fix(deps): bump the minorandpatch group across 1 directory with 15 updates

[dependabot]

Bumps the minorandpatch group with 15 updates in the / directory:

Package	From	To
@swc/core	1.15.33	1.15.43
@tada5hi/eslint-config	2.3.0	2.3.1
@types/supertest	7.2.0	7.2.1
eslint	10.4.0	10.7.0
eslint-plugin-vue	10.9.1	10.9.2
lint-staged	17.0.5	17.0.8
tsdown	0.22.0	0.22.8
typescript-eslint	8.59.4	8.64.0
vitest	4.1.7	4.1.10
@trapi/core	2.0.0	2.0.1
@trapi/metadata	2.0.0	2.0.1
@trapi/swagger	2.0.0	2.0.1
vue	3.5.34	3.5.39
qs	6.15.2	6.15.3
swagger-ui-dist	5.32.6	5.32.8

Updates @swc/core from 1.15.33 to 1.15.43

Changelog

Sourced from @​swc/core's changelog.

[1.15.43] - 2026-06-22

Bug Fixes

• (es/es2022) Correct scope for private property brand checks (#11953) (fb5afa2)

• (es/minifier) Preserve cooked when concatenating template literals (#11939) (a7244a6)

• (es/minifier) Gate Number(x) -> +x on unsafe flag (#11944) (#11949) (6176019)

• (es/parser) Parse Flow bare renders types (#11929) (a71c8eb)

• (es/parser) Allow no-default builds (#11956) (baab240)

• (es/react-compiler) Skip TypeScript this pseudo-params in scope collector (#11940) (9066c43)

• (es/react-compiler) Scope ClassStaticBlock and TsModuleBlock as var boundaries (#11943) (1ee74a0)

• (react-compiler) Avoid reporting non-fatal success errors as diagnostics (#11951) (cb4cb23)

• (react-compiler) React compiler AST conversion for wrapped assignment targets (#11952) (fc9b453)

• (react-compiler) Disable parser default features (#11957) (75ddb28)

Documentation

• Document untrusted input security scope (#11937) (677305b)

Features

• (es/react-compiler) Add React Compiler (#11917) (b182fbd)

• (swc) Gate react compiler re-export (#11941) (dcc0f2d)

... (truncated)

Commits

• 73f0f38 chore: Publish 1.15.43 with swc_core v71.0.3
• 550e539 chore: Publish 1.15.43-nightly-20260622.1 with swc_core v71.0.3
• 1523823 chore: Publish 1.15.42-nightly-20260622.1 with swc_core v71.0.2
• 0dffdc4 refactor: Remove production tracing hooks (#11945)
• b182fbd feat(es/react-compiler): Add React Compiler (#11917)
• 7a72340 chore: Publish 1.15.41 with swc_core v68.0.6
• 82ae083 chore: Publish 1.15.41-nightly-20260609.1 with swc_core v68.0.6
• b6dfa74 fix(bindings/node): Preserve source context for AST transforms (#11920)
• 112729b chore: Publish 1.15.40 with swc_core v66.0.5
• 13a5608 chore: Publish 1.15.40-nightly-20260523.1 with swc_core v66.0.5
• Additional commits viewable in compare view

Updates @tada5hi/eslint-config from 2.3.0 to 2.3.1

Release notes

Sourced from @​tada5hi/eslint-config's releases.

eslint-config: v2.3.1

2.3.1 (2026-06-16)

Bug Fixes

• deps: bump the minorandpatch group across 1 directory with 10 updates (#918) (5b9eebe)
• deps: bump the minorandpatch group across 1 directory with 9 updates (#906) (984afd3)

Changelog

Sourced from @​tada5hi/eslint-config's changelog.

2.3.1 (2026-06-16)

Bug Fixes

• deps: bump the minorandpatch group across 1 directory with 10 updates (#918) (5b9eebe)
• deps: bump the minorandpatch group across 1 directory with 9 updates (#906) (984afd3)

Commits

• 5366335 chore: release master (#908)
• 5b9eebe fix(deps): bump the minorandpatch group across 1 directory with 10 updates (#...
• 984afd3 fix(deps): bump the minorandpatch group across 1 directory with 9 updates (#906)
• See full diff in compare view

Updates @types/supertest from 7.2.0 to 7.2.1

Commits

• See full diff in compare view

Updates eslint from 10.4.0 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
• 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
• 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
• 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
• 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
• 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
• b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
• e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
• a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
• d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
• 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
• a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
• 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

• c30d808 docs: Update README (GitHub Actions Bot)
• 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
• 04174cb docs: Update README (GitHub Actions Bot)
• 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
• 9d42fef docs: Update README (GitHub Actions Bot)
• b230159 docs: Update README (GitHub Actions Bot)
• 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
• 81a4774 chore: updates for v9.39.5 release (Jenkins)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
• 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
• 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
• 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
• e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
• 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
• 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
• 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
• 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
• 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
• 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
• a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
• 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

• b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits

• fabd99b 10.7.0
• 37c5e75 Build: changelog update for 10.7.0
• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
• 81a4774 chore: updates for v9.39.5 release
• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
• c30d808 docs: Update README
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
• Additional commits viewable in compare view

Updates eslint-plugin-vue from 10.9.1 to 10.9.2

Release notes

Sourced from eslint-plugin-vue's releases.

v10.9.2

Patch Changes

• Fixed vue/custom-event-name-casing to check segments of colon-separated event names like update:foo-bar (#3079)
• Fixed vue/one-component-per-file to not report functions not imported from Vue (#3063)
• Fixed vue/prefer-import-from-vue to not report imports/exports of names that are not re-exported by vue (#3081)
• Fixed vue/return-in-computed-property and vue/require-render-return to not report exhaustive switch statements when TypeScript type information is available (#3067)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.9.2

Patch Changes

• Fixed vue/custom-event-name-casing to check segments of colon-separated event names like update:foo-bar (#3079)
• Fixed vue/one-component-per-file to not report functions not imported from Vue (#3063)
• Fixed vue/prefer-import-from-vue to not report imports/exports of names that are not re-exported by vue (#3081)
• Fixed vue/return-in-computed-property and vue/require-render-return to not report exhaustive switch statements when TypeScript type information is available (#3067)

Commits

• 9aa463a Version Packages (#3080)
• 517347c Add error positions (#3085)
• b582b7e fix: false positive for returns in exhaustive switch (#3067)
• 91a136c fix(one-component-per-file): Ignore members imported from elsewhere (#3063)
• d37d17b fix(prefer-import-from-vue): don't report names not exported by vue (#3081)
• 836aa95 fix(custom-event-name-casing): check segments of colon-separated names (#3079)
• See full diff in compare view

Updates lint-staged from 17.0.5 to 17.0.8

Release notes

Sourced from lint-staged's releases.

v17.0.8

Patch Changes

• #1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

• #1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

v17.0.7

Patch Changes

• #1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Patch Changes

• #1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

• #1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

• #1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

• #1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Changelog

Sourced from lint-staged's changelog.

17.0.8

Patch Changes

• #1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

• #1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

17.0.7

Patch Changes

• #1806 e692e58 - Update dependency tinyexec@^1.2.4.

17.0.6

Patch Changes

• #1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

• #1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

• #1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

• #1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

Commits

• 5f3b8f2 Merge pull request #1812 from lint-staged/changeset-release/main
• 43a9b8d chore(changeset): release
• 630e2f6 Merge pull request #1809 from lint-staged/restore-merge-status
• 179b437 fix: restore Git merge status after creating backup stash
• 6bae2e2 Merge pull request #1811 from lint-staged/exec-git-ignore-stderr
• b82a830 ci: run npm audit omitting dev, including prod dependencies
• 0b19b80 build(deps): update dependencies
• 3d0b2c0 fix: ignore stderr when doing Git operations
• cd11fec Merge pull request #1807 from lint-staged/changeset-release/main
• 15a8ee0 chore(changeset): release
• Additional commits viewable in compare view

Updates tsdown from 0.22.0 to 0.22.8

Release notes

Sourced from tsdown's releases.

v0.22.8

   🚀 Features

• deps: Add onlyImport option  -  by @​sxzz and Claude Fable 5 (c5798)

   🐞 Bug Fixes

• config: Concat plugins arrays when merging config  -  by @​sxzz (b1c80)

    View changes on GitHub

v0.22.7

   🚀 Features

• logger: Add suppressWarnings option to filter warnings  -  by @​sxzz (dc510)

    View changes on GitHub

v0.22.6

No significant changes

    View changes on GitHub

v0.22.5

   🚀 Features

• Support TS 7  -  by @​sxzz (b21f1)

   🐞 Bug Fixes

• Evaluate banner/footer function addon per chunk  -  by @​spokodev in rolldown/tsdown#1011 (517c5)
• shims: Don't emit esm shim banner in cjs output for unbundle  -  by @​materwelonDhruv in rolldown/tsdown#991 (4bb30)

    View changes on GitHub

v0.22.4

   🚀 Features

• Export tsdown version  -  by @​userquin in rolldown/tsdown#976 (a0938)

   🐞 Bug Fixes

• Respect failOnWarn regardless of logger level  -  by @​spokodev and @​sxzz in rolldown/tsdown#960 (f635a)
• create-tsdown: Skip cd hint for current directory  -  by @​jong-kyung in rolldown/tsdown#1002 (66983)
• css: Generate source maps to avoid SOURCEMAP_BROKEN warning  -  by @​ocavue in rolldown/tsdown#982 (84b7c)
• pkg: Await readFile before removing temp pack directory  -  by @​azais-corentin in rolldown/tsdown#999 (c0a48)

   🏎 Performance

• Reduce install size  -  by @​sxzz (10e6f)

... (truncated)

Commits

• 8d80e30 chore: release v0.22.8
• cf6e598 chore: upgrade deps
• c579828 feat(deps): add onlyImport option
• b1c8014 fix(config): concat plugins arrays when merging config
• 8700f10 chore(deps): update pnpm to v11.12.0 (#997)
• 7859ee2 docs: update Rolldown links to correct URL structure (#1017)
• b4046e6 chore: release v0.22.7
• dc51011 feat(logger): add suppressWarnings option to filter warnings
• da57b0a docs: fix build
• 08b1340 chore: release v0.22.6
• Additional commits viewable in compare view

Updates typescript-eslint from 8.59.4 to 8.64.0

Release notes

Sourced from typescript-eslint's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

• support parsing import defer (#12513)
• eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
• typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

• eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)
• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)
• scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

8.62.1 (2026-06-29)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

• remove redundant package.json "files" (#12444)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.0 (2026-06-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

... (truncated)

Commits

• 414d9ab chore(release): publish 8.64.0
• 290cf6c chore(release): publish 8.63.0
• 3ea32f4 chore(release): publish 8.62.1
• 54e2857 chore(release): publish 8.62.0
• 81e4c26 feat: remove redundant package.json "files" (#12444)
• aaad718 chore(release): publish 8.61.1
• 16a5b24 chore(release): publish 8.61.0
• 4f84a69 chore(release): publish 8.60.1
• 1849b53 chore: typecheck using tsgo (#12139)
• f891c29 chore(release): publish 8.60.0
• See full diff in compare view

Updates vitest from 4.1.7 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• a7a61e7 chore: release v4.1.9 (#10598)
• 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
• 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
• a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Updates @trapi/core from 2.0.0 to 2.0.1

Release notes

Sourced from @​trapi/core's releases.

cli: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/metadata bumped from ^2.0.0 to ^2.0.1
    • @​trapi/swagger bumped from ^2.0.0 to ^2.0.1

core: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

metadata: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)
• deps: bump the minorandpatch group across 1 directory with 12 updates (#849) (4bfa470)
• deps: bump the minorandpatch group across 1 directory with 5 updates (#838) (5721721)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​trapi/core bumped from 2.0.0 to 2.0.1

swagger: v2.0.1

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd603)

... (truncated)

Changelog

Sourced from @​trapi/core's changelog.

2.0.1 (2026-06-04)

Bug Fixes

• deps: bump locter to v3 and remaining minor/patch updates (9acd...

  Description has been truncated