chore(deps): bump the npm-minor-patch group across 1 directory with 9 updates

[dependabot]

Bumps the npm-minor-patch group with 9 updates in the / directory:

Package	From	To
@salesforce/core	8.32.2	8.32.6
lighthouse	13.4.0	13.4.1
@eslint/eslintrc	3.3.5	3.3.6
@typescript-eslint/eslint-plugin	8.63.0	8.65.0
@typescript-eslint/parser	8.63.0	8.65.0
eslint	10.6.0	10.8.0
eslint-plugin-n	18.2.1	18.2.2
prettier	3.9.4	3.9.6
sinon	22.0.0	22.1.0

Updates @salesforce/core from 8.32.2 to 8.32.6

Release notes

Sourced from @​salesforce/core's releases.

8.32.6

Bug Fixes

• deps: bump fast-uri from 3.0.1 to 3.1.4 (e0d01fb)

8.32.6-eca.2

Bug Fixes

• skip parent auth lookup when SF_SCRATCH_SIGNUP_CONNECTED_APP is set (4ee5085)

8.32.6-eca.1

Bug Fixes

• prevent parent ECA credentials from overriding auth code exchange (7d237b6)
• use auth code exchange when signup app is overridden via env var (deffe8d)

8.32.6-eca.0

Features

• add env vars to override scratch org signup Connected App (168a718)

8.32.5

Bug Fixes

• fall back to 1d for unrecognized SF_LOG_ROTATION_PERIOD values @​W-23050508@ (#1314) (26cfc6a)

8.32.4

Bug Fixes

• deps: bump websocket-driver from 0.7.4 to 0.7.5 (9fd28dd)

8.32.3

Bug Fixes

• validate sfdcLoginUrl domain before use as OAuth endpoint @​W-22835124@ (652a692)

Changelog

Sourced from @​salesforce/core's changelog.

8.32.6 (2026-07-24)

Bug Fixes

• deps: bump fast-uri from 3.0.1 to 3.1.4 (e0d01fb)

8.32.5 (2026-07-21)

Bug Fixes

• fall back to 1d for unrecognized SF_LOG_ROTATION_PERIOD values @​W-23050508@ (#1314) (26cfc6a)

8.32.4 (2026-07-16)

Bug Fixes

• deps: bump websocket-driver from 0.7.4 to 0.7.5 (9fd28dd)

8.32.3 (2026-07-13)

Bug Fixes

• validate sfdcLoginUrl domain before use as OAuth endpoint @​W-22835124@ (652a692)

Commits

• a12d1ad chore(release): 8.32.6 [skip ci]
• 66db7c2 Merge pull request #1316 from forcedotcom/dependabot-npm_and_yarn-fast-uri-3.1.4
• e0d01fb fix(deps): bump fast-uri from 3.0.1 to 3.1.4
• 6339400 chore(release): 8.32.5 [skip ci]
• 26cfc6a fix: fall back to 1d for unrecognized SF_LOG_ROTATION_PERIOD values @​W-230505...
• 62b3d25 chore(release): 8.32.4 [skip ci]
• d78f1ab Merge pull request #1312 from forcedotcom/dependabot-npm_and_yarn-websocket-d...
• 2352ebf Merge pull request #1313 from forcedotcom/dependabot/npm_and_yarn/examples/we...
• f7a3bcf chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /examples
• 9fd28dd fix(deps): bump websocket-driver from 0.7.4 to 0.7.5
• Additional commits viewable in compare view

Updates lighthouse from 13.4.0 to 13.4.1

Release notes

Sourced from lighthouse's releases.

v13.4.1

Full Changelog

We expect this release to ship in the DevTools of Chrome 152, and to PageSpeed Insights within 2 weeks.

Core

• baseline: Dynamic Baseline High calculation and feature summary improvements (#17107, #17112, #17132)
• webmcp: Refined WebMCP gatherers to check document.modelContext and removed snapshot mode (#17128, #17129)
• docs: Added documentation links for agentic audits (#17108)
• network: Detailed error messages when fetching robots.txt or llms.txt fails (#17083)

Clients

• viewer: Enabled Agentic Browsing category via PSI API (#17090)
• extension: Version bump (#17094)

Deps

• Upgraded dependencies, including @sentry/node to v10 (#17079, #17093, #17135)

Tests & Build

• build: Minified Lightrider bundle (#17117)
• tests: Added bundle size check and updated Puppeteer API tests (#17088, #17096)
• devtools: Synced e2e tests from devtools-frontend (#17121)

Infrastructure & Workflow

• ci: Configured npm Trusted Publishing via OIDC and consolidated release workflows (#16944, #17097, #17098, #17099, #17100)
• docs: Added verification skill and documentation updates (#17091, #17109, #17137)

Changelog

Sourced from lighthouse's changelog.

13.4.1 (2026-07-20)

Full Changelog

We expect this release to ship in the DevTools of Chrome 152, and to PageSpeed Insights within 2 weeks.

Core

• baseline: Dynamic Baseline High calculation and feature summary improvements (#17107, #17112, #17132)
• webmcp: Refined WebMCP gatherers to check document.modelContext and removed snapshot mode (#17128, #17129)
• docs: Added documentation links for agentic audits (#17108)
• network: Detailed error messages when fetching robots.txt or llms.txt fails (#17083)

Clients

• viewer: Enabled Agentic Browsing category via PSI API (#17090)
• extension: Version bump (#17094)

Deps

• Upgraded dependencies, including @sentry/node to v10 (#17079, #17093, #17135)

Tests & Build

• build: Minified Lightrider bundle (#17117)
• tests: Added bundle size check and updated Puppeteer API tests (#17088, #17096)
• devtools: Synced e2e tests from devtools-frontend (#17121)

Infrastructure & Workflow

• ci: Configured npm Trusted Publishing via OIDC and consolidated release workflows (#16944, #17097, #17098, #17099, #17100)
• docs: Added verification skill and documentation updates (#17091, #17109, #17137)

Commits

• 1d58f5b misc(release): update Node version used in publish job (#17139)
• abca8be v13.4.1 (#17138)
• de07a17 misc(release): add manual google3 step to dep upgrade process (#17137)
• 46c73c0 deps: upgrade deps (#17135)
• 74cb00f core(baseline): store newest feature year in debugData, remove displayValue (...
• c0b4bb4 core(webmcp): remove snapshot mode from webmcp audits (#17128)
• 7176d17 core(webmcp): use document.modelContext check in webmcp gatherers (#17129)
• 3608d82 core(baseline): report newest feature summary in displayValue (#17112)
• 8afe335 tests(devtools): sync e2e tests from devtools-frontend (#17121)
• 0ba385d misc(build): minify Lightrider bundle (#17117)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lighthouse since your current version.

Updates @eslint/eslintrc from 3.3.5 to 3.3.6

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

• update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.6 (2026-07-10)

Bug Fixes

• update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Commits

• b433a22 chore: release 3.3.6 🚀 (#236)
• 0c5de74 fix: update js-yaml to 4.3.0 to address security vulnerability (#235)
• 94837a4 docs: Update README sponsors
• dbae1a1 docs: Update README sponsors
• 19fe72a docs: Update README sponsors
• 92ebd17 docs: Update README sponsors
• 3ba4c8c ci: add Node.js 26 to CI (#231)
• f8d268a docs: Update README sponsors
• 6e20867 docs: Update README sponsors
• 6d722b6 docs: Update README sponsors
• Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.63.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

• support parsing import defer (#12513)
• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.65.0 (2026-07-20)

🚀 Features

• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

🩹 Fixes

• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

🚀 Features

• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 63ba81b chore(release): publish 8.65.0
• aa602bd fix(eslint-plugin): [no-unnecessary-parameter-property-assignment] don't flag...
• 1e90d67 feat(eslint-plugin): [no-shadow] specialized error on enum declaration and me...
• b32fb34 docs: fix broken code samples in no-extraneous-class and prefer-function-type...
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• 18c01c7 feat(eslint-plugin): [no-restricted-imports] deprecate extension rule (#12527)
• 96e8fe2 fix(eslint-plugin): [unbound-method] report unbound methods accessed via memb...
• 0d06406 chore: add attw validation to repo (#12437)
• 9d9973b fix(eslint-plugin): [prefer-string-starts-ends-with] handle escaped $ ending ...
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.63.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

• support parsing import defer (#12513)
• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
• 0d06406 chore: add attw validation to repo (#12437)
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• 414d9ab chore(release): publish 8.64.0
• See full diff in compare view

Updates eslint from 10.6.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

• 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
• 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
• e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
• 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
• 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
• b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
• 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
• 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
• 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
• 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
• d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
• eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
• c5963f7 docs: Update README (GitHub Actions Bot)

Chores

• 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
• eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
• e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
• ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
• 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
• fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
• 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
• 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
• a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
• 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
• 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
• a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
• c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
• 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
• 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
• dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
• 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
• 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
• d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
• bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

• 749dfed 10.8.0
• 4bd0d75 Build: changelog update for 10.8.0
• 4fbf46d test: pin webpack version to 5.108.4 (#21137)
• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
• 784dfbe docs: Clarify no-eq-null description (#21120)
• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
• eccbe7b test: add error locations to no-class-assign (#21123)
• 2fee9bb feat: export ConfigObject from eslint/config (#21082)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
• Additional commits viewable in compare view

Updates eslint-plugin-n from 18.2.1 to 18.2.2

Release notes

Sourced from eslint-plugin-n's releases.

v18.2.2

18.2.2 (2026-07-11)

🩹 Fixes

• Ignore HTTP imports in no-missing-import (#547) (3ff929d)
• no-callback-literal: report object, array, and template literals (#552) (dca2330)

Changelog

Sourced from eslint-plugin-n's changelog.

18.2.2 (2026-07-11)

🩹 Fixes

• Ignore HTTP imports in no-missing-import (#547) (3ff929d)
• no-callback-literal: report object, array, and template literals (#552) (dca2330)

Commits

• 0c31d00 chore(master): release 18.2.2 (#548)
• dca2330 fix(no-callback-literal): report object, array, and template literals (#552)
• 3ff929d fix: Ignore HTTP imports in no-missing-import (#547)
• See full diff in compare view

Updates prettier from 3.9.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates sinon from 22.0.0 to 22.1.0

Changelog

Sourced from sinon's changelog.

22.1.0

• d36e921b fix: let returns override returnsArg (王胜)

  Signed-off-by: 王胜 2318857637@qq.com

• 40c4caa0 fix: align restoreObject docs test with idempotent behavior (#2745) (Julia Miller)

  restoreObject was made idempotent in #2737 — it no longer throws for objects with no restorable methods. Updates the docs page and its corresponding test to reflect this.

• a68dac19 fix: throw a clear error when throwArg index equals the argument count (#2743) (spokodev)

  • fix: throw a clear error when throwArg index equals the argument count

  spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it with pos equal to the number of recorded arguments slipped past the guard and reached throw this.args[pos], throwing undefined instead of the intended TypeError. A thrown undefined cannot be inspected as an Error and is reported by test frameworks as no exception thrown.

  Use >= to match ensureArgs in behavior.js and the sibling callArg helpers, which already reject an out-of-range index with a clear error.

• 9ea504e3 feat: make sinon.restoreObject idempotent (#2737) (Ilia Choly)

  Passing an object with no live fakes to restoreObject now restores nothing instead of throwing, giving it symmetry with sinon.restore() and sandbox.restore(). The strict "found no methods" check is retained for spy(object) and stub(object), which now use a dedicated walkObjectStrict export, while restoreObject uses the loose walkObject. Passing a falsy value still throws.

  Fixes #2736