chore(deps): update dev dependencies (non-major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@testing-library/react	16.0.1 -> 16.2.0
@tsconfig/recommended (source)	1.0.7 -> 1.0.8
@types/react (source)	18.3.11 -> 18.3.18
@vitest/coverage-v8 (source)	2.1.2 -> 2.1.9
eslint-plugin-jsdoc	50.3.1 -> 50.6.6
eslint-plugin-react	7.37.1 -> 7.37.4
happy-dom	15.10.2 -> 15.11.7
husky	9.1.6 -> 9.1.7
lint-staged	15.2.10 -> 15.4.3
prettier (source)	3.3.3 -> 3.5.3
semantic-release	24.1.2 -> 24.2.3
typedoc (source)	0.26.8 -> 0.27.9
typescript (source)	5.6.3 -> 5.8.2

---

Release Notes

testing-library/react-testing-library (@​testing-library/react)

v16.2.0

Compare Source

Features

• Add support for React error handlers (#​1354) (9618c51)

v16.1.0

Compare Source

Features

• Add support for React 19 (#​1367) (85ac253)

tsconfig/bases (@​tsconfig/recommended)

v1.0.8

Compare Source

vitest-dev/vitest (@​vitest/coverage-v8)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport https://github.com/vitest-dev/vitest/issues/7317 to v2 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7343

    View changes on GitHub

v2.1.8

Compare Source

   🐞 Bug Fixes

• Support Node 21  -  by @​sheremet-va (92f7a)

    View changes on GitHub

v2.1.7

Compare Source

   🐞 Bug Fixes

• Revert support for Vite 6  -  by @​sheremet-va (fbe5c)
  • This introduced some breaking changes (https://github.com/vitest-dev/vitest/issues/6992). We will enable support for it later. In the meantime, you can still use pnpm.overrides or yarn resolutions to override the vite version in the vitest package - the APIs are compatible.

    View changes on GitHub

v2.1.6

Compare Source

🚀 Features

• Support Vite 6

    View changes on GitHub

v2.1.5

Compare Source

   🐞 Bug Fixes

• dangerouslyIgnoreUnhandledErrors without base reporter  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6808 (0bf0a)
• Capture unhandledRejection even when base reporter is not used  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6812 (8878b)
• Don't change the working directory when loading workspace projects  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6811 (f0aea)
• Remove sequence.concurrent from the RuntimeConfig type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6880 (6af73)
• Stop the runner before restarting, restart on workspace config change  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6859 (b01df)
• Don't rerun on Esc or Ctrl-C during watch filter  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6895 (98f76)
• Print ssrTransform error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6885 (4c96c)
• Throw an error and a warning if .poll, .element, .rejects/.resolves, and locator.* weren't awaited  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6877 (93b67)
• browser:
  • Don't process the default css styles  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6861 (0d67f)
  • Support non US key input  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6873 (5969d)
  • Stop the browser rpc when the pool is closed  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6858 (9a0c9)
  • Init browsers eagerly when tests are running  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6876 (417bd)
• coverage:
  • Report uncovered files when re-run by enter or 'a'  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6848 (487c8)
• ui:
  • Remove crossorigin attributes for same origin assets  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6883 (6e793)
• vite-node:
  • Improve esm check to decide external  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6816 (7e1fa)
  • Top-level throw in module is not reported properly  -  by @​vanaigr and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6840 (cf0cb)
• vitest:
  • Use fetch() implementation from happy-dom  -  by @​capricorn86 in https://github.com/vitest-dev/vitest/issues/6879 (3c56f)

   🏎 Performance

• Limit workspace project concurrency to available cores  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6869 (f4c04)

    View changes on GitHub

v2.1.4

Compare Source

   🚀 Features

This patch release includes a non-breaking feature for the experimental Browser Mode that doesn't follow SemVer. If you want to avoid picking up releases like this, make sure to pin the Vitest version in your package.json. See npm's documentation about semver for more information.

• browser: Allow custom HTML path, respect plugins transformIndexHtml  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6725 (16902)

   🐞 Bug Fixes

• windows:
  • Don't normalize drive case letter in root  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6792 (b28cd)
• browser:
  • Fix default browser port  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6700 (9c518)
  • Optimize expect-type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6713 (07918)
  • Don't polyfill process.env  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6718 (da6d2)
  • Increment browser port automatically if there are several projects with browser.enabled  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6717 (a9397)
  • Cleanup keyboard state  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6731 (19278)
  • Don't add v= queries to setup files imports  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6759 (b8258)
  • User event cleanup on retry  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6764 (bdd15)
  • Ignore non mocked msw requests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6770 (9d9ba)
  • Initiate MSW in the same frame as tests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6772 (2444f)
• deps:
  • Update dependency sirv to v3  -  in https://github.com/vitest-dev/vitest/issues/6701 (fde5d)
• expect:
  • Correct behavior of toThrowError with empty string parameter  -  by @​shulaoda in https://github.com/vitest-dev/vitest/issues/6710 (a6129)
• mocker:
  • Remove spy from peer dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6777 (3a8b5)
• vitest:
  • Clarify slowTestThreshold, print slow tests in non-TTY mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6715 (2e6aa)
  • Print warnings form Vite plugins  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6724 (121b1)
  • Don't fail if the working directory starts with a lowercase drive letter  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6779 (df6d7)
  • Silence import analysis warning  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6785 (39041)
• vitest,runner:
  • Simplify test.extend type exports  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6707 (e5c38)

   🏎 Performance

• Use hash to replace createHash  -  by @​btea in https://github.com/vitest-dev/vitest/issues/6703 (5d07b)

    View changes on GitHub

v2.1.3

Compare Source

   🐞 Bug Fixes

• Fix error diff of toBeNaN, toBeUndefined, toBeNull, toBeTruthy, toBeFalsy  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6697 (e0027)
• browser:
  • Provide aria role intellisense  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6629 (f36ea)
  • Not.toBeInTheDocument works with locators API  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6634 (8bef5)
  • Use /mockServiceWorker.js instead of /__vitest_msw__  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6687 (4b2ce)
  • Don't override the esbuild option in the browser mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6692 (d131f)
• expect:
  • Preserve prototype in toMatchObject diff  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6620 (d289e)
• mocker:
  • Specify correct spy dependency  -  by @​sheremet-va (7e958)
• runner:
  • Ensure sequential suite overrides sequence.concurrent  -  by @​dsyddall and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6653 (5e6de)
• vitest:
  • Deprecate UserConfig in favor of ViteUserConfig  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6626 (496bd)
  • Don't hang with maxConcurrency 0  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6627 (946d8)
  • Deprecate old task types and node-reliant types  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6632 (00045)
  • Fix <empty line> logs when interleaving console.log/error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6644 (9ece3)
  • Show rollup error details as test error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6686 (47dde)
  • Always inline setup files  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6689 (19d64)
  • Use fast-glob instead of tinyglobby in Vitest  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6688 (70baa)
• web-worker:
  • Share mocker with main executor  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6623 (fe7b8)

   🏎 Performance

• Reuse full name in reported tasks, update generator types  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6666 (7a0de)

    View changes on GitHub

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v50.6.6

Compare Source

Bug Fixes

• empty-tags: allow for JSDoc-block final asterisks; fixes #​670 (23b4bfa)

v50.6.5

Compare Source

v50.6.4

Compare Source

Bug Fixes

• force release (9edf4b1)
• force release (b08733a)

v50.6.3

Compare Source

Bug Fixes

• check-template-names: stop restricting template names to single letters; fixes #​1352 (c283729)

v50.6.2

Compare Source

Bug Fixes

• valid-types: update closure suppress types; fixes #​1349 (#​1350) (a57f36e)

v50.6.1

Compare Source

Bug Fixes

• types: update configs types (#​1344) (d2c6040)

v50.6.0

Compare Source

Features

• lines-before-block: move start-of-block checking behind off-by-default checkBlockStarts option (#​1341) (f9b102d)

v50.5.0

Compare Source

Features

• ability to import iterateJsdoc (#​1338) (b9091f8)

v50.4.3

Compare Source

Bug Fixes

• text-escaping: add missing docs.description (9a93119)

v50.4.2

Compare Source

Bug Fixes

• no-multi-asterisks: add missing docs.description (f6616c7)

v50.4.1

Compare Source

Bug Fixes

• match-name: revert to prior correct behavior of ignoring optional and default code surrounding name (7c0b8c6)

v50.4.0

Compare Source

Features

• require-hyphen-before-param-description: ensure template will be properly stringified; fixes #​1326 (7019d28)

v50.3.2

Compare Source

Bug Fixes

• require-hyphen-before-param-description: inject hyphen at proper place with multiline type (8b5b7f7)

jsx-eslint/eslint-plugin-react (eslint-plugin-react)

v7.37.4

Compare Source

Fixed

• [no-unknown-property]: support onBeforeToggle, popoverTarget, popoverTargetAction attributes (#​3865 @​acusti)
• [types] fix types of flat configs (#​3874 @​ljharb)

v7.37.3

Compare Source

Fixed

• [no-danger]: avoid a crash on a nested component name (#​3833 @​ljharb)
• [Fix] types: correct generated type declaration (#​3840 @​ocavue)
• [no-unknown-property]: support precedence prop in react 19 (#​3829 @​acusti)
• [prop-types]: props missing in validation when using generic types from a namespace import (#​3859 @​rbondoc96)

Changed

• [Tests] [jsx-no-script-url]: Improve tests (#​3849 @​radu2147)
• [Docs] fix broken links: [default-props-match-prop-types], [jsx-boolean-value], [jsx-curly-brace-presence], [jsx-no-bind], [no-array-index-key], [no-is-mounted], [no-render-return-value], [require-default-props] (#​3841 @​bastiendmt)

v7.37.2

Compare Source

Fixed

• [destructuring-assignment]: fix false negative when using typeof props.a (#​3835 @​golopot)

Changed

• [Refactor] [destructuring-assignment]: use getParentStatelessComponent (#​3835 @​golopot)

capricorn86/happy-dom (happy-dom)

v15.11.7

Compare Source

👷‍♂️ Patch fixes

• Allow for an URL to be a string or an URL object in History.pushState() and History.replaceState() - By @​sohailalam2 in task #​1621

v15.11.6

Compare Source

👷‍♂️ Patch fixes

• Adds support for window.TextEncoder and window.TextDecoder - By @​iradonov in task #​1611

v15.11.5

Compare Source

👷‍♂️ Patch fixes

• HTMLSelectElement should not dispatch "change" event when changing value or index - By @​capricorn86 in task #​1603

v15.11.4

Compare Source

👷‍♂️ Patch fixes

• Strings should be converted into numbers in setters for HTMLMeterElement and HTMLProgressElement - By @​capricorn86 in task #​1601

v15.11.3

Compare Source

👷‍♂️ Patch fixes

• Consider null as empty string in the setter for HTMLInputElement.value - By @​capricorn86 in task #​1604

v15.11.2

Compare Source

👷‍♂️ Patch fixes

• Fixes bug where pseudo selectors without an ending parentheses threw an in invalid selector error - By @​capricorn86 in task #​1558
• Fixes bug where it was not possible to use the characters ":" and "\" in attribute selectors - By @​capricorn86 in task #​1561

v15.11.1

Compare Source

👷‍♂️ Patch fixes

• Fixes bug where Document.activeElement is set to the wrong target when triggering HTMLSelectElement.focus() - By @​capricorn86 in task #​1592
  • HTMLSelectElement is a Proxy since v15 and focus() was setting the target of the Proxy as the active element, but should set the Proxy

v15.11.0

Compare Source

🎨 Features

• Adds support for the :disabled pseudo-class in CSS and query selectors - By @​capricorn86 in task #​1159

v15.10.8

Compare Source

👷‍♂️ Patch fixes

• Validate that object is of type Blob in FileReader.readAsArrayBuffer(), FileReader.readAsBinaryString(), FileReader.readAsDataURL() and FileReader.readAsText() - By @​btea in task #​1565

v15.10.7

Compare Source

👷‍♂️ Patch fixes

• Cookies with values that contains "=" should be supported - By @​btea in task #​1570

v15.10.6

Compare Source

👷‍♂️ Patch fixes

• Accept objects with a stringifier (such as a URL object) in Location.assign() and Location.replace() - By @​silverwind in task #​1568

v15.10.5

Compare Source

👷‍♂️ Patch fixes

• Fixes incorrect serialization of special characters in raw text elements such as <script> and <style> - By @​BenjaminAster in task #​1566

v15.10.4

Compare Source

👷‍♂️ Patch fixes

• Adds missing setter for the HTMLMediaElement.srcObject property - By @​ewesemann in task #​1557

v15.10.3

Compare Source

👷‍♂️ Patch fixes

• Allow to set custom export conditions in @happy-dom/jest-environment - By @​aearly in task #​1555

typicode/husky (husky)

v9.1.7

Compare Source

What's Changed

• fix: add husky label to deprecated warning by @​smackfu in https://github.com/typicode/husky/pull/1538

New Contributors

• @​smackfu made their first contribution in https://github.com/typicode/husky/pull/1538

Full Changelog: typicode/husky@v9.1.6...v9.1.7

lint-staged/lint-staged (lint-staged)

v15.4.3

Compare Source

Patch Changes

• #​1512 cbfed1d Thanks @​tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.

v15.4.2

Compare Source

Patch Changes

• #​1509 8827ebf Thanks @​iiroj! - Change lint-staged's dependencies to use caret (^) ranges instead of tilde (~). This makes it easier for package managers to perform dependency management when minor-level updates are also permitted instead of just patch-level.

v15.4.1

Compare Source

Patch Changes

• #​1504 1c7a45e Thanks @​iiroj! - Default TypeScript config filenames match JS equivalents.

• #​1504 9cc18c9 Thanks @​iiroj! - Add missing conditional exports syntax for TypeScript types.

v15.4.0

Compare Source

Minor Changes

• #​1500 a8ec1dd Thanks @​iiroj! - Lint-staged now provides TypeScript types for the configuration and main Node.js API. You can use the JSDoc syntax in your JS configuration files:

  /**
   * @​filename: lint-staged.config.js
   * @​type {import('lint-staged').Configuration}
   */
  export default {
    '*': 'prettier --write',
  }

  It's also possible to use the .ts file extension for the configuration if your Node.js version supports it. The --experimental-strip-types flag was introduced in Node.js v22.6.0 and unflagged in v23.6.0, enabling Node.js to execute TypeScript files without additional configuration.

  export NODE_OPTIONS="--experimental-strip-types"
  
  npx lint-staged --config lint-staged.config.ts

Patch Changes

• #​1501 9b79364 Thanks @​iiroj! - Handle possible failures when logging user shell for debug info.

v15.3.0

Compare Source

Minor Changes

• #​1495 e69da9e Thanks @​iiroj! - Added more info to the debug logs so that "environment" info doesn't need to be added separately to GitHub issues.

• #​1493 fa0fe98 Thanks @​iiroj! - Added more help messages around the automatic git stash that lint-staged creates as a backup (by default). The console output also displays the short git hash of the stash so that it's easier to recover lost files in case some fatal errors are encountered, or the process is killed before completing.

  For example:

  % npx lint-staged
  ✔ Backed up original state in git stash (20addf8)
  ✔ Running tasks for staged files...
  ✔ Applying modifications from tasks...
  ✔ Cleaning up temporary files...
  

  where the backup can be seen with git show 20addf8, or git stash list:

  % git stash list
  stash@{0}: lint-staged automatic backup (20addf8)
  

v15.2.11

Compare Source

Patch Changes

• #​1484 bcfe309 Thanks @​wormsik! - Escape paths containing spaces when using the "shell" option.

• #​1487 7dd8caa Thanks @​iiroj! - Do not treat submodule root paths as "staged files". This caused lint-staged to fail to a Git error when only updating the revision of a submodule.

prettier/prettier (prettier)

v3.5.3

Compare Source

v3.5.2

Compare Source

diff

Remove module-sync condition (#​17156 by @​fisker)

In Prettier 3.5.0, [we added module-sync condition to package.json](https://prettier

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Size Change: 0 B

Total Size: 19.6 kB

ℹ️ View Unchanged

Filename	Size
lib/app-check/index.js	59 B
lib/app-check/useAppCheckToken.js	383 B
lib/auth/index.js	75 B
lib/auth/useAuthIdToken.js	519 B
lib/auth/useAuthIdTokenResult.js	532 B
lib/auth/useAuthState.js	396 B
lib/common/index.js	31 B
lib/common/types.js	31 B
lib/database/index.js	70 B
lib/database/internal.js	188 B
lib/database/useObject.js	371 B
lib/database/useObjectOnce.js	430 B
lib/database/useObjectValue.js	687 B
lib/database/useObjectValueOnce.js	657 B
lib/firestore/index.js	128 B
lib/firestore/internal.js	444 B
lib/firestore/types.js	31 B
lib/firestore/useAggregateFromServer.js	589 B
lib/firestore/useDocument.js	650 B
lib/firestore/useDocumentData.js	772 B
lib/firestore/useDocumentDataOnce.js	615 B
lib/firestore/useDocumentOnce.js	560 B
lib/firestore/useQueries.js	650 B
lib/firestore/useQueriesData.js	729 B
lib/firestore/useQueriesDataOnce.js	671 B
lib/firestore/useQuery.js	622 B
lib/firestore/useQueryData.js	770 B
lib/firestore/useQueryDataOnce.js	623 B
lib/firestore/useQueryOnce.js	544 B
lib/index.js	107 B
lib/internal/useGet.js	523 B
lib/internal/useIsMounted.js	185 B
lib/internal/useListen.js	450 B
lib/internal/useLoadingValue.js	351 B
lib/internal/useMultiGet.js	676 B
lib/internal/useMultiListen.js	634 B
lib/internal/useMultiLoadingValue.js	522 B
lib/internal/usePrevious.js	146 B
lib/internal/useStableValue.js	257 B
lib/messaging/index.js	60 B
lib/messaging/useMessagingToken.js	394 B
lib/storage/index.js	90 B
lib/storage/internal.js	142 B
lib/storage/useBlob.js	507 B
lib/storage/useBytes.js	472 B
lib/storage/useDownloadURL.js	368 B
lib/storage/useMetadata.js	360 B
lib/storage/useStream.js	512 B

_{compressed-size-action}