chore(deps)(deps-dev): bump the development-dependencies group with 9 updates

[dependabot]

Bumps the development-dependencies group with 9 updates:

Package	From	To
@typescript-eslint/eslint-plugin	8.71.0	8.71.1
@typescript-eslint/parser	8.71.0	8.71.1
@radix-ui/react-slot	1.3.3	1.4.0
@vitejs/plugin-react	6.1.1	6.1.2
i18next-cli	1.74.4	1.74.8
jsdom	30.1.1	30.1.2
postcss	8.5.28	8.5.29
typescript-eslint	8.71.0	8.71.1
vite	8.3.2	8.3.3

Updates @typescript-eslint/eslint-plugin from 8.71.0 to 8.71.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• d57b8da chore(release): publish 8.71.1
• e8593b2 fix(eslint-plugin): [no-unnecessary-type-parameters] count instantiated mappe...
• 2211d3f fix(eslint-plugin): [prefer-optional-chain] check the constrained type (#12953)
• ba9c0f1 fix(eslint-plugin): [no-confusing-void-expression] don't autofix when declare...
• 466d739 fix(eslint-plugin): [no-unsafe-enum-assignment] skip identical types and boun...
• e8c170f fix(eslint-plugin): [require-array-sort-compare] use array argument type cons...
• effa652 fix(eslint-plugin): [no-unused-vars] report usedOnlyAsType for partially expo...
• 9fbab43 fix(eslint-plugin): [no-misused-promises] skip argument checks for calls with...
• 3ab28b1 chore(eslint-plugin): re-enable plugin-test-formatting in all tests (#12950)
• See full diff in compare view

Updates @typescript-eslint/parser from 8.71.0 to 8.71.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.71.1 (2026-10-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• d57b8da chore(release): publish 8.71.1
• See full diff in compare view

Updates @radix-ui/react-slot from 1.3.3 to 1.4.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.4.0

• Added support for multiple aria-describedby attributes.
• Fixed compatibility issues with React Server Components.

Commits

• See full diff in compare view

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

• ac47648 release: plugin-react@6.1.2 (#1491)
• 98277e7 fix(deps): update all non-major dependencies (#1486)
• 12eddea fix(hmr): better handle compound components (#1484)
• 3cfb1d1 fix(plugin-react): fix compiler.logDiagnostics (#1483)
• 6de9915 fix(plugin-react): disable refresh for non-jsx with compiler enabled (#1485)
• ee97d2f fix(deps): update all non-major dependencies (#1445)
• b0a014d chore: use Babel 8 for babel compiler playgrounds (#1460)
• 61b650f fix(deps): update react-related dependencies (#1452)
• 736efe2 chore(deps): update tsdown to v0.23 (#1451)
• See full diff in compare view

Updates i18next-cli from 1.74.4 to 1.74.8

Changelog

Sourced from i18next-cli's changelog.

1.74.8

• fix(extract): a commented template literal no longer extracts its placeholder as a key. // t(`QUARTER.${q}`) extracted QUARTER.${q} and // t(`status.${deepObject.status}`) extracted status.${deepObject.status}. Such a comment now keeps the existing keys it matches (QUARTER.1, QUARTER.2, …) even with removeUnusedKeys, the way a commented static key keeps its key, while code can still add new matching keys. A pattern without any static part (`${a}.${b}`) is ignored. Fixes #304.

1.74.7

• fix(extract): a selector i18nKey on <Trans t={t}> now routes into the hook's namespaces the same way t() does, matching react-i18next 17.0.16. With const { t } = useTranslation(['ns1', 'ns2']), <Trans t={t} i18nKey={$ => $.ns2.message} /> was filed as ns1:ns2.message; it is now filed as ns2:message, like t($ => $.ns2.message). Under types.enableSelector: 'strict' a leading primary namespace is stripped too (useTranslation('only') with $ => $.only.key files only:key). Reported in react-i18next#1933.
• fix(extract): the props of a component typed React.FC<Props> (also FC, FunctionComponent), forwardRef<Ref, Props>(…) or memo<Props>(…) are typed by Props, and iterating a typed member binds the element. props.colors.map((color) => t(\Color.${color}`))withcolors: Color[]extracted nothing before unlesscolorwas asserted withas Color. Arrays of objects work the same way: props.items.map(({ kind }) => …), for (const item of props.items)and a destructured({ items }) => items.map(…)`. Fixes #303.

1.74.6

• fix(extract): iterating an inline array literal binds the element like iterating a named constant does. ([1, 2, 3, 4] as const).map((q) => t(\QUARTER.${q}`)), for (const unit of ['day', 'hour'] as const)` and inline arrays of objects extracted nothing before. Fixes #301.
• fix(extract): members of nested object types resolve. t(\barStatus.${deepObject.Bar.status}`)andt(`fooBarStatus.${deepObject.Foo.Bar.status}`) now extract the nested union's values, also through references to other types, optional chaining (pet.category?.kind), destructuring (const { kind } = pet.category) and indexed access types (DeepObject['Bar']['status'], components['schemas']['Pet']), so types generated by openapi-typescript work. Nested members are followed up to five levels below the declared type, as in components.schemas.Pet.category.kind`. Fixes #302.

1.74.5

• fix(extract): a value typed as an array of a string union (Color[], readonly Color[], Array<Color> or an alias of one) now resolves to the union's values, so colors.map((color) => t(\color.${color}`))andfor (const color of colors)extract every key instead of nothing. Before, this only worked withcolor as Color`. Fixes #300.

Commits

• 747d5e9 1.74.8
• a824669 fix(extract): keep the keys a commented template literal matches instead of e...
• 32291d2 1.74.7
• 8b3717d fix(extract): type component props from React.FC, forwardRef and memo #303
• 4c6314a fix(extract): route a Trans selector key into the t prop's namespaces like t()
• 7f7e635 1.74.6
• a56b05f fix(extract): resolve inline array literals and nested object types #301 #302
• 954db34 1.74.5
• 60c2773 fix(extract): resolve arrays of a string union to the union's values #300
• See full diff in compare view

Updates jsdom from 30.1.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

• Updated URLs to support Unicode v18.0.0 in internationalized domain names.
• Reduced package size and memory use for CSS property definitions. (@​scttcper)
• Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
• Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
• Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
• Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
• Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)
• Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
• Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
• Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)
• Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
• Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
• Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)

Commits

• a23bfb7 30.1.2
• 64a75d2 Update dependencies and dev dependencies
• 7bf9653 Invalidate styles after CSSOM and control state changes
• fe9009c Update focused area handling
• a8d28b3 Release windows retained by stylesheet parsing
• 05a2c01 Deduplicate generated CSS property metadata
• 1efa190 Reduce generated CSS property data
• a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
• b2cd235 Update css-color
• 0542d2b Release idle MutationObserver bookkeeping
• Additional commits viewable in compare view

Updates postcss from 8.5.28 to 8.5.29

Release notes

Sourced from postcss's releases.

8.5.29

• Improved </style> escaping (by @​choudhryfrompak).
• Fixed comments support in list.comma() and list.space() (by @​00200200).
• Fixed semicolon and custom property (by @​wahidrizka).

Changelog

Sourced from postcss's changelog.

8.5.29

• Improved </style> escaping (by @​choudhryfrompak).
• Fixed comments support in list.comma() and list.space() (by @​00200200).
• Fixed semicolon and custom property (by @​wahidrizka).

Commits

• a7a1f34 Release 8.5.29 version
• b55a36d Update dependencies
• 7647a81 Escape </style> in output of non-Root nodes (#2163)
• 7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
• ebffa97 Add postcss-smooth-corners plugin
• 57d6401 Speed up source map cleaning
• 7e46a03 Speed up parser
• 7f5c417 Improve </style> protection for the case when beffore nodes have different parts
• 7ba9051 Fix useless ESLint warning
• 12b4161 Update dependencies
• Additional commits viewable in compare view

Updates typescript-eslint from 8.71.0 to 8.71.1

Release notes

Sourced from typescript-eslint's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• d57b8da chore(release): publish 8.71.1
• See full diff in compare view

Updates vite from 8.3.2 to 8.3.3

Release notes

Sourced from vite's releases.

v8.3.3

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

Changelog

Sourced from vite's changelog.

8.3.3 (2026-10-06)

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

Commits

• fea5b21 release: v8.3.3 (#23657)
• c3e06f9 fix(server): store ids to safeModulePaths rather than URLs (#23656)
• ba8b7ab fix(server): check fs.serve for ?vite-wasm-instance (#23655)
• 22fd1d5 fix(deps): update launch-editor to v2.14.2 (#23654)
• 7dafd8e fix(html): filename passed to transformIndexHtml should not include queries (...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: backend, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔒 Supply Chain Security Review

Check	Status
Socket.dev malware scan	✅ success
Vulnerability audit	✅ success
Lockfile diff review	✅ success
OSSF Scorecard	✅ success

This review was automatically generated by the Supply Chain Review workflow.