Bump the dependencies group across 1 directory with 11 updates

[dependabot]

Bumps the dependencies group with 11 updates in the / directory:

Package	From	To
@mapbox/mapbox-gl-rtl-text	0.3.0	0.4.0
@openstreetmap/id	2.37.3	2.39.5
i18n-js	4.5.2	4.5.3
leaflet.locatecontrol	0.88.0	0.89.0
maplibre-gl	5.18.0	5.21.1
tag2link	2026.1.21	2026.3.21
@herb-tools/linter	0.8.10	0.9.2
@stylistic/eslint-plugin	5.8.0	5.10.0
@types/jquery	3.5.33	4.0.0
eslint	10.0.0	10.1.0
globals	17.3.0	17.4.0

Updates @mapbox/mapbox-gl-rtl-text from 0.3.0 to 0.4.0

Release notes

Sourced from @​mapbox/mapbox-gl-rtl-text's releases.

v0.4.0

• Modernized the code #38:
  • Reduced plugin bundle size by ~15%
  • Significantly reduced memory usage (from 16 MB to 256 kB)
  • Improved performance by reducing small allocations
  • Modernized development tooling
• Fixed a bug with empty text handling (h/t @​Omkarthipparthi #36)

⚠️ This is the last version distributed as single UMD file. The next one will be released as a combination of a tiny ESM JS bundle and a separate WASM file.

Commits

• cf49b7d 0.4.0
• 86ad838 Optimize memory usage, modernize & simplify tooling (#38)
• ad0f8bc Add test for empty text handling in styled bidirectional processing (#36)
• 1f9e4ea Create codeql-analysis.yml
• 800d8d7 SECANDCOMP-1321: deleting CodeQL across the org; will be replaced with Prisma...
• See full diff in compare view

Maintainer changes

This version was pushed to npm by mbx-npm-07-production, a new releaser for @​mapbox/mapbox-gl-rtl-text since your current version.

Updates @openstreetmap/id from 2.37.3 to 2.39.5

Release notes

Sourced from @​openstreetmap/id's releases.

v2.39.5

• Fix regression where some strings (like some section headings) are not rendered correctly (#12083)

v2.39.4

• Fix title of preset search results not updating correctly (#12050, thanks @​bhavyaKhatri2703)
• Fix user images and upload help text from showing up as duplicates in upload dialog (#12063)
• Fix crash when a checkbox-field is rendered using a custom (non-yes/no) value (#12078)

v2.39.3

• Revert: When changing presets, delete tags from the old preset which are not in the new preset (#12068)

v2.39.2

• Fix a bug where iD would crash when the "Style Options" submenu is expanded during startup (0241c765)

v2.39.0

✨ Usability & Accessibility

• Increase number of displayed recently used presets to 8 (from 4) (#9545, thanks @​k-yle)
• Always render icons for craft features mapped as areas (#9183)
• Change labeling of route relation to show icons, ref and route colours (#11052)
• Render the turnout_side of railway switches (#11944, thanks @​hlfan)
• Show descriptions of preset field options directly in the combobox dropdown menu in slightly smaller font size (#11876, thanks @​Sembauke)
• Render "outside" side of guardrails with small dots (#9594)

✂️ Operations

• Show a preview of the result of some geometry operations while the respective button in the edit menu is hovered (#11778)
• Preserve tagged nodes from being moved around too much when circularizing a feature (#8265)

📷 Street-Level

• Show username of Mapilio photos (#9903, thanks @​sezerbozbiyik)
• Fix mouse wheel zooming on 360° photos using the pannellum viewer (e.g. the ones from Panoramax) (#11995)

✅ Validation

• Make wording of fix for overlapping features validator less ambiguous (#9888, thanks @​k-yle)
• Skip disconnected_way validation for Golf Paths (#11863, thanks @​Kayd-06)
• Also suggest to remove deprecated tag when the object already has the corresponding new tag (#9272)
• Add explanation how to fix "point should be vertex" validation warning (#10958)
• Suggest to "reposition features" before other fixes when the validator found overlapping buildings (#11329)

🐛 Bugfixes

• Fix the sorting of tag values when multiple objects' tags are combined in utilCombinedTags (#11932, thanks @​JaiswalShivang)
• Don't change the value of railway:turnout_side when reversing a railway track (#11645)
• Fix a bug where the squaring operation would remove a whole corner if it had duplicate vertices (same coordinates, but different node ids) at that point (#9155)
• Fix crash when uploading changesets with more than 10,000 features (#11388, thanks @​k-yle)
• Preserve relation memberships when an area is automatically converted from a closed way to a multipolygon or vice versa during a merge or split operation (#9064, #12024)
• Make sure tooltips of the map menu are not clipped on the top/bottom of the map (#11017, thanks @​mykh-hailo)

🌏 Localization

• Support territory-level phone hints (#10904, thanks @​Vectorial1024)
• Add phone and address format for Moldova (#11965, #11976, thanks @​Oni-DOS)

🚀 Presets

• When changing presets, delete tags from the old preset which are not in the new preset (#11696, thanks @​k-yle)

🔨 Development

• Use <details> element for collapsible disclosure content (#11952, thanks @​Shrinks99)
• Use JSON endpoints for (almost) all OSM APIs (#11661, thanks @​k-yle)
• Replace lodash with es-toolkit (#12016, thanks @​tordans)

... (truncated)

Changelog

Sourced from @​openstreetmap/id's changelog.

What's New

Thanks to all our contributors, users, and the many people that make iD possible! ❤️

The iD map editor is an open source project. You can submit bug reports, help out, or learn more by visiting our project page on GitHub: https://github.com/openstreetmap/iD

If you love iD, please star our project on GitHub to show your support! ⭐

Breaking developer changes, which may affect downstream projects or sites that embed iD, are marked with a ⚠️

Unreleased (2.40.0-dev)

✨ Usability & Accessibility

✂️ Operations

📷 Street-Level

✅ Validation

• Treat most aerialways as part of the routable network when checking other ways' connectivity (#9406)

🐛 Bugfixes

• Fix title of preset search results not updating correctly (#12050, thanks [@​bhavyaKhatri2703])
• Prevent duplicate nodes from being created while using spacebar key to draw a way (#12051)
• Fix user images and upload help text from showing up as duplicates in upload dialog (#12063)
• Fix some tags automatically deleted when re-selecting the same preset (#12070, thanks [@​k-yle])

... (truncated)

Commits

• b9b1750 v2.39.5: backport fix regression causing strings with replacement strings not
• 5fdd07a v2.39.4: backported bugfixes
• 76adbb7 Check in build
• c7c7689 Check in build
• 676560c v2.39.1
• 0241c76 fix typo
• 7dbb0bd Set development version number
• c9f0132 Update npm commands for releasing
• 41a07bb v2.39.0
• 66174f2 npm run translations
• Additional commits viewable in compare view

Updates i18n-js from 4.5.2 to 4.5.3

Changelog

Sourced from i18n-js's changelog.

v4.5.3 - Mar 4, 2026

• [Fixed] Handle BigNumber raising when receiving invalid numbers by default on v10.

Commits

• b346087 Bump up version (4.5.3)
• 03c0067 Handle BigNumber@v10 raising by default when receiving invalid numbers. (#124)
• d03bb12 Use npm instead.
• See full diff in compare view

Updates leaflet.locatecontrol from 0.88.0 to 0.89.0

Changelog

Sourced from leaflet.locatecontrol's changelog.

0.89.0 - 2026-03-08

• Add {speed} (raw m/s) and {heading} (degrees) placeholders to popup template data (#405)
• Refactor compass activation/deactivation and error handling (#401)
• Replace Leaflet DOM helpers with native equivalents for Leaflet 2 compatibility (#404, #369)
• Fix incorrect onLocationError option description in README (wrong since 2014) (#409)

0.88 - 2026-02-12

• Add {lat}, {lng}, and {altitude} placeholders to popup template data. (#398)
• Add locatelocationfound event fired on the map with a reference to the control. (#395)
• Fix flyTo breaking following mode with untilPanOrZoom. (#396)
• Fix color status changes for custom icons. (#399)

0.87 - 2026-01-28

• Add test framework. (#390)
• Add timeout feedback in watch mode (visual indicator after 3 consecutive timeouts). (#387)
• Add locatedeactivate event when control is removed from map. (#388)
• Fix stopFollowing crash when called before location found. (#389)
• Fix strings.text styling and documentation. (#394)
• Fix prototype pollution in LocateControl options. (#391)

0.86 - 2026-01-11

• Add ARIA label to button. (#386)
• Add zoom range support to keepCurrentZoomLevel option (e.g. [13, 18]). (#384)
• Enable CSS theming and migrate from SCSS to modern CSS. (#380)
• Replace build tooling with native Rollup (removed Grunt). (#377, #379)

0.85 - 2025-09-07

• Fix rotation of compass arrow on Safari and Firefox. (#374)

0.84 - 2025-04-01

• Fix compass rotation center. (#368)
• Set SVG style as attributes instead of CSS properties. (#364)

0.83 - 2024-12-28

• Add TypeScript definitions. (#360)
• Fix LocateOptions parameter type. (#361)

0.82 - 2024-10-29

• Refactor source to ES module (ESM). (#357)

0.80 - 2024-04-10

... (truncated)

Commits

• 6ad0cd6 0.89.0
• e7ac740 chore: update changelog
• cfcf77c docs: improve release section
• cd760d6 chore: update devDependencies (#410)
• 13a65f6 docs: fix onLocationError option description (#409)
• 967c428 refactor: replace deprecated Leaflet DOM helpers and factory functions for Le...
• d75653b docs: update changelog for v0.79–v0.88 and unreleased (#406)
• abe4842 feat: add speed and heading to popup template data (#405)
• b243011 refactor: improve compass activation/deactivation and error handling (#401)
• 05cd6ae refactor: replace Leaflet DOM helpers with native equivalents (#404)
• Additional commits viewable in compare view

Updates maplibre-gl from 5.18.0 to 5.21.1

Release notes

Sourced from maplibre-gl's releases.

v5.21.1

🐞 Bug fixes

• Add missing promoteId parameter to geojson worker and refactor communication object (#7320) (by @​HarelM)

v5.21.0

✨ Features and improvements

• Add compatibility for ES2020 (#7283) (by @​claudiobgit)
• Add referrerPolicy option to RequestParameters to allow controlling the referrer policy for tile requests (#7278) (by @​Bingtagui404)
• Wait for the GPU to finish its callstack for rendering benchmarks (#7285) (by @​xavierjs)
• Remove Edge 18 WebP detection workaround; always send Accept: image/webp header for image requests (#7293) (by @​johanrd)
• Remove legacy browser compatibility code targeting IE11 and pre-2016 browsers (#7294) (by @​johanrd)
• Remove legacy DOM.remove() and DOM.mouseButton() wrappers; use native APIs directly (baseline 2015) (#7295) (by @​johanrd)
• Make setTransformRequest accept an async function in addition to a sync function. (#7184) (by @​kikuomax )

🐞 Bug fixes

• Fix incorrect popup location in case of terrain and jumpTo (#7267) (by @​HarelM)
• Fix memory leak in VideoSource: remove playing event listener and pause video on source removal (#7279) (by @​johanrd)
• Fix memory leak where typed array views retained StructArray buffers after GPU upload, preventing garbage collection (#7280) (by @​johanrd)
• Fix raster DEM tiles getting stuck in "reloading" state (#7284) (by @​katemihalikova)
• Fix GeolocateControl leaking a movestart listener on the map after removal, which could also crash if the control was in active tracking state when removed (#7286) (by @​johanrd)
• Cap tile texture reuse pool to prevent unbounded VRAM growth during rapid zoom/pan (#7289) (by @​johanrd)
• Fix Marker click listener not removed on remove(), leaking the handler added in #7028 (#7287) (by @​johanrd)
• Fix Terrain GPU resource leak: free FBO, textures, and meshes when terrain is disabled via setTerrain(null) (#7288) (by @​johanrd)
• Fix guard against partial layout in PauseablePlacement (#7079) (by @​garethbowker)
• Fix missing tile encoding for MLT queryRenderedFeatures (#7056) (by @​dannote and @​ted-piotrowski)
• Fix 3D Tiles example (#7275) (by @​hh-hang)

v5.20.2

🐞 Bug fixes

• Fix update GeoJSON when using diff update by updating geojson-vt package (#7257) (by @​HarelM)

v5.20.1

🐞 Bug fixes

• Fix cannot read properties of undefined (reading 'range') by updating geojson-vt package (#7245) (by @​HarelM)
• Fix a bug where raster-resampling: nearest was not applied as expected (#7247) (by @​yano-h)

v5.20.0

✨ Features and improvements

... (truncated)

Changelog

Sourced from maplibre-gl's changelog.

5.21.1

🐞 Bug fixes

• Add missing promoteId parameter to geojson worker and refactor communication object (#7320) (by @​HarelM)

5.21.0

✨ Features and improvements

• Add compatibility for ES2020 (#7283) (by @​claudiobgit)
• Add referrerPolicy option to RequestParameters to allow controlling the referrer policy for tile requests (#7278) (by @​Bingtagui404)
• Wait for the GPU to finish its callstack for rendering benchmarks (#7285) (by @​xavierjs)
• Remove Edge 18 WebP detection workaround; always send Accept: image/webp header for image requests (#7293) (by @​johanrd)
• Remove legacy browser compatibility code targeting IE11 and pre-2016 browsers (#7294) (by @​johanrd)
• Remove legacy DOM.remove() and DOM.mouseButton() wrappers; use native APIs directly (baseline 2015) (#7295) (by @​johanrd)
• Make setTransformRequest accept an async function in addition to a sync function. (#7184) (by @​kikuomax )

🐞 Bug fixes

• Fix incorrect popup location in case of terrain and jumpTo (#7267) (by @​HarelM)
• Fix memory leak in VideoSource: remove playing event listener and pause video on source removal (#7279) (by @​johanrd)
• Fix memory leak where typed array views retained StructArray buffers after GPU upload, preventing garbage collection (#7280) (by @​johanrd)
• Fix raster DEM tiles getting stuck in "reloading" state (#7284) (by @​katemihalikova)
• Fix GeolocateControl leaking a movestart listener on the map after removal, which could also crash if the control was in active tracking state when removed (#7286) (by @​johanrd)
• Cap tile texture reuse pool to prevent unbounded VRAM growth during rapid zoom/pan (#7289) (by @​johanrd)
• Fix Marker click listener not removed on remove(), leaking the handler added in #7028 (#7287) (by @​johanrd)
• Fix Terrain GPU resource leak: free FBO, textures, and meshes when terrain is disabled via setTerrain(null) (#7288) (by @​johanrd)
• Fix guard against partial layout in PauseablePlacement (#7079) (by @​garethbowker)
• Fix missing tile encoding for MLT queryRenderedFeatures (#7056) (by @​dannote and @​ted-piotrowski)
• Fix 3D Tiles example (#7275) (by @​hh-hang)

5.20.2

🐞 Bug fixes

• Fix update GeoJSON when using diff update by updating geojson-vt package (#7257) (by @​HarelM)

5.20.1

🐞 Bug fixes

• Fix cannot read properties of undefined (reading 'range') by updating geojson-vt package (#7245) (by @​HarelM)
• Fix a bug where raster-resampling: nearest was not applied as expected (#7247) (by @​yano-h)

5.20.0

✨ Features and improvements

... (truncated)

Commits

• 1fe69fd Bump js version to 5.21.1 (#7325)
• 1bf28ae Add missing promoteId parameter to geojson worker (#7320)
• 1557f52 chore(deps-dev): bump canvas from 3.2.1 to 3.2.2 (#7324)
• 73db19a chore(deps-dev): bump @​vitest/eslint-plugin in the vitest group (#7321)
• 9eeb0fd chore(deps-dev): bump rollup from 4.59.1 to 4.60.0 (#7322)
• a5a63bc chore(deps-dev): bump rollup from 4.59.0 to 4.59.1 (#7316)
• a54d7a1 chore(deps): bump github/codeql-action from 4.33.0 to 4.34.1 (#7317)
• a4c8bc8 chore(deps): bump ggilder/codecoverage from 1.3.0 to 1.3.1 (#7318)
• a8cf500 chore(deps-dev): bump devtools-protocol from 0.0.1596832 to 0.0.1602427 (#7312)
• 65766d2 chore(deps-dev): bump puppeteer from 24.39.1 to 24.40.0 (#7313)
• Additional commits viewable in compare view

Updates tag2link from 2026.1.21 to 2026.3.21

Release notes

Sourced from tag2link's releases.

2026.3.21

Full Changelog: JOSM/tag2link@2026.2.21...2026.3.21

2026.2.21

Full Changelog: JOSM/tag2link@2026.1.21...2026.2.21

Commits

• 543fcd2 Automatic update for 2026.3.21: taginfo.json
• 64edaf7 Automatic update for 2026.3.21: package.json
• 08b5014 Automatic update for 2026.3.21: index.json
• f7b5cf8 Automatic update for 2026.2.21: taginfo.json
• 47fa2e4 Automatic update for 2026.2.21: package.json
• 08e10a9 Automatic update for 2026.2.21: index.json
• 45ac27c id-token: write permission to release.yaml for npmjs trusted publishers
• See full diff in compare view

Updates @herb-tools/linter from 0.8.10 to 0.9.2

Release notes

Sourced from @​herb-tools/linter's releases.

v0.9.2

Parser

• Detect javascript_tag and javascript_include_tag helpers by @​marcoroth in marcoroth/herb#1374

Engine

• Delegate context-aware expressions to overridable engine methods by @​marcoroth in marcoroth/herb#1421

Dev Tools

• Allow overlay hint to be customized by ReActionView by @​marcoroth in marcoroth/herb#1420

libherb

• Fix O(n) linked list walk in hb_arena_append_page() by @​timkaechele and @​citizen428 in marcoroth/herb#1380

Commits

Full Changelog: marcoroth/herb@v0.9.1...v0.9.2

v0.9.1

Parser

• Support Action View tag helpers with inline blocks by @​marcoroth in marcoroth/herb#1404
• Fix Action View Helpers with positional arguments and block by @​marcoroth in marcoroth/herb#1406

Engine

• Make sure validate_ruby also works on older Rubies by @​marcoroth in marcoroth/herb#1411
• Delegate add_expression_block for Erubi compatibility by @​marcoroth in marcoroth/herb#1417

Linter

• Warn about j() in erb-no-unsafe-script-interpolation by @​marcoroth in marcoroth/herb#1407
• Allow more types for html-allowed-script-type rule by @​marcoroth in marcoroth/herb#1413
• Support more cases for erb-no-duplicate-branch-elements by @​marcoroth in marcoroth/herb#1415
• Re-export linter rule utils from core by @​marcoroth in marcoroth/herb#1416

Linter Rules

New Rules

• Implement actionview-no-silent-render rule by @​marcoroth in marcoroth/herb#1402
• Implement erb-no-silent-statement rule by @​marcoroth in marcoroth/herb#1403
• Implement erb-no-empty-control-flow rule by @​marcoroth in marcoroth/herb#1412

VS Code / Cursor

• Don't register Toggle Comment as global shortcut by @​marcoroth in marcoroth/herb#1409

Dependencies

... (truncated)

Commits

• ee69f66 v0.9.2
• d68a879 Parser: Detect javascript_tag and javascript_include_tag helpers (#1374)
• d6b1025 v0.9.1
• 349937a Linter: Re-export linter rule utils from core (#1416)
• 7fc78b3 Linter: Support more cases for erb-no-duplicate-branch-elements (#1415)
• 0780a1f Linter: Allow more types for html-allowed-script-type rule (#1413)
• f118a58 Linter: Implement erb-no-empty-control-flow rule (#1412)
• dc3ee28 Linter: Warn about j() in erb-no-unsafe-script-interpolation (#1407)
• 5942e12 Linter: Implement erb-no-silent-statement rule (#1403)
• 96a373f Linter: Implement actionview-no-silent-render rule (#1402)
• Additional commits viewable in compare view

Updates @stylistic/eslint-plugin from 5.8.0 to 5.10.0

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.10.0

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

v5.9.0

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

Commits

• efbb1bc chore: release v5.10.0 (main) (#1151)
• 1ebd6d8 feat(padding-line-between-statements): introduce lineMode for selector matc...
• c43bd4b feat(list-style): allow 'off' in overrides (#1144)
• 95884fc chore: replace prettier with oxfmt (#1147)
• 96ce1c7 chore: release v5.9.0 (main) (#1131)
• 5d99706 feat: support ESLint 10 (#1066)
• cfb6296 fix(no-extra-parens): don't report jsdoc type assertion by default (#1100)
• 501e838 feat(no-trailing-spaces): support more file types (#1138)
• 8f5cc9e feat(padding-line-between-statements): support selector-based statement match...
• 9e7f422 fix(indent): ignore when source code is not ESTree (#1139)
• Additional commits viewable in compare view

Updates @types/jquery from 3.5.33 to 4.0.0

Commits

• See full diff in compare view

Updates eslint from 10.0.0 to 10.1.0

Release notes

Sourced from eslint's releases.

v10.1.0

Features

• ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)
• 0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

• 2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)
• e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

Description has been truncated

[github-actions]

	1 Warning
⚠️	Number of updated lines of code is too large to be in one PR. Perhaps it should be separated into two or more?

Generated by 🚫 Danger