Update dependency upgrades - non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@ts-safeql/eslint-plugin (source)	5.4.0 → 5.4.1
@types/node (source)	26.0.1 → 26.1.0
eslint (source)	10.5.0 → 10.6.0
next (source)	16.2.9 → 16.2.10
node-addon-api	8.8.0 → 8.9.0
prettier (source)	3.8.4 → 3.9.4
sharp (source, changelog)	0.35.2 → 0.35.3

---

Release Notes

ts-safeql/safeql (@​ts-safeql/eslint-plugin)

v5.4.1

Compare Source

Patch Changes

• 09fcf97: Validate the <T> annotation on raw sql fragments embedded in Kysely query-builder chains.

  SafeQL now checks that annotation against the type the database returns and autofixes it on a mismatch. A selection like sql<number>`name || bio`.as("credit_line") whose column is string gets flagged; a .where(sql<number>`bio is not null`) condition gets corrected to boolean. Conditions accept both SqlBool and boolean, and fragments wrapped in parentheses or as are checked like bare ones.

• 21e97b3: Point invalid-query errors at the offending identifier. When Postgres reports an unknown column, table, relation, type, or function, the squiggle now lands on that specific token instead of the whole query — most noticeably for Kysely builder chains, where the error previously underlined the entire embedded sql fragment.

• Updated dependencies [09fcf97]

  • @​ts-safeql/plugin-utils@​5.3.0

eslint/eslint (eslint)

v10.6.0

Compare Source

Features

• b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#​20981) (Taejin Kim)
• f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#​20948) (sethamus)

Bug Fixes

• 6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#​20997) (Milos Djermanovic)
• bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#​21013) (den$)
• 8fd8741 fix: don't report shadowed undefined in radix rule (#​21011) (Pixel)
• 5784980 fix: don't report shadowed undefined in no-throw-literal (#​21010) (Pixel)
• 9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#​21008) (Pixel)
• d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#​21006) (Pixel)
• 2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#​21003) (den$)
• 63d52d2 fix: restore max-classes-per-file report range (#​21002) (Pixel)
• 7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#​20979) (fnx)
• 399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#​20995) (Milos Djermanovic)

Documentation

• a83683d docs: Update README (GitHub Actions Bot)
• f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#​20986) (playgirl)
• bea49f7 docs: Update README (GitHub Actions Bot)
• e5f70f9 docs: update code-path diagrams (#​20984) (Tanuj Kanti)
• 8890c2d docs: add TypeScript config guidance for MCP server (#​20796) (Pierluigi Lenoci)
• 3eb3d9b docs: Update README (GitHub Actions Bot)
• c5bb59c docs: Update README (GitHub Actions Bot)
• eb3c97c docs: fix grammar in prefer-const rule description (#​20983) (lumir)

Chores

• 6a42034 ci: run ecosystem tests on main branch (#​20891) (sethamus)
• 3dbacdb ci: bump actions/checkout from 6 to 7 (#​21014) (dependabot[bot])
• c3abfca chore: correct JSDoc param types in html formatter (#​21018) (Minseon Kim)
• a832320 ci: split ecosystem tests into separate jobs (#​21001) (xbinaryx)
• 27166e7 chore: update ecosystem plugins (#​21005) (ESLint Bot)
• 865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#​20989) (dependabot[bot])
• 27a88c9 chore: update dependency markdown-it to v14 in root (#​20994) (Milos Djermanovic)
• 970cea6 chore: update dependency markdown-it to v14 (#​20993) (Milos Djermanovic)
• b482120 chore: update dependency prettier to v3.8.4 (#​20990) (renovate[bot])
• 6993fb3 chore: update ecosystem plugins (#​20985) (ESLint Bot)

vercel/next.js (next)

v16.2.10

Compare Source

nodejs/node-addon-api (node-addon-api)

v8.9.0

Compare Source

Features

• add support for SharedArrayBuffer in TypedArray and TypedArrayOf<T> (#​1731) (00b95ef)

prettier/prettier (prettier)

v3.9.4

Compare Source

v3.9.3

Compare Source

v3.9.2

Compare Source

v3.9.1

Compare Source

v3.9.0

Compare Source

diff

🔗 Release Notes

v3.8.5

Compare Source

lovell/sharp (sharp)

v0.35.3

Compare Source

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

• Improve code bundler support by resolving path to libvips binary.

• Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

• Emit warning about binaries provided by Electron for use on Linux.

• Add hasAlpha property to output info.
  #​4500

• TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer.
  #​4520
  @​Andarist

• Bound clahe width and height to avoid signed overflow.
  #​4551
  @​metsw24-max

• Bound trim margin to avoid signed overflow.
  #​4552
  @​metsw24-max

• Reject infinite values when validating numbers.
  #​4553
  @​metsw24-max

• Bound extract region to libvips coordinate limit.
  #​4555
  @​metsw24-max

• Verify background colour values are numbers.
  #​4556
  @​metsw24-max

• Bound create and raw input dimensions to coordinate limit.
  #​4558
  @​metsw24-max

• Tighten recomb and affine matrix verification.
  #​4560
  @​chatman-media

• Verify cache memory limit to avoid overflow.
  #​4561
  @​metsw24-max

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 4pm on thursday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@​16.2.10
	@​ts-safeql/​eslint-plugin@​5.4.1
	@​types/​node@​26.1.0
	sharp@​0.35.3
	eslint@​10.6.0
	prettier@​3.9.4

View full report

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}