fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@types/chai (source)	5.0.1 -> 5.2.0					devDependencies	minor
@types/node (source)	22.13.4 -> 22.13.10					devDependencies	patch
@typescript-eslint/eslint-plugin (source)	8.24.1 -> 8.26.1					devDependencies	minor
@typescript-eslint/parser (source)	8.24.1 -> 8.26.1					devDependencies	minor
eslint (source)	9.20.1 -> 9.22.0					devDependencies	minor
node-addon-api	8.3.0 -> 8.3.1					dependencies	patch
pnpm (source)	10.4.1+sha512.c753b6c3ad7afa13af388fa6d808035a008e30ea9993f58c6663e2bc5ff21679aa834db094987129aa4d488b86df57f7b634981b2f827cdcacc698cc0cfb88af -> 10.6.4					packageManager	minor
python	3.10 -> 3.13					uses-with	minor
tsup (source)	8.3.6 -> 8.4.0					devDependencies	minor
typescript (source)	5.7.3 -> 5.8.2					devDependencies	minor

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.26.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unsafe-return] handle recursive type (#​10883)
• eslint-plugin: [prefer-nullish-coalescing] treat any/unknown as eligible for nullish coalescing (#​10865)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• YeonJuan @​yeonjuan

You can read about our versioning strategy and releases on our website.

v8.26.0

Compare Source

🚀 Features

• eslint-plugin: [unified-signatures] support ignoring overload signatures with different JSDoc comments (#​10781)
• eslint-plugin: [explicit-module-boundary-types] add an option to ignore overload implementations (#​10889)
• eslint-plugin: [no-unused-var] handle implicit exports in declaration files (#​10714)
• support TypeScript 5.8 (#​10903)
• eslint-plugin: [no-unnecessary-type-parameters] special case tuples and parameter location arrays as single-use (#​9536)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] handle unknown (#​10875)
• eslint-plugin: [no-invalid-void-type] report accessor properties with an invalid void type (#​10864)
• eslint-plugin: [unified-signatures] does not differentiate truly private methods (#​10806)

❤️ Thank You

• Andrea Simone Costa @​jfet97
• Dirk Luijk @​dirkluijk
• Ronen Amiel
• YeonJuan @​yeonjuan
• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

v8.25.0

Compare Source

🚀 Features

• eslint-plugin: [no-misused-spread] add suggestions (#​10719)

🩹 Fixes

• eslint-plugin: [prefer-nullish-coalescing] report on chain expressions in a ternary (#​10708)
• eslint-plugin: [no-deprecated] report usage of deprecated private identifiers (#​10844)
• eslint-plugin: [unified-signatures] handle getter-setter (#​10818)

❤️ Thank You

• Olivier Zalmanski @​OlivierZal
• Ronen Amiel
• YeonJuan @​yeonjuan

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.26.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.26.0

Compare Source

🚀 Features

• support TypeScript 5.8 (#​10903)

❤️ Thank You

• Dirk Luijk @​dirkluijk

You can read about our versioning strategy and releases on our website.

v8.25.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

eslint/eslint (eslint)

v9.22.0

Compare Source

v9.21.0

Compare Source

Features

• 418717f feat: introduce new deprecated types for rules (#​19238) (fnx)
• 5c5b802 feat: Add --ext CLI option (#​19405) (Milos Djermanovic)

Bug Fixes

• db5340d fix: update missing plugin message template (#​19445) (Milos Djermanovic)
• d8ffdd4 fix: do not exit process on rule crash (#​19436) (Francesco Trotta)

Documentation

• c5561ea docs: Update README (GitHub Actions Bot)
• 80b0485 docs: replace var with let and const in rule example (#​19434) (Tanuj Kanti)
• f67d5e8 docs: Update README (GitHub Actions Bot)
• 75afc61 docs: Update README (GitHub Actions Bot)
• 0636cab docs: Update Eleventy from v2 to v3 (#​19415) (Amaresh S M)
• dd7d930 docs: Update README (GitHub Actions Bot)

Chores

• a8c9a9f chore: update @eslint/eslintrc and @eslint/js (#​19453) (Francesco Trotta)
• 265e0cf chore: package.json update for @​eslint/js release (Jenkins)
• 3401b85 test: add test for Rule.ReportDescriptor type (#​19449) (Francesco Trotta)
• e497aa7 chore: update rewrite dependencies (#​19448) (Francesco Trotta)
• dab5478 chore: better error message for missing plugin in config (#​19402) (Tanuj Kanti)
• ebfe2eb chore: set js language for bug report issue config block (#​19439) (Josh Goldberg ✨)
• 5fd211d test: processors can return subpaths (#​19425) (Milos Djermanovic)

nodejs/node-addon-api (node-addon-api)

v8.3.1

Compare Source

Bug Fixes

• add missing stdexcept include to test (#​1634) (14c1a4f)
• node-api version 10 support (#​1641) (932ad15)

pnpm/pnpm (pnpm)

v10.6.4: pnpm 10.6.4

Compare Source

Patch Changes

• Fix pnpm dlx with --allow-build flag #​9263.
• Invalid Node.js version in use-node-version should not cause pnpm itself to break #​9276.
• The max amount of workers running for linking packages from the store has been reduced to 4 to achieve optimal results #​9286. The workers are performing many file system operations, so increasing the number of CPUs doesn't help performance after some point.

Platinum Sponsors

Gold Sponsors

v10.6.3

Compare Source

Patch Changes

• pnpm install --prod=false should not crash, when executed in a project with a pnpm-workspace.yaml file #​9233. This fixes regression introduced via #​9211.

• Add the missing node-options config to recursive run #​9180.

• Removed a branching code path that only executed when dedupe-peer-dependents=false. We believe this internal refactor will not result in behavior changes, but we expect it to make future pnpm versions behave more consistently for projects that override dedupe-peer-dependents to false. There should be less unique bugs from turning off dedupe-peer-dependents.

  See details in #​9259.

v10.6.2

Compare Source

Patch Changes

• pnpm self-update should always update the version in the packageManager field of package.json.
• Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.
• pnpm patch-commit will now use the same filesystem as the store directory to compare and create patch files.
• Don't show info output when --loglevel=error is used.
• peerDependencyRules should be set in pnpm-workspace.yaml to take effect.

v10.6.1

Compare Source

Patch Changes

• The pnpm CLI process should not stay hanging, when --silent reporting is used.
• When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
• Don't ignore pnpm.patchedDependencies from package.json #​9226.
• When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
• When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

v10.6.0

Compare Source

Minor Changes

• pnpm-workspace.yaml can now hold all the settings that .npmrc accepts. The settings should use camelCase #​9211.

  pnpm-workspace.yaml example:

  verifyDepsBeforeRun: install
  optimisticRepeatInstall: true
  publicHoistPattern:
    - "*types*"
    - "!@​types/react"

• Projects using a file: dependency on a local tarball file (i.e. .tgz, .tar.gz, .tar) will see a performance improvement during installation. Previously, using a file: dependency on a tarball caused the lockfile resolution step to always run. The lockfile will now be considered up-to-date if the tarball is unchanged.

Patch Changes

• pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
• fast-glob replace with tinyglobby to reduce the size of the pnpm CLI dependencies #​9169.
• pnpm deploy should not remove fields from the deployed package's package.json file #​9215.
• pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
• Fix pnpm deploy creating a package.json without the imports and license field #​9193.
• pnpm update -i should list only packages that have newer versions #​9206.
• Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #​9112

v10.5.2

Compare Source

Patch Changes

• The pnpm config set command should change the global .npmrc file by default.
  This was a regression introduced by #​9151 and shipped in pnpm v10.5.0.

v10.5.1

Compare Source

Patch Changes

• Throw an error message if a pnpm-workspaces.yaml or pnpm-workspaces.yml file is found instead of a pnpm-workspace.yaml #​9170.
• Fix the update of pnpm-workspace.yaml by the pnpm approve-builds command #​9168.
• Normalize generated link paths in package.json #​9163
• Specifying overrides in pnpm-workspace.yaml should work.
• pnpm dlx should ignore settings from the package.json file in the current working directory #​9178.

v10.5.0

Compare Source

Minor Changes

• Allow to set the "pnpm" settings from package.json via the pnpm-workspace.yaml file #​9121.

• Added support for automatically syncing files of injected workspace packages after pnpm run #​9081. Use the sync-injected-deps-after-scripts setting to specify which scripts build the workspace package. This tells pnpm when syncing is needed. The setting should be defined in a .npmrc file at the root of the workspace. Example:

  sync-injected-deps-after-scripts[]=compile

• The packages field in pnpm-workspace.yaml became optional.

Patch Changes

• pnpm link with no parameters should work as if --global is specified #​9151.
• Allow scope registry CLI option without --config. prefix such as --@​scope:registry=https://scope.example.com/npm #​9089.
• pnpm link <path> should calculate relative path from the root of the workspace directory #​9132.
• Fix a bug causing catalog snapshots to be removed from the pnpm-lock.yaml file when using --fix-lockfile and --filter. #​8639
• Fix a bug causing catalog protocol dependencies to not re-resolve on a filtered install #​8638.

actions/python-versions (python)

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0

v3.12.9: 3.12.9

Compare Source

Python 3.12.9

v3.12.8: 3.12.8

Compare Source

Python 3.12.8

v3.12.7: 3.12.7

Compare Source

Python 3.12.7

v3.12.6: 3.12.6

Compare Source

Python 3.12.6

v3.12.5: 3.12.5

Compare Source

Python 3.12.5

v3.12.4: 3.12.4

Compare Source

Python 3.12.4

v3.12.3: 3.12.3

Compare Source

Python 3.12.3

v3.12.2: 3.12.2

Compare Source

Python 3.12.2

v3.12.1: 3.12.1

Compare Source

Python 3.12.1

v3.12.0: 3.12.0

Compare Source

Python 3.12.0

v3.11.11: 3.11.11

Compare Source

Python 3.11.11

v3.11.10: 3.11.10

Compare Source

Python 3.11.10

v3.11.9: 3.11.9

Compare Source

Python 3.11.9

v3.11.8: 3.11.8

Compare Source

Python 3.11.8

v3.11.7: 3.11.7

Compare Source

Python 3.11.7

v3.11.6: 3.11.6

Compare Source

Python 3.11.6

v3.11.5: 3.11.5

Compare Source

Python 3.11.5

v3.11.4: 3.11.4

Compare Source

Python 3.11.4

v3.11.3: 3.11.3

Compare Source

Python 3.11.3

v3.11.2: 3.11.2

Compare Source

Python 3.11.2

v3.11.1: 3.11.1

Compare Source

Python 3.11.1

v3.11.0: 3.11.0

Compare Source

Python 3.11.0

egoist/tsup (tsup)

v8.4.0

Compare Source

   🚀 Features

• Upgrade svelte and css compiler  -  by @​DaniAcu in https://github.com/egoist/tsup/issues/1288 (c3f32)

   🐞 Bug Fixes

• Upgrade esbuild to 0.25  -  by @​RobinTail in https://github.com/egoist/tsup/issues/1309 (89c47)

    View changes on GitHub

microsoft/TypeScript (typescript)

v5.8.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate docstrings to generate docstrings for this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: corepack use pnpm@10.6.4
gyp info it worked if it ends with ok
gyp info using node-gyp@11.1.0
gyp info using node@22.14.0 | linux | x64
gyp info find Python using Python version 3.12.3 found at "/usr/bin/python3"
gyp http GET https://nodejs.org/download/release/v22.14.0/node-v22.14.0-headers.tar.gz
gyp http 200 https://nodejs.org/download/release/v22.14.0/node-v22.14.0-headers.tar.gz
gyp http GET https://nodejs.org/download/release/v22.14.0/SHASUMS256.txt
gyp http 200 https://nodejs.org/download/release/v22.14.0/SHASUMS256.txt
gyp info spawn /usr/bin/python3
gyp info spawn args [
gyp info spawn args '/tmp/containerbase/cache/.cache/node/corepack/v1/pnpm/10.6.4/dist/node_modules/node-gyp/gyp/gyp_main.py',
gyp info spawn args 'binding.gyp',
gyp info spawn args '-f',
gyp info spawn args 'make',
gyp info spawn args '-I',
gyp info spawn args '/tmp/renovate/repos/github/unraid/libvirt/build/config.gypi',
gyp info spawn args '-I',
gyp info spawn args '/tmp/containerbase/cache/.cache/node/corepack/v1/pnpm/10.6.4/dist/node_modules/node-gyp/addon.gypi',
gyp info spawn args '-I',
gyp info spawn args '/home/ubuntu/.cache/node-gyp/22.14.0/include/node/common.gypi',
gyp info spawn args '-Dlibrary=shared_library',
gyp info spawn args '-Dvisibility=default',
gyp info spawn args '-Dnode_root_dir=/home/ubuntu/.cache/node-gyp/22.14.0',
gyp info spawn args '-Dnode_gyp_dir=/tmp/containerbase/cache/.cache/node/corepack/v1/pnpm/10.6.4/dist/node_modules/node-gyp',
gyp info spawn args '-Dnode_lib_file=/home/ubuntu/.cache/node-gyp/22.14.0/<(target_arch)/node.lib',
gyp info spawn args '-Dmodule_root_dir=/tmp/renovate/repos/github/unraid/libvirt',
gyp info spawn args '-Dnode_engine=v8',
gyp info spawn args '--depth=.',
gyp info spawn args '--no-parallel',
gyp info spawn args '--generator-output',
gyp info spawn args 'build',
gyp info spawn args '-Goutput_dir=.'
gyp info spawn args ]
gyp info spawn make
gyp info spawn args [ 'BUILDTYPE=Release', '-C', 'build' ]
../src/libvirt.cc:9:10: fatal error: libvirt/libvirt.h: No such file or directory
    9 | #include <libvirt/libvirt.h>
      |          ^~~~~~~~~~~~~~~~~~~
compilation terminated.
make: *** [libvirt.target.mk:123: Release/obj.target/libvirt/src/libvirt.o] Error 1
gyp ERR! build error 
gyp ERR! stack Error: `make` failed with exit code: 2
gyp ERR! stack at ChildProcess.<anonymous> (/tmp/containerbase/cache/.cache/node/corepack/v1/pnpm/10.6.4/dist/node_modules/node-gyp/lib/build.js:216:23)
gyp ERR! System Linux 6.1.102
gyp ERR! command "/opt/containerbase/tools/node/22.14.0/bin/node" "/tmp/containerbase/cache/.cache/node/corepack/v1/pnpm/10.6.4/dist/node_modules/node-gyp/bin/node-gyp.js" "rebuild"
gyp ERR! cwd /tmp/renovate/repos/github/unraid/libvirt
gyp ERR! node -v v22.14.0
gyp ERR! node-gyp -v v11.1.0
gyp ERR! not ok