chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@antfu/eslint-config	^3.14.0 → ^3.16.0
@namesmt/utils	^0.5.9 → ^0.5.18
@types/node (source)	^22.10.6 → ^22.20.1
@vitest/coverage-v8 (source)	^2.1.8 → ^2.1.9
eslint (source)	^9.18.0 → ^9.39.5
hasown (source)	^1 → ^1.0.44
is-core-module (source)	^1 → ^1.0.39
lint-staged	^15.3.0 → ^15.5.2
nodemon (source)	^3.1.9 → ^3.1.14
pnpm (source)	9.15.4 → 9.15.9
simple-git-hooks	^2.11.1 → ^2.13.1
tsx (source)	^4.19.2 → ^4.23.1
typescript (source)	^5.7.3 → ^5.9.3
uint8array-extras	^1.4.0 → ^1.5.0
unbuild	^3.3.1 → ^3.6.1
vite (source)	^6.0.7 → ^6.4.3
vite-plugin-inspect	^10.0.6 → ^10.3.0
vitest (source)	^2.1.8 → ^2.1.9

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v3.16.0

Compare Source

   🚀 Features

• Change editor rules from disable to non-fixable  -  by @​antfu (a98cc)

    View changes on GitHub

v3.15.0

Compare Source

   🚀 Features

• Turn off prefer-const in editor  -  by @​antfu (12dd5)

    View changes on GitHub

namesmt/utils (@​namesmt/utils)

v0.5.18

Compare Source

compare changes

🏡 Chore

• Update deps (6aca420)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.17

Compare Source

compare changes

🏡 Chore

• ⚠️ Set DetailedError.name (9e187ee)
• Update deps (bdbe6a1)

⚠️ Breaking Changes

• ⚠️ Set DetailedError.name (9e187ee)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.16

Compare Source

compare changes

🚀 Enhancements

• Add browserDownloadFile (d692281)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.15

Compare Source

compare changes

🏡 Chore

• Update deps (251858d)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.14

Compare Source

compare changes

🌊 Types

• variablePrefix: Support for readonly arrays (aded43c)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.13

Compare Source

compare changes

🌊 Types

• keyBy: Should works with ReadonlyArrays (f99b039)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.12

Compare Source

compare changes

🔥 Performance

• Only create mirror if needed (ec7f8da)

🏡 Chore

• pnpm approve-builds (30d7ec5)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.11

Compare Source

compare changes

🚀 Enhancements

• replaceMap: Rename to replaceByMap, add recursive arg (9589aa8)
• Add replaceByArray fn (653ac1c)

🌊 Types

• keyBy: Should works with ReadonlyArrays (488421a)

❤️ Contributors

• NamesMT (@​NamesMT)

v0.5.10

Compare Source

compare changes

🏡 Chore

• Commit lockfile (3fb5e06)
• Housekeeping (align with starter-ts) (f6c5ceb)
• Update deps (8d8c549)

❤️ Contributors

• NamesMT (@​NamesMT)

vitest-dev/vitest (@​vitest/coverage-v8)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport #​7317 to v2 - by @​hi-ogawa in #​7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in #​7343

    View changes on GitHub

eslint/eslint (eslint)

v9.39.5

Compare Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

v9.39.4

Compare Source

Bug Fixes

• f18f6c8 fix: update dependency minimatch to ^3.1.5 (#​20564) (Milos Djermanovic)
• a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#​20554) (Milos Djermanovic)
• 234d005 fix: minimatch security vulnerability patch for v9.x (#​20549) (Andrej Beles)
• b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#​20538) (루밀LuMir)

Documentation

• 4675152 docs: add deprecation notice partial (#​20520) (Milos Djermanovic)

Chores

• b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#​20596) (Francesco Trotta)
• 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
• 1d16c2f ci: pin Node.js 25.6.1 (#​20563) (Milos Djermanovic)

v9.39.3

Compare Source

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#​20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#​20453) (Milos Djermanovic)

v9.39.2

Compare Source

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#​20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#​20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#​20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#​20382) (Milos Djermanovic)

v9.39.1

Compare Source

Bug Fixes

• 650753e fix: Only pass node to JS lang visitor methods (#​20283) (Nicholas C. Zakas)

Documentation

• 51b51f4 docs: add a section on when to use extends vs cascading (#​20268) (Tanuj Kanti)
• b44d426 docs: Update README (GitHub Actions Bot)

Chores

• 92db329 chore: update @eslint/js version to 9.39.1 (#​20284) (Francesco Trotta)
• c7ebefc chore: package.json update for @​eslint/js release (Jenkins)
• 61778f6 chore: update eslint-config-eslint dependency @​eslint/js to ^9.39.0 (#​20275) (renovate[bot])
• d9ca2fc ci: Add rangeStrategy to eslint group in renovate config (#​20266) (唯然)
• 009e507 test: fix version tests for ESLint v10 (#​20274) (Milos Djermanovic)

v9.39.0

Compare Source

Features

• cc57d87 feat: update error loc to key in no-dupe-class-members (#​20259) (Tanuj Kanti)
• 126552f feat: update error location in for-direction and no-dupe-args (#​20258) (Tanuj Kanti)
• 167d097 feat: update complexity rule to highlight only static block header (#​20245) (jaymarvelz)

Bug Fixes

• 15f5c7c fix: forward traversal step.args to visitors (#​20253) (jaymarvelz)
• 5a1a534 fix: allow JSDoc comments in object-shorthand rule (#​20167) (Nitin Kumar)
• e86b813 fix: Use more types from @​eslint/core (#​20257) (Nicholas C. Zakas)
• 927272d fix: correct Scope typings (#​20198) (jaymarvelz)
• 37f76d9 fix: use AST.Program type for Program node (#​20244) (Francesco Trotta)
• ae07f0b fix: unify timing report for concurrent linting (#​20188) (jaymarvelz)
• b165d47 fix: correct Rule typings (#​20199) (jaymarvelz)
• fb97cda fix: improve error message for missing fix function in suggestions (#​20218) (jaymarvelz)

Documentation

• d3e81e3 docs: Always recommend to include a files property (#​20158) (Percy Ma)
• 0f0385f docs: use consistent naming recommendation (#​20250) (Alex M. Spieslechner)
• a3b1456 docs: Update README (GitHub Actions Bot)
• cf5f2dd docs: fix correct tag of no-useless-constructor (#​20255) (Tanuj Kanti)
• 10b995c docs: add TS options and examples for nofunc in no-use-before-define (#​20249) (Tanuj Kanti)
• 2584187 docs: remove repetitive word in comment (#​20242) (reddaisyy)
• 637216b docs: update CLI flags migration instructions (#​20238) (jaymarvelz)
• e7cda3b docs: Update README (GitHub Actions Bot)
• 7b9446f docs: handle empty flags sections on the feature flags page (#​20222) (sethamus)

Chores

• dfe3c1b chore: update @eslint/js version to 9.39.0 (#​20270) (Francesco Trotta)
• 2375a6d chore: package.json update for @​eslint/js release (Jenkins)
• a1f4e52 chore: update @eslint dependencies (#​20265) (Francesco Trotta)
• c7d3229 chore: update dependency @​eslint/core to ^0.17.0 (#​20256) (renovate[bot])
• 27549bc chore: update fuzz testing to not error if code sample minimizer fails (#​20252) (Milos Djermanovic)
• a1370ee ci: bump actions/setup-node from 5 to 6 (#​20230) (dependabot[bot])
• 9e7fad4 chore: add script to auto-generate eslint:recommended configuration (#​20208) (唯然)

v9.38.0

Compare Source

Features

• ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#​20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#​20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#​20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#​20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#​20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#​20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#​20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#​20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#​20184) (Pixel998)

v9.37.0

Compare Source

Features

• 39f7fb4 feat: preserve-caught-error should recognize all static "cause" keys (#​20163) (Pixel998)
• f81eabc feat: support TS syntax in no-restricted-imports (#​19562) (Nitin Kumar)

Bug Fixes

• a129cce fix: correct no-loss-of-precision false positives for leading zeros (#​20164) (Francesco Trotta)
• 09e04fc fix: add missing AST token types (#​20172) (Pixel998)
• 861c6da fix: correct ESLint typings (#​20122) (Pixel998)

Documentation

• b950359 docs: fix typos across the docs (#​20182) (루밀LuMir)
• 42498a2 docs: improve ToC accessibility by hiding non-semantic character (#​20181) (Percy Ma)
• 29ea092 docs: Update README (GitHub Actions Bot)
• 5c97a04 docs: show availableUntil in deprecated rule banner (#​20170) (Pixel998)
• 90a71bf docs: update README files to add badge and instructions (#​20115) (루밀LuMir)
• 1603ae1 docs: update references from master to main (#​20153) (루밀LuMir)

Chores

• afe8a13 chore: update @eslint/js dependency to version 9.37.0 (#​20183) (Francesco Trotta)
• abee4ca chore: package.json update for @​eslint/js release (Jenkins)
• fc9381f chore: fix typos in comments (#​20175) (overlookmotel)
• e1574a2 chore: unpin jiti (#​20173) (renovate[bot])
• e1ac05e refactor: mark ESLint.findConfigFile() as async, add missing docs (#​20157) (Pixel998)
• 347906d chore: update eslint (#​20149) (renovate[bot])
• 0cb5897 test: remove tmp dir created for circular fixes in multithread mode test (#​20146) (Milos Djermanovic)
• bb99566 ci: pin jiti to version 2.5.1 (#​20151) (Pixel998)
• 177f669 perf: improve worker count calculation for "auto" concurrency (#​20067) (Francesco Trotta)
• 448b57b chore: Mark deprecated formatting rules as available until v11.0.0 (#​20144) (Milos Djermanovic)

v9.36.0

Compare Source

Features

• 47afcf6 feat: correct preserve-caught-error edge cases (#​20109) (Francesco Trotta)

Bug Fixes

• 75b74d8 fix: add missing rule option types (#​20127) (ntnyq)
• 1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#​20116) (루밀LuMir)
• 7d61b7f fix: add missing scope types to Scope.type (#​20110) (Pixel998)
• 7a670c3 fix: correct rule option typings in rules.d.ts (#​20084) (Pixel998)

Documentation

• b73ab12 docs: update examples to use defineConfig (#​20131) (sethamus)
• 31d9392 docs: fix typos (#​20118) (Pixel998)
• c7f861b docs: Update README (GitHub Actions Bot)
• 6b0c08b docs: Update README (GitHub Actions Bot)
• 91f97c5 docs: Update README (GitHub Actions Bot)

Chores

• 12411e8 chore: upgrade @​eslint/js@​9.36.0 (#​20139) (Milos Djermanovic)
• 488cba6 chore: package.json update for @​eslint/js release (Jenkins)
• bac82a2 ci: simplify renovate configuration (#​19907) (唯然)
• c00bb37 ci: bump actions/labeler from 5 to 6 (#​20090) (dependabot[bot])
• fee751d refactor: use defaultOptions in rules (#​20121) (Pixel998)
• 1ace67d chore: update example to use defineConfig (#​20111) (루밀LuMir)
• 4821963 test: add missing loc information to error objects in rule tests (#​20112) (루밀LuMir)
• b42c42e chore: disallow use of deprecated type property in core rule tests (#​20094) (Milos Djermanovic)
• 7bb498d test: remove deprecated type property from core rule tests (#​20093) (Pixel998)
• e10cf2a ci: bump actions/setup-node from 4 to 5 (#​20089) (dependabot[bot])
• 5cb0ce4 refactor: use meta.defaultOptions in preserve-caught-error (#​20080) (Pixel998)
• f9f7cb5 chore: package.json update for eslint-config-eslint release (Jenkins)
• 81764b2 chore: update eslint peer dependency in eslint-config-eslint (#​20079) (Milos Djermanovic)

v9.35.0

Compare Source

Features

• 42761fa feat: implement suggestions for no-empty-function (#​20057) (jaymarvelz)
• 102f444 feat: implement suggestions for no-empty-static-block (#​20056) (jaymarvelz)
• e51ffff feat: add preserve-caught-error rule (#​19913) (Amnish Singh Arora)

Bug Fixes

• 10e7ae2 fix: update uncloneable options error message (#​20059) (soda-sorcery)
• bfa4601 fix: ignore empty switch statements with comments in no-empty rule (#​20045) (jaymarvelz)
• dfd11de fix: add before and after to test case types (#​20049) (Francesco Trotta)
• dabbe95 fix: correct types for no-restricted-imports rule (#​20034) (Milos Djermanovic)
• ea789c7 fix: no-loss-of-precision false positive with uppercase exponent (#​20032) (sethamus)

Documentation

• d265515 docs: improve phrasing - "if" → "even if" from getting-started section (#​20074) (jjangga0214)
• a355a0e docs: invert comparison logic for example in no-var doc page (#​20064) (OTonGitHub)
• 5082fc2 docs: Update README (GitHub Actions Bot)
• 99cfd7e docs: add missing "the" in rule deprecation docs (#​20050) (Josh Goldberg ✨)
• 6ad8973 docs: update --no-ignore and --ignore-pattern documentation (#​20036) (Francesco Trotta)
• 8033b19 docs: add documentation for --no-config-lookup (#​20033) (Francesco Trotta)

Chores

• da87f2f chore: upgrade @​eslint/js@​9.35.0 (#​20077) (Milos Djermanovic)
• af2a087 chore: package.json update for @​eslint/js release (Jenkins)
• 7055764 test: remove tests/lib/eslint/eslint.config.js (#​20065) (Milos Djermanovic)
• 84ffb96 chore: update @eslint-community/eslint-utils (#​20069) (Francesco Trotta)
• d5ef939 refactor: remove deprecated context.parserOptions usage across rules (#​20060) (sethamus)
• 1b3881d chore: remove redundant word (#​20058) (pxwanglu)

v9.34.0

Compare Source

Features

• 0bb777a feat: multithread linting (#​19794) (Francesco Trotta)
• 43a5f9e feat: add eslint-plugin-regexp to eslint-config-eslint base config (#​19951) (Pixel998)

Bug Fixes

• 9b89903 fix: default value of accessor-pairs option in rule.d.ts file (#​20024) (Tanuj Kanti)
• 6c07420 fix: fix spurious failure in neostandard integration test (#​20023) (Kirk Waiblinger)
• 676f4ac fix: allow scientific notation with trailing zeros matching exponent (#​20002) (Sweta Tanwar)

Documentation

• 0b4a590 docs: make rulesdir deprecation clearer (#​20018) (Domenico Gemoli)
• 327c672 docs: Update README (GitHub Actions Bot)
• bf26229 docs: Fix typo in core-concepts/index.md (#​20009) (Tobias Hernstig)
• 2309327 docs: fix typo in the "Configuring Rules" section (#​20001) (ghazi-git)
• 2b87e21 docs: [no-else-return] clarify sample code. (#​19991) (Yuki Takada (Yukinosuke Takada))
• c36570c docs: Update README (GitHub Actions Bot)

Chores

• f19ad94 chore: upgrade to @eslint/js@9.34.0 (#​20030) (Francesco Trotta)
• b48fa20 chore: package.json update for @​eslint/js release (Jenkins)
• 4bce8a2 chore: package.json update for eslint-config-eslint release (Jenkins)
• 0c9999c refactor: prefer default options in grouped-accessor-pairs (#​20028) (루밀LuMir)
• d503f19 ci: fix stale.yml (#​20010) (루밀LuMir)
• e2dc67d ci: centralize stale.yml (#​19994) (루밀LuMir)
• 7093cb8 ci: bump actions/checkout from 4 to 5 (#​20005) (dependabot[bot])

v9.33.0

Compare Source

Features

• e07820e feat: add global object access detection to no-restricted-globals (#​19939) (sethamus)
• 90b050e feat: support explicit resource management in one-var (#​19941) (Sweta Tanwar)

Bug Fixes

• 732433c fix: allow any type for meta.docs.recommended in custom rules (#​19995) (Francesco Trotta)
• e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#​19975) (諏訪原慶斗)

Documentation

• [34f0723](https://redirect.github.com/eslint/eslint/commit/34f0723e2d0faf

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 1am and before 5am"
• Automerge
  • "after 2am and before 5am"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.