chore(deps): update devdependencies (non-major) (minor)

[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@quobix/vacuum (source)	0.26.8 → 0.33.1
@types/node (source)	24.12.4 → 24.19.2
@types/pg (source)	8.20.4 → 8.23.1
@typescript-eslint/eslint-plugin (source)	8.59.4 → 8.71.2
@typescript-eslint/parser (source)	8.59.4 → 8.71.2
pino-pretty	13.1.3 → 13.2.0
prettier (source)	3.8.5 → 3.9.10
y-websocket	3.0.0 → 3.1.0

---

Release Notes

daveshanley/vacuum (@​quobix/vacuum)

v0.33.1

Compare Source

Changelog

• a17b577 Avoid copying document values during AsyncAPI marker detection
• a016427 Correct AsyncAPI 3 reference and security validation
• c8d37e6 Preserve AsyncAPI source paths and validate info tags
• 92c29d0 Preserve bundle output arguments and reference base identity
• 230406a Remove unused AsyncAPI rule helpers
• 056099d Scope AsyncAPI security checks to their owners
• 288d417 Use released libasyncapi v0.0.4
• 315a71b Verify standalone AsyncAPI bundles through lint
• 19b6633 chore: pin AsyncAPI bundler review fixes
• 4be55bb chore: pin bundler Windows path fix
• 2a88b4c chore: pin published AsyncAPI bundler dependency
• c1eba08 chore: use libasyncapi v0.0.3 release
• 61f3251 feat: support AsyncAPI documents in vacuum bundle
• b98c954 fix: keep ignore-file lint paths stable across runs

v0.33.0

Compare Source

Changelog

• 4384b03 Add Spectral-compatible or core function
• 851e42b Add native Arazzo validation and configurable lint rules
• ef60d39 Align core result paths with their Doctor models
• a1c9142 Allow Arazzo built-in rules to be enabled individually
• d4979d0 Announce v0.33 Arazzo and or support in README
• df72e49 Correct Princess Beef copyright dates
• ae89846 Enable Arazzo linting across commands reports and editor diagnostics
• b5c42f9 Fix AsyncAPI schema rule validation options
• 08de2f5 Keep external source labels and snippets in one report slot
• 810908c Preserve Arazzo paths after shared lookup changes
• b44dba2 Preserve Arazzo source context across lint and report boundaries
• d60e3d4 Preserve rejection of unsupported core option maps
• 852872f Record the direct HTML parser test dependency
• d9df352 Reject empty comma-separated or property names
• a0c7cf1 Share lazy node path indexes across rule execution
• 9a77754 docs(owasp): clarify upgrade behavior and simplify lint guidance
• e2c64f6 feat: reject unsafe OAuth flows and authentication URLs
• a7b225d fix(owasp): isolate OAuth flow checks and preserve finding ownership
• e415eb6 fix: check HTTPS across server overrides and variables
• 3c15d67 fix: check webhook and callback server transport
• cbdc1b9 fix: distinguish request object closure from map size limits
• 16bc4c1 fix: honor ancestor ignores for nested OAuth findings
• 4db724c fix: tighten write security and scope JWT documentation checks
• 35c425b refactor(owasp): share schema checks and cache composition targets

v0.32.0

Compare Source

Changelog

• c8575b6 Add execution cancellation and concurrency controls with isolated auto-fixes
• f84d230 Add overlay tag filtering and safe unused component pruning
• 4390113 Document auto-fix gate and publication protocol
• bd3f0e1 Preserve YAML presentation and share publication transform preparation
• bb8d345 Preserve publication references across examples aliases and filtered paths
• 62289f1 Preserve reusable execution configs and simplify cancellation lifecycle
• 09bc187 Preserve split-reference and recursive-schema regression coverage
• 4cc3e1d Report custom function loading failures once with accurate guidance
• 3d111cf Report invalid custom function files and flag-shaped paths
• f6ee9a0 Use shared Viper environment configuration for command flags

v0.31.0

Compare Source

Changelog

• 957c730 Attach component name findings to Doctor without rescanning keys
• c4515a0 Bound direction traversal for programmatic schema cycles
• c6c20ab Build the sample plugin with the host dependency graph
• 051f196 Classify OWASP limits by schema identity and request usage
• 0a1cce7 Cover execution timeouts across formats and JavaScript batch calls
• 67f9e6f Expand rule message templates in the shared function result path
• 1865bb7 Explain unsupported Spectral rulesets and native OWASP migration
• 4becce0 Follow reference targets with sibling schema keywords
• de3013f Index schema directions once for OWASP limit rules
• 4cc49c7 Isolate built-in rulesets and preserve HTTP-prefixed local paths
• 21c45bd Keep custom function targets when rendering message templates
• c8613ff Keep parent ruleset paths during dashboard reloads
• 59473ec Keep remote ruleset references separate from filesystem paths
• ad534fa Match equivalent JSONPath forms in wildcard ignores
• 7980dfd Preserve Doctor messages and quoted keys in rule templates
• 1c3c78b Preserve invalid ruleset errors after workspace lookup failures
• 0d05ca5 Preserve plain messages and index custom result value lookups
• 1a639a6 Preserve ruleset errors across library action forms and reports
• e8a4fdf Preserve severity behavior for Markdown summary callers
• 6bbb0fb Publish rule completion after releasing worker ownership
• 4e20d47 Publish ruleset configuration failures as editor diagnostics
• 5f0c365 Recognize string values in propertyNames schema checks
• cc87b20 Reject incomplete rulesets after extension loading fails
• ddb622a Reject unknown functions before rule execution
• 9823772 Report missing and invalid CLI flag values
• 975c420 Report threshold failures in pipeline summaries including hints
• fb17f6e Resolve extended rulesets relative to their containing document
• c78036d Resolve remote ruleset children after redirects and preserve URL queries
• cda9a7b Retain serialization for shared schema rendering
• 49778fa Reuse template indexes and skip unused message context work
• c279472 Scope schema validation caches to each rule action
• 6f43f2a Share lazy schema directions and remove repeated result processing
• 5d22d7f Simplify migration diagnostics and consolidate CLI process tests
• 9633d73 Upgrade Doctor to v0.0.83 and remove upstream JSON Schema
• f0fde4d Upgrade pb33f libraries and migrate schema and YAML forks
• e3679a8 Use execution decoding for all rule action maps
• 5891ba6 Use the lint outcome for the displayed summary status
• 2fea9fd Use validated LSP fallback on the first configuration RPC failure
• b1a36ad Validate component names and report their document locations
• 95542af Validate ruleset editor buffers without hiding API or tool errors
• 124d906 fix: carry per-rule timeout in the rule context instead of mutating JS functions

v0.30.6

Compare Source

Changelog

• 29e96e9 refactor: migrate to github.com/go-viper/mapstructure/v2

v0.30.5

Compare Source

Changelog

• ab820b5 upgrade the upgradeables.

v0.30.4

Compare Source

Changelog

• 1403fd0 Merge pull request #​972 from daveshanley/sec-updates
• 4dfa37d chore: bump Go and npm dependencies for security updates
• b76fecf fix go.sum

v0.30.3

Compare Source

Changelog

• cd50957 Merge branch 'main' into feat/githubAnnotations
• 7362dab Merge pull request #​920 from andreyyudin/feat/githubAnnotations
• 5a2f765 Merge remote-tracking branch 'origin/main' into feat/githubAnnotations
• b475f89 Merge remote-tracking branch 'origin/main' into tmp-merge-test
• 76cceb9 feat: add GitHub Actions annotations support to lint command
• 07bb868 feat: enhance GitHub Actions annotations handling for error reporting in lint commands
• 2d352d5 feat: enhance GitHub Actions annotations handling for workspace paths and debug output suppression
• fc1e9d0 feat: enhance GitHub Actions annotations with range support and options
• 587b1ee feat: improve GitHub Actions annotations handling for error reporting and multi-file support
• 58d3874 fix lint github-annotations output for mixed failures and annotation-only mode
• 8da3a8a fix(lint): honour github-annotations contract in single-file and chrome paths
• f84f968 fix(lint): propagate ignore-file and custom-function loader errors
• 57b4530 fix: enhance GitHub Actions annotations for error reporting and handling in lint command

v0.30.2

Compare Source

Changelog

• ddeac11 Read version from the package's own package.json in postinstall

v0.30.1

Compare Source

Changelog

• 488a197 chore: upgrade doctor to v0.0.80
• d2165e5 feat: add family-aware docs diagnostics
• bfe78c3 fix: fingerprint built-in docs rulesets
• b91b97f fix: make lint resource release concurrency-safe

v0.30.0

Compare Source

Changelog

• f20f952 Address #​934
• dfbf6da add deps script
• d8fbb52 address security review
• e451300 addressing security review
• 0dcf034 more tuning
• dcef773 replace LSP server with self rolled one.
• 63f2436 some tuning
• 328ff25 use Spectral-compatible JSONPath for rule given selectors
• 80a608e we now have our own built in LSP server!

v0.29.10

Compare Source

Changelog

• 3d921ac Add new doctor AsyncAPI capabilities!
• 45b301a Bump github.com/alecthomas/chroma/v2 from 2.26.1 to 2.27.0
• 013b3a4 Fix #​925
• c4cbd4d Fix issue #​930
• ed2f814 Merge pull request #​931 from daveshanley/issue-930
• 7f1c6e1 Merge remote-tracking branch 'origin/main' into issue-930
• c4c9c59 Sign release checksums with cosign
• 9fa82c9 address #​933 and dep upgrade
• eee2fc5 fix CI
• 2427269 phix the CI again
• 3f6db4f remove report card

v0.29.9

Compare Source

Changelog

• 75c9453 case-insensitive category matching and warn when --fix applies no fixes

v0.29.8

Compare Source

Changelog

• b6b025f Fix #​919: isolate concurrent schema and example validation from shared model mutation
• 4926612 remove scratch file

v0.29.7

Compare Source

Changelog

• 5407bb1 Fix #​916: isolate schema validation from shared model mutation
• 0312640 go.sum fix

v0.29.6

Compare Source

Changelog

• 0b77a48 Address issue #​914
• 7a5063d more speed tunes
• dc3a918 trying to speed up disk cleanup
• 92e8677 trying to speed up the test run

v0.29.5

Compare Source

Changelog

• 005640d bump the deps
• 7e2f9d0 deps!
• bf6d661 fix missed race condition.

v0.29.4

Compare Source

Changelog

• 8b036cb fix(oas_schema): use validator document errors instead of custom marshal check

v0.29.3

Compare Source

Changelog

• b25fda8 bump deps
• e8409ac bump those deps!
• eae83a5 deps: bump libopenapi to v0.38.0 and adapt rules to lazy schema cache
• b23932b fixed flags broken on tests
• 813e04f migrate to forked testify
• 2272767 refactor original-spec diffing and skip relint for identical specs
• 34ff93d tests are flaking, hardening them
• 92ef447 working through flaky tests

v0.29.2

Compare Source

Changelog

• c14a4a9 fix(motor): avoid broad component alias reconciliation
• 47c5aac fix(motor): honor GOMAXPROCS for rule execution concurrency

v0.29.1

Compare Source

Changelog

• f4a45ca Bump github.com/alecthomas/chroma/v2 from 2.24.1 to 2.26.1
• 93e9b2e Bump github.com/pb33f/libopenapi-validator from 0.13.7 to 0.13.8
• 7360c06 add permissions.
• 3f9cc52 fix(motor): include sibling component uses in nested reference alias paths
• 925c673 removed dead file

v0.29.0

Compare Source

Changelog

• 21d3564 add AsyncAPI 3.x linting support
• cac3f39 updated docs and help to add in new AsyncAPI support.
• 343544c updated readme
• 93e337a upgraded libopenapi and upgrade code.

v0.28.4

Compare Source

Changelog

• 6732bb0 bump deps
• 4942ddd ensure bundling behavior between docs and bundle operates the same way.

v0.28.3

Compare Source

Changelog

• 74af925 fix: ensure x-lint-ignore directives respect parent ignores
• 2238fd5 reconcile reference-alias result paths inside allOf/anyOf/oneOf

v0.28.2

Compare Source

Changelog

• 6acde73 distinguish Homebrew cask from formula installs in upgrade flow
• 1b8db0d sort filtered rule stats and generalize source drift matching to external origins

v0.28.1

Compare Source

Changelog

• f2f9f98 harden result path reconciliation and violation diffing against ref drift
• 9b004a5 modified readme to add / correct links.
• 649843d restored docker entrypoint

v0.28.0

Compare Source

Changelog

• a3d2a5a added new schema command for JSON Schema linting!
• ca6deec added new schema command to agents.md
• 4586e71 clean up the repo root a little.
• 4754bc1 cleanup sweep.
• 0d95d7b update readme

v0.27.3

Compare Source

Changelog

• c5bc02a Fully address #​879
• 667c4da bump deps
• 19a5141 fix go.sum issue

v0.27.2

Compare Source

Changelog

• 8222bba latest doctor

v0.27.1

Compare Source

Changelog

• 82b7532 Adding auto-upgrade support.
• 28e0c29 added agents.md
• 0c80ace bump deps
• 2a57278 clean up build
• 765e6de fix borked ci test
• 85d980d fix: expand aliased result paths for recursive descent rules across $ref boundaries
• c9b67d8 fixing build
• fec8f79 update docs

v0.27.0

Compare Source

Changelog

• 9046fe9 Address #​879
• 40c8a1f bump deps
• 8e30def cleaned go.sum
• e57f478 defer original-spec resource release until after violation diffing
• f6138f7 feat: add docs command for printing press documentation generation
• 8387d41 fixed silliness.
• 4cc4b30 updated readme

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.71.2

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#​12805)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#​12995)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#​12977)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#​12974)
• eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#​12989)

❤️ Thank You

• Abraham Guo
• Brad Zacher @​bradzacher
• Josh Goldberg
• Vinccool96
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#​12941)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#​12953)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#​12930)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#​12957)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#​12919)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#​12892)
• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#​12923)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.0

Compare Source

🚀 Features

• eslint-plugin: [no-unsafe-enum-assignment] add rule (#​12732)

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle a return outside of any function (#​12912)
• eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#​12832)
• eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
• eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#​12885)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Fatih Çakır @​wfatih
• Josh Goldberg
• Josh Goldberg ✨
• Zamiell @​Zamiell

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#​12904)
• eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#​12826)
• eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#​12747)
• eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#​12845)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#​12880)
• eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#​12716)
• eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#​12873)
• eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#​12869)
• eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#​12850)
• eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#​12854)
• eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#​12818)
• eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#​12637)
• eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#​12768)

❤️ Thank You

• Brad Zacher @​bradzacher
• Diptajoy Mistry @​diptomistry
• Grit @​Grit03
• Hugo @​hugop95
• Michael Naumov @​mnaoumov
• Mikhail Baev @​baevm
• Om Rawat
• Sanath @​sansynx
• Shinji
• Vinccool96
• 김채영 @​cchaeyoung
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.0

Compare Source

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#​12730)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#​12780)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#​12728)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#​12729)

❤️ Thank You

• Josh Goldberg ✨ @​JoshuaKGoldberg
• Ulrich Stark @​ulrichstark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

Compare Source

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#​12603)

🩹 Fixes

• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#​12727)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#​12741)
• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#​12731)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

Compare Source

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#​12086)

🩹 Fixes

• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#​12739)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#​12646)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#​12711)
• eslint-plugin: [unified-signatures] report identical signatures (#​12678)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#​12707)
• eslint-plugin: [unified-signatures] deduplicate types in report (#​12656)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Niki @​phaux
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See [GitHub Releases](https://redirect.github.com/typescript-eslint/typescri

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 of the month (* * 1 * *)
• Automerge
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud