[dependabot]

Bumps the minor-and-patch group with 10 updates in the / directory:

Package	From	To
@astrojs/sitemap	3.7.3	3.7.4
astro	7.2.9	7.4.0
@secretlint/secretlint-rule-preset-recommend	13.0.5	13.0.7
@types/bun	1.4.0	1.4.3
chrome-launcher	1.2.1	1.2.2
knip	6.33.0	6.41.0
lighthouse	13.4.1	13.5.0
oxlint	1.80.0	1.88.0
prettier	3.9.6	3.9.10
secretlint	13.0.5	13.0.7

Updates @astrojs/sitemap from 3.7.3 to 3.7.4

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/sitemap@​3.7.4

Patch Changes

• #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"

Changelog

Sourced from @​astrojs/sitemap's changelog.

3.7.4

Patch Changes

• #17851 52d3f56 Thanks @​astro-factory! - Fixes the sitemap outputting a URL with an empty path for the homepage (e.g. https://example.com instead of https://example.com/) when trailingSlash is set to "never" or build.format is set to "file"

Commits

• 2fdf731 [ci] release (#17849)
• 52d3f56 fix(@​astrojs/sitemap): preserve root path / in sitemap URLs when trailingSl...
• 2bfb179 chore: simpler package.json types (#17229)
• See full diff in compare view

Updates astro from 7.2.9 to 7.4.0

Release notes

Sourced from astro's releases.

astro@7.4.0

Minor Changes

• #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

  When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

  astro build --timings

  This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

  Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

  All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

  import type { FontProvider } from 'astro';
  const provider: FontProvider = {
  name: 'my-provider',
  resolveFont: ({ familyName }) => {
  // ...
  },
  getFontProperties: ({ familyName }) => ({
  weights: ['400', '700'],
  styles: ['normal', 'italic'],
  subsets: ['latin'],
  formats: ['woff2'],
  }),
  };

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

  This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

  import type { FontProvider } from 'astro';
  import type { InitializedProvider } from 'unifont';
  import { acmeProvider } from '@acme/unifont-provider';
  export function acmeFontProvider(): FontProvider {
  const provider = acmeProvider();
  let initializedProvider: InitializedProvider | undefined;
  return {
  name: provider._name,

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.0

Minor Changes

• #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

  When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

  astro build --timings

  This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

  Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

  All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

  import type { FontProvider } from 'astro';
  const provider: FontProvider = {
  name: 'my-provider',
  resolveFont: ({ familyName }) => {
  // ...
  },
  getFontProperties: ({ familyName }) => ({
  weights: ['400', '700'],
  styles: ['normal', 'italic'],
  subsets: ['latin'],
  formats: ['woff2'],
  }),
  };

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

  This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

  import type { FontProvider } from 'astro';
  import type { InitializedProvider } from 'unifont';
  import { acmeProvider } from '@acme/unifont-provider';
  export function acmeFontProvider(): FontProvider {
  const provider = acmeProvider();
  let initializedProvider: InitializedProvider | undefined;
  return {

... (truncated)

Commits

• c2c43a9 [ci] release (#18354)
• f698e18 fix(astro): ignore image.service overrides with only undefined values (#18383)
• 83f5f4d Update dependency vite to ^8.3.4 (#18393)
• 858938a Update astro (#18390)
• 1f04637 feat: use tinyps for process finding (#18368)
• c96d07e Update dependency preact to v11 (#18389)
• f8cf143 Update dependency rolldown to ^1.2.13 (#18388)
• 5c48d3b Update dependency devalue to v6 (#18385)
• 71e2b24 feat: treat Vite's resolved outDir values as the source of truth for build ou...
• a937b0d feat(fonts): warn on invalid properties (#17830)
• Additional commits viewable in compare view

Updates @secretlint/secretlint-rule-preset-recommend from 13.0.5 to 13.0.7

Release notes

Sourced from @​secretlint/secretlint-rule-preset-recommend's releases.

v13.0.7

What's Changed

Bug Fixes

• fix(binary): respect --cwd and existing config in --init by @​azu in secretlint/secretlint#1709
• fix(config-loader): keep package name as is when baseDirectory is empty by @​azu in secretlint/secretlint#1710

CI

• Update rhysd/github-action-benchmark action to v1.22.2 by @​renovate[bot] in secretlint/secretlint#1693
• Update Minor updates by @​renovate[bot] in secretlint/secretlint#1690
• CI: wait for npm packages before building Docker image by @​azu in secretlint/secretlint#1697
• Update github/codeql-action action to v3.38.1 by @​renovate[bot] in secretlint/secretlint#1700
• Update github/codeql-action action to v3.38.2 by @​renovate[bot] in secretlint/secretlint#1705

Dependency Updates

• Update Patch updates (patch) by @​renovate[bot] in secretlint/secretlint#1689
• Update dependency ignore to ^7.0.10 by @​renovate[bot] in secretlint/secretlint#1698
• Update dependency turbo to ^2.11.3 by @​renovate[bot] in secretlint/secretlint#1699
• Update dependency rollup to ^4.63.5 by @​renovate[bot] in secretlint/secretlint#1701
• Update dependency turbo to ^2.11.4 by @​renovate[bot] in secretlint/secretlint#1702
• Update dependency turbo to ^2.11.5 by @​renovate[bot] in secretlint/secretlint#1704
• Update pnpm to v10.34.6 by @​renovate[bot] in secretlint/secretlint#1706

Full Changelog: secretlint/secretlint@v13.0.6...v13.0.7

v13.0.6

What's Changed

Bug Fixes

• fix(secretlint): do not follow symlinks while searching files by @​azu in secretlint/secretlint#1694

CI

• Update docker/setup-buildx-action action to v4.3.0 by @​renovate[bot] in secretlint/secretlint#1675
• Update github/codeql-action action to v3.37.8 by @​renovate[bot] in secretlint/secretlint#1677
• Update github/codeql-action action to v3.37.9 by @​renovate[bot] in secretlint/secretlint#1686
• ci(docker): suppress hadolint DL3064 false positives by @​azu in secretlint/secretlint#1695

Dependency Updates

• Update dependency picomatch to ^4.0.7 by @​renovate[bot] in secretlint/secretlint#1676
• Update dependency rollup to ^4.63.0 by @​renovate[bot] in secretlint/secretlint#1678
• Update dependency turbo to ^2.10.12 by @​renovate[bot] in secretlint/secretlint#1679
• Update dependency js-yaml to ^4.3.2 by @​renovate[bot] in secretlint/secretlint#1680
• Update dependency p-map to ^7.0.7 by @​renovate[bot] in secretlint/secretlint#1682
• Update dependency rollup to ^4.63.1 by @​renovate[bot] in secretlint/secretlint#1683
• Update dependency tsx to ^4.23.13 by @​renovate[bot] in secretlint/secretlint#1684
• Update dependency ignore to ^7.0.7 by @​renovate[bot] in secretlint/secretlint#1685
• Update dependency ignore to ^7.0.8 by @​renovate[bot] in secretlint/secretlint#1687

Full Changelog: secretlint/secretlint@v13.0.5...v13.0.6

Commits

• 333c530 v13.0.7 (#1711)
• 656ddca fix(config-loader): keep package name as is when baseDirectory is empty (#1710)
• c2e3ee6 fix(binary): respect --cwd and existing config in --init (#1709)
• a18c351 Update pnpm to v10.34.6 (#1706)
• 6ee88a9 Update github/codeql-action action to v3.38.2 (#1705)
• c70c722 Update dependency turbo to ^2.11.5 (#1704)
• 0001184 Update dependency turbo to ^2.11.4 (#1702)
• 9830d0c Update dependency rollup to ^4.63.5 (#1701)
• 4737d68 Update github/codeql-action action to v3.38.1 (#1700)
• 904ee8b Update dependency turbo to ^2.11.3 (#1699)
• Additional commits viewable in compare view

Updates @types/bun from 1.4.0 to 1.4.3

Commits

• See full diff in compare view

Updates chrome-launcher from 1.2.1 to 1.2.2

Release notes

Sourced from chrome-launcher's releases.

v1.2.2 (Tue, Sep 29 2026)

• 8f032f9b Use --remote-debugging-port=0 and fs.mkdtempSync (#366)
• Fix Windows EPERM error on process teardown in destroyTmp() (#355)
• Migrate tests to Node's native node:test runner, dropping mocha and ts-node
• 259e5240 release: add npm trusted publishing workflow and normalize repository

Changelog

Sourced from chrome-launcher's changelog.

v1.2.2 (Tue, Sep 29 2026)

• 8f032f9b Use --remote-debugging-port=0 and fs.mkdtempSync (#366)
• Fix Windows EPERM error on process teardown in destroyTmp() (#355)
• Migrate tests to Node's native node:test runner, dropping mocha and ts-node
• 259e5240 release: add npm trusted publishing workflow and normalize repository

Commits

• c08bf35 1.2.2
• 259e524 release: add npm trusted publishing workflow and normalize repository
• 8f032f9 Use --remote-debugging-port=0 and fs.mkdtempSync (#366)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chrome-launcher since your current version.

Updates knip from 6.33.0 to 6.41.0

Release notes

Sourced from knip's releases.

Release 6.41.0

• Add Flue plugin (#2124) (c52737d45ff008d6d96d4c2d4182048a2aa64602) - thanks @​LuisFigueroaG!
• Match all React Native config file extensions (#2125) (898fdffb37ae0bdb3d2653038eb10c2e01edf983) - thanks @​LuisFigueroaG!
• Consolidate fixture guidance and extend plugin guidelines (37a4ca04645f71f599e9b530676543f9893bd641)
• Add AI contribution policy (b15f0fbb090ea0427240880da2bec602c11cea50)
• Use files from tsconfig references with --use-tsconfig-files (#2126) (9618185eafb0c5cb365035f89e9d66718642338a) - thanks @​kaanisthatyou!
• Compile gitignore walk patterns once (resolve #2127) (09c80299779fa5abe133ee8f82051c25870007b8)
• Drop readdir order dependent case from gitignore walk test (ab3da8ff95a05a0fbfba6873b64559017d038aa7)
• fix: recognize binaries from absent optional dependencies (#2120) (d908556eaa98bf9637a2744d2de089bab31b8dbc) - thanks @​DreamLongYT!
• Apply a directory's .gitignore before walking its subdirectories (9560c07862d4c72dc956371b9a77e049d83ed4a9)
• Apply nested .gitignore files to workspace globs (23d35421dd67c405254f2f8bcbc09b18d224e338)
• Update gitignore matcher and walk notes (499f85f4544457dc7c51c4a7612fea69773ef3dd)
• Keep the cwd out of glob patterns and matchers (#2107) (1e82fb807c88cc46951f2028214569f9a2eb0061) - thanks @​kaanisthatyou!
• Support function configs in Rsbuild plugin (#2122) (38071db87e9023e5dd61173ce32f9020a1a5d7ff) - thanks @​bytedoe!
• Separate Expo Router plugin; remove expo-router entry points from Expo plugin (#2128) (ad541764ca7d3c062236661677d1d66d5275122f) - thanks @​jjjjonathan!
• Link Expo config discovery source and fold expo6 fixture into expo-router (2ddeca50956790b10580e835df50bc980cce961d)
• Update dependencies (c9f79148f7165314a7b3c801eff926d1d0d6b060)
• Migrate shell script parsing to unbash v5 (4942cca05303410120a007a5bb23b0c2da725da1)
• Handle updated Formatly result types (ca9e8315e003dae69646f7500fa98ab9ed403b92)
• Preserve TypeScript 5.0 compatibility in shell AST filters (957ac7bbd654f6d3d0c4dc4eab2f4aa133ff0b4b)
• Point timerify crashes to the Node.js version that fixes them (0c235de096fd3361eb918d1290241fa32a62f089)
• Copy importer identifier sets into the reverse index (2860d678a87dddb5ad56299119fb6e108ceffa12)
• Clear the resolver cache at the start of a run (10b5bb82ecd03c88b68ace58a7aea23d188cc5f1)

Release 6.40.0

• Resolve local and scope-only extends in commitlint plugin (#2079) (e667552d4e7122094565d3ad9ae407acfc0ac684) - thanks @​giaBaoJS!
• Clarify worktree guides and plugin review preparation (dd02baf020d23af1d47c44c1a726a61014b270bd)
• Document stale cache results and workarounds (#2078) (3573749a5d5bbee6305f207cc7d1b72c200c8c9b)
• Exclude test files from package entries in production mode (resolve #2082) (b86f45f9d38d4b83baad98e43983e08910e00c78) - thanks @​jonathanong!
• Resolve Serverless file variables in plugins and functions (resolve #2074) (99cac789694ea8d76cd38184d2d7c95f34315224) - thanks @​SwastikTripathi!
• Preserve locally referenced namespace members (resolve #2070) (f0f36df766cd74ad7ae03fbf8940bdeb792439be) - thanks @​MFA-G!
• fix: add the commitlint-plugin prefix to Commitlint plugin names (#2096) (3decd35ff0a4220c7cd2c9142dc69c89794b3927) - thanks @​devYRPauli!
• fix: match .mjs config files in the simple-git-hooks plugin (#2097) (79a87d92396c2444ae4ef3c780c0d2e18cd73e4c) - thanks @​devYRPauli!
• fix: match capacitor.config.js in the Capacitor plugin (#2098) (4a5ec96d818117a7f2eafa027e3b707bc97573a8) - thanks @​devYRPauli!
• fix(typescript): ArrayExpression (#2099) (#2100) (87fea9f201c2fd864eafa31bdad68910a8a177ba) - thanks @​DreamLongYT!
• Preserve development entry pattern groups (7c229f4e1918075d801ed3b046fa022b1d3bcc41)
• Resolve null package exports to the files they hide (resolve #2084, close #2085) (5bd46260feb60b957c2631bc72375ef192e441e0)
• Pin InvokeAI ecosystem test (4e0a3432eb35e3f628f6d3b7fcd14b942de343d0)
• fix(utils): add jsx extension to source mapping (#2087) (eaa353b5fc30c2f12cdf2c29e6dd68e0d0950062) - thanks @​DreamLongYT!
• fix(serverless-framework): handle explicit extensions in handler paths (#2091) (e9393965be7563640921e3f20c946fcb9132e1cb) - thanks @​DreamLongYT!
• Annotate published manifest return type (d95a8310a0d0dca8f23d8dd3f83e7b0a1909d038)
• Add Jasmine plugin (#2105) (9ed14911d5c5752aef36878ab3d515c35d1ac6bc) - thanks @​SulimanAbdulrazzaq!
• fix: resolve workspace exports with fallback arrays (#2088) (49c2aaeaba4544f25cc02c19d5da5152a8ef68c3) - thanks @​DreamLongYT!
• fix(postcss): ignore disabled plugins in object configs (#2092) (b84fdf8a8ee676ee45f4313009ebfe969d034a88) - thanks @​DreamLongYT!
• Resolve webServer commands in Playwright plugin (#2110) (1af96bce36b0d0d07791de100c7f2ea5672a478c) - thanks @​everton-dgn!
• Cache config file inputs per plugin (#2109) (01cb43267ca5dc03a2cbcba0a19fd891d4ed1f37) - thanks @​everton-dgn!
• fix: include custom compiler extensions in source path mapping (#2090) (dc3a47e2d810808314454b8f5c23070f136d15d3) - thanks @​DreamLongYT!
• Don't let a self-closing swallow the next (#2113) (989fdadde0a068d1d1c52e26a8327b99c5de0668) - thanks @​maniflopi!
• fix(oxlint): resolve lint from loaded Vite config (#2108) (6d44e532ed6320cdf4f4c3253b26e155c4d26ba7) - thanks @​everton-dgn!
• fix: resolve Jest module names without the jest-* prefix (#2095) (a5f4cfbff7f263a0ea8d5461a3f9216cbef38602) - thanks @​devYRPauli!

... (truncated)

Commits

• 13d7f21 Release knip@6.41.0
• 10b5bb8 Clear the resolver cache at the start of a run
• 2860d67 Copy importer identifier sets into the reverse index
• 0c235de Point timerify crashes to the Node.js version that fixes them
• 957ac7b Preserve TypeScript 5.0 compatibility in shell AST filters
• ca9e831 Handle updated Formatly result types
• 4942cca Migrate shell script parsing to unbash v5
• c9f7914 Update dependencies
• 2ddeca5 Link Expo config discovery source and fold expo6 fixture into expo-router
• ad54176 Separate Expo Router plugin; remove expo-router entry points from Expo plugin...
• Additional commits viewable in compare view

Updates lighthouse from 13.4.1 to 13.5.0

Release notes

Sourced from lighthouse's releases.

v13.5.0

Full Changelog

We expect this release to ship in the DevTools of Chrome 156, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• NickNojiri @​NickNojiri
• Alina Varkki @​AlinaVarkki

New Audits

• ard-schema: add Agent Resource Discovery audit (#17168)

Core

• centralize and enforce plugin category validation (#17243)
• add plugin version to LHR credits (#17232)
• config: group llms.txt and ARD audits under agent discovery (#17210)
• deprecations: handle new column offset (#17234)
• fetcher: add response header capture support (#17167)
• gather: fix broken cycle detection in recurse functions (#17173)
• user-flow: support aborting pending navigations (#17067)
• webmcp-form-coverage: pass instead of n/a when all forms covered (#17242)
• webmcp-registered-tools: warn when exceeding recommended limit (#17221)

Report

• display plugins in footer (#17125)
• sanitize entity homepage URLs (#17178)

Deps

• upgrade deps (#17245)
• upgrade deps (#17206)

Clients

• lightrider: export bundle w/ cjs compat (#17161)
• lr: split locales out of bundle (#17149)

I18n

• import (#17241)

Tests

• fix dbw expectation to exclude period (#17246)

... (truncated)

Changelog

Sourced from lighthouse's changelog.

13.5.0 (2026-09-17)

Full Changelog

We expect this release to ship in the DevTools of Chrome 156, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

• NickNojiri @​NickNojiri
• Alina Varkki @​AlinaVarkki

New Audits

• ard-schema: add Agent Resource Discovery audit (#17168)

Core

• centralize and enforce plugin category validation (#17243)
• add plugin version to LHR credits (#17232)
• config: group llms.txt and ARD audits under agent discovery (#17210)
• deprecations: handle new column offset (#17234)
• fetcher: add response header capture support (#17167)
• gather: fix broken cycle detection in recurse functions (#17173)
• user-flow: support aborting pending navigations (#17067)
• webmcp-form-coverage: pass instead of n/a when all forms covered (#17242)
• webmcp-registered-tools: warn when exceeding recommended limit (#17221)

Report

• display plugins in footer (#17125)
• sanitize entity homepage URLs (#17178)

Deps

• upgrade deps (#17245)
• upgrade deps (#17206)

Clients

• lightrider: export bundle w/ cjs compat (#17161)
• lr: split locales out of bundle (#17149)

I18n

• import (#17241)

Tests

• fix dbw expectation to exclude period (#17246)

... (truncated)

Commits

• cb853a3 v13.5.0 (#17248)
• 6885c24 deps: upgrade deps (#17245)
• 9d9682d core(user-flow): support aborting pending navigations (#17067)
• 3e07160 tests: fix dbw expectation to exclude period (#17246)
• 5019225 report: display plugins in footer (#17125)
• 912e85f core(webmcp-registered-tools): warn when exceeding recommended limit (#17221)
• dd962db core: centralize and enforce plugin category validation (#17243)
• f1c0ce6 core(webmcp-form-coverage): pass instead of n/a when all forms covered (#17242)
• 97a0910 i18n: import (#17241)
• 7d21d0b core(deprecations): handle new column offset (#17234)
• Additional commits viewable in compare view

Updates oxlint from 1.80.0 to 1.88.0

Release notes

Sourced from oxlint's releases.

oxlint v1.88.0

💥 BREAKING CHANGES

• 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
• c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)

🚀 Features

• bde9f69 oxlint/lsp: Show config errors to LSP client (#25486) (Sysix)
• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

🐛 Bug Fixes

• 82ecc43 linter/sort-keys: Compare natural order like ESLint (#27579) (Dunqing)
• 598ac03 linter/unicorn/prefer-bigint-literals: Unwrap redundant constructor call; don't auto-fix for lost precision (#25690) (Jacob Bandes-Storch)
• 2512213 linter: Prevent conflicting type import fixes (#27409) (camc314)
• 2349a31 oxfmt: Follow symlinked configs in discovery (#27389) (leaysgur)
• 6e573f9 oxlint,oxfmt: Set stderr blocking (#27363) (leaysgur)

⚡ Performance

• 91b588c linter/oxc/bad-array-method-on-arguments: Check arguments references once (#26930) (camc314)
• c5f47ed linter/plugins: Inline firstCommentAtOrAfter into call sites (#27539) (overlookmotel)
• c5f9235 linter/plugins: Use shift over multiply for powers of 2 (#27536) (overlookmotel)
• 8c57c5e linter: Share one source per file across type-aware diagnostics (#27462) (Max Schwenk)
• 19c227d minifier: Use ident when checking specific id names (#27208) (Armano)

📚 Documentation

• 98cc2b4 linter/plugins: Improve documentation for firstCommentAtOrAfter (#27538) (overlookmotel)
• 3bb54f6 linter: Update stale comment (#27519) (overlookmotel)
• 848a4e7 linter: Update fix metadata for tsgolint rules that already provide fixes (#27408) (Mikhail Baev)

oxlint v1.87.0

🚀 Features

• 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)
• cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)
• 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

• 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)
• 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)
• 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)
• 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)
• e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)
• 3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)
• f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)
• 7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.88.0] - 2026-10-13

🚀 Features

• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

• 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
• e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

• 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

• d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

• 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

• 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
• aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
• 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
• beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
• 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
• 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
• 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

• ccb8fe8 linter/jsdoc: Implement no-blank-blocks rule (#25207) (Mikhail Baev)
• d4a897c linter/eslint: Implement one-var rule (#24470) (Cole Ellison)
• 5ab9340 linter/jsx-a11y/anchor-has-content: Add options to match eslint (#24571) (Cole Ellison)

🐛 Bug Fixes

... (truncated)

Commits

• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• 3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
• 9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
• e05b155 feat(linter): add typescript/no-generated-empty-object-type (#26958)
• 88a0096 chore(oxlint): require tsgolint 7.0.2003 (#27021)
• 288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
• f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
• 7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
• Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

• Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

... (truncated)

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bfDescription has been truncated