chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@babel/cli (source)	^7.22.9 -> ^7.22.10					devDependencies	patch
@babel/core (source)	^7.22.9 -> ^7.22.11					devDependencies	patch
@babel/eslint-parser (source)	^7.22.9 -> ^7.22.11					devDependencies	patch
@babel/preset-typescript (source)	^7.22.5 -> ^7.22.11					devDependencies	patch
@types/sinon (source)	^10.0.15 -> ^10.0.16					devDependencies	patch
chai (source)	^4.3.7 -> ^4.3.8					devDependencies	patch
eslint (source)	^8.45.0 -> ^8.48.0					devDependencies	minor
eslint-import-resolver-node	^0.3.7 -> ^0.3.9					devDependencies	patch
eslint-import-resolver-webpack (source)	^0.13.2 -> ^0.13.7					devDependencies	patch
eslint-plugin-import	^2.27.5 -> ^2.28.1					devDependencies	minor
eslint-plugin-react	^7.32.2 -> ^7.33.2					devDependencies	minor
lint-staged	^13.2.3 -> ^13.3.0					devDependencies	minor
node	16.20.1 -> 16.20.2						patch
typescript (source)	^5.1.6 -> ^5.2.2					devDependencies	minor
webpack	^5.88.1 -> ^5.88.2					devDependencies	patch

---

Release Notes

babel/babel (@​babel/cli)

v7.22.10

Compare Source

🐛 Bug Fix

• babel-plugin-transform-typescript
  • #​15799 [ts] Strip type-only namespaces (@​nicolo-ribaudo)
  • #​15798 [ts] Fix compiling extended exported nested namespace (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
  • #​15701 Memoize class binding when compiling private methods and static elements (@​JLHwung)

💅 Polish

• babel-cli
  • #​15824 Add meta object to @babel/eslint-plugin (@​JLHwung)
• babel-traverse, babel-types
  • #​15661 Improve the type definition of path.isX (@​liuxingbaoyu)
• babel-generator, babel-types
  • #​15776 improve SourceLocation typing (@​JLHwung)

🏠 Internal

• Other
  • #​15818 build: generate flow typings in prepublish job (@​JLHwung)
  • #​15777 chore: bump dev dependencies and remove .eslintignore (@​JLHwung)
• babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  • #​15794 Enable @typescript-eslint/no-redundant-type-constituents rule (@​JLHwung)
• babel-helper-compilation-targets
  • #​15811 Remove @babel/core peerDep from helper-compilation-targets (@​nicolo-ribaudo)
• babel-parser
  • #​15793 Use const enum in babel-parser (@​JLHwung)
• babel-plugin-transform-runtime, babel-traverse, babel-types
  • #​15716 chore: Use typescript-eslint@v6 with reworked configs (@​JoshuaKGoldberg)

🔬 Output optimization

• babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator
  • #​15746 Reduce transform-block-scoping loops output size (@​liuxingbaoyu)

chaijs/chai (chai)

v4.3.8

Compare Source

What's Changed

• 4.x.x: Fix link to commit logs on GitHub by @​bugwelle in https://github.com/chaijs/chai/pull/1487
• build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @​dependabot in https://github.com/chaijs/chai/pull/1488
• Small typo in test.js by @​mavaddat in https://github.com/chaijs/chai/pull/1459
• docs: specify return type of objDisplay by @​scarf005 in https://github.com/chaijs/chai/pull/1490
• Update CONTRIBUTING.md by @​matheus-rodrigues00 in https://github.com/chaijs/chai/pull/1521
• Fix: update exports.version to current version by @​peanutenthusiast in https://github.com/chaijs/chai/pull/1534

New Contributors

• @​bugwelle made their first contribution in https://github.com/chaijs/chai/pull/1487
• @​mavaddat made their first contribution in https://github.com/chaijs/chai/pull/1459
• @​scarf005 made their first contribution in https://github.com/chaijs/chai/pull/1490
• @​matheus-rodrigues00 made their first contribution in https://github.com/chaijs/chai/pull/1521
• @​peanutenthusiast made their first contribution in https://github.com/chaijs/chai/pull/1534

Full Changelog: chaijs/chai@v4.3.7...v4.3.8

eslint/eslint (eslint)

v8.48.0

Compare Source

Features

• 1fbb3b0 feat: correct update direction in for-direction (#​17483) (Francesco Trotta)
• d73fbf2 feat: rule tester do not create empty valid or invalid test suites (#​17475) (fnx)
• ee2f718 feat: Allow void in rule no-promise-executor-return (#​17282) (nopeless)

Bug Fixes

• 7234f6a fix: update RuleTester JSDoc and deprecations (#​17496) (Jonas Berlin)

Documentation

• 7a51d77 docs: no-param-reassign mention strict mode (#​17494) (Stephen Hardy)
• 9cd7ac2 docs: add fetch script to package.json conventions (#​17459) (Nitin Kumar)
• cab21e6 docs: advice for inline disabling of rules (#​17458) (Ashish Yadav)
• 056499d docs: fix example of flat config from plugin (#​17482) (Francesco Trotta)
• 9e9edf9 docs: update documentation URL in error message (#​17465) (Nitin Kumar)

Chores

• 8dd3cec chore: upgrade @​eslint/js@​8.48.0 (#​17501) (Milos Djermanovic)
• 6d0496e chore: package.json update for @​eslint/js release (ESLint Jenkins)
• 9d4216d chore: Refactor and document CodePathSegment (#​17474) (Nicholas C. Zakas)

v8.47.0

Compare Source

Features

• 53d7508 feat: update regex for methods with thisArg (#​17439) (Francesco Trotta)

Bug Fixes

• 631648e fix: do not report on shadowed constructors in no-new-wrappers (#​17447) (Francesco Trotta)

Documentation

• a766a48 docs: document lack of config file names (#​17442) (James)
• a1635d6 docs: Update README (GitHub Actions Bot)
• 47a0859 docs: update require-unicode-regexp.md as following up #​17402 (#​17441) (SUZUKI Sosuke)
• fcdc85d docs: Update README (GitHub Actions Bot)
• 2a92b6c docs: update with "Specifying Parser Options" (#​17435) (Cheol-Won)
• d743ed3 docs: add metadata for parser/processor (#​17438) (Huáng Jùnliàng)
• 224376c docs: Update README (GitHub Actions Bot)
• a41a8e4 docs: update script names in README (#​17432) (Nitin Kumar)

Chores

• bf69aa6 chore: Update dependencies (#​17456) (Nicholas C. Zakas)
• 0e45760 chore: package.json update for @​eslint/js release (ESLint Jenkins)
• 757bfe1 chore: Remove add-to-triage (#​17450) (Nicholas C. Zakas)
• b066640 chore: standardize npm script names (#​17431) (Nitin Kumar)
• 6b2410f chore: Update add-to-triage.yml (#​17444) (Nicholas C. Zakas)

v8.46.0

Compare Source

Features

• 8a93438 feat: require-unicode-regexp support v flag (#​17402) (SUZUKI Sosuke)
• 1a2f966 feat: no-useless-escape support v flag (#​17420) (Yosuke Ota)
• ee68d1d feat: no-empty-character-class support v flag (#​17419) (Milos Djermanovic)
• 853d32b feat: deprecate no-return-await (#​17417) (Carlos Lopez)
• d4f02e4 feat: no-control-regex support v flag (#​17405) (Yosuke Ota)
• 2a35f3e feat: prefer-named-capture-group support v flag (#​17409) (Yosuke Ota)
• 8ca8b50 feat: Better error message for flat config plugins (#​17399) (Nicholas C. Zakas)
• 509f753 feat: no-misleading-character-class support v flag (#​17406) (Yosuke Ota)
• 3caf514 feat: no-regex-spaces support v flag (#​17407) (Yosuke Ota)
• b7fad2b feat: prefer-regex-literals support v flag (#​17410) (Yosuke Ota)
• a6a3ad4 feat: no-useless-backreference support v flag (#​17408) (Yosuke Ota)
• 94954a7 feat: no-invalid-regexp support v flag (#​17404) (Yosuke Ota)
• 1af6eac feat: adds option for allowing empty object patterns as parameter (#​17365) (Tanuj Kanti)
• cf03104 feat: Improve config error messages (#​17385) (Nicholas C. Zakas)

Bug Fixes

• 9803c7c fix: FlatESLint#getRulesMetaForResults shouldn't throw on unknown rules (#​17393) (Milos Djermanovic)
• 42faa17 fix: Update no-loop-func to not overlap with no-undef (#​17358) (Matt Wilkinson)

Documentation

• 4d474e3 docs: update with TypeScript info (#​17423) (James)
• 091f44e docs: File extension named processor deprecation (#​17362) (Matt Wilkinson)
• 9254a6c docs: Update README (GitHub Actions Bot)
• 6d6dc51 docs: fix overlapping of open in playground button (#​17403) (Tanuj Kanti)
• 7fc3a2c docs: Add private class features info to no-underscore-dangle (#​17386) (Matt Wilkinson)
• da73e58 docs: Migrating eslint-env configuration comments (#​17390) (Francesco Trotta)
• 80dffed docs: fix Ignoring Files section in config migration guide (#​17392) (Milos Djermanovic)
• 8a9abb7 docs: Update README (GitHub Actions Bot)
• 7e9be4b docs: Update README (GitHub Actions Bot)
• 0b0bbe0 docs: Update README (GitHub Actions Bot)

Chores

• d1eb7e4 chore: Update ecosystem dependencies (#​17427) (Nicholas C. Zakas)
• fab9e97 chore: package.json update for eslint-config-eslint release (ESLint Jenkins)
• 6246711 chore: package.json update for @​eslint/js release (ESLint Jenkins)
• 0aa0bc3 chore: Add PRs to triage project (#​17421) (Nicholas C. Zakas)

import-js/eslint-plugin-import (eslint-import-resolver-node)

v0.3.9

Compare Source

v0.3.8

Compare Source

jsx-eslint/eslint-plugin-react (eslint-plugin-react)

v7.33.2

Compare Source

Fixed

• [no-deprecated]: prevent false positive on commonjs import (#​3614 @​akulsr0)
• [no-unsafe]: report on the method instead of the entire component (@​ljharb)
• [no-deprecated]: report on the destructured property instead of the entire variable declarator (@​ljharb)
• [no-deprecated]: report on the imported specifier instead of the entire import statement (@​ljharb)
• [no-invalid-html-attribute]: report more granularly (@​ljharb)

v7.33.1

Compare Source

Fixed

• [require-default-props]: fix config schema (#​3605 @​controversial)
• [jsx-curly-brace-presence]: Revert [#​3538][] due to issues with intended string type casting usage (#​3611 @​taozhou-glean)
• [sort-prop-types]: ensure sort-prop-types respects noSortAlphabetically (#​3610 @​caesar1030)

v7.33.0

Compare Source

Added

• [display-name]: add checkContextObjects option (#​3529 @​JulesBlm)
• [jsx-first-prop-new-line]: add multiprop option (#​3533 @​haydncomley)
• [no-deprecated]: add React 18 deprecations (#​3548 @​sergei-startsev)
• [forbid-component-props]: add disallowedFor option (#​3417 @​jacketwpbb)

Fixed

• [no-array-index-key]: consider flatMap (#​3530 @​k-yle)
• [jsx-curly-brace-presence]: handle single and only expression template literals (#​3538 @​taozhou-glean)
• [no-unknown-property]: allow onLoad on source (@​ljharb)
• [jsx-first-prop-new-line]: ensure autofix preserves generics in component name (#​3546 @​ljharb)
• [no-unknown-property]: allow fill prop on <symbol> (#​3555 @​stefanprobst)
• [display-name], [prop-types]: when checking for a capitalized name, ignore underscores entirely (#​3560 @​ljharb)
• [no-unused-state]: avoid crashing on a class field function with destructured state (#​3568 @​ljharb)
• [no-unused-prop-types]: allow using spread with object expression in jsx (#​3570 @​akulsr0)
• Revert "[destructuring-assignment]: Handle destructuring of useContext in SFC" (#​3583 [#​2797][] @​102)
• [prefer-read-only-props]: add TS support (#​3593 @​HenryBrown0)

Changed

• [Docs] [jsx-newline], [no-unsafe], [static-property-placement]: Fix code syntax highlighting (#​3563 @​nbsp1221)
• [readme] resore configuration URL (#​3582 @​gokaygurcan)
• [Docs] [jsx-no-bind]: reword performance rationale (#​3581 @​gpoole)

• [Docs] [jsx-first-prop-new-line]: add missing multiprop value (#​3598 @​dzek69)

okonet/lint-staged (lint-staged)

v13.3.0

Compare Source

Bug Fixes

• dependencies: update most dependencies (7443870)
• detect duplicate redundant braces in pattern (d895aa8)

Features

• dependencies: update listr2@​6.6.0 (09844ca)

nodejs/node (node)

v16.20.2: 2023-08-09, Version 16.20.2 'Gallium' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

• CVE-2023-32002: Policies can be bypassed via Module._load (High)
• CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium)
• CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
• OpenSSL Security Releases
  • OpenSSL security advisory 14th July.
  • OpenSSL security advisory 19th July.
  • OpenSSL security advisory 31st July

More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.

Commits

• [40c3958a5a] - deps: update archs files for OpenSSL-1.1.1v (RafaelGSS) #​49043
• [a9ac9da89a] - deps: fix openssl crypto clean (RafaelGSS) #​49043
• [362d4c7494] - deps: upgrade openssl sources to OpenSSL_1_1_1v (RafaelGSS) #​49043
• [d8ccfe9ad4] - policy: handle Module.constructor and main.extensions bypass (RafaelGSS) nodejs-private/node-private#445
• [242aaa0caa] - policy: disable process.binding() when enabled (Tobias Nießen) nodejs-private/node-private#459

Microsoft/TypeScript (typescript)

v5.2.2: TypeScript 5.2

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.2.0 (Beta).
• fixed issues query for Typescript 5.2.1 (RC).
• fixed issues query for Typescript 5.2.2 (Stable).

Downloads are available on:

• NuGet package

webpack/webpack (webpack)

v5.88.2

Compare Source

Bug Fixes

• Fixed a bug where unused identifiers should retain names when using css modules by @​burhanuday in https://github.com/webpack/webpack/pull/17444

Full Changelog: webpack/webpack@v5.88.1...v5.88.2

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.