fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@eslint/js (source)	9.23.0 -> 9.29.0					devDependencies	minor
@ianvs/prettier-plugin-sort-imports	4.4.1 -> 4.4.2					devDependencies	patch
@types/chrome (source)	0.0.313 -> 0.0.326					devDependencies	patch
@types/node (source)	22.13.14 -> 22.15.32					devDependencies	minor
@types/react (source)	18.3.20 -> 18.3.23					devDependencies	patch
@types/react-dom (source)	18.3.5 -> 18.3.7					devDependencies	patch
@typescript-eslint/eslint-plugin (source)	8.28.0 -> 8.34.1					devDependencies	minor
@typescript-eslint/parser (source)	8.28.0 -> 8.34.1					devDependencies	minor
Songmu/tagpr	v1.5.1 -> v1.7.0					action	minor
actions/create-github-app-token	v2.0.2 -> v2.0.6					action	patch
actions/setup-node	v4.3.0 -> v4.4.0					action	minor
eslint (source)	9.23.0 -> 9.29.0					devDependencies	minor
eslint-plugin-react	7.37.4 -> 7.37.5					devDependencies	patch
globals	16.0.0 -> 16.2.0					devDependencies	minor
node (source)	22.14.0 -> 22.16.0						minor
plasmo (source)	0.90.3 -> 0.90.5					dependencies	patch
pnpm (source)	10.7.0+sha512.6b865ad4b62a1d9842b61d674a393903b871d9244954f652b8842c2b553c72176b278f64c463e52d40fff8aba385c235c8c9ecf5cc7de4fd78b8bb6d49633ab6 -> 10.12.1					packageManager	minor
postcss (source)	8.5.3 -> 8.5.6					devDependencies	patch
ts-pattern	5.7.0 -> 5.7.1					dependencies	patch
typescript (source)	5.8.2 -> 5.8.3					devDependencies	patch
vitest (source)	3.0.9 -> 3.2.4					devDependencies	minor

---

Release Notes

eslint/eslint (@​eslint/js)

v9.29.0

Compare Source

v9.28.0

Compare Source

v9.27.0

Compare Source

v9.26.0

Compare Source

v9.25.1

Compare Source

v9.25.0

Compare Source

v9.24.0

Compare Source

ianvs/prettier-plugin-sort-imports (@​ianvs/prettier-plugin-sort-imports)

v4.4.2

Compare Source

What's Changed

• Update peerDeps to allow prettier v4. by @​cpojer in https://github.com/IanVS/prettier-plugin-sort-imports/pull/210
• [Internal] Update prettier dev dependency to 4.0 alpha by @​IanVS in https://github.com/IanVS/prettier-plugin-sort-imports/pull/211

New Contributors

• @​cpojer made their first contribution in https://github.com/IanVS/prettier-plugin-sort-imports/pull/210

Full Changelog: IanVS/prettier-plugin-sort-imports@v4.4.1...v4.4.2

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.34.1

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.34.0

Compare Source

🩹 Fixes

• typescript-estree: add validation to interface extends (#​11271)

❤️ Thank You

• Tao

You can read about our versioning strategy and releases on our website.

v8.33.1

Compare Source

🩹 Fixes

• exclude docs/ directory from eslint-plugin package (#​11251)

❤️ Thank You

• roottool

You can read about our versioning strategy and releases on our website.

v8.33.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.32.1

Compare Source

🩹 Fixes

• eslint-plugin: [consistent-indexed-object-style] check for indirect circular types in aliased mapped types (#​11177)
• eslint-plugin: [consistent-indexed-object-style] adjust auto-fixer to generate valid syntax for TSMappedType with no type annotation (#​11180)
• eslint-plugin: [no-deprecated] support computed member access (#​10867)
• eslint-plugin: [no-unnecessary-type-conversion] shouldn't have fixable property (#​11194)

❤️ Thank You

• Azat S. @​azat-io
• Dima Barabash @​dbarabashh
• Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.32.0

Compare Source

🚀 Features

• eslint-plugin: [only-throw-error] add option allowRethrowing (#​11075)
• eslint-plugin: [no-unnecessary-type-conversion] add rule (#​10182)

🩹 Fixes

• eslint-plugin: [prefer-nullish-coalescing] fix parenthesization bug in suggestion (#​11098)
• eslint-plugin: [unified-signatures] exempt this from optional parameter overload check (#​11005)
• eslint-plugin: [no-unnecessary-type-parameters] should parenthesize type in suggestion fixer if necessary (#​10907)

❤️ Thank You

• Andy Edwards
• Kirk Waiblinger @​kirkwaiblinger
• mdm317
• Sasha Kondrashov
• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

v8.31.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] downgrade fix to suggestion (#​11081)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.31.0

Compare Source

🚀 Features

• eslint-plugin: [no-unnecessary-type-assertion] add option to ignore string const assertions (#​10979)

❤️ Thank You

• Nicolas Le Cam

You can read about our versioning strategy and releases on our website.

v8.30.1

Compare Source

🩹 Fixes

• eslint-plugin: fix mistake with eslintrc config generation (#​11072)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.30.0

Compare Source

🚀 Features

• eslint-plugin: [no-explicit-any] suggest to replace keyof any with PropertyKey (#​11032)

🩹 Fixes

• eslint-plugin: [promise-function-async] use a different error message for functions with promise and non-promise types (#​10950)

❤️ Thank You

• Dima Barabash @​dbarabashh
• Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.29.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-deprecated] report on deprecated imported variable used as property (#​10998)

❤️ Thank You

• Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.29.0

Compare Source

🚀 Features

• eslint-plugin: [prefer-nullish-coalescing] create ignoreIfStatements option (#​11000)

🩹 Fixes

• eslint-plugin: [no-array-constructor] remove optional chaining exemption (#​10963)
• eslint-plugin: support arbitrary extensions in definition files (#​10957)
• eslint-plugin: [prefer-for-of] fix false positive when using erasable type syntax within update expressions (#​10981)
• eslint-plugin: [use-unknown-in-catch-callback-variable] remove fixable property (#​10993)
• eslint-plugin: [no-unnecessary-condition] don't report on unnecessary optional array index access when noUncheckedIndexedAccess is enabled (#​10961)

❤️ Thank You

• Dima Barabash @​dbarabashh
• Kim Sang Du @​developer-bandi
• Olivier Zalmanski @​OlivierZal
• Ronen Amiel
• Yannick Decat @​mho22
• zyoshoka @​zyoshoka

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.34.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.34.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.33.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.33.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.32.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.32.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.31.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.31.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.30.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.30.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.29.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.29.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Songmu/tagpr (Songmu/tagpr)

v1.7.0

Compare Source

• Improve the composite action security by @​5ouma in https://github.com/Songmu/tagpr/pull/207
• tagpr.go: cleanup by @​12ya in https://github.com/Songmu/tagpr/pull/209
• feat: add-post-version-command by @​kiyo-matsu in https://github.com/Songmu/tagpr/pull/212

v1.6.1

Compare Source

• using action version for tagpr installer of action by @​kenchan0130 in https://github.com/Songmu/tagpr/pull/204
• udpate version 2 times in action.yml by @​Songmu in https://github.com/Songmu/tagpr/pull/206

v1.6.0

Compare Source

• Reducing supply chain risk at actions by @​kenchan0130 in https://github.com/Songmu/tagpr/pull/201
• Add docs about persist-credentials of actions/checkout by @​kenchan0130 in https://github.com/Songmu/tagpr/pull/200
• use versioned install.sh with variables in action.yml by @​Songmu in https://github.com/Songmu/tagpr/pull/203
• Support signed commit by @​yasu89 in https://github.com/Songmu/tagpr/pull/199

v1.5.2

Compare Source

• Fix 403 error by adding 'issues: write' permission to GitHub Actions. by @​monochromegane in https://github.com/Songmu/tagpr/pull/194
• resolves #​197 by @​12ya in https://github.com/Songmu/tagpr/pull/198

actions/create-github-app-token (actions/create-github-app-token)

v2.0.6

Compare Source

Bug Fixes

• replace - with _ (#​246) (3336784)

v2.0.5

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 3 updates (#​240) (d64d7d7)

v2.0.4

Compare Source

Bug Fixes

• permission input handling (#​243) (2950cbc)

v2.0.3

Compare Source

Bug Fixes

• README: use v2 in examples (#​234) (9ba274d), closes #​232
• use core.getBooleanInput() to retrieve boolean input values (#​223) (c3c17c7)

actions/setup-node (actions/setup-node)

v4.4.0

Compare Source

What's Changed

Bug fixes:

• Make eslint-compact matcher compatible with Stylelint by @​FloEdelmann in https://github.com/actions/setup-node/pull/98
• Add support for indented eslint output by @​fregante in https://github.com/actions/setup-node/pull/1245

Enhancement:

• Support private mirrors by @​marco-ippolito in https://github.com/actions/setup-node/pull/1240

Dependency update:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in https://github.com/actions/setup-node/pull/1262

New Contributors

• @​FloEdelmann made their first contribution in https://github.com/actions/setup-node/pull/98
• @​fregante made their first contribution in https://github.com/actions/setup-node/pull/1245
• @​marco-ippolito made their first contribution in https://github.com/actions/setup-node/pull/1240

Full Changelog: actions/setup-node@v4...v4.4.0

eslint/eslint (eslint)

v9.29.0

Compare Source

v9.28.0

Compare Source

v9.27.0

Compare Source

v9.26.0

Compare Source

v9.25.1

Compare Source

v9.25.0

Compare Source

v9.24.0

Compare Source

jsx-eslint/eslint-plugin-react (eslint-plugin-react)

v7.37.5

Compare Source

Fixed

• [no-unknown-property]: allow shadow root attrs on <template> (#​3912 @​ljharb)
• [prop-types]: support ComponentPropsWithRef from a namespace import (#​3651 @​corydeppen)
• [jsx-no-constructed-context-values]: detect constructed context values in React 19 <Context> usage (#​3910 @​TildaDares)
• [no-unknown-property]: allow transform-origin on rect (#​3914 @​ljharb)

Changed

• [Docs] [button-has-type]: clean up phrasing (#​3909 @​hamirmahal)

sindresorhus/globals (globals)

v16.2.0

Compare Source

v16.1.0

Compare Source

• Update globals (#​293) 5c58875

---

nodejs/node (node)

v22.16.0: 2025-05-21, Version 22.16.0 'Jod' (LTS), @​aduh95

Compare Source

Notable Changes

• [c3ceaebb7a] - deps: update timezone to 2025b (Node.js GitHub Bot) #​57857
• [5059a746ec] - doc: add dario-piotrowicz to collaborators (Dario Piotrowicz) #​58102
• [c8ceaaf397] - (SEMVER-MINOR) doc: graduate multiple experimental apis (James M Snell) #​57765
• [e21b37d9df] - (SEMVER-MINOR) esm: graduate import.meta properties (James M Snell) #​58011
• [832640c35e] - (SEMVER-MINOR) esm: support top-level Wasm without package type (Guy Bedford) #​57610
• [c510391d2f] - (SEMVER-MINOR) sqlite: add StatementSync.prototype.columns() (Colin Ihrig) #​57490
• [5d1230bec0] - (SEMVER-MINOR) src: set default config as node.config.json (Marco Ippolito) #​57171
• [30bb1ccbb0] - (SEMVER-MINOR) src: create THROW_ERR_OPTIONS_BEFORE_BOOTSTRAPPING (Marco Ippolito) #​57016
• [0350c6f478] - (SEMVER-MINOR) src: add config file support (Marco Ippolito) #​57016
• [e1d3a9e192] - (SEMVER-MINOR) src: add ExecutionAsyncId getter for any Context (Attila Szegedi) #​57820
• [0ec912f452] - (SEMVER-MINOR) stream: preserve AsyncLocalStorage context in finished() (Gürgün Dayıoğlu) #​57865
• [43490c8797] - (SEMVER-MINOR) util: add types.isFloat16Array() (Livia Medeiros) #​57879
• [dda6ca9172] - (SEMVER-MINOR) worker: add worker.getHeapStatistics() (Matteo Collina) #​57888

Commits

• [4252dc798c] - assert: support Float16Array in loose deep equality checks (Livia Medeiros) #​57881
• [1c7396b078] - assert,util: fix constructor lookup in deep equal comparison (Ruben Bridgewater) #​57876
• [1ded5f25c8] - assert,util: improve deep object comparison performance (Ruben Bridgewater) #​57648
• [696b5f85ca] - assert,util: improve unequal number comparison performance (Ruben Bridgewater) #​57619
• [775ee4d40f] - assert,util: improve array comparison (Ruben Bridgewater) #​57619
• [3766992ba4] - benchmark: add sqlite prepare select get (Vinícius Lourenço) #​58040
• [8390276be3] - benchmark: add sqlite prepare select all (Vinícius Lourenço) #​58040
• [6a9b79e5c1] - benchmark: add sqlite is transaction (Vinícius Lourenço) #​58040
• [f689f98344] - benchmark: add sqlite prepare insert (Vinícius Lourenço) #​58040
• [14a82804d7] - benchmark: disambiguate filename and dirname read perf (Antoine du Hamel) #​58056
• [e7e8256d35] - buffer: avoid creating unnecessary environment (Yagiz Nizipli) #​58053
• [d7d8e8e994] - buffer: define global v8::CFunction objects as const (Mert Can Altin) #​57676
• [f37633e85a] - build: use $(BUILDTYPE) when cleaning coverage files (Aviv Keller) #​57995
• [e5bf67fe77] - build: define python when generating out/Makefile (Aviv Keller) #​57970
• [718f874ae0] - build: fix zstd libname (Antoine du Hamel) #​57999
• [53c5fdcae1] - crypto: fix cross-realm SharedArrayBuffer validation (Antoine du Hamel) #​57974
• [78f4ffee5d] - crypto: fix cross-realm check of ArrayBuffer (Felipe Forbeck) #​57828
• [f606352b63] - crypto: forbid passing Float16Array to getRandomValues() (Livia Medeiros) #​57880
• [23c4e941c2] - crypto: remove BoringSSL dh-primes addition (Shelley Vohr) #​57023
• [8339d9bc14] - deps: V8: cherry-pick f915fa4 (Chengzhong Wu) #​55484
• [c2111dd126] - deps: V8: backport e5dbbba (Darshan Sen) #​58120
• [4cc49be951] - deps: update zstd to 1.5.7 (Node.js GitHub Bot) #​57940
• [c956d37c84] - deps: update zlib to 1.3.0.1-motley-780819f (Node.js GitHub Bot) #​57768
• [c3ceaebb7a] - deps: update timezone to 2025b (Node.js GitHub Bot) #​57857
• [b5cd0eb590] - deps: update simdutf to 6.4.2 (Node.js GitHub Bot) [#​578

---

Configuration

📅 Schedule: Branch creation - "after 8am before 5pm on Monday" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.