chore(deps): lock file maintenance all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
		lockFileMaintenance	All locks refreshed
@eslint/js (source)	devDependencies	minor	9.17.0 -> 9.23.0
@rollup/plugin-commonjs (source)	devDependencies	patch	28.0.2 -> 28.0.3
@rollup/plugin-node-resolve (source)	devDependencies	patch	16.0.0 -> 16.0.1
@types/node (source)	devDependencies	minor	22.10.3 -> 22.13.14
@vitest/coverage-v8 (source)	devDependencies	minor	3.0.0 -> 3.1.1
eslint (source)	devDependencies	minor	9.17.0 -> 9.23.0
rollup (source)	devDependencies	minor	4.29.1 -> 4.38.0
semantic-release	devDependencies	patch	24.2.0 -> 24.2.3
typescript (source)	devDependencies	minor	5.7.2 -> 5.8.2
typescript-eslint (source)	devDependencies	minor	8.19.0 -> 8.29.0
vite (source)	devDependencies	minor	6.0.6 -> 6.2.4
vitest (source)	devDependencies	minor	3.0.0 -> 3.1.1

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

eslint/eslint (@​eslint/js)

v9.23.0

Compare Source

v9.22.0

Compare Source

v9.21.0

Compare Source

Features

• 418717f feat: introduce new deprecated types for rules (#​19238) (fnx)
• 5c5b802 feat: Add --ext CLI option (#​19405) (Milos Djermanovic)

Bug Fixes

• db5340d fix: update missing plugin message template (#​19445) (Milos Djermanovic)
• d8ffdd4 fix: do not exit process on rule crash (#​19436) (Francesco Trotta)

Documentation

• c5561ea docs: Update README (GitHub Actions Bot)
• 80b0485 docs: replace var with let and const in rule example (#​19434) (Tanuj Kanti)
• f67d5e8 docs: Update README (GitHub Actions Bot)
• 75afc61 docs: Update README (GitHub Actions Bot)
• 0636cab docs: Update Eleventy from v2 to v3 (#​19415) (Amaresh S M)
• dd7d930 docs: Update README (GitHub Actions Bot)

Chores

• a8c9a9f chore: update @eslint/eslintrc and @eslint/js (#​19453) (Francesco Trotta)
• 265e0cf chore: package.json update for @​eslint/js release (Jenkins)
• 3401b85 test: add test for Rule.ReportDescriptor type (#​19449) (Francesco Trotta)
• e497aa7 chore: update rewrite dependencies (#​19448) (Francesco Trotta)
• dab5478 chore: better error message for missing plugin in config (#​19402) (Tanuj Kanti)
• ebfe2eb chore: set js language for bug report issue config block (#​19439) (Josh Goldberg ✨)
• 5fd211d test: processors can return subpaths (#​19425) (Milos Djermanovic)

v9.20.0

Compare Source

Features

• e89a54a feat: change behavior of inactive flags (#​19386) (Milos Djermanovic)

Bug Fixes

• 91d4d9f fix: Bring types in sync with @​eslint/core (#​19157) (Nicholas C. Zakas)
• fa25c7a fix: Emit warning when empty config file is used (#​19399) (Nicholas C. Zakas)
• 31a9fd0 fix: Clearer error message for wrong plugin format (#​19380) (Nicholas C. Zakas)
• 61d99e3 fix: Better error message for unserializable parser (#​19384) (Nicholas C. Zakas)
• db1b9a6 fix: Ensure module scope is checked for references in consistent-this (#​19383) (Nicholas C. Zakas)
• 8bcd820 fix: arrow-body-style crash with single-token body (#​19379) (Milos Djermanovic)

Documentation

• b7012c8 docs: rewrite examples with var using let and const (#​19407) (Mueez Javaid Hashmi)
• 6406376 docs: Update README (GitHub Actions Bot)
• 350f2b9 docs: rewrite some examples with var using let and const (#​19404) (Mueez Javaid Hashmi)
• 93c325a docs: rewrite examples with var using let and const (#​19398) (Mueez Javaid Hashmi)
• 56ff404 docs: replace var with let or const in rules docs (#​19396) (Daniel Harbrueger)
• 4053226 docs: change sourceType in no-eval examples (#​19393) (Milos Djermanovic)
• 1324af0 docs: replace var with let and const in rules docs (#​19392) (Daniel Harbrueger)
• 8b87e00 docs: replace var with const and let in rules (#​19389) (Tanuj Kanti)
• 758c66b docs: Explain what frozen rules mean (#​19382) (Nicholas C. Zakas)
• 0ef8bb8 docs: additional checks for rule examples (#​19358) (Milos Djermanovic)
• 58ab2f6 docs: fix order of installation steps in getting started (#​19326) (Tanuj Kanti)

Chores

• 979097a chore: upgrade @​eslint/js@​9.20.0 (#​19412) (Francesco Trotta)
• 031734e chore: package.json update for @​eslint/js release (Jenkins)
• d4c47c3 test: avoid empty config warning in test output (#​19408) (Milos Djermanovic)
• 67dd82a chore: update dependency @​eslint/json to ^0.10.0 (#​19387) (renovate[bot])
• 15ac0e1 chore: add permissions: read-all to stale.yml workflow (#​19374) (Josh Goldberg ✨)

v9.19.0

Compare Source

Features

• 1637b8e feat: add --report-unused-inline-configs (#​19201) (Josh Goldberg ✨)

Bug Fixes

• aae6717 fix: sync rule type header comments automatically (#​19276) (Francesco Trotta)

Documentation

• cfea9ab docs: Clarify overrideConfig option (#​19370) (Nicholas C. Zakas)
• 2b84f66 docs: Update README (#​19362) (Nicholas C. Zakas)
• 044f93c docs: clarify frozen rule description (#​19351) (Pavel)
• 797ee7c docs: fix Bluesky links (#​19368) (Milos Djermanovic)
• 81a9c0e docs: Update README (GitHub Actions Bot)
• 093fb3d docs: replace var with let and const in rule examples (#​19365) (Tanuj Kanti)
• 417de32 docs: replace var with const in rule examples (#​19352) (jj)
• 17f2aae docs: update getting-started config to match default generated config (#​19308) (0xDev)
• 8a0a5a8 docs: better global ignores instruction (#​19297) (Jacopo Marrone)
• 6671a2c docs: Update README (GitHub Actions Bot)
• e39d3f2 docs: fix divider for rule category (#​19264) (Tanuj Kanti)
• e0cf53f docs: fix search result box position for small screens (#​19328) (Tanuj Kanti)
• f92a680 docs: replace var with let or const in rule examples (#​19331) (Ravi Teja Kolla)
• b04b84b docs: revert accidental changes in TS config files docs (#​19336) (Francesco Trotta)

Chores

• 9b9cb05 chore: upgrade @​eslint/js@​9.19.0 (#​19371) (Milos Djermanovic)
• 58560e7 chore: package.json update for @​eslint/js release (Jenkins)
• 2089707 test: fix failing test in Node.js v22.13.0 (#​19345) (Francesco Trotta)

v9.18.0

Compare Source

Features

• e84e6e2 feat: Report allowed methods for no-console rule (#​19306) (Anna Bocharova)
• 8efc2d0 feat: unflag TypeScript config files (#​19266) (Francesco Trotta)
• 87a9352 feat: check imports and class names in no-shadow-restricted-names (#​19272) (Milos Djermanovic)

Bug Fixes

• da768d4 fix: correct overrideConfigFile type (#​19289) (Francesco Trotta)

Documentation

• d9c23c5 docs: replace var with const in rule examples (#​19325) (Tanuj Kanti)
• 8e1a898 docs: add tabs to cli code blocks (#​18784) (Jay)
• f3aeefb docs: rewrite using let and const in rule examples (#​19320) (PoloSpark)
• 0b680b3 docs: Update README (GitHub Actions Bot)
• 98c86a9 docs: Edit this page button link to different branches (#​19228) (Tanuj Kanti)
• 6947901 docs: remove hardcoded edit link (#​19323) (Milos Djermanovic)
• 03f2f44 docs: rewrite var with const in rules examples (#​19317) (Thiago)
• 26c3003 docs: Clarify dangers of eslint:all (#​19318) (Nicholas C. Zakas)
• c038257 docs: add eqeqeq in related rules to no-eq-null (#​19310) (루밀LuMir)
• 89c8fc5 docs: rewrite examples with var using let and const (#​19315) (Amaresh S M)
• db574c4 docs: add missing backticks to no-void (#​19313) (루밀LuMir)
• 8d943c3 docs: add missing backticks to default-case-last (#​19311) (루밀LuMir)
• 36ef8bb docs: rewrite examples with var using let and const (#​19298) (Amaresh S M)
• 1610c9e docs: add missing backticks to no-else-return (#​19309) (루밀LuMir)
• df409d8 docs: Update README (GitHub Actions Bot)
• 2e84213 docs: Fix Horizontal Scroll Overflow in Rule Description on Mobile View (#​19304) (Amaresh S M)
• 6e7361b docs: replace var with let and const in rule example (#​19302) (Tanuj Kanti)
• 069af5e docs: rewrite var using const in rule examples (#​19303) (Kim GyeonWon)
• 064e35d docs: remove 'I hope to' comments from scope-manager-interface (#​19300) (Josh Goldberg ✨)
• 8e00305 docs: replace var with const in rule examples (#​19299) (Tanuj Kanti)
• a559009 docs: Add warning about extending core rules (#​19295) (Nicholas C. Zakas)
• 0bfdf6c docs: Update README (GitHub Actions Bot)
• ce0b9ff docs: add navigation link for code explorer (#​19285) (Tanuj Kanti)
• e255cc9 docs: add bluesky icon to footer (#​19290) (Tanuj Kanti)
• 5d64851 docs: remove outdated info about environments (#​19296) (Francesco Trotta)
• eec01f0 docs: switch rule examples config format to languageOptions (#​19277) (Milos Djermanovic)
• b36ca0a docs: Fixing Focus Order by Rearranging Element Sequence (#​19241) (Amaresh S M)
• d122c8a docs: add missing backticks to sort-imports (#​19282) (루밀LuMir)
• 0367a70 docs: update custom parser docs (#​19288) (Francesco Trotta)
• 8c07ebb docs: add border-radius to hX:target selector styles (#​19270) (루밀LuMir)
• eff7c57 docs: add limitation section in no-loop-func (#​19287) (Tanuj Kanti)
• 5db226f docs: add missing backticks in various parts of the documentation (#​19269) (루밀LuMir)
• 789edbb docs: Update README (GitHub Actions Bot)
• 613c06a docs: mark rules that are frozen with ❄️ (#​19231) (Amaresh S M)
• 43172ec docs: Update README (GitHub Actions Bot)
• ac8b3c4 docs: fix description of overrideConfigFile option (#​19262) (Milos Djermanovic)
• bbb9b46 docs: Update README (GitHub Actions Bot)
• 995b492 docs: fix inconsistent divider in rule categories box (#​19249) (Tanuj Kanti)
• f76d05d docs: Refactor search result handling with better event listener cleanup (#​19252) (Amaresh S M)
• c5f3d7d docs: Update README (GitHub Actions Bot)

Chores

• c52be85 chore: upgrade to @eslint/[email protected] (#​19330) (Francesco Trotta)
• 362099c chore: package.json update for @​eslint/js release (Jenkins)
• 495aa49 chore: extract package name from package.json for public interface (#​19314) (루밀LuMir)
• 6fe0e72 chore: update dependency @​eslint/json to ^0.9.0 (#​19263) (renovate[bot])

rollup/plugins (@​rollup/plugin-commonjs)

v28.0.3

2025-03-06

Bugfixes

• fix: fix error when bundle contains require() of module with falsy __esModule export (#​1850)

rollup/plugins (@​rollup/plugin-node-resolve)

v16.0.1

2025-03-11

Bugfixes

• fix: add ignoreSideEffectsForRoot to exported interface (#​1841)

vitest-dev/vitest (@​vitest/coverage-v8)

v3.1.1

Compare Source

   🐞 Bug Fixes

• reporter:
  • Report tests in correct order  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7752 (b166e)
  • Print test only once in the verbose mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7738 (69ca4)

    View changes on GitHub

v3.1.0

Compare Source

v3.0.9

Compare Source

v3.0.8

Compare Source

   🐞 Bug Fixes

• Fix fetch cache multiple writes  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7546 (1a8b4)
• Use browser.isolate instead of config.isolate  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7560 (4b5ed)
• Remove vestigial spy stub, import directly from @vitest/spy  -  by @​mrginglymus in https://github.com/vitest-dev/vitest/issues/7575 (7f7ff)
• Correctly split the argv string  -  by @​btea in https://github.com/vitest-dev/vitest/issues/7533 (4325a)
• browser:
  • Remove @​testing-library/dom from dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7555 (5387a)
  • Improve source map handling for bundled files  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7534 (e2c57)
  • Print related test file and potential test in unhandled errors  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7564 (fee90)
• runner:
  • Fix beforeEach/All cleanup callback timeout  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7500 (0c292)
  • Fix and simplify Task.suite initialization  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7414 (ca9ff)
• snapshot:
  • Allow inline snapshot calls on same location with same snapshot  -  by @​jycouet and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7464 (d5cb8)
• vite-node:
  • Fix buildStart on Vite 6  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7480 (c0f47)

    View changes on GitHub

v3.0.7

Compare Source

   🐞 Bug Fixes

• browser: Support webdriverio 9  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7553 (b1949)
• deps: Update all non-major dependencies  -  in https://github.com/vitest-dev/vitest/issues/7543 (365ff)
• expect: Correct generic MatchersObject this type in expect.extend  -  by @​Workingstiff-s in https://github.com/vitest-dev/vitest/issues/7526 (d5765)
• mocker: Include more modules to prefix-only module list  -  by @​btea in https://github.com/vitest-dev/vitest/issues/7524 (a12ec)
• spy: Clear/reset/restore mocks in stack order  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7499 (f7100)

   🏎 Performance

• browser: Do wdio context switching only once per file  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7549 (aaa58)

    View changes on GitHub

v3.0.6

Compare Source

   🐞 Bug Fixes

• Fix getMockedSystemTime for useFakeTimer  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7405 (03912)
• Compat for jest-image-snapshot  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7390 (9542b)
• Ensure project names are readable in dark terminals  -  by @​rgrove in https://github.com/vitest-dev/vitest/issues/7371 (bb94c)
• Exclude queueMicrotask from default fake timers to not break node fetch  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7505 (167a9)
• browser:
  • Fix mocking modules out of root  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7415 (d3acb)
  • Fix toHaveClass typing  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7383 (7ef23)
  • Relax locator selectors methods  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7422 (1b8c5)
  • Resolve thread count from maxWorkers  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7483 (adbb2)
  • Cleanup timeout on resolve and give more information in the error  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7487 (5a45a)
• coverage:
  • vite-node to pass correct execution wrapper offset  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7417 (1f2e5)
  • Preserve moduleExecutionInfo in non-isolated runs  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7486 (f31a0)
• deps:
  • Update all non-major dependencies  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7363 (e348b)
  • Update all non-major dependencies  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7507 (6cc40)
• init:
  • Invalid browser config  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7475 (8fe64)
• reporters:
  • Render tasks in tree when in TTY  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7503 (027ce)
• vite-node:
  • Remove fake first line mapping on Vite 6  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7124 (b9973)
• watch:
  • Properly remove cache after removing existing test files  -  by @​soc221b in https://github.com/vitest-dev/vitest/issues/7399 (01a59)
• workspace:
  • Forward inspect related cli options  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7373 (ed15b)

    View changes on GitHub

v3.0.5

Compare Source

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

🚀 Features

• ui: Insert message "no tests found" in ui - by @​DevJoaoLopes in https://github.com/vitest-dev/vitest/issues/7366 (92da4)

🐞 Bug Fixes

• Validate websocket request - by @​hi-ogawa and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7317 (191ef)
• Don't toggle cli cursor on non-TTY - by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7336 (3c805)
• vite-node: Differentiate file url with hash and query - by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7365 (926ca)

View changes on GitHub

v3.0.4

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963

   🐞 Bug Fixes

• Filter projects eagerly during config resolution  -  by @​sheremet-va and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7313 (dff44)
• Apply development|production condition on Vites 6 by @​hi-ogawa and @​sheremet-va (#​7301) (ef146)
• browser: Restrict served files from /__screenshot-error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7340 (ed9ae)
• deps: Update all non-major dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7297 (38ea8)
• runner: Timeout long sync hook  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7289 (c60ee)
• typechecking: Support typechecking parsing with Vite 6  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7335 (bff70)
• types: Fix public types  -  by @​mrginglymus and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7328 (ce6af)

    View changes on GitHub

v3.0.3

Compare Source

   🐞 Bug Fixes

• browser:
  • Don't throw a validation error if v8 coverage is used with filtered instances  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7306 (fa463)
  • Don't fail when running --browser.headless if the browser projest is part of the workspace  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7311 (e43a8)

   🏎 Performance

• reporters: Update summary only when needed  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/7291 (7f36b)

    View changes on GitHub

v3.0.2

Compare Source

   🐞 Bug Fixes

• Don't await an empty timeout after every test  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7281 (ef1aa)
• expect: Fix expect().resolves/rejects chain typings  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7273 (fa415)

    View changes on GitHub

v3.0.1

Compare Source

   🐞 Bug Fixes

• Revert "fix: re-apply default conditions if using vite 6 or later ([https://github.com/fix: re-apply default conditions if using vite 6 or later vitest-dev/vitest#7071](https://github.com/vitest-dev/vitest/iss

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.