fix(deps): bump the minorandpatch group across 1 directory with 13 updates

[dependabot]

Bumps the minorandpatch group with 13 updates in the / directory:

Package	From	To
@swc/core	1.15.33	1.15.40
@types/node	25.9.1	25.9.2
eslint	10.4.0	10.4.1
eslint-plugin-vue	10.9.1	10.9.2
lint-staged	17.0.5	17.0.7
nx	22.7.2	22.7.5
tsdown	0.22.0	0.22.2
typescript-eslint	8.59.4	8.60.1
vitest	4.1.7	4.1.8
@trapi/core	2.0.0	2.0.1
@trapi/metadata	2.0.0	2.0.1
@trapi/swagger	2.0.0	2.0.1
vue	3.5.34	3.5.35

Updates @swc/core from 1.15.33 to 1.15.40

Changelog

Sourced from @​swc/core's changelog.

[1.15.40] - 2026-05-23

Bug Fixes

• (es/minifier) Preserve args for destructured callbacks (#11830) (21873b0)

• (es/minifier) Avoid generating mangled property names that collide with existing properties (#11839) (9b4fab5)

• (es/minifier) Respect ecma for iife temp vars (#11873) (e481934)

• (es/minifier) Preserve default parameter object props (#11884) (71ff84f)

• (es/parser) Reject object-rest assignment to array/object literal (#11875) (7b57d1f)

• (es/parser) Reject object rest assignment to literals (#11881) (4ec2eaf)

• (es/react) Exclude self-recursive hooks from refresh dependency array (#11838) (9101c71)

• (ts/fast-dts) Strip definite assertions in dts (#11858) (2ab1b8a)

• (ts/fast-strip) Reject unsafe assertion erasure in binary expressions (#11828) (aa5b539)

• (typescript) Strip parameter binding defaults in dts (#11857) (800bc17)

Documentation

• Update agent guidance (#11842) (bf2d015)

• Add security policy (#11876) (6c43c2d)

• Clarify security scope for npm packages (#11877) (4662db8)

• Clarify untrusted input security model (#11882) (5463777)

... (truncated)

Commits

• 112729b chore: Publish 1.15.40 with swc_core v66.0.5
• 13a5608 chore: Publish 1.15.40-nightly-20260523.1 with swc_core v66.0.5
• bc6ee83 chore: Publish 1.15.39-nightly-20260523.1 with swc_core v66.0.5
• 3a68ad5 chore: Publish 1.15.38-nightly-20260522.1 with swc_core v66.0.5
• d0f0d5a chore: Publish 1.15.37-nightly-20260522.1 with swc_core v66.0.5
• 969df79 chore: Publish 1.15.36-nightly-20260522.1 with swc_core v66.0.5
• 38c2a44 chore: Publish 1.15.35-nightly-20260522.1 with swc_core v66.0.4
• 18df110 chore: Publish 1.15.34-nightly-20260522.1 with swc_core v66.0.4
• 20d92eb security: update rkyv and Rust dependencies (#11851)
• 0d8e651 chore: Publish crates with swc_core v65.0.3
• See full diff in compare view

Updates @types/node from 25.9.1 to 25.9.2

Commits

• See full diff in compare view

Updates eslint from 10.4.0 to 10.4.1

Release notes

Sourced from eslint's releases.

v10.4.1

Bug Fixes

• e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)
• d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)
• f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)
• c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)
• 27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

• 61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)
• 305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)
• 49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)
• 9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)
• c91b041 docs: Update README (GitHub Actions Bot)
• e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

• b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)
• f78838b test: add CodePath type coverage (#20904) (Pixel998)
• 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)
• 002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)
• 64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)
• 6d7c832 chore: ignore fflate updates in renovate (#20908) (Pixel998)
• b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#20889) (dependabot[bot])
• a9b8d7f chore: increase maxBuffer for ecosystem tests (#20881) (sethamus)
• b702ead chore: update ecosystem update PR settings (#20884) (Pixel998)
• 507f60e chore: update ecosystem plugins (#20882) (ESLint Bot)
• 92f5c5b test: add unit test for message-count (#20878) (kuldeep kumar)
• df32108 chore: add @​eslint/markdown and typescript-eslint ecosystem tests (#20837) (sethamus)
• 327f91d chore: use includeIgnoreFile internally (#20876) (Kirk Waiblinger)
• f0dc4bd chore: pin fflate@0.8.2 (#20877) (Milos Djermanovic)
• 0f4bd25 ci: run Discord alert for ecosystem test failures (#20873) (Copilot)

Commits

• 4a3d15a 10.4.1
• 43e7e2b Build: changelog update for 10.4.1
• e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930)
• b0e466b test: add data property to invalid tests cases for rules (#20924)
• d4ce898 fix: propagate failures from delegated commands (#20917)
• f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916)
• f78838b test: add CodePath type coverage (#20904)
• 61b0add docs: remove deprecated rule from related rules of max-params (#20921)
• 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20...
• 002942c ci: declare contents:read on update-readme workflow (#20919)
• Additional commits viewable in compare view

Updates eslint-plugin-vue from 10.9.1 to 10.9.2

Release notes

Sourced from eslint-plugin-vue's releases.

v10.9.2

Patch Changes

• Fixed vue/custom-event-name-casing to check segments of colon-separated event names like update:foo-bar (#3079)
• Fixed vue/one-component-per-file to not report functions not imported from Vue (#3063)
• Fixed vue/prefer-import-from-vue to not report imports/exports of names that are not re-exported by vue (#3081)
• Fixed vue/return-in-computed-property and vue/require-render-return to not report exhaustive switch statements when TypeScript type information is available (#3067)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.9.2

Patch Changes

• Fixed vue/custom-event-name-casing to check segments of colon-separated event names like update:foo-bar (#3079)
• Fixed vue/one-component-per-file to not report functions not imported from Vue (#3063)
• Fixed vue/prefer-import-from-vue to not report imports/exports of names that are not re-exported by vue (#3081)
• Fixed vue/return-in-computed-property and vue/require-render-return to not report exhaustive switch statements when TypeScript type information is available (#3067)

Commits

• 9aa463a Version Packages (#3080)
• 517347c Add error positions (#3085)
• b582b7e fix: false positive for returns in exhaustive switch (#3067)
• 91a136c fix(one-component-per-file): Ignore members imported from elsewhere (#3063)
• d37d17b fix(prefer-import-from-vue): don't report names not exported by vue (#3081)
• 836aa95 fix(custom-event-name-casing): check segments of colon-separated names (#3079)
• See full diff in compare view

Updates lint-staged from 17.0.5 to 17.0.7

Release notes

Sourced from lint-staged's releases.

v17.0.7

Patch Changes

• #1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Patch Changes

• #1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

• #1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

• #1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

• #1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Changelog

Sourced from lint-staged's changelog.

17.0.7

Patch Changes

• #1806 e692e58 - Update dependency tinyexec@^1.2.4.

17.0.6

Patch Changes

• #1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

• #1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

• #1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

• #1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Commits

• cd11fec Merge pull request #1807 from lint-staged/changeset-release/main
• 15a8ee0 chore(changeset): release
• 797bbd9 Merge pull request #1808 from lint-staged/add-stashing-faq
• 504e307 docs: add FAQ entry on how stashing works
• eff5cd1 Merge pull request #1806 from lint-staged/update-tinyexec
• e692e58 build(deps): update tinyexec@^1.2.4
• a2dd4ea Merge pull request #1805 from lint-staged/update-github-templates
• c928519 docs: update GitHub templates
• 094ba56 Merge pull request #1798 from lint-staged/changeset-release/main
• 88e19fe chore(changeset): release
• Additional commits viewable in compare view

Updates nx from 22.7.2 to 22.7.5

Release notes

Sourced from nx's releases.

22.7.5 (2026-05-27)

🩹 Fixes

• core: update tmp to 0.2.6 due to CVE-2026-44705 (#35813)

❤️ Thank You

• Jack Hsu @​jaysoo

22.7.4 (2026-05-25)

🩹 Fixes

• core: update brace-expansion and yaml (#35790)

❤️ Thank You

• Jack Hsu @​jaysoo

22.7.3 (2026-05-22)

🚀 Features

• js: support pnpm 11.2.2 (#35772)

🩹 Fixes

• angular: only add @​oxc-project/runtime on the vitest-analog path (#35734)
• angular-rspack: exclude eslint config from tailwind v4 source scan (#35663)
• core: warn before installing unknown npm packages as preset (#35644)
• core: preserve input order in createNodes plugin results (#35595)
• core: resolve local plugin subpath imports from source (#35631)
• core: treat undefined task parallelism as parallel when scheduling (#35736)
• core: handle object form of bin field in getPrettierPath (#35680)
• core: detect vscode copilot ai agent (#35757)
• core: allow local plugin subpath imports without custom conditions (#35751, #35631)
• dotnet: include Directory.. files in inputs (#35738)
• gradle: add transitive:true to all tasks (#35677)
• gradle: pin generated e2e project toolchain to installed JDK (#35703)
• js: fall back to npm publish when bun publish fails with auth error (#35756)
• linter: improve convert-to-flat-config output fidelity (#35330)
• linter: only rewrite workspace-package peer deps to workspace:* (#35423, #35318, #33417)
• misc: stop inferring projects: 'self' in dependsOn entries (#35686)
• misc: skip $ escaping in file paths on windows (#35692)
• repo: run dotnet restore before publish (#35771)
• repo: run dotnet restore before macos e2e job (#35774)
• rsbuild: infer build outputs from distPath.root directly (#35707)
• rsbuild: lazy-require @​rsbuild/core in plugin so spec mocks work after jest.resetModules (#35707)
• testing: correct yargs-parser import in getJestProjectsAsync (#35672, #35654)

... (truncated)

Commits

• dc849bb fix(core): update brace-expansion and yaml (#35790)
• 8fd1feb fix(core): allow local plugin subpath imports without custom conditions (#35751)
• 22f3c2e fix(core): detect vscode copilot ai agent (#35757)
• 0d18512 fix(misc): skip $ escaping in file paths on windows (#35692)
• 7c1318f fix(core): handle object form of bin field in getPrettierPath (#35680)
• a3acfd6 fix(core): treat undefined task parallelism as parallel when scheduling (#35736)
• c574207 cleanup(core): drop stale @​nrwl dedup TODO in nx report (#35730)
• 0d002ec fix(core): resolve local plugin subpath imports from source (#35631)
• b58ccd8 fix(core): preserve input order in createNodes plugin results (#35595)
• See full diff in compare view

Updates tsdown from 0.22.0 to 0.22.2

Release notes

Sourced from tsdown's releases.

v0.22.2

   🐞 Bug Fixes

• Pin rolldown to minor  -  by @​sxzz (69e78)

    View changes on GitHub

v0.22.1

   🚀 Features

• dts: Add deps.dts option to override dependency bundling for declaration files  -  by @​sxzz (881bf)

   🐞 Bug Fixes

• Improve error handling for unsupported TypeScript syntax on Node.js  -  by @​sxzz (b93db)
• Add extra space for emoji rendering in Windows Terminal  -  by @​sxzz (925cc)
• unbundle: Add shims support for unbundled builds  -  by @​sxzz (fc991)

    View changes on GitHub

Commits

• 15ac682 chore: release v0.22.2
• 69e78ec fix: pin rolldown to minor
• d9f607b docs: update auto exports docs
• c66775e chore: upgrade deps
• e5a8c3d ci: use staging publish for release workflow
• 0bddff1 chore: release v0.22.1
• fc9913d fix(unbundle): add shims support for unbundled builds
• 3504171 chore: upgrade deps
• 881bf0d feat(dts): add deps.dts option to override dependency bundling for declarat...
• 937f253 ci: use actionspack to bundle workflows
• Additional commits viewable in compare view

Updates typescript-eslint from 8.59.4 to 8.60.1

Release notes

Sourced from typescript-eslint's releases.

v8.60.1

8.60.1 (2026-06-01)

🩹 Fixes

• eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352)
• eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182)

❤️ Thank You

• lumir
• Nevette Bailey @​nevette-bailey

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

• rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

• playground TS version selector is not working (#12326, #12325)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.60.1 (2026-06-01)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.0 (2026-05-25)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4f84a69 chore(release): publish 8.60.1
• 1849b53 chore: typecheck using tsgo (#12139)
• f891c29 chore(release): publish 8.60.0
• See full diff in compare view

Updates vitest from 4.1.7 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Updates @trapi/core from 2.0.0 to 2.0.1

Release notes

Sourced from @​trapi/core's releases.

cli: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/metadata bumped from ^2.0.0 to ^2.0.1
    • @​trapi/swagger bumped from ^2.0.0 to ^2.0.1

core: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

metadata: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/core bumped from 2.0.0 to 2.0.1

swagger: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

... (truncated)

Changelog

Sourced from @​trapi/core's changelog.

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

Commits

• b7fc69a chore: release master (#839)
• 9acd603 fix(deps): bump locter to v3 and remaining minor/patch updates
• 4bfa470 fix(deps): bump the minorandpatch group across 1 directory with 12 updates (#...
• 5721721 fix(deps): bump the minorandpatch group across 1 directory with 5 updates (#838)
• See full diff in compare view

Updates @trapi/metadata from 2.0.0 to 2.0.1

Release notes

Sourced from @​trapi/metadata's releases.

cli: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/metadata bumped from ^2.0.0 to ^2.0.1
    • @​trapi/swagger bumped from ^2.0.0 to ^2.0.1

core: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

metadata: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/core bumped from 2.0.0 to 2.0.1

swagger: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

... (truncated)

Changelog

Sourced from @​trapi/metadata's changelog.

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/core bumped from 2.0.0 to 2.0.1

Commits

• b7fc69a chore: release master (#839)
• 9acd603 fix(deps): bump locter to v3 and remaining minor/patch updates
• 4bfa470 fix(deps): bump the minorandpatch group across 1 directory with 12 updates (#...
• 5721721 fix(deps): bump the minorandpatch group across 1 directory with 5 updates (#838)
• See full diff in compare view

Updates @trapi/swagger from 2.0.0 to 2.0.1

Release notes

Sourced from @​trapi/swagger's releases.

cli: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/metadata bumped from ^2.0.0 to ^2.0.1
    • @​trapi/swagger bumped from ^2.0.0 to ^2.0.1

core: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

metadata: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/core bumped from 2.0.0 to 2.0.1

swagger: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

... (truncated)

Changelog

Sourced from @​trapi/swagger's changelog.

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/core bumped from 2.0.0 to 2.0.1

Commits

• b7fc69a chore: release master (#839)
• 9acd603 fix(deps): bump locter to v3 and remaining minor/patch updates
• 4bfa470 fix(deps): bump the minorandpatch group across 1 directory with 12 updates (#...
• 5721721 fix(deps): bump the minorandpatch group across 1 directory with 5 updates (#838)
• See full diff in compare view

Updates vue from 3.5.34 to 3.5.35

Release notes

Sourced from vue's releases.

v3.5.35

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.35 (2026-05-27)

Bug Fixes

• compiler-core: avoid double processing v-for keys with v-memo (#14861) (34a0ded), closes #148...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.