chore(deps): bump the js-dependencies group across 1 directory with 58 updates

[dependabot]

Bumps the js-dependencies group with 58 updates in the / directory:

Package	From	To
@typescript-eslint/eslint-plugin	8.44.0	8.46.2
@eslint/js	9.35.0	9.38.0
eslint	9.35.0	9.38.0
lint-staged	16.1.6	16.2.5
npm	11.6.0	11.6.2
typescript	5.8.3	5.9.3
@aws-sdk/client-cognito-identity-provider	3.890.0	3.913.0
@aws-sdk/client-s3	3.890.0	3.913.0
@smithy/types	4.5.0	4.8.0
cross-env	10.0.0	10.1.0
dotenv	17.2.2	17.2.3
get-tsconfig	4.10.1	4.12.0
rdflib	2.2.37	2.3.0
runtypes	6.7.0	7.0.4
typescript-eslint	8.44.0	8.46.2
@eslint/compat	1.3.2	1.4.0
@types/node	24.5.1	24.9.0
@typescript-eslint/parser	8.44.0	8.46.2
tsx	4.20.5	4.20.6
@lexical/react	0.34.0	0.37.0
@lexical/utils	0.34.0	0.37.0
@mui/icons-material	6.5.0	7.3.4
@mui/material	6.5.0	7.3.4
@mui/utils	7.3.2	7.3.3
@mui/x-date-pickers	8.11.3	8.14.1
@tanstack/query-sync-storage-persister	5.89.0	5.90.7
@tanstack/react-query	5.89.0	5.90.5
@tanstack/react-query-persist-client	5.89.0	5.90.7
@vis.gl/react-maplibre	8.0.4	8.1.0
extendable-media-recorder	9.2.29	9.2.31
extendable-media-recorder-wav-encoder	7.0.131	7.0.132
html-react-parser	5.2.6	5.2.7
lexical	0.34.0	0.37.0
maplibre-gl	5.7.2	5.9.0
nanoid	5.1.5	5.1.6
react	19.1.1	19.2.0
@types/react	19.1.13	19.2.2
react-dom	19.1.1	19.2.0
@types/react-dom	19.1.9	19.2.2
react-map-gl	8.0.4	8.1.0
react-router-dom	7.9.1	7.9.4
uuid	11.1.0	13.0.0
@tanstack/react-query-devtools	5.89.0	5.90.2
@testing-library/jest-dom	6.8.0	6.9.1
@types/workbox-window	4.3.4	5.0.0
@vite-pwa/assets-generator	1.0.1	1.0.2
@vitejs/plugin-react	4.7.0	5.0.4
eslint-plugin-react-hooks	5.2.0	7.0.0
eslint-plugin-react-refresh	0.4.20	0.4.24
eslint-plugin-testing-library	7.8.0	7.13.3
fake-indexeddb	6.2.2	6.2.4
immutable	5.1.3	5.1.4
jest	30.1.3	30.2.0
jest-environment-jsdom	30.1.2	30.2.0
sass	1.92.1	1.93.2
ts-jest	29.4.2	29.4.5
vite	7.1.5	7.1.11
vite-plugin-pwa	1.0.3	1.1.0

Updates @typescript-eslint/eslint-plugin from 8.44.0 to 8.46.2

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.46.2

8.46.2 (2025-10-20)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702)
• typescript-estree: forbid invalid modifiers in object methods (#11689)

❤️ Thank You

• fisker Cheung @​fisker
• mdm317

You can read about our versioning strategy and releases on our website.

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

• ast-spec: cleanup TSLiteralType (#11624)
• eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)
• eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)

❤️ Thank You

• Abraham Guo
• mdm317
• Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.46.0

8.46.0 (2025-10-06)

🚀 Features

• eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)
• eslint-plugin-internal: [no-dynamic-tests] new internal Lint rule to ban dynamic syntax in generating tests (#11323)
• rule-schema-to-typescript-types: clean up and make public (#11633)
• typescript-eslint: export util types (#10848, #10849)
• typescript-estree: mention file specifics in project service allowDefaultProject error (#11635)
• typescript-estree: private identifiers can only appear on LHS of in expressions (#9232)

🩹 Fixes

• eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)
• eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)
• eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)
• eslint-plugin: removed error type previously deprecated (#11674)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.46.2 (2025-10-20)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] skip optional chaining when it could change the result (#11702)

❤️ Thank You

• mdm317

You can read about our versioning strategy and releases on our website.

8.46.1 (2025-10-13)

🩹 Fixes

• eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)
• eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)

❤️ Thank You

• mdm317
• Ronen Amiel

You can read about our versioning strategy and releases on our website.

8.46.0 (2025-10-06)

🚀 Features

• eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)
• rule-schema-to-typescript-types: clean up and make public (#11633)

🩹 Fixes

• eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#11660)
• typescript-estree: forbid abstract method and accessor to have implementation (#11657)
• eslint-plugin: removed error type previously deprecated (#11674)
• eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)
• eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)
• rule-tester: deprecate TestCaseError#type and LintMessage#nodeType (#11628)
• eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)

❤️ Thank You

• fisker Cheung @​fisker
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Mark de Dios @​peanutenthusiast
• Richard Torres @​richardtorres314

... (truncated)

Commits

• 55ca033 chore(release): publish 8.46.2
• 698e7a8 fix(eslint-plugin): [prefer-optional-chain] skip optional chaining when it co...
• 3f5fbf6 chore(release): publish 8.46.1
• a64b3cc fix(eslint-plugin): [no-misused-promises] special-case .finally not to repo...
• 73003bf fix(eslint-plugin): [prefer-optional-chain] include mixed "nullish comparison...
• aec785e chore(release): publish 8.46.0
• a974191 fix(eslint-plugin): [prefer-readonly-parameter-types] ignore tagged primitive...
• 02e0278 fix(typescript-estree): forbid abstract method and accessor to have implement...
• f083798 feat(eslint-plugin): [no-unsafe-member-access] add allowOptionalChaining opti...
• a62f625 fix(eslint-plugin): removed error type previously deprecated (#11674)
• Additional commits viewable in compare view

Updates @eslint/js from 9.35.0 to 9.38.0

Release notes

Sourced from @​eslint/js's releases.

v9.38.0

Features

• ce40f74 feat: update complexity rule to only highlight function header (#20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#20184) (Pixel998)

v9.37.0

Features

• 39f7fb4 feat: preserve-caught-error should recognize all static "cause" keys (#20163) (Pixel998)
• f81eabc feat: support TS syntax in no-restricted-imports (#19562) (Nitin Kumar)

Bug Fixes

• a129cce fix: correct no-loss-of-precision false positives for leading zeros (#20164) (Francesco Trotta)
• 09e04fc fix: add missing AST token types (#20172) (Pixel998)
• 861c6da fix: correct ESLint typings (#20122) (Pixel998)

Documentation

• b950359 docs: fix typos across the docs (#20182) (루밀LuMir)
• 42498a2 docs: improve ToC accessibility by hiding non-semantic character (#20181) (Percy Ma)
• 29ea092 docs: Update README (GitHub Actions Bot)
• 5c97a04 docs: show availableUntil in deprecated rule banner (#20170) (Pixel998)
• 90a71bf docs: update README files to add badge and instructions (#20115) (루밀LuMir)
• 1603ae1 docs: update references from master to main (#20153) (루밀LuMir)

Chores

• afe8a13 chore: update @eslint/js dependency to version 9.37.0 (#20183) (Francesco Trotta)
• abee4ca chore: package.json update for @​eslint/js release (Jenkins)
• fc9381f chore: fix typos in comments (#20175) (overlookmotel)
• e1574a2 chore: unpin jiti (#20173) (renovate[bot])

... (truncated)

Commits

• 25d0e33 chore: package.json update for @​eslint/js release
• abee4ca chore: package.json update for @​eslint/js release
• 90a71bf docs: update README files to add badge and instructions (#20115)
• 488cba6 chore: package.json update for @​eslint/js release
• 1c0d850 fix: update eslint-all.js to use Object.freeze for rules object (#20116)
• See full diff in compare view

Updates eslint from 9.35.0 to 9.38.0

Release notes

Sourced from eslint's releases.

v9.38.0

Features

• ce40f74 feat: update complexity rule to only highlight function header (#20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#20184) (Pixel998)

v9.37.0

Features

• 39f7fb4 feat: preserve-caught-error should recognize all static "cause" keys (#20163) (Pixel998)
• f81eabc feat: support TS syntax in no-restricted-imports (#19562) (Nitin Kumar)

Bug Fixes

• a129cce fix: correct no-loss-of-precision false positives for leading zeros (#20164) (Francesco Trotta)
• 09e04fc fix: add missing AST token types (#20172) (Pixel998)
• 861c6da fix: correct ESLint typings (#20122) (Pixel998)

Documentation

• b950359 docs: fix typos across the docs (#20182) (루밀LuMir)
• 42498a2 docs: improve ToC accessibility by hiding non-semantic character (#20181) (Percy Ma)
• 29ea092 docs: Update README (GitHub Actions Bot)
• 5c97a04 docs: show availableUntil in deprecated rule banner (#20170) (Pixel998)
• 90a71bf docs: update README files to add badge and instructions (#20115) (루밀LuMir)
• 1603ae1 docs: update references from master to main (#20153) (루밀LuMir)

Chores

• afe8a13 chore: update @eslint/js dependency to version 9.37.0 (#20183) (Francesco Trotta)
• abee4ca chore: package.json update for @​eslint/js release (Jenkins)
• fc9381f chore: fix typos in comments (#20175) (overlookmotel)
• e1574a2 chore: unpin jiti (#20173) (renovate[bot])

... (truncated)

Commits

• 8fe511b 9.38.0
• f961736 Build: changelog update for 9.38.0
• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#20221)
• 25d0e33 chore: package.json update for @​eslint/js release
• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#20201)
• c82b5ef refactor: Use types from @​eslint/core (#20168)
• ff31609 ci: add Node.js 25 to ci.yml (#20220)
• ce40f74 feat: update complexity rule to only highlight function header (#20048)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#20187)
• 004577e ci: bump github/codeql-action from 3 to 4 (#20211)
• Additional commits viewable in compare view

Updates lint-staged from 16.1.6 to 16.2.5

Release notes

Sourced from lint-staged's releases.

v16.2.5

Patch Changes

• #1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

v16.2.4

Patch Changes

• #1682 0176038 Thanks @​iiroj! - Update dependencies, including [email protected] with bug fixes.

• #1671 581a54e Thanks @​iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

v16.2.3

Patch Changes

• #1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Patch Changes

• #1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  ✖ lint-staged failed because --fail-on-changes was used.
  Any lost modifications can be restored from a git stash:
  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

v16.2.1

Patch Changes

• #1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

  export default {
  ---  "*": (files: string[]) => void console.log('staged files', files)
  +++  "*": (files: readonly string[]) => void console.log('staged files', files)
  }

... (truncated)

Changelog

Sourced from lint-staged's changelog.

16.2.5

Patch Changes

• #1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.

16.2.4

Patch Changes

• #1682 0176038 Thanks @​iiroj! - Update dependencies, including [email protected] with bug fixes.

• #1671 581a54e Thanks @​iiroj! - Speed up execution by only importing the yaml depedency if using YAML configuration files.

16.2.3

Patch Changes

• #1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

16.2.2

Patch Changes

• #1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  ✖ lint-staged failed because --fail-on-changes was used.
  Any lost modifications can be restored from a git stash:
  > git stash list --format="%h %s"
  c18d55a3 On main: lint-staged automatic backup
  > git apply --index c18d55a3

16.2.1

Patch Changes

• #1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

... (truncated)

Commits

• 1f6a326 chore(changeset): release
• 6ab937c ci: use separate caches for MSYS2 and Cygwin
• 6d71384 fix: catch errors when calling spawn
• 64e482b build(deps): update dev dependencies
• 7e65124 fix: log spawn failure error
• 9e02d9d fix: handle error when spawning of configured task fails
• 122580b chore(changeset): release
• 0176038 fix(deps): update dependencies
• 581a54e perf: only import yaml when loading YAML files
• bdcd03a chore(changeset): release
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lint-staged since your current version.

Updates npm from 11.6.0 to 11.6.2

Release notes

Sourced from npm's releases.

v11.6.2

11.6.2 (2025-10-08)

Bug Fixes

• c54d1e9 #8633 progress bar code cleanup (#8633) (@​wraithgar)
• d352e27 #8629 do not redact notice logs going to stdout (#8629) (@​wraithgar)
• 5ac3678 #8617 spelling in ./lib and ./test/lib (#8617) (@​jsoref)
• 9197995 #8619 spelling (#8619) (@​jsoref)
• dd884e3 #8618 spelling (#8618) (@​jsoref)
• f6028e6 #8614 skip redacting urls meant for opening by the user (#8614) (@​wraithgar, @​jolyndenning)
• 54fd27f #8602 refactor node.ideallyInert to node.inert (#8602) (@​liamcmitchell)
• 79e3c1e #8593 use @​npmcli/package-json to normalize package data (@​wraithgar)

Documentation

• 0469c5e #8639 rewrap markdown (#8639) (@​jsoref)
• 9ceb9c1 #8636 rewrap markdown (#8636) (@​jsoref)
• 6324370 #8616 fix spelling (#8616) (@​jsoref)
• 1b0429a #8607 Fix spelling (#8607) (@​jsoref)
• 7fbe07a #8603 clean up deprecated npm access commands (#8603) (@​jsoref)

Dependencies

• fa7cc6f #8662 [email protected] (#8662)
• b05461b #8663 @sigstore/[email protected] (#8663)
• c31de22 #8661 downgrade ci-info to 4.3.0 (#8661) (@​wraithgar)
• c5191b5 #8659 [email protected]
• f255c92 #8659 [email protected]
• bdaf323 #8659 [email protected]
• a33f106 #8659 [email protected]
• 8044e07 #8659 [email protected]
• f577504 #8659 [email protected]
• 9aa4fa6 #8659 [email protected]
• fe9484a #8593 remove normalize-package-data

Chores

• b3409f4 #8659 dev dependency updates (@​wraithgar)
• e8de81b #8643 Add automatically generated annotation to dependencies.md (#8643) (@​jsoref)
• 67cfaf3 #8627 fix spelling: different (#8627) (@​jsoref)
• 17ddc0d #8622 fix spelling (#8622) (@​jsoref)
• c3e1790 #8605 Remove reference to nonexistent calendar (#8605) (@​jsoref)
• ac9143e #8604 Improve link accessibility for screen reader users (#8604) (@​jsoref)
• 62d73e7 #8601 remove references to benchmarks workflow (#8601) (@​jsoref)
• bb4b739 #8598 remove stale comment (#8598) (@​jsoref)
• f73e65d #8592 fix build url code for remark-github@12 (#8592) (@​wraithgar)
• workspace: @npmcli/[email protected]
• workspace: @npmcli/[email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]

v11.6.1

11.6.1 (2025-09-23)

... (truncated)

Changelog

Sourced from npm's changelog.

11.6.2 (2025-10-08)

Bug Fixes

• c54d1e9 #8633 progress bar code cleanup (#8633) (@​wraithgar)
• d352e27 #8629 do not redact notice logs going to stdout (#8629) (@​wraithgar)
• 5ac3678 #8617 spelling in ./lib and ./test/lib (#8617) (@​jsoref)
• 9197995 #8619 spelling (#8619) (@​jsoref)
• dd884e3 #8618 spelling (#8618) (@​jsoref)
• f6028e6 #8614 skip redacting urls meant for opening by the user (#8614) (@​wraithgar, @​jolyndenning)
• 54fd27f #8602 refactor node.ideallyInert to node.inert (#8602) (@​liamcmitchell)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud