build(deps): bump the npm-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the npm-dependencies group with 5 updates in the / directory:

Package	From	To
js-yaml	5.4.2	5.4.3
smol-toml	1.9.0	1.9.1
web-tree-sitter	0.27.0	0.27.1
@types/node	26.6.4	26.6.5
esmock	2.7.6	2.7.9

Updates js-yaml from 5.4.2 to 5.4.3

Changelog

Sourced from js-yaml's changelog.

[5.4.3] - 2026-10-06

Fixed

• Fixed loading a whitespace-only block scalar followed by a less indented line, #802.

Commits

• 7832624 5.4.3 released
• 0cbb471 Fix whitespace-only block scalar followed by a less indented line, close #802
• 30108cc Parse the first block mapping key once (#800)
• See full diff in compare view

Updates smol-toml from 1.9.0 to 1.9.1

Release notes

Sourced from smol-toml's releases.

v1.9.1

What's Changed

• fix: reject invalid extra exponent sign by @​cyyynthia

Full Changelog: squirrelchat/smol-toml@v1.9.0...v1.9.1

Commits

• 69aa050 fix: actually properly fix exponent issues
• 7be7084 chore: version bump
• be3290d chore: upgrade deps
• 86c7613 fix: reject invalid extra exponent sign
• See full diff in compare view

Updates web-tree-sitter from 0.27.0 to 0.27.1

Release notes

Sourced from web-tree-sitter's releases.

v0.27.1

What's Changed

• fix: decode UTF-16 surrogate pairs with input endianness by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5913
• fix(cli)!: fix query test capture range matching across lines by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5918
• fix(rust): address new nightly lints by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5921
• fix(generate): resolve token names in debug output by @​WillLillis in tree-sitter/tree-sitter#5941
• fix(generate): keep GCC jump tables enabled for large lexers by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5985
• fix(generate): exclude external word tokens from keyword extraction by @​WillLillis in tree-sitter/tree-sitter#5989
• fix(lib): check shifted stack versions during error recovery by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#5998
• fix(generate): detect indirect recursion in flattened productions by @​WillLillis in tree-sitter/tree-sitter#6003
• fix: preserve column dependency when balancing repeat nodes by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6006
• perf(lib): acquire capture lists from a free stack instead of scanning by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6012
• fix(build): don't compile the Wasm stdlib into Emscripten builds by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6015
• fix: various query issues by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6017
• fix(rust): ban std::fs::canonicalize by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6018
• fix(bindings): load Node bindings under Bun again by @​tree-sitter-ci-bot[bot] in tree-sitter/tree-sitter#6021
• release v0.27.1 by @​clason in tree-sitter/tree-sitter#6024

Full Changelog: tree-sitter/tree-sitter@v0.27.0...v0.27.1

Commits

• 10eb5ac release v0.27.1
• 4eb3973 fix(web): pass the progress callback to the cursor in Query.captures
• 60cdb55 fix(test): give the query timeout tests room to time out
• See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

• See full diff in compare view

Updates esmock from 2.7.6 to 2.7.9

Release notes

Sourced from esmock's releases.

output esmockLoader.deprecated.js with esbuild

generates esmockLoader.deprecated.js with esbuild on publish, so module is self-contained and doesn't import any missing modules discluded from publish

include esmockLoader.deprecated.js in published sources

This release includes esmockLoader.deprecated.js in the published src directory. Yesterday's release did not include the file and caused some problems

• unpublished version 2.7.7
• include esmockLoader.deprecated.js in published src directory

prefer registerHooks over deprecated register

This release fixes a deprecation warning notice for module.register calls; recommended module.registerHooks is called when the environment defines that.

Actual changes are small. For registerHooks, deprecated module.register functions were copy-pasted and converted to sync from async,

• update github ci actions
• use module.registerHooks when defined, resolves module.register deprecation warning
• increment eslint and lint-related

Changelog

Sourced from esmock's changelog.

changelog

• 2.7.9 Oct.08.2026
  • include esmockLoader.deprecated.js in published src directory as esbuild output to provide full import tree for that module
• 2.7.8 Oct.08.2026
  • unpublished version 2.7.7
  • include esmockLoader.deprecated.js in published src directory
• 2.7.7 Oct.06.2026
  • update github ci actions
  • use module.registerHooks when defined, resolves module.register deprecation warning
  • increment eslint and lint-related
• 2.7.6 May.27.2026
  • update test-coverage badge to reference "main" branch,
  • specify node v24 at build+publish ci-job
  • increment eslint and lint-related
  • increment resolvewithplus, resolves wildcard-export-related issue. see iambumblehead/resolvewithplus#76
• 2.7.5 May.09.2026
  • migrate to eslint 10
  • migrate to @​eslint/markdown
  • remove c8 test-coverage package, use node's --test-cover
• 2.7.4 May.04.2026
  • update tests to resolve tests that began to fail,
  • add suuport for typescript modules, no tests, thanks @​mbrevda,
  • add node 25.x to test matrix,
  • disable tests using node-ts (seems un-maintained),
  • windows tests are disabled for "tests-node", lacking windows env to resolve
• 2.7.3 Sep.12.2025
  • drop node version 18 and 20 from tests.
  • increment some dependencies and reduce audit warnings.
  • restore ava and all other disabled test-runner tests
• 2.7.2 Sep.01.2025
  • increment resolvewithplus, match exact export paths, thanks @​matz3
• 2.7.1 Jul.01.2025
  • added node v24 to test matrix
• 2.7.0 Jan.24.2025
  • update resolver to correctly resolve openai package
  • update typescript-eslint
• 2.6.9 Oct.18.2024
  • added --glob option for rimraf usage removing un-used sources
  • added node v23 to test matrix
  • resolve v23-related error when module.exports is exported
• 2.6.8 Oct.17.2024
  • added pnpm unit-test, thanks @​darcyrush
  • resolve issue for pnpm by escaping '+' char in regexp
  • add log utility function for debugging loader
  • dropped ava and jest from test sequence, node v22 --loader issues
• 2.6.7 Jul.16.2024
  • add swc tests and remove swc caution from README thanks @​Brooooooklyn
  • unpin node 22.1 at test CI and use latest 22.x
• 2.6.6 Jun.15.2024

... (truncated)

Commits

• f3c4062 Merge pull request #347 from iambumblehead/add-esmockloader-deprecated-js-as-...
• 3b6b53a add esmockloader.deprecated.js as esbuild output
• b351631 Merge pull request #346 from iambumblehead/add-esmockloader-deprecated-js
• 0c74569 increment version
• 9122973 update CHANGELOG.md
• c95d729 update CHANGELOG.md
• 7b433a0 do not delete deprecated from src
• a99c19c do not delete deprecated from src
• 5493dff Merge pull request #344 from iambumblehead/update-eslint
• 35f2dfa increment eslint and related
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.94%. Comparing base (04ae450) to head (7807cc0).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #670   +/-   ##
=======================================
  Coverage   91.94%   91.94%           
=======================================
  Files          45       45           
  Lines       10996    10996           
  Branches     2002     2002           
=======================================
  Hits        10110    10110           
  Misses        886      886           

Flag	Coverage Δ
unit-tests	91.94% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.