fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@actions/core (source)	^1.10.1 -> ^1.11.1
@antfu/ni	^0.21.12 -> ^0.23.0
@types/node (source)	^20.14.2 -> ^20.16.12
@typescript-eslint/eslint-plugin (source)	^7.13.0 -> ^7.18.0
@typescript-eslint/parser (source)	^7.13.0 -> ^7.18.0
eslint (source)	^8.57.0 -> ^8.57.1
eslint-plugin-n	^17.9.0 -> ^17.11.1
execa	^9.2.0 -> ^9.4.1
lint-staged	^15.2.7 -> ^15.2.10
pnpm (source)	9.3.0 -> 9.12.2
prettier (source)	^3.3.2 -> ^3.3.3
semver	^7.6.2 -> ^7.6.3
tsx (source)	^4.15.6 -> ^4.19.1
typescript (source)	^5.4.5 -> ^5.6.3

---

Release Notes

actions/toolkit (@​actions/core)

v1.11.1

• Fix uses of crypto.randomUUID on Node 18 and earlier #​1842

v1.11.0

• Add platform info utilities #​1551
• Remove dependency on uuid package #​1824

antfu-collective/ni (@​antfu/ni)

v0.23.0

Compare Source

   🚨 Breaking Changes

• parseNi etc. now return ResolvedCommand object instead of string, migrate to tinyexec  -  by @​userquin, Ben McCann and @​antfu in https://github.com/antfu-collective/ni/issues/231 (3d323)

    View changes on GitHub

v0.22.4

Compare Source

   🐞 Bug Fixes

• Revert to v0.22.1  -  by @​antfu (69f95)

    View changes on GitHub

v0.22.3

Compare Source

   🐞 Bug Fixes

• Move back to @jsdevtools/ez-spawn, fix #​224  -  by @​antfu in https://github.com/antfu-collective/ni/issues/224 (af1b1)

    View changes on GitHub

v0.22.2

Compare Source

No significant changes

    View changes on GitHub

v0.22.1

Compare Source

   🚀 Features

• Support environment variables for ni config  -  by @​ghostdevv and @​antfu in https://github.com/antfu-collective/ni/issues/216 (c408e)

   🐞 Bug Fixes

• bun x instead of bunx  -  by @​MAttila42 in https://github.com/antfu-collective/ni/issues/219 (13282)

    View changes on GitHub

v0.22.0

Compare Source

   🚀 Features

• Interactive package management  -  by @​gearonix and @​antfu in https://github.com/antfu-collective/ni/issues/202 (7787a)

   🐞 Bug Fixes

• Packager detect tests are not running  -  by @​zhyupe in https://github.com/antfu-collective/ni/issues/199 (9fb5b)
• bun: Incorrect bun frozen-lockfile command  -  by @​mrsekut in https://github.com/antfu-collective/ni/issues/214 (e0816)

    View changes on GitHub

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v7.18.0

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] prevent runtime error when asserting a variable declared in default TS lib

• eslint-plugin: [unbound-method] report on destructuring in function parameters

• eslint-plugin: [no-duplicate-type-constituents] shouldn't report on error types

• eslint-plugin: [strict-boolean-expressions] support branded booleans

❤️ Thank You

• auvred
• Oliver Salzburg
• Vinccool96
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

v7.17.0

Compare Source

🚀 Features

• eslint-plugin: backport no-unsafe-function type, no-wrapper-object-types from v8 to v7

• eslint-plugin: [return-await] add option to report in error-handling scenarios only, and deprecate "never"

🩹 Fixes

• eslint-plugin: [no-floating-promises] check top-level type assertions (and more)

• eslint-plugin: [strict-boolean-expressions] consider assertion function argument a boolean context

• eslint-plugin: [no-unnecessary-condition] false positive on optional private field

❤️ Thank You

• Armano
• Josh Goldberg ✨
• Kirk Waiblinger
• StyleShit

You can read about our versioning strategy and releases on our website.

v7.16.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-parameters] descend into all parts of mapped types in no-unnecessary-type-parameters

❤️ Thank You

• Dan Vanderkam

You can read about our versioning strategy and releases on our website.

v7.16.0

Compare Source

🚀 Features

• rule-tester: stricter rule test validations

• eslint-plugin: [no-unnecessary-parameter-property-assignment] add new rule

• eslint-plugin: add support for nested namespaces to unsafe-member-access

• eslint-plugin: [no-floating-promises] add checkThenables option

🩹 Fixes

• deps: update dependency @​eslint-community/regexpp to v4.11.0

• eslint-plugin: [no-floating-promises] add suggestions to tests from #​9263 checkThenables

• website: react key error on internal pages of website

• eslint-plugin: [restrict-template-expressions] don't report tuples if allowArray option is enabled

❤️ Thank You

• Abraham Guo
• auvred
• Josh Goldberg ✨
• Juan Sanchez
• Vinccool96
• YeonJuan
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

v7.15.0

Compare Source

🚀 Features

• eslint-plugin: [array-type] detect Readonly<string[]> case

• eslint-plugin: back-port new rules around empty object types from v8

🩹 Fixes

• disable EXPERIMENTAL_useProjectService in disabled-type-checked shared config

• eslint-plugin: [no-unsafe-return] differentiate a types-error any from a true any

• eslint-plugin: [no-unsafe-call] differentiate a types-error any from a true any

❤️ Thank You

• auvred
• Kim Sang Du
• rgehbt
• Vinccool96

You can read about our versioning strategy and releases on our website.

v7.14.1

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-nullish-coalescing] treat enums and literals as their underlying primitive types

• eslint-plugin: [prefer-nullish-coalescing] ensure ternary fix does not remove parens

❤️ Thank You

• Jake Bailey

You can read about our versioning strategy and releases on our website.

v7.14.0

Compare Source

🚀 Features

• support TypeScript 5.5

🩹 Fixes

• eslint-plugin: [no-extraneous-class] handle abstract members

• eslint-plugin: [prefer-nullish-coalescing] handle intersected primitive types

• eslint-plugin: [no-invalid-this] support AccessorProperty

❤️ Thank You

• Brad Zacher
• cm-ayf
• Jake Bailey
• James Zhan
• Joshua Chen
• yoshi2no

You can read about our versioning strategy and releases on our website.

v7.13.1

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-readonly] refine report locations

• eslint-plugin: [return-await] support explicit resource management

• eslint-plugin: [no-unsafe-member-access] differentiate a types-error any from a true any

❤️ Thank You

• Kirk Waiblinger
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v7.18.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.17.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.16.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.16.0

Compare Source

🩹 Fixes

• deps: update dependency @​eslint-community/regexpp to v4.11.0

• website: react key error on internal pages of website

❤️ Thank You

• Abraham Guo
• auvred
• Josh Goldberg ✨
• Juan Sanchez
• Vinccool96
• YeonJuan
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

v7.15.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.14.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.14.0

Compare Source

🚀 Features

• support TypeScript 5.5

❤️ Thank You

• Brad Zacher
• cm-ayf
• Jake Bailey
• James Zhan
• Joshua Chen
• yoshi2no

You can read about our versioning strategy and releases on our website.

v7.13.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

eslint/eslint (eslint)

v8.57.1

Compare Source

eslint-community/eslint-plugin-n (eslint-plugin-n)

v17.11.1

Compare Source

🩹 Fixes

• no-deprecated-api: dedeprecate process.nextTick (#​350) (dd889ab)

v17.11.0

Compare Source

🌟 Features

• no-missing-import: Add ignoreTypeImport options (#​344) (e022aba)
• no-process-env: Allow users to exclude specific variables (#​345) (b16a475)
• Update no-unsupported to node v22.9.0 (#​342) (87fb484)

🩹 Fixes

• no-missing-import: Ignore node builtins in package.json imports (#​346) (148e47e)
• no-missing-import: Resolve tsconfig paths relative to the tsconfig (#​343) (6cd7954)

📚 Documentation

• Explain the transitive dependency case for no-extraneous-* (#​347) (8c0a2cc)

v17.10.3

Compare Source

🩹 Fixes

• Use our data set to work out if a module is a node module (#​338) (6a1b2c5)

📚 Documentation

• process-exit-as-throw: update wording (#​323) (e5e758e)

v17.10.2

Compare Source

🩹 Fixes

• Duplex.from is supported in 16.8.0 (#​325) (de5ac0a), closes #​324

v17.10.1

Compare Source

🩹 Fixes

• Revert ts version (5.5 -> 5.4) (#​317) (3bee0d9)

v17.10.0

Compare Source

🌟 Features

• no-unsupported: Support node 20.16.0 (73e2bed)
• no-unsupported: Support node 22.3.0 and 20.16.0 (#​315) (73e2bed)
• Update to node v22.4.0 (#​310) (f7a74eb), closes #​308
• Update to node v22.5.0 (#​312) (2539c9d)

📚 Documentation

• add clarifications to readme (dbdfa8e)
• fix spacings in the example (#​306) (c092cd8)

🧹 Chores

• upgrade compatible deps (8f6f11d)

sindresorhus/execa (execa)

v9.4.1

Compare Source

v9.4.0

Compare Source

Features

• We've created a separate package called nano-spawn. It is similar to Execa but with fewer features, for a much smaller package size. More info.

Bug fixes

• Both execaNode() and the preferLocal option modify the PATH environment variable. This release includes some minor improvements to ensure that environment variable remains small (https://github.com/sindresorhus/npm-run-path/pull/20). It also handles a few related edge cases better (https://github.com/sindresorhus/npm-run-path/pull/21).

Documentation

• Small documentation typo fix, thanks @​rrthomas! (#​1153)

v9.3.1

Compare Source

v9.3.0

Compare Source

Features

• The verbose option can now be a function to customize logging. (#​1130)

lint-staged/lint-staged (lint-staged)

v15.2.10

Compare Source

Patch Changes

• #​1471 e3f283b Thanks @​iiroj! - Update minor dependencies, including micromatch@~4.0.8.

v15.2.9

Compare Source

Patch Changes

• #​1463 b69ce2d Thanks @​iiroj! - Set the maximum number of event listeners to the number of tasks. This should silence the console warning MaxListenersExceededWarning: Possible EventEmitter memory leak detected.

v15.2.8

Compare Source

Patch Changes

• f0480f0 Thanks @​iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version switched the --show-toplevel flag with --show-cdup, because on Git installed via MSYS2 the former was returning absolute paths that do not work with Node.js child_process. The new flag returns a path relative to the working directory, avoiding the issue.

  The GitHub Actions workflow has been updated to install Git via MSYS2, to ensure better future compatibility; using the default Git binary in the GitHub Actions runner was working correctly even with MSYS2.

pnpm/pnpm (pnpm)

v9.12.2

Compare Source

v9.12.1: pnpm 9.12.1

Compare Source

Patch Changes

• pnpm update --latest should not update the automatically installed peer dependencies #​6657.
• pnpm publish should be able to publish from a local tarball #​7950.
• The pnpx command should work correctly on Windows, when pnpm is installed via the standalone installation script #​8608.
• Prevent EBUSY errors caused by creating symlinks in parallel dlx processes #​8604.
• Fix maximum call stack size exceeded error related to circular workspace dependencies #​8599.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.12.0: pnpm 9.12

Compare Source

Minor Changes

• Fix peer dependency resolution dead lock #​8570. This change might change some of the keys in the snapshots field inside pnpm-lock.yaml but it should happen very rarely.

• pnpm outdated command supports now a --sort-by=name option for sorting outdated dependencies by package name #​8523.

• Added the ability for overrides to remove dependencies by specifying "-" as the field value #​8572. For example, to remove lodash from the dependencies, use this configuration in package.json:

  {
    "pnpm": {
      "overrides": {
        "lodash": "-"
      }
    }
  }

Patch Changes

• Fixed an issue where pnpm list --json pkg showed "private": false for a private package #​8519.
• Packages with libc that differ from pnpm.supportedArchitectures.libc are not downloaded #​7362.
• Prevent ENOENT errors caused by running store prune in parallel #​8586.
• Add issues alias to pnpm bugs #​8596.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v9.11.0

Compare Source

v9.10.0: pnpm 9.10

Compare Source

Minor Changes

• Support for a new CLI flag, --exclude-peers, added to the list and why commands. When --exclude-peers is used, peer dependencies are not printed in the results, but dependencies of peer dependencies are still scanned #​8506.

• Added a new setting to package.json at pnpm.auditConfig.ignoreGhsas for ignoring vulnerabilities by their GHSA code #​6838.

  For instance:

  {
    "pnpm": {
      "auditConfig": {
        "ignoreGhsas": [
          "GHSA-42xw-2xvc-qx8m",
          "GHSA-4w2v-q235-vp99",
          "GHSA-cph5-m8f7-6c5x",
          "GHSA-vh95-rmgr-6w4m"
        ]
      }
    }
  }

Patch Changes

• Throw an exception if pnpm switches to the same version of itself.
• Reduce memory usage during peer dependencies resolution.

Platinum Sponsors

Configuration 📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. If you want to rebase/retry this PR, check this box This PR was generated by Mend Renovate. View the repository job log.