deps: bump the security-updates group with 28 updates by dependabot[bot] · Pull Request #1073 · suites-dev/suites

dependabot · 2026-08-26T17:48:49Z

Bumps the security-updates group with 28 updates:

Package	From	To
@babel/traverse	`7.28.3`	`8.0.4`
@eslint/js	`9.8.0`	`10.0.1`
@nestjs/common	`10.4.20`	`11.2.1`
@types/node	`22.19.1`	`26.2.0`
@typescript-eslint/eslint-plugin	`7.18.0`	`8.67.0`
@typescript-eslint/parser	`7.18.0`	`8.67.0`
eslint	`9.8.0`	`10.9.0`
eslint-plugin-tsdoc	`0.5.0`	`0.5.2`
globals	`16.5.0`	`17.11.0`
husky	`8.0.3`	`9.1.7`
inversify	`6.0.1`	`8.2.3`
jest	`29.7.0`	`30.4.2`
@types/jest	`29.5.12`	`30.0.0`
jest-environment-node	`29.1.0`	`30.4.1`
jest-junit	`16.0.0`	`17.0.0`
lerna	`8.2.4`	`10.0.1`
lint-staged	`16.2.6`	`17.3.0`
madge	`7.0.0`	`8.0.0`
prettier	`3.6.2`	`3.9.6`
rimraf	`5.0.10`	`6.1.3`
sinon	`16.1.3`	`22.1.0`
@types/sinon	`10.0.20`	`22.0.0`
tar	`6.2.1`	`7.5.22`
ts-jest	`29.4.5`	`29.4.12`
typescript	`5.2.2`	`7.0.2`
@vitest/coverage-v8	`1.6.1`	`4.1.11`
@vitest/spy	`1.6.1`	`4.1.11`
vitest	`1.6.1`	`4.1.11`

Updates @babel/traverse from 7.28.3 to 8.0.4

Release notes

Sourced from @babel/traverse's releases.

v8.0.4 (2026-07-09)

👓 Spec Compliance

babel-parser, babel-plugin-transform-typescript

#18120 fix(parser): disallow declare module M {} (@JLHwung)

babel-generator, babel-parser, babel-plugin-transform-typescript

#18100 fix(parser): forbid let x! and let x! = (@JLHwung)

🐛 Bug Fix

babel-traverse

#18122 fix: replaceWith in Visitor#exit should not stop traversal (@liuxingbaoyu)

🏠 Internal

babel-helper-validator-identifier

#18084 refactor: Shrink validator identifier size (@JLHwung)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v8.0.3 (2026-06-27)

🐛 Bug Fix

babel-core, babel-plugin-syntax-typescript

#18089 fix: Remove isTSX from babel-plugin-syntax-typescript types (@liuxingbaoyu)

babel-standalone

#18086 fix: Use runtime: 'classic' in the browser for React (@liuxingbaoyu)

Committers: 2

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v8.0.2 (2026-06-18)

🐛 Bug Fix

Other

#18083 Use the @babel/core version when asserting version in @babel/standalone (@nicolo-ribaudo)

babel-helper-validator-identifier

#18075 fix(identifier): avoid double escaping slash (@JLHwung)

🏠 Internal

babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

#18081 Update @babel/preset-modules and polyfill packages (@nicolo-ribaudo)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v8.0.4 (2026-07-09)

👓 Spec Compliance

babel-parser, babel-plugin-transform-typescript

#18120 fix(parser): disallow declare module M {} (@JLHwung)

babel-generator, babel-parser, babel-plugin-transform-typescript

#18100 fix(parser): forbid let x! and let x! = (@JLHwung)

🐛 Bug Fix

babel-traverse

#18122 fix: replaceWith in Visitor#exit should not stop traversal (@liuxingbaoyu)

🏠 Internal

babel-helper-validator-identifier

#18084 refactor: Shrink validator identifier size (@JLHwung)

v8.0.3 (2026-06-27)

🐛 Bug Fix

babel-core, babel-plugin-syntax-typescript

#18089 fix: Remove isTSX from babel-plugin-syntax-typescript types (@liuxingbaoyu)

babel-standalone

#18086 fix: Use runtime: 'classic' in the browser for React (@liuxingbaoyu)

v8.0.2 (2026-06-18)

🐛 Bug Fix

Other

#18083 Use the @babel/core version when asserting version in @babel/standalone (@nicolo-ribaudo)

babel-helper-validator-identifier

#18075 fix(identifier): avoid double escaping slash (@JLHwung)

🏠 Internal

babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

#18081 Update @babel/preset-modules and polyfill packages (@nicolo-ribaudo)

v8.0.1 (2026-06-17)

💥 Breaking Change

babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

#18079 Actually remove preset-env's useBuiltIns (@nicolo-ribaudo)

v8.0.0 (2026-06-16)

👓 Spec Compliance

babel-core

#18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

💥 Breaking Change

babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register

#18069 Fallback to assuming ESM support with modules: auto (@nicolo-ribaudo)

babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime

#18036 Remove corejs exports for @babe/runtime-corejs3 (@liuxingbaoyu)

babel-parser

... (truncated)

Commits

8ed5db1 v8.0.4
cb556b8 fix: replaceWith in Visitor#exit should not stop traversal (#18122)
7dc825a v8.0.0
827d003 Change jest snapshotFormat (#18029)
73bceef v8.0.0-rc.6
448aef3 Show source maps mappings as point-to-point (#18008)
c6d71f3 Enable strictFunctionTypes (#17946)
0e16971 Do not emit source map names for identical names (#18005)
dc91f90 v8.0.0-rc.5
b34c4e7 Bump typescript-eslint to 8.59.2 (#17984)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/traverse since your current version.

Updates @eslint/js from 9.8.0 to 10.0.1

Release notes

Sourced from @eslint/js's releases.

v10.0.1

Bug Fixes

c87d5bd fix: update eslint (#20531) (renovate[bot])

d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)

04c2147 fix: update error message for unused suppressions (#20496) (fnx)

38b089c fix: update dependency @eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)

6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)

b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

e5c281f chore: updates for v9.39.3 release (Jenkins)

8c3832a chore: update @typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)

8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)

37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)

da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)

84fb885 chore: package.json update for @eslint/js release (Jenkins)

1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)

a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)

c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)

fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)

3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)

501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])

ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)

96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)

c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)

208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)

a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)

a89059d feat!: Program range span entire source text (#20133) (Pixel998)

39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)

f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)

aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)

f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)

4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)

523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)

454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)

4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)

f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)

c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)

290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)

43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

84fb885 chore: package.json update for @eslint/js release
1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
b4b3127 chore: package.json update for @eslint/js release
0b14059 chore: package.json update for @eslint/js release
fa31a60 feat!: add name to configs (#20015)
1e2cad5 chore: package.json update for @eslint/js release
454a292 feat!: update eslint:recommended configuration (#20210)
c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
c7ebefc chore: package.json update for @eslint/js release
Additional commits viewable in compare view

Updates @nestjs/common from 10.4.20 to 11.2.1

Release notes

Sourced from @nestjs/common's releases.

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

feat(core,common,platform-fastify): add query http method support by @gacardinal in nestjs/nest#17162

fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @LeSingh1 in nestjs/nest#17086

test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @brayanjeshua in nestjs/nest#17310

feat(core): sse signal by @kamilmysliwiec in nestjs/nest#17469

chore(deps): update dependency fastify to v5.12.0 by @renovate[bot] in nestjs/nest#17473

New Contributors

@shariyerShazan made their first contribution in nestjs/nest#17430

@Jaybhade made their first contribution in nestjs/nest#17435

@eeshsaxena made their first contribution in nestjs/nest#17416

@Arun445 made their first contribution in nestjs/nest#17377

@GiHoon1123 made their first contribution in nestjs/nest#17350

@johnnyhuirilef made their first contribution in nestjs/nest#17464

@gacardinal made their first contribution in nestjs/nest#17162

@LeSingh1 made their first contribution in nestjs/nest#17086

@brayanjeshua made their first contribution in nestjs/nest#17310

Full Changelog: nestjs/nest@v11.1.29...v11.2.0

v11.1.29

What's Changed

fix(core): stop import lookup after first direct export match by @malekelkssas in nestjs/nest#17141

chore: update multerExceptions constant by @bo0tzz in nestjs/nest#17328

fix(microservices): correct pub/sub client type in redis listeners by @zaewc in nestjs/nest#17331

feat(common): add override mimetype option to file type validator by @Ativ3k in nestjs/nest#17333

fix(core): drop the g flag from middleware overlap regexes by @dchaudhari7177 in nestjs/nest#17335

feat(core): support sse comments by @kyu4583 in nestjs/nest#17327

fix(core): resolve barrier immediately when target count is zero by @ikrbasak in nestjs/nest#17393

fix(common): exclude pipe options from validator options by @coxxny in nestjs/nest#17399

fix(core): serialize SSE retry field when value is zero by @kyu4583 in nestjs/nest#17360

fix(microservices): nullify grpcclient on close when tryshutdown fails by @Se3do in nestjs/nest#17394

fix(express): map missing multer field nesting error by @Se3do in nestjs/nest#17421

New Contributors

@malekelkssas made their first contribution in nestjs/nest#17141

@hjc0930 made their first contribution in nestjs/nest#17311

... (truncated)

Commits

4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
b2e7fb5 Merge pull request #17469 from nestjs/feat/sse-signal
6498f11 feat: signal should finalize in every case
7627546 feat(core): sse signal
5d93228 Merge pull request #17086 from LeSingh1/fix/parse-enum-numeric-reverse-mapping
4fbd6e6 Potential fix for pull request finding
eac10cd Merge pull request #17162 from gacardinal/feat/query-http-method
9879885 Merge pull request #17435 from Jaybhade/fix/file-type-validator-mime-metachar...
03587a1 chore(release): publish v11.1.29 release
Additional commits viewable in compare view

Updates @types/node from 22.19.1 to 26.2.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 7.18.0 to 8.67.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

Evyatar Daud @StyleShit

Kirk Waiblinger @kirkwaiblinger

Steffen Schroeder

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.67.0 (2026-08-10)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

🩹 Fixes

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)

add warning when TS 7 is detected (#12529)

eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

🩹 Fixes

eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)

eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

... (truncated)

Commits

20a261f chore(release): publish 8.67.0
6dfe4d0 chore(eslint-plugin-internal): [plugin-test-formatting] enforce zero-indentat...
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
20cb15e chore(eslint-plugin): split prefer-optional-chain.test.ts in multiple files (...
780a8c5 docs(eslint-plugin): [member-ordering] add lacking commas in default member t...
08dd427 fix(eslint-plugin): [class-literal-property-style] preserve type annotations ...
6be25d3 fix(eslint-plugin): [no-unnecessary-type-parameters] check MappedType key rem...
8826d0e fix(eslint-plugin): [no-useless-default-assignment] don't report defaults use...
7aecc1c fix(eslint-plugin): [prefer-nullish-coalescing] handle shadowed Boolean calls...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @typescript-eslint/eslint-plugin since your current version.

Updates @typescript-eslint/parser from 7.18.0 to 8.67.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

typescript-estree: handle import.defer() as ImportExpression (#12609)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

website: list onUnsupportedTypeScriptVersion in parser options (#12585)

❤️ Thank You

Evyatar Daud @StyleShit

Kirk Waiblinger @kirkwaiblinger

Steffen Schroeder

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits

20a261f chore(release): publish 8.67.0
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
63ba81b chore(release): publish 8.65.0
eaf4576 feat: add warning when TS 7 is detected (#12529)
d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
0d06406 chore: add attw validation to repo (#12437)
c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
414d9ab chore(release): publish 8.64.0
290cf6c chore(release): publish 8.63.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @typescript-eslint/parser since your current version.

Updates eslint from 9.8.0 to 10.9.0

Release notes

Sourced from eslint's releases.

v10.9.0

Features

08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)

55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)

8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)

684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))

87f66f4 docs: Update README (GitHub Actions Bot)

585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)

f3993b0 docs: Update README (GitHub Actions Bot)

ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)

1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)

4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)

510d1a2 docs: Update README (GitHub Actions Bot)

Chores

899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])

9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)

dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)

f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])

4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)

151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)

6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)

Bumps the security-updates group with 28 updates: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.28.3` | `8.0.4` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.8.0` | `10.0.1` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `10.4.20` | `11.2.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.1` | `26.2.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.67.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.67.0` | | [eslint](https://github.com/eslint/eslint) | `9.8.0` | `10.9.0` | | [eslint-plugin-tsdoc](https://github.com/microsoft/tsdoc/tree/HEAD/eslint-plugin) | `0.5.0` | `0.5.2` | | [globals](https://github.com/sindresorhus/globals) | `16.5.0` | `17.11.0` | | [husky](https://github.com/typicode/husky) | `8.0.3` | `9.1.7` | | [inversify](https://github.com/inversify/monorepo) | `6.0.1` | `8.2.3` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.4.2` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` | | [jest-environment-node](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-node) | `29.1.0` | `30.4.1` | | [jest-junit](https://github.com/jest-community/jest-junit) | `16.0.0` | `17.0.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `8.2.4` | `10.0.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.6` | `17.3.0` | | [madge](https://github.com/pahen/madge) | `7.0.0` | `8.0.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.6` | | [rimraf](https://github.com/isaacs/rimraf) | `5.0.10` | `6.1.3` | | [sinon](https://github.com/sinonjs/sinon) | `16.1.3` | `22.1.0` | | [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `10.0.20` | `22.0.0` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.22` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.12` | | [typescript](https://github.com/microsoft/TypeScript) | `5.2.2` | `7.0.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `1.6.1` | `4.1.11` | | [@vitest/spy](https://github.com/vitest-dev/vitest/tree/HEAD/packages/spy) | `1.6.1` | `4.1.11` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.1` | `4.1.11` | Updates `@babel/traverse` from 7.28.3 to 8.0.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-traverse) Updates `@eslint/js` from 9.8.0 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@nestjs/common` from 10.4.20 to 11.2.1 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.1/packages/common) Updates `@types/node` from 22.19.1 to 26.2.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.67.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.18.0 to 8.67.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/parser) Updates `eslint` from 9.8.0 to 10.9.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.8.0...v10.9.0) Updates `eslint-plugin-tsdoc` from 0.5.0 to 0.5.2 - [Changelog](https://github.com/microsoft/tsdoc/blob/main/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/microsoft/tsdoc/commits/eslint-plugin-tsdoc_v0.5.2/eslint-plugin) Updates `globals` from 16.5.0 to 17.11.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.5.0...v17.11.0) Updates `husky` from 8.0.3 to 9.1.7 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v8.0.3...v9.1.7) Updates `inversify` from 6.0.1 to 8.2.3 - [Release notes](https://github.com/inversify/monorepo/releases) - [Changelog](https://github.com/inversify/monorepo/blob/main/docs/release.md) - [Commits](https://github.com/inversify/monorepo/compare/@inversifyjs/core@6.0.1...inversify@8.2.3) Updates `jest` from 29.7.0 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `@types/jest` from 29.5.12 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `jest-environment-node` from 29.1.0 to 30.4.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.1/packages/jest-environment-node) Updates `jest-junit` from 16.0.0 to 17.0.0 - [Release notes](https://github.com/jest-community/jest-junit/releases) - [Commits](jest-community/jest-junit@v16.0.0...v17.0.0) Updates `lerna` from 8.2.4 to 10.0.1 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v10.0.1/packages/lerna) Updates `lint-staged` from 16.2.6 to 17.3.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.2.6...v17.3.0) Updates `madge` from 7.0.0 to 8.0.0 - [Changelog](https://github.com/pahen/madge/blob/master/CHANGELOG.md) - [Commits](pahen/madge@v7.0.0...v8.0.0) Updates `prettier` from 3.6.2 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.9.6) Updates `rimraf` from 5.0.10 to 6.1.3 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v5.0.10...v6.1.3) Updates `sinon` from 16.1.3 to 22.1.0 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md) - [Commits](sinonjs/sinon@v16.1.3...v22.1.0) Updates `@types/sinon` from 10.0.20 to 22.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `tar` from 6.2.1 to 7.5.22 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.22) Updates `ts-jest` from 29.4.5 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.12) Updates `typescript` from 5.2.2 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.2.2...v7.0.2) Updates `@vitest/coverage-v8` from 1.6.1 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8) Updates `@vitest/spy` from 1.6.1 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/spy) Updates `vitest` from 1.6.1 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-version: 8.0.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@nestjs/common" dependency-version: 11.2.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/node" dependency-version: 26.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.67.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@typescript-eslint/parser" dependency-version: 8.67.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: eslint dependency-version: 10.9.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: eslint-plugin-tsdoc dependency-version: 0.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: globals dependency-version: 17.11.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: husky dependency-version: 9.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: inversify dependency-version: 8.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest-environment-node dependency-version: 30.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: jest-junit dependency-version: 17.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lerna dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: lint-staged dependency-version: 17.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: madge dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: rimraf dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: sinon dependency-version: 22.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@types/sinon" dependency-version: 22.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: tar dependency-version: 7.5.22 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@vitest/spy" dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-major dependency-group: security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 26, 2026

Navigation Menu

Uh oh!

Uh oh!

deps: bump the security-updates group with 28 updates - #1073

deps: bump the security-updates group with 28 updates#1073
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/security-updates-c4b6e4dcdf

dependabot Bot commented on behalf of github Aug 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.0.4 (2026-07-09)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 4

v8.0.3 (2026-06-27)

🐛 Bug Fix

Committers: 2

v8.0.2 (2026-06-18)

🐛 Bug Fix

🏠 Internal

Committers: 2

v8.0.4 (2026-07-09)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

v8.0.3 (2026-06-27)

🐛 Bug Fix

v8.0.2 (2026-06-18)

🐛 Bug Fix

🏠 Internal

v8.0.1 (2026-06-17)

💥 Breaking Change

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

v10.0.1

Bug Fixes

Documentation

Chores

v10.0.0

Breaking Changes

Features

v11.2.1

What's Changed

v11.2.0

What's Changed

New Contributors

v11.1.29

What's Changed

New Contributors

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

8.67.0 (2026-08-10)

8.66.0 (2026-08-03)

🩹 Fixes

❤️ Thank You

8.65.0 (2026-07-20)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.66.0 (2026-08-03)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

8.67.0 (2026-08-10)

8.66.0 (2026-08-03)

dependabot Bot commented on behalf of github Aug 26, 2026 •

edited

Loading