chore(deps): update all non-major dependencies

[open-turo-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@open-turo/eslint-config-typescript	23.0.10 -> 23.1.6			devDependencies	minor
@vercel/ncc	0.38.4 -> 0.44.1			devDependencies	minor
@vitest/coverage-v8 (source)	4.1.7 -> 4.1.9			devDependencies	patch
globals	17.6.0 -> 17.7.0			devDependencies	minor
open-turo/renovate-config	v1.19.0 -> v1.21.0				minor
vitest (source)	4.1.7 -> 4.1.9			devDependencies	patch

---

Release Notes

open-turo/eslint-config-typescript (@​open-turo/eslint-config-typescript)

v23.1.6

Compare Source

Bug Fixes

• deps: update all non-major dependencies (ce808e4)

v23.1.5

Compare Source

Bug Fixes

• deps: update dependency eslint-plugin-n to v18.2.0 (d44d507)

v23.1.4

Compare Source

Miscellaneous

• deps: update node.js to v24.18.0 (195c9c6)
• deps: update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.26.0 (5ec6d7f)

Bug Fixes

• deps: update all non-major dependencies to v8.62.0 (1e08c9f)

v23.1.3

Compare Source

Miscellaneous

• deps: update node.js to v24.17.0 (96d3dac)

Bug Fixes

• deps: update dependency eslint-plugin-sonarjs to v4.1.0 (7c40beb)

Tests

• test/snapshots/test.spec.js.snap: update sonar config (af542d4)

v23.1.2

Compare Source

Bug Fixes

• tweak TypeScript rules for vitest configuration (d3b4892)

v23.1.1

Compare Source

Bug Fixes

• deps: update typescript-eslint for 8.60.x patch (c8ee298)

v23.1.0

Compare Source

Features

• allowNumber for @​typescript-eslint/restrict-template-expressions (ba07723)

v23.0.14

Compare Source

Miscellaneous

• deps: update dependency open-turo/renovate-config to v1.20.0 (a69f60e)

Continuous Integration

• consolidate release and prerelease into one workflow for npm trusted publishing (a4411ad)

Bug Fixes

• deps: update all non-major dependencies (a6cd766)

v23.0.13

Compare Source

Bug Fixes

• deps: update all non-major dependencies (01c0900)

v23.0.12

Compare Source

Bug Fixes

• deps: update dependency @​vitest/eslint-plugin to v1.6.19 (2e3aeb3)

v23.0.11

Compare Source

Miscellaneous

• deps: update dependency open-turo/renovate-config to v1.19.0 (f678cdd)
• deps: update node.js to v24.16.0 (aea71f6)

Bug Fixes

• deps: update all non-major dependencies (ebdffdc)

vercel/ncc (@​vercel/ncc)

v0.44.1

Compare Source

Bug Fixes

• preserve runtime createRequire in ESM builds (#​1334) (8f0aefd), closes #​1312

v0.44.0

Compare Source

Features

• read permissions pr.yml (#​1323) (5ea625e)

v0.43.0

Compare Source

Changes

• BREAKING CHANGE: add Node 24 and 26 support, remove 20 (#​1318) (#​1305)
• switch npm releases to trusted publishing (OIDC) (#​1325) (#​1327) (#​1328) (#​1329) (#​1330) (#​1331) (#​1332)
• switch package management to pnpm (#​1321)
• fix predictable global cache directory in /tmp enables symlink/hijack risks (#​1314)
• reorder extension resolution to prioritise TypeScript over JSON (#​1315)
• support TypeScript 6 transpile builds (#​1316)

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.9

Compare Source

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #​10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in #​10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in #​10497 and #​10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in #​10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in #​10543 and #​10564 (934b0)

View changes on GitHub

v4.1.8

Compare Source

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in #​10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in #​10474 (675b4)

    View changes on GitHub

sindresorhus/globals (globals)

v17.7.0

Compare Source

• Update globals (2026-06-22) (#​345) 33b75f9

---

open-turo/renovate-config (open-turo/renovate-config)

v1.21.0

Compare Source

Continuous Integration

• add renovate config validator check (9581a24)

Features

• add @​open-turo/* to 0-day minimumReleaseAge exception (e519df4)
• add @​typescript-eslint/* and typescript-eslint to 2-day minimumReleaseAge rule (d719a09)
• add tiered minimumReleaseAge exceptions for eslint and @​types packages (6edb5d3)
• move @​types to 0-day exception, keep 1-day rule as empty placeholder (8fe389e)

Bug Fixes

• add @​turo-namespaced exception to minimumReleaseAge configuration (548505d)
• revert actions/checkout to v4 except for renovate validator job (25c296a)

Code Refactoring

• add prettier and @​prettier globs to 2-day minimumReleaseAge rule (ce8abaf)
• make 2-day minimumReleaseAge description package-agnostic (90d4f27)
• merge 0-day minimumReleaseAge exceptions into a single rule (24cd420)
• reword minimumReleaseAge descriptions, add react as 1 day example (35faa1a)
• .github/workflows/ci.yaml: use v7 hash as POC for Semgrep review (9ab8676)

v1.20.0

Compare Source

Features

• add severity labels (patch/minor/major) to all dependency PRs (25454cb)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Release notes preview

No new release will be created.

If you are expecting a release, you will need to either fix a bug or add a feature.
Chores, CI, docs, refactoring, style and other changes will not trigger a release.

[github-actions]

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.