chore(dev-deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@types/eslint (source)	8.56.6 -> 8.56.10					devDependencies	patch
@types/node (source)	16.18.93 -> 16.18.97					devDependencies	patch
amannn/action-semantic-pull-request	v5.4.0 -> v5.5.2					action	minor
codecov/codecov-action	v4.1.1 -> v4.4.1					action	minor
cspell (source)	8.6.1 -> 8.8.3					devDependencies	minor
dedent	1.5.1 -> 1.5.3					devDependencies	patch
eslint-doc-generator	1.7.0 -> 1.7.1					devDependencies	patch
eslint-plugin-eslint-plugin	5.4.1 -> 5.5.1					devDependencies	minor
eslint-plugin-jsdoc	48.2.2 -> 48.2.5					devDependencies	patch
eslint-plugin-sonarjs	0.25.0 -> 0.25.1					devDependencies	patch
eslint-plugin-vitest	0.4.1 -> 0.5.4					devDependencies	minor
knip (source)	5.7.0 -> 5.16.0					devDependencies	minor
lint-staged	15.2.2 -> 15.2.4					devDependencies	patch
markdownlint-cli	0.39.0 -> 0.40.0					devDependencies	minor
node (source)	20.12.0 -> 20.13.1						minor
pnpm (source)	8.15.5 -> 8.15.8					packageManager	patch
prettier-plugin-packagejson	2.4.14 -> 2.5.0					devDependencies	minor
rimraf	5.0.5 -> 5.0.7					devDependencies	patch
rollup (source)	4.13.2 -> 4.18.0					devDependencies	minor
semver	7.6.0 -> 7.6.2					dependencies	patch
tsc-alias (source)	1.8.8 -> 1.8.10					devDependencies	patch
typescript (source)	5.4.3 -> 5.4.5					devDependencies	patch

---

Release Notes

amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)

v5.5.2

Compare Source

Bug Fixes

• Bump tar from 6.1.11 to 6.2.1 (#​262 by @​EelcoLos) (9a90d5a)

v5.5.1

Compare Source

Bug Fixes

• Bump ip from 2.0.0 to 2.0.1 (#​263 by @​EelcoLos) (5e7e9ac)

v5.5.0

Compare Source

Features

• Add outputs for type, scope and subject (#​261 by @​bcaurel) (b05f5f6)

codecov/codecov-action (codecov/codecov-action)

v4.4.1

Compare Source

v4.4.0

Compare Source

What's Changed

• chore: Clarify isPullRequestFromFork by @​jsoref in https://github.com/codecov/codecov-action/pull/1411
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1423
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1421
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1420
• feat: remove GPG and run on spawn by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1426
• build(deps-dev): bump @​typescript-eslint/parser from 7.8.0 to 7.9.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1428
• chore(release): 4.4.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1430

Full Changelog: codecov/codecov-action@v4.3.1...v4.4.0

v4.3.1

Compare Source

v4.3.0

Compare Source

What's Changed

• fix: automatically detect if using GitHub enterprise by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1356
• build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1355
• build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @​dependabot in https://github.com/codecov/codecov-action/pull/1360
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.5.0 to 7.6.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1364
• build(deps-dev): bump @​typescript-eslint/parser from 7.5.0 to 7.6.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1363
• feat: add network params by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1365
• build(deps): bump undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1361
• chore(release): v4.3.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1366

Full Changelog: codecov/codecov-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

What's Changed

• chore(deps): update deps by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1351
• feat: allow for authentication via OIDC token by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1330
• fix: use_oidc shoudl be required false by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1353

Full Changelog: codecov/codecov-action@v4.1.1...v4.2.0

streetsidesoftware/cspell (cspell)

v8.8.3

Compare Source

• chore: Update Integration Test Performance Data (#​5663) (b605dd3), closes #​5663

v8.8.2

Compare Source

• ci: Workflow Bot -- Update ALL Dependencies (main) (#​5659) (5d93673), closes #​5659

v8.8.1

Compare Source

• chore: Do not stop update if it fails to lint. (64ba085)

v8.8.0

Compare Source

Note: Version bump only for package cspell

v8.7.0

Compare Source

Note: Version bump only for package cspell

dmnd/dedent (dedent)

v1.5.3

Compare Source

What's Changed

• fix: remove engines and provenance requirements by @​JoshuaKGoldberg in https://github.com/dmnd/dedent/pull/93

Full Changelog: dmnd/dedent@v1.5.2...v1.5.3

v1.5.2

Compare Source

What's Changed

• chore: remove files related to Flow by @​yinm in https://github.com/dmnd/dedent/pull/77
• build: onboarded to create-typescript-app (mostly) by @​JoshuaKGoldberg in https://github.com/dmnd/dedent/pull/55
• chore: fix special characters escaping issue link in README by @​auvred in https://github.com/dmnd/dedent/pull/82
• chore: replace last yarn references with pnpm by @​JoshuaKGoldberg in https://github.com/dmnd/dedent/pull/86
• docs: add explicit install command to README.md by @​JoshuaKGoldberg in https://github.com/dmnd/dedent/pull/84
• fix: switch babel-plugin-macros to a peer dependency (again) by @​JoshuaKGoldberg in https://github.com/dmnd/dedent/pull/89
• build(deps-dev): bump @​babel/traverse from 7.22.8 to 7.23.6 by @​dependabot in https://github.com/dmnd/dedent/pull/87
• fix: \n should be changed to \n only when escapeSpecialCharacters is set by @​fuenfundachtzig in https://github.com/dmnd/dedent/pull/91

New Contributors

• @​yinm made their first contribution in https://github.com/dmnd/dedent/pull/77
• @​auvred made their first contribution in https://github.com/dmnd/dedent/pull/82
• @​dependabot made their first contribution in https://github.com/dmnd/dedent/pull/87
• @​fuenfundachtzig made their first contribution in https://github.com/dmnd/dedent/pull/91

Full Changelog: dmnd/dedent@v1.5.1...v1.5.2

bmish/eslint-doc-generator (eslint-doc-generator)

v1.7.1

Compare Source

🐛 Bug Fix

• #​524 OS-agnostic handling of end-of-line characters (@​bmish)

Committers: 1

• Bryan Mishkin (@​bmish)

eslint-community/eslint-plugin-eslint-plugin (eslint-plugin-eslint-plugin)

v5.5.1

Compare Source

Bug Fixes

• improve eslint rule detecting (#​457) (5dccb61)

v5.5.0

Compare Source

Features

• re-export flat configs "flat/*" (#​453) (e3b27e2)

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v48.2.5

Compare Source

Bug Fixes

• handle deprecated typeParameters (#​1229) (d417d05)

v48.2.4

Compare Source

v48.2.3

Compare Source

Bug Fixes

• valid-types: whitelist pratt parser keywords; fixes #​1221 (ab5624b)

SonarSource/eslint-plugin-sonarjs (eslint-plugin-sonarjs)

v0.25.1

Compare Source

What's Changed

• Resolve issue #​456 - @​typescript-eslint/utils dependency is missing by @​ericmorand-sonarsource in https://github.com/SonarSource/eslint-plugin-sonarjs/pull/457
• Bump the project manifest version to 0.25.1 by @​ericmorand-sonarsource in https://github.com/SonarSource/eslint-plugin-sonarjs/pull/458

New Contributors

• @​ericmorand-sonarsource made their first contribution in https://github.com/SonarSource/eslint-plugin-sonarjs/pull/457

Full Changelog: SonarSource/eslint-plugin-sonarjs@0.25.0...0.25.1

veritem/eslint-plugin-vitest (eslint-plugin-vitest)

v0.5.4

Compare Source

Features

• support old Eslint configuration
• update dependencies

v0.5.3

Compare Source

Bug Fixes

• configs in plugin declaration file (#​428) (a554dd2)

v0.5.2

Compare Source

Features

• no-focused-tests: add autofix (#​424) (07be616)

v0.5.1

Compare Source

Bug Fixes

• no-focused-tests: support .each template strings (#​420) (36e5b9a)

v0.5.0

Compare Source

‼️ Breaking Change 🚨

This version only supports flat config!

If you run into issues consider downgrading and opening an issue ofcourse.

Full Changelog: veritem/eslint-plugin-vitest@v0.5.0...v0.5.0

webpro/knip (knip)

v5.16.0

Compare Source

• Document namespace imports, extensionless imports, svelte $app path alias, and some edits (20f5502)
• Add @​hyoban to sponsors page (79918d3)
• feat(plugins): add plugin for lost-pixel config (#​630) (24772ca)
• fix(plugin-commitlint): handling of parserPreset when it's not a string (#​632) (d7b2545)

v5.15.1

Compare Source

• Add typeof case to isConsiderReferencedNS (#​626) (696d2a7)

v5.15.0

Compare Source

• feat(plugins): add plugin for syncpack config (#​629) (44005ef)
• Fix edit link (da2a5c8)

v5.14.0

Compare Source

• Add @​nicoespeon to sponsors page (f469fc4)
• Bump cache version (f8837c8)
• Fix and extend commitlint plugin (resolves #​628) (b52118e)
• Refactor dep graph (#​626) (004ae3b)
• Respect .git/info/exclude (resolves #​613) (29a0bdc)
• Add "using knip in ci" page to docs (closes #​608) (2f75272)
• Replace kleur with picocolors in docs (cca7a24)
• Revert "Temporarily disable slonik integration test" (1823d1f)

v5.13.0

Compare Source

• Update some (dev) dependencies (c612138)
• Temporarily disable slonik integration test (67c03de)
• Return empty source file for foreign files (resolves #​623) (dc2f508)
• feat(plugins): add plugin for xo config (#​621) (96f91df)
• Fresh project overview, auto-format (79cf631)

v5.12.3

Compare Source

v5.12.2

Compare Source

v5.12.1

Compare Source

• Fix configFileDir in recursive config loader in eslint plugin (fixes #​570) (20e44c6)
• Allow workspace patterns to be relative (fixes #​617) (6c71399)

v5.12.0

Compare Source

• Increase readability of integration workflow (119daf0)
• Rename fixture/test to cli arg name (83d840f)
• Extend capacitor plugin for android + ios configs (closes #​604) (4af5c86)
• fix: route handler extensions (#​606) (9d05b6a)
• Update constants.ts (#​605) (4dc1f6b)

v5.11.0

Compare Source

• Install peer deps in workspace (9bf286f)
• Fix some module/resolution configs in fixtures (9d319cf)
• Add support for isJSDocImportTag (introduced in TS v5.5.0) (504738d)
• No more back & forth (014ca2a)
• Back & forth (589ee17)

v5.10.1

Compare Source

• Update some dependencies (57c21b0)
• Add new arg to defaults in tests (b7db976)
• Fix storybook core.builder.name handling (resolves #​602) (8ad0406)
• Temp job with Node.js v22 + typescript v5.5-beta (21bbf28)
• Back & forth (f054070)

v5.10.0

Compare Source

Please see https://twitter.com/webprolific/status/1782695065380684124 for a walk-through of the main features in this release (the commits below don't cover what was in the canary releases).

• vitest: add bench file extension (03b9384)
• Fix Windows path issue (92de411)
• Add debug log for raw watch events (49862ab)
• Check and remove unused vars/imports (f3694ee)
• Fix up some dev commands (6c511ca)
• Update docs (988b632)
• Format (01a2767)
• Add monorepo demo folder (3c9d9ad)
• Don't re-analyze files that are still in the unused files cache (4d337b0)
• Add file removal to auto-fix (c5fe4c2)
• Mark issues as fixed in fix mode and print in grey in default reporter (d4324f8)
• Add file removal to auto-fix (34abc72)
• Fix CLI help text (a430a1f)
• Remove obsolete workaround in tag helper (5cb4f51)
• Minor refactor (a98a7fc)
• Tiny bits of fast + safe in import refs finder (7893d0f)
• Remove obsolete by set (359abc1)
• Refactor to improve tests + readability of member access handling during AST traversal (c032371)
• Rename and throw a few things around (a1f4987)
• Update integration test cmd (b140cbd)
• Skip test in bun (17b90a3)
• We weren't testing much due to a bug in Bun (https://github.com/oven-sh/bun/issues/10353) (48b883d)
• Fix up some fixture pkg names (9af92af)

Please see https://twitter.com/webprolific/status/1782695065380684124 for a walk-through of the main features in this release (the commits below don't cover what was in the canary releases).

v5.9.4

Compare Source

• Timerify isMatch (5d51620)
• Update performance doc (66ed008)
• Update some dependencies (9366edd)
• Downgrade tsx (c61cb0a)
• Lockfile was removed (0f207d4)

v5.9.3

Compare Source

v5.9.2

Compare Source

• Temporarily disable bundows install (88e6ac3)
• Housekeeping (f923d69)
• bun install --ignore-scripts --frozen-lockfile (b870d4d)
• Fix up source code (cc94ba1)
• Support, organize & pick tests to run tests in Bun + Node (c4b4001)
• Fix other code (8ee92e0)
• Use bun:test (e6dd426)
• Fix up source code (52a8e0d)
• Update CI workflows and keep using npm/npx (ccd9d95)
• Go Bun + Biome (2fe8436)
• fix(plugin/babel): bypass directly required plugins or presets in babel config (#​590) (77329af)

v5.9.1

Compare Source

• Update a few dependencies (fc63105)
• Ignore whitespace-only lines from .gitignore files (close #​589) (202ed86)
• Imply --production if --strict (f915b91)
• Update docs (#​583) (e64e6ad)

v5.9.0

Compare Source

• Lockfile (c0b4992)
• feat: support all vitest built in reporters (#​588) (038c485)
• feat: support commitlint plugins key (#​587) (9b4e0d9)
• Add plugin for moonrepo (moonrepo.dev) (#​579) (770f658)
• Fix typos in docs (#​582) (359e6df)
• Add engine field verification (#​581) (f6684ad)

v5.8.0

Compare Source

• Add support for CommonJS exports.key = value syntax (closes #​580) (404236b)
• Add more links to sponsor option (f5a5f8a)

v5.7.3

Compare Source

• Update dependencies (d580b6e)
• Fix route.ts pattern in next plugin (dc021de)

v5.7.2

Compare Source

• Auto-format mdx (161f5dc)
• Add mdx to remark formatter (440d72b)

v5.7.1

Compare Source

• Formatting (9e5e539)
• fix: add jsx extensions for next default file convention (#​578) (bd12fe1)
• Add tea.yaml (682c162)

okonet/lint-staged (lint-staged)

v15.2.4

Compare Source

Patch Changes

• 4f4537a Thanks @​iiroj! - Fix release issue with previous version; update dependencies

igorshubovych/markdownlint-cli (markdownlint-cli)

v0.40.0: 0.40.0

Compare Source

• Update markdownlint dependency to 0.34.0
  • Use micromark in MD027/MD028/MD036/MD040/MD041/MD046/MD048
  • Improve MD013/MD034/MD049/MD050/MD051
• Add support for TOML configuration files via --config
• Add --configPointer argument for nested configuration
• Update --ignore for directories to ignore all files within
• Update all dependencies via Dependabot

nodejs/node (node)

v20.13.1: 2024-05-09, Version 20.13.1 'Iron' (LTS), @​marco-ippolito

Compare Source

2024-05-09, Version 20.13.1 'Iron' (LTS), @​marco-ippolito

Revert "tools: install npm PowerShell scripts on Windows"

Due to a regression in the npm installation on Windows, this commit reverts the change that installed npm PowerShell scripts on Windows.

Commits

• [b7d80802cc] - Revert "tools: install npm PowerShell scripts on Windows" (marco-ippolito) #​52897

v20.13.0

Compare Source

v20.12.2: 2024-04-10, Version 20.12.2 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

• CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows

Commits

• [69ffc6d50d] - src: disallow direct .bat and .cmd file spawning (Ben Noordhuis) nodejs-private/node-private#563

v20.12.1

Compare Source

pnpm/pnpm (pnpm)

v8.15.8

Compare Source

v8.15.7

Compare Source

v8.15.6

Compare Source

Patch Changes

• The exit code of the child process should be preserved on pnpm run #​7817.
• When sorting packages in a workspace, take into account workspace dependencies specified as peerDependencies #​7813.
• Add --ignore-scripts argument to prune command #​7836.

Platinum Sponsors

Gold Sponsors

	Configuration 📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. If you want to rebase/retry this PR, check this box This PR has been generated by Mend Renovate. View repository job log here.

[graphite-app]

Your org has enabled the Graphite merge queue for merging into main

Add the label “Status: Merge Queue” to the PR and Graphite will automatically add it to the merge queue when it’s ready to merge. Or use the label “Status: Hotfix” to add to the merge queue as a hot fix.

You must have a Graphite account in order to use the merge queue. Sign up using this link.