chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@playwright/test (source)	^1.57.0 → ^1.58.1
@tsconfig/node24 (source)	^24.0.3 → ^24.0.4
@types/node (source)	^22.19.3 → ^22.19.7
@types/node (source)	^24.10.4 → ^24.10.9
@typescript-eslint/utils (source)	^8.49.0 → ^8.54.0
@vitest/eslint-plugin	^1.5.2 → ^1.6.6
autoprefixer	^10.4.22 → ^10.4.24
chromedriver	^143.0.1 → ^143.0.4
cypress (source)	^15.7.1 → ^15.9.0
eslint-plugin-cypress	^5.2.0 → ^5.2.1
eslint-plugin-playwright	^2.4.0 → ^2.5.1
eslint-plugin-vue (source)	~10.6.2 → ~10.7.0
eslint-plugin-yml (source)	^1.19.0 → ^1.19.1
jsdom	^27.3.0 → ^27.4.0
nightwatch (source)	^3.13.0 → ^3.15.0
pkgroll	^2.21.4 → ^2.23.0
pnpm (source)	10.25.0 → 10.28.2
typescript-eslint (source)	^8.49.0 → ^8.54.0
vitest (source)	^4.0.15 → ^4.0.18
vue (source)	^3.5.25 → ^3.5.27
vue-tsc (source)	^3.1.8 → ^3.2.4

---

Release Notes

microsoft/playwright (@​playwright/test)

v1.58.1

Compare Source

Highlights

#​39036 fix(msedge): fix local network permissions
#​39037 chore: update cft download location
#​38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

• Chromium 145.0.7632.6
• Mozilla Firefox 146.0.1
• WebKit 26.0

v1.58.0

Compare Source

tsconfig/bases (@​tsconfig/node24)

v24.0.4

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/utils)

v8.54.0

Compare Source

🩹 Fixes

• utils: handle missing FlatESLint and LegacyESLint (#​11958)

❤️ Thank You

• Francesco Trotta
• Josh Goldberg

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

🩹 Fixes

• utils: make RuleCreator root defaultOptions optional (#​11956)

❤️ Thank You

• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

This was a version bump only for utils to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.52.0

Compare Source

🚀 Features

• typescript-estree: add tseslint.com redirects for CLI outputs (#​11895)

❤️ Thank You

• Josh Goldberg ✨

You can read about our versioning strategy and releases on our website.

v8.51.0

Compare Source

🚀 Features

• eslint-plugin: add namespace to plugin meta (#​11885)
• eslint-plugin: expose rule name via RuleModule interface (#​11719)

❤️ Thank You

• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

v8.50.1

Compare Source

This was a version bump only for utils to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.0

Compare Source

This was a version bump only for utils to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitest-dev/eslint-plugin-vitest (@​vitest/eslint-plugin)

v1.6.6

Compare Source

   🚀 Features

• Add require-test-timeout rule  -  by @​hamirmahal in #​863 (0829c)

    View changes on GitHub

v1.6.5

Compare Source

   🚀 Features

• No-conditional-expect takes expect.assertions into account  -  by @​vidarc in #​840 (01f6d)

   🐞 Bug Fixes

• Treat vitest and vi the same  -  by @​G-Rath in #​851 (48aa6)
• prefer-mock-return-shorthand:
  • Ignore use of update expressions  -  by @​G-Rath in #​858 (da4b6)
  • Ignore async implementations  -  by @​G-Rath in #​857 (1881e)
  • Don't report mutable implementations  -  by @​G-Rath in #​1908 and #​855 (9636a)

    View changes on GitHub

What's Changed

• refactor: apply prettier to whole codebase by @​G-Rath in #​853
• fix: treat vitest and vi the same by @​G-Rath in #​851
• test(unbound-method): port most of the test suite by @​G-Rath in #​850
• chore: update eslint-remote-tester by @​G-Rath in #​859
• fix(prefer-mock-return-shorthand): ignore use of update expressions by @​G-Rath in #​858
• fix(prefer-mock-return-shorthand): ignore async implementations by @​G-Rath in #​857
• fix(prefer-mock-return-shorthand): don't report mutable implementations by @​G-Rath in #​855
• refactor: Require rule name in createTestingLibraryRule return type and use rule.name in tests by @​y-hsgw in #​860
• feat: no-conditional-expect takes expect.assertions into account by @​vidarc in #​840
• docs: put rule descriptions after title by @​G-Rath in #​861

New Contributors

• @​vidarc made their first contribution in #​840

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.4...v1.6.5

v1.6.4

Compare Source

   🚀 Features

• Create new prefer-mock-return-shorthand rule  -  by @​G-Rath in #​848 (c0b72)

   🐞 Bug Fixes

• unbound-method: Ignore functions passed to vi.mocked  -  by @​G-Rath in #​849 (aa8af)

    View changes on GitHub

What's Changed

• docs(no-conditional-expect): add asymmetric matchers to example usage by @​wjhsf in #​847
• fix(unbound-method): ignore functions passed to vi.mocked by @​G-Rath in #​849
• feat: create new prefer-mock-return-shorthand rule by @​G-Rath in #​848

New Contributors

• @​wjhsf made their first contribution in #​847

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.3...v1.6.4

v1.6.3

Compare Source

   🚀 Features

• Option to disable autofix of prefer-import-in-mock  -  by @​nunomarks in #​846 (3046a)

    View changes on GitHub

What's Changed

• feat: Option to disable autofix of prefer-import-in-mock by @​nunomarks in #​846

New Contributors

• @​nunomarks made their first contribution in #​846

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.1...v1.6.2

v1.6.1

Compare Source

   🐞 Bug Fixes

• Treat test.extend results as test calls  -  by @​y-hsgw in #​843 (7a401)

    View changes on GitHub

What's Changed

• fix: Treat test.extend results as test calls by @​y-hsgw in #​843
• New rule: prefer-to-have-been-called-times by @​y-hsgw in #​842
• remove duplicate rules by @​veritem in #​844
• remove patched package by @​veritem in #​845

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.5.4...v1.6.0

v1.5.4

Compare Source

No significant changes

    View changes on GitHub

postcss/autoprefixer (autoprefixer)

v10.4.24

Compare Source

• Made Autoprefixer a little faster (by @​Cherry).

v10.4.23

Compare Source

• Reduced dependencies (by @​hyperz111).

giggio/node-chromedriver (chromedriver)

v143.0.4

Compare Source

v143.0.3

Compare Source

v143.0.2

Compare Source

cypress-io/cypress (cypress)

v15.9.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-9-0

v15.8.2

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-8-2

v15.8.1

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-8-1

v15.8.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-8-0

cypress-io/eslint-plugin-cypress (eslint-plugin-cypress)

v5.2.1

Compare Source

Bug Fixes

• disallow extra properties in rule options (#​269) (d600419)

mskelton/eslint-plugin-playwright (eslint-plugin-playwright)

v2.5.1

Compare Source

Bug Fixes

• no-conditional-in-test: Fix false positive for || (611657c)

v2.5.0

Compare Source

Bug Fixes

• Fix lint (4e8461d)
• Fix TypeScript types (af7d870)

Features

• Add enforce-consistent-spacing-between-blocks rule (#​411) (a9b78d5)
• Add no-restricted-locators rule (a65200b), closes #​407
• prefer-web-first-assertions: Support allInnerTexts() and allTextContents() (36917a8), closes #​362

v2.4.1

Compare Source

Bug Fixes

• no-conditional-in-test: allow nullish coalescing operator (2c25b4f), closes #​406

vuejs/eslint-plugin-vue (eslint-plugin-vue)

v10.7.0

Compare Source

Minor Changes

• Added new -error config variants, with all rules' severity set to error: strongly-recommended-error, recommended-error, vue2-strongly-recommended-error, vue2-recommended-error (along with their flat config equivalents) (#​2796)
• Added new vue/no-literals-in-template rule (#​3000)
• Added new vue/no-undef-directives rule (#​2990)
• Added new ignoreEOLComments option to vue/no-multi-spaces rule (#​2989)
• Changed vue/no-negated-v-if-condition suggestion to autofix (#​2984)
• Added TypeScript support for eslint-plugin-vue development (#​2916)

Patch Changes

• Fixed false positives in vue/define-props-destructuring rule when imported types are passed to defineProps (#​2995)
• Updated Vue 3 export names resources: added DirectiveModifiers (#​2996)
• Updated Vue 3 export names resources: added nodeOps and patchProp (#​2986)

ota-meshi/eslint-plugin-yml (eslint-plugin-yml)

v1.19.1

Compare Source

Patch Changes

• #​506 736f153 Thanks @​sumimakito! - fix(sort-keys): fix incorrect result when move down the block located at the file start

jsdom/jsdom (jsdom)

v27.4.0

Compare Source

• Added TextEncoder and TextDecoder.
• Improved decoding of HTML bytes by using the new @exodus/bytes package; it is now much more correct. (ChALkeR)
• Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <meta charset> or using the parent frame's encoding.
• Fixed a memory leak when Ranges were used and then the elements referred to by those ranges were removed.

nightwatchjs/nightwatch (nightwatch)

v3.15.0

Compare Source

What's Changed

• Fix ESM support in Node >= 20. by @​Samriddhi-35 in #​4425
• [TS] Fix return type of a few commands available on Page Objects. by @​shubhamkd in #​4434
• Add disable_output_boxes config to the default Nightwatch config file. by @​shubhamkd in #​4432
• Enable CI for Node.js 22 and 24 by @​Samriddhi-35 in #​4428

New Contributors

• @​Samriddhi-35 made their first contribution in #​4428

Full Changelog: nightwatchjs/nightwatch@v3.14.0...v3.15.0

v3.14.0

Compare Source

What's Changed

• bump mocha to v10.8.2 by @​shubhamkd in #​4426
• npm audit fix by @​shubhamkd in #​4427

New Contributors

• @​shubhamkd made their first contribution in #​4426

Full Changelog: nightwatchjs/nightwatch@v3.13.0...v3.14.0

privatenumber/pkgroll (pkgroll)

v2.23.0

Compare Source

Features

• show import chain in build errors (ba9d81c)

v2.22.0

Compare Source

Bug Fixes

• add skipSelf to resolve-js-to-ts source resolution (ec0c849)
• close bundle result in watch mode to prevent memory leaks (f69bfbb)
• close rollup bundle after build to free resources (323b5a3)

Features

• support sourcemaps for .d.ts files (3316ebe)

v2.21.5

Compare Source

Bug Fixes

• correct sourcemap line mappings for TypeScript files (#​144) (f5696a2)

pnpm/pnpm (pnpm)

v10.28.2: pnpm 10.28.2

Compare Source

Patch Changes

• Security fix: prevent path traversal in directories.bin field.

• When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules.

  This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed.

  Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.

• Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #​9950.

Platinum Sponsors

Gold Sponsors

v10.28.1

Compare Source

v10.28.0

Compare Source

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

• Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

• Fix installation of Git dependencies using annotated tags #​10335.

  Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

• Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

• Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Gold Sponsors

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

• Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
• Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Gold Sponsors

v10.26.0

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.54.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.52.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.51.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.50.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitest-dev/vitest (vitest)

v4.0.18

Compare Source

   🚀 Experimental Features

• experimental: Add onModuleRunner hook to worker.init  -  by @​sheremet-va in #​9286 (ea837)

   🐞 Bug Fixes

• Use meta.url in createRequire  -  by @​sheremet-va in #​9441 (e0572)
• browser: Hide injected data-testid attributes  -  by @​sheremet-va in #​9503 (f8989)
• ui: Process artifact attachments when generating HTML reporter  -  by @​macarie in #​9472 (22543)

    View changes on GitHub

v4.0.17

Compare Source

   🚀 Features

• Support openTelemetry for browser mode  -  by @​hi-ogawa in #​9180 (1ec3a)
• Support TRACEPARENT and TRACESTATE environment variables for OpenTelemetry context propagation  -  by @​Copilot, hi-ogawa and @​hi-ogawa in #​9295 (876cb)

   🐞 Bug Fixes

• Improve asymmetric matcher diff readability by unwrapping container matchers  -  by @​Copilot, sheremet-va, hi-ogawa and @​hi-ogawa in #​9330 (b2ec7)
• Improve runner error when importing outside of test context  -  by @​sheremet-va in #​9335 (2dd3d)
• Replace crypto.randomUUID to allow insecure environments (fix #​9…  -  by @​plusgut in #​9339 and #​9 (e6a3f)
• Handle null options in addEventHandler #​9371  -  by @​ThibautMarechal in #​9372 and #​9371 [(40841)](https://redirect.github.com/vitest-dev/vitest/commit/40841ff0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.