865
• package.json: remove duplicate typecheck script by @​XhmikosR in #​1856
• Doctor tests cleanup by @​XhmikosR in #​1869
• fix: skip cache write when cooldown is active by @​XhmikosR in #​1871
• Fix stale @​param names in JSDoc by @​XhmikosR in #​1874
• Simplify tsconfig.json by @​XhmikosR in #​1858
• Add a .npmrc file enabling engine-strict by @​XhmikosR in #​1847
• Enforce node: protocol and dedupe imports by @​XhmikosR in #​1842
• Fix verbose log printing local yarn config under "user yarn config" header by @​XhmikosR in #​1875
• lint: add --continue-on-error by @​XhmikosR in #​1859
• test: cover $ override references by @​XhmikosR in #​1877
• CI updates by @​XhmikosR in #​1870
• More shell tweaks by @​XhmikosR in #​1853
• Update interactive hint for q button by @​XhmikosR in #​1879
• Vite config cleanup by @​XhmikosR in #​1861
• package.json: remove unneeded overrides by @​XhmikosR in #​1849
• build: stub unused iconv-lite out of the bundle by @​XhmikosR in #​1881
• package.json: specify allowScripts by @​XhmikosR in #​1878
• build(deps): bump softprops/action-gh-release by @​dependabot[bot] in #​1880
• refactor prettifyCooldown and share the cooldown regex by @​XhmikosR in #​1883
• build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates by @​dependabot[bot] in #​1876
• fix(cooldown): scope auto-cooldown config to active package manager only by @​raineorshine with @​Copilot in #​1882

Full Changelog: raineorshine/npm-check-updates@v22.2.7...v22.2.8

v22.2.7

Compare Source

What's Changed

• Fix CodeQL issues by @​XhmikosR in #​1813
• Escape package name and reuse escapeRegExp by @​XhmikosR in #​1838
• Remove redundant awaits and enable @​typescript-eslint/await-thenable by @​XhmikosR in #​1839
• Stop exporting the externally unused getOwnerPerDependency by @​XhmikosR in #​1840
• Perf improvements by @​XhmikosR in #​1843
• Move configs out of package.json by @​XhmikosR in #​1841
• build(deps): downgrade ini from 7.0.0 to 6.0.0 to restore Node 20 support by @​raineorshine in #​1845

Full Changelog: raineorshine/npm-check-updates@v22.2.6...v22.2.7

v22.2.6

Compare Source

What's Changed

• build(deps-dev): bump @​typescript-eslint/eslint-plugin by @​dependabot[bot] in #​1787
• build(deps-dev): bump @​typescript-eslint/parser from 8.60.1 to 8.61.0 by @​dependabot[bot] in #​1788
• build(deps-dev): bump @​microsoft/api-extractor from 7.58.7 to 7.58.8 by @​dependabot[bot] in #​1789
• build(deps-dev): bump eslint-plugin-n from 18.0.1 to 18.1.0 by @​dependabot[bot] in #​1790
• build(deps-dev): bump prettier from 3.8.3 to 3.8.4 by @​dependabot[bot] in #​1792
• build(deps-dev): bump semver from 7.8.2 to 7.8.3 by @​dependabot[bot] in #​1793
• build(deps-dev): bump cosmiconfig from 9.0.1 to 9.0.2 by @​dependabot[bot] in #​1791
• build(deps-dev): bump shell-quote from 1.8.3 to 1.8.4 by @​dependabot[bot] in #​1795
• Dependabot: add github-actions updates and group updates with a cooldown by @​XhmikosR in #​1785
• CI: harden and align GitHub Actions workflows by @​XhmikosR in #​1786
• feat: respect min-release-age-exclude with min-release-age npm config by @​Cherry in #​1797
• feat: add Claude Code SKILL file for npm-check-updates by @​ilteoood in #​1798
• build(deps): bump esbuild from 0.28.0 to 0.28.1 by @​dependabot[bot] in #​1799
• Quote global package specs with a period in the scope for PowerShell compatibility by @​raineorshine with @​Copilot in #​1800
• Add a GitHub workflow to clean up closed PRs' caches by @​XhmikosR in #​1804
• package.json: fix npm scripts to be cross-platform by @​XhmikosR in #​1805
• Replace the unmaintained npm-run-all with npm-run-all2 and removed unused deps by @​XhmikosR in #​1806
• build workflow: add npm pack --dry-run by @​XhmikosR in #​1807
• test/e2e.sh: fix shellcheck issues by @​XhmikosR in #​1808
• Replace rfdc with native structuredClone by @​XhmikosR in #​1809
• Replace js-yaml with yaml by @​XhmikosR in #​1810
• Replace dequal with node:util isDeepStrictEqual by @​XhmikosR in #​1811
• fix: do not call semver.minVersion on non-semver package protocols by @​duniul in #​1767
• Convert inline code backticks to <code> in generated HTML tables by @​XhmikosR in #​1814
• Fix skills by @​XhmikosR in #​1815
• Vite: use 'oxc' for minify by @​XhmikosR in #​1816
• build(deps): bump form-data from 4.0.5 to 4.0.6 by @​dependabot[bot] in #​1817
• build-options.ts: split README and schema writes, drop duplicate RunOptions.json write by @​XhmikosR in #​1818
• Remove lodash-es by @​XhmikosR in #​1819
• Replace cosmiconfig with lilconfig by @​XhmikosR in #​1812
• Remove redundant Promise.resolve in fetchUpgradedPackument by @​XhmikosR in #​1823
• Switch to async/await in a few more places by @​XhmikosR in #​1824
• Replace forEach with for...of by @​XhmikosR in #​1825
• Yarn test fixes by @​XhmikosR in #​1828
• fix padLeft adding trailing spaces to blank lines by @​XhmikosR in #​1829
• Remove unused dev dependencies by @​XhmikosR in #​1820
• fix: replace async reduce with for-of loop in --deep to avoid OOM by @​XhmikosR in #​1831
• test.yml: remove redundant permissions block by @​XhmikosR in #​1832
• fix MaxListenersExceededWarning when calling run() repeatedly by @​XhmikosR in #​1833
• fix: resolve workspace paths relative to --packageFile dir, not cwd by @​XhmikosR in #​1834
• fix: inline semver-utils types in the d.ts rollup by @​XhmikosR in #​1835
• Drop rimraf in favor of Vite emptyOutDir by @​XhmikosR in #​1821
• CI: add Node.js 26 by @​XhmikosR in #​1836
• CI tweaks by @​XhmikosR in #​1837
• Move src/scripts to the root folder by @​XhmikosR in #​1827

New Contributors

• @​ilteoood made their first contribution in #​1798
• @​duniul made their first contribution in #​1767

Full Changelog: raineorshine/npm-check-updates@v22.2.5...v22.2.6

v22.2.5

Compare Source

e951cf4 Bump minor and patch.
0f9f53d prettier
edf4212 Make deep tests path-agnostic with regex patterns
b820131 Only show missing time when time or cooldown format is requested

Full Changelog: raineorshine/npm-check-updates@v22.2.3...v22.2.5

v22.2.3

Compare Source

What's Changed

• build(deps-dev): bump semver from 7.8.0 to 7.8.1 by @​dependabot[bot] in #​1760
• build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 by @​dependabot[bot] in #​1781
• build(deps-dev): bump unplugin-dts from 1.0.1 to 1.0.2 by @​dependabot[bot] in #​1780
• build(deps-dev): bump eslint-import-resolver-typescript by @​dependabot[bot] in #​1779
• build(deps-dev): bump tsx from 4.22.3 to 4.22.4 by @​dependabot[bot] in #​1778
• fix: handle registries missing 'time' metadata during version resolution by @​onemen in #​1763
• Fall back to pnpm global config for minimumReleaseAge cooldown by @​Copilot in #​1777

Full Changelog: raineorshine/npm-check-updates@v22.2.2...v22.2.3

v22.2.2

Compare Source

What's Changed

• test: use node util to strip ansi in deep test by @​terminalchai in #​1769
• build(deps-dev): bump vite from 8.0.13 to 8.0.16 by @​dependabot[bot] in #​1774
• Switch from vite-plugin-dts to unplugin-dts by @​Copilot in #​1749
• test: remove unused temp directory creation by @​terminalchai in #​1770
• test: cover Windows spawn command fallback by @​terminalchai in #​1771
• build(deps-dev): bump sinon from 21.1.2 to 22.0.0 by @​dependabot[bot] in #​1751
• fix: parse Yarn duration string format for npmMinimalAgeGate by @​Copilot in #​1768
• build(deps-dev): bump @​types/bun from 1.3.13 to 1.3.14 by @​dependabot[bot] in #​1754
• build(deps-dev): bump @​typescript-eslint/parser from 8.59.4 to 8.60.1 by @​dependabot[bot] in #​1773
• build(deps-dev): bump mocha from 11.7.5 to 11.7.6 by @​dependabot[bot] in #​1753
• build(deps-dev): bump verdaccio from 6.6.0 to 6.7.2 by @​dependabot[bot] in #​1759

Full Changelog: raineorshine/npm-check-updates@v22.2.1...v22.2.2

v22.2.1

Compare Source

What's Changed

• build(deps-dev): bump @​typescript-eslint/eslint-plugin by @​dependabot[bot] in #​1727
• build(deps-dev): bump verdaccio from 6.5.2 to 6.6.0 by @​dependabot[bot] in #​1728
• build(deps-dev): bump yaml from 2.8.4 to 2.9.0 by @​dependabot[bot] in #​1729
• fix: normalize blank-line spacing between packages in --deep mode by @​terminalchai in #​1738
• Fix TypeError when running ncu from a subdirectory without a package.json by @​Copilot in #​1737
• build(deps-dev): bump semver from 7.7.4 to 7.8.0 by @​dependabot[bot] in #​1731
• build(deps-dev): bump ini from 6.0.0 to 7.0.0 by @​dependabot[bot] in #​1726
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 8.59.3 to 8.59.4 by @​dependabot[bot] in #​1739
• build(deps-dev): bump vite from 8.0.9 to 8.0.13 by @​dependabot[bot] in #​1740
• build(deps-dev): bump tsx from 4.21.0 to 4.22.3 by @​dependabot[bot] in #​1741
• build(deps-dev): bump @​typescript-eslint/parser from 8.59.3 to 8.59.4 by @​dependabot[bot] in #​1743
• build(deps-dev): bump @​types/node from 25.6.0 to 25.9.1 by @​dependabot[bot] in #​1744
• build(deps-dev): bump vite-plugin-dts from 4

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.