build(deps): bump the npm-dependencies group across 1 directory with 31 updates

[dependabot]

Bumps the npm-dependencies group with 31 updates in the / directory:

Package	From	To
@arethetypeswrong/cli	0.18.3	0.18.5
@biomejs/biome	2.5.0	2.5.7
@changesets/cli	2.31.0	2.31.1
@types/node	26.0.0	26.1.2
@vitest/coverage-v8	4.1.9	4.1.10
eslint	10.5.0	10.8.0
eslint-plugin-n	18.1.0	18.2.2
eslint-plugin-unicorn	68.0.0	73.0.0
prettier	3.8.4	3.9.6
publint	0.3.21	0.3.23
tsx	4.22.4	4.23.10
typedoc	0.28.19	0.28.20
typescript	6.0.3	7.0.2
typescript-eslint	8.61.1	8.66.0
vite	8.0.16	8.2.1
vitest	4.1.9	4.1.10
@effect/platform	0.96.2	0.97.1
better-sqlite3	12.11.1	13.0.3
effect	3.21.4	3.22.1
jose	6.2.3	6.2.8
ws	8.21.0	8.21.2
@types/better-sqlite3	7.6.13	9.6.0
@fastify/websocket	11.2.0	11.3.0
fastify	5.8.5	5.11.2
hono	4.12.26	4.13.1
@effect/opentelemetry	0.63.0	0.64.0
@opentelemetry/resources	2.8.0	2.10.0
@opentelemetry/sdk-trace-base	2.8.0	2.10.0
@modelcontextprotocol/sdk	1.29.0	1.30.0
@opentelemetry/sdk-trace-node	2.8.0	2.10.0
@opentelemetry/semantic-conventions	1.41.1	1.43.0

Updates @arethetypeswrong/cli from 0.18.3 to 0.18.5

Changelog

Sourced from @​arethetypeswrong/cli's changelog.

0.18.5

Patch Changes

• Updated dependencies [c4be7e8]
  • @​arethetypeswrong/core@​0.18.5

0.18.4

Patch Changes

• Updated dependencies [644fab1]
  • @​arethetypeswrong/core@​0.18.4

Commits

• See full diff in compare view

Updates @biomejs/biome from 2.5.0 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

  type Mapper<T> = () => T;
  declare function map<T>(mapper: Mapper<T>): T;

... (truncated)

Commits

• 191d051 ci: release (#11119)
• 9847e68 feat(lint): add noNonScalableViewport rule (#11168)
• e63354c feat(lint): add noExtendNative nursery rule (#11136)
• 2fa0a62 docs: rework CLI (#11134)
• e007143 feat(lint): add nursery rule noTailwindArbitraryValue (#10094)
• c171b3b feat(lint): add ignoreIfStatements option to useNullishCoalescing (#10822)
• 1139f1c ci: release (#11022)
• 781d68d feat(lint/js): add noRestrictedProperties (#9806)
• 412a0e9 ci: release (#10948)
• b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
• Additional commits viewable in compare view

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

• #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

Commits

• a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
• e8650b9 Version Packages (#2161)
• 15cf592 Fixed handling of the npm 12 info output (#2159)
• 9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
• 97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
• 13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
• 8f6acd6 Update dependabot group to exclude major (#2067)
• c70c675 Setup backport workflow and sync next setup (#2057)
• 9672019 Remove SECURITY.md to defer to .github (#2055)
• 18e1661 Use internal bot for versioning (#2039)
• Additional commits viewable in compare view

Updates @types/node from 26.0.0 to 26.1.2

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Updates eslint from 10.5.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

• 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
• 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
• e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
• 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
• 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
• b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
• 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
• 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
• 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
• 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
• d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
• eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
• c5963f7 docs: Update README (GitHub Actions Bot)

Chores

• 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
• eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
• e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
• ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
• 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
• fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
• 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
• 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
• a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
• 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
• 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
• a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
• c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
• 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
• 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
• dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
• 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
• 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
• d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
• bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

• 749dfed 10.8.0
• 4bd0d75 Build: changelog update for 10.8.0
• 4fbf46d test: pin webpack version to 5.108.4 (#21137)
• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
• 784dfbe docs: Clarify no-eq-null description (#21120)
• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
• eccbe7b test: add error locations to no-class-assign (#21123)
• 2fee9bb feat: export ConfigObject from eslint/config (#21082)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
• Additional commits viewable in compare view

Updates eslint-plugin-n from 18.1.0 to 18.2.2

Release notes

Sourced from eslint-plugin-n's releases.

v18.2.2

18.2.2 (2026-07-11)

🩹 Fixes

• Ignore HTTP imports in no-missing-import (#547) (3ff929d)
• no-callback-literal: report object, array, and template literals (#552) (dca2330)

v18.2.1

18.2.1 (2026-06-26)

🩹 Fixes

• ensure types have valid syntax (#544) (a0d7819)

v18.2.0

18.2.0 (2026-06-25)

🌟 Features

• add module.exports for require(esm) interop (#542) (04c99df)

Changelog

Sourced from eslint-plugin-n's changelog.

18.2.2 (2026-07-11)

🩹 Fixes

• Ignore HTTP imports in no-missing-import (#547) (3ff929d)
• no-callback-literal: report object, array, and template literals (#552) (dca2330)

18.2.1 (2026-06-26)

🩹 Fixes

• ensure types have valid syntax (#544) (a0d7819)

18.2.0 (2026-06-25)

🌟 Features

• add module.exports for require(esm) interop (#542) (04c99df)

Commits

• 0c31d00 chore(master): release 18.2.2 (#548)
• dca2330 fix(no-callback-literal): report object, array, and template literals (#552)
• 3ff929d fix: Ignore HTTP imports in no-missing-import (#547)
• 37da568 chore(master): release 18.2.1 (#546)
• a0d7819 fix: ensure types have valid syntax (#544)
• ccd1832 chore(master): release 18.2.0 (#543)
• 04c99df feat: add module.exports for require(esm) interop (#542)
• See full diff in compare view

Updates eslint-plugin-unicorn from 68.0.0 to 73.0.0

Release notes

Sourced from eslint-plugin-unicorn's releases.

v73.0.0

New rules

• consistent-arrow-return-style (#3601) ae3c3d93
• iteration-fallback-style (#3602) a61c2c5e
• no-barrel-files (#3570) d900c09e
• no-unsafe-sqlite-interpolation (#3582) a09869bc
• single-line-block-comment-style (#3584) a0c2c576

Improvements

• Improve performance (#3560) 7b7c7906
• Harden rules (#3585) 9c2b0bb1
• consistent-boolean-name: Add wrappers option (#3572) 78c5abf2
• consistent-boolean-name: Add granular check options (#3591) a33b1c1e
• consistent-function-style: Add defaultExport option (#3600) e78a7c96
• prefer-https: Add ignore option (#3557) 7f7ec066
• comment-content: Handle Unicode word boundaries (#3597) dd52b4a4
• import-style: Ignore type-only imports (#3599) f2a62e37
• name-replacements: Handle TypeScript parameter properties (#3575) fa0df7bd
• no-negated-comparison: Never check relational operators (#3589) 6120423a
• no-this-outside-of-class: Allow explicit TypeScript this parameters (#3596) 6a709b75
• no-unnecessary-string-trim: Handle Zod string schemas (#3577) 1c06db0c
• prefer-else-if: Handle existing else if chains (#3587) 46eaaf00
• prefer-simple-condition-first: Treat == null checks as simple (#3559) d1be07ea
• prefer-set-has: Fix false positives for computed members (#3562) 28176822
• consistent-export-decorator-position: Fix decorator position reporting (#3583) 0a19cb4d
• no-array-for-each: Fix deprecation docs (#3568) 0096a181
• Fix process.exit control-flow analysis (#3590) 342a5edf

---

sindresorhus/eslint-plugin-unicorn@v72.0.0...v73.0.0

v72.0.0

Breaking

• prefer-minimal-ternary: Rename checkVaryingCallee option to checkVaryingBase (#3508) 825b7b9b

New rules

• no-missing-local-resource (#3528) 12a33c61
• no-multiple-promise-resolver-calls (#3523) 81ab092c
• no-shorthand-property-overrides (#3527) 91a4c4d9
• no-transition-all (#3529) 5ef2fcf0
• no-unnecessary-string-trim (#3517) a6516727
• no-useless-re-export (#3540) 96afe553
• prefer-explicit-viewport-units (#3532) 449e6369
• prefer-then-catch (#3526) a17e5a29
• require-frontmatter-fields (#3525) dfd91cdd

... (truncated)

Commits

• b548020 73.0.0
• ae3c3d9 Add consistent-arrow-return-style rule (#3601)
• a61c2c5 Add iteration-fallback-style rule (#3602)
• e78a7c9 consistent-function-style: Add defaultExport option (#3600)
• f2a62e3 import-style: Ignore type-only imports (#3599)
• dd52b4a comment-content: Handle Unicode word boundaries (#3597)
• 6a709b7 no-this-outside-of-class: Allow explicit TypeScript this parameters (#3596)
• a33b1c1 consistent-boolean-name: Add granular check options (#3591)
• 342a5ed Fix process.exit control-flow analysis (#3590)
• 6120423 no-negated-comparison: Never check relational operators (#3589)
• Additional commits viewable in compare view

Updates prettier from 3.8.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates publint from 0.3.21 to 0.3.23

Changelog

Sourced from publint's changelog.

0.3.23

Patch Changes

• #248 9ff88ac - Recursively detect test files (e.g. *.test.js, *.spec.ts) for the USE_FILES suggestion.

• #245 ad737a3 - The USE_FILES message now reports which internal files or directories triggered it via args.internalFilePaths

0.3.22

Patch Changes

• #241 7740a62 - Support npm v12 and pnpm v11

• cad0425 - Relax git url regex for repository validation

• #244 393ac4d - Recognize more common internal files for the USE_FILES suggestion.

• #242 4a8dc75 - Refactor supported package manager handling from @publint/pack

Commits

• See full diff in compare view

Updates tsx from 4.22.4 to 4.23.10

Release notes

Sourced from tsx's releases.

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

• support nyc coverage discovery (#710) (ec1bcd5)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

• map Node test locations (2f55884)
• support data URLs in tsImport (b94f46f)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.8

4.23.8 (2026-08-05)

Bug Fixes

• preserve package subpath resolution (be1315e)
• preserve typeless ESM dependency exports (

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.