[dependabot]

Bumps the npm-major group with 12 updates in the / directory:

Package	From	To
@google/genai	1.52.0	2.32.0
bcryptjs	2.4.3	3.0.3
@types/bcryptjs	2.4.6	3.0.0
openid-client	5.7.1	6.8.8
pixelmatch	5.3.0	8.0.0
redis	4.7.1	6.3.1
@types/bcryptjs	2.4.6	3.0.0
@types/node	24.19.2	26.6.6
@types/passport-jwt	3.0.13	4.0.1
@types/pixelmatch	5.2.6	7.1.0
dotenv	17.4.2	18.0.9
eslint	9.39.5	10.13.0
typescript	6.0.3	7.0.2
bcryptjs	2.4.3	3.0.3
@types/bcryptjs	2.4.6	3.0.0
dotenv	17.4.2	18.0.9
typescript	6.0.3	7.0.2

Bumps the npm-major group with 4 updates in the /prisma directory: bcryptjs, @types/bcryptjs, dotenv and typescript.

Updates @google/genai from 1.52.0 to 2.32.0

Release notes

Sourced from @​google/genai's releases.

v2.32.0

2.32.0 (2026-10-29)

Features

• Add support for continuation_token and requires_continuation status (c7b2fd2)
• add video upscale task parameter (54b9b19)
• interactions: add automatic_continuation to interactions.create in the TypeScript SDK (99f1892)
• interactions: declare continuation_ids on Interaction (9cf3280)
• support video understanding in Gemini Developer API (7c82322)

Bug Fixes

• interactions: align SDK User-Agent and x-goog-api-client headers (dda511e)

v2.31.0

2.31.0 (2026-10-22)

Features

• Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. (0b52aa5)
• add base_voice to PromptedVoice in GAOS SDK (d62820b)
• Add generation_output_config to GenerateContentConfig (e82a75a)
• Add Live API in-session context updates (send_context_update) and types across GenAI SDKs. (177ee68)
• include AudioContent, DocumentContent, and VideoContent in FunctionResultSubContent (aeaed4e)
• sdks: enable fixes.openSingleValueEnumsOct2026 across all SDKs (0059474)
• update discovery doc (40d6e98)

Bug Fixes

• genai: raise mid-stream SSE errors and dropped connections consistently across SDKs; add continuation conformance tests (38f6ebc)
• interactions: sync InteractionSseEventInteractionStatus enum with InteractionStatus (be6aa9f)
• triggers: fix agent triggers OpenAPI overlays, numeric fields, and SDK patches (0e9031d)

v2.30.0

2.30.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.32.0 (2026-10-29)

Features

• Add support for continuation_token and requires_continuation status (c7b2fd2)
• add video upscale task parameter (54b9b19)
• interactions: add automatic_continuation to interactions.create in the TypeScript SDK (99f1892)
• interactions: declare continuation_ids on Interaction (9cf3280)
• support video understanding in Gemini Developer API (7c82322)

Bug Fixes

• interactions: align SDK User-Agent and x-goog-api-client headers (dda511e)

2.31.0 (2026-10-22)

Features

• Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. (0b52aa5)
• add base_voice to PromptedVoice in GAOS SDK (d62820b)
• Add generation_output_config to GenerateContentConfig (e82a75a)
• Add Live API in-session context updates (send_context_update) and types across GenAI SDKs. (177ee68)
• include AudioContent, DocumentContent, and VideoContent in FunctionResultSubContent (aeaed4e)
• sdks: enable fixes.openSingleValueEnumsOct2026 across all SDKs (0059474)
• update discovery doc (40d6e98)

Bug Fixes

• genai: raise mid-stream SSE errors and dropped connections consistently across SDKs; add continuation conformance tests (38f6ebc)
• interactions: sync InteractionSseEventInteractionStatus enum with InteractionStatus (be6aa9f)
• triggers: fix agent triggers OpenAPI overlays, numeric fields, and SDK patches (0e9031d)

2.30.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (8a3c307)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (e63d1f1)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (6bfba87)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (6bdc0d9)
• type GeminiNextGen signatures with public, importable names (ad3fb89)

... (truncated)

Commits

• 70501db chore(main): release 2.32.0 (#2099)
• 54b9b19 feat: add video upscale task parameter
• 99f1892 feat(interactions): add automatic_continuation to interactions.create in the ...
• dda511e fix(interactions): align SDK User-Agent and x-goog-api-client headers
• 7c82322 feat: support video understanding in Gemini Developer API
• 9cf3280 feat(interactions): declare continuation_ids on Interaction
• 00cfd86 chore(cli): update Speakeasy OpenAPI generator to v2.952.4
• c7b2fd2 feat: Add support for continuation_token and requires_continuation status
• fc5ad30 chore(genai): pass platform WebSocketFactory to GeminiNextGenInteractions
• 0dd787c chore: update Speakeasy OpenAPI generator to v2.950.11 and bump CLI to v0.4.4
• Additional commits viewable in compare view

Updates bcryptjs from 2.4.3 to 3.0.3

Release notes

Sourced from bcryptjs's releases.

v3.0.3

Bug fixes

• Always yield to event loop before nextTick for async versions (#164) (1211e9a2213e0b3ee232a204b3ce899beebce31a)

v3.0.2

Bug fixes

• Use upstream fix to emit interop helpers (28e510389374f5736c447395443d4a6687325048)

v3.0.1

Bug fixes

• Separate ESM and UMD type definitions (e7055caf0c723cbcf8bc3f0784b8c30ee332380f)

v3.0.0

Breaking changes

• Modernize project structure (2f45985738604c743c4b8cc8464e3e7d3e04c73d) The project now exports an ECMAScript module by default, albeit with an UMD fallback, ships with types, the dist/ directory no longer exists in version control, and Closure Compiler externs have been removed.
• Generate 2b hashes by default (d36bfb42fa642b6d6986a84ce106a7110e5824db) This library was not affected by the bug that led to incrementing the bcrypt version from 2a to 2b, but nowadays most implementations use 2b, including the native bcrypt binding, so this change aligns with them. Existing hashes will continue to work, but test logic that generates hashes and compares them literally might need to be updated to account for the new default.

Features

• Add helper to check for password input length (d5656b39e2e368c87724a312e4e454456a4e5d1b)

Other

• Update publish workflow (2a9bea9e276e6be04dbd403f9695937788b3b10a)
• Add note on using the ESM variant in the browser (e09eb9afb14170069aaea19631b763307ee7b480)
• Update types (58333a1533dd53838e2697628f84b98d54a5c079)
• Merge lint and test workflows (2e3b17659e8856696acfe3015631ce2989eb3084)
• Fix tests (ec02e8a0ada7a8f6c71a91df164db8c25bbbb7b4)
• Update legacy fallback to handle crypto dependency (9db275fa10b1b40da4a6844480d7f8ae8df27fb8)
• Update lint workflow title (ac70ac57c2f99ad5639eddf54578e5fdd07b9c4c)
• Adapt crypto module usage for ESM environments (574d690d4972bcebbd5ca07880a62abab9ae3c0b)
• Format with prettier (e7465479282d8155852ce88d6407eccb14adc106)
• Rename default branch to 'main' (548559d032d7dd5ac3e4e16d7afd87b36ebe96ca)
• Update description to mention TypeScript support (4977df0849eaf8cad5b0d0b543fe452432a2d761)
• Add stale action for issues and PRs (a84d4e45487df0972d8781feafa477d5db4c1dbd)
• Fix typo (c8c9c01799bbc13092fcbb20cfab4d9015d14c61)
• Fix Node.js version in CI (1b54cc48d4120b50e1d9058e5a67f326102fd744)

Backlog from v2

• Added externs to .npmignore (#124) (7e2e93af99df2952253f9cf32db29aefa8f272f7) The npm package does not need externs as it is needed only for closure compiler. Added it in .npmignore since bcryptjs overrides global module and process in WebStorm IDE.
• Make sure the bin script uses LF (684fac6814a81d974c805a15e22fd69922c7ca6e)
• Post-merge; Clean up a bit (b09f7f266a7015456b7b36deeb026dc636f64542)

... (truncated)

Commits

• 1211e9a fix: Always yield to event loop before nextTick for async versions (#164)
• 28e5103 fix: Use upstream fix to emit interop helpers
• e7055ca fix: Separate ESM and UMD type definitions
• 2a9bea9 Update publish workflow
• d5656b3 Add helper to check for password input length
• e09eb9a Add note on using the ESM variant in the browser
• 58333a1 Update types
• 2e3b176 Merge lint and test workflows
• ec02e8a Fix tests
• 9db275f Update legacy fallback to handle crypto dependency
• Additional commits viewable in compare view

Updates @types/bcryptjs from 2.4.6 to 3.0.0

Commits

• See full diff in compare view

Updates openid-client from 5.7.1 to 6.8.8

Release notes

Sourced from openid-client's releases.

v6.8.8

Fixes

• apply the default HTTP request timeout (af32783)
• calculate token lifetimes using elapsed time (e816bf0)
• isolate lazy client authentication handler caches (d687796)
• passport: handle rejected async verification callbacks (d730f80)
• preserve clock settings across DCR nonce retries (5433d68)
• release: separate changelog sections (57fcbc6)
• retain polling abort signals through response processing (b26170e)
• select a unique decryption key when kid is omitted (10ba026)

Refactor

• share grant polling lifecycle and retry handling (b931c40)

v6.8.7

Fixes

• allow destructuring the claims helper (38bd8c0), references #887

v6.8.6

Fixes

• avoid undefined user-agent in fetchProtectedResource (492c3c3), references #885

v6.8.5

Fixes

• types: expose custom fetch duplex option (a125bc8)
• types: use portable oauth4webapi declarations (2cab98f)

Documentation

• improve API index tables (c6e4ae3)
• update README.md and SECURITY.md to reflect passed EOL dates (d3721c2)

v6.8.4

Fixes

• apply optional non-repudiation on generic grant ID Tokens (6202888)
• filter jwe decryption keys by algorithm (34e2ffd)
• preserve poll abort signals on requests (96a2d17)
• retry dpop nonce errors for generic grants (498c4d9)

v6.8.3

Documentation

• note a workaround for redirect_uri with query string or bare origin (e9689de), closes #868

... (truncated)

Changelog

Sourced from openid-client's changelog.

6.8.8 (2026-09-05)

Fixes

• apply the default HTTP request timeout (af32783)
• calculate token lifetimes using elapsed time (e816bf0)
• isolate lazy client authentication handler caches (d687796)
• passport: handle rejected async verification callbacks (d730f80)
• preserve clock settings across DCR nonce retries (5433d68)
• release: separate changelog sections (57fcbc6)
• retain polling abort signals through response processing (b26170e)
• select a unique decryption key when kid is omitted (10ba026)

Refactor

• share grant polling lifecycle and retry handling (b931c40)

6.8.7 (2026-08-20)

Fixes

• allow destructuring the claims helper (38bd8c0), references #887

6.8.6 (2026-08-18)

Fixes

• avoid undefined user-agent in fetchProtectedResource (492c3c3), references #885

6.8.5 (2026-08-11)

Fixes

• types: expose custom fetch duplex option (a125bc8)
• types: use portable oauth4webapi declarations (2cab98f)

Documentation

• improve API index tables (c6e4ae3)
• update README.md and SECURITY.md to reflect passed EOL dates (d3721c2)

6.8.4 (2026-04-27)

Fixes

• apply optional non-repudiation on generic grant ID Tokens (6202888)
• filter jwe decryption keys by algorithm (34e2ffd)
• preserve poll abort signals on requests (96a2d17)
• retry dpop nonce errors for generic grants (498c4d9)

... (truncated)

Commits

• 04c5982 chore(release): 6.8.8
• 5eccf2e chore: bump packages
• d730f80 fix(passport): handle rejected async verification callbacks
• b931c40 refactor: share grant polling lifecycle and retry handling
• d687796 fix: isolate lazy client authentication handler caches
• e816bf0 fix: calculate token lifetimes using elapsed time
• 10ba026 fix: select a unique decryption key when kid is omitted
• b26170e fix: retain polling abort signals through response processing
• af32783 fix: apply the default HTTP request timeout
• 5433d68 fix: preserve clock settings across DCR nonce retries
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for openid-client since your current version.

Updates pixelmatch from 5.3.0 to 8.0.0

Release notes

Sourced from pixelmatch's releases.

v8.0.0

A major update: a new, much more accurate color difference metric (replacing the one used since 2015), and two new options for handling noise and irrelevant regions in tests.

🎯 New color difference metric

Colors are now compared using the OKLab color space and the HyAB distance instead of YIQ. It's much closer to how people perceive color differences, so you get fewer false positives and fewer missed changes (#127). The math is more involved, but it's heavily optimized, so pixelmatch runs nearly as fast as before.

🪟 windowSize option

Returns the largest number of differing pixels in any N×N square instead of the total count. Scattered noise like GPU dithering or font anti-aliasing stays low, while real changes, which are usually compact, stand out:

if (pixelmatch(img1, img2, null, width, height, {windowSize: 16}) > 28) throw new Error('changed');

🙈 ignoreMask option

A per-pixel mask of areas to skip, like timestamps or animations. (#171 by @​Venefilyn, closes #163)

Other improvements

• More reliable anti-aliasing detection on images with transparency.
• Colors that differ only in transparency are much less likely to be missed.

⚠️ Upgrading from v7

The API is unchanged, and threshold keeps its scale (0 to 1, where 1 is black vs. white) and 0.1 default. But diff counts will differ because of the new metric. If your tests rely on exact counts or a tuned threshold, re-check them.

v7.2.0

Add a checkerboard option that controls whether to blend semi-transparent pixels against a checkerboard pattern (true, default) or plain white (false, pre-v7 behavior) when comparing images.

v7.1.1

• Improve performance by ~8%. #165
• Clearer errors on image size mismatch. #161 (by @​VendorMap)
• Skip antialiasing checks when includeAA is true. #160 (by @​mongoose700)

v7.1.0

• Add first-class TypeScript types to the project. They'll be maintained in the repo from now on. #139
• Improve matching performance by ~22%. #150

v7.0.0

• Potentially breaking: improve handling of semitransparent pixels. Previously, they were blended with white, so a transparent pixel vs white pixel would show zero difference; now pixels are blended with an irregular pattern, making it easier to catch regressions. (h/t @​NathanMOlson #142)
• Improve match performance by ~6%. #147
• Significantly improve diff generation performance. (h/t @​kawanet #105)
• Fix options handling to use the default value when undefined is passed explicitly. (h/t @​denis-sokolov #146)
• Fix ESLint failing on Windows when working on the library locally. (h/t @​haraldreingruber-dedalus #123)

v6.0.0

⚠️ Breaking: publish pixelmatch as a ES module. Use the older v5.3.0 if you need to support CommonJS environments.

Commits

• bddb613 8.0.0
• a59be42 clarify what threshold means
• 0cbe435 validate ignoreMask as pixel data
• ebd9a84 add lightness helper
• 3ab6cb5 improve checkerboard algorithm
• 2b55b69 minor cleanup
• 8856bdc feat: Add options.ignoreMask of pixels to skip (#171)
• b280005 fix sensitivity around dark & other edge cases
• c6fee35 blend with white rather than grey in AA check
• 63ab459 add windowSize option for sliding window diff counts
• Additional commits viewable in compare view

Updates redis from 4.7.1 to 6.3.1

Release notes

Sourced from redis's releases.

redis@6.2.1

What's Changed

• fix(sentinel): cap post-connect rediscovery retries by @​DebadityaHait in redis/node-redis#3388
• chore(deps): bump ip-address and socks by @​dependabot[bot] in redis/node-redis#3389
• feat(client): add MaxCommandRedirectionsError for cluster redirections by @​Piyush0049 in redis/node-redis#3386
• fix: remove stale data listener explicitly on socket error by @​Chrisp1tv in redis/node-redis#3209
• fix(client): dispose credentials subscription on every close() path by @​lazerg in redis/node-redis#3391
• fix(cluster): keep batch commands routed by slot during migration by @​GiHoon1123 in redis/node-redis#3377
• fix(client): decode RESP3 doubles to the value the server sent by @​Jaybhade in redis/node-redis#3393
• fix(cluster): handle MOVED and ASK redirects for atomic MULTI by @​konovalovsergey in redis/node-redis#3395

New Contributors

• @​DebadityaHait made their first contribution in redis/node-redis#3388
• @​Chrisp1tv made their first contribution in redis/node-redis#3209
• @​lazerg made their first contribution in redis/node-redis#3391
• @​Jaybhade made their first contribution in redis/node-redis#3393
• @​konovalovsergey made their first contribution in redis/node-redis#3395

Full Changelog: https://github.com/redis/node-redis/compare/redis@6.2.0...redis@6.2.1

redis@6.2.0

6.2.0

✨ Highlights

Cluster commands now follow the server's request/response policies. node-redis reads each command's routing policy from the server's COMMAND metadata and routes and aggregates accordingly, so the cluster client behaves much more like a single server. Multi-key commands that span hash slots — MGET, MSET, DEL, EXISTS, TOUCH, UNLINK — are transparently split per slot and their replies reassembled in caller order, so cross-slot calls that previously failed with CROSSSLOT now just work. Fan-out commands such as KEYS, DBSIZE, FLUSHALL, PING, WAIT, SCRIPT EXISTS and CONFIG SET run across every shard (or every node) and their replies are aggregated per the server's policy, SCAN walks the whole cluster behind a per-client virtual cursor, and RANDOMKEY / FT.CURSOR get correct cluster-aware routing. Replica read-scaling was also aligned with the server flags, so read-only keyless commands (DBSIZE, KEYS, SCAN, RANDOMKEY, and the RediSearch / time-series reads) can be served from replicas again.

⚠️ Behavior change for the raw sendCommand path: a table-recognized command sent raw — e.g. cluster.sendCommand(['DBSIZE']) — now follows its policy (fan-out and aggregate) instead of hitting a single node. Callers who relied on raw commands for per-node operations should target a specific node with cluster.nodeClient(node).sendCommand(...).

This release also brings a broad wave of new command coverage across the client and modules. The time-series package gains the most: new TS.NRANGE/TS.NREVRANGE multi-key pivot commands, a TS.READ cursor reader, TS.QUERYLABELS, EXCLUDEEMPTY on MRANGE/MREVRANGE, and multi-aggregator support. RediSearch adds FT.ALIASLIST, a COLLECT reducer for FT.AGGREGATE, HNSW RERANK, timeout warnings on the FT.SEARCH family, and the full set of stemmer languages. The core client adds SUNIONCARD/SDIFFCARD, LMOVEM/BLMOVEM, ZREVRANK WITHSCORE, COMMAND DOCS, and XREAD MAXCOUNT/MAXSIZE. A large batch of correctness fixes lands for zero-valued optional arguments (LIMIT 0, DB 0, SAMPLES 0, ENTRIESREAD 0, IDLETIME/FREQ 0, ENTRIESADDED 0) that were previously dropped from the wire, alongside several cluster and sentinel connection-lifecycle fixes.

The new HIMPORT command family (managed fieldset lifecycle) ships as experimental — see the warning below.

🚀 New Features

• feat(client): request/response policy routing for cluster commands (multi_shard split, fan-out aggregation, special SCAN/RANDOMKEY/FT.CURSOR) (#2996) — @​nkaradzhov
• feat: add COMMAND DOCS support (#3362) — @​Hashim1999164
• feat(client): add LMOVEM and BLMOVEM commands (#3340) — @​nkaradzhov
• feat(client): add SUNIONCARD and SDIFFCARD set-cardinality commands (#3336) — @​nkaradzhov
• feat(client): add zRevRankWithScore (#3279) — @​raashish1601
• feat(xread): add MAXCOUNT / MAXSIZE options (#3335) — @​nkaradzhov
• feat(search): expose timeout warnings on the FT.SEARCH family (#3338) — @​nkaradzhov
• feat(search): add missing RediSearch stemmer languages (#3350) — @​nkaradzhov
• feat(search): add FT.ALIASLIST (#3351) — @​nkaradzhov
• feat(search): add RERANK parameter for HNSW vector fields (#3356) — @​nkaradzhov
• feat(search): add COLLECT reducer to FT.AGGREGATE (#3310) — @​nkaradzhov
• feat(time-series): add TS.NRANGE / TS.NREVRANGE multi-key pivot commands (#3337) — @​nkaradzhov
• feat(time-series): support multiple aggregators per key in TS.NRANGE / TS.NREVRANGE (#3360) — @​nkaradzhov
• feat(time-series): add TS.QUERYLABELS (LABELS and VALUES forms) (#3354) — @​nkaradzhov
• feat(time-series): add EXCLUDEEMPTY to TS.MRANGE / TS.MREVRANGE (#3352) — @​nkaradzhov
• feat(time-series): add TS.READ cursor-read command (#3322) — @​nkaradzhov

... (truncated)

Commits

• 5f86747 Release redis@6.3.1
• 12bcff0 Release entraid@6.3.1
• 0f57a03 Release time-series@6.3.1
• 63a9b6d Release search@6.3.1
• d0f8bbf Release json@6.3.1
• 2c23509 Release bloom@6.3.1
• 9902897 Release client@6.3.1
• 492cb2e fix(entraid): bump @​azure/msal-node to 7.1 for CVE-2026-109461 (#3543)
• c8ff8cc Release redis@6.3.0
• c3e8b53 Release entraid@6.3.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for redis since your current version.

Updates @types/bcryptjs from 2.4.6 to 3.0.0

Commits

• See full diff in compare view

Updates @types/node from 24.19.2 to 26.6.6

Commits

• See full diff in compare view

Updates @types/passport-jwt from 3.0.13 to 4.0.1

Commits

• See full diff in compare view

Updates @types/pixelmatch from 5.2.6 to 7.1.0

Commits

• See full diff in compare view

Updates dotenv from 17.4.2 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

• Permit DOTENV_PATH being empty string with the CLI (#1076)

18.0.8 (2026-10-14)

Changed

• Fast parser should strip appended extra quotes (#1073)
• Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

• Treat undefined settings like quiet: true as null rather than falsey (#1070)
• CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

• Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

• Fix missing typescript module declaration (#1068)
• Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

• import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

• Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

• Patch additional edge cases for the fast parser (#1056)

... (truncated)

Commits

• 8d1ab85 18.0.9
• 59a40ce changelog
• 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
• bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
• 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
• 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
• e2fe95e 18.0.8
• 7aa712a type detail improvement
• 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
• 0b4843a changelog
• Additional commits viewable in compare view

Updates eslint from 9.39.5 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

• 4637f98 10.13.0

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Visual-Regression-Tracker/backend
• Branch: master
• File: .coderabbit.yaml
• Commit: 14b289a
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 4f612e90-3ec8-4890-ac66-fba75b06bf0c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[pashidlos]

Closing: this group cannot land as one PR. npm ci fails with ERESOLVE because @typescript-eslint 8.72 does not accept TypeScript 7, and the group also bundles majors that each need their own change and review (pixelmatch 5 → 8 can shift comparison results for every project, openid-client 6 is an API rewrite, redis 4 → 6, eslint 10, bcryptjs 3, @google/genai 2). We'll take these majors one at a time.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml