fix(deps): update npm - - package.json

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/js (source)	^9.36.0 -> ^9.37.0
@primer/octicons-react (source)	^19.18.0 -> ^19.19.0
@types/node (source)	^22.18.6 -> ^22.18.8
cypress (source)	^15.3.0 -> ^15.4.0
eslint (source)	^9.36.0 -> ^9.37.0
eslint-plugin-cypress	^5.1.1 -> ^5.2.0
isomorphic-git (source)	^1.33.1 -> ^1.34.0
lint-staged	^16.2.0 -> ^16.2.3
openid-client	^6.8.0 -> ^6.8.1
tsx (source)	^4.20.5 -> ^4.20.6
typescript (source)	^5.9.2 -> ^5.9.3
typescript-eslint (source)	^8.44.1 -> ^8.46.0

---

Release Notes

eslint/eslint (@​eslint/js)

v9.37.0

Compare Source

primer/octicons (@​primer/octicons-react)

v19.19.0

Compare Source

Minor Changes

• #​1123 1d346555 Thanks @​mperrotti! - Adds an icon for AI chat

v19.18.1

Compare Source

Patch Changes

• #​1120 370c72c8 Thanks @​langermank! - Add vscode-32.svg, vscode-48.svg

• #​1122 dcf14c81 Thanks @​langermank! - Add 16 vscode

cypress-io/cypress (cypress)

v15.4.0

Compare Source

eslint/eslint (eslint)

v9.37.0

Compare Source

cypress-io/eslint-plugin-cypress (eslint-plugin-cypress)

v5.2.0

Compare Source

Features

• add type declaration file (#​279) (006d74f)

isomorphic-git/isomorphic-git (isomorphic-git)

v1.34.0

Compare Source

Features

• add 'create' operation to stash API (#​2211) fix #​2207 (c312c88)

v1.33.3

Compare Source

Bug Fixes

• fixes #​2138 stash push/pop issue with correct stash drop and adds regression test (#​2150) (555d7db)

v1.33.2

Compare Source

Bug Fixes

• do not incorrectly mark valid ref names as invalid (#​2206) (ea52fe1)

lint-staged/lint-staged (lint-staged)

v16.2.3

Compare Source

Patch Changes

• #​1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Compare Source

Patch Changes

• #​1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  
  ✖ lint-staged failed because `--fail-on-changes` was used.
  
  Any lost modifications can be restored from a git stash:
  
    > git stash list --format="%h %s"
    c18d55a3 On main: lint-staged automatic backup
    > git apply --index c18d55a3

v16.2.1

Compare Source

Patch Changes

• #​1664 8277b3b Thanks @​iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions is readonly string[] and can't be mutated. Thanks @​outslept!

  export default {
  ---  "*": (files: string[]) => void console.log('staged files', files)
  +++  "*": (files: readonly string[]) => void console.log('staged files', files)
  }

• #​1654 70b9af3 Thanks @​iiroj! - This version has been published from GitHub Actions using Trusted Publishing for npm packages.

• #​1659 4996817 Thanks @​iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there are package.json files in the working directory. This situation might happen when running lint-staged for a single package in a monorepo.

• #​1654 7021f0a Thanks @​iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates to lint-staged. This was changed in 16.2.0 after the vulnerability issues with chalk and debug, which were also removed in the same version.

  Given the recent vulnerabilities in the npm ecosystem, it's best to be very careful when updating dependencies.

panva/openid-client (openid-client)

v6.8.1

Compare Source

Refactor

• workaround dpop nonce caching caveats with customFetch (a9eb50f)

privatenumber/tsx (tsx)

v4.20.6

Compare Source

Bug Fixes

• properly hide relaySignal from process.listeners() (#​741) (710a424)

---

This release is also available on:

• npm package (@​latest dist-tag)

microsoft/TypeScript (typescript)

v5.9.3

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.46.0

Compare Source

🚀 Features

• typescript-eslint: export util types (#​10848, #​10849)

❤️ Thank You

• Mister-Hope @​Mister-Hope

You can read about our versioning strategy and releases on our website.

v8.45.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name	Link
🔨 Latest commit	eba8d31
🔍 Latest deploy log	https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/68ee6a52f78fa800087fb2b9

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

View full job summary

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.07%. Comparing base (34d87a0) to head (eba8d31).
⚠️ Report is 7 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1236   +/-   ##
=======================================
  Coverage   84.07%   84.07%           
=======================================
  Files          68       68           
  Lines        2945     2945           
  Branches      375      375           
=======================================
  Hits         2476     2476           
  Misses        409      409           
  Partials       60       60           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.