Skip to content

Bump the dependencies group in /processor with 14 updates - #1

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/processor/dependencies-c21fc2bd91
Open

Bump the dependencies group in /processor with 14 updates#1
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/processor/dependencies-c21fc2bd91

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown

Bumps the dependencies group in /processor with 14 updates:

Package From To
@commercetools-backend/loggers 27.9.0 27.9.6
@commercetools/connect-payments-sdk 1.2.0 1.2.2
@fastify/http-proxy 11.6.0 11.6.2
fastify 5.12.1 5.12.4
@eslint/eslintrc 3.3.6 3.3.7
@jest/globals 30.4.1 30.5.1
@types/node 26.1.2 26.5.1
@typescript-eslint/eslint-plugin 8.66.0 8.70.0
@typescript-eslint/parser 8.66.0 8.70.0
eslint 10.8.0 10.10.0
eslint-plugin-jest 29.16.0 29.16.6
globals 17.9.0 17.12.0
jest 30.4.2 30.5.1
js-yaml 5.2.3 5.4.2

Updates @commercetools-backend/loggers from 27.9.0 to 27.9.6

Release notes

Sourced from @​commercetools-backend/loggers's releases.

v27.9.6

@​commercetools-backend/eslint-config-node@​27.9.6

@​commercetools-backend/express@​27.9.6

@​commercetools-backend/loggers@​27.9.6

@​commercetools-frontend/actions-global@​27.9.6

Patch Changes

  • Updated dependencies []:
    • @​commercetools-frontend/browser-history@​27.9.6
    • @​commercetools-frontend/constants@​27.9.6
    • @​commercetools-frontend/notifications@​27.9.6
    • @​commercetools-frontend/sentry@​27.9.6

@​commercetools-frontend/application-components@​27.9.6

Patch Changes

  • Updated dependencies []:
    • @​commercetools-frontend/actions-global@​27.9.6
    • @​commercetools-frontend/application-config@​27.9.6
    • @​commercetools-frontend/application-shell-connectors@​27.9.6
    • @​commercetools-frontend/assets@​27.9.6
    • @​commercetools-frontend/constants@​27.9.6
    • @​commercetools-frontend/i18n@​27.9.6
    • @​commercetools-frontend/l10n@​27.9.6
    • @​commercetools-frontend/sentry@​27.9.6

@​commercetools-frontend/application-config@​27.9.6

Patch Changes

  • Updated dependencies []:
    • @​commercetools-frontend/constants@​27.9.6

@​commercetools-frontend/application-shell@​27.9.6

Patch Changes

  • #4137 35088ee Thanks @​ByronDWall! - Move the SaveToolbar portal target (#mc-main-container-portal) from the authenticated shell grid into the splitter async wrapper, outside Suspense and Splitter.Main. This ensures the portal target escapes container-type: inline-size on Splitter.Main so position: fixed content spans both splitter panes, and sits at z-index: 10001 above the modal portals container (z-index: 10000).

... (truncated)

Changelog

Sourced from @​commercetools-backend/loggers's changelog.

27.9.6

27.9.5

27.9.4

27.9.3

27.9.2

27.9.1

Patch Changes

  • #4077 959d69e Thanks @​ByronDWall! - Batch-consolidated patch/minor Renovate dependency updates (rate-limited dashboard backlog, ~116 items reviewed).

    The @flopflip/* 15.1.7 → 15.1.11 bump pulls in @launchdarkly/js-client-sdk v4 as a transitive dependency, replacing the unscoped launchdarkly-js-client-sdk v3. This is a breaking change for SetupFlopFlipProvider in application-shell:

    • The LaunchDarkly user context type now requires either a key or anonymous: true, never an optional key. getUserContextForLaunchDarklyAdapter now returns an anonymous context when there's no authenticated user, instead of a context with an undefined key.
    • sdk.clientOptions.sendEventsOnlyForVariation was removed; the new SDK's allFlags no longer sends analytics events by default, which was the entire point of that option.

    @commercetools/composable-commerce-test-data 13.12.0 → 13.13.1 pulling in @faker-js/faker v10 (which dropped its CJS build) was previously allowlisted in the root jest.test.config.js's transformIgnorePatterns, but jest-preset-mc-app's own preset — the one actually consumed by the standalone starter templates (application-templates/starter{,-typescript}, custom-views-templates/starter{,-typescript}) — has its own separate transformIgnorePatterns and was missed, so their CI jobs kept failing with Cannot use import statement outside a module. Added @faker-js/faker to that preset's allowlist too.

    Bumped the following, each a real dependencies entry (not devDependencies) of the listed package(s), so each gets a version bump here:

    • @flopflip/* (combine-adapters, http-adapter, launchdarkly-adapter, memory-adapter, react-broadcast, types) 15.1.7 → 15.1.11 — application-shell (all six), application-components (react-broadcast)
    • @pmmmwh/react-refresh-webpack-plugin 0.6.1 → 0.6.2 — mc-scripts
    • @radix-ui/react-dialog 1.1.14 → 1.1.23, @types/react-dom ^19.0.2 → ^19.2.4 — application-components
    • semver 7.7.2 → 7.8.5, uuid 14.0.0 → 14.0.1 — cypress
    • @rollup/pluginutils 5.2.0 → 5.4.0, graphql 16.11.0 → 16.14.2, html-webpack-plugin 5.6.3 → 5.6.8, mini-css-extract-plugin 2.9.4 → 2.10.2, postcss 8.5.23 → 8.5.26, react-refresh 0.17.0 → 0.18.0 — mc-scripts (webpack 5.105.1 → 5.109.2 was reverted; see below)
    • graphql 16.11.0 → 16.14.2, uuid 14.0.0 → 14.0.1 — application-shell-connectors
    • cosmiconfig 9.0.0 → 9.0.2, graphql 16.11.0 → 16.14.2 — jest-preset-mc-app (the jest/babel-jest/babel-preset-jest/jest-environment-jsdom/jest-mock bump was reverted; see the pnpm-regression/typecheck fix commits on this branch for why)
    • @types/react-dom ^19.0.2 → ^19.2.4 — react-notifications, application-shell (also @reduxjs/toolkit 2.9.0 → 2.12.0, graphql 16.11.0 → 16.14.2, uuid 14.0.0 → 14.0.1)
    • typescript 5.9.2 → 5.9.3 — eslint-config-mc-app, eslint-config-node
    • semver 7.7.2 → 7.8.5 — create-mc-app
    • uuid 14.0.0 → 14.0.1 — sdk
    • @formatjs/icu-messageformat-parser 2.11.2 → 2.11.4 — i18n

... (truncated)

Commits

Updates @commercetools/connect-payments-sdk from 1.2.0 to 1.2.2

Updates @fastify/http-proxy from 11.6.0 to 11.6.2

Release notes

Sourced from @​fastify/http-proxy's releases.

v11.6.2

⚠️ Security Release

This release fixes CVE-2026-85124, a high-severity path traversal vulnerability. In affected versions, backslash dot-segments could escape the configured rewritePrefix boundary for proxied HTTP requests and expose unintended upstream paths.

Upgrade to @fastify/http-proxy v11.6.2. There is no workaround.

What's Changed

Credits

Full Changelog: fastify/fastify-http-proxy@v11.6.1...v11.6.2

v11.6.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-http-proxy@v11.6.0...v11.6.1

Commits
  • 00b5a39 Bumped v11.6.2
  • 2dd5125 Merge commit from fork
  • 1399fd2 Bumped v11.6.1
  • a9faa4a fix: scope websocket upgrades to the proxy prefix (#475)
  • 0fb3257 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#481)
  • af4221f chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#480)
  • 30d9045 chore(.npmrc): add min-release-age
  • 5dcb1f0 chore: update dependabot.yml
  • 2def069 ci: pin actions to commit-hash
  • See full diff in compare view

Updates fastify from 5.12.1 to 5.12.4

Release notes

Sourced from fastify's releases.

v5.12.4

Fixed the fastify.js version mismatch.

Full Changelog: fastify/fastify@v5.12.2...v5.12.4

v5.12.2

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

Commits
  • 1690e35 Bumped v5.12.4
  • 1c991c4 Bumped v5.12.3
  • 942a2be Bumped v5.12.2
  • 853f6e2 test(validation): cover normalization and async branches
  • f02d8d4 fix(validation): do not unwrap async validator results
  • 93c239a fix: reject malformed URLs before custom 404 handlers
  • 7de6e81 fix(validation): compile boolean false request schemas
  • 179619c fix(validation): normalize header names in every schema subschema
  • dd2ba36 [Backport 5.x] chore: npm ignore remaining agent files (#7003)
  • e305d84 [Backport 5.x] fix: callNotFound should run not-found preHandler regardless o...
  • See full diff in compare view

Updates @eslint/eslintrc from 3.3.6 to 3.3.7

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.7

3.3.7 (2026-09-01)

Bug Fixes

  • Bump js-yaml to 4.3.1 (#239) (f27e7c9)
  • update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)
Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.7 (2026-09-01)

Bug Fixes

  • Bump js-yaml to 4.3.1 (#239) (f27e7c9)
  • update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)
Commits

Updates @jest/globals from 30.4.1 to 30.5.1

Release notes

Sourced from @​jest/globals's releases.

v30.5.1

Fixes

  • [jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)
  • [jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)
  • [jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)
  • [jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)
  • [jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

  • [jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

New Contributors

Full Changelog: jestjs/jest@v30.5.0...v30.5.1

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @​timkindberg (#16053):

const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
fn.whenCalledWith('banana').mockReturnValue('yellow');
fn.whenCalledWith(expect.any(Number)).mockReturnValue('numeric');
fn('apple'); // 'red'
fn('banana'); // 'yellow'
fn(42); // 'numeric'
fn('grape'); // undefined

The returned object is a real Mock, so mockReturnValueOnce, mockResolvedValue, mockImplementation etc. all chain here too. Argument slots accept literals or any asymmetric matcher, with the same equality semantics as toHaveBeenCalledWith(). Calls that match nothing fall through to the base mock. See the Mock Functions docs for matching and precedence details.

Describe-level retries

jest.retryTimes() can now retry a whole describe block instead of a single test, contributed by @​soltonigiri (#16322). Each attempt reruns the block's beforeAll/afterAll hooks, child tests and nested describes, which helps when tests in a block depend on shared state:

</tr></table>

... (truncated)

Changelog

Sourced from @​jest/globals's changelog.

30.5.1

Fixes

  • [jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)
  • [jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)
  • [jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)
  • [jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)
  • [jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

  • [jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

30.5.0

Features

  • [@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)
  • [@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)
  • [jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)
  • [jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (#16322)
  • [jest-circus, jest-message-util, jest-reporters, jest-types] Add retryMessages to AssertionResult and export formatErrorStack, so the retry log renders nested cause and AggregateError sections with code frames instead of serialized [cause]:/[errors]: markers (#16316)
  • [jest-circus, jest-types] Add unhandledErrorsDetailed to Circus.RunResult, so an unhandled rejection reports its cause chain and AggregateError entries with code frames instead of a pre-serialized stack (#16316)
  • [jest-haste-map] Replace NodeWatcher and FSEventsWatcher with @parcel/watcher for the non-watchman watch path (#16188)
  • [jest-resolve] Bump unrs-resolver to 1.12.1, remove jest-pnp-resolver and unnecessary checks (#15721)
  • [jest-resolve] Honor Node's --preserve-symlinks / NODE_PRESERVE_SYMLINKS in the default resolver by passing symlinks: false to unrs-resolver (#16260)
  • [jest-runtime] Apply automocking and manual __mocks__ files to synchronously evaluable ESM graphs on Node 24.9+ - static imports, dynamic import() and require() of an ESM file now generate an automock from the real module's namespace instead of failing with "Attempting to import a mock without a factory". Graphs that need async evaluation (top-level await) or an async-only resolver or transformer still throw (#16391)
  • [jest-runtime] Route process.getBuiltinModule through the sandbox, so it returns the sandbox process and the hooked node:module instead of the host's (#16391)
  • [jest-runtime] Throw an actionable error from module.register() and module.registerHooks() inside a test - the hooks attached to the loader running Jest itself, never saw the sandboxed requires they were meant for, and stayed registered for every later test file in the worker (#16391)
  • [jest-runtime] Surface resolution and import-attribute errors in an ESM graph before executing any of its CJS dependencies on Node 24.9+, matching Node's run-nothing-on-a-broken-graph behavior; the legacy loader on older versions keeps its linking-time execution order (#16391)
  • [jest-runtime] Throw ERR_SOURCE_PHASE_NOT_DEFINED with an actionable message for import source and import.source(), instead of failing at instantiation with V8's bare "Source phase import object is not defined" (#16391)
  • [jest-runtime] Emit the JSON-without-import-attribute deprecation warning once per test file instead of once per worker, so it is no longer silently swallowed for every file after the first (#16391)
  • [jest-runtime] Set import.meta.main to true in the test file and false in every module it loads, matching Node 24+ (#16367)
  • [jest-runtime] Resolve the module-sync export condition, so a package that exposes its ESM entry point for require() loads the same file Node would (#16336)
  • [jest-snapshot] Add external snapshot paths to custom reporter failure details (#16374)

Fixes

  • [jest-console, jest-reporters] CustomConsole now buffers console output so TestResult.console is populated for reporters when verbose is enabled, while GitHubActionsReporter avoids replaying buffered output in verbose mode (#16155)
  • [expect, jest-message-util, jest-pattern, jest-regex-util, jest-util] Revert node: protocol imports to restore webpack/browser-bundle compatibility (#16167)
  • [expect] Widen toMatchObject and objectContaining parameter type from Record<string, unknown> to object so class instances are accepted (#16196)
  • [jest-circus] Call a generator test body with the shared test context, so this matches what a regular test function receives (#16347)
  • [jest-circus] Capture the error listeners of the parent process instead of the in-sandbox process, so listeners registered before the test file survive teardown and sandbox listeners no longer leak onto the parent (#16347)
  • [jest-circus] Clear currentlyRunningTest after skipped and todo tests (#16342)
  • [jest-circus] Prevent late done() callbacks from affecting later test or hook invocations (#16343)
  • [jest-circus, jest-jasmine2] Honor --expand when formatting node:assert failures, instead of always collapsing the diff (#16347)
  • [jest-circus, jest-jasmine2, jest-message-util] Serialize the inner errors of an AggregateError into failureMessages, retryReasons and unhandledErrors, so --json output and reporter annotations include them (#16316)
  • [jest-circus, jest-snapshot] Keep snapshot state and counts correct when a test retries (#16344)
  • [@jest/create-cache-key-function] Include the caller support flags in the generated key, so a transformer that emits ESM or CJS based on them no longer shares one cache entry between the two (#16331)

... (truncated)

Commits

Updates @types/node from 26.1.2 to 26.5.1

Commits

Updates @typescript-eslint/eslint-plugin from 8.66.0 to 8.70.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

  • eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
  • website: generate per-page social preview cards (#12734)

🩹 Fixes

  • use stable release of pnpm 12 (#12808)
  • update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
  • eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
  • eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
  • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
  • project-service: avoid discarded tsserver logs (#12748)
  • typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

  • eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

  • eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
  • eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
  • eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
  • website: respect allowJs playground config (#12744)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.70.0 (2026-09-07)

🚀 Features

  • eslint-plugin: [no-generated-empty-object-type] add rule (#12730)

🩹 Fixes

  • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
  • eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
  • eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

🚀 Features

  • eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

  • eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
  • eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
  • eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)

... (truncated)

Commits
  • 7ee7608 chore(release): publish 8.70.0
  • f66bdca test(eslint-plugin): [member-ordering] use RuleTester directly in `optional...
  • 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
  • f8e1e4e fix(eslint-plugin): [no-unnecessary-condition] no false positive on RHS of a ...
  • 889cece fix(eslint-plugin): [member-ordering] don't report fields that read fields de...
  • 1a5a8b1 feat(eslint-plugin): [no-generated-empty-object-type] add rule (#12730)
  • 9a6e546 chore(release): publish 8.69.0
  • 513638e fix(eslint-plugin): [no-meaningless-void-operator] report void on non-call ex...
  • 1dba4c5 chore(eslint-plugin): fix eslint-plugin/require-test-error-positions report...
  • a2fccae fix(eslint-plugin): [unified-signatures] compare type parameters by constrain...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.66.0 to 8.70.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

  • eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
  • website: generate per-page social preview cards (#12734)

🩹 Fixes

  • use stable release of pnpm 12 (#12808)
  • update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
  • eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
  • eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
  • eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
  • project-service: avoid discarded tsserver logs (#12748)
  • typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

  • eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

  • eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
  • eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
  • eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
  • website: respect allowJs playground config (#12744)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.70.0 (2026-09-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint from 10.8.0 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
  • 2c7f5d6 chore: update github/code...

    Description has been truncated

@dependabot
Bump the dependencies group in /processor with 14 updates
1d9be9b 
Bumps the dependencies group in /processor with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [@commercetools-backend/loggers](https://github.com/commercetools/merchant-center-application-kit/tree/HEAD/packages-backend/loggers) | `27.9.0` | `27.9.6` |
| @commercetools/connect-payments-sdk | `1.2.0` | `1.2.2` |
| [@fastify/http-proxy](https://github.com/fastify/fastify-http-proxy) | `11.6.0` | `11.6.2` |
| [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.4` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.6` | `3.3.7` |
| [@jest/globals](https://github.com/jestjs/jest/tree/HEAD/packages/jest-globals) | `30.4.1` | `30.5.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.2` | `26.5.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.66.0` | `8.70.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.66.0` | `8.70.0` |
| [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.10.0` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.16.0` | `29.16.6` |
| [globals](https://github.com/sindresorhus/globals) | `17.9.0` | `17.12.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.3` | `5.4.2` |


Updates `@commercetools-backend/loggers` from 27.9.0 to 27.9.6
- [Release notes](https://github.com/commercetools/merchant-center-application-kit/releases)
- [Changelog](https://github.com/commercetools/merchant-center-application-kit/blob/main/packages-backend/loggers/CHANGELOG.md)
- [Commits](https://github.com/commercetools/merchant-center-application-kit/commits/v27.9.6/packages-backend/loggers)

Updates `@commercetools/connect-payments-sdk` from 1.2.0 to 1.2.2

Updates `@fastify/http-proxy` from 11.6.0 to 11.6.2
- [Release notes](https://github.com/fastify/fastify-http-proxy/releases)
- [Commits](fastify/fastify-http-proxy@v11.6.0...v11.6.2)

Updates `fastify` from 5.12.1 to 5.12.4
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.1...v5.12.4)

Updates `@eslint/eslintrc` from 3.3.6 to 3.3.7
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](eslint/eslintrc@eslintrc-v3.3.6...eslintrc-v3.3.7)

Updates `@jest/globals` from 30.4.1 to 30.5.1
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/jest-globals)

Updates `@types/node` from 26.1.2 to 26.5.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.66.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.66.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/parser)

Updates `eslint` from 10.8.0 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.0...v10.10.0)

Updates `eslint-plugin-jest` from 29.16.0 to 29.16.6
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v29.16.0...v29.16.6)

Updates `globals` from 17.9.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.9.0...v17.12.0)

Updates `jest` from 30.4.2 to 30.5.1
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/jest)

Updates `js-yaml` from 5.2.3 to 5.4.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.3...5.4.2)

---
updated-dependencies:
- dependency-name: "@commercetools-backend/loggers"
  dependency-version: 27.9.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@commercetools/connect-payments-sdk"
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@fastify/http-proxy"
  dependency-version: 11.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fastify
  dependency-version: 5.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@jest/globals"
  dependency-version: 30.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-plugin-jest
  dependency-version: 29.16.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jest
  dependency-version: 30.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: js-yaml
  dependency-version: 5.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants