chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the dev-minor-and-patch-dependencies group with 7 updates in the / directory:

Package	From	To
@eslint/js	9.39.1	9.39.2
@msgpack/msgpack	3.1.2	3.1.3
@stylistic/eslint-plugin	5.6.1	5.7.0
body-parser	2.2.1	2.2.2
bun	1.3.3	1.3.5
eslint	9.39.1	9.39.2
eslint-plugin-cypress	5.2.0	5.2.1

Updates @eslint/js from 9.39.1 to 9.39.2

Release notes

Sourced from @​eslint/js's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• c43ce24 chore: package.json update for @​eslint/js release
• See full diff in compare view

Updates @msgpack/msgpack from 3.1.2 to 3.1.3

Release notes

Sourced from @​msgpack/msgpack's releases.

v3.1.3

What's Changed

• use TypeScript 7.0-preview to compile this project by @​gfx in msgpack/msgpack-javascript#280
• More specific data types - ArrayBuffer instead of ArrayBufferLike by @​joshkel in msgpack/msgpack-javascript#279
• fix types of a sample code file by @​gfx in msgpack/msgpack-javascript#281

New Contributors

• @​joshkel made their first contribution in msgpack/msgpack-javascript#279

Full Changelog: msgpack/msgpack-javascript@v3.1.2...v3.1.3

Changelog

Sourced from @​msgpack/msgpack's changelog.

3.1.3 2025-12-26

msgpack/msgpack-javascript@v3.1.2...v3.1.3

• More specific data types - ArrayBuffer instead of ArrayBufferLike (ts 5.9 compatibility issue) by @​joshkel (#279)

Commits

• 77ed8ac 3.1.3
• 5747b0b changelog for 3.1.3
• 982ae21 Merge pull request #281 from msgpack/gfx/fix_samples
• 372cc7e fix samples
• 9f7909a Merge pull request #279 from joshkel/ArrayBuffer-type
• f89aa92 Merge pull request #280 from msgpack/gfx/ts7
• 7f239f4 use tsgo and fix some types
• 12e2cc0 update dependencies
• 84a8503 use tsgo (7.0-preview) to compile TypeScript files
• 4746c3d More specific data types - ArrayBuffer instead of ArrayBufferLike
• See full diff in compare view

Updates @stylistic/eslint-plugin from 5.6.1 to 5.7.0

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.7.0

5.7.0 (2026-01-09)

Features

• customize: allow indent option as full rule options (#1091) (ab50c71)
• deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
• dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
• eol-last: improve to make language-agnostic (#1051) (9152494)
• linebreak-style: improve to make language-agnostic (#1050) (132926d)
• type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
• update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

• list-style: replace text range with delimiter directly (#1062) (c2ac348)
• object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

• fix command to run docs (#1058) (f597441)

Build Related

• deps: bump actions/checkout from 5 to 6 (#1061) (767efe4)
• deps: bump actions/download-artifact from 6 to 7 (#1067) (272e75d)
• deps: bump actions/upload-artifact from 5 to 6 (#1068) (50239e3)

Chores

• docs: extract local vite plugins from vite.config.ts (#1081) (79e6c6b)
• indent: simplify handling of TSConditionalType (#1075) (233c967)
• indent: simplify handling of TSMappedType (#1073) (30b6bb3)
• member-delimiter-style: use auto-generated types (#1089) (580164b)
• padding-line-between-statements: use auto-generated types (#1090) (a80aefb)
• replace hasCommentsBetween with sourceCode.commentsExistBetween (#1094) (77e1370)
• test-utils: replace language conditionals with a config object (#1064) (e78a122)
• utils: simplify type guards, cleanup typings & docs (#1086) (843428e)

Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.7.0 (2026-01-09)

Features

• customize: allow indent option as full rule options (#1091) (ab50c71)
• deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
• dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
• eol-last: improve to make language-agnostic (#1051) (9152494)
• linebreak-style: improve to make language-agnostic (#1050) (132926d)
• type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
• update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

• list-style: replace text range with delimiter directly (#1062) (c2ac348)
• object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

• fix command to run docs (#1058) (f597441)

Build Related

• deps: bump actions/checkout from 5 to 6 (#1061) (767efe4)
• deps: bump actions/download-artifact from 6 to 7 (#1067) (272e75d)
• deps: bump actions/upload-artifact from 5 to 6 (#1068) (50239e3)

Chores

• docs: extract local vite plugins from vite.config.ts (#1081) (79e6c6b)
• indent: simplify handling of TSConditionalType (#1075) (233c967)
• indent: simplify handling of TSMappedType (#1073) (30b6bb3)
• member-delimiter-style: use auto-generated types (#1089) (580164b)
• padding-line-between-statements: use auto-generated types (#1090) (a80aefb)
• replace hasCommentsBetween with sourceCode.commentsExistBetween (#1094) (77e1370)
• test-utils: replace language conditionals with a config object (#1064) (e78a122)
• utils: simplify type guards, cleanup typings & docs (#1086) (843428e)

Commits

• 94ba6b3 chore: release v5.7.0 (main) (#1060)
• 172ef89 feat: update deps, support @​typescript-eslint/parser >=8.48.0 (#1095)
• ab50c71 feat(customize): allow indent option as full rule options (#1091)
• 77e1370 refactor: replace hasCommentsBetween with sourceCode.commentsExistBetween...
• 6494fdc chore: cleanup unused constants (#1093)
• a80aefb refactor(padding-line-between-statements): use auto-generated types (#1090)
• 580164b refactor(member-delimiter-style): use auto-generated types (#1089)
• 622b888 feat: deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#...
• 1aaf61f feat(type-annotation-spacing): allow ignore check arrow (#1080)
• d73c03e fix(object-curly-spacing): allow space before comment in multi-line objects (...
• Additional commits viewable in compare view

Updates body-parser from 2.2.1 to 2.2.2

Release notes

Sourced from body-parser's releases.

v2.2.2

What's Changed

• docs: update README links by @​efekrskl in expressjs/body-parser#673
• docs: release notes for the v1.20.4 release by @​Phillip9587 in expressjs/body-parser#674
• docs: update URL-encoded parser description to include ISO-8859-1 encoding support by @​Phillip9587 in expressjs/body-parser#679
• docs: use standard jsdoc tags everywhere by @​Phillip9587 in expressjs/body-parser#677
• deps: qs@^6.14.1 by @​UlisesGascon in expressjs/body-parser#689
• refactor(json): simplify strict mode error string construction by @​jonchurch in expressjs/body-parser#693
• Release: 2.2.2 by @​UlisesGascon in expressjs/body-parser#691

New Contributors

• @​efekrskl made their first contribution in expressjs/body-parser#673

Full Changelog: expressjs/body-parser@v2.2.1...v2.2.2

Changelog

Sourced from body-parser's changelog.

2.2.2 / 2026-01-07

• deps: qs@^6.14.1
• refactor(json): simplify strict mode error string construction

Commits

• 3d24866 2.2.2 (#691)
• 8474a98 refactor(json): simplify strict mode error string construction (#693)
• 03f17c2 deps: qs@^6.14.1 (#689)
• ea1f25e docs: use standard jsdoc tags everywhere (#677)
• d7deef8 docs: update URL-encoded parser description to include ISO-8859-1 encoding su...
• b6f52aa docs: release notes for the v1.20.4 release (#674)
• 2965ca4 docs: update links (#673)
• See full diff in compare view

Updates bun from 1.3.3 to 1.3.5

Release notes

Sourced from bun's releases.

Bun v1.3.5

To install Bun v1.3.5

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.5:

bun upgrade

Read Bun v1.3.5's release notes on Bun's blog

Thanks to 10 contributors!

• @​alii
• @​cirospaciari
• @​crishoj
• @​dylan-conway
• @​elfayer
• @​hamidrezahanafi
• @​jarred-sumner
• @​kylekz
• @​robobun
• @​ryangst

Bun v1.3.4

To install Bun v1.3.4

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.4:

bun upgrade

... (truncated)

Commits

• fa5a5bb fix: v8::Value::IsInt32()/IsUint32() edge cases (#25548)
• 1e86ceb Add bun_version to link metadata (#25545)
• bc47f87 fix(ini): support env var expansion in quoted .npmrc values (#25518)
• 698b004 Add step in CI to upload link metadata (#25448)
• b135c20 fix(yaml): remove YAML 1.1 legacy boolean values for YAML 1.2 compliance (#25...
• a1dd26d fix(usockets) fix last_write_failed flag (#25496)
• 7c06320 fix(ws): fix zlib version mismatch on Windows (segfault) (#25538)
• dd04c57 feat: implement V8 Value type checking APIs (#22462)
• 344b2c1 fix: Response.clone() no longer locks body when body was accessed before clon...
• aef0b5b fix(usockets): safely handle socket reallocation during context adoption (#25...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jarred, a new releaser for bun since your current version.

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• 9278324 9.39.2
• 542266a Build: changelog update for 9.39.2
• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394)
• c43ce24 chore: package.json update for @​eslint/js release
• 5705833 fix: warn when eslint-env configuration comments are found (#20381)
• 506f154 build: add .scss files entry to knip (#20391)
• 4c9858e ci: add v9.x-dev branch (#20382)
• See full diff in compare view

Updates eslint-plugin-cypress from 5.2.0 to 5.2.1

Release notes

Sourced from eslint-plugin-cypress's releases.

v5.2.1

5.2.1 (2026-01-06)

Bug Fixes

• disallow extra properties in rule options (#269) (d600419)

Commits

• d600419 fix: disallow extra properties in rule options (#269)
• 7c429f8 docs: update rule documentation headers (#288)
• 94c7d1c chore(deps): update eslint to 9.39.1 (#287)
• fb76f04 ci(deps): update to Node.js 24.11.0 LTS (#286)
• cba838f chore: use npm credentials context (#285)
• 058d2df chore(deps): update vitest to 4.0.4 (#284)
• 065b435 chore: lint TypeScript declaration files d.ts (#280)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Overall package size

Self size: 4.39 MB
Deduped: 5.21 MB
No deduping: 5.21 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 2.0.0 | 68.46 kB | 797.03 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.13%. Comparing base (033993d) to head (6b39721).
⚠️ Report is 5 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #7238   +/-   ##
=======================================
  Coverage   85.13%   85.13%           
=======================================
  Files         532      532           
  Lines       22654    22654           
=======================================
  Hits        19287    19287           
  Misses       3367     3367           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-01-15 12:29:44

Comparing candidate commit 6b39721 in PR branch dependabot/npm_and_yarn/dev-minor-and-patch-dependencies-ff8146a1aa with baseline commit 033993d in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 289 metrics, 31 unstable metrics.