chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@vitest/coverage-v8 (source)	^2.1.8 -> ^2.1.9
eslint (source)	^9.19.0 -> ^9.21.0
pnpm (source)	9.15.4 -> 9.15.6
prettier (source)	^3.4.2 -> ^3.5.2
vitest (source)	^2.1.8 -> ^2.1.9

---

Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport https://github.com/vitest-dev/vitest/issues/7317 to v2 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7343

    View changes on GitHub

eslint/eslint (eslint)

v9.21.0

Compare Source

Features

• 418717f feat: introduce new deprecated types for rules (#​19238) (fnx)
• 5c5b802 feat: Add --ext CLI option (#​19405) (Milos Djermanovic)

Bug Fixes

• db5340d fix: update missing plugin message template (#​19445) (Milos Djermanovic)
• d8ffdd4 fix: do not exit process on rule crash (#​19436) (Francesco Trotta)

Documentation

• c5561ea docs: Update README (GitHub Actions Bot)
• 80b0485 docs: replace var with let and const in rule example (#​19434) (Tanuj Kanti)
• f67d5e8 docs: Update README (GitHub Actions Bot)
• 75afc61 docs: Update README (GitHub Actions Bot)
• 0636cab docs: Update Eleventy from v2 to v3 (#​19415) (Amaresh S M)
• dd7d930 docs: Update README (GitHub Actions Bot)

Chores

• a8c9a9f chore: update @eslint/eslintrc and @eslint/js (#​19453) (Francesco Trotta)
• 265e0cf chore: package.json update for @​eslint/js release (Jenkins)
• 3401b85 test: add test for Rule.ReportDescriptor type (#​19449) (Francesco Trotta)
• e497aa7 chore: update rewrite dependencies (#​19448) (Francesco Trotta)
• dab5478 chore: better error message for missing plugin in config (#​19402) (Tanuj Kanti)
• ebfe2eb chore: set js language for bug report issue config block (#​19439) (Josh Goldberg ✨)
• 5fd211d test: processors can return subpaths (#​19425) (Milos Djermanovic)

v9.20.1

Compare Source

Bug Fixes

• 274f054 fix: fix RuleContext type (#​19417) (Francesco Trotta)

Documentation

• fe3ccb2 docs: allow typing in search box while dropdown is open (#​19424) (Amaresh S M)
• 93c78a5 docs: Add instructions for pnpm compat (#​19422) (Nicholas C. Zakas)
• b476a93 docs: Fix Keyboard Navigation for Search Results (#​19416) (Amaresh S M)
• ccb60c0 docs: Update README (GitHub Actions Bot)

v9.20.0

Compare Source

Features

• e89a54a feat: change behavior of inactive flags (#​19386) (Milos Djermanovic)

Bug Fixes

• 91d4d9f fix: Bring types in sync with @​eslint/core (#​19157) (Nicholas C. Zakas)
• fa25c7a fix: Emit warning when empty config file is used (#​19399) (Nicholas C. Zakas)
• 31a9fd0 fix: Clearer error message for wrong plugin format (#​19380) (Nicholas C. Zakas)
• 61d99e3 fix: Better error message for unserializable parser (#​19384) (Nicholas C. Zakas)
• db1b9a6 fix: Ensure module scope is checked for references in consistent-this (#​19383) (Nicholas C. Zakas)
• 8bcd820 fix: arrow-body-style crash with single-token body (#​19379) (Milos Djermanovic)

Documentation

• b7012c8 docs: rewrite examples with var using let and const (#​19407) (Mueez Javaid Hashmi)
• 6406376 docs: Update README (GitHub Actions Bot)
• 350f2b9 docs: rewrite some examples with var using let and const (#​19404) (Mueez Javaid Hashmi)
• 93c325a docs: rewrite examples with var using let and const (#​19398) (Mueez Javaid Hashmi)
• 56ff404 docs: replace var with let or const in rules docs (#​19396) (Daniel Harbrueger)
• 4053226 docs: change sourceType in no-eval examples (#​19393) (Milos Djermanovic)
• 1324af0 docs: replace var with let and const in rules docs (#​19392) (Daniel Harbrueger)
• 8b87e00 docs: replace var with const and let in rules (#​19389) (Tanuj Kanti)
• 758c66b docs: Explain what frozen rules mean (#​19382) (Nicholas C. Zakas)
• 0ef8bb8 docs: additional checks for rule examples (#​19358) (Milos Djermanovic)
• 58ab2f6 docs: fix order of installation steps in getting started (#​19326) (Tanuj Kanti)

Chores

• 979097a chore: upgrade @​eslint/js@​9.20.0 (#​19412) (Francesco Trotta)
• 031734e chore: package.json update for @​eslint/js release (Jenkins)
• d4c47c3 test: avoid empty config warning in test output (#​19408) (Milos Djermanovic)
• 67dd82a chore: update dependency @​eslint/json to ^0.10.0 (#​19387) (renovate[bot])
• 15ac0e1 chore: add permissions: read-all to stale.yml workflow (#​19374) (Josh Goldberg ✨)

pnpm/pnpm (pnpm)

v9.15.6: pnpm 9.15.6

Compare Source

Patch Changes

• Fix instruction for updating pnpm with corepack #​9101.
• Print pnpm's version after the execution time at the end of the console output.
• The pnpm version specified by packageManager cannot start with v.
• Fix a bug causing catalog snapshots to be removed from the pnpm-lock.yaml file when using --fix-lockfile and --filter. #​8639
• Fix a bug causing catalog protocol dependencies to not re-resolve on a filtered install #​8638.

v9.15.5: pnpm 9.15.5

Compare Source

Patch Changes

• Verify that the package name is valid when executing the publish command.
• When running pnpm install, the preprepare and postprepare scripts of the project should be executed #​8989.
• Quote args for scripts with shell-quote to support new lines (on POSIX only) #​8980.
• Proxy settings should be respected, when resolving Git-hosted dependencies #​6530.
• Replace strip-ansi with the built-in util.stripVTControlCharacters #​9009.

Platinum Sponsors

Gold Sponsors

prettier/prettier (prettier)

v3.5.2

Compare Source

diff

Remove module-sync condition (#​17156 by @​fisker)

In Prettier 3.5.0, we added module-sync condition to package.json, so that require("prettier") can use ESM version, but turns out it doesn't work if CommonJS and ESM plugins both imports builtin plugins. To solve this problem, we decide simply remove the module-sync condition, so require("prettier") will still use the CommonJS version, we'll revisit until require(ESM) feature is more stable.

v3.5.1

Compare Source

diff

Fix CLI crash when cache for old version exists (#​17100 by @​sosukesuzuki)

Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem.

Support dockercompose and github-actions-workflow in VSCode (#​17101 by @​remcohaszing)

Prettier now supports the dockercompose and github-actions-workflow languages in Visual Studio Code.

v3.5.0

Compare Source

diff

🔗 Release Notes

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.