[dependabot]

Bumps the npm-development group with 6 updates:

Package	From	To
@types/node	26.6.4	26.6.5
eslint-plugin-jest	29.16.6	29.16.11
js-yaml	5.4.2	5.4.3
prettier	3.9.9	3.9.10
rollup	4.64.0	4.64.5
typescript-eslint	8.71.0	8.71.1

Updates @types/node from 26.6.4 to 26.6.5

Commits

• See full diff in compare view

Updates eslint-plugin-jest from 29.16.6 to 29.16.11

Release notes

Sourced from eslint-plugin-jest's releases.

v29.16.11

29.16.11 (2026-10-10)

Bug Fixes

• no-export: report export all declarations (#2040) (3ca13a7)
• no-mocks-import: check dynamic imports (#2039) (3e363d1)

v29.16.10

29.16.10 (2026-10-10)

Bug Fixes

• make sure most rules account for optional chaining (#2038) (2d68f61)

v29.16.9

29.16.9 (2026-10-10)

Bug Fixes

• consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)

Performance Improvements

• cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)

v29.16.8

29.16.8 (2026-10-10)

Bug Fixes

• prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)

v29.16.7

29.16.7 (2026-10-10)

Bug Fixes

• unbound-method: account for optional chaining (#2034) (b918d73)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.16.11 (2026-10-10)

Bug Fixes

• no-export: report export all declarations (#2040) (3ca13a7)
• no-mocks-import: check dynamic imports (#2039) (3e363d1)

29.16.10 (2026-10-10)

Bug Fixes

• make sure most rules account for optional chaining (#2038) (2d68f61)

29.16.9 (2026-10-10)

Bug Fixes

• consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)

Performance Improvements

• cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)

29.16.8 (2026-10-10)

Bug Fixes

• prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)

29.16.7 (2026-10-10)

Bug Fixes

• unbound-method: account for optional chaining (#2034) (b918d73)

Commits

• 1a7fc77 chore(release): 29.16.11 [skip ci]
• 3e363d1 fix(no-mocks-import): check dynamic imports (#2039)
• 3ca13a7 fix(no-export): report export all declarations (#2040)
• 169fda0 chore(release): 29.16.10 [skip ci]
• 2d68f61 fix: make sure most rules account for optional chaining (#2038)
• 68a144d chore(release): 29.16.9 [skip ci]
• 3f6b5aa fix(consistent-test-it): don't drop only and skip from each chains (#2037)
• 7b11cbd perf: cache parsing of nodes that turn out not to be jest function calls (#2035)
• 6ceff2c chore(release): 29.16.8 [skip ci]
• 4dc58f0 fix(prefer-to-have-been-called-times): don't crash if there is no argument pa...
• Additional commits viewable in compare view

Updates js-yaml from 5.4.2 to 5.4.3

Changelog

Sourced from js-yaml's changelog.

[5.4.3] - 2026-10-06

Fixed

• Fixed loading a whitespace-only block scalar followed by a less indented line, #802.

Commits

• 7832624 5.4.3 released
• 0cbb471 Fix whitespace-only block scalar followed by a less indented line, close #802
• 30108cc Parse the first block mapping key once (#800)
• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Updates rollup from 4.64.0 to 4.64.5

Release notes

Sourced from rollup's releases.

v4.64.5

4.64.5

2026-10-10

Bug Fixes

• Prevent cycles when using indirect top-level await for dynamic imports (#6516)

Pull Requests

• #6516: fix: prevent cycles for indirectly awaited dynamic imports (@​ryanchou1994, @​lukastaegert)

v4.64.4

4.64.4

2026-10-10

Bug Fixes

• Support the Rollup WASM build on big-endian hosts (#6559)

Pull Requests

• #6559: fix: read the AST buffer correctly on big-endian hosts (@​pkubaj, @​lukastaegert)
• #6566: Update dtolnay/rust-toolchain digest to 89b1218 (@​renovate[bot], @​lukastaegert)
• #6567: Update minor/patch updates (@​renovate[bot])
• #6568: Update dependency eslint-plugin-unicorn to v77 (@​renovate[bot], @​lukastaegert)
• #6569: Improve PR testing instructions comments (@​lukastaegert)

v4.64.3

4.64.3

2026-10-08

Bug Fixes

• Fix a performance regression when bundling code with deeply nested property calls (#6565)

Pull Requests

• #6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)

v4.64.2

4.64.2

2026-10-07

Bug Fixes

... (truncated)

Changelog

Sourced from rollup's changelog.

4.64.5

2026-10-10

Bug Fixes

• Prevent cycles when using indirect top-level await for dynamic imports (#6516)

Pull Requests

• #6516: fix: prevent cycles for indirectly awaited dynamic imports (@​ryanchou1994, @​lukastaegert)

4.64.4

2026-10-10

Bug Fixes

• Support the Rollup WASM build on big-endian hosts (#6559)

Pull Requests

• #6559: fix: read the AST buffer correctly on big-endian hosts (@​pkubaj, @​lukastaegert)
• #6566: Update dtolnay/rust-toolchain digest to 89b1218 (@​renovate[bot], @​lukastaegert)
• #6567: Update minor/patch updates (@​renovate[bot])
• #6568: Update dependency eslint-plugin-unicorn to v77 (@​renovate[bot], @​lukastaegert)
• #6569: Improve PR testing instructions comments (@​lukastaegert)

4.64.3

2026-10-08

Bug Fixes

• Fix a performance regression when bundling code with deeply nested property calls (#6565)

Pull Requests

• #6565: Fix path-dependent explosion when including call arguments of reassigned variables (@​lukastaegert)

4.64.2

2026-10-07

Bug Fixes

• Fix a regression where certain CoreJS helpers were wrongly tree-shaken (#6562)
• Do not show errors from closeBundle if there were also build errors (#6554)

Pull Requests

... (truncated)

Commits

• 05a2938 4.64.5
• d45f8e8 fix: prevent cycles for indirectly awaited dynamic imports (#6516)
• 9568144 4.64.4
• c3e3b46 fix: read the AST buffer correctly on big-endian hosts (#6559)
• 7207ba8 Improve PR testing instructions comments (#6569)
• 00ed55e Update dependency eslint-plugin-unicorn to v77 (#6568)
• 244f013 Update dtolnay/rust-toolchain digest to 89b1218 (#6566)
• 89fb3b6 Update minor/patch updates (#6567)
• eea952f 4.64.3
• f1f7c4a Fix path-dependent explosion when including call arguments of reassigned vari...
• Additional commits viewable in compare view

Updates typescript-eslint from 8.71.0 to 8.71.1

Release notes

Sourced from typescript-eslint's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• d57b8da chore(release): publish 8.71.1
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[github-actions]

AI review: approve for 65f3e06

Dependabot patch bumps to six devDependencies: @types/node, eslint-plugin-jest, js-yaml, prettier, rollup and typescript-eslint along with its @typescript-eslint/* sub-packages. The lockfile only changes version, resolved and integrity fields. No packages are added or removed, and no install scripts are introduced. Every resolved URL points to registry.npmjs.org. js-yaml is a devDependency that src/ doesn't use, so the shipped action code is unaffected. No CI, workflow or access-control changes. I found no issues.

Review run

[github-actions]

AI review: approve for 51b5a39

Re-reviewed at 51b5a39. The diff matches what was approved at 65f3e06. It contains Dependabot patch bumps to six devDependencies: @types/node, eslint-plugin-jest, js-yaml, prettier, rollup (with its platform binaries) and typescript-eslint (with its sub-packages). Lockfile changes are limited to version, resolved and integrity fields and dependency ranges. Every resolved URL points to registry.npmjs.org. No packages are added or removed, and no install scripts are introduced. No CI, workflow or source changes. I found no issues.

Review run