Skip to content

Bump the npm-minor-patch group across 4 directories with 14 updates - #1817

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-bbc91e34d7
Open

Bump the npm-minor-patch group across 4 directories with 14 updates#1817
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-bbc91e34d7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 1 update in the / directory: @playwright/test.
Bumps the npm-minor-patch group with 12 updates in the /frontend-modern directory:

Package From To
dompurify 3.4.13 3.4.14
highlight.js 11.11.1 11.12.0
solid-js 1.9.14 1.9.15
@typescript-eslint/eslint-plugin 8.63.0 8.69.0
@typescript-eslint/parser 8.63.0 8.69.0
autoprefixer 10.5.2 10.5.5
eslint-plugin-solid 0.14.5 0.17.0
globals 17.7.0 17.12.0
postcss 8.5.23 8.5.28
typescript-eslint 8.63.0 8.69.0
vite-plugin-solid 2.11.12 2.11.14
vite-plugin-sri-gen 1.7.1 1.7.4

Bumps the npm-minor-patch group with 1 update in the /internal/cloudcp/portal/frontend directory: esbuild.
Bumps the npm-minor-patch group with 1 update in the /tests/integration directory: @playwright/test.

Updates @playwright/test from 1.56.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits
  • 1b025d7 chore: mark v1.63.0 (#42569)
  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
  • Additional commits viewable in compare view

Updates @playwright/test from 1.56.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits
  • 1b025d7 chore: mark v1.63.0 (#42569)
  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
  • Additional commits viewable in compare view

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates highlight.js from 11.11.1 to 11.12.0

Release notes

Sourced from highlight.js's releases.

v11.12.0 - Summer, hot and rainy.

Parser Engine:

  • fix(parser) count named capture groups when rewriting backreferences [spokodev][]

New Grammars:

  • add FreeDesktop config file (.desktop / systemd) grammar [gg582][]
  • added 3rd party Cedar grammar to SUPPORTED_LANGUAGES [Dhruv Maniya][]
  • added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES [jiaopengzi][]
  • added 3rd party Djot grammar to SUPPORTED_LANGUAGES [Mark Scherer][]
  • added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES [Ryne Andal][]
  • added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES [Lehlogonolo Poole][]
  • added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES [Romain Beauxis][]
  • added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES [Kaida-Amethyst][]
  • added 3rd party Pkl grammar to SUPPORTED_LANGUAGES [Dan Chao][]
  • added 3rd party RAScript grammar to SUPPORTED_LANGUAGES [Joshua Raphael][]
  • added 3rd party Veryl grammar to SUPPORTED_LANGUAGES [Naoya Hatta][]
  • added 3rd party Why3 grammar to SUPPORTED_LANGUAGES [JGalego][]
  • added 3rd party Xojo grammar to SUPPORTED_LANGUAGES [patricksalo][]
  • referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES [Styx0x6][]

Core Grammars:

  • fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 [Mark Xian][]
  • fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 [Jayesh Bhade][]
  • fix(c, cpp) scope angle-bracket header string to #include, issue #3505 [Pablo][]
  • fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 [David Pavlovschii][]
  • enh(cmake) add block and endblock keywords [Anonymous Maarten][]
  • fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 [Mark Xian][]
  • fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 [Mark Xian][]
  • fix(crystal) stop treating integer division // as a regex literal [Zain Asif][]
  • enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 [Sarath Francis][]
  • enh(css) add corner-shape properties [Hama Tanveer][]
  • enh(css) support six-digit unicode-range values [Konstantin Baltsat][]
  • enh(dart) add highlighting for class and function names [guuido][]
  • enh(dns) highlight registered CAA property tags, issue #4475 [Joey Huang][]
  • enh(dns) improve grammar: character strings, TXT, classes, escapes, addresses [Checconio][]
  • enh(dos) add batch as an alias, issue #4395 [Hashim Khan][]
  • enh(gherkin) update keyword list [Hirse][]
  • enh(gherkin) variables can't contain whitespace [Hirse][]
  • enh(gherkin) docstrings can use backticks [Hirse][]
  • enh(go) recognize binary integer literals [spokodev][]
  • enh(groovy) support underscores in numeric literals [greymoth][]
  • fix(haskell) highlight where in GADT and closed type-family declarations, issue #3753 [Konstantin Baltsat][]
  • enh(java) improve detection of types, including generic and array types [Hannes Wallnoefer][]
  • enh(javascript) add self to built-in variables [Dsaquel][]
  • enh(kotlin) add ktm and ktx aliases [DarkMatter-999][]
  • fix(leaf) fix bug in Leaf keyword highlighting [Francesco Paolo Severino][]
  • fix(lisp) preserve highlighting after quoted multiplication expressions [arturict][]

... (truncated)

Changelog

Sourced from highlight.js's changelog.

Version 11.12.0

Parser Engine:

  • fix(parser) count named capture groups when rewriting backreferences [spokodev][]

New Grammars:

  • add FreeDesktop config file (.desktop / systemd) grammar [gg582][]
  • added 3rd party Cedar grammar to SUPPORTED_LANGUAGES [Dhruv Maniya][]
  • added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES [jiaopengzi][]
  • added 3rd party Djot grammar to SUPPORTED_LANGUAGES [Mark Scherer][]
  • added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES [Ryne Andal][]
  • added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES [Lehlogonolo Poole][]
  • added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES [Romain Beauxis][]
  • added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES [Kaida-Amethyst][]
  • added 3rd party Pkl grammar to SUPPORTED_LANGUAGES [Dan Chao][]
  • added 3rd party RAScript grammar to SUPPORTED_LANGUAGES [Joshua Raphael][]
  • added 3rd party Veryl grammar to SUPPORTED_LANGUAGES [Naoya Hatta][]
  • added 3rd party Why3 grammar to SUPPORTED_LANGUAGES [JGalego][]
  • added 3rd party Xojo grammar to SUPPORTED_LANGUAGES [patricksalo][]
  • referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES [Styx0x6][]

Core Grammars:

  • fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 [Mark Xian][]
  • fix(c) do not highlight C++ std types as built-ins, issue #4103 [Arron Zou][]
  • fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 [Jayesh Bhade][]
  • fix(c, cpp) scope angle-bracket header string to #include, issue #3505 [Pablo][]
  • fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 [David Pavlovschii][]
  • enh(cmake) add block and endblock keywords [Anonymous Maarten][]
  • fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 [Mark Xian][]
  • fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 [Mark Xian][]
  • fix(crystal) stop treating integer division // as a regex literal [Zain Asif][]
  • enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 [Sarath Francis][]
  • enh(css) add corner-shape properties [Hama Tanveer][]
  • enh(css) support six-digit unicode-range values [Konstantin Baltsat][]
  • enh(dart) add highlighting for class and function names [guuido][]
  • enh(dns) highlight registered CAA property tags, issue #4475 [Joey Huang][]
  • enh(dns) improve grammar: character strings, TXT, classes, escapes, addresses [Checconio][]
  • enh(dos) add batch as an alias, issue #4395 [Hashim Khan][]
  • enh(gherkin) update keyword list [Hirse][]
  • enh(gherkin) variables can't contain whitespace [Hirse][]
  • enh(gherkin) docstrings can use backticks [Hirse][]
  • enh(go) recognize binary integer literals [spokodev][]
  • enh(groovy) support underscores in numeric literals [greymoth][]
  • fix(haml) recognize implicit div tag lines starting with .class or #id, issue #3783 [pikammmmm][]
  • fix(haskell) highlight where in GADT and closed type-family declarations, issue #3753 [Konstantin Baltsat][]
  • enh(java) improve detection of types, including generic and array types [Hannes Wallnoefer][]
  • enh(javascript) add self to built-in variables [Dsaquel][]

... (truncated)

Commits
  • f7f7d38 (release) release v11.12.0
  • c4c4728 (docs) FreeDesktop + Kotlin aliases; note extra language override
  • 9142292 bump version to 11.12.0
  • 03d1e7e (chore) rebuild CHANGES.md for 11.12.0
  • ca6bb8e enh(sqf) update to A3 v2.22 (#4460)
  • 1414c96 fix: use Trusted Publishers in publishing pipeline (#4427)
  • 2a9ad7d fix(markdown) don't treat a thematic break as the start of bold text (#4485)
  • 375f3f4 build(deps-dev): bump @​rollup/plugin-commonjs from 28.0.1 to 29.0.3 (#4481)
  • 2ce1706 build(deps-dev): bump del from 8.0.0 to 8.0.1 (#4484)
  • 72084b5 fix(ruby): don't treat scope resolution :: as symbols (#4463)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for highlight.js since your current version.


Updates solid-js from 1.9.14 to 1.9.15

Commits

Updates @typescript-eslint/eslint-plugin from 8.63.0 to 8.69.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

  • eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

  • eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
  • eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
  • eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
  • website: respect allowJs playground config (#12744)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)
  • utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • website: playground crashes on extends configs (#12608)
  • website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.69.0 (2026-08-31)

🚀 Features

  • eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

  • eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
  • eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
  • eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)

🩹 Fixes

  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

... (truncated)

Commits
  • 9a6e546 chore(release): publish 8.69.0
  • 513638e fix(eslint-plugin): [no-meaningless-void-operator] report void on non-call ex...
  • 1dba4c5 chore(eslint-plugin): fix eslint-plugin/require-test-error-positions report...
  • a2fccae fix(eslint-plugin): [unified-signatures] compare type parameters by constrain...
  • a23069d test(eslint-plugin): [no-mixed-enums] add error positions (#12779)
  • 3f0dffd fix(eslint-plugin): [no-mixed-enums] use scope analysis instead of type check...
  • e18fea8 test(eslint-plugin): [no-floating-promises] reactivate skipped node:test sp...
  • 324515c test(eslint-plugin): [no-unnecessary-condition] add tests for optional chains...
  • 2a387f1 feat(eslint-plugin): [no-misused-promises] add flagUnions option for checkCon...
  • 8f4e00a chore(release): publish 8.68.0
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.63.0 to 8.69.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

  • eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

  • eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
  • eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
  • eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
  • website: respect allowJs playground config (#12744)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)
  • utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • website: playground crashes on extends configs (#12608)
  • website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.69.0 (2026-08-31)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits
  • 9a6e546 chore(release): publish 8.69.0
  • 8f4e00a chore(release): publish 8.68.0
  • 55f6d5d chore: enable source maps (#12677)
  • 20a261f chore(release): publish 8.67.0
  • 3b155bb chore: use typescript 7 for typechecking (#12601)
  • e51b11b chore(release): publish 8.66.0
  • 63ba81b chore(release): publish 8.65.0
  • eaf4576 feat: add warning when TS 7 is detected (#12529)
  • d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
  • 0d06406 chore: add attw validation to repo (#12437)
  • Additional commits viewable in compare view

Updates autoprefixer from 10.5.2 to 10.5.5

Release notes

Sourced from autoprefixer's releases.

10.5.5

10.5.4

10.5.3

Changelog

Sourced from autoprefixer's changelog.

10.5.5

10.5.4

10.5.3

Commits

Updates eslint-plugin-solid from 0.14.5 to 0.17.0

Release notes

Sourced from eslint-plugin-solid's releases.

v0.17.0

Server functions are core in Solid 2.0, so the plugin now lints them. Four new rules cover the "use server" directive's silent failure modes — all enabled as errors in the v2 and v2-strict configs, and verified against the official Solid 2.0 templates (zero findings) and under Oxlint.

New Rules

  • solid/valid-use-server. The compiler only honors "use server" in specific positions and silently ignores it everywhere else — often shipping database access or secrets to the client without any error. Flags directives that aren't in the directive prologue (after other statements, inside plain blocks), template-literal "directives", and directives in positions the compiler never extracts (object methods, getters/setters, class methods). For module-level directive files, also flags non-function exports (which fail at server boot) and calls to client declaration wrappers (GET, live, withMeta from @solidjs/web; query, action, liveQuery from @solidjs/router), whose client-side behavior is silently compiled out in such files. A clientWrappers option adds project-specific wrapper names, with * wildcard and /regex/ support.
  • solid/require-async-server-function. On the client every server function call resolves a Promise, but during SSR the function is called in-process and returns synchronously — so a non-async server function observes two different return types, and TypeScript only sees one of them. Covers function-level directives and all exports of module-level directive files (including export { name } specifiers). Autofixes by inserting async.
  • solid/no-invalid-server-capture. An editor-time mirror of the compiler's closure-capture validation: server functions cannot capture variables from intermediate scopes (component state, enclosing function parameters), because the extracted function is hoisted to module level on the server and becomes a network proxy on the client. The compiler already rejects this at build time; the rule reports the same captures as you type. Module top-level bindings, imports, globals, own params/locals, named-function-expression self-references, and TS type-only references are all allowed.
  • solid/no-browser-globals-in-server-function. Flags unambiguous browser-only globals (window, document, localStorage, etc.) inside server functions, which only run on the server. The list is deliberately conservative — server runtimes provide fetch, crypto, URL, and even navigator, so those never warn — and shadowing bindings and typeof window guards are ignored. In module-level directive files, the whole module is checked.

Internal

  • customReactiveFunctions-style pattern matching (exact names, * wildcards, /regex/ strings) was extracted into a shared createNameMatcher utility, now used by both solid/reactivity and solid/valid-use-server.

Full Changelog: solidjs-community/eslint-plugin-solid@v0.16.1...v0.17.0

v0.16.1

A precision pass over solid/reactivity, driven by the longest-standing false-positive reports in the tracker. Every fix landed with a regression test reproducing the original issue, and the Solid 2.0 templates still lint clean.

Fixes

  • Context provider value gets a real explanation (#209). Passing a reactive expression to a provider's value prop previously produced the generic "should be used within JSX" message — nonsense for something that is in JSX. It now reports a dedicated message explaining that providers read value once, untracked, when created (true in both Solid 1.x and 2.0), and to pass the signal, memo, or store itself. Detection also now covers the Solid 2.0 form, where the context object is used directly as the provider (<MyContext value={...}>), by resolving JSX names to createContext() calls.
  • createResource argument shapes (#199, #195). createResource(fetcher, options) no longer treats the fetcher as a tracked scope (so async fetchers with an options object stop reporting noAsyncTrackedScope), and in createResource(source, fetcher) the fetcher is now correctly treated as an untracked called function that may be async and read current values. The source remains a synchronous tracked scope.
  • Destructuring props inside a tracked scope (#191). const { item } = props inside createMemo/createEffect re-runs on updates and no longer warns. Destructuring at component setup level still does.
  • window.setTimeout and friends (#194). Timer and scheduling callbacks prefixed with window., globalThis., or self. now get the same called-function treatment as the bare globals.
  • mergeProps/merge function arguments are tracked scopes (#179). Both wrap function sources in createMemo, so reactive reads inside them no longer warn.
  • Memos passed to functions are as safe as signals (#182). Passing a createMemo accessor to a create*/use*/custom reactive function no longer warns, matching the existing allowance for signals.
  • Directly-returned create* calls (#52). return createMemo(...) (or as an arrow body) no longer reports shouldAssign — the result is handed to the caller, like a custom primitive.
  • Functions passed to calls inside tracked scopes (#197). An inline function passed to an unknown call inside an effect (doSomething(() => props.toggle)) no longer warns, matching the existing behavior for named functions: synchronous calls still run tracked, and later calls poll current values.

Features

  • Patterns in customReactiveFunctions (#176). Entries now support * wildcards ("watch*") and regexes written as "/pattern/" strings, in addition to exact names.

v0.16.0

The complete Solid 2.0 lint surface: version-aware rules, new v2 / v2-strict configs, and a full set of 2.0-specific rules, all vetted against the official Solid 2.0 templates (which lint clean with zero errors and zero warnings under the v2 config).

Features

  • settings.solid.version. Rules can now read the targeted Solid major version from ESLint settings (settings: { solid: { version: 2 } }). Unset means the permissive dual-version behavior from 0.15. The new configs preset it; any custom config can opt in with one line.
  • New v2 config (eslint-plugin-solid/configs/v2, also solid.configs.v2): what the official Solid 2.0 templates ship. Sets the version setting, switches existing rules to strict 2.0 semantics, and enables the new 2.0 rules — errors are reserved for near-certain bugs, heuristics stay warnings.
  • New v2-strict config (eslint-plugin-solid/configs/v2-strict): everything in v2 plus

... (truncated)

Commits
  • 85e168a Merge pull request #218 from solidjs-community/server-function-rules
  • 07ebef6 v0.17.0
  • 8e5dc00 feat: add server function rules for Solid 2.0
  • 3c01fbd Merge pull request #217 from solidjs-community/reactivity-precision-0.16.1
  • a892c77 v0.16.1
  • 0aa7bc8 fix(reactivity): precision pass over long-standing false positives
  • cbd3c8a Merge pull request #216 from solidjs-community/reactivity-object-destructuring
  • b123632 test: drop type assertion missing its import from object-destructuring cases
  • f1ba27b merge main
  • c608685 Merge pull request #215 from solidjs-community/rule-confidence-audit
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-solid since your current version.


Updates globals from 17.7.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@dependabot dependabot Bot mentioned this pull request Sep 1, 2026
Closed
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-patch-bbc91e34d7 branch from c624edd to 8f3b900 Compare September 1, 2026 23:20
@dependabot
Bump the npm-minor-patch group across 4 directories with 14 updates
85ba8ee 
Bumps the npm-minor-patch group with 1 update in the / directory: [@playwright/test](https://github.com/microsoft/playwright).
Bumps the npm-minor-patch group with 12 updates in the /frontend-modern directory:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `11.11.1` | `11.12.0` |
| [solid-js](https://github.com/solidjs/solid) | `1.9.14` | `1.9.15` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.63.0` | `8.69.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.63.0` | `8.69.0` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.5.5` |
| [eslint-plugin-solid](https://github.com/solidjs-community/eslint-plugin-solid) | `0.14.5` | `0.17.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.12.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.23` | `8.5.28` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.63.0` | `8.69.0` |
| [vite-plugin-solid](https://github.com/solidjs/vite-plugin-solid) | `2.11.12` | `2.11.14` |
| [vite-plugin-sri-gen](https://github.com/rbonestell/vite-plugin-sri-gen) | `1.7.1` | `1.7.4` |

Bumps the npm-minor-patch group with 1 update in the /internal/cloudcp/portal/frontend directory: [esbuild](https://github.com/evanw/esbuild).
Bumps the npm-minor-patch group with 1 update in the /tests/integration directory: [@playwright/test](https://github.com/microsoft/playwright).


Updates `@playwright/test` from 1.56.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.56.1...v1.63.0)

Updates `@playwright/test` from 1.56.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.56.1...v1.63.0)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `highlight.js` from 11.11.1 to 11.12.0
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
- [Commits](highlightjs/highlight.js@11.11.1...11.12.0)

Updates `solid-js` from 1.9.14 to 1.9.15
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/commits/solid-js@1.9.15)

Updates `@typescript-eslint/eslint-plugin` from 8.63.0 to 8.69.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.63.0 to 8.69.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/parser)

Updates `autoprefixer` from 10.5.2 to 10.5.5
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.5.5)

Updates `eslint-plugin-solid` from 0.14.5 to 0.17.0
- [Release notes](https://github.com/solidjs-community/eslint-plugin-solid/releases)
- [Commits](solidjs-community/eslint-plugin-solid@v0.14.5...v0.17.0)

Updates `globals` from 17.7.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.12.0)

Updates `postcss` from 8.5.23 to 8.5.28
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.23...8.5.28)

Updates `typescript-eslint` from 8.63.0 to 8.69.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/typescript-eslint)

Updates `vite-plugin-solid` from 2.11.12 to 2.11.14
- [Release notes](https://github.com/solidjs/vite-plugin-solid/releases)
- [Changelog](https://github.com/solidjs/solid-vite-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/vite-plugin-solid/compare/vite-plugin-solid@2.11.12...vite-plugin-solid@2.11.14)

Updates `vite-plugin-sri-gen` from 1.7.1 to 1.7.4
- [Release notes](https://github.com/rbonestell/vite-plugin-sri-gen/releases)
- [Commits](rbonestell/vite-plugin-sri-gen@v1.7.1...v1.7.4)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `@playwright/test` from 1.56.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.56.1...v1.63.0)

Updates `@playwright/test` from 1.56.1 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.56.1...v1.63.0)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: eslint-plugin-solid
  dependency-version: 0.16.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: highlight.js
  dependency-version: 11.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: solid-js
  dependency-version: 1.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: typescript-eslint
  dependency-version: 8.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: vite-plugin-solid
  dependency-version: 2.11.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: vite-plugin-sri-gen
  dependency-version: 1.7.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-patch-bbc91e34d7 branch from 8f3b900 to 85ba8ee Compare September 8, 2026 03:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants