Bump the deps group across 1 directory with 12 updates

[dependabot]

Bumps the deps group with 12 updates in the / directory:

Package	From	To
@actions/core	1.11.1	2.0.2
@actions/github	6.0.1	7.0.0
@octokit/webhooks	14.1.3	14.2.0
@types/node	24.10.0	25.0.8
glob	11.0.3	13.0.0
@typescript-eslint/eslint-plugin	8.46.3	8.53.0
@typescript-eslint/parser	8.46.3	8.53.0
eslint	9.39.1	9.39.2
eslint-plugin-jest	29.0.1	29.12.1
eslint-plugin-prettier	5.5.4	5.5.5
prettier	3.6.2	3.8.0
ts-jest	29.4.5	29.4.6

Updates @actions/core from 1.11.1 to 2.0.2

Changelog

Sourced from @​actions/core's changelog.

@​actions/core Releases

2.0.1

• Bump @​actions/exec from 1.1.1 to 2.0.0 #2199

2.0.0

• Add support for Node 24 #2110
• Bump @​actions/http-client from 2.0.1 to 3.0.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/core since your current version.

Updates @actions/github from 6.0.1 to 7.0.0

Changelog

Sourced from @​actions/github's changelog.

7.0.0

• Update to v3.0.1 of @actions/http-client

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/github since your current version.

Updates @octokit/webhooks from 14.1.3 to 14.2.0

Release notes

Sourced from @​octokit/webhooks's releases.

v14.2.0

14.2.0 (2025-12-03)

Features

• new secret_scanning_alert.assigned, secret_scanning_alert.unassigned, issue_dependencies events (#1189) (b47e4b0)

Commits

• b47e4b0 feat: new secret_scanning_alert.assigned, `secret_scanning_alert.unassigned...
• 5ca3206 ci(action): update github/codeql-action action to v4 (#1178)
• 07b617c ci(action): update actions/setup-node action to v6 (#1179)
• 3e7c815 build(deps): lock file maintenance (#1177)
• be82b3d ci(action): update peter-evans/create-or-update-comment action to v5 (#1175)
• 73ec1fc chore(deps): update vitest monorepo to v4 (major) (#1181)
• 4b4ad0f build(deps): lock file maintenance (#1174)
• 2a24466 ci(action): update actions/checkout action to v5 (#1170)
• aea297e ci(action): update actions/setup-node action to v5 (#1172)
• 302105e build(deps): lock file maintenance (#1168)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​octokit/webhooks since your current version.

Updates @types/node from 24.10.0 to 25.0.8

Commits

• See full diff in compare view

Updates glob from 11.0.3 to 13.0.0

Changelog

Sourced from glob's changelog.

changeglob

13

• Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

• Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
• Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
• Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on

... (truncated)

Commits

• 3bfb960 13.0.0
• db31a63 Split the CLI out from the main project
• 5493458 ci: remove node 20
• 3f7526c test: fix bin tests on windows (slashes)
• 2b03cca 12.0.0
• d56203d prettier config
• bb521e5 Remove --shell option where unsafe to use
• 2551fb5 11.1.0
• 47473c0 bin: Do not expose filenames to shell expansion
• bc33fe1 skip tilde test on systems that lack tilde expansion
• Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.46.3 to 8.53.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

• eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)
• eslint-plugin: add rule [strict-void-return] (#9707)
• project-service: allow passing Partial<ts.server.ServerHost> to project service (#11932)

🩹 Fixes

• eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
• eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
• typescript-estree: forbid type-only import with both default and named specifiers (#11930)
• typescript-estree: fix syntax check for using declaration (#11910)
• typescript-estree: forbid invalid class implements (#11934)
• typescript-estree: forbid invalid "import equals" declaration (#11936)
• typescript-estree: forbid invalid extends and implements in interface declaration (#11935)

❤️ Thank You

• auvred @​auvred
• Brad Zacher @​bradzacher
• fisker Cheung @​fisker
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger
• Niki @​phaux
• Nikita
• SungHyun627 @​SungHyun627
• Will Harney @​wjhsf

You can read about our versioning strategy and releases on our website.

v8.52.0

8.52.0 (2026-01-05)

🚀 Features

• eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)
• typescript-estree: add tseslint.com redirects for CLI outputs (#11895)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)
• eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)

❤️ Thank You

• Josh Goldberg ✨

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.53.0 (2026-01-12)

🚀 Features

• eslint-plugin: add rule [strict-void-return] (#9707)
• eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
• eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
• typescript-estree: forbid invalid extends and implements in interface declaration (#11935)
• typescript-estree: forbid invalid class implements (#11934)
• typescript-estree: forbid type-only import with both default and named specifiers (#11930)

❤️ Thank You

• Brad Zacher @​bradzacher
• fisker Cheung @​fisker
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger
• Niki @​phaux
• Nikita
• SungHyun627 @​SungHyun627
• Will Harney @​wjhsf

You can read about our versioning strategy and releases on our website.

8.52.0 (2026-01-05)

🚀 Features

• eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)

🩹 Fixes

• eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)
• eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)

❤️ Thank You

• Josh Goldberg ✨
• Ulrich Stark

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

🚀 Features

... (truncated)

Commits

• 3021ede chore(release): publish 8.53.0
• 722ab62 fix(eslint-plugin): [no-useless-default-assignment] fix false positive for pa...
• 92fcf3e feat(eslint-plugin): add rule [strict-void-return] (#9707)
• 3fb0381 docs(eslint-plugin): [no-useless-default-assignment] fix misformatted link (#...
• 62ee26e feat(eslint-plugin): [no-unused-vars] add a fixer to remove unused imports (#...
• c4d5a56 fix(eslint-plugin): replace unclear "error typed" with more helpful descrip...
• 3ac7735 fix(typescript-estree): forbid invalid extends and implements in interfac...
• a8b924b fix(typescript-estree): forbid invalid class implements (#11934)
• a98ec1f fix(typescript-estree): forbid type-only import with both default and named s...
• 9ddd571 chore(release): publish 8.52.0
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.46.3 to 8.53.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

• eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)
• eslint-plugin: add rule [strict-void-return] (#9707)
• project-service: allow passing Partial<ts.server.ServerHost> to project service (#11932)

🩹 Fixes

• eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
• eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
• typescript-estree: forbid type-only import with both default and named specifiers (#11930)
• typescript-estree: fix syntax check for using declaration (#11910)
• typescript-estree: forbid invalid class implements (#11934)
• typescript-estree: forbid invalid "import equals" declaration (#11936)
• typescript-estree: forbid invalid extends and implements in interface declaration (#11935)

❤️ Thank You

• auvred @​auvred
• Brad Zacher @​bradzacher
• fisker Cheung @​fisker
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger
• Niki @​phaux
• Nikita
• SungHyun627 @​SungHyun627
• Will Harney @​wjhsf

You can read about our versioning strategy and releases on our website.

v8.52.0

8.52.0 (2026-01-05)

🚀 Features

• eslint-plugin-internal: [no-multiple-lines-of-errors] add rule (#11899)
• typescript-estree: add tseslint.com redirects for CLI outputs (#11895)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] handle conditional initializer (#11908)
• eslint-plugin: [no-base-to-string] detect @@​toPrimitive and valueOf (#11901)

❤️ Thank You

• Josh Goldberg ✨

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.53.0 (2026-01-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.52.0 (2026-01-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.0 (2025-12-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.49.0 (2025-12-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.47.0 (2025-11-17)

... (truncated)

Commits

• 3021ede chore(release): publish 8.53.0
• 9ddd571 chore(release): publish 8.52.0
• 95c7c73 chore: update deps to latest minor/patch (#11921)
• e4c57f5 chore(release): publish 8.51.0
• d520b88 chore(release): publish 8.50.1
• c62e858 chore(release): publish 8.50.0
• 864595a chore(release): publish 8.49.0
• 32b7e89 chore(deps): update dependency @​vitest/eslint-plugin to v1.5.1 (#11816)
• 8fe3445 chore(release): publish 8.48.1
• 6fb1551 chore(release): publish 8.48.0
• Additional commits viewable in compare view

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• 9278324 9.39.2
• 542266a Build: changelog update for 9.39.2
• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394)
• c43ce24 chore: package.json update for @​eslint/js release
• 5705833 fix: warn when eslint-env configuration comments are found (#20381)
• 506f154 build: add .scss files entry to knip (#20391)
• 4c9858e ci: add v9.x-dev branch (#20382)
• See full diff in compare view

Updates eslint-plugin-jest from 29.0.1 to 29.12.1

Release notes

Sourced from eslint-plugin-jest's releases.

v29.12.1

29.12.1 (2026-01-02)

Bug Fixes

• no-unnecessary-assertion: don't report for any and unknown types (#1918) (388a36c)

v29.12.0

29.12.0 (2025-12-30)

Features

• prefer-mock-return-shorthand: greatly improve checking if mutable variables are used (#1914) (13bbd20)

v29.11.4

29.11.4 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore use of update expressions (#1913) (5713ac9)

v29.11.3

29.11.3 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore async implementations (#1912) (80288e2)

v29.11.2

29.11.2 (2025-12-29)

Bug Fixes

• prefer-mock-return-shorthand: don't report mutable implementations (#1908) (b164700)

v29.11.1

29.11.1 (2025-12-29)

Bug Fixes

• unbound-method: ignore inline use of jest.mocked(...) (#1862) (3a50b97)

v29.11.0

29.11.0 (2025-12-23)

... (truncated)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.12.1 (2026-01-02)

Bug Fixes

• no-unnecessary-assertion: don't report for any and unknown types (#1918) (388a36c)

29.12.0 (2025-12-30)

Features

• prefer-mock-return-shorthand: greatly improve checking if mutable variables are used (#1914) (13bbd20)

29.11.4 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore use of update expressions (#1913) (5713ac9)

29.11.3 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore async implementations (#1912) (80288e2)

29.11.2 (2025-12-29)

Bug Fixes

• prefer-mock-return-shorthand: don't report mutable implementations (#1908) (b164700)

29.11.1 (2025-12-29)

Bug Fixes

• unbound-method: ignore inline use of jest.mocked(...) (#1862) (3a50b97)

29.11.0 (2025-12-23)

Features

• create new prefer-mock-return-shorthand rule (#1897) (0eb94b6)

29.10.1 (2025-12-22)

... (truncated)

Commits

• 45edad2 chore(release): 29.12.1 [skip ci]
• 388a36c fix(no-unnecessary-assertion): don't report for any and unknown types (#1...
• badfe77 docs: put rule descriptions after title (#1916)
• ce44f84 chore: update eslint-remote-tester (#1915)
• cc3cd98 chore(release): 29.12.0 [skip ci]
• 13bbd20 feat(prefer-mock-return-shorthand): greatly improve checking if mutable varia...
• eaa5549 chore(release): 29.11.4 [skip ci]
• 5713ac9 fix(prefer-mock-return-shorthand): ignore use of update expressions (#1913)
• e9f1a58 chore(release): 29.11.3 [skip ci]
• 80288e2 fix(prefer-mock-return-shorthand): ignore async implementations (#1912)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-plugin-jest since your current version.

Updates eslint-plugin-prettier from 5.5.4 to 5.5.5

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.5

Patch Changes

• #772 7264ed0 Thanks @​BPScott! - Bump prettier-linter-helpers dependency to v1.0.1

• #776 77651a3 Thanks @​aswils! - fix: bump synckit for yarn PnP ESM issue

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.5

Patch Changes

• #772 7264ed0 Thanks @​BPScott! - Bump prettier-linter-helpers dependency to v1.0.1

• #776 77651a3 Thanks @​aswils! - fix: bump synckit for yarn PnP ESM issue

Commits

• e2c154a chore: release eslint-plugin-prettier (#773)
• 6795c1a build(deps): Bump the actions group across 1 directory with 2 updates (#774)
• 77651a3 fix: bump synckit for yarn PnP ESM issue (#776)
• 7264ed0 chore: bump prettier-linter-helpers to v1.0.1 (#772)
• e11a5b7 build(deps): Bump the actions group across 1 directory with 3 updates (#769)
• befda88 ci: enable trusted publishing (#757)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-plugin-prettier since your current version.

Updates prettier from 3.6.2 to 3.8.0

Release notes

Sourced from prettier's releases.

3.8.0

• Support Angular v21.1

diff

🔗 Release note

3.7.4

What's Changed

• Fix comment in union type gets duplicated by @​fisker in prettier/prettier#18393
• Fix unstable comment print in union type by @​fisker in prettier/prettier#18395
• Avoid quote around LWC interpolations by @​kovsu in prettier/prettier#18383

🔗 Changelog

3.7.3

What's Changed

• Fix prettier.getFileInfo() change that breaks VSCode extension by @​fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

• Fix string print when switching quotes by @​fisker in prettier/prettier#18351
• Preserve quote for embedded HTML attribute values by @​kovsu in prettier/prettier#18352
• Fix comment in empty type literal by @​fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

• Fix performance regression in doc printer (#18342 by @​fisker)

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.8.0

diff

🔗 Release Notes

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
</tr></table>

... (truncated)

Commits

• 812a4d0 Release 3.8.0
• 6cc1be3 Consistent title
• 6d9bef0 Apply automated changes
• 3744a18 Update code example
• 9a3edde Update
• 82dc52c Regenerate
• dc2de1a Regenerate
• 5aa6966 Regenerate
• daeeb51 Another version
• a282985 Add blog post
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.

Updates ts-jest from 29.4.5 to 29.4.6

Release notes

Sourced from ts-jest's releases.

v29.4.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.6 (2025-12-01)

Bug Fixes

• log hybrid module as warning instead of failing tests (#5144) (528d37c), closes #5130

Commits

• 202bde5 chore(release): 29.4.6 (#5146)
• 528d37c fix: log hybrid module as warning instead of failing tests (#5144)
• 141e5af build(deps): update github/codeql-action digest to 497990d
• d281cce build(deps): update google/osv-scanner-action action to v2.3.0
• 0d20322 build(deps): update dependency memfs to ^4.51.0
• 455dde2 build(deps): update dependency js-yaml to ^4.1.1
• d579480 build(deps): update dependency @​types/node to v20.19.25
• f6859d0 build(deps): update dependency @​types/yargs to ^17.0.35
• 4d7e432 build(deps): update github/codeql-action digest to d3ced5c
• 4ea70c9 build(deps): update actions/checkout digest to 34e1148
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[MattyTheHacker]

@dependabot rebase

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.