[dependabot]

Bumps the dev-dependencies group with 15 updates in the / directory:

Package	From	To
@playwright/test	1.58.2	1.65.0
@types/bun	1.3.11	1.4.4
@typescript-eslint/eslint-plugin	8.58.0	8.72.1
@typescript-eslint/parser	8.58.0	8.72.1
@vitest/eslint-plugin	1.6.14	1.6.28
apache-arrow	21.1.0	21.2.0
eslint	10.2.0	10.14.0
eslint-plugin-import-x	4.16.2	4.17.1
eslint-plugin-security	4.0.0	4.2.1
fast-check	4.6.0	4.10.2
postprocessing	6.39.1	6.39.6
prettier	3.8.1	3.9.10
three	0.184.0	0.187.0
@types/three	0.183.1	0.187.0
vite	8.0.8	8.3.6

Updates @playwright/test from 1.58.2 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

• There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
• Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
• Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
• Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

• New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

  test('restart the server', { lock: '-exclusive-' }, async () => {
    // No other test runs while this one is running.
  });

• test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

  test('upload a file', async ({ page }) => {
    test.skip('Not implemented yet');
  });

... (truncated)

Commits

• a1f35e1 chore: mark v1.65.0 (#43925)
• a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
• 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
• daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
• 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
• 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
• 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
• d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
• 6e3f5ff docs: release notes for v1.65 (#43874)
• aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
• Additional commits viewable in compare view

Updates @types/bun from 1.3.11 to 1.4.4

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.58.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• eslint-plugin: lazy load rules (#13010)

🩹 Fixes

• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

... (truncated)

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
• 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
• c49d287 chore: [ci] test on oldest supported TS version (#13024)
• 594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
• a4c2603 chore(release): publish 8.72.0
• c6eb98c feat(eslint-plugin): [await-thenable] add allowMixedPromiseArrays option (#...
• b382b74 fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...
• 79edd89 fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.58.0 to 8.72.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

... (truncated)

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• a4c2603 chore(release): publish 8.72.0
• 7488d68 chore(release): publish 8.71.2
• d57b8da chore(release): publish 8.71.1
• 8695664 chore(release): publish 8.71.0
• 23d38ce chore(release): publish 8.70.1
• 7ee7608 chore(release): publish 8.70.0
• 9a6e546 chore(release): publish 8.69.0
• 8f4e00a chore(release): publish 8.68.0
• Additional commits viewable in compare view

Updates @vitest/eslint-plugin from 1.6.14 to 1.6.28

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.28

   🐞 Bug Fixes

• parse-vitest-fn-call: Recognize member-form hooks like test.aroundAll  -  by @​MFA-G in vitest-dev/eslint-plugin-vitest#959 (8eb69)
• prefer-comparison-matcher: Skip non-numeric operands with typecheck  -  by @​RagedPanda in vitest-dev/eslint-plugin-vitest#984 (a6acf)
• prefer-describe-function-title: Ignore type-only imports  -  by @​MFA-G in vitest-dev/eslint-plugin-vitest#957 (e2aaa)
• prefer-spy-on: Pass an implementation to mockImplementation in the fix  -  by @​RaphaelFakhri in vitest-dev/eslint-plugin-vitest#982 (4c0ae)
• unbound-method: Account for optional chaining  -  by @​G-Rath in vitest-dev/eslint-plugin-vitest#975 (743f8)

    View changes on GitHub

v1.6.27

   🐞 Bug Fixes

• valid-title:
  • Refine the reportEmptyTitle message  -  by @​ysknsid25 in vitest-dev/eslint-plugin-vitest#941 (08973)
  • Handle missing argument in valid-title rule  -  by @​ysknsid25 in vitest-dev/eslint-plugin-vitest#942 (ef700)

    View changes on GitHub

v1.6.26

   🐞 Bug Fixes

• Detect test modes in options objects  -  by @​Guflly in vitest-dev/eslint-plugin-vitest#937 (68454)

    View changes on GitHub

v1.6.25

   🐞 Bug Fixes

• valid-expect: Support expect.assert members  -  by @​happykawayigt and Guan Tong in vitest-dev/eslint-plugin-vitest#936 (bc37d)

    View changes on GitHub

v1.6.24

   🐞 Bug Fixes

• valid-expect: Fix poll and element taking 1 or 2 arguments  -  by @​julienw in vitest-dev/eslint-plugin-vitest#931 (57e53)

    View changes on GitHub

v1.6.23

   🚀 Features

• prefer-expect-assertions: Add disallowHasAssertions option  -  by @​ssssota in vitest-dev/eslint-plugin-vitest#929 (5e1e1)

   🐞 Bug Fixes

• 8 warnings for unexpected node version input  -  by @​hirehamir in vitest-dev/eslint-plugin-vitest#928 (394dd)
• valid-expect: Handle static expect APIs  -  by @​w3lld1 in vitest-dev/eslint-plugin-vitest#930 (79232)

... (truncated)

Commits

• c5df105 chore: release v1.6.28
• 8eb6991 fix(parse-vitest-fn-call): recognize member-form hooks like test.aroundAll ...
• e2aaac6 fix(prefer-describe-function-title): ignore type-only imports (#957)
• 4c0ae5a fix(prefer-spy-on): pass an implementation to mockImplementation in the fix (...
• a6acf78 fix(prefer-comparison-matcher): skip non-numeric operands with typecheck (#984)
• 743f81f fix(unbound-method): account for optional chaining (#975)
• 8bdb180 docs: typo in prefer-to-contain rule docs (#973)
• 0bea6e1 refactor(valid-expect): remove unneeded conditions and use optional chaining ...
• b3636d8 docs(consistent-test-it): fixed the description of the consistent-test-it opt...
• 22d672a chore: Update TypeScript version to v6 (#945)
• Additional commits viewable in compare view

Updates apache-arrow from 21.1.0 to 21.2.0

Release notes

Sourced from apache-arrow's releases.

Apache Arrow JS 21.2.0

What's Changed

• chore: bump memfs from 4.39.0 to 4.48.1 by @​dependabot[bot] in apache/arrow-js#301
• chore: bump @​types/node from 24.5.2 to 24.7.0 by @​dependabot[bot] in apache/arrow-js#304
• chore: bump google-closure-compiler from 20250903.0.0 to 20251001.0.0 by @​dependabot[bot] in apache/arrow-js#303
• chore: bump typescript-eslint from 8.45.0 to 8.46.1 by @​dependabot[bot] in apache/arrow-js#306
• chore: bump del from 8.0.0 to 8.0.1 by @​dependabot[bot] in apache/arrow-js#307
• chore: bump @​rollup/plugin-node-resolve from 16.0.1 to 16.0.3 by @​dependabot[bot] in apache/arrow-js#312
• chore: bump webpack from 5.102.0 to 5.102.1 by @​dependabot[bot] in apache/arrow-js#313
• chore: bump actions/setup-node from 5.0.0 to 6.0.0 by @​dependabot[bot] in apache/arrow-js#314
• chore: bump actions/download-artifact from 5.0.0 to 6.0.0 by @​dependabot[bot] in apache/arrow-js#316
• chore: bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in apache/arrow-js#317
• chore: bump @​types/node from 24.7.0 to 24.9.1 by @​dependabot[bot] in apache/arrow-js#318
• chore: bump memfs from 4.48.1 to 4.49.0 by @​dependabot[bot] in apache/arrow-js#319
• fix: Fix precision loss in IntervalMonthDayNano nanosecond by @​GeorgeLeePatterson in apache/arrow-js#321
• chore: bump del-cli from 6.0.0 to 7.0.0 by @​dependabot[bot] in apache/arrow-js#328
• chore: bump eslint from 9.36.0 to 9.39.1 by @​dependabot[bot] in apache/arrow-js#331
• chore: bump actions/checkout from 5.0.0 to 5.0.1 by @​dependabot[bot] in apache/arrow-js#338
• chore: bump glob from 11.0.3 to 12.0.0 by @​dependabot[bot] in apache/arrow-js#335
• chore: Use relative link for LICENSE.txt by @​Divyanshu-s13 in apache/arrow-js#339
• feat: Add support for BinaryView and Utf8View types by @​GeorgeLeePatterson in apache/arrow-js#320
• chore: bump actions/checkout from 5.0.1 to 6.0.0 by @​dependabot[bot] in apache/arrow-js#343
• chore: bump webpack-bundle-analyzer from 4.10.2 to 5.0.1 by @​dependabot[bot] in apache/arrow-js#342
• chore: bump webpack from 5.102.1 to 5.103.0 by @​dependabot[bot] in apache/arrow-js#345
• chore: bump esbuild from 0.25.10 to 0.27.0 by @​dependabot[bot] in apache/arrow-js#332
• chore: bump actions/setup-python from 6.0.0 to 6.1.0 by @​dependabot[bot] in apache/arrow-js#347
• chore: bump actions/setup-node from 6.0.0 to 6.1.0 by @​dependabot[bot] in apache/arrow-js#348
• chore: bump glob from 12.0.0 to 13.0.0 by @​dependabot[bot] in apache/arrow-js#350
• chore: bump typescript-eslint from 8.46.1 to 8.49.0 by @​dependabot[bot] in apache/arrow-js#351
• chore: bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in apache/arrow-js#349
• chore: bump actions/cache from 4.3.0 to 5.0.1 by @​dependabot[bot] in apache/arrow-js#352
• chore: bump actions/upload-artifact from 5.0.0 to 6.0.0 by @​dependabot[bot] in apache/arrow-js#353
• chore: bump actions/download-artifact from 6.0.0 to 7.0.0 by @​dependabot[bot] in apache/arrow-js#354
• chore: bump typescript-eslint from 8.49.0 to 8.50.0 by @​dependabot[bot] in apache/arrow-js#355
• chore: bump @​rollup/plugin-alias from 5.1.1 to 6.0.0 by @​dependabot[bot] in apache/arrow-js#356
• chore: bump eslint-plugin-jest from 29.0.1 to 29.9.0 by @​dependabot[bot] in apache/arrow-js#357
• chore: bump @​types/lz4js from 0.2.1 to 0.2.2 by @​dependabot[bot] in apache/arrow-js#358
• chore: bump memfs from 4.49.0 to 4.51.1 by @​dependabot[bot] in apache/arrow-js#359
• chore: bump typescript-eslint from 8.50.0 to 8.51.0 by @​dependabot[bot] in apache/arrow-js#360
• chore: bump webpack-bundle-analyzer from 5.0.1 to 5.1.1 by @​dependabot[bot] in apache/arrow-js#362
• chore: bump webpack from 5.103.0 to 5.104.1 by @​dependabot[bot] in apache/arrow-js#363
• chore: bump actions/setup-node from 6.1.0 to 6.2.0 by @​dependabot[bot] in apache/arrow-js#364
• chore: bump actions/cache from 5.0.1 to 5.0.2 by @​dependabot[bot] in apache/arrow-js#365
• chore: bump @​swc/helpers from 0.5.17 to 0.5.18 by @​dependabot[bot] in apache/arrow-js#366
• chore: bump eslint from 9.39.1 to 9.39.2 by @​dependabot[bot] in apache/arrow-js#367
• chore: bump lodash from 4.17.21 to 4.17.23 by @​dependabot[bot] in apache/arrow-js#368
• chore: bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in apache/arrow-js#369
• chore: bump actions/setup-python from 6.1.0 to 6.2.0 by @​dependabot[bot] in apache/arrow-js#370
• chore: bump @​swc/core from 1.13.5 to 1.15.10 by @​dependabot[bot] in apache/arrow-js#372
• fix: Resolve TS2352 type error in MapBuilder for TypeScript 5.6+ by @​Divyanshu-s13 in apache/arrow-js#373

... (truncated)

Commits

• 04ced72 chore: Bump version to 21.2.0 (#459)
• 6485275 chore: drop command-line-args/usage and @​swc/helpers from runtime deps (#441)
• 936e283 chore: bump typedoc from 0.28.17 to 0.28.19 (#453)
• 31bfd19 chore: bump actions/setup-python from 6.2.0 to 6.3.0 (#452)
• 5933ec1 chore: bump actions/cache from 5.0.5 to 6.1.0 (#451)
• 12a0332 chore: bump @​swc/helpers from 0.5.19 to 0.5.23 (#449)
• 2e68d2a chore: bump actions/checkout from 6.0.3 to 7.0.0 (#448)
• f2ad02f chore: bump markdown-it from 14.1.0 to 14.2.0 (#447)
• cbc3074 chore: bump command-line-usage from 7.0.3 to 7.0.4 (#443)
• 5cdc69d chore: bump esbuild from 0.27.3 to 0.28.1 (#442)
• Additional commits viewable in compare view

Updates eslint from 10.2.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

• d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
• 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
• 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
• cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
• 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

• 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
• dab466e docs: Update README (GitHub Actions Bot)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
• 7697550 docs: Update README (GitHub Actions Bot)
• 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
• 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
• e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
• a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
• 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
• 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
• 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
• 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])

... (truncated)

Commits

• 12cbff4 10.14.0
• 6b696e7 Build: changelog update for 10.14.0
• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
• 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
• dab466e docs: Update README
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419)
• Additional commits viewable in compare view

Updates eslint-plugin-import-x from 4.16.2 to 4.17.1

Release notes

Sourced from eslint-plugin-import-x's releases.

v4.17.1

Patch Changes

• #498

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: bb4ec564-2e48-41c8-abf6-a6fcf248e0c0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[bbopen]

Triage notes on the failing gate (run 42606504856) — this is the group-bundle problem, not a real regression:

1. AssertionError: expected '21.2.0' to be '21.1.0' — one of the 15 group bumps moves a package from 21.1.0 to 21.2.0 and a test asserts the pinned version. Same hard-pin fragility class as test: hard-pinned apache-arrow version in numeric-oracle test breaks every lockfile refresh #367 (apache-arrow) and tw-layout-lint feat(codec): auto-register Arrow decoder #36 (typescript-tooling group bundling a TS major).
2. pyodide-browser: Error: Pyodide and Playwright must use the reviewed exact versions — the group bump touches pyodide/playwright, which the guard intentionally pins to reviewed exacts; those should be excluded from the dependabot group.

Suggested fix (not applied): exclude pyodide + playwright from the dev-dependencies group in .github/dependabot.yml (separate, individually-reviewed pins), and update the version assertion to read from the lockfile instead of a hard-coded string. Main is green; no action needed on the default branch.