Bump the npm-dependencies group across 20 directories with 119 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the npm-dependencies group with 108 updates in the / directory:

Package	From	To
@types/estree	1.0.8	1.0.9
@typescript-eslint/parser	6.21.0	8.63.0
eslint	8.57.1	10.7.0
eslint-config-prettier	9.1.2	10.1.8
eslint-plugin-headers	1.2.1	1.3.4
flow-bin	0.314.0	0.322.0
glob	10.5.0	13.0.6
husky	8.0.3	9.1.7
jest	30.2.0	30.4.2
jest-environment-jsdom	30.2.0	30.4.1
lint-staged	13.3.0	17.0.8
prettier	3.5.3	3.9.5
prettier-plugin-hermes-parser	0.36.1	0.37.0
yargs	17.7.2	18.0.0
@csstools/css-tokenizer	3.0.4	4.0.0
@babel/cli	7.28.3	8.0.4
@babel/core	7.28.5	8.0.1
@babel/node	7.28.0	8.0.1
@babel/eslint-parser	7.28.5	8.0.1
@babel/plugin-syntax-flow	7.27.1	8.0.1
@babel/preset-env	7.28.5	8.0.2
@babel/preset-flow	7.27.1	8.0.1
@babel/preset-react	7.28.5	8.0.1
@babel/preset-typescript	7.28.5	8.0.1
@rollup/plugin-alias	5.1.1	6.0.0
@rollup/plugin-babel	6.1.0	7.1.0
@rollup/plugin-commonjs	26.0.3	29.0.3
@rollup/plugin-node-resolve	15.3.1	16.0.3
@rollup/plugin-replace	5.0.7	6.0.3
rollup	4.59.0	4.62.2
@babel/plugin-syntax-jsx	7.27.1	8.0.1
@babel/plugin-syntax-typescript	7.27.1	8.0.3
browserslist	4.28.0	4.28.6
lightningcss	1.30.2	1.32.0
ansis	3.17.0	4.3.1
fs-extra	11.3.2	11.3.6
@clack/prompts	0.11.0	1.7.0
giget	2.0.0	3.3.0
react	19.2.3	19.3.0-canary-56824423-20260414
react-dom	19.2.3	19.3.0-canary-56824423-20260414
@babel/plugin-transform-flow-strip-types	7.27.1	8.0.1
postcss	8.5.15	8.5.18
terser	5.44.1	5.49.0
@babel/standalone	7.28.5	8.0.4
feed	4.2.2	6.0.0
algoliasearch	5.46.2	5.55.2
marked	17.0.1	18.0.6
fumadocs-core	16.0.11	16.11.3
fumadocs-mdx	13.0.8	15.1.0
fumadocs-ui	16.0.11	16.11.3
react-server-dom-webpack	19.2.6	19.2.7
waku	1.0.0-alpha.0	1.0.0-beta.6
lucide-react	0.553.0	1.24.0
@types/mdx	2.0.13	2.0.14
@types/node	22.19.1	26.1.1
typescript	5.9.3	7.0.2
unplugin	2.3.11	3.3.0
vite-tsconfig-paths	5.1.4	6.1.1
esbuild	0.27.1	0.28.1
next	16.2.6	16.2.10
autoprefixer	10.4.22	10.5.2
eslint-config-next	16.0.7	16.2.10
@remix-run/node-fetch-server	0.12.0	0.14.0
react-router	7.9.6	8.2.0
@vitejs/plugin-react	4.7.0	6.0.3
@vitejs/plugin-rsc	0.5.26	0.5.27
capnweb	0.2.0	0.10.0
rwsdk	1.0.0-beta.31	1.5.7
@cloudflare/vite-plugin	1.17.0	1.44.0
@cloudflare/workers-types	4.20260619.1	5.20260713.1
serve	14.2.5	14.2.6
@rspack/cli	1.6.6	2.1.3
@rspack/core	1.6.6	2.1.3
css-loader	7.1.2	7.1.4
@chromatic-com/storybook	4.1.2	5.2.1
@storybook/addon-a11y	9.1.16	10.5.0
@storybook/addon-docs	9.1.16	10.5.0
@storybook/addon-links	9.1.16	10.5.0
@storybook/addon-vitest	9.1.16	10.5.0
@storybook/react-vite	9.1.16	10.5.0
@typescript-eslint/eslint-plugin	8.46.4	8.63.0
@vitest/browser	4.0.18	4.1.10
@vitest/coverage-v8	4.0.18	4.1.10
eslint-plugin-storybook	9.1.16	10.5.0
playwright	1.56.1	1.61.1
postcss-nesting	13.0.2	14.0.0
rollup-plugin-node-externals	8.1.2	9.0.1
storybook	9.1.20	10.5.0
typescript-eslint	8.61.1	8.63.0
vite-plugin-dts	4.5.4	5.0.3
vitest	4.1.9	4.1.10
@eslint/js	9.39.1	10.0.1
@sveltejs/adapter-vercel	5.10.3	6.3.4
@sveltejs/kit	2.66.0	2.69.2
@sveltejs/vite-plugin-svelte	6.2.4	7.2.0
eslint-plugin-svelte	3.19.0	3.20.0
globals	16.5.0	17.7.0
svelte	5.56.3	5.56.4
svelte-check	4.6.0	4.7.2
eslint-plugin-react-hooks	5.2.0	7.1.1
eslint-plugin-react-refresh	0.4.24	0.5.3
@pmmmwh/react-refresh-webpack-plugin	0.6.1	0.6.2
babel-loader	10.0.0	10.1.1
html-webpack-plugin	5.6.4	5.6.7
mini-css-extract-plugin	2.9.4	2.10.2
webpack	5.102.1	5.108.4
webpack-cli	6.0.1	7.2.1
webpack-dev-server	5.2.4	6.0.0

Bumps the npm-dependencies group with 1 update in the /examples/example-bun directory: eslint.
Bumps the npm-dependencies group with 3 updates in the /examples/example-cli directory: @babel/preset-react, @babel/preset-typescript and typescript.
Bumps the npm-dependencies group with 2 updates in the /examples/example-esbuild directory: eslint and esbuild.
Bumps the npm-dependencies group with 3 updates in the /examples/example-nextjs directory: eslint, @types/node and typescript.
Bumps the npm-dependencies group with 6 updates in the /examples/example-react-router directory:

Package	From	To
@types/node	24.13.3	26.1.1
typescript	5.9.3	7.0.2
vite	7.3.6	8.1.4
@remix-run/node-fetch-server	0.12.0	0.14.0
react-router	7.9.6	8.2.0
@vitejs/plugin-react	4.7.0	6.0.3

Bumps the npm-dependencies group with 10 updates in the /examples/example-redwoodsdk directory:

Package	From	To
eslint	9.39.5	10.7.0
react	19.3.0-canary-561ee24d-20251101	19.3.0-canary-56824423-20260414
react-dom	19.3.0-canary-561ee24d-20251101	19.3.0-canary-56824423-20260414
react-server-dom-webpack	19.2.6	19.2.7
@types/node	24.13.3	26.1.1
typescript	5.9.3	7.0.2
vite	7.3.6	8.1.4
capnweb	0.2.0	0.10.0
rwsdk	1.0.0-beta.31	1.5.7
@cloudflare/workers-types	4.20260702.1	5.20260713.1

Bumps the npm-dependencies group with 9 updates in the /examples/example-rollup directory:

Package	From	To
eslint	9.39.5	10.7.0
@babel/core	7.29.7	8.0.1
@babel/preset-env	7.29.7	8.0.2
@babel/preset-flow	7.29.7	8.0.1
@babel/preset-react	7.29.7	8.0.1
@rollup/plugin-babel	6.1.0	7.1.0
@rollup/plugin-commonjs	26.0.3	29.0.3
@rollup/plugin-node-resolve	15.3.1	16.0.3
@rollup/plugin-replace	5.0.7	6.0.3

Bumps the npm-dependencies group with 3 updates in the /examples/example-rspack directory: eslint, @rspack/cli and @rspack/core.
Bumps the npm-dependencies group with 13 updates in the /examples/example-storybook directory:

Package	From	To
eslint	9.39.5	10.7.0
@vitejs/plugin-react	5.2.0	6.0.3
@chromatic-com/storybook	4.1.3	5.2.1
@storybook/addon-a11y	9.1.20	10.5.0
@storybook/addon-docs	9.1.20	10.5.0
@storybook/addon-links	9.1.20	10.5.0
@storybook/addon-vitest	9.1.20	10.5.0
@storybook/react-vite	9.1.20	10.5.0
eslint-plugin-storybook	9.1.20	10.5.0
postcss-nesting	13.0.2	14.0.0
rollup-plugin-node-externals	8.1.2	9.0.1
storybook	9.1.20	10.5.0
vite-plugin-dts	4.5.4	5.0.3

Bumps the npm-dependencies group with 7 updates in the /examples/example-sveltekit directory:

Package	From	To
eslint	9.39.5	10.7.0
typescript	5.9.3	7.0.2
vite	7.3.6	8.1.4
@eslint/js	9.39.5	10.0.1
@sveltejs/adapter-vercel	5.10.3	6.3.4
@sveltejs/vite-plugin-svelte	6.2.4	7.2.0
globals	16.5.0	17.7.0

Bumps the npm-dependencies group with 2 updates in the /examples/example-vite directory: eslint and vite.
Bumps the npm-dependencies group with 9 updates in the /examples/example-vite-react directory:

Package	From	To
eslint	9.39.5	10.7.0
@types/node	24.13.3	26.1.1
typescript	5.9.3	7.0.2
vite	7.3.6	8.1.4
@vitejs/plugin-react	5.2.0	6.0.3
@eslint/js	9.39.5	10.0.1
globals	16.5.0	17.7.0
eslint-plugin-react-hooks	5.2.0	7.1.1
eslint-plugin-react-refresh	0.4.26	0.5.3

Bumps the npm-dependencies group with 2 updates in the /examples/example-vite-rsc directory: eslint and vite.
Bumps the npm-dependencies group with 5 updates in the /examples/example-waku directory:

Package	From	To
eslint	9.39.5	10.7.0
react-server-dom-webpack	19.2.6	19.2.7
waku	1.0.0-alpha.0	1.0.0-beta.6
typescript	5.9.3	7.0.2
@vitejs/plugin-react	5.1.0	6.0.3

Bumps the npm-dependencies group with 5 updates in the /examples/example-webpack directory:

Package	From	To
@babel/core	7.29.7	8.0.1
@babel/preset-env	7.29.7	8.0.2
@babel/preset-react	7.29.7	8.0.1
webpack-cli	6.0.1	7.2.1
webpack-dev-server	5.2.6	6.0.0

Bumps the npm-dependencies group with 12 updates in the /packages/docs directory:

Package	From	To
@babel/standalone	7.29.7	8.0.4
feed	4.2.2	6.0.0
marked	17.0.6	18.0.6
fumadocs-core	16.0.11	16.11.3
fumadocs-mdx	13.0.8	15.1.0
fumadocs-ui	16.0.11	16.11.3
lucide-react	0.553.0	1.24.0
@types/node	24.13.3	26.1.1
typescript	5.9.3	7.0.2
unplugin	2.3.11	3.3.0
vite	7.3.6	8.1.4
vite-tsconfig-paths	5.1.4	6.1.1

Bumps the npm-dependencies group with 1 update in the /packages/scripts directory: yargs.
Bumps the npm-dependencies group with 4 updates in the /packages/style-value-parser directory: @csstools/css-tokenizer, @babel/cli, @babel/core and @babel/node.
Bumps the npm-dependencies group with 1 update in the /packages/typescript-tests directory: typescript.

Updates @types/estree from 1.0.8 to 1.0.9

Commits

• See full diff in compare view

Updates @typescript-eslint/parser from 6.21.0 to 8.63.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)
• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)
• scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)
• eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
• eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Patrick Aleite
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.63.0 (2026-07-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

• remove redundant package.json "files" (#12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.0 (2026-06-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.1 (2026-06-01)

This was a version bump only for parser to align it with other projects, there were no code changes.

... (truncated)

Commits

• 290cf6c chore(release): publish 8.63.0
• 3ea32f4 chore(release): publish 8.62.1
• 54e2857 chore(release): publish 8.62.0
• 81e4c26 feat: remove redundant package.json "files" (#12444)
• aaad718 chore(release): publish 8.61.1
• 16a5b24 chore(release): publish 8.61.0
• 4f84a69 chore(release): publish 8.60.1
• 1849b53 chore: typecheck using tsgo (#12139)
• f891c29 chore(release): publish 8.60.0
• ca6ca14 chore(release): publish 8.59.4
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​typescript-eslint/parser since your current version.

Updates eslint from 8.57.1 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
• 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
• 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
• 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
• 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
• 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
• b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
• e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
• a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
• d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
• 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
• a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
• 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

• c30d808 docs: Update README (GitHub Actions Bot)
• 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
• 04174cb docs: Update README (GitHub Actions Bot)
• 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
• 9d42fef docs: Update README (GitHub Actions Bot)
• b230159 docs: Update README (GitHub Actions Bot)
• 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
• 81a4774 chore: updates for v9.39.5 release (Jenkins)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
• 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
• 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
• 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
• e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
• 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
• 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
• 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
• 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
• 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
• 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
• a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
• 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

• b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits

• fabd99b 10.7.0
• 37c5e75 Build: changelog update for 10.7.0
• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
• 81a4774 chore: updates for v9.39.5 release
• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
• c30d808 docs: Update README
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
• Additional commits viewable in compare view

Updates eslint-config-prettier from 9.1.2 to 10.1.8

Release notes

Sourced from eslint-config-prettier's releases.

v10.1.8

republish latest version

Full Changelog: prettier/eslint-config-prettier@v10.1.5...v10.1.8

v10.1.5

Patch Changes

• #332 60fef02 Thanks @​JounQin! - chore: add funding field into package.json

Full Changelog: prettier/eslint-config-prettier@v10.1.4...v10.1.5

v10.1.4

Patch Changes

• #328 94b4799 Thanks @​silvenon! - fix(cli): do not crash on no rules configured

Full Changelog: prettier/eslint-config-prettier@v10.1.3...v10.1.4

v10.1.3

Patch Changes

• #325 4e95a1d Thanks @​pilikan! - fix: this package is commonjs, align its types correctly

New Contributors

• @​pilikan made their first contribution in prettier/eslint-config-prettier#325

Full Changelog: prettier/eslint-config-prettier@v10.1.2...v10.1.3

v10.1.2

Patch Changes

• #321 a8768bf Thanks @​Fdawgs! - chore(package): add homepage for some 3rd-party registry - see #321 for more details

v10.1.1

Patch Changes

• #309 eb56a5e Thanks @​JounQin! - fix: separate the /flat entry for compatibility

  For flat config users, the previous "eslint-config-prettier" entry still works, but "eslint-config-prettier/flat" adds a new name property for config-inspector, we just can't add it for the default entry for compatibility.

  See also prettier/eslint-config-prettier#308

  // before
  import eslintConfigPrettier from "eslint-config-prettier";
  // after
  import eslintConfigPrettier from "eslint-config-prettier/flat";

... (truncated)

Changelog

Sourced from eslint-config-prettier's changelog.

eslint-config-prettier

10.1.5

Patch Changes

• #332 60fef02 Thanks @​JounQin! - chore: add funding field into package.json

10.1.4

Patch Changes

• #328 94b4799 Thanks @​silvenon! - fix(cli): do not crash on no rules configured

10.1.3

Patch Changes

• #325 4e95a1d Thanks @​pilikan! - fix: this package is commonjs, align its types correctly

10.1.2

Patch Changes

• #321 a8768bf Thanks @​Fdawgs! - chore(package): add homepage for some 3rd-party registry - see #321 for more details

10.1.1

Patch Changes

• #309 eb56a5e Thanks @​JounQin! - fix: separate the /flat entry for compatibility

  For flat config users, the previous "eslint-config-prettier" entry still works, but "eslint-config-prettier/flat" adds a new name property for config-inspector, we just can't add it for the default entry for compatibility.

  See also prettier/eslint-config-prettier#308

  // before
  import eslintConfigPrettier from "eslint-config-prettier";
  // after
  import eslintConfigPrettier from "eslint-config-prettier/flat";

10.1.0

Minor Changes

• #306 56e2e34 Thanks @​JounQin! - feat: migrate to exports field

... (truncated)

Commits

• See full diff in compare view

Updates eslint-plugin-headers from 1.2.1 to 1.3.4

Release notes

Sourced from eslint-plugin-headers's releases.

v1.3.4

• Support ESLint 10.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.3...v1.3.4

v1.3.3

• Fix behavior where content between final pattern and end of header would not be escaped. Allow patterns and variables to be used in prefixes and suffixes.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.2...v1.3.3

v1.3.2

• Fix lines not getting escaped properly, leading to unintended regular expression syntax parsing.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.1...v1.3.2

v1.3.1

• Fix crash that could occur when a pair of parens appeared on a line when patterns were not configured.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.0...v1.3.1

v1.3.0

• Add support for validating regular expressions.

Full Changelog: robmisasi/eslint-plugin-headers@v1.2.1...v1.3.0

Commits

• c8f8537 1.3.4
• 7a1f7a0 Tweak AST traversal to support ESLint 10. Update dev dependencies.
• d31dee9 Update dev dependencies.
• 4abff60 1.3.3
• 41225ad Allow patterns and variables to be used in configured prefixes and suffixes. ...
• c3c5e24 1.3.2
• 8b0f5e0 Lines are now properly escaped when generating the regular expression to matc...
• f407a81 1.3.1
• 1ade872 Fix issue where patterns map was indexed when patterns were not configured. S...
• fe88e37 1.3.0
• Additional commits viewable in compare view

Updates flow-bin from 0.314.0 to 0.322.0

Commits

• See full diff in compare view

Updates glob from 10.5.0 to 13.0.6

Changelog

Sourced from glob's changelog.

changeglob

13

• Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

• Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
• Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
• Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

• e80cb38 13.0.6
• 9cdbbff revert tsgo, not ready for test coverage correctness yet
• 89c99ba use tsgo compiler
• b7275d5 update deps, expand engines to include node 18
• 942e360 update workflows, pull taprc out of package.json
• 4a0d53c update tap for mockImport bugfix
• ef94ad2 update tap
• 180c2d4 update docs
• 37993c8 remove stray console.error in test
• 03ae4c2 13.0.5
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates husky from 8.0.3 to 9.1.7

Release notes

Sourced from husky's releases.

v9.1.7

What's Changed

• fix: add husky label to deprecated warning by @​smackfu in typicode/husky#1538

New Contributors

• @​smackfu made their first contribution in typicode/husky#1538

Full Changelog: typicode/husky@v9.1.6...v9.1.7

v9.1.6

What's Changed

• Fix issue where example pre-commit file is generated incorrectly by @​dexmlee in typicode/husky#1519

New Contributors

• @​OlegKipchatov made their first contribution in typicode/husky#1495
• @​Byron2016 made their first contribution in typicode/husky#1499
• @​dexmlee made their first contribution in typicode/husky#1519

Full Changelog: typicode/husky@v9.1.5...v9.1.6

v9.1.5

What's Changed

• fixes #1494, support pre-merge-commit hook by @​RainMeoCat in typicode/husky#1497

New Contributors

• @​RainMeoCat made their first contribution in typicode/husky#1497

Full Changelog: typicode/husky@v9.1.4...v9.1.5

v9.1.4

• Improve deprecation notice

v9.1.3

• fix: better handle space in PATH

v9.1.2

Show a message instead of automatically removing deprecated code.

This only concerns projects that still have the following code in their hooks:

- #!/usr/bin/env sh # <- This is deprecated, remove it
- . "$(dirname -- "$0")/_/husky.sh"  # <- This is deprecated, remove it
Rest of your hook code

Hooks with these lines will fail in v10.0.0

v9.1.1

... (truncated)

Commits

• 799e84b 9.1.7
• 30f2049 fix: add husky label to deprecated warning (#1538)
• a2d942a 9.1.6

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
stylex	Error		Jul 13, 2026 5:07am