chore(deps): update devdependencies (non-major) (minor)

[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@quobix/vacuum (source)	0.26.8 → 0.33.0
@types/node (source)	24.12.4 → 24.19.2
@types/pg (source)	8.20.4 → 8.23.1
@typescript-eslint/eslint-plugin (source)	8.59.4 → 8.71.2
@typescript-eslint/parser (source)	8.59.4 → 8.71.2
pino-pretty	13.1.3 → 13.2.0
prettier (source)	3.8.5 → 3.9.10
y-websocket	3.0.0 → 3.1.0

---

Release Notes

daveshanley/vacuum (@​quobix/vacuum)

v0.33.0

Compare Source

Changelog

• 4384b03 Add Spectral-compatible or core function
• 851e42b Add native Arazzo validation and configurable lint rules
• ef60d39 Align core result paths with their Doctor models
• a1c9142 Allow Arazzo built-in rules to be enabled individually
• d4979d0 Announce v0.33 Arazzo and or support in README
• df72e49 Correct Princess Beef copyright dates
• ae89846 Enable Arazzo linting across commands reports and editor diagnostics
• b5c42f9 Fix AsyncAPI schema rule validation options
• 08de2f5 Keep external source labels and snippets in one report slot
• 810908c Preserve Arazzo paths after shared lookup changes
• b44dba2 Preserve Arazzo source context across lint and report boundaries
• d60e3d4 Preserve rejection of unsupported core option maps
• 852872f Record the direct HTML parser test dependency
• d9df352 Reject empty comma-separated or property names
• a0c7cf1 Share lazy node path indexes across rule execution
• 9a77754 docs(owasp): clarify upgrade behavior and simplify lint guidance
• e2c64f6 feat: reject unsafe OAuth flows and authentication URLs
• a7b225d fix(owasp): isolate OAuth flow checks and preserve finding ownership
• e415eb6 fix: check HTTPS across server overrides and variables
• 3c15d67 fix: check webhook and callback server transport
• cbdc1b9 fix: distinguish request object closure from map size limits
• 16bc4c1 fix: honor ancestor ignores for nested OAuth findings
• 4db724c fix: tighten write security and scope JWT documentation checks
• 35c425b refactor(owasp): share schema checks and cache composition targets

v0.32.0

Compare Source

Changelog

• c8575b6 Add execution cancellation and concurrency controls with isolated auto-fixes
• f84d230 Add overlay tag filtering and safe unused component pruning
• 4390113 Document auto-fix gate and publication protocol
• bd3f0e1 Preserve YAML presentation and share publication transform preparation
• bb8d345 Preserve publication references across examples aliases and filtered paths
• 62289f1 Preserve reusable execution configs and simplify cancellation lifecycle
• 09bc187 Preserve split-reference and recursive-schema regression coverage
• 4cc3e1d Report custom function loading failures once with accurate guidance
• 3d111cf Report invalid custom function files and flag-shaped paths
• f6ee9a0 Use shared Viper environment configuration for command flags

v0.31.0

Compare Source

Changelog

• 957c730 Attach component name findings to Doctor without rescanning keys
• c4515a0 Bound direction traversal for programmatic schema cycles
• c6c20ab Build the sample plugin with the host dependency graph
• 051f196 Classify OWASP limits by schema identity and request usage
• 0a1cce7 Cover execution timeouts across formats and JavaScript batch calls
• 67f9e6f Expand rule message templates in the shared function result path
• 1865bb7 Explain unsupported Spectral rulesets and native OWASP migration
• 4becce0 Follow reference targets with sibling schema keywords
• de3013f Index schema directions once for OWASP limit rules
• 4cc49c7 Isolate built-in rulesets and preserve HTTP-prefixed local paths
• 21c45bd Keep custom function targets when rendering message templates
• c8613ff Keep parent ruleset paths during dashboard reloads
• 59473ec Keep remote ruleset references separate from filesystem paths
• ad534fa Match equivalent JSONPath forms in wildcard ignores
• 7980dfd Preserve Doctor messages and quoted keys in rule templates
• 1c3c78b Preserve invalid ruleset errors after workspace lookup failures
• 0d05ca5 Preserve plain messages and index custom result value lookups
• 1a639a6 Preserve ruleset errors across library action forms and reports
• e8a4fdf Preserve severity behavior for Markdown summary callers
• 6bbb0fb Publish rule completion after releasing worker ownership
• 4e20d47 Publish ruleset configuration failures as editor diagnostics
• 5f0c365 Recognize string values in propertyNames schema checks
• cc87b20 Reject incomplete rulesets after extension loading fails
• ddb622a Reject unknown functions before rule execution
• 9823772 Report missing and invalid CLI flag values
• 975c420 Report threshold failures in pipeline summaries including hints
• fb17f6e Resolve extended rulesets relative to their containing document
• c78036d Resolve remote ruleset children after redirects and preserve URL queries
• cda9a7b Retain serialization for shared schema rendering
• 49778fa Reuse template indexes and skip unused message context work
• c279472 Scope schema validation caches to each rule action
• 6f43f2a Share lazy schema directions and remove repeated result processing
• 5d22d7f Simplify migration diagnostics and consolidate CLI process tests
• 9633d73 Upgrade Doctor to v0.0.83 and remove upstream JSON Schema
• f0fde4d Upgrade pb33f libraries and migrate schema and YAML forks
• e3679a8 Use execution decoding for all rule action maps
• 5891ba6 Use the lint outcome for the displayed summary status
• 2fea9fd Use validated LSP fallback on the first configuration RPC failure
• b1a36ad Validate component names and report their document locations
• 95542af Validate ruleset editor buffers without hiding API or tool errors
• 124d906 fix: carry per-rule timeout in the rule context instead of mutating JS functions

v0.30.6

Compare Source

Changelog

• 29e96e9 refactor: migrate to github.com/go-viper/mapstructure/v2

v0.30.5

Compare Source

Changelog

• ab820b5 upgrade the upgradeables.

v0.30.4

Compare Source

Changelog

• 1403fd0 Merge pull request #​972 from daveshanley/sec-updates
• 4dfa37d chore: bump Go and npm dependencies for security updates
• b76fecf fix go.sum

v0.30.3

Compare Source

Changelog

• cd50957 Merge branch 'main' into feat/githubAnnotations
• 7362dab Merge pull request #​920 from andreyyudin/feat/githubAnnotations
• 5a2f765 Merge remote-tracking branch 'origin/main' into feat/githubAnnotations
• b475f89 Merge remote-tracking branch 'origin/main' into tmp-merge-test
• 76cceb9 feat: add GitHub Actions annotations support to lint command
• 07bb868 feat: enhance GitHub Actions annotations handling for error reporting in lint commands
• 2d352d5 feat: enhance GitHub Actions annotations handling for workspace paths and debug output suppression
• fc1e9d0 feat: enhance GitHub Actions annotations with range support and options
• 587b1ee feat: improve GitHub Actions annotations handling for error reporting and multi-file support
• 58d3874 fix lint github-annotations output for mixed failures and annotation-only mode
• 8da3a8a fix(lint): honour github-annotations contract in single-file and chrome paths
• f84f968 fix(lint): propagate ignore-file and custom-function loader errors
• 57b4530 fix: enhance GitHub Actions annotations for error reporting and handling in lint command

v0.30.2

Compare Source

Changelog

• ddeac11 Read version from the package's own package.json in postinstall

v0.30.1

Compare Source

Changelog

• 488a197 chore: upgrade doctor to v0.0.80
• d2165e5 feat: add family-aware docs diagnostics
• bfe78c3 fix: fingerprint built-in docs rulesets
• b91b97f fix: make lint resource release concurrency-safe

v0.30.0

Compare Source

Changelog

• f20f952 Address #​934
• dfbf6da add deps script
• d8fbb52 address security review
• e451300 addressing security review
• 0dcf034 more tuning
• dcef773 replace LSP server with self rolled one.
• 63f2436 some tuning
• 328ff25 use Spectral-compatible JSONPath for rule given selectors
• 80a608e we now have our own built in LSP server!

v0.29.10

Compare Source

Changelog

• 3d921ac Add new doctor AsyncAPI capabilities!
• 45b301a Bump github.com/alecthomas/chroma/v2 from 2.26.1 to 2.27.0
• 013b3a4 Fix #​925
• c4cbd4d Fix issue #​930
• ed2f814 Merge pull request #​931 from daveshanley/issue-930
• 7f1c6e1 Merge remote-tracking branch 'origin/main' into issue-930
• c4c9c59 Sign release checksums with cosign
• 9fa82c9 address #​933 and dep upgrade
• eee2fc5 fix CI
• 2427269 phix the CI again
• 3f6db4f remove report card

v0.29.9

Compare Source

Changelog

• 75c9453 case-insensitive category matching and warn when --fix applies no fixes

v0.29.8

Compare Source

Changelog

• b6b025f Fix #​919: isolate concurrent schema and example validation from shared model mutation
• 4926612 remove scratch file

v0.29.7

Compare Source

Changelog

• 5407bb1 Fix #​916: isolate schema validation from shared model mutation
• 0312640 go.sum fix

v0.29.6

Compare Source

Changelog

• 0b77a48 Address issue #​914
• 7a5063d more speed tunes
• dc3a918 trying to speed up disk cleanup
• 92e8677 trying to speed up the test run

v0.29.5

Compare Source

Changelog

• 005640d bump the deps
• 7e2f9d0 deps!
• bf6d661 fix missed race condition.

v0.29.4

Compare Source

Changelog

• 8b036cb fix(oas_schema): use validator document errors instead of custom marshal check

v0.29.3

Compare Source

Changelog

• b25fda8 bump deps
• e8409ac bump those deps!
• eae83a5 deps: bump libopenapi to v0.38.0 and adapt rules to lazy schema cache
• b23932b fixed flags broken on tests
• 813e04f migrate to forked testify
• 2272767 refactor original-spec diffing and skip relint for identical specs
• 34ff93d tests are flaking, hardening them
• 92ef447 working through flaky tests

v0.29.2

Compare Source

Changelog

• c14a4a9 fix(motor): avoid broad component alias reconciliation
• 47c5aac fix(motor): honor GOMAXPROCS for rule execution concurrency

v0.29.1

Compare Source

Changelog

• f4a45ca Bump github.com/alecthomas/chroma/v2 from 2.24.1 to 2.26.1
• 93e9b2e Bump github.com/pb33f/libopenapi-validator from 0.13.7 to 0.13.8
• 7360c06 add permissions.
• 3f9cc52 fix(motor): include sibling component uses in nested reference alias paths
• 925c673 removed dead file

v0.29.0

Compare Source

Changelog

• 21d3564 add AsyncAPI 3.x linting support
• cac3f39 updated docs and help to add in new AsyncAPI support.
• 343544c updated readme
• 93e337a upgraded libopenapi and upgrade code.

v0.28.4

Compare Source

Changelog

• 6732bb0 bump deps
• 4942ddd ensure bundling behavior between docs and bundle operates the same way.

v0.28.3

Compare Source

Changelog

• 74af925 fix: ensure x-lint-ignore directives respect parent ignores
• 2238fd5 reconcile reference-alias result paths inside allOf/anyOf/oneOf

v0.28.2

Compare Source

Changelog

• 6acde73 distinguish Homebrew cask from formula installs in upgrade flow
• 1b8db0d sort filtered rule stats and generalize source drift matching to external origins

v0.28.1

Compare Source

Changelog

• f2f9f98 harden result path reconciliation and violation diffing against ref drift
• 9b004a5 modified readme to add / correct links.
• 649843d restored docker entrypoint

v0.28.0

Compare Source

Changelog

• a3d2a5a added new schema command for JSON Schema linting!
• ca6deec added new schema command to agents.md
• 4586e71 clean up the repo root a little.
• 4754bc1 cleanup sweep.
• 0d95d7b update readme

v0.27.3

Compare Source

Changelog

• c5bc02a Fully address #​879
• 667c4da bump deps
• 19a5141 fix go.sum issue

v0.27.2

Compare Source

Changelog

• 8222bba latest doctor

v0.27.1

Compare Source

Changelog

• 82b7532 Adding auto-upgrade support.
• 28e0c29 added agents.md
• 0c80ace bump deps
• 2a57278 clean up build
• 765e6de fix borked ci test
• 85d980d fix: expand aliased result paths for recursive descent rules across $ref boundaries
• c9b67d8 fixing build
• fec8f79 update docs

v0.27.0

Compare Source

Changelog

• 9046fe9 Address #​879
• 40c8a1f bump deps
• 8e30def cleaned go.sum
• e57f478 defer original-spec resource release until after violation diffing
• f6138f7 feat: add docs command for printing press documentation generation
• 8387d41 fixed silliness.
• 4cc4b30 updated readme

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.71.2

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#​12805)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#​12995)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#​12977)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#​12974)
• eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#​12989)

❤️ Thank You

• Abraham Guo
• Brad Zacher @​bradzacher
• Josh Goldberg
• Vinccool96
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#​12941)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#​12953)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#​12930)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#​12957)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#​12919)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#​12892)
• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#​12923)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.0

Compare Source

🚀 Features

• eslint-plugin: [no-unsafe-enum-assignment] add rule (#​12732)

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle a return outside of any function (#​12912)
• eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#​12832)
• eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
• eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#​12885)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Fatih Çakır @​wfatih
• Josh Goldberg
• Josh Goldberg ✨
• Zamiell @​Zamiell

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#​12904)
• eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#​12826)
• eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#​12747)
• eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#​12845)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#​12880)
• eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#​12716)
• eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#​12873)
• eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#​12869)
• eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#​12850)
• eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#​12854)
• eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#​12818)
• eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#​12637)
• eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#​12768)

❤️ Thank You

• Brad Zacher @​bradzacher
• Diptajoy Mistry @​diptomistry
• Grit @​Grit03
• Hugo @​hugop95
• Michael Naumov @​mnaoumov
• Mikhail Baev @​baevm
• Om Rawat
• Sanath @​sansynx
• Shinji
• Vinccool96
• 김채영 @​cchaeyoung
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.0

Compare Source

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#​12730)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#​12780)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#​12728)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#​12729)

❤️ Thank You

• Josh Goldberg ✨ @​JoshuaKGoldberg
• Ulrich Stark @​ulrichstark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

Compare Source

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#​12603)

🩹 Fixes

• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#​12727)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#​12741)
• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#​12731)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

Compare Source

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#​12086)

🩹 Fixes

• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#​12739)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#​12646)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#​12711)
• eslint-plugin: [unified-signatures] report identical signatures (#​12678)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#​12707)
• eslint-plugin: [unified-signatures] deduplicate types in report (#​12656)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Niki @​phaux
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

🩹 Fixes

• eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#​12617)
• eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#​12588)
• eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#​12607)
• eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#​12591)
• eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#​12590)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

Compare Source

🚀 Features

• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#​12578)
• add warning when TS 7 is detected ([#​12529](https://redirect.github.com/typescript-eslint/typescript-eslint/pu

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 of the month (* * 1 * *)
• Automerge
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud