Update all npm dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@typescript-eslint/eslint-plugin (source)	8.39.1 -> 8.40.0
@typescript-eslint/parser (source)	8.39.1 -> 8.40.0
mediabunny (source)	1.7.3 -> 1.9.3
rollup (source)	4.46.2 -> 4.46.4

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.40.0

Compare Source

🚀 Features

• typescript-estree: forbid invalid keys in EnumMember (#​11232)

❤️ Thank You

• fisker Cheung @​fisker

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.40.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Vanilagy/mediabunny (mediabunny)

v1.9.3

Compare Source

• Properly deal with ISOBMFF boxes with no size (fixes fragmented MP4 lookup bug, #​70)

v1.9.2

Compare Source

• Made fragmented MP4 mfra box lookup more resilient

v1.9.1

Compare Source

• Added resync logic to Matroska parser to more gracefully deal with malformed/broken files

v1.9.0

Compare Source

• Added read & write support for ADTS (.aac) files (#​65) (addresses #​26)
• Fixed race condition in MP3 demuxer

v1.8.0

Compare Source

• Added more supported sample rates to @​mediabunny/mp3-encoder
• Fixed MP3 encoder OOM issues
• Added more aggressive AudioBuffer chunking

v1.7.6

Compare Source

• Fixed UrlSource behavior for servers that return the requested range but respond with 200 (stupid!) (#​60)

v1.7.5

Compare Source

• Fixed durations in conversions with trimming & frame rate change (#​59)

v1.7.4

Compare Source

• Deal more gracefully with invalid EBML headers and zero-padding at the end of Matroska files

rollup/rollup (rollup)

v4.46.4

Compare Source

2025-08-20

Bug Fixes

• Do not omit synthetic namespaces when only accessed via in operator (#​6052)

Pull Requests

• #​6052: fix: don't optimize in with syntheticNamedExports (@​hi-ogawa)
• #​6074: Update transitive dependency to fix audit (@​lukastaegert)

v4.46.3

Compare Source

2025-08-18

Bug Fixes

• Resolve illegal instruction error on arm64 architectures (#​6055)
• Resolve sourcemap generation performance regression (#​6057)

Pull Requests

• #​6043: Avoid generated by comment diff on Windows (@​sapphi-red)
• #​6048: chore(deps): update dependency cross-env to v10 (@​renovate[bot], @​lukastaegert)
• #​6049: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6055: Fix illegal instruction error on arm64 by enabling no_opt_arch feature for mimalloc-safe (@​sapphi-red)
• #​6057: fix: tweak the fallback logic for tracing segment (@​TrickyPi, @​lukastaegert)
• #​6062: docs: update Rust toolchain instructions (@​situ2001, @​lukastaegert)
• #​6063: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6067: chore(deps): update actions/checkout action to v5 (@​renovate[bot], @​lukastaegert)
• #​6068: chore(deps): update actions/download-artifact action to v5 (@​renovate[bot])
• #​6069: fix(deps): update rust crate swc_compiler_base to v31 (@​renovate[bot], @​lukastaegert)

---

Configuration

📅 Schedule: Branch creation - "on monday at 10:00am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.