Skip to content

chore(deps-dev)(deps-dev): bump the dev-tooling-minor-patch group across 1 directory with 4 updates - #30

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-minor-patch-7d86193fcc
Open

chore(deps-dev)(deps-dev): bump the dev-tooling-minor-patch group across 1 directory with 4 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-minor-patch-7d86193fcc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-tooling-minor-patch group with 4 updates in the / directory: @typescript-eslint/parser, eslint, eslint-plugin-sonarjs and mysql2.

Updates @typescript-eslint/parser from 8.63.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
  • typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

  • support parsing import defer (#12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 63ba81b chore(release): publish 8.65.0
  • eaf4576 feat: add warning when TS 7 is detected (#12529)
  • d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
  • 0d06406 chore: add attw validation to repo (#12437)
  • c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
  • 414d9ab chore(release): publish 8.64.0
  • See full diff in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates eslint-plugin-sonarjs from 4.1.0 to 4.2.0

Changelog

Sourced from eslint-plugin-sonarjs's changelog.

Release Guide

SonarJS currently has two distinct release targets:

Target Artifact Main workflow Notes
Standard SonarQube analyzer Maven/JAR release artifacts .github/workflows/automated-release.yml This is the normal SonarJS release flow.
SQAA (previously A3S) Docker image for LanguageAnalyzerService .github/workflows/docker-sqaa.yml Manual SQAA-only entry point and fallback.

Terminology

  • SQAA is the current name for what older docs and repository names still call A3S.
  • Some external identifiers still keep the legacy a3s name for compatibility. The important ones are:
    • the Docker repository path a3s/analysis/javascript
    • packages/grpc/src/proto/language_analyzer.proto with option java_package = "com.sonarsource.a3s.analyzer.grpc";
  • Do not rename those compatibility-sensitive identifiers as part of a routine release.

Standard SonarQube Analyzer Release

This is the regular SonarJS analyzer release. It produces the standard SonarQube analyzer artifacts and can also automate the SQAA handoff using the same build number.

Entry points

  1. Start .github/workflows/automated-release.yml.
  2. That workflow orchestrates the release and then calls .github/workflows/release.yml for the actual artifact publication.
  3. After the release succeeds, .github/workflows/bump-versions.yml opens the next development iteration PR.

What .github/workflows/automated-release.yml does

The SonarJS workflow is a thin wrapper around SonarSource/release-github-actions/.github/workflows/automated-release.yml@v1 with SonarJS-specific inputs:

  • project name SonarJS
  • plugin name javascript
  • Jira project JS
  • optional SQC and SQS integration PRs
  • optional SQAA integration, enabled in the SonarJS wrapper and implemented by a custom local workflow
  • SLVS, SLVSCODE, SLE, and SLI integration tickets enabled
  • the generic release-github-actions SQAA integration explicitly disabled, because SonarJS uses analysis/js_ts_image_tag instead of gradle/sonar-plugins.versions.toml

The reusable workflow performs the following steps:

  1. Freeze the target branch.
  2. Run the releasability checks with SonarSource/gh-action_releasability@v3.
  3. Resolve the release version with get-release-version.
  4. Resolve the Jira version with get-jira-version.
  5. Generate Jira-based release notes with get-jira-release-notes unless explicit notes were provided.
  6. Create the REL Jira ticket with create-jira-release-ticket.
  7. Publish the GitHub release with publish-github-release.
  8. Unfreeze the branch.
  9. Release the Jira version, create the next Jira version, and move the REL ticket to Technical Release Done.

... (truncated)

Commits

Updates mysql2 from 3.22.6 to 3.23.1

Release notes

Sourced from mysql2's releases.

v3.23.1

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)

v3.23.0

3.23.0 (2026-07-13)

Features

  • return unsafe integers inside JSON columns as exact strings with supportBigNumbers (#4388) (a26ff14)
  • sql-escaper: add Temporal support when escaping values (#4392) (6b933f6)
  • support MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (#4373) (5034e57)
Changelog

Sourced from mysql2's changelog.

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)

3.23.0 (2026-07-13)

Features

  • return unsafe integers inside JSON columns as exact strings with supportBigNumbers (#4388) (a26ff14)
  • sql-escaper: add Temporal support when escaping values (#4392) (6b933f6)
  • support MariaDB data types (UUID, INET4, INET6, VECTOR, JSON) via extended type metadata; run CI against MariaDB (#4373) (5034e57)
Commits
  • 3de28fb chore(master): release 3.23.1 (#4408)
  • 01f1092 fix(parser): call typeCast for NULL values in the binary protocol (#3368) (#4...
  • 534c552 build(deps): bump lucide-react from 1.24.0 to 1.25.0 in /website (#4407)
  • 7c48343 Merge commit from fork
  • 3e13d7b docs: establish security charter (#4404)
  • 26c135b build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /website (#4403)
  • f86cfb1 chore(master): release 3.23.0 (#4387)
  • 6316492 build(deps): bump the docusaurus group in /website with 2 updates (#4396)
  • 6b933f6 feat(sql-escaper): add Temporal support when escaping values (#4392)
  • 457c316 build(deps): bump lucide-react from 1.23.0 to 1.24.0 in /website (#4391)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…oss 1 directory with 4 updates

Bumps the dev-tooling-minor-patch group with 4 updates in the / directory: [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser), [eslint](https://github.com/eslint/eslint), [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) and [mysql2](https://github.com/sidorares/node-mysql2).


Updates `@typescript-eslint/parser` from 8.63.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `eslint-plugin-sonarjs` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `mysql2` from 3.22.6 to 3.23.1
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.22.6...v3.23.1)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling-minor-patch
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling-minor-patch
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling-minor-patch
- dependency-name: mysql2
  dependency-version: 3.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@github-actions

Copy link
Copy Markdown

📊 Coverage Coverage Report

Metric PR Base Diff
Statements ████████████████████ 2070/2070 (100%) 2070/2070 (100%) ⚪ 0%
Branches ████████████████████ 279/279 (100%) 279/279 (100%) ⚪ 0%
Functions ████████████████████ 88/88 (100%) 88/88 (100%) ⚪ 0%
Lines ████████████████████ 2070/2070 (100%) 2070/2070 (100%) ⚪ 0%

Updated for 0f1b346 | Compared against base branch

@github-actions

Copy link
Copy Markdown

⏱️ Performance Report

✅ Tests 135 passed, 0 failed, 0 skipped
🧪 Suites 32
⏱️ Total step time 279.00s 🔴 +19.00s
⚙️ Test execution 271.28s 🔴 +18.64s
🐢 Slowest test suites
# Suite Tests Duration vs Base
1 PostgresWakeListener 17 31.07s 🔴 +1.54s
2 runWorkerLoop 13 24.14s 🔴 +1.77s
3 OutboxClaimer (publish outcomes) 9 17.71s 🔴 +1.79s
4 WakeSocketServer + WakeSocketClient 9 16.77s 🔴 +1.03s
5 SqliteOutboxStore 8 14.81s 🔴 +1.36s
6 KafkaInboxConsumer 8 14.53s 🔴 +749ms
7 OutboxWaker 7 13.30s 🔴 +899ms
8 MysqlOutboxStore 7 13.29s 🔴 +1.34s
9 InProcessOutboxTransport 5 9.80s 🔴 +1.45s
10 SqliteInboxStore 5 9.14s 🔴 +690ms
🐌 Slowest individual tests
# Suite Test Duration vs Base
1 PostgresOutboxStore wakeChannel PostgresOutboxStore wakeChannel enqueue fires pg_notify on the configured channel (observed via LISTEN) 3.76s 🔴 +284ms
2 OutboxProducer (atomic enqueue) OutboxProducer (atomic enqueue) enqueue commits the outbox row with the business write 2.76s 🔴 +72ms
3 OutboxProducer (atomic enqueue) OutboxProducer (atomic enqueue) a throw rolls back BOTH the outbox row and the business write 2.11s 🔴 +57ms
4 OutboxClaimer (publish outcomes) OutboxClaimer (publish outcomes) a PermanentError fails the row immediately (and warns with the reason) 2.11s 🔴 +407ms
5 OutboxClaimer (publish outcomes) OutboxClaimer (publish outcomes) a generic error retries while attempts remain 2.07s 🔴 +281ms
6 InProcessOutboxTransport InProcessOutboxTransport async handlers are awaited before the outcome is mapped 2.07s 🔴 +402ms
7 MysqlOutboxStore MysqlOutboxStore enqueue inserts a pending row then reads it back by id 2.07s 🔴 +160ms
8 SqliteInboxStore SqliteInboxStore same key under a different source is processed independently 2.06s 🔴 +276ms
9 PostgresWakeListener PostgresWakeListener quotes a custom mixed-case channel (LISTEN must stay case-sensitive) 2.06s 🔴 +320ms
10 WakeSocketServer + WakeSocketClient WakeSocketServer + WakeSocketClient client notify() without onError still swallows the failure 2.06s 🔴 +293ms
11 runWorkerLoop runWorkerLoop an abort during the idle sleep wakes it and removes the listener 2.04s 🔴 +284ms
12 InProcessOutboxTransport InProcessOutboxTransport no registered handler rejects with PermanentError (row fails immediately) 2.02s 🔴 +366ms
13 WakeSocketServer + WakeSocketClient WakeSocketServer + WakeSocketClient client notify() against a missing path reports to onError and never throws 2.02s 🔴 +262ms
14 OutboxClaimer (publish outcomes) OutboxClaimer (publish outcomes) a non-Error rejection is stringified into lastError 2.01s 🔴 +217ms
15 OutboxWaker OutboxWaker wait() resolves on the backstop timer when nothing wakes it 2.01s 🔴 +134ms

Updated for 0f1b346 | Compared against base branch

@github-actions

Copy link
Copy Markdown

🧠 Cognitive Complexity Report

Metric PR Base Diff
Total complexity 79 79 ⚪ 0
Max function complexity 12 12 ⚪ 0
Functions measured 39 39 ⚪ 0
🧩 Most complex functions
Function Location Complexity Status
runWorkerLoop packages/messaging/outbox-worker.ts:34 12 🟢 OK
KafkaInboxConsumer.consume packages/messaging/adapters/kafka/kafka-inbox-consumer.ts:67 5 🟢 OK
PostgresWakeListener.#supervise packages/messaging/dialects/postgres/wake.ts:122 5 🟢 OK
WakeSocketServer.listen packages/messaging/wake-socket.ts:52 5 🟢 OK
OutboxClaimer.onPublishError packages/messaging/outbox-claimer.service.ts:84 4 🟢 OK
deriveDedupKey packages/messaging/wire-contract.ts:55 4 🟢 OK
MysqlInboxStore.runOnce packages/messaging/dialects/mysql/inbox-store.ts:43 3 🟢 OK
PostgresInboxStore.runOnce packages/messaging/dialects/postgres/inbox-store.ts:37 3 🟢 OK
SqliteInboxStore.runOnce packages/messaging/dialects/sqlite/inbox-store.ts:39 3 🟢 OK
KafkaInboxConsumer.readKey packages/messaging/adapters/kafka/kafka-inbox-consumer.ts:90 2 🟢 OK

🧭 Cognitive complexity is reported as a review signal, not a merge gate. Prefer small, intention-revealing refactors when complexity rises.


Updated for 0f1b346 | Compared against base branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants