build(deps): Bump the minor-and-patch group across 1 directory with 6 updates

[dependabot]

Bumps the minor-and-patch group with 6 updates in the /signature-generator directory:

Package	From	To
@bundu/ui	0.1.1	0.5.0
astro	7.3.5	7.3.8
@types/node	26.6.3	26.6.5
eslint	10.11.0	10.12.0
globals	17.12.0	17.13.0
typescript-eslint	8.71.0	8.71.1

Updates @bundu/ui from 0.1.1 to 0.5.0

Release notes

Sourced from @​bundu/ui's releases.

@​bundu/ui 0.5.0

The release of staging to main after @bundu/ui 0.4.0 and @nyuchi/ui 0.3.0. Under the org versioning policy each package with changes takes the next minor: @bundu/ui 0.5.0 carries MetaList 1.1.0 and ResultGrid 1.1.0 from the registry v4.5.0 pin and brand-circles.css; @nyuchi/ui 0.4.0 carries brand-circles.css (both from the entries below). @bundu/server (0.1.0) has no package changes and is not republished.

Changed (@​bundu/ui): registry pin v4.5.0 — MetaList 1.1.0 and ResultGrid 1.1.0

scripts/registry-ref.json moves from 5067b5e (registry v4.4.0) to 9f3631c, the v4.5.0 release on registry mainmzizi-dev/mzizi-registry#454pnpm registry:sync rebuilds the two components it changes:

• discover/MetaList 1.1.0 is a valid description list: each row is <div><dt><dd></div> with the icon inside the <dt>, and a row whose value is empty hides itself (mzizi-registry#450).
• discover/ResultGrid 1.1.0 has an error state (state="error" and an error slot) beside ok and empty (mzizi-registry#451).
• Their contracts move with them (contracts/discover/{meta-list,result-grid}.contract.json, contracts/index.json).

tokens/canon.snapshot.json follows live canon: circles is tanzanite, "Mukoko Circles". api.mzizi.dev does not serve the row's accentmzizi-dev/mzizi-api-gateway#62staging), so the LOCAL_BRAND_MINERALS bridge now keeps supplying the terracotta --brand-accent while canon's mineral matches and canon has no accent; brand-circles.css is unchanged apart from its header comment.

Added (@​bundu/ui, @​nyuchi/ui): brand-circles.css, tanzanite with a terracotta --brand-accent

Mukoko Circles (circles.mukoko.com) is tanzanite primary + terracotta accent (owner decision, 2026-10-06). The canon row is corrected in mzizi-dev/mzizi-registry#449. The overlay sets --primary and --ring to tanzanite and --brand-accent to terracotta, light and dark, and both packages export it. The generator learns an optional accent family per brand. A LOCAL_BRAND_MINERALS bridge entry can now supersede a snapshot row that canon is correcting; once the snapshot catches up, canon wins.

---

npm: https://www.npmjs.com/package/@​bundu/ui/v/0.5.0 Changelog: https://github.com/mzizi-dev/packages-npm/blob/@​bundu/ui@0.5.0/CHANGELOG.md

@​bundu/ui 0.4.0

The release of staging to main after @bundu/ui 0.3.0, which npm has had since 2026-10-05 (published from main at 4ce82a7). Under the org versioning policy this release is the next minor, so @bundu/ui is 0.4.0: it carries every @bundu/ui entry below, down to the 0.3.0 heading, which were merged into staging after 0.3.0 left main. @nyuchi/ui (0.3.0) and @bundu/server (0.1.0) have no package changes and are not republished. Three repository entries below (the README's design-system link, the versioning policy and the last "Changed (repository)" list) were already on main when 0.3.0 was published.

Changed (repository): the registry pin follows the v4.4.0 release on registry main

scripts/registry-ref.json moves from 95318a9 on registry staging to 5067b5e, mzizi-dev/mzizi-registry#447. That is the v4.4.0 release of staging to main, and its tree is the same as 95318a9mzizi-dev/mzizi-registry#446pnpm registry:check reports all 86 files identical, and contracts/ match at the new pin (66 contracts). The packages are now built from a released registry commit rather than a staging one.

Added (@​bundu/ui): the Nyuchi console's form, chart and table deltas, and the registry primitives

The registry pin moves to mzizi-dev/mzizi-registry#443 (95318a9 on registry staging). That PR takes four deltas from the Nyuchi console (nyuchi/nyuchi-platform console/web) into the Dashboard Standard contracts.

• app/FormField.astro (contract app/form-field 1.1.0):
  • as: "textarea" with rows (default 5), or as: "select" with options ({ value, label }[]) and emptyOption. Both have the same wiring and app density as the input; a read-only select is disabled.
  • type adds number, date and file. accept and multiple apply to a file input, which never carries a value; min, max and step to number and date inputs.
  • inputmode adds numeric and decimal.
  • wide spans both FormLayout columns.
• app/FormLayout.astro (1.1.0): enctype: "multipart/form-data" for a form with a file field.
• app/BarChart.astro (1.1.0): column-layout axis labels never crowd. At most 6 show from sm up; below sm, only the first, the middle (from 5 points) and the last.
• app/DataTable.astro (1.1.0): a cell's tone (neutral, success, warning, info, accent or premium) is a status pill, data-slot="status" in the mineral status colours. badge keeps the registry badge variants.
• ui/variants: appTextareaClasses, appFileInputClasses, STATUS_TONES / StatusTone and statusToneClasses.
• The registry primitives with ui/ contracts are now shipped as @bundu/ui/{Alert,Button,Card,Input,Label,Skeleton,StatusBadge}.astro. The app/ builds of Alert, Button, Card, Input, Label and Skeleton now come from the registry's app-*mzizi-dev/mzizi-registry#428NativeSelect, SegmentedControl and Toaster follow mzizi-dev/mzizi-registry#441 and #442.

... (truncated)

Changelog

Sourced from @​bundu/ui's changelog.

[@​bundu/ui 0.5.0, @​nyuchi/ui 0.4.0] - 2026-10-06

The release of staging to main after @bundu/ui 0.4.0 and @nyuchi/ui 0.3.0. Under the org versioning policy each package with changes takes the next minor: @bundu/ui 0.5.0 carries MetaList 1.1.0 and ResultGrid 1.1.0 from the registry v4.5.0 pin and brand-circles.css; @nyuchi/ui 0.4.0 carries brand-circles.css (both from the entries below). @bundu/server (0.1.0) has no package changes and is not republished.

Changed (@​bundu/ui): registry pin v4.5.0 — MetaList 1.1.0 and ResultGrid 1.1.0

scripts/registry-ref.json moves from 5067b5e (registry v4.4.0) to 9f3631c, the v4.5.0 release on registry mainmzizi-dev/mzizi-registry#454pnpm registry:sync rebuilds the two components it changes:

• discover/MetaList 1.1.0 is a valid description list: each row is <div><dt><dd></div> with the icon inside the <dt>, and a row whose value is empty hides itself (mzizi-registry#450).
• discover/ResultGrid 1.1.0 has an error state (state="error" and an error slot) beside ok and empty (mzizi-registry#451).
• Their contracts move with them (contracts/discover/{meta-list,result-grid}.contract.json, contracts/index.json).

tokens/canon.snapshot.json follows live canon: circles is tanzanite, "Mukoko Circles". api.mzizi.dev does not serve the row's accentmzizi-dev/mzizi-api-gateway#62staging), so the LOCAL_BRAND_MINERALS bridge now keeps supplying the terracotta --brand-accent while canon's mineral matches and canon has no accent; brand-circles.css is unchanged apart from its header comment.

Added (@​bundu/ui, @​nyuchi/ui): brand-circles.css, tanzanite with a terracotta --brand-accent

Mukoko Circles (circles.mukoko.com) is tanzanite primary + terracotta accent (owner decision, 2026-10-06). The canon row is corrected in mzizi-dev/mzizi-registry#449. The overlay sets --primary and --ring to tanzanite and --brand-accent to terracotta, light and dark, and both packages export it. The generator learns an optional accent family per brand. A LOCAL_BRAND_MINERALS bridge entry can now supersede a snapshot row that canon is correcting; once the snapshot catches up, canon wins.

[@​bundu/ui 0.4.0] - 2026-10-06

The release of staging to main after @bundu/ui 0.3.0, which npm has had since 2026-10-05 (published from main at 4ce82a7). Under the org versioning policy this release is the next minor, so @bundu/ui is 0.4.0: it carries every @bundu/ui entry below, down to the 0.3.0 heading, which were merged into staging after 0.3.0 left main. @nyuchi/ui (0.3.0) and @bundu/server (0.1.0) have no package changes and are not republished. Three repository entries below (the README's design-system link, the versioning policy and the last "Changed (repository)" list) were already on main when 0.3.0 was published.

Changed (repository): the registry pin follows the v4.4.0 release on registry main

scripts/registry-ref.json moves from 95318a9 on registry staging to 5067b5e, mzizi-dev/mzizi-registry#447. That is the v4.4.0 release of staging to main, and its tree is the same as 95318a9mzizi-dev/mzizi-registry#446pnpm registry:check reports all 86 files identical, and contracts/ match at the new pin (66 contracts). The packages are now built from a released registry commit rather than a staging one.

Added (@​bundu/ui): the Nyuchi console's form, chart and table deltas, and the registry primitives

The registry pin moves to mzizi-dev/mzizi-registry#443 (95318a9 on registry staging). That PR takes four deltas from the Nyuchi console (nyuchi/nyuchi-platform console/web) into the Dashboard Standard contracts.

• app/FormField.astro (contract app/form-field 1.1.0):
  • as: "textarea" with rows (default 5), or as: "select" with options ({ value, label }[]) and emptyOption. Both have the same wiring and app density as the input; a read-only select is disabled.
  • type adds number, date and file. accept and multiple apply to a file input, which never carries a value; min, max and step to number and date inputs.
  • inputmode adds numeric and decimal.
  • wide spans both FormLayout columns.
• app/FormLayout.astro (1.1.0): enctype: "multipart/form-data" for a form with a file field.
• app/BarChart.astro (1.1.0): column-layout axis labels never crowd. At most 6 show from sm up; below sm, only the first, the middle (from 5 points) and the last.
• app/DataTable.astro (1.1.0): a cell's tone (neutral, success, warning, info, accent or premium) is a status pill, data-slot="status" in the mineral status colours. badge keeps the registry badge variants.
• ui/variants: appTextareaClasses, appFileInputClasses, STATUS_TONES / StatusTone and statusToneClasses.
• The registry primitives with ui/ contracts are now shipped as @bundu/ui/{Alert,Button,Card,Input,Label,Skeleton,StatusBadge}.astro. The app/ builds of Alert, Button, Card, Input, Label and Skeleton now come from the registry's app-*mzizi-dev/mzizi-registry#428NativeSelect, SegmentedControl and Toaster follow mzizi-dev/mzizi-registry#441 and #442.

Changed (repository): trusted publishing only, and a never-published package fails clearly

... (truncated)

Commits

• 681379e chore(release): staging to main (@​bundu/ui 0.5.0, @​nyuchi/ui 0.4.0) (#51)
• dbc4bf9 chore(release): staging to main (@​bundu/ui 0.4.0) (#47)
• 7ea6d7e ci: package releases follow the org versioning policy (#32)
• 33ef77f feat(bundu-ui): the Mzizi Discover Standard, eleven pure Astro components (#33)
• 33be8f9 chore(tokens): canon snapshot carries events; drop the Mukoko Events bridge (...
• 6364e3a feat(tokens): brand-events.css for Mukoko Events; brand-nhimbe.css re-exports...
• 6cc9298 chore(tokens): canon snapshot carries kweli, learning, news and weather (#28)
• 182a93d feat(tokens): brand overlays for kweli (malachite) and learning (gold) (#26)
• 639a788 feat(tokens): brand overlays for nhimbe, lingo, bushtrade, campfire, news and...
• b8d5c12 feat(bundu-ui): a contract for every app component, tested on every render (#23)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​bundu/ui since your current version.

Updates astro from 7.3.5 to 7.3.8

Release notes

Sourced from astro's releases.

astro@7.3.8

Patch Changes

• #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

• #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

• #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

• #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

astro@7.3.7

Patch Changes

• #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

• #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

• #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

• #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

• #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

astro@7.3.6

Patch Changes

• #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

• #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

• #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

• #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

• #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

• #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

• #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

• #18193 95d5d16 Thanks @​astro-factory! - Fixes astro build failing on Windows with Node.js 25+ with ERR_INVALID_ARG_VALUE when clearing the output directory hits a transient EPERM error

• #18220 d6c13a4 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Picture /> and <Font /> components when type-checking a project with tsc and @astrojs/ts-content-mapper

• #18133 faac481 Thanks @​astro-factory! - Fixes lost request state when Vite discovers server dependencies during a request in Cloudflare dev mode

• #18146 2af4516 Thanks @​astro-factory! - Fixes CSS imported from an injectScript('page') script being dropped during build

• #18159 e5f8fe0 Thanks @​astro-factory! - Fixes a hang when a server:defer component is inside a slot of another component in an MDX content collection entry

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.8

Patch Changes

• #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

• #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

• #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

• #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

7.3.7

Patch Changes

• #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

• #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

• #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

• #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

• #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

7.3.6

Patch Changes

• #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

• #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

• #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

• #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

• #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

• #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

• #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

• #18193 95d5d16 Thanks @​astro-factory! - Fixes astro build failing on Windows with Node.js 25+ with ERR_INVALID_ARG_VALUE when clearing the output directory hits a transient EPERM error

• #18220 d6c13a4 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Picture /> and <Font /> components when type-checking a project with tsc and @astrojs/ts-content-mapper

• #18133 faac481 Thanks @​astro-factory! - Fixes lost request state when Vite discovers server dependencies during a request in Cloudflare dev mode

... (truncated)

Commits

• 3571e2d [ci] release (#18292)
• 0e9e857 Keep existing pnpm allowBuilds approvals in astro add (#18298)
• 882dd98 Replace esbuild with Vite and Rolldown APIs (#18263)
• 28e7410 fix(astro): provide Astro.cache when rendering error pages (#18293)
• 31f13c3 Fix glob() loader watcher ignoring patterns starting with an extglob like `!(...
• 25c19fa [ci] release (#18272)
• 38f6793 fix(astro): approve workerd builds in astro add cloudflare for pnpm v11+ an...
• 547b572 Restore content-type gate in security.checkOrigin so JSON requests are not bl...
• fcf6ed6 fix(assets): return requested format from Sharp transform (#18222)
• bec7d18 Ignore layout frontmatter in Markdown content collection entries with `defe...
• Additional commits viewable in compare view

Updates @types/node from 26.6.3 to 26.6.5

Commits

• See full diff in compare view

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates globals from 17.12.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

• Update globals (2026-10-01) (#354) b007369

---

sindresorhus/globals@v17.12.0...v17.13.0

Commits

• ce512bc 17.13.0
• b007369 Update globals (2026-10-01) (#354)
• 16cb1fe Meta tweaks
• See full diff in compare view

Updates typescript-eslint from 8.71.0 to 8.71.1

Release notes

Sourced from typescript-eslint's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• d57b8da chore(release): publish 8.71.1
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	nyuchi-tools	c8cd9f0	Oct 14 2026, 06:01 AM

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.