Build(deps-dev): Bump the dependencies group across 1 directory with 14 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the dependencies group with 14 updates in the / directory:

Package	From	To
@axe-core/playwright	4.11.3	4.12.1
@playwright/test	1.60.0	1.62.0
@types/node	24.13.1	26.1.2
@vitest/coverage-v8	4.1.8	4.1.10
eslint-plugin-playwright	2.10.4	2.11.0
eslint-plugin-sonarjs	4.0.3	4.2.0
fallow	2.89.0	3.10.0
jsdom	29.1.1	30.0.1
oxfmt	0.51.0	0.61.0
oxlint	1.68.0	1.76.0
oxlint-tsgolint	0.23.0	7.0.2001
typescript	6.0.3	7.0.2
vite	8.0.16	8.1.5
vitest	4.1.8	4.1.10

Updates @axe-core/playwright from 4.11.3 to 4.12.1

Changelog

Sourced from @​axe-core/playwright's changelog.

4.12.1 (2026-06-22)

Features

• Update axe-core to v4.12.1 (#1378) (4263054)

Commits

• See full diff in compare view

Updates @playwright/test from 1.60.0 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits

• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• 2934858 fix: correct pending navigation log spacing (#41949)
• 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
• bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
• 15c4f55 fix(mcp): identify downloads explicitly (#41933)
• f5fa967 fix(network): request.postData() returns null for empty string body override ...
• 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
• 244a1ff feat(firefox): roll to r1538 (#41938)
• Additional commits viewable in compare view

Updates @types/node from 24.13.1 to 26.1.2

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.8 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• a7a61e7 chore: release v4.1.9 (#10598)
• See full diff in compare view

Updates eslint-plugin-playwright from 2.10.4 to 2.11.0

Release notes

Sourced from eslint-plugin-playwright's releases.

v2.11.0

2.11.0 (2026-07-27)

Features

• no-unnecessary-assertions: flag always-passing assertions on a Locator (#470) (b6d3e5d), closes #463

v2.10.5

2.10.5 (2026-07-06)

Bug Fixes

• handle optional chaining in missing-playwright-await (#472) (c02becc)

Commits

• b6d3e5d feat(no-unnecessary-assertions): flag always-passing assertions on a Locator ...
• bba6d4e add explanation for prefer-locator (#478)
• 2985e02 chore(deps): Bump sigstore from 4.1.0 to 4.1.1 (#475)
• 0c75897 chore(deps-dev): Bump vitest from 4.0.18 to 4.1.0 (#465)
• 77cb84b chore(deps): Bump @​sigstore/verify from 3.1.0 to 3.1.1 (#474)
• 66ce7e4 chore(deps): Bump vite from 7.3.2 to 7.3.5 (#468)
• cdae58b chore(deps): Bump tar from 7.5.11 to 7.5.16 (#469)
• cad8d1e chore(deps): Bump js-yaml from 4.1.1 to 4.3.0 (#471)
• c02becc fix: handle optional chaining in missing-playwright-await (#472)
• 63233f1 chore(deps): Bump @​sigstore/core from 3.1.0 to 3.2.1 (#473)
• See full diff in compare view

Updates eslint-plugin-sonarjs from 4.0.3 to 4.2.0

Changelog

Sourced from eslint-plugin-sonarjs's changelog.

Release Guide

SonarJS currently has two distinct release targets:

Target	Artifact	Main workflow	Notes
Standard SonarQube analyzer	Maven/JAR release artifacts	.github/workflows/automated-release.yml	This is the normal SonarJS release flow.
SQAA (previously A3S)	Docker image for LanguageAnalyzerService	.github/workflows/docker-sqaa.yml	Manual SQAA-only entry point and fallback.

Terminology

• SQAA is the current name for what older docs and repository names still call A3S.
• Some external identifiers still keep the legacy a3s name for compatibility. The important ones are:
  • the Docker repository path a3s/analysis/javascript
  • packages/grpc/src/proto/language_analyzer.proto with option java_package = "com.sonarsource.a3s.analyzer.grpc";
• Do not rename those compatibility-sensitive identifiers as part of a routine release.

Standard SonarQube Analyzer Release

This is the regular SonarJS analyzer release. It produces the standard SonarQube analyzer artifacts and can also automate the SQAA handoff using the same build number.

Entry points

1. Start .github/workflows/automated-release.yml.
2. That workflow orchestrates the release and then calls .github/workflows/release.yml for the actual artifact publication.
3. After the release succeeds, .github/workflows/bump-versions.yml opens the next development iteration PR.

What .github/workflows/automated-release.yml does

The SonarJS workflow is a thin wrapper around SonarSource/release-github-actions/.github/workflows/automated-release.yml@v1 with SonarJS-specific inputs:

• project name SonarJS
• plugin name javascript
• Jira project JS
• optional SQC and SQS integration PRs
• optional SQAA integration, enabled in the SonarJS wrapper and implemented by a custom local workflow
• SLVS, SLVSCODE, SLE, and SLI integration tickets enabled
• the generic release-github-actions SQAA integration explicitly disabled, because SonarJS uses analysis/js_ts_image_tag instead of gradle/sonar-plugins.versions.toml

The reusable workflow performs the following steps:

1. Freeze the target branch.
2. Run the releasability checks with SonarSource/gh-action_releasability@v3.
3. Resolve the release version with get-release-version.
4. Resolve the Jira version with get-jira-version.
5. Generate Jira-based release notes with get-jira-release-notes unless explicit notes were provided.
6. Create the REL Jira ticket with create-jira-release-ticket.
7. Publish the GitHub release with publish-github-release.
8. Unfreeze the branch.
9. Release the Jira version, create the next Jira version, and move the REL ticket to Technical Release Done.

... (truncated)

Commits

• See full diff in compare view

Updates fallow from 2.89.0 to 3.10.0

Release notes

Sourced from fallow's releases.

v3.10.0: stable type-aware TypeScript analysis

Stable type-aware TypeScript analysis

--type-aware opts into a bounded TypeScript-Go semantic pass that runs after Fallow's normal project analysis. It landed in 3.8.0 as an explicit, repository-only proof; it is now a stable optional contract with a versioned wire protocol and a packaged companion. Default analysis stays fast, syntactic, and independent of Node.js and TypeScript.

npm install --save-dev fallow
npx fallow dead-code --unused-class-members --type-aware

npm installs receive the exact matching fallow-type-aware companion as an optional dependency, so there is nothing else to wire up. See the type-aware analysis guide.

The pass covers five project-wide capabilities:

• exact symbol-use, TypeScript contract, and validated framework-contract decisions for existing dead-code candidates
• symbol traces across namespaces, aliases, and re-export hops
• package API surfaces and cross-file private type leaks
• exact-symbol impact paths and targeted-test suggestions
• advisory public-signature type coupling

Fallow only changes a finding when the checker resolves an exact declaration identity. Name-only matches are never enough, so dynamic computed access, decorators, dependency injection, and runtime registration keep their findings.

Cross-project confirmation

Explicit TypeScript projects are now scanned together, so a use in an application project can confirm a declaration in a referenced library project. String-literal element access is recognized as a use. Explicit solution configs without source files fail closed with per-candidate abstention instead of emitting invalid project metadata.

Checker-backed API and project metadata

Public API analysis no longer treats parameter names or generic type parameters as private types, complete semantic results drop unmatched syntactic leak guesses, and overlapping TypeScript projects no longer duplicate API entries or coupling edges. Per-project candidate, confirmed, unresolved, and abstained counts are populated instead of staying zero, including in the programmatic API.

Unavailable API queries keep their syntactic leak findings, a missing entry point keeps mixed-entry results partial, requests above the private-leak candidate cap retain the unrequested tail and report partial capacity, and

... (truncated)

Changelog

Sourced from fallow's changelog.

[3.10.0] - 2026-07-27

Changed

• Type-aware class-member refinement now covers string-literal element access and cross-project consumers. Explicit TypeScript projects are scanned together, so a use in an application project can confirm a declaration in a referenced library project. Dynamic computed access, decorators, dependency injection, and runtime registration still retain the finding when exact symbol evidence is unavailable. Explicit solution configs without source files now fail closed with per-candidate abstention instead of invalid project metadata. The release corpus enforces pinned clean sources, repeated deterministic output, independent source review, and accuracy, resource, and abstention limits. Corpus evidence is now produced by the exact hashed sidecar artifact recorded during discovery instead of importing workspace implementation modules.

Fixed

• Type-aware API and project metadata now reflect checker-backed facts. Public API analysis no longer treats parameter names or generic type parameters as private types, complete semantic API results remove unmatched syntactic leak guesses, and overlapping TypeScript projects no longer duplicate API entries or coupling edges. Per-project candidate, confirmed, unresolved, and abstained counts are populated instead of remaining zero, including in the programmatic API. Unavailable API queries retain syntactic leak findings, and a missing entry point keeps mixed-entry results partial. Corpus artifacts now record and verify the approved ancestor dependency environment, including its lockfile and installed type-declaration tree, rather than claiming that fixtures resolve with no dependencies. The semantic protocol is now version 6, the first stable type-aware wire contract. A canonical manifest now keeps Rust, the sidecar, corpus tooling, and editor packaging aligned. Pre-stable protocol variants are rejected. Private leak confirmation is request-scoped and bounded, incomplete entry-point coverage retains syntactic candidates, and unexpected checker failures surface as errors instead of being mislabeled as unsupported syntax. Requests above the private-leak candidate cap retain the unrequested tail and report partial capacity instead of failing or pruning it. The Rust semantic client and reconciliation logic now have one owner in fallow-api; CLI, editor, runtime, and programmatic paths share it. Cross-platform child-process lifecycle behavior is shared through fallow-process.

[3.9.1] - 2026-07-24

Added

• fallow impact statusline exposes a compact, read-only Impact summary for agent status lines. It reports the latest whole-project issue count, its trend from the prior full scan, and the number of findings cleared while

... (truncated)

Commits

• 2881013 test: scope process lint expectation to Unix
• 55d72c0 feat(config): add ignoreFindings to hide findings without removing files from...
• d3b7350 fix(deps): credit dependencies referenced by config callbacks and CLI flags
• cca693b test: avoid global sidecar environment mutation
• d73cee9 fix(graph): preserve TypeScript path aliases excluded by ignorePatterns
• 7667b6a test: share type-aware sidecar launcher
• 11bf96c fix: increase standalone icon safe area
• 7f3aee3 fix: normalize type-aware Windows paths
• 1142d22 test: expose type-aware CLI failure output
• c151c4e fix: make type-aware release validation portable
• Additional commits viewable in compare view

Updates jsdom from 29.1.1 to 30.0.1

Release notes

Sourced from jsdom's releases.

v30.0.1

• Fixed getComputedStyle() with calc() and other functions throwing an exception, which regressed in v30.0.0. (@​asamuzaK)
• Sped up up range operations on large documents (@​leonidaz)

v30.0.0

Breaking changes:

• Node.js minimum version raised to ^22.22.2 || ^24.15.0 || >=26.0.0.

Other changes:

• Added CSS.escape() and CSS.supports() functions. (@​asamuzaK)
• Added 'background-position-x' and 'background-position-y' CSS properties. (@​olagokemills)
• Fixed getComputedStyle() to convert length values into pixels. (@​asamuzaK)
• Fixed CSS function serialization, e.g., in the return value of getPropertyValue(). (@​asamuzaK)
• Fixed the type of error thrown by document.evaluate() (@​dokson)

Commits

• 6584485 30.0.1
• 0c51df6 Update dependencies and dev dependencies
• 32adb34 Bump @​asamuzakjp/dom-selector
• 70f014a Speed up range operations on large documents
• 250d7ee Partially fix getComputedStyle with calc()
• 20a01fc 30.0.0
• 8c8e583 Precompute WPT expectation matches
• f32245c Bump Node.js floor and dependencies
• 03ef23b Add background-position longhands
• ded056f Test CSS.escape() with numeric IDs
• Additional commits viewable in compare view

Updates oxfmt from 0.51.0 to 0.61.0

Commits

• 65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
• 83abe3b release(apps): oxlint v1.75.0 && oxfmt v0.60.0 (#24713)
• e2e0f94 chore(docs): update sponsor section (#24588)
• 2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
• 415fe1e fix(oxfmt): error on ignorePatterns that cannot match files outside the confi...
• 39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
• 5306f24 release(apps): oxlint v1.72.0 && oxfmt v0.57.0 (#23935)
• c4be770 release(apps): oxlint v1.71.0 && oxfmt v0.56.0 (#23707)
• aa79b5b release(apps): oxlint v1.70.0 && oxfmt v0.55.0 (#23442)
• 9a2788b feat(linter/unicorn): implement prefer-export-from rule (#22935)
• Additional commits viewable in compare view

Updates oxlint from 1.68.0 to 1.76.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

• 222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)
• 2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)
• bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)
• 5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)
• 7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)
• 2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)
• ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

• 6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)
• 6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)
• 7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)
• 732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)
• a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)
• ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)
• 3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)
• ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)
• e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)
• 6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)
• 85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)
• fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)
• ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)
• dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)
• 989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)
• cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

• 25d577e language_server: Start tools in parallel (#15500) (Sysix)
• 3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)
• 3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)
• 9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)
• 3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)
• 444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

• 97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)
• 2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)
• a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)
• 3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)
• 2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)
• 57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.76.0] - 2026-07-27

🚀 Features

• 8d31dfa linter: Verify eslint/no-restricted-globals config schema (#24598) (vigneshwar)
• 7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (#24724) (Bartok)
• 016cf2a linter/oxc: Add bad-match-all-arg rule (#24900) (camc314)
• cdc941e linter/n: Implement exports-style rule (#24087) (Mikhail Baev)
• 1ad6f6c linter/eslint: Implement id-denylist rule (#24632) (Mikhail Baev)

📚 Documentation

• 3ff2e0e linter: Clarify config extends types (#24936) (Boshen)

[1.75.0] - 2026-07-20

🚀 Features

• dd18383 linter/node: Implement no-top-level-await rule (#24634) (Connor Shea)
• 16a65f2 linter/react: Implement function-component-definition rule (#24471) (Cole Ellison)
• 7f1f585 linter: Reuse jest/padding-around-test-blocks for vitest/padding-around-test-blocks (#24519) (Mikhail Baev)
• 99978a8 linter/import/consistent-type-specifier-style: Support prefer-top-level-if-only-type-imports option (#24502) (camc314)

🐛 Bug Fixes

• 8694167 linter/eslint/prefer-destructuring: Handle typed declarations (#24616) (camc314)

[1.74.0] - 2026-07-13

🚀 Features

• 0433a83 linter/eslint/no-inner-declarations: Add namespaces option (#24044) (Boshen)

🐛 Bug Fixes

• 8337835 linter: Error on ignorePatterns that cannot match files aoutside the config directory (#24341) (leaysgur)
• 2ce5a33 linter: Resolve ignorePatterns relative to the config dir (#24339) (leaysgur)

⚡ Performance

• 7f80cac linter/vue/prop-name-casing: Precompile ignoreProps regex pattern (#24413) (connorshea)
• 6272051 linter/typescript/no-require-imports: Compile allow patterns once (#24417) (connorshea)
• 33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex once (#24420) (connorshea)

[1.73.0] - 2026-07-06

🚀 Features

• a2c97f3 linter/unicorn: Implement explicit-timer-delay rule (#23612) (Mikhail Baev)
• 85735cb linter/unicorn: Implement no-confusing-array-with rule (#23638) (Shekhu☺️)

... (truncated)

Commits

• 65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
• 3ff2e0e docs(linter): clarify config extends types (#24936)
• 8d31dfa feat(linter): verify eslint/no-restricted-globals config schema (#24598)
• 7069621 feat(linter): verify jest/vitest prefer-lowercase-title config schema (#24724)
• 016cf2a feat(linter/oxc): add bad-match-all-arg rule (#24900)
• cdc941e feat(linter/n): implement exports-style rule (#24087)
• 1ad6f6c feat(linter/eslint): implement id-denylist rule (#24632)
• 83abe3b release(apps): oxlint v1.75.0 && oxfmt v0.60.0 (#24713)
• 6ce51d3 chore(deps): update dependency oxlint-tsgolint to v7.0.2000 (#24763)
• dd18383 feat(linter/node): implement no-top-level-await rule (#24634)
• Additional commits viewable in compare view

Updates oxlint-tsgolint from 0.23.0 to 7.0.2001

Release notes

Sourced from oxlint-tsgolint's releases.

v7.0.2001

Highlights

Announcing Type-Aware Linting Stable

What's Changed

• fix(release): preserve binary executable permissions by @​camc314 in oxc-project/tsgolint#1104

Full Changelog: oxc-project/tsgolint@v7.0.2000...v7.0.2001

v7.0.2000

What's Changed

• feat(no-unnecessary-condition): improve diagnostics by @​camc314 in oxc-project/tsgolint#1092
• ci: use pnpm publish and drop global npm install by @​Boshen in oxc-project/tsgolint#1095
• feat(no-floating-promises): improve diagnostics by @​camc314 in oxc-project/tsgolint#1093
• fix(no-unnecessary-type-assertion): preserve type-changing assertions by @​camc314 in oxc-project/tsgolint#1097
• chore(deps): update github actions by @​renovate[bot] in oxc-project/tsgolint#1098
• chore(deps): update module github.com/dlclark/regexp2/v2 to v2.5.2 by @​renovate[bot] in oxc-project/tsgolint#1099
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1100
• fix(ci): disable pnpm git checks for generated release packages by @​camc314 in oxc-project/tsgolint#1103

Full Changelog: oxc-project/tsgolint@v0.25.0...v7.0.2000

v0.25.0

What's Changed

• chore(deps): update pnpm to v11.9.0 by @​renovate[bot] in oxc-project/tsgolint#1043
• perf(no-unnecessary-type-parameters): reuse AST-walk visitor closure by @​connorshea in oxc-project/tsgolint#1034
• perf(strict-void-return): reuse function-body walk visitor closure by @​connorshea in oxc-project/tsgolint#1033
• chore: update typescript-go submodule by @​camc314 in oxc-project/tsgolint#1048
• docs: normalize README sponsor section by @​Boshen in oxc-project/tsgolint#1050
• chore: strip symbols from release binary by @​Boshen in oxc-project/tsgolint#1049
• chore: add -trimpath to release build by @​Boshen in oxc-project/tsgolint#1051
• chore(deps): update crate-ci/typos action to v1.48.0 by @​renovate[bot] in oxc-project/tsgolint#1052
• chore(deps): update github actions by @​renovate[bot] in oxc-project/tsgolint#1056
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1057
• fix(no-deprecated): avoid contextual union property false positives by @​camc314 in oxc-project/tsgolint#1059
• fix(prefer-optional-chain): preserve negated optional guard by @​camc314 in oxc-project/tsgolint#1061
• perf(linter): gate reportNodeWithSuggestions on FixSuggestions by @​connorshea in oxc-project/tsgolint#1067
• fix(switch-exhaustiveness-check): honor default case comment patterns by @​camc314 in oxc-project/tsgolint#1070
• perf(strict-void-return): skip type queries for never-callable expressions by @​connorshea in oxc-project/tsgolint#1068
• perf(no-unsafe-argument): skip type queries for never-unsafe arguments by @​connorshea in oxc-project/tsgolint#1066
• Revert "perf(strict-void-return): skip type queries for never-callable expressions" by @​camc314 in oxc-project/tsgolint#1071
• chore: update typescript-go submodule by @​camc314 in oxc-project/tsgolint#1072
• chore(deps): update dependency dprint-json to v0.23.0 by @​renovate[bot] in oxc-project/tsgolint#1080
• chore(deps): update taiki-e/install-action action to v2.83.0 by @​renovate[bot] in oxc-project/tsgolint#1082
• chore(deps): update gomod by @​renovate[bot] in oxc-project/tsgolint#1081
• perf(no-unnecessary-type-arguments): skip signature resolution when node has no type arguments by @​connorshea in oxc-project/tsgolint#1064
• refactor: miscellaneous code cleanup by @​connorshea in oxc-project/tsgolint#1077

... (truncated)

Commits

• 482dcf7 fix(release): preserve binary executable permissions (#1104)
• 7ea9b74 fix(ci): disable pnpm git checks for generated release packages (#1103)
• a90133b chore(deps): update npm packages (#1100)
• f5a7520 chore(deps): update module github.com/dlclark/regexp2/v2 to v2.5.2 (#1099)
• 5cc766e chore(deps): update github actions (#1098)
• 4e9120a fix(no-unnecessary-type-assertion): preserve type-changing assertions (#1097)
• bbcafc7 feat(no-floating-promises): improve diagnostics (#1093)
• 305e137 ci: use pnpm publish and drop global npm install (#1095)
• 1b97ad9 feat(no-unnecessary-condition): improve diagnostics (#1092)
• 1abf9a5 docs: update sponsor section
• Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vite from 8.0.16 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

• bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
• client: overlay error message format align rolldown (#22869) (5a72b87)
• deps: update all non-major dependencies (#22921) (fef682d)
• deps: update rolldown-related dependencies (#22922) (3c345e4)
• module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codescene-delta-analysis]

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile: Custom Configuration
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.

[ccombe]

Addressed and superseded in #69 (updated dev-dependencies including typescript, vite, vitest, and migrated pnpm overrides to pnpm-workspace.yaml).

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml