fix(deps): update all non-major dependencies

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@typescript-eslint/eslint-plugin (source)	7.6.0 → 7.18.0
@typescript-eslint/parser (source)	7.6.0 → 7.18.0
@vitest/coverage-v8 (source)	1.4.0 → 1.6.1
eslint (source)	9.0.0 → 9.39.2
eslint-config-prettier	9.1.0 → 9.1.2
eslint-config-turbo (source)	1.13.2 → 1.13.4
p-retry	6.2.0 → 6.2.1
pnpm (source)	9.1.1 → 9.15.9
prettier (source)	3.2.5 → 3.7.4
typescript (source)	5.4.4 → 5.9.3
vitest (source)	1.4.0 → 1.6.1
zod (source)	3.22.4 → 3.25.76

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v7.18.0

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] prevent runtime error when asserting a variable declared in default TS lib

• eslint-plugin: [unbound-method] report on destructuring in function parameters

• eslint-plugin: [no-duplicate-type-constituents] shouldn't report on error types

• eslint-plugin: [strict-boolean-expressions] support branded booleans

❤️ Thank You

• auvred
• Oliver Salzburg
• Vinccool96
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

v7.17.0

Compare Source

🚀 Features

• eslint-plugin: backport no-unsafe-function type, no-wrapper-object-types from v8 to v7

• eslint-plugin: [return-await] add option to report in error-handling scenarios only, and deprecate "never"

🩹 Fixes

• eslint-plugin: [no-floating-promises] check top-level type assertions (and more)

• eslint-plugin: [strict-boolean-expressions] consider assertion function argument a boolean context

• eslint-plugin: [no-unnecessary-condition] false positive on optional private field

❤️ Thank You

• Armano
• Josh Goldberg ✨
• Kirk Waiblinger
• StyleShit

You can read about our versioning strategy and releases on our website.

v7.16.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-parameters] descend into all parts of mapped types in no-unnecessary-type-parameters

❤️ Thank You

• Dan Vanderkam

You can read about our versioning strategy and releases on our website.

v7.16.0

Compare Source

🚀 Features

• rule-tester: stricter rule test validations

• eslint-plugin: [no-unnecessary-parameter-property-assignment] add new rule

• eslint-plugin: add support for nested namespaces to unsafe-member-access

• eslint-plugin: [no-floating-promises] add checkThenables option

🩹 Fixes

• deps: update dependency @​eslint-community/regexpp to v4.11.0

• eslint-plugin: [no-floating-promises] add suggestions to tests from #​9263 checkThenables

• website: react key error on internal pages of website

• eslint-plugin: [restrict-template-expressions] don't report tuples if allowArray option is enabled

❤️ Thank You

• Abraham Guo
• auvred
• Josh Goldberg ✨
• Juan Sanchez
• Vinccool96
• YeonJuan
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

v7.15.0

Compare Source

🚀 Features

• eslint-plugin: [array-type] detect Readonly<string[]> case

• eslint-plugin: back-port new rules around empty object types from v8

🩹 Fixes

• disable EXPERIMENTAL_useProjectService in disabled-type-checked shared config

• eslint-plugin: [no-unsafe-return] differentiate a types-error any from a true any

• eslint-plugin: [no-unsafe-call] differentiate a types-error any from a true any

❤️ Thank You

• auvred
• Kim Sang Du
• rgehbt
• Vinccool96

You can read about our versioning strategy and releases on our website.

v7.14.1

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-nullish-coalescing] treat enums and literals as their underlying primitive types

• eslint-plugin: [prefer-nullish-coalescing] ensure ternary fix does not remove parens

❤️ Thank You

• Jake Bailey

You can read about our versioning strategy and releases on our website.

v7.14.0

Compare Source

🚀 Features

• support TypeScript 5.5

🩹 Fixes

• eslint-plugin: [no-extraneous-class] handle abstract members

• eslint-plugin: [prefer-nullish-coalescing] handle intersected primitive types

• eslint-plugin: [no-invalid-this] support AccessorProperty

❤️ Thank You

• Brad Zacher
• cm-ayf
• Jake Bailey
• James Zhan
• Joshua Chen
• yoshi2no

You can read about our versioning strategy and releases on our website.

v7.13.1

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-readonly] refine report locations

• eslint-plugin: [return-await] support explicit resource management

• eslint-plugin: [no-unsafe-member-access] differentiate a types-error any from a true any

❤️ Thank You

• Kirk Waiblinger
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

v7.13.0

Compare Source

🚀 Features

• typescript-estree: require import = require() argument to be a string literal

• typescript-estree: forbid .body, .async, .generator on declare function

• eslint-plugin: [no-dynamic-delete] allow all string literals as index

🩹 Fixes

• ast-spec: function-call-like callee should be Expression not LeftHandSideExpression

• scope-manager: handle index signature in class

• eslint-plugin: [init-declarations] refine report locations

• eslint-plugin: [no-base-to-string] make error message more nuanced

• eslint-plugin: [no-unsafe-assignment] be more specific about error types

• eslint-plugin: [no-magic-numbers] fix implementation of the ignore option

❤️ Thank You

• Fotis Papadogeorgopoulos
• Joshua Chen
• Kirk Waiblinger
• Tobiloba Adedeji
• Vinccool96
• YeonJuan

You can read about our versioning strategy and releases on our website.

v7.12.0

Compare Source

🚀 Features

• eslint-plugin: [no-useless-template-literals] rename to no-useless-template-expression (deprecate no-useless-template-literals)

• rule-tester: check for parsing errors in suggestion fixes

• rule-tester: port checkDuplicateTestCases from ESLint

• eslint-plugin: [no-floating-promises] add option 'allowForKnownSafePromises'

🩹 Fixes

• no-useless-template-expression -> no-unnecessary-template-expression

• eslint-plugin: [no-unnecessary-type-assertion] combine template literal check with const variable check

• eslint-plugin: [dot-notation] fix false positive when accessing private/protected property with optional chaining

• eslint-plugin: [explicit-member-accessibility] refine report locations

• eslint-plugin: [no-unnecessary-type-assertion] declares are always defined, so always check declares

• eslint-plugin: [prefer-literal-enum-member] allow using member it self on allowBitwiseExpressions

• eslint-plugin: [return-await] clean up in-try-catch detection and make autofixes safe

• eslint-plugin: [member-ordering] also TSMethodSignature can be get/set

❤️ Thank You

• Abraham Guo
• Han Yeong-woo
• Joshua Chen
• Kim Sang Du
• Kirk Waiblinger
• YeonJuan

You can read about our versioning strategy and releases on our website.

v7.11.0

Compare Source

🚀 Features

• eslint-plugin: deprecate prefer-ts-expect-error in favor of ban-ts-comment

🩹 Fixes

• eslint-plugin: [consistent-type-assertions] prevent syntax errors on arrow functions

❤️ Thank You

• Abraham Guo
• auvred
• Dom Armstrong
• Kirk Waiblinger

You can read about our versioning strategy and releases on our website.

v7.10.0

Compare Source

🚀 Features

• eslint-plugin: [sort-type-constituents] support case sensitive sorting

🩹 Fixes

• eslint-plugin: [prefer-regexp-exec] fix heuristic to check whether regex may contain global flag

❤️ Thank You

• auvred
• Emanuel Hoogeveen
• jsfm01
• Kirk Waiblinger

You can read about our versioning strategy and releases on our website.

v7.9.0

Compare Source

🩹 Fixes

• eslint-plugin: [explicit-function-return-types] fix false positive on default parameters

❤️ Thank You

• Kirk Waiblinger
• Sheetal Nandi
• Vinccool96

You can read about our versioning strategy and releases on our website.

v7.8.0

Compare Source

🩹 Fixes

• eslint-plugin: [no-unsafe-argument] handle tagged templates

• eslint-plugin: [prefer-optional-chain] suggests optional chaining during strict null equality check

• eslint-plugin: [consistent-type-assertions] handle tagged templates

• eslint-plugin: [no-unsafe-return] handle union types

• eslint-plugin: [no-unused-vars] clear error report range

❤️ Thank You

• auvred
• Josh Goldberg ✨
• jsfm01
• Kim Sang Du
• YeonJuan

You can read about our versioning strategy and releases on our website.

v7.7.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unsafe-assignment] handle shorthand property assignment

• eslint-plugin: [explicit-function-return-type] fix checking wrong ancestor's return type

• eslint-plugin: [prefer-optional-chain] only look at left operand for requireNullish

• eslint-plugin: [no-for-in-array] refine report location

• eslint-plugin: [no-unnecessary-type-assertion] allow non-null assertion for void type

❤️ Thank You

• Abraham Guo
• Kirk Waiblinger
• YeonJuan

You can read about our versioning strategy and releases on our website.

v7.7.0

Compare Source

🚀 Features

• eslint-plugin: replace no-new-symbol with no-new-native-nonconstructor

❤️ Thank You

• Dave
• Josh Goldberg ✨

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v7.18.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.17.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.16.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.16.0

Compare Source

🩹 Fixes

• deps: update dependency @​eslint-community/regexpp to v4.11.0

• website: react key error on internal pages of website

❤️ Thank You

• Abraham Guo
• auvred
• Josh Goldberg ✨
• Juan Sanchez
• Vinccool96
• YeonJuan
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

v7.15.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.14.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.14.0

Compare Source

🚀 Features

• support TypeScript 5.5

❤️ Thank You

• Brad Zacher
• cm-ayf
• Jake Bailey
• James Zhan
• Joshua Chen
• yoshi2no

You can read about our versioning strategy and releases on our website.

v7.13.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.13.0

Compare Source

🚀 Features

• parser, typescript-estree: export withoutProjectParserOptions utility

❤️ Thank You

• Fotis Papadogeorgopoulos
• Joshua Chen
• Kirk Waiblinger
• Tobiloba Adedeji
• Vinccool96
• YeonJuan

You can read about our versioning strategy and releases on our website.

v7.12.0

Compare Source

🩹 Fixes

• types: correct typing ParserOptions

❤️ Thank You

• Abraham Guo
• Han Yeong-woo
• Joshua Chen
• Kim Sang Du
• Kirk Waiblinger
• YeonJuan

You can read about our versioning strategy and releases on our website.

v7.11.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.10.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.9.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.8.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.7.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.7.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitest-dev/vitest (@​vitest/coverage-v8)

v1.6.1

Compare Source

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport #​7317 to v1 - by @​hi-ogawa in #​7319

    View changes on GitHub

v1.6.0

Compare Source

   🚀 Features

• Support standalone mode  -  by @​sheremet-va in #​5565 (bdce0)
• Custom "snapshotEnvironment" option  -  by @​sheremet-va in #​5449 (30f72)
• benchmark: Support comparing benchmark result  -  by @​hi-ogawa and @​sheremet-va in #​5398 (f8d3d)
• browser: Allow injecting scripts  -  by @​sheremet-va in #​5656 (21e58)
• reporter: Support includeConsoleOutput and addFileAttribute in junit  -  by @​hi-ogawa in #​5659 (2f913)
• ui: Sort items by file name  -  by @​btea in #​5652 (1f726)

   🐞 Bug Fixes

• Keep order of arguments for .each in custom task collectors  -  by @​sheremet-va in #​5640 (7d57c)
• Call resolveId('vitest') after buildStart  -  by @​hi-ogawa in #​5646 (f5faf)
• Hash the name of the file when caching  -  by @​sheremet-va in #​5654 (c9e68)
• Don't panic on empty files in node_modules  -  by @​sheremet-va (40c29)
• Use toJSON for error serialization  -  by @​hi-ogawa in #​5526 (19a21)
• coverage:
  • Exclude *.test-d.* by default  -  by @​MindfulPol in #​5634 (bfe8a)
  • Apply vite-node's wrapper only to executed files  -  by @​AriPerkkio in #​5642 (c9883)
• vm:
  • Support network imports  -  by @​sheremet-va in #​5610 (103a6)

   🏎 Performance

• Improve performance of forks pool  -  by @​sheremet-va in #​5592 (d8304)
• Unnecessary rpc call when coverage is disabled  -  by @​AriPerkkio in #​5658 (c5712)

    View changes on GitHub

v1.5.3

Compare Source

   🐞 Bug Fixes

• Use package.json name for a workspace project if not provided  -  by @​sheremet-va in #​5608 (48fba)
• Backport jest iterable equality within object  -  by @​sukovanej in #​5621 (30e5d)
• browser: Support benchmark  -  by @​hi-ogawa in #​5622 (becab)
• reporter: Use default error formatter for JUnit  -  by @​hi-ogawa in #​5629 (20060)

    View changes on GitHub

v1.5.2

Compare Source

   🐞 Bug Fixes

• Check for null before storing in weakmap  -  by @​sheremet-va (ce368)

    View changes on GitHub

v1.5.1

Compare Source

   🚀 Features

• api: startVitest() to accept stdout and stdin  -  by @​AriPerkkio in #​5493 (780b1)
  • This is listed as a feature, but it doesn't increase the minor version because startVitest API is experimental and doesn't follow semver.

   🐞 Bug Fixes

• Close vite servers on all resolved projects  -  by @​surc54 in #​5544 (413ec)
• Fix default import.meta.env.PROD: false  -  by @​hi-ogawa in #​5561 (9c649)
• Resolve cwd correctly when initiating projects  -  by @​sheremet-va in #​5582 (ec9d7)
• Always run onTestFinished in reverse order  -  by @​sheremet-va in #​5598 (23f29)
• browser:
  • Disable fileParallelism by default on browser pool  -  by @​hi-ogawa in #​5528 (5c69f)
  • Dispose tester iframe on done  -  by @​hi-ogawa in #​5595 (b2135)
• coverage:
  • Fix bundling of v8-to-istanbul  -  by @​AriPerkkio in #​5549 (df6a4)
  • Prevent crash when cleanOnRerun is disabled  -  by @​AriPerkkio in #​5540 (ea3c1)
  • thresholds to compare files relative to root  -  by @​AriPerkkio in #​5574 (80265)
• expect:
  • Fix toEqual and toMatchObject with circular references  -  by @​hi-ogawa in #​5535 (9e641)
• vitest:
  • Fix false positive file filter match with leading slash  -  by @​hi-ogawa in #​5578 (316eb)
  • Watch the output directory correctly  -  by @​sheremet-va in #​5584 (e40f9)
  • StubEnv casts boolean on PROD/SSR/DEV  -  by @​sheremet-va in #​5590 (4da88)

    View changes on GitHub

v1.5.0

Compare Source

   🚀 Features

• Add configuration for diff truncation  -  by @​willieho in #​5073 and #​5333 (6797b)
• Remove unrelated noise from diff for toMatchObject()  -  by @​geersch in #​5364 (99276)
• Allow custom host for --inspect and --inspect-brk  -  by @​sheremet-va in #​5509 (61572)
• coverage: V8 to ignore empty lines, comments, types  -  by @​AriPerkkio in #​5457 (10b89)

   🐞 Bug Fixes

• describe calls not taking generic type parameters  -  by @​aryaemami59 in #​5415 (16bac)
• Prevent hang when process is mocked  -  by @​AriPerkkio in #​5430 (0ec4d)
• Don't check for "node:internal/console/" in console interceptor in case the environment is not Node.js  -  by @​sheremet-va (87d36)
• The value received by toMatch should be a string  -  by @​btea in #​5428 (67485)
• Increase stack trace limit for location, don't hardcode suite position  -  by @​sheremet-va in #​5518 (04b23)
• benchmark:
  • Run benchmark suites sequentially  -  by @​hi-ogawa in #​5444 (1f548)
  • Fix benchmark summary of single bench suite  -  by @​hi-ogawa in #​5489 (db981)
  • Table reporter for non TTY output  -  by @​hi-ogawa in #​5484 (bea23)
• expect:
  • Fix toHaveBeenNthCalledWith error message when not called  -  by @​hi-ogawa in #​5420 (e5253)
• types:
  • Pass correct type for suite factory  -  by @​sheremet-va in #​5437 (26718)
• utils:
  • Fix object diff with getter only property  -  by @​hi-ogawa in #​5466 (366d9)
• vite-node:
  • Fix isValidNodeImport to check "type": "module" first  -  by @​hi-ogawa in #​5416 (6fb15)
• vitest:
  • Correctly send console events when state changes  -  by @​sheremet-va (3463f)
  • Initiate FakeTimers on demand  -  by @​sheremet-va in #​5450 (e4e93)
  • Check unhighlighted code for code frame line limit  -  by @​hi-ogawa in #​5465 (6ae7e)
  • Correctly filter by parent folder  -  by @​sheremet-va in #​5408 (91b06)
  • Close inspector immediately if run is canceled  -  by @​sheremet-va in #​5519 (b8006)
• workspace:
  • Set CWD to config directory, allow overriding local .env  -  by @​sheremet-va in #​5476 (d4003)

    View changes on GitHub

eslint/eslint (eslint)

v9.39.2

Compare Source

v9.39.1

Compare Source

v9.39.0

Compare Source

v9.38.0

Compare Source

Features

• ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#​20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#​20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#​20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#​20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#​20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#​20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#​20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#​20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#​20184) (Pixel998)

v9.37.0

Compare Source

Features

• 39f7fb4 feat: preserve-caught-error should recognize all static "cause" keys (#​20163) (Pixel998)
• f81eabc feat: support TS syntax in no-restricted-imports (#​19562) (Nitin Kumar)

Bug Fixes

• a129cce fix: correct no-loss-of-precision false positives for leading zeros (#​20164) (Francesco Trotta)
• 09e04fc fix: add missing AST token types (#​20172) (Pixel998)
• 861c6da fix: correct ESLint typings (#​20122) (Pixel998)

Documentation

• b950359 docs: fix typos across the docs (#​20182) (루밀LuMir)
• 42498a2 docs: improve ToC accessibility by hiding non-semantic character (#​20181) (Percy Ma)
• 29ea092 docs: Update README (GitHub Actions Bot)
• 5c97a04 docs: show availableUntil in deprecated rule banner (#​20170) (Pixel998)
• 90a71bf docs: update README files to add badge and instructions (#​20115) (루밀LuMir)
• 1603ae1 docs: update references from master to main (#​20153) (루밀LuMir)

Chores

• afe8a13 chore: update @eslint/js dependency to version 9.37.0 (#​20183) (Francesco Trotta)
• abee4ca chore: package.json update for @​eslint/js release (Jenkins)
• fc9381f chore: fix typos in comments (#​20175) (overlookmotel)
• e1574a2 chore: unpin jiti (#​20173) (renovate[bot])
• [e1ac05e](https://redirect.github.com/eslint/eslint/commit/e1ac05

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.