[dependabot]

Bumps the development-tooling group with 7 updates in the / directory:

Package	From	To
@changesets/cli	3.0.1	3.0.3
@rollup/plugin-typescript	12.3.0	12.3.1
eslint	10.9.1	10.13.0
prettier	3.9.6	3.9.10
publint	0.3.24	0.3.25
rollup	4.63.1	4.65.0
typescript-eslint	8.68.0	8.72.0

Updates @changesets/cli from 3.0.1 to 3.0.3

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.3

Patch Changes

• #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

• #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

• Updated dependencies [3f163da, bfe9050, e522996]:

  • @​changesets/apply-release-plan@​8.1.1
  • @​changesets/config@​4.0.1

@​changesets/cli@​3.0.2

Patch Changes

• #2270 a0a4dc6 Thanks @​bluwy! - Add review message on pre exit
• Updated dependencies [1f4eb61, 059f70a]:
  • @​changesets/apply-release-plan@​8.1.0
  • @​changesets/git@​4.0.1
  • @​changesets/read@​1.0.1

Changelog

Sourced from @​changesets/cli's changelog.

3.0.3

Patch Changes

• #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

• #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

• Updated dependencies [3f163da, bfe9050, e522996]:

  • @​changesets/apply-release-plan@​8.1.1
  • @​changesets/config@​4.0.1

3.0.2

Patch Changes

• #2270 a0a4dc6 Thanks @​bluwy! - Add review message on pre exit
• Updated dependencies [1f4eb61, 059f70a]:
  • @​changesets/apply-release-plan@​8.1.0
  • @​changesets/git@​4.0.1
  • @​changesets/read@​1.0.1

Commits

• c9269c0 Version Packages (#2291)
• ca9d110 Fix pnpm 10 publishing with npm 12 (#2276)
• 7be7fde Build(deps): Bump the production-dependencies group across 1 directory with 6...
• b430ce0 Move e2e tests to an on-demand workspace (#2275)
• 93314a8 test: add happy path tests for add (#2289)
• d13a39e test: use inline snapshots for publish plan tests (#2284)
• d7e4a2d Version Packages (#2266)
• 68affee Upgrade to Vitest 5 (#2281)
• 5eeb012 Build(deps): Bump human-id in the production-dependencies group (#2279)
• a0a4dc6 Add review message on pre exit (#2270)
• Additional commits viewable in compare view

Updates @rollup/plugin-typescript from 12.3.0 to 12.3.1

Changelog

Sourced from @​rollup/plugin-typescript's changelog.

v12.3.1

2026-10-21

Bugfixes

• typescript: clear the pending program update when a build closes the watch program (#2025)

Commits

• 7d2f6e4 chore(release): typescript v12.3.1
• 79dce0e fix(typescript): clear the pending program update when a build closes the wat...
• 5800bf3 chore(repo): test migration to vitest. phase 4 (#1978)
• 7d22981 chore(repo): add rollup-plugin keyword in package.json (#1955)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​rollup/plugin-typescript since your current version.

Updates eslint from 10.9.1 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

• 4637f98 10.13.0
• 96df05c Build: changelog update for 10.13.0
• 4783a68 docs: Update README
• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
• 317fcb3 chore: update ecosystem plugins (#21409)
• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
• 43f0ac9 docs: clarify parameter description in getText (#21287)
• a39d9fb feat: add globalThis to no-obj-calls (#21382)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
• Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

• Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• cdd17f2 Release 3.9.9
• dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
• f9be58f Git blame ignore 3.9.8
• 88470cb Bump Prettier dependency to 3.9.8
• 9559cab Clean changelog_unreleased
• 4fc8ee8 Update dependents count
• Additional commits viewable in compare view

Updates publint from 0.3.24 to 0.3.25

Release notes

Sourced from publint's releases.

[email protected]

Patch Changes

• #260 54aebea - Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension

• #265 78604f3 - Skip file existence check for browser field values that point at another package

Changelog

Sourced from publint's changelog.

0.3.25

Patch Changes

• #260 54aebea - Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension

• #265 78604f3 - Skip file existence check for browser field values that point at another package

Commits

• b994a03 Release packages (#261)
• 247be99 Update dependencies (#266)
• 78604f3 Skip file check for browser field values that point at another package (#265)
• 54aebea Fix FILE_INVALID_JSX_EXTENSION not detecting the .ctsx extension (#260)
• See full diff in compare view

Updates rollup from 4.63.1 to 4.65.0

Release notes

Sourced from rollup's releases.

v4.65.0

4.65.0

2026-10-22

Features

• Support synthetic named exports in namespaces when preserving modules (#6589)

Bug Fixes

• Fix a situation where unaligned sourcemaps resulted in a wrong segment (#6591)
• Forward startup errors on native module load when starting rollup (#6592)

Pull Requests

• #6589: Merge synthetic named exports into static namespaces when preserving modules (@​b84330808, @​lukastaegert)
• #6590: Stabilize flaky watch test "treats filenames literally, not as globs" (@​lukastaegert)
• #6591: Use the last sourcemap segment for log locations after its start (@​Dev-next-gen)
• #6592: Preserve native module load errors (@​shuaiyafei, @​lukastaegert)
• #6593: Close bundles in the Gulp examples (@​shuaiyafei, @​lukastaegert)
• #6594: Improve review instructions and resolve audit (@​lukastaegert)

v4.64.12

4.64.12

2026-10-20

Bug Fixes

• Allow generating logs from transform hooks at position 0 (#6587)
• Properly handle global or sticky regular expressions for file names (#6588)

Pull Requests

• #6587: Fix transform diagnostics at position zero (@​shuaiyafei)
• #6588: Match stateful external regular expressions consistently (@​shuaiyafei)

v4.64.10

4.64.10

2026-10-18

Bug Fixes

• Avoid breaking lazy loading when a dynamic import only contains reexports from a manual chunk (#6583)
• Ensure HTML entities in JSX are properly decoded in the output (#6584)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.65.0

2026-10-22

Features

• Support synthetic named exports in namespaces when preserving modules (#6589)

Bug Fixes

• Fix a situation where unaligned sourcemaps resulted in a wrong segment (#6591)
• Forward startup errors on native module load when starting rollup (#6592)

Pull Requests

• #6589: Merge synthetic named exports into static namespaces when preserving modules (@​b84330808, @​lukastaegert)
• #6590: Stabilize flaky watch test "treats filenames literally, not as globs" (@​lukastaegert)
• #6591: Use the last sourcemap segment for log locations after its start (@​Dev-next-gen)
• #6592: Preserve native module load errors (@​shuaiyafei, @​lukastaegert)
• #6593: Close bundles in the Gulp examples (@​shuaiyafei, @​lukastaegert)
• #6594: Improve review instructions and resolve audit (@​lukastaegert)

4.64.12

2026-10-20

Bug Fixes

• Allow generating logs from transform hooks at position 0 (#6587)
• Properly handle global or sticky regular expressions for file names (#6588)

Pull Requests

• #6587: Fix transform diagnostics at position zero (@​shuaiyafei)
• #6588: Match stateful external regular expressions consistently (@​shuaiyafei)

4.64.10

2026-10-18

Bug Fixes

• Avoid breaking lazy loading when a dynamic import only contains reexports from a manual chunk (#6583)
• Ensure HTML entities in JSX are properly decoded in the output (#6584)

Pull Requests

• #6583: Track manual chunk dependencies when merging small chunks (@​ybai08, @​lukastaegert)
• #6584: Use decoded values for JSX string attributes (@​luantaraschi)

... (truncated)

Commits

• 9aac09a 4.65.0
• 56200ea Preserve native module load errors (#6592)
• 61ce2a7 Close bundles in the Gulp examples (#6593)
• fba8c01 Merge synthetic named exports into static namespaces when preserving modules ...
• 0cae2c7 Improve review instructions and resolve audit (#6594)
• 05c6ba2 Use the last sourcemap segment for log locations after its start (#6591)
• e70c19b Stabilize flaky watch test "treats filenames literally, not as globs" (#6590)
• 78d43df 4.64.12
• 375a2d0 Match stateful external regular expressions consistently (#6588)
• 3a9f4af Fix transform diagnostics at position zero (#6587)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.68.0 to 8.72.0

Release notes

Sourced from typescript-eslint's releases.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

• eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
• type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

• Abraham Guo
• Brad Zacher @​bradzacher
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Vinccool96

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.72.0 (2026-10-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)

❤️ Thank You

• Ulrich Stark @​ulrichstark

... (truncated)

Commits

• a4c2603 chore(release): publish 8.72.0
• 7488d68 chore(release): publish 8.71.2
• d57b8da chore(release): publish 8.71.1
• 8695664 chore(release): publish 8.71.0
• 23d38ce chore(release): publish 8.70.1
• eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
• 8c80531 chore: fix typos in comments and docs (#12846)
• b6b86a1 chore: migrate to nx 23.2.0 (#12843)
• 7ee7608 chore(release): publish 8.70.0
• 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (f1cbeb7) to head (950c0ce).

Additional details and impacted files

@@            Coverage Diff            @@
##              main       #58   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           18        18           
  Lines          860       860           
  Branches       143       143           
=========================================
  Hits           860       860           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.