[dependabot]

Bumps the npm-major group with 12 updates in the / directory:

Package	From	To
@google/genai	1.52.0	2.30.0
bcryptjs	2.4.3	3.0.3
@types/bcryptjs	2.4.6	3.0.0
openid-client	5.7.1	6.8.8
pixelmatch	5.3.0	8.0.0
redis	4.7.1	6.3.0
@types/bcryptjs	2.4.6	3.0.0
@types/node	24.19.2	26.6.5
@types/passport-jwt	3.0.13	4.0.1
@types/pixelmatch	5.2.6	7.1.0
dotenv	17.4.2	18.0.8
eslint	9.39.5	10.13.0
typescript	6.0.3	7.0.2

Bumps the npm-major group with 4 updates in the /prisma directory: bcryptjs, @types/bcryptjs, dotenv and typescript.

Updates @google/genai from 1.52.0 to 2.30.0

Release notes

Sourced from @​google/genai's releases.

v2.30.0

2.30.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (6bfba87)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (6bdc0d9)
• type GeminiNextGen signatures with public, importable names (ad3fb89)

v2.29.1

2.29.1 (2026-10-13)

Bug Fixes

• concatenate output_text across multi-step model responses in a turn (567cc8a)

v2.29.0

2.29.0 (2026-10-13)

Features

• accumulate streaming continuation usage metadata and expose initialPromptTokenCount (dbc961f)
• Add continuation_token to the Interactions interaction.status_update event. (a93776c)
• Add a CONTINUATION_REQUIRED Interaction status (754f71f)
• add billable token counts fields (839ffc2)
• Add startOffset/endOffset to Transcription and interimTranscriptTimestampEnabled to RealtimeInputConfig (bdbf156)
• Add usage in InteractionStatusUpdate events (8892aea)
• automatically consume the continuation token (98637d1)
• cli: update Speakeasy generator to v2.948.0, bump CLI to v0.4.2, and apply CLI overlay fixes (22d53ec)

Bug Fixes

• clear intermediate CONTINUATION finishReason in streaming continuation (22706af)
• do not record incomplete continuation stream turns in curated chat history (81c3c49)
• gemini-api-cli: remove unsupported 2.5 and 1.6 models from Interactions model options and CLI examples (1002720)
• js: do not set initial prompt token count for requests that do not use automatic consumption of continuation token (0885fb9)
• js: fix streaming continuation edge cases (stale token, AbortError, initialPromptTokenCount) (f3d10a6)
• Raise default HTTP timeouts so long-running requests aren't killed client-side (10e850c)
• resume streaming generation from the latest checkpoint continuation token on mid-stream errors or cutoffs (625ac2c)
• Update EnvironmentConfig.env schema to map keys to EnvVar or string. (8478e12)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.30.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (6bfba87)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (6bdc0d9)
• type GeminiNextGen signatures with public, importable names (ad3fb89)

2.29.1 (2026-10-13)

Bug Fixes

• concatenate output_text across multi-step model responses in a turn (567cc8a)

2.29.0 (2026-10-13)

Features

• accumulate streaming continuation usage metadata and expose initialPromptTokenCount (dbc961f)
• Add continuation_token to the Interactions interaction.status_update event. (a93776c)
• Add a CONTINUATION_REQUIRED Interaction status (754f71f)
• add billable token counts fields (839ffc2)
• Add startOffset/endOffset to Transcription and interimTranscriptTimestampEnabled to RealtimeInputConfig (bdbf156)
• Add usage in InteractionStatusUpdate events (8892aea)
• automatically consume the continuation token (98637d1)
• cli: update Speakeasy generator to v2.948.0, bump CLI to v0.4.2, and apply CLI overlay fixes (22d53ec)

Bug Fixes

• clear intermediate CONTINUATION finishReason in streaming continuation (22706af)
• do not record incomplete continuation stream turns in curated chat history (81c3c49)
• gemini-api-cli: remove unsupported 2.5 and 1.6 models from Interactions model options and CLI examples (1002720)
• js: do not set initial prompt token count for requests that do not use automatic consumption of continuation token (0885fb9)
• js: fix streaming continuation edge cases (stale token, AbortError, initialPromptTokenCount) (f3d10a6)
• Raise default HTTP timeouts so long-running requests aren't killed client-side (10e850c)
• resume streaming generation from the latest checkpoint continuation token on mid-stream errors or cutoffs (625ac2c)
• Update EnvironmentConfig.env schema to map keys to EnvVar or string. (8478e12)

2.28.0 (2026-10-07)

... (truncated)

Commits

• 1de87f8 chore(main): release 2.30.0 (#2058)
• 14086e6 chore(cli): update Speakeasy OpenAPI generator to v2.948.9
• 433a33a chore: internal change
• 6bdc0d9 fix: make continuation streams retry dropped hops, stop on prompt_feedback, a...
• 6bfba87 fix: fix the grounding metadata merging for automatic continuation in generat...
• ad3fb89 fix: type GeminiNextGen signatures with public, importable names
• 8a3c307 feat(interactions): add gemini-4-argon to Model enum
• f2ad2c1 chore: Skip the code coverage workflow on push/PR (manual trigger only).
• e63d1f1 fix: clear continuation state and preserve prompt feedback when continuation ...
• 2e083a7 chore(main): release 2.29.1 (#2052)
• Additional commits viewable in compare view

Updates bcryptjs from 2.4.3 to 3.0.3

Release notes

Sourced from bcryptjs's releases.

v3.0.3

Bug fixes

• Always yield to event loop before nextTick for async versions (#164) (1211e9a2213e0b3ee232a204b3ce899beebce31a)

v3.0.2

Bug fixes

• Use upstream fix to emit interop helpers (28e510389374f5736c447395443d4a6687325048)

v3.0.1

Bug fixes

• Separate ESM and UMD type definitions (e7055caf0c723cbcf8bc3f0784b8c30ee332380f)

v3.0.0

Breaking changes

• Modernize project structure (2f45985738604c743c4b8cc8464e3e7d3e04c73d) The project now exports an ECMAScript module by default, albeit with an UMD fallback, ships with types, the dist/ directory no longer exists in version control, and Closure Compiler externs have been removed.
• Generate 2b hashes by default (d36bfb42fa642b6d6986a84ce106a7110e5824db) This library was not affected by the bug that led to incrementing the bcrypt version from 2a to 2b, but nowadays most implementations use 2b, including the native bcrypt binding, so this change aligns with them. Existing hashes will continue to work, but test logic that generates hashes and compares them literally might need to be updated to account for the new default.

Features

• Add helper to check for password input length (d5656b39e2e368c87724a312e4e454456a4e5d1b)

Other

• Update publish workflow (2a9bea9e276e6be04dbd403f9695937788b3b10a)
• Add note on using the ESM variant in the browser (e09eb9afb14170069aaea19631b763307ee7b480)
• Update types (58333a1533dd53838e2697628f84b98d54a5c079)
• Merge lint and test workflows (2e3b17659e8856696acfe3015631ce2989eb3084)
• Fix tests (ec02e8a0ada7a8f6c71a91df164db8c25bbbb7b4)
• Update legacy fallback to handle crypto dependency (9db275fa10b1b40da4a6844480d7f8ae8df27fb8)
• Update lint workflow title (ac70ac57c2f99ad5639eddf54578e5fdd07b9c4c)
• Adapt crypto module usage for ESM environments (574d690d4972bcebbd5ca07880a62abab9ae3c0b)
• Format with prettier (e7465479282d8155852ce88d6407eccb14adc106)
• Rename default branch to 'main' (548559d032d7dd5ac3e4e16d7afd87b36ebe96ca)
• Update description to mention TypeScript support (4977df0849eaf8cad5b0d0b543fe452432a2d761)
• Add stale action for issues and PRs (a84d4e45487df0972d8781feafa477d5db4c1dbd)
• Fix typo (c8c9c01799bbc13092fcbb20cfab4d9015d14c61)
• Fix Node.js version in CI (1b54cc48d4120b50e1d9058e5a67f326102fd744)

Backlog from v2

• Added externs to .npmignore (#124) (7e2e93af99df2952253f9cf32db29aefa8f272f7) The npm package does not need externs as it is needed only for closure compiler. Added it in .npmignore since bcryptjs overrides global module and process in WebStorm IDE.
• Make sure the bin script uses LF (684fac6814a81d974c805a15e22fd69922c7ca6e)
• Post-merge; Clean up a bit (b09f7f266a7015456b7b36deeb026dc636f64542)

... (truncated)

Commits

• 1211e9a fix: Always yield to event loop before nextTick for async versions (#164)
• 28e5103 fix: Use upstream fix to emit interop helpers
• e7055ca fix: Separate ESM and UMD type definitions
• 2a9bea9 Update publish workflow
• d5656b3 Add helper to check for password input length
• e09eb9a Add note on using the ESM variant in the browser
• 58333a1 Update types
• 2e3b176 Merge lint and test workflows
• ec02e8a Fix tests
• 9db275f Update legacy fallback to handle crypto dependency
• Additional commits viewable in compare view

Updates @types/bcryptjs from 2.4.6 to 3.0.0

Commits

• See full diff in compare view

Updates openid-client from 5.7.1 to 6.8.8

Release notes

Sourced from openid-client's releases.

v6.8.8

Fixes

• apply the default HTTP request timeout (af32783)
• calculate token lifetimes using elapsed time (e816bf0)
• isolate lazy client authentication handler caches (d687796)
• passport: handle rejected async verification callbacks (d730f80)
• preserve clock settings across DCR nonce retries (5433d68)
• release: separate changelog sections (57fcbc6)
• retain polling abort signals through response processing (b26170e)
• select a unique decryption key when kid is omitted (10ba026)

Refactor

• share grant polling lifecycle and retry handling (b931c40)

v6.8.7

Fixes

• allow destructuring the claims helper (38bd8c0), references #887

v6.8.6

Fixes

• avoid undefined user-agent in fetchProtectedResource (492c3c3), references #885

v6.8.5

Fixes

• types: expose custom fetch duplex option (a125bc8)
• types: use portable oauth4webapi declarations (2cab98f)

Documentation

• improve API index tables (c6e4ae3)
• update README.md and SECURITY.md to reflect passed EOL dates (d3721c2)

v6.8.4

Fixes

• apply optional non-repudiation on generic grant ID Tokens (6202888)
• filter jwe decryption keys by algorithm (34e2ffd)
• preserve poll abort signals on requests (96a2d17)
• retry dpop nonce errors for generic grants (498c4d9)

v6.8.3

Documentation

• note a workaround for redirect_uri with query string or bare origin (e9689de), closes #868

... (truncated)

Changelog

Sourced from openid-client's changelog.

6.8.8 (2026-09-05)

Fixes

• apply the default HTTP request timeout (af32783)
• calculate token lifetimes using elapsed time (e816bf0)
• isolate lazy client authentication handler caches (d687796)
• passport: handle rejected async verification callbacks (d730f80)
• preserve clock settings across DCR nonce retries (5433d68)
• release: separate changelog sections (57fcbc6)
• retain polling abort signals through response processing (b26170e)
• select a unique decryption key when kid is omitted (10ba026)

Refactor

• share grant polling lifecycle and retry handling (b931c40)

6.8.7 (2026-08-20)

Fixes

• allow destructuring the claims helper (38bd8c0), references #887

6.8.6 (2026-08-18)

Fixes

• avoid undefined user-agent in fetchProtectedResource (492c3c3), references #885

6.8.5 (2026-08-11)

Fixes

• types: expose custom fetch duplex option (a125bc8)
• types: use portable oauth4webapi declarations (2cab98f)

Documentation

• improve API index tables (c6e4ae3)
• update README.md and SECURITY.md to reflect passed EOL dates (d3721c2)

6.8.4 (2026-04-27)

Fixes

• apply optional non-repudiation on generic grant ID Tokens (6202888)
• filter jwe decryption keys by algorithm (34e2ffd)
• preserve poll abort signals on requests (96a2d17)
• retry dpop nonce errors for generic grants (498c4d9)

... (truncated)

Commits

• 04c5982 chore(release): 6.8.8
• 5eccf2e chore: bump packages
• d730f80 fix(passport): handle rejected async verification callbacks
• b931c40 refactor: share grant polling lifecycle and retry handling
• d687796 fix: isolate lazy client authentication handler caches
• e816bf0 fix: calculate token lifetimes using elapsed time
• 10ba026 fix: select a unique decryption key when kid is omitted
• b26170e fix: retain polling abort signals through response processing
• af32783 fix: apply the default HTTP request timeout
• 5433d68 fix: preserve clock settings across DCR nonce retries
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for openid-client since your current version.

Updates pixelmatch from 5.3.0 to 8.0.0

Release notes

Sourced from pixelmatch's releases.

v8.0.0

A major update: a new, much more accurate color difference metric (replacing the one used since 2015), and two new options for handling noise and irrelevant regions in tests.

🎯 New color difference metric

Colors are now compared using the OKLab color space and the HyAB distance instead of YIQ. It's much closer to how people perceive color differences, so you get fewer false positives and fewer missed changes (#127). The math is more involved, but it's heavily optimized, so pixelmatch runs nearly as fast as before.

🪟 windowSize option

Returns the largest number of differing pixels in any N×N square instead of the total count. Scattered noise like GPU dithering or font anti-aliasing stays low, while real changes, which are usually compact, stand out:

if (pixelmatch(img1, img2, null, width, height, {windowSize: 16}) > 28) throw new Error('changed');

🙈 ignoreMask option

A per-pixel mask of areas to skip, like timestamps or animations. (#171 by @​Venefilyn, closes #163)

Other improvements

• More reliable anti-aliasing detection on images with transparency.
• Colors that differ only in transparency are much less likely to be missed.

⚠️ Upgrading from v7

The API is unchanged, and threshold keeps its scale (0 to 1, where 1 is black vs. white) and 0.1 default. But diff counts will differ because of the new metric. If your tests rely on exact counts or a tuned threshold, re-check them.

v7.2.0

Add a checkerboard option that controls whether to blend semi-transparent pixels against a checkerboard pattern (true, default) or plain white (false, pre-v7 behavior) when comparing images.

v7.1.1

• Improve performance by ~8%. #165
• Clearer errors on image size mismatch. #161 (by @​VendorMap)
• Skip antialiasing checks when includeAA is true. #160 (by @​mongoose700)

v7.1.0

• Add first-class TypeScript types to the project. They'll be maintained in the repo from now on. #139
• Improve matching performance by ~22%. #150

v7.0.0

• Potentially breaking: improve handling of semitransparent pixels. Previously, they were blended with white, so a transparent pixel vs white pixel would show zero difference; now pixels are blended with an irregular pattern, making it easier to catch regressions. (h/t @​NathanMOlson #142)
• Improve match performance by ~6%. #147
• Significantly improve diff generation performance. (h/t @​kawanet #105)
• Fix options handling to use the default value when undefined is passed explicitly. (h/t @​denis-sokolov #146)
• Fix ESLint failing on Windows when working on the library locally. (h/t @​haraldreingruber-dedalus #123)

v6.0.0

⚠️ Breaking: publish pixelmatch as a ES module. Use the older v5.3.0 if you need to support CommonJS environments.

Commits

• bddb613 8.0.0
• a59be42 clarify what threshold means
• 0cbe435 validate ignoreMask as pixel data
• ebd9a84 add lightness helper
• 3ab6cb5 improve checkerboard algorithm
• 2b55b69 minor cleanup
• 8856bdc feat: Add options.ignoreMask of pixels to skip (#171)
• b280005 fix sensitivity around dark & other edge cases
• c6fee35 blend with white rather than grey in AA check
• 63ab459 add windowSize option for sliding window diff counts
• Additional commits viewable in compare view

Updates redis from 4.7.1 to 6.3.0

Release notes

Sourced from redis's releases.

redis@6.2.1

What's Changed

• fix(sentinel): cap post-connect rediscovery retries by @​DebadityaHait in redis/node-redis#3388
• chore(deps): bump ip-address and socks by @​dependabot[bot] in redis/node-redis#3389
• feat(client): add MaxCommandRedirectionsError for cluster redirections by @​Piyush0049 in redis/node-redis#3386
• fix: remove stale data listener explicitly on socket error by @​Chrisp1tv in redis/node-redis#3209
• fix(client): dispose credentials subscription on every close() path by @​lazerg in redis/node-redis#3391
• fix(cluster): keep batch commands routed by slot during migration by @​GiHoon1123 in redis/node-redis#3377
• fix(client): decode RESP3 doubles to the value the server sent by @​Jaybhade in redis/node-redis#3393
• fix(cluster): handle MOVED and ASK redirects for atomic MULTI by @​konovalovsergey in redis/node-redis#3395

New Contributors

• @​DebadityaHait made their first contribution in redis/node-redis#3388
• @​Chrisp1tv made their first contribution in redis/node-redis#3209
• @​lazerg made their first contribution in redis/node-redis#3391
• @​Jaybhade made their first contribution in redis/node-redis#3393
• @​konovalovsergey made their first contribution in redis/node-redis#3395

Full Changelog: https://github.com/redis/node-redis/compare/redis@6.2.0...redis@6.2.1

redis@6.2.0

6.2.0

✨ Highlights

Cluster commands now follow the server's request/response policies. node-redis reads each command's routing policy from the server's COMMAND metadata and routes and aggregates accordingly, so the cluster client behaves much more like a single server. Multi-key commands that span hash slots — MGET, MSET, DEL, EXISTS, TOUCH, UNLINK — are transparently split per slot and their replies reassembled in caller order, so cross-slot calls that previously failed with CROSSSLOT now just work. Fan-out commands such as KEYS, DBSIZE, FLUSHALL, PING, WAIT, SCRIPT EXISTS and CONFIG SET run across every shard (or every node) and their replies are aggregated per the server's policy, SCAN walks the whole cluster behind a per-client virtual cursor, and RANDOMKEY / FT.CURSOR get correct cluster-aware routing. Replica read-scaling was also aligned with the server flags, so read-only keyless commands (DBSIZE, KEYS, SCAN, RANDOMKEY, and the RediSearch / time-series reads) can be served from replicas again.

⚠️ Behavior change for the raw sendCommand path: a table-recognized command sent raw — e.g. cluster.sendCommand(['DBSIZE']) — now follows its policy (fan-out and aggregate) instead of hitting a single node. Callers who relied on raw commands for per-node operations should target a specific node with cluster.nodeClient(node).sendCommand(...).

This release also brings a broad wave of new command coverage across the client and modules. The time-series package gains the most: new TS.NRANGE/TS.NREVRANGE multi-key pivot commands, a TS.READ cursor reader, TS.QUERYLABELS, EXCLUDEEMPTY on MRANGE/MREVRANGE, and multi-aggregator support. RediSearch adds FT.ALIASLIST, a COLLECT reducer for FT.AGGREGATE, HNSW RERANK, timeout warnings on the FT.SEARCH family, and the full set of stemmer languages. The core client adds SUNIONCARD/SDIFFCARD, LMOVEM/BLMOVEM, ZREVRANK WITHSCORE, COMMAND DOCS, and XREAD MAXCOUNT/MAXSIZE. A large batch of correctness fixes lands for zero-valued optional arguments (LIMIT 0, DB 0, SAMPLES 0, ENTRIESREAD 0, IDLETIME/FREQ 0, ENTRIESADDED 0) that were previously dropped from the wire, alongside several cluster and sentinel connection-lifecycle fixes.

The new HIMPORT command family (managed fieldset lifecycle) ships as experimental — see the warning below.

🚀 New Features

• feat(client): request/response policy routing for cluster commands (multi_shard split, fan-out aggregation, special SCAN/RANDOMKEY/FT.CURSOR) (#2996) — @​nkaradzhov
• feat: add COMMAND DOCS support (#3362) — @​Hashim1999164
• feat(client): add LMOVEM and BLMOVEM commands (#3340) — @​nkaradzhov
• feat(client): add SUNIONCARD and SDIFFCARD set-cardinality commands (#3336) — @​nkaradzhov
• feat(client): add zRevRankWithScore (#3279) — @​raashish1601
• feat(xread): add MAXCOUNT / MAXSIZE options (#3335) — @​nkaradzhov
• feat(search): expose timeout warnings on the FT.SEARCH family (#3338) — @​nkaradzhov
• feat(search): add missing RediSearch stemmer languages (#3350) — @​nkaradzhov
• feat(search): add FT.ALIASLIST (#3351) — @​nkaradzhov
• feat(search): add RERANK parameter for HNSW vector fields (#3356) — @​nkaradzhov
• feat(search): add COLLECT reducer to FT.AGGREGATE (#3310) — @​nkaradzhov
• feat(time-series): add TS.NRANGE / TS.NREVRANGE multi-key pivot commands (#3337) — @​nkaradzhov
• feat(time-series): support multiple aggregators per key in TS.NRANGE / TS.NREVRANGE (#3360) — @​nkaradzhov
• feat(time-series): add TS.QUERYLABELS (LABELS and VALUES forms) (#3354) — @​nkaradzhov
• feat(time-series): add EXCLUDEEMPTY to TS.MRANGE / TS.MREVRANGE (#3352) — @​nkaradzhov
• feat(time-series): add TS.READ cursor-read command (#3322) — @​nkaradzhov

... (truncated)

Commits

• c8ff8cc Release redis@6.3.0
• c3e8b53 Release entraid@6.3.0
• c7f6cb5 Release time-series@6.3.0
• 3843988 Release search@6.3.0
• 6b63940 Release json@6.3.0
• 7b732cd Release bloom@6.3.0
• badfdf0 Release client@6.3.0
• bfdd485 ci: use npm trusted publishing for releases (#3480)
• 0afa8d8 chore(deps): bump brace-expansion (#3485)
• 6ee8ca2 chore(deps): bump ip-address from 10.4.0 to 10.7.2 (#3482)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for redis since your current version.

Updates @types/bcryptjs from 2.4.6 to 3.0.0

Commits

• See full diff in compare view

Updates @types/node from 24.19.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/passport-jwt from 3.0.13 to 4.0.1

Commits

• See full diff in compare view

Updates @types/pixelmatch from 5.2.6 to 7.1.0

Commits

• See full diff in compare view

Updates dotenv from 17.4.2 to 18.0.8

Changelog

Sourced from dotenv's changelog.

18.0.8 (2026-10-14)

Changed

• Fast parser should strip appended extra quotes (#1073)
• Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

• Treat undefined settings like quiet: true as null rather than falsey (#1070)
• CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

• Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

• Fix missing typescript module declaration (#1068)
• Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

• import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

• Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

• Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

• Handle file urls in config logging (#1054)

... (truncated)

Commits

• e2fe95e 18.0.8
• 7aa712a type detail improvement
• 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
• 0b4843a changelog
• 55855ab Merge pull request #1073 from xiehuanyi/fix/unicode-unquoting-parity
• f757811 fix(types): allow undefined values in populate output
• fde5db2 Keep fast-parser unquoting consistent at Unicode line boundaries
• 2953207 18.0.7
• 9944723 make more readable for undefined -> null
• d455db0 Merge branch 'master' of github.com:motdotla/dotenv
• Additional commits viewable in compare view

Updates eslint from 9.39.5 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Visual-Regression-Tracker/backend
• Branch: master
• File: .coderabbit.yaml
• Commit: 3339d56
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 0944307c-0ce5-4486-b4f9-200e8715eaa4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #442.