deps: bump the development group across 1 directory with 21 updates

[dependabot]

Bumps the development group with 21 updates in the / directory:

Package	From	To
@size-limit/file	13.0.3	14.1.0
@testing-library/dom	10.4.1	10.4.2
@types/node	26.5.1	26.6.4
ctrf	0.3.0	0.4.0
eslint	10.10.0	10.12.0
eslint-config-next	16.3.6	16.3.8
eslint-plugin-sonarjs	4.2.0	4.2.2
fast-check	4.10.0	4.10.2
fumadocs-mdx	15.4.0	15.4.6
jsdom	30.0.1	30.1.2
knip	6.35.1	6.39.0
lint-staged	17.5.1	17.6.0
opencode-ai	1.18.30	1.18.34
playwright-ctrf-json-reporter	0.0.29	0.1.0
prettier	3.9.6	3.9.9
promptfoo	0.123.0	0.123.1
size-limit	13.0.3	14.1.0
type-coverage	2.30.1	2.30.3
typescript-eslint	8.70.0	8.71.0
vitest	5.0.0	5.0.3
wait-on	9.1.0	9.5.1

Updates @size-limit/file from 13.0.3 to 14.1.0

Release notes

Sourced from @​size-limit/file's releases.

14.1.0

• Added --ignore-missing argument (by @​DeepanshuPal).
• Added the warning about check conflict in --save-bundle (by @​DeepanshuPal).

14.0.1

• Fixed increased size in rolldown plugin.
• Fixed docs (by @​Likio3000).

14.0.0

• Moved to rolldown by default in @size-limit/preset-small-lib.
• Unified Node.js support accross projects.
• Removed dependencies.

13.1.1

• Fixed release.

13.1.0

• Added rolldown & rolldown-why plugins (by @​dangreen).

Changelog

Sourced from @​size-limit/file's changelog.

14.1.0

• Added --ignore-missing argument (by @​DeepanshuPal).
• Added the warning about check conflict in --save-bundle (by @​DeepanshuPal).

14.0.1

• Fixed increased size in rolldown plugin.
• Fixed docs (by @​Likio3000).

14.0.0

• Moved to rolldown by default in @size-limit/preset-small-lib.
• Unified Node.js support accross projects.
• Removed dependencies.

13.1.1

• Fixed release.

13.1.0

• Added rolldown & rolldown-why plugins (by @​dangreen).

Commits

• 17a37d8 Release 14.1.0 version
• ded9dca Update dependencies
• 0a8011b Warn when saved bundles from multiple checks may overwrite (#403)
• 0c07513 feat: optionally skip configured checks with no matching files (#402)
• f6e56fe Release 14.0.1 version
• ef18905 Update dependencies
• b2b9568 docs: fix copyable JSON and TypeScript config examples (#401)
• b1d4c43 Release 14.0 version
• be6aec9 Update dependencies
• 2b763e3 Fix test and docs
• Additional commits viewable in compare view

Updates @testing-library/dom from 10.4.1 to 10.4.2

Release notes

Sourced from @​testing-library/dom's releases.

v10.4.2

10.4.2 (2026-09-13)

Bug Fixes

• deps: pin @​types/node to a TypeScript 4-compatible version (#1386) (6049cc0)

Commits

• 6049cc0 fix(deps): pin @​types/node to a TypeScript 4-compatible version (#1386)
• e395d5b Switch to trusted publishing (#1368)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/dom since your current version.

Updates @types/node from 26.5.1 to 26.6.4

Commits

• See full diff in compare view

Updates ctrf from 0.3.0 to 0.4.0

Release notes

Sourced from ctrf's releases.

v0.4.0

Highlights

• Added validation support for all published CTRF specification versions: 0.0.1, 0.0.2, 0.0.3, 0.0.4, and 0.1.0.
• Added the latest schema selector, resolving to CTRF 0.1.0.
• Made schema loading patch-version aware and bundled each released schema snapshot.
• Added version selection to validate(), isValid(), and validateStrict().
• Aligned retry mechanisms with the CTRF specification: retry history now includes the initial attempt, excludes the final attempt, and enforces contiguous attempt numbering and retry counts.
• Added the AttemptHistoryEntry API and builder support, while retaining deprecated retry-attempt compatibility aliases.
• Updated builders, merge output, documentation, and generated API references.

This release publishes ctrf@0.4.0.

Thanks to @​Ma11hewThomas for the changes included in this release.

Commits

• 111521e Add versioned CTRF schema validation
• 27beb53 Align retry history semantics (#85)
• 4089ba1 chore(deps): bump markdown-it (#84)
• 5cf9e1e chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.14 (#83)
• dabed59 chore(deps-dev): bump @​types/node from 26.4.0 to 26.6.3 (#82)
• d5ebdf8 chore(deps): bump yargs from 18.1.0 to 18.2.0 (#81)
• 76ee79f chore(deps-dev): bump typedoc-plugin-markdown from 4.13.0 to 4.13.1 (#79)
• acd6e1b chore(deps-dev): bump @​vitest/coverage-v8 from 5.0.1 to 5.0.2 (#80)
• 84b8a48 chore(deps): bump @​vitest/mocker (#78)
• 65b9556 chore(deps-dev): bump vitest from 4.1.10 to 5.0.2 (#76)
• Additional commits viewable in compare view

Updates eslint from 10.10.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates eslint-config-next from 16.3.6 to 16.3.8

Release notes

Sourced from eslint-config-next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

• Server-Side Request Forgery in Image Optimization

Medium:

• Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass
• Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
• Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
• Pending use cache fill can leak Draft Mode content into regular responses and persisted pages
• Cache leak across root param values in nested 'use cache' functions

Low:

• Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @​lukesandberg for helping!

Commits

• b0fad0d v16.3.8
• 4c20699 v16.3.7
• See full diff in compare view

Updates eslint-plugin-sonarjs from 4.2.0 to 4.2.2

Commits

• See full diff in compare view

Updates fast-check from 4.10.0 to 4.10.2

Release notes

Sourced from fast-check's releases.

v4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

Fix fake-timer compatibility in timeout and interrupt plugins

[Code][Diff]

Fixes

• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

Changelog

Sourced from fast-check's changelog.

4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

4.10.1

Fix fake-timer compatibility in timeout and interrupt plugins [Code][Diff]

Fixes

• (PR#7292) Bug: Capture timer globals for timeout plugin
• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

Commits

• c77afa8 v4.10.2
• 1e80f3a v4.10.2
• 2df3265 🐛 Plugin interruptAfterTimeLimit crashes (#7333)
• e93c6a8 🔖 Update CHANGELOG.md for fast-check@4.10.1 (#7294)
• 15744d0 🐛 Capture timers for interruptAfterTimeLimit plugin (#7293)
• fb2ea50 🐛 Capture timer globals for timeout plugin (#7292)
• See full diff in compare view

Updates fumadocs-mdx from 15.4.0 to 15.4.6

Release notes

Sourced from fumadocs-mdx's releases.

fumadocs-mdx@15.4.6

Keep collection dir outside the project in file paths

When a collection's dir was outside the project (e.g. ../content/docs), the leading ../ was dropped from info.fullPath and absolutePath, so getText('raw') failed with ENOENT.

Fix #3623

fumadocs-mdx@15.4.5

Stop recrawling node_modules on every Vite config resolution

The config hook of fumadocs-mdx/vite walked the dependency tree below Fumadocs packages once per chain reaching a package, so a docs app with a few Fumadocs packages read ~10k package.json files (~0.9s) each time Vite resolved its config, which it does once per build environment.

The crawl now visits each package once, breadth-first, and still records the shortest chain to every CommonJS dependency (fumadocs-ui > @base-ui/react > use-sync-external-store/shim and friends). The result is memoized for the process until the package manager's install state changes, so a build with several environments crawls once.

fumadocs-mdx@15.4.4

Sort glob results for deterministic codegen

fumadocs-mdx's Node codegen now sorts glob-matched files before generating collections, so the output (and anything derived from getPages()) is stable across builds of unchanged content. The Vite codegen path was checked separately: Vite's own import.meta.glob already sorts matched files internally, so it did not need the same fix.

fumadocs-mdx@15.4.3

Fix experimentalBuildCache bloating frontmatter-only imports

With a warm build cache, ?only=frontmatter imports were served the fully compiled page from cache instead of the frontmatter module, so every page was bundled two more times. The cache now only applies to full compilations.

fumadocs-mdx@15.4.2

Fix the _mdast export with removePosition

// fumadocs-mdx collection config
postprocess: {
  includeMDAST: { removePosition: true },
},

This exported _mdast with no value, and getMDAST() then reported that includeMDAST was disabled. removePosition strips positions in place and returns nothing, so JSON.stringify received undefined.

The tree is now cloned, stripped, and serialized from the clone.

Fix SOURCEMAP_BROKEN warnings on Vite

With build.sourcemap enabled, Vite warned once per content and meta file because the loaders returned no source map. They now return an empty map when nothing is generated.

Source maps for MDX stay opt-in, pass SourceMapGenerator from source-map to MDX options:

import { SourceMapGenerator } from 'source-map';
export default defineConfig({
mdxOptions: {
SourceMapGenerator,
</tr></table>

... (truncated)

Commits

• 6ce09d9 Version Packages (#3624)
• 65197b8 ui: no dev cache
• 0a0ce64 docs: remove export-search-indexes.ts
• f0c9d0a fix(openapi): default to basic auth
• 023888c feat(core): support Meilisearch
• f0d7cdb feat(openapi): show download button
• 6c5b179 fix(mdx): collection outside of project dir
• bb43b61 Version Packages (#3621)
• 6791d6f fix(ui): apply the Vite base path to the "View as Markdown" link
• bc42c20 Version Packages (#3618)
• Additional commits viewable in compare view

Updates jsdom from 30.0.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

• Updated URLs to support Unicode v18.0.0 in internationalized domain names.
• Reduced package size and memory use for CSS property definitions. (@​scttcper)
• Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
• Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
• Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
• Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
• Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)
• Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
• Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
• Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)
• Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
• Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
• Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)

v30.1.1

• Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
• Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
• Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
• Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
• Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
• Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
• Fixed the storageQuota option being ignored by frames.
• Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
• Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
• Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
• Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
• Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

• Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
• Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
• Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
• Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
• Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
• Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
• Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
• Changed window.close() to preserve access to the document and its DOM through retained references.
• Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
• Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)

... (truncated)

Commits

• a23bfb7 30.1.2
• 64a75d2 Update dependencies and dev dependencies
• 7bf9653 Invalidate styles after CSSOM and control state changes
• fe9009c Update focused area handling
• a8d28b3 Release windows retained by stylesheet parsing
• 05a2c01 Deduplicate generated CSS property metadata
• 1efa190 Reduce generated CSS property data
• a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
• b2cd235 Update css-color
• 0542d2b Release idle MutationObserver bookkeeping
• Additional commits viewable in compare view

Updates knip from 6.35.1 to 6.39.0

Release notes

Sourced from knip's releases.

Release 6.39.0

• Add Railway plugin (#2026) (6da55767eb419701dd32f93789a00e8bdc915276) - thanks @​jonahsnider!
• Update query snapshot (8877d3cf35943e17a617e1197fa46c5a43342479)
• Fix excluded tags on entry re-exports (#2062) (b22e27543cb8dd4ba7ec97c70ccfd06bc8f16614) - thanks @​devYRPauli!
• Update rolldown snapshot (3a45c806e1c1b7ceb078903652c8631566400096)
• Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067) (d912d807e41f140bbc79bafce6882b3c05dec6ff) - thanks @​bytedoe!
• fix(angular): keep other projects' inputs when one has no architect (#2064) (af3f42e9772e9937fd71b7557d3b54aee1db339a) - thanks @​Cayan!
• fix(vite): resolve nested HTML entry points in multi-page apps (#1988) (4648aefe56e7bac521bb6f17189473b46f8ff00f) - thanks @​DreamLongYT!
• Improve Rstest plugin support (#2068) (add87992e9dfe2f3c22e4c6ba7fa257d7f0151cf) - thanks @​fi3ework!
• Handle profiles, formatters and require paths in Cucumber plugin (#2065) (2ad39fcf02e067b4bdfc06a658bf4bf5abeea764) - thanks @​giaBaoJS!
• fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076) (7060bb968339680d694275413aba2833e4521ed9) - thanks @​alokn!
• fix: read entry export tags under the re-exported names (#2069) (1698683df95a96b3515795eb664aacf030042d7b) - thanks @​devYRPauli!

Release 6.38.0

• Include co-authors in docs contributor list (0c334100df59d89a512ad598ec50e7f62f6da0c3)
• Filter bots and agents from docs contributors (617f70d8179c6b8668ca41fe5df77ced5e2b37c0)
• Update Eve plugin conventions (#2049) (260dbb91a85f3a3bc2727e8f255d73df3737552c) - thanks @​matchai!
• Add args example to that doc page (50b271b98fc930a05a3b045a2f691486f9f06528)
• Add Turborepo plugin (#2055) (e49d3db05f1d69ce7db3efcb8467a4af63c27379) - thanks @​changbaebang!
• Support import-x/* settings in ESLint plugin (#2050) (1a34cf82a3d6a1202717ef910bedba55838e9dd9) - thanks @​bytedoe!
• Resolve file option in Mocha configuration files (#2051) (9b5c5f60468c8a92a3e74adca5c0931f008677af) - thanks @​giaBaoJS!
• Support oxlint extends (#2054) (a149a98219bb14b15f446fc5f8c4f815e28b2183) - thanks @​matthewnitschke-wk!
• Fix import.meta handling in built-in compilers (#2059) (8b0c85076bf3dce15ef5f3c0c4e58bfefdf59ded) - thanks @​vdavid!
• Fix tag hints for enum and namespace members (#2061) (8a8805e48945863248429d18b7f6c4e4b7dc9ebd) - thanks @​devYRPauli!
• Flag unused member tags in tagged enums and namespaces (584e53ff3e0846fbfe04fa5b5bfefe2420576a34)
• feat: resolve MDX content mapper remarkPlugins (#2060) (34dbccf25359f9e9fefe9d0be6ef2ec0252223cc) - thanks @​gioboa!
• Refactor and separate concerns w/ new typescript-content-mapper plugin (11e94509bd0f350d747facf4003fc5b248d1b02d)
• Resolve mdx content mapper providerImportSource (7b5825117f97f2f87b7141509a254f88d0957cf7)
• Fix config → entry in plop plugin (25a380c9e1165b76583d69b48b5fa7cdf5db0ae2)

Release 6.37.0

• fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @​RobHannay!
• fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @​addielaruee!
• Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)
• Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)
• Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)
• Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)
• Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)
• Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)
• Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)
• Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @​bytedoe!

Release 6.36.0

• Add @​tailwindcss/webpack as Tailwind plugin enabler (#2027) (b5ac0cf734dda3c6c6c51c817981dfc558b7c582) - thanks @​igas!
• Fix Next.js Turbopack loader dependencies (23419b4edfd48796dd484fa880e1bad49a043d2e)
• Explain ambiguous star exports in traces (#2025) (3c2c1a53f9c2b7ff3057a4e46761791979e0b09c) - thanks @​gioboa!
• Fix eslintrc parserOptions.parser handling in ESLint plugin (#2028) (c79463cec81d09518eda325ec00e6f12327dea8d) - thanks @​bytedoe!
• fix(compilers): require word boundary around import keyword (#2029) (68bbe51c39b564022b63942bc83cb570778cca00) - thanks @​thanadolps!
• fix: recover from corrupt cache file (#2034) (30ff7568c84e0a6731ca634a52314228d23d1a2b) - thanks @​gioboa!
• fix: fix trailing comma on dependency removal (#2033) (adfaf4f78878b6d55b0939a92d70a1fbb0ae1240) - thanks @​gioboa!

... (truncated)

Commits

• ed30e5b Release knip@6.39.0
• 1698683 fix: read entry export tags under the re-exported names (#2069)
• 7060bb9 fix(playwright): resolve globalSetup/globalTeardown from config dir (#2076)
• 2ad39fc Handle profiles, formatters and require paths in Cucumber plugin (#2065)
• add8799 Improve Rstest plugin support (#2068)
• 4648aef fix(vite): resolve nested HTML entry points in multi-page apps (#1988)
• af3f42e fix(angular): keep other projects' inputs when one has no architect (#2064)
• d912d80 Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#2067)
• b22e275 Fix excluded tags on entry re-exports (#2062)
• 6da5576 Add Railway plugin (#2026)
• Additional commits viewable in compare view

Updates lint-staged from 17.5.1 to 17.6.0

Release notes

Sourced from lint-staged's releases.

v17.6.0

Minor Changes

• #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*': {
  title: 'Fail if PDF files are committed',
  task: async (filepaths, { log }) => {
  const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
  if (pdfFiles.length > 0) {
  log('PDF files should not be committed: %s', pdfFiles)
  throw new Error('Failed')
  }
  },
  },
  })

• #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

  If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

• #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

• #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
  })

• #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

• #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

Changelog

Sourced from lint-staged's changelog.

17.6.0

Minor Changes

• #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*': {
  title: 'Fail if PDF files are committed',
  task: async (filepaths, { log }) => {
  const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
  if (pdfFiles.length > 0) {
  log('PDF files should not be committed: %s', pdfFiles)
  throw new Error('Failed')
  }
  },
  },
  })

• #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally s...

  Description has been truncated

[github-actions]

CI Coverage Report

• Coverage job: skipped
• PR test policy: success

Coverage artifact was not available for this run.