build(deps-dev): bump the lint-toolchain group across 1 directory with 6 updates

[dependabot]

Bumps the lint-toolchain group with 6 updates in the / directory:

Package	From	To
eslint	9.39.2	10.9.1
lint-staged	16.2.7	17.4.1
markdownlint-cli	0.47.0	0.49.1
npm-package-json-lint	9.1.0	11.0.0
prettier	3.9.4	3.9.6
stylelint	17.14.0	17.14.1

Updates eslint from 9.39.2 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

• ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

• 3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

• 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
• 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

• 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
• 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
• 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

• 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
• 87f66f4 docs: Update README (GitHub Actions Bot)
• 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
• f3993b0 docs: Update README (GitHub Actions Bot)
• ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
• 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
• 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
• 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

• 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
• 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
• dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
• f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
• 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

• 5c8c241 10.9.1
• a7f3b7d Build: changelog update for 10.9.1
• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251)
• ad74a8d docs: add deprecation steps for EOL package versions (#21248)
• 3c3ae53 chore: update ecosystem plugins (#21249)
• c27bc92 10.9.0
• fa831d9 Build: changelog update for 10.9.0
• 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243)
• 08de88e feat: handle underflow in no-loss-of-precision (#21218)
• 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216)
• Additional commits viewable in compare view

Updates lint-staged from 16.2.7 to 17.4.1

Release notes

Sourced from lint-staged's releases.

v17.4.1

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

v17.3.0

Minor Changes

• #1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

  {
    "*.ts": ["first", "second", ["third", "third"], "fourth"]
  }

  As a concrete example, lint-staged's own configuration is:

  /** @type {import('./lib/index.js').Configuration} */
  export default {
    "*": [

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.4.1

Patch Changes

• #1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

17.4.0

Minor Changes

• #1836 90ec282 - Added a new defineConfig helper for type-checking the lint-staged configuration:

  // lint-staged.config.ts
  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': ['prettier --check', 'eslint'],
  })

• #1832 510a27c - Added a new flag --all to make lint-staged include all files tracked by Git, instead of only staged.

  By default lint-staged only runs tasks on files that include staged changes (hence the name). Use this flag to include all files tracked in Git version control (standard exclusions apply). Using this flag implies the --no-stash flag, disabling the automatic backup, and the --allow-empty flag so that lint-staged doesn't fail when there are no changes after running. This makes it easier to run npx lint-staged --all on a clean state, for example in CI.

Patch Changes

• #1838 69bec99 - The behavior of the automatic backup stash has been improved when running lint-staged in multiple worktrees in parallel. You should still avoid running multiple instances of lint-staged in parallel in the same tree, because some of the Git operations are locking and might lead to data loss.

• #1839 5e5bdd2 - Parsing of lint-staged CLI flags and Node.js API options has been rewritten to avoid inconsistent behavior between the two.

17.3.0

Minor Changes

• #1825 16b3f74 - It is now possible to run multiple tasks in parallel for a single glob by configuring it with an array of tasks (which run sequentially), and then placing another array inside it (where the tasks will run in parallel). The following demonstrates the order tasks will start in:

  {
    "*.ts": ["first", "second", ["third", "third"], "fourth"]
  }

  As a concrete example, lint-staged's own configuration is:

  /** @type {import('./lib/index.js').Configuration} */
  export default {
    '*': [

... (truncated)

Commits

• d0c1517 Merge pull request #1841 from lint-staged/changeset-release/main
• f061335 chore(changeset): release
• d2721af Merge pull request #1840 from lint-staged/updates
• efe5b63 ci: update Changesets action because it failed to publish
• cd76ce3 build: update dependencies
• ea195e1 Merge pull request #1837 from lint-staged/changeset-release/main
• a6a0d61 chore(changeset): release
• 0a09098 Merge pull request #1832 from lint-staged/add-all-flag
• 7fd685b fix: further fix parsing options logic
• 510a27c feat: add --all flag for including all files tracked by Git instead of just...
• Additional commits viewable in compare view

Updates markdownlint-cli from 0.47.0 to 0.49.1

Release notes

Sourced from markdownlint-cli's releases.

v0.49.1

• Update markdownlint dependency to 0.41.1
  • Improve MD029
  • Fix module resolution under webpack
  • Update dependencies
• Update all dependencies via Dependabot

v0.49.0

• Update markdownlint dependency to 0.41.0
  • Improve MD022/MD028/MD035/MD042/MD051/MD060
  • Remove handling of inline directive syntax (frequent false positives)
  • Remove support for end-of-life Node version 20
• Update all dependencies via Dependabot

v0.48.0

• Update all dependencies via Dependabot

Commits

• 5b5dddc Bump version 0.49.1
• 4e83bdd Bump run-con from 1.3.2 to 1.3.3
• 4f2127b Bump actions/setup-node from 6 to 7
• cc62492 Manually address new violations reported by xo.
• 678b7ee Bump xo from 3.0.2 to 4.0.0
• 06602e9 Bump ignore from 7.0.5 to 7.0.6
• eac32dd Bump markdownlint from 0.41.0 to 0.41.1
• 2864eb0 Bump js-yaml from 5.2.0 to 5.2.1
• 2748661 Bump markdown-it from 14.2.0 to 14.3.0
• 0144ebe Manually address new violations reported by xo.
• Additional commits viewable in compare view

Updates npm-package-json-lint from 9.1.0 to 11.0.0

Release notes

Sourced from npm-package-json-lint's releases.

v11.0.0

What's Changed

💥 Breaking Changes

• Remove the --allowEmptyTargets CLI option and change behavior when no targets are provided by @​tclindner in tclindner/npm-package-json-lint#1929

Full Changelog: tclindner/npm-package-json-lint@v10.5.1...v11.0.0

v10.5.1

What's Changed

🙈 Fixed

• fix: bundle ajv and ajv-errors to avoid cross-version codegen mismatch by @​tclindner in tclindner/npm-package-json-lint#1922

Full Changelog: tclindner/npm-package-json-lint@v10.5.0...v10.5.1

v10.5.0

What's Changed

🧹 Chores

• build(deps): Bump semver from 7.8.4 to 7.8.5 by @​dependabot[bot] in tclindner/npm-package-json-lint#1856
• build(deps): Bump validate-npm-package-name from 6.0.0 to 8.0.0 by @​dependabot[bot] in tclindner/npm-package-json-lint#1812
• build(deps): Bump ajv from 6.14.0 to 8.20.0 by @​dependabot[bot] in tclindner/npm-package-json-lint#1788
• build(deps): Bump fast-uri from 3.1.2 to 3.1.4 by @​dependabot[bot] in tclindner/npm-package-json-lint#1890
• build(deps): Bump cosmiconfig from 8.3.6 to 9.0.2 by @​dependabot[bot] in tclindner/npm-package-json-lint#1841
• build(deps): Bump minimatch from 10.2.5 to 10.2.6 by @​dependabot[bot] in tclindner/npm-package-json-lint#1901
• build(deps): Bump fast-uri from 3.1.4 to 3.1.5 by @​dependabot[bot] in tclindner/npm-package-json-lint#1906
• build(deps): Bump brace-expansion by @​dependabot[bot] in tclindner/npm-package-json-lint#1907
• build(deps): Bump cosmiconfig from 9.0.2 to 10.0.0 by @​dependabot[bot] in tclindner/npm-package-json-lint#1912

Full Changelog: tclindner/npm-package-json-lint@v10.4.1...v10.5.0

v10.4.1

What's Changed

🙈 Fixed

• fix: Path to types by @​regseb in tclindner/npm-package-json-lint#1848

🧹 Chores

• build(deps-dev): Bump globals from 17.5.0 to 17.6.0 by @​dependabot[bot] in tclindner/npm-package-json-lint#1802
• build(deps-dev): Bump eslint from 10.2.1 to 10.3.0 by @​dependabot[bot] in tclindner/npm-package-json-lint#1803
• build(deps-dev): Bump typescript-eslint from 8.59.0 to 8.59.1 by @​dependabot[bot] in tclindner/npm-package-json-lint#1795
• build(deps): Bump minimatch from 10.2.4 to 10.2.5 by @​dependabot[bot] in tclindner/npm-package-json-lint#1793
• build(deps-dev): Bump typescript-eslint from 8.59.1 to 8.59.2 by @​dependabot[bot] in tclindner/npm-package-json-lint#1805
• build(deps): Bump react from 19.2.5 to 19.2.6 in /website by @​dependabot[bot] in tclindner/npm-package-json-lint#1806

... (truncated)

Commits

• 3c65e94 Remove allowEmptyTargets, default targets to . (#1929)
• e4c43f8 build(deps-dev): Bump globals from 17.9.0 to 17.10.0 (#1926)
• 03cab74 Update npm package json linting rules (#1928)
• 0aff148 build(deps-dev): Bump typescript from 5.4.5 to 6.0.3 (#1740)
• 88e6973 build(deps-dev): Bump typescript-eslint in the eslint-dependencies group (#1924)
• 0c54156 fix: bundle ajv and ajv-errors to avoid cross-version codegen mismatch (#1922)
• b36654a build(deps): Bump cosmiconfig from 9.0.2 to 10.0.0 (#1912)
• 328488c build(deps-dev): Bump @​types/node from 26.1.2 to 26.2.0 (#1919)
• 6ca833d build(deps-dev): Bump eslint in the eslint-dependencies group (#1918)
• 0235c98 build(deps): Bump brace-expansion from 1.1.14 to 1.1.18 in /website (#1908)
• Additional commits viewable in compare view

Updates prettier from 3.9.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates stylelint from 17.14.0 to 17.14.1

Release notes

Sourced from stylelint's releases.

17.14.1

It fixes 4 bugs.

• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

Changelog

Sourced from stylelint's changelog.

17.14.1 - 2026-07-20

It fixes 4 bugs.

• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

Commits

• cd66b03 Release 17.14.1 (#9397)
• 7c30fc5 Refactor to replace void with undefined in union types (#9395)
• 57c8d0e Fix rule-empty-line-before false positives for shared-line comments with `e...
• 226f10a Bump @​vscode/windows-process-tree from 0.7.0 to 0.8.0 (#9392)
• 13c3c5c Bump globby from 16.2.0 to 16.2.1 (#9393)
• 6dafcf5 Document unknown-effort contributions (#9391)
• 54c2bc8 Fix test for Yarn PnP with npm v12 (#9390)
• 3e7eb56 Fix declaration-block-no-redundant-longhand-properties invalid background...
• 438196e Bump postcss from 8.5.15 to 8.5.16 in the postcss group across 1 directory (#...
• c1e1489 Fix quiet option to suppress report* warning reports (#9387)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
example	Ready	Preview	Sep 1, 2026 10:25pm UTC

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud