chore(deps-dev): bump the development-dependencies group across 1 directory with 28 updates

[dependabot]

Bumps the development-dependencies group with 28 updates in the / directory:

Package	From	To
@antfu/eslint-config	5.4.1	9.2.0
@eslint/js	9.36.0	10.0.1
@next/eslint-plugin-next	15.5.4	16.2.12
@sinonjs/fake-timers	14.0.0	15.4.0
@types/sinonjs__fake-timers	8.1.5	15.0.1
@stylistic/eslint-plugin	5.4.0	5.10.0
@testing-library/react	16.3.0	16.3.2
@typescript-eslint/parser	8.45.0	8.65.0
@vitejs/plugin-react	5.0.4	6.0.4
eslint	9.36.0	10.8.0
eslint-config-next	15.5.4	16.2.12
eslint-import-resolver-typescript	4.4.4	4.4.5
eslint-plugin-react-hooks	5.2.0	7.1.1
globals	16.4.0	17.8.0
jiti	2.6.1	2.7.0
jsdom	26.1.0	30.0.0
shadcn	2.9.3-canary.0	4.16.0
tsx	4.20.6	4.23.1
typescript	5.9.3	7.0.2
typescript-eslint	8.45.0	8.65.0
vitest	3.2.4	4.1.10
zod	4.1.11	4.4.3
@eslint/eslintrc	3.3.1	3.3.6
@tailwindcss/postcss	4.1.14	4.3.3
@types/mdx	2.0.13	2.0.14
@types/node	24.6.2	26.1.2
postcss	8.5.6	8.5.23
tailwindcss	4.1.14	4.3.3

Updates @antfu/eslint-config from 5.4.1 to 9.2.0

Release notes

Sourced from @​antfu/eslint-config's releases.

v9.2.0

   🚀 Features

• Update plugins  -  by @​antfu (9ff1e)

   🐞 Bug Fixes

• Add scripts-info in package.json sorting  -  by @​antfu (09680)
• deps: Accept eslint-plugin-astro v2 to resolve unmet peer warning  -  by @​ycs77 in antfu/eslint-config#855 (5ada5)

    View changes on GitHub

v9.1.0

   🚀 Features

• Update deps  -  by @​antfu (ff246)

   🐞 Bug Fixes

• Update deps and scope unicorn rules  -  by @​antfu (82078)

    View changes on GitHub

v9.0.0

   🚨 Breaking Changes

• react: Update eslint react to 5.0  -  by @​hyoban in antfu/eslint-config#839 (06a1a)

    View changes on GitHub

v8.3.0

   🚀 Features

• Make perfectionist configurable inside antfu()  -  by @​oliver139 in antfu/eslint-config#848 (ae1d6)
• stylistic: Allow easy setting brace style  -  by @​oliver139 in antfu/eslint-config#846 (bd784)
• svelte: Use recommended rules  -  by @​Jungzl in antfu/eslint-config#842 (6c839)

   🐞 Bug Fixes

• markdown: Scope user rule overrides away from md files  -  by @​antfu and Claude Opus 4.7 (1M context) in antfu/eslint-config#844 (8d25a)

    View changes on GitHub

v8.2.0

   🐞 Bug Fixes

• Disbale e18e/prefer-static-regex in non-lib mode  -  by @​antfu (52069)

    View changes on GitHub

... (truncated)

Commits

• 386531f chore: release v9.2.0
• 09680e4 fix: add scripts-info in package.json sorting
• 9ff1e11 feat: update plugins
• 8517e57 docs: add format_on_save to suggested Zed settings (#857)
• 5ada54f fix(deps): accept eslint-plugin-astro v2 to resolve unmet peer warning (#855)
• c3c9aa0 chore: release v9.1.0
• 8207876 fix: update deps and scope unicorn rules
• dea1548 docs: add type aware rules overrides example code (#849)
• ff246dc feat: update deps
• 8de8c70 chore: release v9.0.0
• Additional commits viewable in compare view

Updates @eslint/js from 9.36.0 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

• e5c281f chore: updates for v9.39.3 release (Jenkins)
• 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
• 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
• 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
• da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
• 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

• f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
• a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
• c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
• fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
• 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
• 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
• ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
• 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
• c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
• 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
• a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
• a89059d feat!: Program range span entire source text (#20133) (Pixel998)
• 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
• f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
• aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
• f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
• 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
• 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
• 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
• 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
• f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

• bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
• 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
• 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

• 84fb885 chore: package.json update for @​eslint/js release
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
• f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
• b4b3127 chore: package.json update for @​eslint/js release
• 0b14059 chore: package.json update for @​eslint/js release
• fa31a60 feat!: add name to configs (#20015)
• 1e2cad5 chore: package.json update for @​eslint/js release
• 454a292 feat!: update eslint:recommended configuration (#20210)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
• c7ebefc chore: package.json update for @​eslint/js release
• Additional commits viewable in compare view

Updates @next/eslint-plugin-next from 15.5.4 to 16.2.12

Release notes

Sourced from @​next/eslint-plugin-next's releases.

v16.2.12

What's Changed

• Backport/docs fixes 16.2 - July round by @​icyJoseph in vercel/next.js#96031
• [Backport] Fixes to support TypeScript 7 by @​lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

• Denial of Service in App Router using Server Actions
• Middleware / Proxy bypass in App Router applications using Turbopack and single locale
• Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
• Server-Side Request Forgery in Server Actions on custom servers

Moderate:

• Cache confusion of response bodies for requests with bodies
• Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
• Denial of Service in the Image Optimization API using SVGs
• Unauthenticated disclosure of internal Server Function endpoints
• Unbounded Server Action payload in Edge runtime

v16.2.10

Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 16.2.4.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Backport documentation fixes for v16.2 (#93804)
• [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
• [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
• [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
• [backport] Encode non-ASCII characters in cache tags at construction (#93918)
• [backport] Fix server action forwarding loop with middleware rewrites (#93919)
• [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
• [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

... (truncated)

Commits

• 2234717 v16.2.12
• 9beca08 v16.2.11
• 9dadfd6 v16.2.10
• 534d9c1 [16.2.x] Release pipeline updates (#95160)
• 6e1a94d [16.2.x][ci]: fix release script to not strip newlines (#94640)
• f37fad9 v16.2.9
• 6f16804 v16.2.8
• 411c455 v16.2.7
• ee6e79b v16.2.6
• 766148f v16.2.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​next/eslint-plugin-next since your current version.

Updates @sinonjs/fake-timers from 14.0.0 to 15.4.0

Changelog

Sourced from @​sinonjs/fake-timers's changelog.

15.4.0 / 2026-05-05

• fix: stop nextAsync advanceUntilModeChanges from leaking past uninstall (#571)
• ci: add types job to workflow (#573)
• upgrade most packages (#572)
• feat: add support for Temporal API (#569)
• Fix no-DOM Performance type (#570)
• chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 (#563)
• chore(deps-dev): bump fast-xml-parser from 5.5.7 to 5.7.1 (#568)

15.3.2 / 2026-04-11

This actually changes some typings, so worth pushing

• upgrade eslint-config (#565)

15.3.1 / 2026-04-10

• fix: type generation and ensure types are always built
• chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 (#560)
• Add missing regression test for #561
• fix: restore cross-realm Date support in setSystemTime (#561)
• fix: correct generated typescript types (#559)
• fix: include missing type

15.3.0 / 2026-04-02

• Fix interval loop-limit stack traces and clock-local isolation (#555)

15.2.2 / 2026-04-01

• fix(#489): ignore Node 'timers' modules for browser bundlers

15.2.1 / 2026-04-01

• fix(#550): restore timer heap initialization after clearTimeout
• document why two data structures (map and heap) are needed

15.2.0 / 2026-03-31

The 2000x perf increase release.

• fix(#522): setInterval(0,fn) starved setTimeout(0,fn)
• fix: reject non-function callbacks

... (truncated)

Commits

• cef58f8 15.4.0
• b595132 Updated release files for 15.4.0
• 86a5a20 fix: stop nextAsync advanceUntilModeChanges from leaking past uninstall ...
• 0f2ec2e ci: add types job to workflow (#573)
• 3efb181 upgrade most packages (#572)
• f7e97a9 feat: add support for Temporal API (#569)
• 8274b02 Fix no-DOM Performance type (#570)
• 7615294 chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 (#563)
• 7f0ac68 chore(deps-dev): bump fast-xml-parser from 5.5.7 to 5.7.1 (#568)
• c4d8e46 15.3.2
• Additional commits viewable in compare view

Updates @types/sinonjs__fake-timers from 8.1.5 to 15.0.1

Commits

• See full diff in compare view

Updates @stylistic/eslint-plugin from 5.4.0 to 5.10.0

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.10.0

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

v5.9.0

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

v5.8.0

5.8.0 (2026-02-09)

... (truncated)

Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

5.8.0 (2026-02-09)

Features

... (truncated)

Commits

• efbb1bc chore: release v5.10.0 (main) (#1151)
• 1ebd6d8 feat(padding-line-between-statements): introduce lineMode for selector matc...
• c43bd4b feat(list-style): allow 'off' in overrides (#1144)
• 95884fc chore: replace prettier with oxfmt (#1147)
• 96ce1c7 chore: release v5.9.0 (main) (#1131)
• 5d99706 feat: support ESLint 10 (#1066)
• cfb6296 fix(no-extra-parens): don't report jsdoc type assertion by default (#1100)
• 501e838 feat(no-trailing-spaces): support more file types (#1138)
• 8f5cc9e feat(padding-line-between-statements): support selector-based statement match...
• 9e7f422 fix(indent): ignore when source code is not ESTree (#1139)
• Additional commits viewable in compare view

Updates @testing-library/react from 16.3.0 to 16.3.2

Release notes

Sourced from @​testing-library/react's releases.

v16.3.2

16.3.2 (2026-01-19)

Bug Fixes

• Update 'onCaughtError' type inference in 'RenderOptions' to work with React v19 (#1438) (f32bd1b)

v16.3.1

16.3.1 (2025-12-15)

Bug Fixes

• Switch to trusted publishing (#1437) (a2d37ff)

Commits

• f32bd1b fix: Update 'onCaughtError' type inference in 'RenderOptions' to work with Re...
• a2d37ff fix: Switch to trusted publishing (#1437)
• cd6a175 chore: fix action permissions (#1436)
• 22b8c28 chore: fix release (#1435)
• d996673 chore: new release workflow (#1434)
• 205ce17 chore: fix typo in jest.config.js (#1427)
• aba5740 [test] Fix tests for react@experimental (#1424)
• 590bc18 [test] Fix npm run typecheck (#1423)
• 1c931a6 chore(deps): use npm-run-all2 (#1411)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/react since your current version.

Updates @types/sinonjs__fake-timers from 8.1.5 to 15.0.1

Commits

• See full diff in compare view

Updates @typescript-eslint/parser from 8.45.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

• support parsing import defer (#12513)
• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

• remove redundant package.json "files" (#12444)

❤️ Thank You

... (truncated)

Commits

• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
• 0d06406 chore: add attw validation to repo (#12437)
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• 414d9ab chore(release): publish 8.64.0
• 290cf6c chore(release): publish 8.63.0
• 3ea32f4 chore(release): publish 8.62.1
• 54e2857 chore(release): publish 8.62.0