chore: Bump the dev-dependencies group across 1 directory with 15 updates

[dependabot[bot]]

Bumps the dev-dependencies group with 15 updates in the / directory:

Package	From	To
pkg-pr-new	0.0.35	0.0.39
tsup	8.3.5	8.3.6
turbo	2.3.3	2.4.2
vite	6.0.3	6.1.0
vitest	2.1.8	3.0.5
@arethetypeswrong/cli	0.17.1	0.17.3
json-schema-to-typescript	15.0.3	15.0.4
msw	2.6.8	2.7.0
@types/react	19.0.1	19.0.8
@types/react-dom	19.0.1	19.0.3
eslint	9.15.0	9.20.1
eslint-config-next	15.0.4	15.1.7
postcss	8.4.49	8.5.2
tailwindcss	3.4.16	4.0.6
typescript	5.6.3	5.7.3

Updates pkg-pr-new from 0.0.35 to 0.0.39

Commits

• e5d37e0 release: v0.0.39
• 04a4372 release: v0.0.38
• ceec0e4 release: v0.0.37
• 21225a0 fix: ensure template glob doesn't evaluate to false (#303)
• 30f5593 release: v0.0.36
• See full diff in compare view

Updates tsup from 8.3.5 to 8.3.6

Release notes

Sourced from tsup's releases.

v8.3.6

   🐞 Bug Fixes

• Don't await sub-process of onSuccess  -  by @​laat in egoist/tsup#1256 (314a6)

    View changes on GitHub

Commits

• bee8f42 chore: release v8.3.6
• 86c3b0b chore: fix pass options
• 314a6d7 fix: don't await sub-process of onSuccess (#1256)
• See full diff in compare view

Updates turbo from 2.3.3 to 2.4.2

Release notes

Sourced from turbo's releases.

Turborepo v2.4.2

What's Changed

Changelog

• feat(boundaries): boundaries tags by @​NicholasLYang in vercel/turborepo#9900
• feat: adds pnpm lockfile ignoredOptionalDependencies by @​ragrag in vercel/turborepo#9939
• test: add tests for authentication tokens and SSO by @​anthonyshew in vercel/turborepo#9937
• fix(mfe): properly handle versionless configuration by @​chris-olszewski in vercel/turborepo#9945

Full Changelog: https://github.com/vercel/turborepo/compare/v2.4.1...v2.4.2

Turborepo v2.4.2-canary.0

What's Changed

Changelog

• feat(boundaries): boundaries tags by @​NicholasLYang in vercel/turborepo#9900
• feat: adds pnpm lockfile ignoredOptionalDependencies by @​ragrag in vercel/turborepo#9939
• test: add tests for authentication tokens and SSO by @​anthonyshew in vercel/turborepo#9937
• fix(mfe): properly handle versionless configuration by @​chris-olszewski in vercel/turborepo#9945

Full Changelog: https://github.com/vercel/turborepo/compare/v2.4.1...v2.4.2-canary.0

Turborepo v2.4.1

Full Changelog: https://github.com/vercel/turborepo/compare/v2.4.0...v2.4.1

What's Changed

• release(turborepo): 2.4.0 by @​github-actions in vercel/turborepo#9863
• feat(boundaries): ignore nested workspaces by @​NicholasLYang in vercel/turborepo#9840
• chore(docs): correct syntax error in ESLint configuration example by @​brunocroh in vercel/turborepo#9870
• feat(bun): support bun.lock by @​chris-olszewski in vercel/turborepo#9783
• chore(ci): always use latest corepack version by @​chris-olszewski in vercel/turborepo#9882
• chore(deps): update git2 to 0.20.0 by @​ognevny in vercel/turborepo#9812
• chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 4 updates by @​dependabot in vercel/turborepo#9877
• fix(microfrontends): fix handling of unsupported version by @​chris-olszewski in vercel/turborepo#9883
• release(turborepo): 2.4.1-canary.0 by @​github-actions in vercel/turborepo#9884
• chore(deps-dev): bump the with-tailwind group in /examples/with-tailwind with 3 updates by @​dependabot in vercel/turborepo#9878
• chore(deps-dev): bump the basic group in /examples/basic with 4 updates by @​dependabot in vercel/turborepo#9879
• chore(deps-dev): bump turbo from 2.3.4 to 2.4.0 in /examples/with-shell-commands in the with-shell-commands group by @​dependabot in vercel/turborepo#9880
• feat(example): update with-react-native-web, Expo SDK 51 & Expo Router (File-based routing) by @​shinjith-dev in vercel/turborepo#9872
• chore: use bunchee instead of tsup by @​anthonyshew in vercel/turborepo#9850
• ci: more usable separator by @​anthonyshew in vercel/turborepo#9890
• fix: release @turbo/repository by @​dimitropoulos in vercel/turborepo#9865

... (truncated)

Commits

• c003d2a publish 2.4.2 to registry
• 7df9ebe release(turborepo): 2.4.2-canary.0 (#9946)
• ef93b23 fix(mfe): properly handle versionless configuration (#9945)
• ef00be3 chore(release): run tests as we build binary (#9942)
• 032449e test: add tests for authentication tokens and SSO (#9937)
• 73ca5fc feat: adds pnpm lockfile ignoredOptionalDependencies (#9939)
• 5f255df feat(boundaries): boundaries tags (#9900)
• cdd75c2 release(turborepo): 2.4.1 (#9936)
• e30e347 chore(deps-dev): bump the basic group in /examples/basic with 3 updates (#9933)
• 51e3e19 chore(deps-dev): bump the with-svelte group in /examples/with-svelte with 3 u...
• Additional commits viewable in compare view

Updates vite from 6.0.3 to 6.1.0

Release notes

Sourced from vite's releases.

[email protected]

Please refer to CHANGELOG.md for details.

v6.1.0

Please refer to CHANGELOG.md for details.

v6.1.0-beta.2

Please refer to CHANGELOG.md for details.

v6.1.0-beta.1

Please refer to CHANGELOG.md for details.

v6.1.0-beta.0

Please refer to CHANGELOG.md for details.

v6.0.11

Please refer to CHANGELOG.md for details.

v6.0.10

Please refer to CHANGELOG.md for details.

v6.0.9

This version contains a breaking change due to security fixes. See https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v6.0.8

Please refer to CHANGELOG.md for details.

v6.0.7

Please refer to CHANGELOG.md for details.

v6.0.6

Please refer to CHANGELOG.md for details.

v6.0.5

Please refer to CHANGELOG.md for details.

v6.0.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.1.0 (2025-02-05)

Features

• feat: show hosts in cert in CLI (#19317) (a5e306f), closes #19317
• feat: support for env var for defining allowed hosts (#19325) (4d88f6c), closes #19325
• feat: use native runtime to import the config (#19178) (7c2a794), closes #19178
• feat: print port in the logged error message after failed WS connection with EADDRINUSE (#19212) (14027b0), closes #19212
• perf(css): only run postcss when needed (#19061) (30194fa), closes #19061
• feat: add support for .jxl (#18855) (57b397c), closes #18855
• feat: add the builtins environment resolve (#18584) (2c2d521), closes #18584
• feat: call Logger for plugin logs in build (#13757) (bf3e410), closes #13757
• feat: export defaultAllowedOrigins for user-land config and 3rd party plugins (#19259) (dc8946b), closes #19259
• feat: expose createServerModuleRunnerTransport (#18730) (8c24ee4), closes #18730
• feat: support async for proxy.bypass (#18940) (a6b9587), closes #18940
• feat: support log related functions in dev (#18922) (3766004), closes #18922
• feat: use module runner to import the config (#18637) (b7e0e42), closes #18637
• feat(css): add friendly errors for IE hacks that are not supported by lightningcss (#19072) (caad985), closes #19072
• feat(optimizer): support bun text lockfile (#18403) (05b005f), closes #18403
• feat(reporter): add wasm to the compressible assets regex (#19085) (ce84142), closes #19085
• feat(worker): support dynamic worker option fields (#19010) (d0c3523), closes #19010

Fixes

• fix: avoid builtStart during vite optimize (#19356) (fdb36e0), closes #19356
• fix(build): fix stale build manifest on watch rebuild (#19361) (fcd5785), closes #19361
• fix: allow expanding env vars in reverse order (#19352) (3f5f2bd), closes #19352
• fix: avoid packageJson without name in resolveLibCssFilename (#19324) (f183bdf), closes #19324
• fix(html): fix css disorder when building multiple entry html (#19143) (e7b4ba3), closes #19143
• fix: don't call buildStart hooks for vite optimize (#19347) (19ffad0), closes #19347
• fix: don't call next middleware if user sent response in proxy.bypass (#19318) (7e6364d), closes #19318
• fix: respect top-level server.preTransformRequests (#19272) (12aaa58), closes #19272
• fix: use nodeLikeBuiltins for ssr.target: 'webworker' without noExternal: true (#19313) (9fc31b6), closes #19313
• fix(css): less @plugin imports of JS files treated as CSS and rebased (fix #19268) (#19269) (602b373), closes #19268 #19269
• fix(deps): update all non-major dependencies (#19296) (2bea7ce), closes #19296
• fix(resolve): preserve hash/search of file url (#19300) (d1e1b24), closes #19300
• fix(resolve): warn if node-like builtin was imported when resolve.builtin is empty (#19312) (b7aba0b), closes #19312
• fix(ssr): fix transform error due to export all id scope (#19331) (e28bce2), closes #19331
• fix(ssr): pretty print plugin error in ssrLoadModule (#19290) (353c467), closes #19290
• fix: change ResolvedConfig type to interface to allow extending it (#19210) (bc851e3), closes #19210
• fix: correctly resolve hmr dep ids and fallback to url (#18840) (b84498b), closes #18840
• fix: make --force work for all environments (#18901) (51a42c6), closes #18901
• fix: use loc.file from rollup errors if available (#19222) (ce3fe23), closes #19222
• fix(deps): update all non-major dependencies (#19190) (f2c07db), closes #19190
• fix(hmr): register inlined assets as a dependency of CSS file (#18979) (eb22a74), closes #18979
• fix(resolve): support resolving TS files by JS extension specifiers in JS files (#18889) (612332b), closes #18889
• fix(ssr): combine empty source mappings (#19226) (ba03da2), closes #19226
• fix(utils): clone RegExp values with new RegExp instead of structuredClone (fix #19245, fix #1 (56ad2be), closes #19245 #18875 #19247

... (truncated)

Commits

• 3734f80 fix(css): escape double quotes in url() when lightningcss is used (#18997)
• 2b4f115 fix(deps): update all non-major dependencies (#18996)
• 12b612d fix: fallback terser to main thread when function options are used (#18987)
• d88d000 fix(deps): update all non-major dependencies (#18967)
• 21680bd fix(css): skip non css in custom sass importer (#18970)
• 62fad6d chore(deps): update dependency @​rollup/plugin-node-resolve to v16 (#18968)
• 8a6bb4e fix(optimizer): keep NODE_ENV as-is when keepProcessEnv is true (#18899)
• 7d6dd5d fix(ssr): recreate ssrCompatModuleRunner on restart (#18973)
• c4b532c fix(css): root relative import in sass modern API on Windows (#18945)
• 27f691b refactor: make internal invoke event to use the same interface with `handleIn...
• Additional commits viewable in compare view

Updates vitest from 2.1.8 to 3.0.5

Release notes

Sourced from vitest's releases.

v3.0.5

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

🚀 Features

• ui: Insert message "no tests found" in ui - by @​DevJoaoLopes in vitest-dev/vitest#7366 (92da4)

🐞 Bug Fixes

• Validate websocket request - by @​hi-ogawa and @​AriPerkkio in vitest-dev/vitest#7317 (191ef)
• Don't toggle cli cursor on non-TTY - by @​AriPerkkio in vitest-dev/vitest#7336 (3c805)
• vite-node: Differentiate file url with hash and query - by @​hi-ogawa in vitest-dev/vitest#7365 (926ca)

View changes on GitHub

v3.0.4

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963

   🐞 Bug Fixes

• Filter projects eagerly during config resolution  -  by @​sheremet-va and @​AriPerkkio in vitest-dev/vitest#7313 (dff44)
• Apply development|production condition on Vites 6 by @​hi-ogawa and @​sheremet-va (#7301) (ef146)
• browser: Restrict served files from /__screenshot-error  -  by @​hi-ogawa in vitest-dev/vitest#7340 (ed9ae)
• deps: Update all non-major dependencies  -  by @​sheremet-va in vitest-dev/vitest#7297 (38ea8)
• runner: Timeout long sync hook  -  by @​hi-ogawa in vitest-dev/vitest#7289 (c60ee)
• typechecking: Support typechecking parsing with Vite 6  -  by @​sheremet-va in vitest-dev/vitest#7335 (bff70)
• types: Fix public types  -  by @​mrginglymus and @​sheremet-va in vitest-dev/vitest#7328 (ce6af)

    View changes on GitHub

v3.0.3

   🐞 Bug Fixes

• browser:
  • Don't throw a validation error if v8 coverage is used with filtered instances  -  by @​sheremet-va in vitest-dev/vitest#7306 (fa463)
  • Don't fail when running --browser.headless if the browser projest is part of the workspace  -  by @​sheremet-va in vitest-dev/vitest#7311 (e43a8)

   🏎 Performance

• reporters: Update summary only when needed  -  by @​AriPerkkio in vitest-dev/vitest#7291 (7f36b)

    View changes on GitHub

v3.0.2

   🐞 Bug Fixes

... (truncated)

Commits

• 1154662 chore: release v3.0.5
• 3c8050e fix: don't toggle cli cursor on non-TTY (#7336)
• 191ef9e fix: validate websocket request (#7317)
• 9e40437 chore: release v3.0.4
• ef1464f fix: apply development|production condition on Vite 6 (#7301)
• 38ea8ea fix(deps): update all non-major dependencies (#7297)
• dff4406 fix: filter projects eagerly during config resolution (#7313)
• ce6af70 fix(types): fix public types (#7328)
• bff70be fix(typechecking): support typechecking parsing with Vite 6 (#7335)
• a8d123c chore(deps): update eslint packages (#7086)
• Additional commits viewable in compare view

Updates @arethetypeswrong/cli from 0.17.1 to 0.17.3

Changelog

Sourced from @​arethetypeswrong/cli's changelog.

0.17.3

Patch Changes

• Updated dependencies [e3c775e]
  • @​arethetypeswrong/core@​0.17.3

0.17.2

Patch Changes

• Updated dependencies [59940cd]
  • @​arethetypeswrong/core@​0.17.2

Commits

• See full diff in compare view

Updates json-schema-to-typescript from 15.0.3 to 15.0.4

Commits

• See full diff in compare view

Updates msw from 2.6.8 to 2.7.0

Release notes

Sourced from msw's releases.

v2.7.0 (2024-12-17)

Features

• use picocolors instead of chalk (#2377) (85bdd82dfe4cd3d514d7820dad3338b485084fbf) @​Namchee @​kettanaito

v2.6.9 (2024-12-16)

Bug Fixes

• support SharedArrayBuffer in HttpResponse.arrayBuffer (#2389) (41f00e1a67e21010ab9c1a46c8e92193b655f24a) @​danilofuchs @​kettanaito

Commits

• e3234fd chore(release): v2.7.0
• 85bdd82 feat: use picocolors instead of chalk (#2377)
• 58f2d2c chore: use v18 in .nvmrc
• a845ea1 chore(release): v2.6.9
• 417918f chore: pack/build before all e2e tests (#2395)
• 41f00e1 fix: support SharedArrayBuffer in HttpResponse.arrayBuffer (#2389)
• a6c419c chore: split build into standalone jobs (#2386)
• See full diff in compare view

Updates @types/react from 19.0.1 to 19.0.8

Commits

• See full diff in compare view

Updates @types/react-dom from 19.0.1 to 19.0.3

Commits

• See full diff in compare view

Updates eslint from 9.15.0 to 9.20.1

Release notes

Sourced from eslint's releases.

v9.20.1

Bug Fixes

• 274f054 fix: fix RuleContext type (#19417) (Francesco Trotta)

Documentation

• fe3ccb2 docs: allow typing in search box while dropdown is open (#19424) (Amaresh S M)
• 93c78a5 docs: Add instructions for pnpm compat (#19422) (Nicholas C. Zakas)
• b476a93 docs: Fix Keyboard Navigation for Search Results (#19416) (Amaresh S M)
• ccb60c0 docs: Update README (GitHub Actions Bot)

v9.20.0

Features

• e89a54a feat: change behavior of inactive flags (#19386) (Milos Djermanovic)

Bug Fixes

• 91d4d9f fix: Bring types in sync with @​eslint/core (#19157) (Nicholas C. Zakas)
• fa25c7a fix: Emit warning when empty config file is used (#19399) (Nicholas C. Zakas)
• 31a9fd0 fix: Clearer error message for wrong plugin format (#19380) (Nicholas C. Zakas)
• 61d99e3 fix: Better error message for unserializable parser (#19384) (Nicholas C. Zakas)
• db1b9a6 fix: Ensure module scope is checked for references in consistent-this (#19383) (Nicholas C. Zakas)
• 8bcd820 fix: arrow-body-style crash with single-token body (#19379) (Milos Djermanovic)

Documentation

• b7012c8 docs: rewrite examples with var using let and const (#19407) (Mueez Javaid Hashmi)
• 6406376 docs: Update README (GitHub Actions Bot)
• 350f2b9 docs: rewrite some examples with var using let and const (#19404) (Mueez Javaid Hashmi)
• 93c325a docs: rewrite examples with var using let and const (#19398) (Mueez Javaid Hashmi)
• 56ff404 docs: replace var with let or const in rules docs (#19396) (Daniel Harbrueger)
• 4053226 docs: change sourceType in no-eval examples (#19393) (Milos Djermanovic)
• 1324af0 docs: replace var with let and const in rules docs (#19392) (Daniel Harbrueger)
• 8b87e00 docs: replace var with const and let in rules (#19389) (Tanuj Kanti)
• 758c66b docs: Explain what frozen rules mean (#19382) (Nicholas C. Zakas)
• 0ef8bb8 docs: additional checks for rule examples (#19358) (Milos Djermanovic)
• 58ab2f6 docs: fix order of installation steps in getting started (#19326) (Tanuj Kanti)

Chores

• 979097a chore: upgrade @​eslint/js@​9.20.0 (#19412) (Francesco Trotta)
• 031734e chore: package.json update for @​eslint/js release (Jenkins)
• d4c47c3 test: avoid empty config warning in test output (#19408) (Milos Djermanovic)
• 67dd82a chore: update dependency @​eslint/json to ^0.10.0 (#19387) (renovate[bot])
• 15ac0e1 chore: add permissions: read-all to stale.yml workflow (#19374) (Josh Goldberg ✨)

v9.19.0

Features

• 1637b8e feat: add --report-unused-inline-configs (#19201) (Josh Goldberg ✨)

Bug Fixes

• aae6717 fix: sync rule type header comments automatically (#19276) (Francesco Trotta)

Documentation

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.20.1 - February 11, 2025

• fe3ccb2 docs: allow typing in search box while dropdown is open (#19424) (Amaresh S M)
• 274f054 fix: fix RuleContext type (#19417) (Francesco Trotta)
• 93c78a5 docs: Add instructions for pnpm compat (#19422) (Nicholas C. Zakas)
• b476a93 docs: Fix Keyboard Navigation for Search Results (#19416) (Amaresh S M)
• ccb60c0 docs: Update README (GitHub Actions Bot)

v9.20.0 - February 7, 2025

• 979097a chore: upgrade @​eslint/js@​9.20.0 (#19412) (Francesco Trotta)
• 031734e chore: package.json update for @​eslint/js release (Jenkins)
• 91d4d9f fix: Bring types in sync with @​eslint/core (#19157) (Nicholas C. Zakas)
• b7012c8 docs: rewrite examples with var using let and const (#19407) (Mueez Javaid Hashmi)
• d4c47c3 test: avoid empty config warning in test output (#19408) (Milos Djermanovic)
• e89a54a feat: change behavior of inactive flags (#19386) (Milos Djermanovic)
• fa25c7a fix: Emit warning when empty config file is used (#19399) (Nicholas C. Zakas)
• 6406376 docs: Update README (GitHub Actions Bot)
• 350f2b9 docs: rewrite some examples with var using let and const (#19404) (Mueez Javaid Hashmi)
• 93c325a docs: rewrite examples with var using let and const (#19398) (Mueez Javaid Hashmi)
• 56ff404 docs: replace var with let or const in rules docs (#19396) (Daniel Harbrueger)
• 4053226 docs: change sourceType in no-eval examples (#19393) (Milos Djermanovic)
• 1324af0 docs: replace var with let and const in rules docs (#19392) (Daniel Harbrueger)
• 8b87e00 docs: replace var with const and let in rules (#19389) (Tanuj Kanti)
• 31a9fd0 fix: Clearer error message for wrong plugin format (#19380) (Nicholas C. Zakas)
• 61d99e3 fix: Better error message for unserializable parser (#19384) (Nicholas C. Zakas)
• 758c66b docs: Explain what frozen rules mean (#19382) (Nicholas C. Zakas)
• 67dd82a chore: update dependency @​eslint/json to ^0.10.0 (#19387) (renovate[bot])
• db1b9a6 fix: Ensure module scope is checked for references in consistent-this (#19383) (Nicholas C. Zakas)
• 8bcd820 fix: arrow-body-style crash with single-token body (#19379) (Milos Djermanovic)
• 15ac0e1 chore: add permissions: read-all to stale.yml workflow (#19374) (Josh Goldberg ✨)
• 0ef8bb8 docs: additional checks for rule examples (#19358) (Milos Djermanovic)
• 58ab2f6 docs: fix order of installation steps in getting started (#19326) (Tanuj Kanti)

v9.19.0 - January 24, 2025

• 9b9cb05 chore: upgrade @​eslint/js@​9.19.0 (#19371) (Milos Djermanovic)
• 58560e7 chore: package.json update for @​eslint/js release (Jenkins)
• cfea9ab docs: Clarify overrideConfig option (#19370) (Nicholas C. Zakas)
• 2b84f66 docs: Update README (#19362) (Nicholas C. Zakas)
• 044f93c docs: clarify frozen rule description (#19351) (Pavel)
• 797ee7c docs: fix Bluesky links (#19368) (Milos Djermanovic)
• Description%20has%20been%20truncated
  %0A" rel="nofollow" target="_blank" >