build(deps): bump the npm-dependencies group across 1 directory with 29 updates

[dependabot]

Bumps the npm-dependencies group with 29 updates in the / directory:

Package	From	To
@arethetypeswrong/cli	0.18.3	0.18.5
@biomejs/biome	2.5.0	2.5.5
@changesets/cli	2.31.0	2.31.1
@types/node	26.0.0	26.1.1
@vitest/coverage-v8	4.1.9	4.1.10
eslint	10.5.0	10.8.0
eslint-plugin-n	18.1.0	18.2.2
eslint-plugin-unicorn	68.0.0	72.0.0
prettier	3.8.4	3.9.6
publint	0.3.21	0.3.22
tsx	4.22.4	4.23.1
typedoc	0.28.19	0.28.20
typescript	6.0.3	7.0.2
typescript-eslint	8.61.1	8.65.0
vite	8.0.16	8.1.5
vitest	4.1.9	4.1.10
@effect/platform	0.96.2	0.97.0
better-sqlite3	12.11.1	13.0.1
effect	3.21.4	3.22.0
jose	6.2.3	6.2.4
ws	8.21.0	8.21.1
@fastify/websocket	11.2.0	11.3.0
fastify	5.8.5	5.10.0
hono	4.12.26	4.12.32
@effect/opentelemetry	0.63.0	0.64.0
@opentelemetry/resources	2.8.0	2.10.0
@opentelemetry/sdk-trace-base	2.8.0	2.10.0
@opentelemetry/sdk-trace-node	2.8.0	2.10.0
@opentelemetry/semantic-conventions	1.41.1	1.43.0

Updates @arethetypeswrong/cli from 0.18.3 to 0.18.5

Changelog

Sourced from @​arethetypeswrong/cli's changelog.

0.18.5

Patch Changes

• Updated dependencies [c4be7e8]
  • @​arethetypeswrong/core@​0.18.5

0.18.4

Patch Changes

• Updated dependencies [644fab1]
  • @​arethetypeswrong/core@​0.18.4

Commits

• See full diff in compare view

Updates @biomejs/biome from 2.5.0 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

• 412a0e9 ci: release (#10948)
• b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
• 9a66bc7 chore: add latitude to sponsors (#10947)
• bfc3f3d ci: release (#10887)
• 9e1999f chore: revert the revert
• 0b0fd8d chore: revert
• 0afa35a ci: release (#10817)
• 3447b2f feat(useDomQuerySelector): add ignore option (#10835)
• e649198 ci: release (#10747)
• 4a32b63 feat(lint): add ignorePrimitives option to useNullishCoalescing (#10798)
• Additional commits viewable in compare view

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

• #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

Commits

• a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
• e8650b9 Version Packages (#2161)
• 15cf592 Fixed handling of the npm 12 info output (#2159)
• 9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
• 97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
• 13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
• 8f6acd6 Update dependabot group to exclude major (#2067)
• c70c675 Setup backport workflow and sync next setup (#2057)
• 9672019 Remove SECURITY.md to defer to .github (#2055)
• 18e1661 Use internal bot for versioning (#2039)
• Additional commits viewable in compare view

Updates @types/node from 26.0.0 to 26.1.1

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Updates eslint from 10.5.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

• 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
• 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
• e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
• 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
• 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
• b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
• 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
• 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
• 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
• 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
• d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
• eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
• c5963f7 docs: Update README (GitHub Actions Bot)

Chores

• 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
• eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
• e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
• ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
• 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
• fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
• 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
• 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
• a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
• 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
• 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
• a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
• c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
• 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
• 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
• dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
• 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
• 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
• d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
• bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

• 749dfed 10.8.0
• 4bd0d75 Build: changelog update for 10.8.0
• 4fbf46d test: pin webpack version to 5.108.4 (#21137)
• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
• 784dfbe docs: Clarify no-eq-null description (#21120)
• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
• eccbe7b test: add error locations to no-class-assign (#21123)
• 2fee9bb feat: export ConfigObject from eslint/config (#21082)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
• Additional commits viewable in compare view

Updates eslint-plugin-n from 18.1.0 to 18.2.2

Release notes

Sourced from eslint-plugin-n's releases.

v18.2.2

18.2.2 (2026-07-11)

🩹 Fixes

• Ignore HTTP imports in no-missing-import (#547) (3ff929d)
• no-callback-literal: report object, array, and template literals (#552) (dca2330)

v18.2.1

18.2.1 (2026-06-26)

🩹 Fixes

• ensure types have valid syntax (#544) (a0d7819)

v18.2.0

18.2.0 (2026-06-25)

🌟 Features

• add module.exports for require(esm) interop (#542) (04c99df)

Changelog

Sourced from eslint-plugin-n's changelog.

18.2.2 (2026-07-11)

🩹 Fixes

• Ignore HTTP imports in no-missing-import (#547) (3ff929d)
• no-callback-literal: report object, array, and template literals (#552) (dca2330)

18.2.1 (2026-06-26)

🩹 Fixes

• ensure types have valid syntax (#544) (a0d7819)

18.2.0 (2026-06-25)

🌟 Features

• add module.exports for require(esm) interop (#542) (04c99df)

Commits

• 0c31d00 chore(master): release 18.2.2 (#548)
• dca2330 fix(no-callback-literal): report object, array, and template literals (#552)
• 3ff929d fix: Ignore HTTP imports in no-missing-import (#547)
• 37da568 chore(master): release 18.2.1 (#546)
• a0d7819 fix: ensure types have valid syntax (#544)
• ccd1832 chore(master): release 18.2.0 (#543)
• 04c99df feat: add module.exports for require(esm) interop (#542)
• See full diff in compare view

Updates eslint-plugin-unicorn from 68.0.0 to 72.0.0

Release notes

Sourced from eslint-plugin-unicorn's releases.

v72.0.0

Breaking

• prefer-minimal-ternary: Rename checkVaryingCallee option to checkVaryingBase (#3508) 825b7b9b

New rules

• no-missing-local-resource (#3528) 12a33c61
• no-multiple-promise-resolver-calls (#3523) 81ab092c
• no-shorthand-property-overrides (#3527) 91a4c4d9
• no-transition-all (#3529) 5ef2fcf0
• no-unnecessary-string-trim (#3517) a6516727
• no-useless-re-export (#3540) 96afe553
• prefer-explicit-viewport-units (#3532) 449e6369
• prefer-then-catch (#3526) a17e5a29
• require-frontmatter-fields (#3525) dfd91cdd

Improvements

• Improve performance (#3531) 8233f950
• consistent-boolean-name: Support Vue refs (#3555) 79e79d5f
• no-incorrect-template-string-interpolation: Ignore Unicode code point escapes (#3513) 36fdf1aa
• no-negated-comparison: Ignore relational comparisons with optional chaining (#3512) 7b7e28a7
• no-top-level-side-effects: Ignore <script setup> (#3542) af8fd60b
• no-unnecessary-array-flat-map: Handle TypeScript Vue files (#3545) b6d01a0b
• no-unsafe-property-key: Use type information for narrowed property keys (#3515) 69a6002e
• no-unused-array-method-return: Ignore expect assertions (#3552) 110cc582
• no-useless-promise-resolve-reject: Handle awaited calls (#3504) 9b8a1440
• no-useless-template-literals: Ignore const assertions (#3543) 43672287
• prefer-await: Add async IIFE suggestion (#3550) 305fb4bc
• prefer-dom-node-html-methods: Add options and add to recommended preset (#3541) 581ef479
• prefer-export-from: Preserve JSDoc comments on single-const re-exports (#3544) e273ab63
• prefer-short-arrow-method: Add consistent-as-needed option (#3514) c0687455
• prefer-simple-condition-first: Fix logic (#3530) a339abe8
• prefer-split-limit: Support array destructuring (#3554) b23f959e
• prefer-string-starts-ends-with: Detect slice comparisons (#3518) 98730de6
• prefer-minimal-ternary: Don't report object-varying member access by default (#3508) 825b7b9b

---

sindresorhus/eslint-plugin-unicorn@v71.1.0...v72.0.0

v71.1.0

• consistent-boolean-name: Allow async boolean predicates (#3502) dafc7c9f
• consistent-boolean-name: Allow boolean-like React refs with Ref suffix (#3501) 064d8901

---

sindresorhus/eslint-plugin-unicorn@v71.0.0...v71.1.0

... (truncated)

Commits

• 0b9a9af 72.0.0
• 79e79d5 consistent-boolean-name: Support Vue refs (#3555)
• b23f959 prefer-split-limit: Support array destructuring (#3554)
• 110cc58 no-unused-array-method-return: Ignore expect assertions (#3552)
• 305fb4b prefer-await: Add async IIFE suggestion (#3550)
• a1615b6 Update defineConfig config docs (#3524)
• 6ae0e95 prefer-await: Show exact solutions to incorrect code in docs (#3546)
• 4367228 no-useless-template-literals: Ignore const assertions (#3543)
• b6d01a0 no-unnecessary-array-flat-map: Handle TypeScript Vue files (#3545)
• e273ab6 prefer-export-from: Preserve JSDoc comments on single-const re-exports (#3544)
• Additional commits viewable in compare view

Updates prettier from 3.8.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates publint from 0.3.21 to 0.3.22

Changelog

Sourced from publint's changelog.

0.3.22

Patch Changes

• #241 7740a62 - Support npm v12 and pnpm v11

• cad0425 - Relax git url regex for repository validation

• #244 393ac4d - Recognize more common internal files for the USE_FILES suggestion.

• #242 4a8dc75 - Refactor supported package manager handling from @publint/pack

Commits

• See full diff in compare view

Updates tsx from 4.22.4 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

• avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

• add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #809 hi#signal privatenumber/tsx#145 #809

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

• isolate hook state per async module.register() registration (

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.