chore(deps-dev): bump the development-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the development-dependencies group with 4 updates in the / directory: @rushstack/eslint-config, @rushstack/heft-node-rig, typescript and webpack.

Updates @rushstack/eslint-config from 4.4.0 to 4.8.0

Changelog

Sourced from @​rushstack/eslint-config's changelog.

4.8.0

Tue, 22 Sep 2026 17:35:41 GMT

Minor changes

• Globally ignore build-output folders (lib, lib-*, dist, temp, coverage) so that generated output is not linted, which matters for tools that enumerate files from the ESLint configuration (ESLint's flat config does not respect .gitignore).

Patches

• Update the eslint-plugin-tsdoc dependency to ~0.5.3.

4.7.0

Mon, 14 Sep 2026 22:42:32 GMT

Minor changes

• Group the profile's type-aware rules into an exported typeAwareRules set and add a flat/without-type-information helper for linting files that are not part of the TypeScript program with only the non-type-aware rules.

Patches

• Author the package in TypeScript (built to CommonJS via Heft). The existing subpath entry points are preserved via a package.json "exports" map and the compiled configuration is runtime-identical to the previous JavaScript.

4.6.6

Sat, 05 Sep 2026 00:15:08 GMT

Version update only

4.6.5

Thu, 20 Aug 2026 00:16:38 GMT

Version update only

4.6.4

Wed, 25 Feb 2026 21:39:42 GMT

Patches

• Bump eslint-plugin-tsdoc to ~0.5.1 to mitigate CVE-2026-26996.
• Bump @typescript-eslint/* dependencies to ~8.56.1.

4.6.3

Fri, 20 Feb 2026 00:15:04 GMT

Version update only

4.6.2

Thu, 19 Feb 2026 00:04:52 GMT

Patches

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​rushstack/eslint-config since your current version.

Updates @rushstack/heft-node-rig from 2.11.27 to 2.11.52

Changelog

Sourced from @​rushstack/heft-node-rig's changelog.

2.11.52

Mon, 28 Sep 2026 20:08:27 GMT

Version update only

2.11.51

Tue, 22 Sep 2026 17:35:41 GMT

Version update only

2.11.50

Mon, 14 Sep 2026 22:42:32 GMT

Version update only

2.11.49

Sat, 05 Sep 2026 00:15:08 GMT

Version update only

2.11.48

Fri, 21 Aug 2026 15:16:34 GMT

Version update only

2.11.47

Thu, 20 Aug 2026 00:16:38 GMT

Patches

• Update the default TypeScript library definitions to ES2022.
• Expose ES2022 library definitions in the default TypeScript configuration.

2.11.46

Fri, 14 Aug 2026 00:18:07 GMT

Version update only

2.11.45

Tue, 21 Jul 2026 02:53:23 GMT

Version update only

2.11.44

Fri, 17 Jul 2026 00:15:59 GMT

Version update only

2.11.43

Thu, 16 Jul 2026 00:16:13 GMT

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​rushstack/heft-node-rig since your current version.

Updates typescript from 5.9.2 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

Commits

• c63de15 Bump version to 5.9.3 and LKG
• 8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
• a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
• 0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
• bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
• 0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
• 2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
• See full diff in compare view

Updates webpack from 5.104.1 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

• Throw on a write to an imported binding without losing concatenation. (by @​alexander-akait in #22141)

• Keep the </html> a page was written with, whatever opened the element. (by @​aryanraj45 in #22103)

• Look an attribute up by what its value decodes to, not how it was spelled. (by @​aryanraj45 in #22107)

• Minify HTML by what a value says rather than how it was spelled. (by @​alexander-akait in #22154)

• Follow HTML template form and frameset rules during tree construction. (by @​dependabot in #22129)

• Keep the whitespace calc() needs around + and - in a custom property. (by @​alexander-akait in #22150)

• Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @​alexander-akait in #22119)

• Rewrite an attribute value the source spelled with character references. (by @​aryanraj45 in #22110)

• Unquote an HTML attribute value carrying a vertical tab. (by @​alexander-akait in #22162)

• Keep a shadow's spread and canonicalize a merged selector list. (by @​alexander-akait in #22101)

• Leave out an implied tag and merge adjacent runs on the first pass. (by @​aryanraj45 in #22121)

• Minify in one pass what a second pass of the CSS minifier used to find. (by @​alexander-akait in #22106)

• Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @​aryanraj45 in #22126)

• Keep initial where an engine reads the property's initial keyword apart. (by @​aryanraj45 in #22128)

• Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @​alexander-akait in #22108)

• Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @​alexander-akait in #22111)

• Run the printer equivalence suite against Firefox as well as Chrome. (by @​aryanraj45 in #22151)

• Finish in one CSS pass the joins, drops and collapses left to a second. (by @​alexander-akait in #22117)

• Move the context module sources into lib/context/. (by @​alexander-akait in #22115)

• Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @​alexander-akait in #22116)

• Emit a failing module's stack relative, and name what a tap failed with. (by @​alexander-akait in #22122)

• Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @​alexander-akait in #22120)

• Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @​alexander-akait in #22142)

• Record hoisted, module and block declarations while parsing, not by re-walking. (by @​alexander-akait in #22147)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

• Throw on a write to an imported binding without losing concatenation. (by @​alexander-akait in #22141)

• Keep the </html> a page was written with, whatever opened the element. (by @​aryanraj45 in #22103)

• Look an attribute up by what its value decodes to, not how it was spelled. (by @​aryanraj45 in #22107)

• Minify HTML by what a value says rather than how it was spelled. (by @​alexander-akait in #22154)

• Follow HTML template form and frameset rules during tree construction. (by @​dependabot in #22129)

• Keep the whitespace calc() needs around + and - in a custom property. (by @​alexander-akait in #22150)

• Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @​alexander-akait in #22119)

• Rewrite an attribute value the source spelled with character references. (by @​aryanraj45 in #22110)

• Unquote an HTML attribute value carrying a vertical tab. (by @​alexander-akait in #22162)

• Keep a shadow's spread and canonicalize a merged selector list. (by @​alexander-akait in #22101)

• Leave out an implied tag and merge adjacent runs on the first pass. (by @​aryanraj45 in #22121)

• Minify in one pass what a second pass of the CSS minifier used to find. (by @​alexander-akait in #22106)

• Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @​aryanraj45 in #22126)

• Keep initial where an engine reads the property's initial keyword apart. (by @​aryanraj45 in #22128)

• Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @​alexander-akait in #22108)

• Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @​alexander-akait in #22111)

• Run the printer equivalence suite against Firefox as well as Chrome. (by @​aryanraj45 in #22151)

• Finish in one CSS pass the joins, drops and collapses left to a second. (by @​alexander-akait in #22117)

• Move the context module sources into lib/context/. (by @​alexander-akait in #22115)

• Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @​alexander-akait in #22116)

• Emit a failing module's stack relative, and name what a tap failed with. (by @​alexander-akait in #22122)

• Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @​alexander-akait in #22120)

• Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @​alexander-akait in #22142)

... (truncated)

Commits

• 5a10675 chore(release): new release (#22105)
• 9c448c4 test: consolidate loose harness files under test/harness (#22163)
• a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
• db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
• d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
• 39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
• 0835411 test: move suite drivers into test/templates (#22159)
• b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
• a774f10 test: define the webpack major instead of bundling package.json (#22160)
• 4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack since your current version.

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.