[dependabot]

Bumps the npm-development group with 7 updates:

Package	From	To
eslint	10.12.0	10.13.0
eslint-plugin-jest	29.16.11	29.17.0
eslint-plugin-prettier	5.5.6	5.5.7
js-yaml	5.4.3	5.5.0
rollup	4.64.5	4.64.9
ts-jest	29.4.14	29.4.15
typescript-eslint	8.71.1	8.71.2

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

Commits

• 4637f98 10.13.0
• 96df05c Build: changelog update for 10.13.0
• 4783a68 docs: Update README
• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
• 317fcb3 chore: update ecosystem plugins (#21409)
• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
• 43f0ac9 docs: clarify parameter description in getText (#21287)
• a39d9fb feat: add globalThis to no-obj-calls (#21382)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
• Additional commits viewable in compare view

Updates eslint-plugin-jest from 29.16.11 to 29.17.0

Release notes

Sourced from eslint-plugin-jest's releases.

v29.17.0

29.17.0 (2026-10-12)

Features

• no-standalone-expect: allow expect assertions in beforeEach hooks (#2031) (ddcab00)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.17.0 (2026-10-12)

Features

• no-standalone-expect: allow expect assertions in beforeEach hooks (#2031) (ddcab00)

Commits

• 0d0c459 chore(release): 29.17.0 [skip ci]
• ddcab00 feat(no-standalone-expect): allow expect assertions in beforeEach hooks (#2031)
• 69dd5bd chore(deps): lock file maintenance (#2042)
• 5878acf test: make test.each and it.each cases semantically valid (#2041)
• See full diff in compare view

Updates eslint-plugin-prettier from 5.5.6 to 5.5.7

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.7

Patch Changes

• #796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

• #805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

New Contributors

• @​truongbo17 made their first contribution in prettier/eslint-plugin-prettier#798
• @​OskarEichler made their first contribution in prettier/eslint-plugin-prettier#796

Full Changelog: prettier/eslint-plugin-prettier@v5.5.6...v5.5.7

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.7

Patch Changes

• #796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

• #805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

Commits

• e6dd27a chore: keep packageManager when cleaning package.json for release (#808)
• 7544956 chore: release eslint-plugin-prettier (#799)
• e3e5238 ci: enable npm publish provenance for changesets v3 (#807)
• 7c923c4 build(deps): Bump http-cache-semantics from 4.2.0 to 4.3.0 (#806)
• 1b7c433 fix: bump synckit to surface worker failures instead of hanging (#805)
• a6b3feb docs: explain line endings and endOfLine behavior (#804)
• 2f6ba1d ci: exercise the getLocFromIndex ponyfill on ESLint 9 (#803)
• cf1d2c5 chore(deps): update (#802)
• 9f14a55 chore(deps): update all dependencies (#788)
• 7e53ecd fix: map fallback source locations to actual line starts (#796)
• Additional commits viewable in compare view

Updates js-yaml from 5.4.3 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

• Updated argparse to v3.
• Updated development dependencies.

Fixed

• Correct percent-encoding of shorthand and verbatim tags.
• Reject ,, ], and } at the start of block plain scalars, #801.
• Report the exact position of non-printable characters in errors, #801.

Commits

• cb62b2d 5.5.0 released
• 87aed90 Deps bump
• 3aec511 Fix error positions for non-printable characters, #801
• 11aa483 Reject flow indicators at the start of block plain scalars, #801
• 339d8e0 Refactor tag encoder and decoder to match the YAML specification
• See full diff in compare view

Updates rollup from 4.64.5 to 4.64.9

Release notes

Sourced from rollup's releases.

v4.64.9

4.64.9

2026-10-17

Bug Fixes

• Ensure export live-bindings are properly maintained for aliased exports (#6576)
• Retain typed array constructor calls if the argument has iteration side effects (#6582)

Pull Requests

• #6576: Fix live bindings for aliased reassigned exports (@​oxura, @​lukastaegert)
• #6582: Retain typed array constructors that iterate their argument (@​joshuablac, @​lukastaegert)

v4.64.8

4.64.8

2026-10-17

Bug Fixes

• Ensure chunk hashes change when sourcemap comments change (#6509)
• Resolve some relative import resolution edge cases (#6522)

Pull Requests

• #6509: fix: include sourcemap comments in chunk hashes (@​snoopuppy582, @​wangxpych, @​lukastaegert)
• #6522: fix(browser): match node's join and relative for "." and ".." segments (@​luantaraschi, @​lukastaegert)
• #6577: Update dtolnay/rust-toolchain digest to 686976e (@​renovate[bot])
• #6578: Update minor/patch updates (@​renovate[bot])
• #6579: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6580: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #6581: Update dependency eslint-plugin-unicorn to v78 (@​renovate[bot])

v4.64.7

4.64.7

2026-10-15

Bug Fixes

• Fix an issue where watching not-yet-created files from plugins did not work if several shared a directory (#6575)

Pull Requests

• #6575: Report creation of missing watch files sharing a directory on Linux (@​lukastaegert)

v4.64.6

4.64.6

... (truncated)

Changelog

Sourced from rollup's changelog.

4.64.9

2026-10-17

Bug Fixes

• Ensure export live-bindings are properly maintained for aliased exports (#6576)
• Retain typed array constructor calls if the argument has iteration side effects (#6582)

Pull Requests

• #6576: Fix live bindings for aliased reassigned exports (@​oxura, @​lukastaegert)
• #6582: Retain typed array constructors that iterate their argument (@​joshuablac, @​lukastaegert)

4.64.8

2026-10-17

Bug Fixes

• Ensure chunk hashes change when sourcemap comments change (#6509)
• Resolve some relative import resolution edge cases (#6522)

Pull Requests

• #6509: fix: include sourcemap comments in chunk hashes (@​snoopuppy582, @​wangxpych, @​lukastaegert)
• #6522: fix(browser): match node's join and relative for "." and ".." segments (@​luantaraschi, @​lukastaegert)
• #6577: Update dtolnay/rust-toolchain digest to 686976e (@​renovate[bot])
• #6578: Update minor/patch updates (@​renovate[bot])
• #6579: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #6580: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #6581: Update dependency eslint-plugin-unicorn to v78 (@​renovate[bot])

4.64.7

2026-10-15

Bug Fixes

• Fix an issue where watching not-yet-created files from plugins did not work if several shared a directory (#6575)

Pull Requests

• #6575: Report creation of missing watch files sharing a directory on Linux (@​lukastaegert)

4.64.6

2026-10-13

Bug Fixes

... (truncated)

Commits

• 6278729 4.64.9
• 3b41241 Retain typed array constructors that iterate their argument (#6582)
• 092d139 Fix live bindings for aliased reassigned exports (#6576)
• b7dd776 4.64.8
• 77a6b2b fix: include sourcemap comments in chunk hashes (#6509)
• 55f46a5 fix(browser): match node's join and relative for "." and ".." segments (#6522)
• fabcaff Update swc monorepo (major) (#6579)
• e410d42 Lock file maintenance (#6580)
• 5104039 Update dtolnay/rust-toolchain digest to 686976e (#6577)
• 175b8dc Update dependency eslint-plugin-unicorn to v78 (#6581)
• Additional commits viewable in compare view

Updates ts-jest from 29.4.14 to 29.4.15

Release notes

Sourced from ts-jest's releases.

v29.4.15

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.15 (2026-10-15)

Bug Fixes

• compiler: resolve modules with tsconfig options regardless of cache state (268746c), closes #5216
• support .cjs config files in config:migrate (4001b4e), closes #4485

Commits

• 197d4de chore(release): 29.4.15
• ebad800 build(deps): update dependency node to v24.22.0
• e5f6e98 test(compiler): clean up temp dirs from module resolution tests
• 77dbb18 test(compiler): make module resolution tests path-independent on Windows
• 268746c fix(compiler): resolve modules with tsconfig options regardless of cache state
• 1536201 build(deps): update dependency vite to ^8.3.4
• 141e39c build(deps): update dependency @​babel/core to ^8.0.7
• 6a6686e build(deps-dev): bump shell-quote from 1.10.0 to 1.12.0 in /examples
• 98e6e50 build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /website
• d2439ff build(deps): bump compression from 1.8.1 to 1.8.2 in /website
• Additional commits viewable in compare view

Updates typescript-eslint from 8.71.1 to 8.71.2

Release notes

Sourced from typescript-eslint's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

• eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
• type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

• Abraham Guo
• Brad Zacher @​bradzacher
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Vinccool96
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 7488d68 chore(release): publish 8.71.2
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[github-actions]

AI review: approve for 25f3e92

This Dependabot PR applies minor and patch bumps to 7 devDependencies: eslint, eslint-plugin-jest, eslint-plugin-prettier, js-yaml, rollup, ts-jest and typescript-eslint. Every changed lockfile entry resolves from registry.npmjs.org with an integrity hash. No install scripts or bin entries were added. The only new transitive package is the dev-only @dual-bundle/import-meta-resolve, pulled in by synckit; it has the same maintainer, JounQin. Runtime dependencies are unchanged and no source, CI or config files are touched. There were no earlier review threads.

Review run