chore(deps): update all non-major dependencies

[open-turo-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@open-turo/eslint-config-typescript	23.0.10 → 23.1.13			devDependencies	minor	23.1.14
@vercel/ncc	0.38.4 → 0.44.1			devDependencies	minor
@vitest/coverage-v8 (source)	4.1.7 → 4.1.10			devDependencies	patch
eslint (source)	9.39.4 → 9.39.5			devDependencies	patch
globals	17.6.0 → 17.8.0			devDependencies	minor
open-turo/renovate-config	v1.19.0 → v1.21.1				minor
vitest (source)	4.1.7 → 4.1.10			devDependencies	patch

---

Release Notes

open-turo/eslint-config-typescript (@​open-turo/eslint-config-typescript)

v23.1.13

Compare Source

v23.1.12

Compare Source

Bug Fixes

• deps: update dependency @​vitest/eslint-plugin to v1.6.23 (55a3936)

v23.1.11

Compare Source

Bug Fixes

• deps: update all non-major dependencies (61e02c9)

v23.1.10

Compare Source

Bug Fixes

• deps: update dependency eslint-plugin-perfectionist to v5.10.0 (30d006c)

v23.1.9

Compare Source

Miscellaneous

• .github/renovate.json: bump renovate config to try and remove 3 day delay on select deps (34d0f69)

Bug Fixes

• deps: update all non-major dependencies to v8.63.0 (fec6ab7)

v23.1.8

Compare Source

Bug Fixes

• index.js: downgrade noisy sonarjs rules released in minor versions (a045329)
• deps: update dependency @​vitest/eslint-plugin to v1.6.21 (465f3e6)

v23.1.7

Compare Source

Miscellaneous

• .pre-commit-config.yaml: run prettier from script to avoid needing to bump pre-commit version (e30abfa)
• deps: update all non-major dependencies (310c1e7)
• deps: update dependency prettier to v3.9.1 (665b1c2)

Bug Fixes

• deps: update all non-major dependencies (47b27f2)

v23.1.6

Compare Source

Bug Fixes

• deps: update all non-major dependencies (ce808e4)

v23.1.5

Compare Source

Bug Fixes

• deps: update dependency eslint-plugin-n to v18.2.0 (d44d507)

v23.1.4

Compare Source

Miscellaneous

• deps: update node.js to v24.18.0 (195c9c6)
• deps: update pre-commit hook alessandrojcm/commitlint-pre-commit-hook to v9.26.0 (5ec6d7f)

Bug Fixes

• deps: update all non-major dependencies to v8.62.0 (1e08c9f)

v23.1.3

Compare Source

Miscellaneous

• deps: update node.js to v24.17.0 (96d3dac)

Bug Fixes

• deps: update dependency eslint-plugin-sonarjs to v4.1.0 (7c40beb)

Tests

• test/snapshots/test.spec.js.snap: update sonar config (af542d4)

v23.1.2

Compare Source

Bug Fixes

• tweak TypeScript rules for vitest configuration (d3b4892)

v23.1.1

Compare Source

Bug Fixes

• deps: update typescript-eslint for 8.60.x patch (c8ee298)

v23.1.0

Compare Source

Features

• allowNumber for @​typescript-eslint/restrict-template-expressions (ba07723)

v23.0.14

Compare Source

Miscellaneous

• deps: update dependency open-turo/renovate-config to v1.20.0 (a69f60e)

Continuous Integration

• consolidate release and prerelease into one workflow for npm trusted publishing (a4411ad)

Bug Fixes

• deps: update all non-major dependencies (a6cd766)

v23.0.13

Compare Source

Bug Fixes

• deps: update all non-major dependencies (01c0900)

v23.0.12

Compare Source

Bug Fixes

• deps: update dependency @​vitest/eslint-plugin to v1.6.19 (2e3aeb3)

v23.0.11

Compare Source

Miscellaneous

• deps: update dependency open-turo/renovate-config to v1.19.0 (f678cdd)
• deps: update node.js to v24.16.0 (aea71f6)

Bug Fixes

• deps: update all non-major dependencies (ebdffdc)

vercel/ncc (@​vercel/ncc)

v0.44.1

Compare Source

Bug Fixes

• preserve runtime createRequire in ESM builds (#​1334) (8f0aefd), closes #​1312

v0.44.0

Compare Source

Features

• read permissions pr.yml (#​1323) (5ea625e)

v0.43.0

Compare Source

Changes

• BREAKING CHANGE: add Node 24 and 26 support, remove 20 (#​1318) (#​1305)
• switch npm releases to trusted publishing (OIDC) (#​1325) (#​1327) (#​1328) (#​1329) (#​1330) (#​1331) (#​1332)
• switch package management to pnpm (#​1321)
• fix predictable global cache directory in /tmp enables symlink/hijack risks (#​1314)
• reorder extension resolution to prioritise TypeScript over JSON (#​1315)
• support TypeScript 6 transpile builds (#​1316)

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.10

Compare Source

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in #​10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in #​10661 (bae52)

    View changes on GitHub

v4.1.9

Compare Source

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #​10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in #​10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in #​10497 and #​10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in #​10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in #​10543 and #​10564 (934b0)

View changes on GitHub

v4.1.8

Compare Source

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in #​10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in #​10474 (675b4)

    View changes on GitHub

eslint/eslint (eslint)

v9.39.5

Compare Source

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #​20812 to v9.x) (#​21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#​20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#​20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)

sindresorhus/globals (globals)

v17.8.0

Compare Source

• Update globals (2026-07-01) (#​347) 7394811

---

v17.7.0

Compare Source

• Update globals (2026-06-22) (#​345) 33b75f9

---

open-turo/renovate-config (open-turo/renovate-config)

v1.21.1

Compare Source

Miscellaneous

• move @​emotion/jest memory leak config to npm.json to avoid redundant configuration (85b37a1)
• remove Jest 30 artifact from npm-app and npm-lib (27e01f3)

Continuous Integration

• .github/workflows/ci.yaml: make renovate validator strict (358b8e0)

Bug Fixes

• remove redundant minimumReleaseAge rules from npm-lib and npm-app presets (e709041)

v1.21.0

Compare Source

Continuous Integration

• add renovate config validator check (9581a24)

Features

• add @​open-turo/* to 0-day minimumReleaseAge exception (e519df4)
• add @​typescript-eslint/* and typescript-eslint to 2-day minimumReleaseAge rule (d719a09)
• add tiered minimumReleaseAge exceptions for eslint and @​types packages (6edb5d3)
• move @​types to 0-day exception, keep 1-day rule as empty placeholder (8fe389e)

Bug Fixes

• add @​turo-namespaced exception to minimumReleaseAge configuration (548505d)
• revert actions/checkout to v4 except for renovate validator job (25c296a)

Code Refactoring

• add prettier and @​prettier globs to 2-day minimumReleaseAge rule (ce8abaf)
• make 2-day minimumReleaseAge description package-agnostic (90d4f27)
• merge 0-day minimumReleaseAge exceptions into a single rule (24cd420)
• reword minimumReleaseAge descriptions, add react as 1 day example (35faa1a)
• .github/workflows/ci.yaml: use v7 hash as POC for Semgrep review (9ab8676)

v1.20.0

Compare Source

Features

• add severity labels (patch/minor/major) to all dependency PRs (25454cb)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

Release notes preview

No new release will be created.

If you are expecting a release, you will need to either fix a bug or add a feature.
Chores, CI, docs, refactoring, style and other changes will not trigger a release.

[github-actions]

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.

Changes need to be built and committed to ./dist.

In your local repo, run:

npm run prepare
git commit -a --amend --no-edit
git push --force-with-lease

This will add those changes to your last commit, and get them pushed to the remote.