chore(deps-dev): bump the dev-dependencies group across 1 directory with 13 updates

[dependabot]

Bumps the dev-dependencies group with 13 updates in the / directory:

Package	From	To
@blackwell-systems/gcf	2.4.0	2.6.1
@google/genai	2.11.0	2.28.0
@types/node	26.1.2	26.6.5
@typescript-eslint/eslint-plugin	8.66.0	8.71.1
@typescript-eslint/parser	8.66.0	8.71.1
eslint	10.7.0	10.12.0
globals	17.9.0	17.13.0
lighthouse	13.4.1	13.5.0
prettier	3.9.6	3.9.10
rollup	4.63.1	4.64.5
typescript	6.0.3	7.0.2
typescript-eslint	8.66.0	8.71.1
zod	3.25.76	4.6.5

Updates @blackwell-systems/gcf from 2.4.0 to 2.6.1

Release notes

Sourced from @​blackwell-systems/gcf's releases.

gcf-typescript v2.6.1 — decode quoted-key/array-value round-trip

A quoted key containing [ alongside an array value now round-trips. Such a key encodes to a named-array line ({"a[b": [1]} -> "a[b"[1]: 1); the decoder locates the array count bracket after the closing quote, per SPEC 4.2. Verified across all seven SDKs by the shared conformance fixtures (keys/012, keys/014, keys/015) and the cross-SDK differential fuzz.

Full changelog: https://github.com/blackwell-systems/gcf-typescript/blob/main/CHANGELOG.md

gcf-typescript v2.6.0 — int64 numeric domain + largeInt

Implements the v3.5.3 numeric domain (SPEC 2.3.2): the canonical domain is signed int64 for integers and IEEE-754 double for non-integers. This SDK parses integer literals to an exact int64 on decode and on the JSON-to-value bridge, and rejects a value outside int64 with an out-of-range error on both decode and encode, rather than following the host numeric type for integers beyond the double-exact range (2^53). Values beyond int64 (unsigned-64 identifiers, exact decimals) are modeled as strings. Canonical number formatting aligns to the domain: a double at or above 2^53 renders in exponent notation. Verified against the shared conformance fixtures (numbers/017-024, errors-v2/041-042) and the cross-SDK differential fuzz.

Adds a largeInt decode option (decodeGeneric(input, { largeInt }): error default / string / bigint / number) for an in-domain integer beyond the JavaScript 2^53 safe range; a bigint is accepted and serialized on encode.

Full changelog: https://github.com/blackwell-systems/gcf-typescript/blob/main/CHANGELOG.md

Full Changelog: blackwell-systems/gcf-typescript@v2.5.2...v2.6.0

v2.5.2

• Score rounding fix (SPEC 5, spec v3.5.1 errata). The graph node-line score now rounds half-to-even on the exact IEEE-754 double, matching the Go/Rust/Python/Swift/.NET reference. The previous Number.prototype.toFixed formatter rounded half-up, so it diverged at exact binary midpoints (0.125 -> 0.13 instead of 0.12, 0.625 -> 0.63 instead of 0.62) - a silent, non-interoperable wire difference. Pinned by the new graph-encode/004_score_midpoint_rounding conformance fixture. Encoding is unchanged for every non-midpoint score.

Part of spec v3.5.1.

v2.5.1

Decoders now reject a declared section count ([N]) that does not match the actual number of items, in both directions, per SPEC Section 13 (Count Validation). A declared count smaller than the items present was previously treated as a read limit and the surplus was dropped; it is now an error. This applies to the generic tabular, keyed-map, and root-array forms, the delta and full-set decoders, and the graph edge section.

Valid payloads are unaffected and encoding is unchanged: encoders always emit accurate counts, so this only changes how malformed or externally produced input is handled, rejecting it rather than silently truncating. New shared conformance fixtures pin the behavior in both directions.

v2.5.0: Keyed-tabular map encoding

Keyed-tabular map encoding (GCF spec v3.5.0).

Highlights

Keyed-tabular map encoding (SPEC §7.2a). A JSON object whose values are all objects forming a tabular set now encodes as a keyed table: the shared value fields are declared once in a header, with one key-prefixed row per member (## [N:]{key,...}). It is canonical by default, works in nested and streaming positions, and reuses generic delta with the map key as the identity, so an object-of-objects that recurs across an agent loop sends only what changed.

Also in this release

• Negative zero canonicalizes to 0 for both integer and floating-point values (SPEC §2.3.1).
• Canonical-output alignment across all six SDKs: object key ordering, graph header fields, and symbol ordering follow the specification and reference implementation exactly.

Compatibility

Additive. Existing payloads are unaffected. A pre-v3.5 decoder rejects the [N:] keyed-map marker, so decoders should be updated to read v3.5 output.

Quality

Verified by the shared cross-language conformance suite (byte-exact across all six SDKs), a re-encode idempotence check on the generic, graph, and delta profiles, and a differential cross-SDK fuzz in which the tree-sitter grammar parses every wire the SDKs emit.

Spec release: https://github.com/blackwell-systems/gcf/releases/tag/v3.5.0

Changelog

Sourced from @​blackwell-systems/gcf's changelog.

v2.6.1 (2026-08-15)

• Decode: quoted-key/array-value round-trip (SPEC 4.2).

v2.6.0 (2026-08-14)

• Numeric domain (spec v3.5.3, SPEC 2.3.2). Specifies the canonical numeric domain as signed int64 for integers and IEEE-754 double for non-integers. Earlier versions left integers beyond the double-exact range (2^53) to the host numeric type; this version parses integer literals to an exact int64 on decode and on the JSON-to-value bridge, returns an out-of-range error for a value outside int64 on both decode and encode, and models larger values (unsigned-64 identifiers, exact decimals) as strings. Canonical number formatting aligns to the domain: a double at or above 2^53 renders in exponent notation. Verified against new numbers/017-024 and errors-v2/041-042 conformance fixtures and the cross-SDK differential fuzz. Adds a largeInt decode option (decodeGeneric opts.largeInt: 'error' default, 'string', 'bigint', 'number') for an in-domain integer beyond the JavaScript 2^53 safe range; a bigint is accepted and serialized on encode.

v2.5.2 (2026-08-09)

• Score rounding fix (SPEC 5, spec v3.5.1 errata). The graph node-line score now rounds half-to-even on the exact IEEE-754 double, matching the Go/Rust/Python/Swift/.NET reference. The previous Number.prototype.toFixed formatter rounded half-up, so it diverged at exact binary midpoints (0.125 -> 0.13 instead of 0.12, 0.625 -> 0.63 instead of 0.62) - a silent, non-interoperable wire difference. Pinned by the new graph-encode/004_score_midpoint_rounding conformance fixture. Encoding is unchanged for every non-midpoint score.

v2.5.1 (2026-08-07)

• Decoders now reject a declared [N] section count that does not match the actual item count, in both directions, per SPEC Section 13 (Count Validation). A declared count smaller than the rows or entries present was previously read as a limit and the surplus was dropped; it is now an error. Covers the generic tabular, keyed-map, and root-array forms, the delta and full-set decoders, and the graph ## edges [N] section. Valid payloads and encoding are unchanged.

v2.5.0 (2026-08-07)

Added

• Keyed-tabular map encoding (SPEC 7.2a): a JSON object whose values are all objects forming a tabular set is encoded as a keyed table (## [N:]{key,...}) - the shared value fields are declared once, with one key-prefixed row per member. Canonical by default, supported in nested and streaming positions, and integrated with generic delta using the map key as the identity.

Changed

• Negative zero is canonicalized to 0 for both integer and floating-point values (SPEC 2.3.1).
• Canonical-output alignment across all six SDKs: object key ordering, graph header fields, and symbol ordering follow the specification and reference implementation exactly.

Testing

• Conformance runners assert re-encode idempotence (encode(decode(x)) == x) for the generic, graph, and delta profiles; a differential cross-SDK fuzz was added to the verification suite.

Commits

• 542beb0 release: v2.6.1
• d5ea0fe fix(decode): locate array count bracket past quoted keys (SPEC 4.2)
• dfc3b5c docs(readme): refresh fleet versions for the v3.5.3 release (spec v3.5.3, 279...
• ef166cc release: v2.6.0 — int64 numeric domain (SPEC 2.3.2); largeInt decode option
• 00972f2 Enforce int64 numeric domain with a largeInt policy (SPEC 2.3.2)
• b993b53 docs(readme): update spec version (v3.5.2), fixture count (269), current SDK ...
• 4a440ce release: v2.5.2 — score rounding half-to-even (spec v3.5.1 errata)
• 715f5f9 fix: round graph score half-to-even to match the reference (SPEC 5)
• 82aa33f docs: update version references (spec v3.5.0, v2.5.1 / Go v1.6.1 / Swift v2.6...
• 929f849 fix: enforce declared [N] section counts in both directions (SPEC 13)
• Additional commits viewable in compare view

Updates @google/genai from 2.11.0 to 2.28.0

Release notes

Sourced from @​google/genai's releases.

v2.28.0

2.28.0 (2026-10-07)

Features

• Support "allowlist": "disabled" in environment network config. (18bc392)
• update discovery doc (4e996fe)

v2.27.0

2.27.0 (2026-10-02)

Features

• add lyria-3.5, gemini-omni-1.1-flash, and gemini-omni-flash-preview to Interactions Model enum (4ce63d1)
• support continuation_token in Interactions (a888ad7)

v2.26.0

2.26.0 (2026-10-01)

Features

• support continuation_token in GenerateContent (ac628c5)

v2.25.0

2.25.0 (2026-09-30)

Features

• add gcs_metrics_uri for exporting tuning job metrics. (bc085fb)
• Add Gemini 3.8 Flash TTS and Gemini 3.8 Flash Lite TTS models to SDKs (b12dad0)
• genai-sdk: Add environments dedicated module and from_environment support (4d7e80b)
• include labels for LiveClientSetup (d4bcdad)
• support labels for Gemini API GenerateContent (71c3997)

Bug Fixes

• use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (c4341e1)

v2.24.0

2.24.0 (2026-09-22)

Features

• add sample_audio to Voice in GAOS SDK (d001d18)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.28.0 (2026-10-07)

Features

• Support "allowlist": "disabled" in environment network config. (18bc392)
• update discovery doc (4e996fe)

2.27.0 (2026-10-02)

Features

• add lyria-3.5, gemini-omni-1.1-flash, and gemini-omni-flash-preview to Interactions Model enum (4ce63d1)
• support continuation_token in Interactions (a888ad7)

2.26.0 (2026-10-01)

Features

• support continuation_token in GenerateContent (ac628c5)

2.25.0 (2026-09-30)

Features

• add gcs_metrics_uri for exporting tuning job metrics. (bc085fb)
• Add Gemini 3.8 Flash TTS and Gemini 3.8 Flash Lite TTS models to SDKs (b12dad0)
• genai-sdk: Add environments dedicated module and from_environment support (4d7e80b)
• include labels for LiveClientSetup (d4bcdad)
• support labels for Gemini API GenerateContent (71c3997)

Bug Fixes

• use CreateAgentInteraction for Trigger.interaction and TriggerCreateParams.interaction (c4341e1)

2.24.0 (2026-09-22)

Features

• add sample_audio to Voice in GAOS SDK (d001d18)
• add Voices API resource to GAOS SDK (f97113f)
• expose SpeechMetadata, VoiceConfig.voice, and SpeechAnnotation in public GenAI SDKs (19b7858)
• support field.value_field syntax for map add_union_value annotations. (51d701a)
• update discovery doc (42f9716)
• wire voice into sdk (08b568e)

... (truncated)

Commits

• 9e929ee chore(main): release 2.28.0 (#2008)
• d23bd6f chore: Add gemini-nano-banana-2.1 and gemini-3.1-flash-lite-image to supporte...
• 8bed2ba docs: update generated SDK docstring examples to use gemini-flash-latest
• 18bc392 feat: Support "allowlist": "disabled" in environment network config.
• 4e996fe feat: update discovery doc
• ca5690c test(openapi): speakeasy generator version.
• f6b85db test: run live module integration tests against both backends
• 7e5b9b6 chore(main): release 2.27.0 (#1995)
• a888ad7 feat: support continuation_token in Interactions
• 4ce63d1 feat: add lyria-3.5, gemini-omni-1.1-flash, and `gemini-omni-flash-previe...
• Additional commits viewable in compare view

Updates @types/node from 26.1.2 to 26.6.5

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.66.0 to 8.71.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.0

8.71.0 (2026-09-28)

🚀 Features

• eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

• eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)
• eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
• eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
• eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Fatih Çakır @​wfatih
• Josh Goldberg
• Josh Goldberg ✨
• Zamiell @​Zamiell

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

🚀 Features

• eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)
• eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
• eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
• eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Fatih Çakır @​wfatih
• Josh Goldberg
• Josh Goldberg ✨
• Zamiell @​Zamiell

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

... (truncated)

Commits

• d57b8da chore(release): publish 8.71.1
• e8593b2 fix(eslint-plugin): [no-unnecessary-type-parameters] count instantiated mappe...
• 2211d3f fix(eslint-plugin): [prefer-optional-chain] check the constrained type (#12953)
• ba9c0f1 fix(eslint-plugin): [no-confusing-void-expression] don't autofix when declare...
• 466d739 fix(eslint-plugin): [no-unsafe-enum-assignment] skip identical types and boun...
• e8c170f fix(eslint-plugin): [require-array-sort-compare] use array argument type cons...
• effa652 fix(eslint-plugin): [no-unused-vars] report usedOnlyAsType for partially expo...
• 9fbab43 fix(eslint-plugin): [no-misused-promises] skip argument checks for calls with...
• 3ab28b1 chore(eslint-plugin): re-enable plugin-test-formatting in all tests (#12950)
• 8695664 chore(release): publish 8.71.0
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.66.0 to 8.71.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.0

8.71.0 (2026-09-28)

🚀 Features

• eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

• eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)
• eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
• eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
• eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Fatih Çakır @​wfatih
• Josh Goldberg
• Josh Goldberg ✨
• Zamiell @​Zamiell

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.71.1 (2026-10-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.0 (2026-09-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

... (truncated)

Commits

• d57b8da chore(release): publish 8.71.1
• 8695664 chore(release): publish 8.71.0
• 23d38ce chore(release): publish 8.70.1
• 7ee7608 chore(release): publish 8.70.0
• 9a6e546 chore(release): publish 8.69.0
• 8f4e00a chore(release): publish 8.68.0
• 55f6d5d chore: enable source maps (#12677)
• 20a261f chore(release): publish 8.67.0
• 3b155bb chore: use typescript 7 for typechecking (#12601)
• See full diff in compare view

Updates eslint from 10.7.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates globals from 17.9.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

• Update globals (2026-10-01) (#354) b007369

---

sindresorhus/globals@v17.12.0...v17.13.0

v17.12.0

• Update globals (2026-09-01) (#353) 50a2119
• Add __webpack_layer__ global (#351) 779a11a

---

sindresorhus/globals@v17.11.0...v17.12.0

v17.11.0

• Add react-native globals (#337) 61eafbf

---

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

• Add GM_cookie to Greasemonkey globals (#349) f468407

---

sindresorhus/globals@v17.9.0...v17.10.0

Commits

• ce512bc 17.13.0
• b007369 Update globals (2026-10-01) (#354)
• 16cb1fe Meta tweaks
• 98008c3 17.12.0
• 50a2119 Update globals (2026-09-01) (#353)
• 779a11a Add __webpack_layer__ global (#351)
• 8c59927 17.11.0
• 61eafbf Add react-native globals (#337)
• 7bed4af 17.10.0
• f468407 Add GM_cookie to Greasemonkey globals (#349)
• See full diff in compare view

Updates lighthouse from 13.4.1 to 13.5.0

Release notes

Sourced from lighthouse's releases.

v13.5.0

Full Changelog

We expect this release to ship in the DevTools of Chrome 156, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• NickNojiri @​NickNojiri
• Alina Varkki @​AlinaVarkki

New Audits

• ard-schema: add Agent Resource Discovery audit (#17168)

Core

• centralize and enforce plugin category validation (#17243)
• add plugin version to LHR credits (#17232)
• config: group llms.txt and ARD audits under agent discovery (#17210)
• deprecations: handle new column offset (#17234)
• fetcher: add response header capture support (#17167)
• gather: fix broken cycle detection in recurse functions (#17173)
• user-flow: support aborting pending navigations (#17067)
• webmcp-form-coverage: pass instead of n/a when all forms covered (#17242)
• webmcp-registered-tools: warn when exceeding recommended limit (#17221)

Report

• display plugins in footer (#17125)
• sanitize entity homepage URLs (#17178)

Deps

• upgrade deps (#17245)
• upgrade deps (#17206)

Clients

• lightrider: export bundle w/ cjs compat (#17161)
• lr: split locales out of bundle (#17149)

I18n

• import (#17241)

Tests

• fix dbw expectation to exclude period (#17246)

... (truncated)

Changelog

Sourced from lighthouse's changelog.

13.5.0 (2026-09-17)

Full Changelog

We expect this release to ship in the DevTools of Chrome 156, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• NickNojiri @​NickNojiri
• Alina Varkki @​AlinaVarkki

New Audits

• ard-schema: add Agent Resource Discovery audit (#17168)

Core

• centralize and enforce plugin category validation (#17243)
• add plugin version to LHR credits (#17232)
• config: group llms.txt and ARD audits under agent discovery (#17210)
• deprecations: handle new column offset (#17234)
• fetcher: add response header capture support (#17167Description has been truncated