deps: bump the security-updates group with 28 updates by dependabot[bot] · Pull Request #1075 · suites-dev/suites

dependabot · 2026-09-02T17:49:12Z

Bumps the security-updates group with 28 updates:

Package	From	To
@babel/traverse	`7.28.3`	`8.0.4`
@eslint/js	`9.8.0`	`10.0.1`
@nestjs/common	`10.4.20`	`12.0.1`
@types/node	`22.19.1`	`26.4.0`
@typescript-eslint/eslint-plugin	`7.18.0`	`8.68.0`
@typescript-eslint/parser	`7.18.0`	`8.68.0`
eslint	`9.8.0`	`10.9.1`
eslint-plugin-tsdoc	`0.5.0`	`0.5.2`
globals	`16.5.0`	`17.11.0`
husky	`8.0.3`	`9.1.7`
inversify	`6.0.1`	`8.2.3`
jest	`29.7.0`	`30.5.0`
@types/jest	`29.5.12`	`30.0.0`
jest-environment-node	`29.1.0`	`30.5.0`
jest-junit	`16.0.0`	`17.0.0`
lerna	`8.2.4`	`10.0.1`
lint-staged	`16.2.6`	`17.4.1`
madge	`7.0.0`	`8.0.0`
prettier	`3.6.2`	`3.9.6`
rimraf	`5.0.10`	`6.1.3`
sinon	`16.1.3`	`22.1.0`
@types/sinon	`10.0.20`	`22.0.0`
tar	`6.2.1`	`7.5.22`
ts-jest	`29.4.5`	`29.4.12`
typescript	`5.2.2`	`7.0.2`
@vitest/coverage-v8	`1.6.1`	`4.1.11`
@vitest/spy	`1.6.1`	`4.1.11`
vitest	`1.6.1`	`4.1.11`

Updates @babel/traverse from 7.28.3 to 8.0.4

Release notes

Sourced from @babel/traverse's releases.

v8.0.4 (2026-07-09)

👓 Spec Compliance

babel-parser, babel-plugin-transform-typescript

#18120 fix(parser): disallow declare module M {} (@JLHwung)

babel-generator, babel-parser, babel-plugin-transform-typescript

#18100 fix(parser): forbid let x! and let x! = (@JLHwung)

🐛 Bug Fix

babel-traverse

#18122 fix: replaceWith in Visitor#exit should not stop traversal (@liuxingbaoyu)

🏠 Internal

babel-helper-validator-identifier

#18084 refactor: Shrink validator identifier size (@JLHwung)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v8.0.3 (2026-06-27)

🐛 Bug Fix

babel-core, babel-plugin-syntax-typescript

#18089 fix: Remove isTSX from babel-plugin-syntax-typescript types (@liuxingbaoyu)

babel-standalone

#18086 fix: Use runtime: 'classic' in the browser for React (@liuxingbaoyu)

Committers: 2

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v8.0.2 (2026-06-18)

🐛 Bug Fix

Other

#18083 Use the @babel/core version when asserting version in @babel/standalone (@nicolo-ribaudo)

babel-helper-validator-identifier

#18075 fix(identifier): avoid double escaping slash (@JLHwung)

🏠 Internal

babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

#18081 Update @babel/preset-modules and polyfill packages (@nicolo-ribaudo)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v8.0.4 (2026-07-09)

👓 Spec Compliance

babel-parser, babel-plugin-transform-typescript

#18120 fix(parser): disallow declare module M {} (@JLHwung)

babel-generator, babel-parser, babel-plugin-transform-typescript

#18100 fix(parser): forbid let x! and let x! = (@JLHwung)

🐛 Bug Fix

babel-traverse

#18122 fix: replaceWith in Visitor#exit should not stop traversal (@liuxingbaoyu)

🏠 Internal

babel-helper-validator-identifier

#18084 refactor: Shrink validator identifier size (@JLHwung)

v8.0.3 (2026-06-27)

🐛 Bug Fix

babel-core, babel-plugin-syntax-typescript

#18089 fix: Remove isTSX from babel-plugin-syntax-typescript types (@liuxingbaoyu)

babel-standalone

#18086 fix: Use runtime: 'classic' in the browser for React (@liuxingbaoyu)

v8.0.2 (2026-06-18)

🐛 Bug Fix

Other

#18083 Use the @babel/core version when asserting version in @babel/standalone (@nicolo-ribaudo)

babel-helper-validator-identifier

#18075 fix(identifier): avoid double escaping slash (@JLHwung)

🏠 Internal

babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

#18081 Update @babel/preset-modules and polyfill packages (@nicolo-ribaudo)

v8.0.1 (2026-06-17)

💥 Breaking Change

babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

#18079 Actually remove preset-env's useBuiltIns (@nicolo-ribaudo)

v8.0.0 (2026-06-16)

👓 Spec Compliance

babel-core

#18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

💥 Breaking Change

babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register

#18069 Fallback to assuming ESM support with modules: auto (@nicolo-ribaudo)

babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime

#18036 Remove corejs exports for @babe/runtime-corejs3 (@liuxingbaoyu)

babel-parser

... (truncated)

Commits

8ed5db1 v8.0.4
cb556b8 fix: replaceWith in Visitor#exit should not stop traversal (#18122)
7dc825a v8.0.0
827d003 Change jest snapshotFormat (#18029)
73bceef v8.0.0-rc.6
448aef3 Show source maps mappings as point-to-point (#18008)
c6d71f3 Enable strictFunctionTypes (#17946)
0e16971 Do not emit source map names for identical names (#18005)
dc91f90 v8.0.0-rc.5
b34c4e7 Bump typescript-eslint to 8.59.2 (#17984)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/traverse since your current version.

Updates @eslint/js from 9.8.0 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
b4b3127 chore: package.json update for @eslint/js release
0b14059 chore: package.json update for @eslint/js release
fa31a60 feat!: add name to configs (#20015)
1e2cad5 chore: package.json update for @eslint/js release
454a292 feat!: update eslint:recommended configuration (#20210)
c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
c7ebefc chore: package.json update for @eslint/js release
Additional commits viewable in compare view

Updates @nestjs/common from 10.4.20 to 12.0.1

Release notes

Sourced from @nestjs/common's releases.

v12.0.0

NestJS v12.0.0

NestJS 12 is centered around ESM-ready packages, first-class Standard Schema support for validation and serialization, a rebuilt CLI, and native observability through the new @nestjs/observe SDK.

Existing CommonJS applications keep working — migrating your own code to ESM is entirely optional.

📖 Full migration guide

Upgrading

Upgrade the CLI first, since the upgrade command ships with it:
npm i -g @nestjs/cli@latest
Then, from the root of your project:
nest upgrade
nest upgrade moves every @nestjs/* package to its v12-compatible major at once and applies the mechanical parts of the migration for you — nest-cli.json webpack options, the GraphQL playground → graphiql rename and subscriptions transport swap, the NATS package replacement, @nestjs/config validation options, Jest and Joi bumps — then prints a report of everything it changed and everything you still need to review by hand. Run it with --dry-run first to see that report without touching your files.

It deliberately does not migrate your project to ESM, Vitest, or oxlint. Those are the defaults for newly generated projects; existing projects adopt them on their own schedule.

Node.js: v12 requires Node.js v20.19+ or v22.12+. Both require(esm) and the ESM packages depend on it; the upgrade command refuses to run on older releases (including the 21.x line). The latest active LTS is recommended.

Highlights

ESM packages

All core Nest packages now ship as ESM. Thanks to require(esm) in modern Node.js, most existing CommonJS applications continue to work without a rewrite. Review custom bootstrapping scripts, build tooling, and test runners if they assume CommonJS-only packages.

nest new now asks whether to scaffold a CommonJS or an ESM project.

Standard Schema validation

Route parameter decorators — @Body(), @Query(), @Param(), @RawBody() — accept a new schema option, designed for Standard Schema compatible libraries such as Zod, Valibot, and ArkType:
@Post()
create(@Body({ schema: createUserSchema }) body: CreateUserDto) {
  return this.usersService.create(body);
}
</tr></table> 

... (truncated)

Commits

4c751c5 chore(release): publish v12.0.1 release
6494a6c chore(release): publish v12.0.0 release
e306724 fix(deps): update dependency file-type to v22
edb0034 Merge branch 'master' into v12.0.0
4535f43 chore(release): publish v11.2.1 release
e255755 chore: resolve conflicts, minor fixes
5d1b19b Merge branch 'master' into v12.0.0
f2a7e4b chore(release): publish v11.2.0 release
b2e7fb5 Merge pull request #17469 from nestjs/feat/sse-signal
6498f11 feat: signal should finalize in every case
Additional commits viewable in compare view

Updates @types/node from 22.19.1 to 26.4.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 7.18.0 to 8.68.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

Niki @phaux

Thiago Barbosa

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

🩹 Fixes

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Niki @phaux

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

🩹 Fixes

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

... (truncated)

Commits

8f4e00a chore(release): publish 8.68.0
db30514 feat(eslint-plugin): [strict-void-return] add fix suggestions (#12086)
9690339 test(eslint-plugin): [prefer-optional-chain] use createRuleTesterWithTypes ...
abe9011 fix(eslint-plugin): [no-empty-object-type] ignore suggestions that result in ...
79c16e7 chore(eslint-plugin): extract FunctionSignature and enum comparison utils (#1...
2442e30 test(eslint-plugin): [no-floating-promises] format test snippets (#12723)
3596323 fix(eslint-plugin): [no-floating-promises] setting ignoreVoid: false result...
956a339 fix(eslint-plugin): [no-unnecessary-type-assertion] prevent stack overflow in...
55f6d5d chore: enable source maps (#12677)
3aefb6a test: improve vitest performance with isolate: false (#12703)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @typescript-eslint/eslint-plugin since your current version.

Updates @typescript-eslint/parser from 7.18.0 to 8.68.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

Niki @phaux

Thiago Barbosa

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits

8f4e00a chore(release): publish 8.68.0
55f6d5d chore: enable source maps (#12677)
20a261f chore(release): publish 8.67.0
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
63ba81b chore(release): publish 8.65.0
eaf4576 feat: add warning when TS 7 is detected (#12529)
d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
0d06406 chore: add attw validation to repo (#12437)
c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @typescript-eslint/parser since your current version.

Updates eslint from 9.8.0 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)

55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)

8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)

684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))

87f66f4 docs: Update README (GitHub Actions Bot)

585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)

f3993b0 docs: Update README (GitHub Actions Bot)

ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)

1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)

4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)

510d1a2 docs: Update README (GitHub Actions Bot)

Chores

899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])

9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)

dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)

f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])

4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)

151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)

6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)

4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)

677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)

0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)

678c90b docs: Update README (GitHub Actions Bot)

8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

5c8c241 10.9.1
a7f3b7d Build: changelog update for 10.9.1
1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251)
ad74a8d docs: add deprecation steps for EOL package versions (#21248)
3c3ae53 chore: update ecosystem plugins (#21249)
c27bc92 10.9.0

Bumps the security-updates group with 28 updates: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.28.3` | `8.0.4` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.8.0` | `10.0.1` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `10.4.20` | `12.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.1` | `26.4.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.68.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.68.0` | | [eslint](https://github.com/eslint/eslint) | `9.8.0` | `10.9.1` | | [eslint-plugin-tsdoc](https://github.com/microsoft/tsdoc/tree/HEAD/eslint-plugin) | `0.5.0` | `0.5.2` | | [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.11.0` | | [husky](https://github.com/typicode/husky) | `8.0.3` | `9.1.7` | | [inversify](https://github.com/inversify/monorepo) | `6.0.1` | `8.2.3` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.5.0` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` | | [jest-environment-node](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-node) | `29.1.0` | `30.5.0` | | [jest-junit](https://github.com/jest-community/jest-junit) | `16.0.0` | `17.0.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `8.2.4` | `10.0.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.6` | `17.4.1` | | [madge](https://github.com/pahen/madge) | `7.0.0` | `8.0.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.6` | | [rimraf](https://github.com/isaacs/rimraf) | `5.0.10` | `6.1.3` | | [sinon](https://github.com/sinonjs/sinon) | `16.1.3` | `22.1.0` | | [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `10.0.20` | `22.0.0` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.22` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.12` | | [typescript](https://github.com/microsoft/TypeScript) | `5.2.2` | `7.0.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `1.6.1` | `4.1.11` | | [@vitest/spy](https://github.com/vitest-dev/vitest/tree/HEAD/packages/spy) | `1.6.1` | `4.1.11` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.1` | `4.1.11` | Updates `@babel/traverse` from 7.28.3 to 8.0.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-traverse) Updates `@eslint/js` from 9.8.0 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@nestjs/common` from 10.4.20 to 12.0.1 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.0.1/packages/common) Updates `@types/node` from 22.19.1 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.18.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/parser) Updates `eslint` from 9.8.0 to 10.9.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.8.0...v10.9.1) Updates `eslint-plugin-tsdoc` from 0.5.0 to 0.5.2 - [Changelog](https://github.com/microsoft/tsdoc/blob/main/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/microsoft/tsdoc/commits/eslint-plugin-tsdoc_v0.5.2/eslint-plugin) Updates `globals` from 16.5.0 to 17.11.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.5.0...v17.11.0) Updates `husky` from 8.0.3 to 9.1.7 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v8.0.3...v9.1.7) Updates `inversify` from 6.0.1 to 8.2.3 - [Release notes](https://github.com/inversify/monorepo/releases) - [Changelog](https://github.com/inversify/monorepo/blob/main/docs/release.md) - [Commits](https://github.com/inversify/monorepo/compare/@inversifyjs/core@6.0.1...inversify@8.2.3) Updates `jest` from 29.7.0 to 30.5.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.0/packages/jest) Updates `@types/jest` from 29.5.12 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `jest-environment-node` from 29.1.0 to 30.5.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.0/packages/jest-environment-node) Updates `jest-junit` from 16.0.0 to 17.0.0 - [Release notes](https://github.com/jest-community/jest-junit/releases) - [Commits](jest-community/jest-junit@v16.0.0...v17.0.0) Updates `lerna` from 8.2.4 to 10.0.1 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v10.0.1/packages/lerna) Updates `lint-staged` from 16.2.6 to 17.4.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.2.6...v17.4.1) Updates `madge` from 7.0.0 to 8.0.0 - [Changelog](https://github.com/pahen/madge/blob/master/CHANGELOG.md) - [Commits](pahen/madge@v7.0.0...v8.0.0) Updates `prettier` from 3.6.2 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.9.6) Updates `rimraf` from 5.0.10 to 6.1.3 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v5.0.10...v6.1.3) Updates `sinon` from 16.1.3 to 22.1.0 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md) - [Commits](sinonjs/sinon@v16.1.3...v22.1.0) Updates `@types/sinon` from 10.0.20 to 22.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `tar` from 6.2.1 to 7.5.22 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.22) Updates `ts-jest` from 29.4.5 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.12) Updates `typescript` from 5.2.2 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.2.2...v7.0.2) Updates `@vitest/coverage-v8` from 1.6.1 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8) Updates `@vitest/spy` from 1.6.1 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/spy) Updates `vitest` from 1.6.1 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-version: 8.0.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@nestjs/common" dependency-version: 12.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/node" dependency-version: 26.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/parser" dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: eslint dependency-version: 10.9.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: eslint-plugin-tsdoc dependency-version: 0.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: globals dependency-version: 17.11.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: husky dependency-version: 9.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: inversify dependency-version: 8.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest dependency-version: 30.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest-environment-node dependency-version: 30.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest-junit dependency-version: 17.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lerna dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lint-staged dependency-version: 17.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: madge dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: rimraf dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: sinon dependency-version: 22.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/sinon" dependency-version: 22.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: tar dependency-version: 7.5.22 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/spy" dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 2, 2026

Navigation Menu

Uh oh!

Uh oh!

deps: bump the security-updates group with 28 updates - #1075

deps: bump the security-updates group with 28 updates#1075
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/security-updates-982c890107

dependabot Bot commented on behalf of github Sep 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 2, 2026

v8.0.4 (2026-07-09)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 4

v8.0.3 (2026-06-27)

🐛 Bug Fix

Committers: 2

v8.0.2 (2026-06-18)

🐛 Bug Fix

🏠 Internal

Committers: 2

v8.0.4 (2026-07-09)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

v8.0.3 (2026-06-27)

🐛 Bug Fix

v8.0.2 (2026-06-18)

🐛 Bug Fix

🏠 Internal

v8.0.1 (2026-06-17)

💥 Breaking Change

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

v12.0.0

NestJS v12.0.0

Upgrading

Highlights

ESM packages

Standard Schema validation

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

8.67.0 (2026-08-10)

8.66.0 (2026-08-03)

🩹 Fixes

❤️ Thank You

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.68.0 (2026-08-24)

8.67.0 (2026-08-10)

8.66.0 (2026-08-03)

8.65.0 (2026-07-20)

🚀 Features

❤️ Thank You

8.64.0 (2026-07-13)

v10.9.1

Bug Fixes