Skip to content

build(deps): bump the npm group with 6 updates - #57

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-96d6c50475
Open

build(deps): bump the npm group with 6 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-96d6c50475

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 6 updates:

Package From To
@versatiles/container 1.5.1 2.0.0
@types/node 26.2.0 26.4.0
@typescript-eslint/eslint-plugin 8.67.0 8.68.0
@typescript-eslint/parser 8.67.0 8.68.0
eslint 10.8.1 10.9.1
typescript-eslint 8.67.0 8.68.0

Updates @versatiles/container from 1.5.1 to 2.0.0

Release notes

Sourced from @​versatiles/container's releases.

v2.0.0

Release v2.0.0

This release makes the library strict about containers it cannot read correctly, adds Zstandard support, and drops the obsolete v01 format. It requires Node.js 22.15 or newer.

The headline fix is that a container the library could not actually decode used to be reported as readable, with its tile data handed back mislabelled. That now fails loudly. If getHeader() starts throwing on a file that "worked" in 1.x, the 1.x behaviour was returning corrupt data.

Breaking changes

Node.js 22.15 or newer is required

Previously >= 18. Zstandard decompression uses the node:zlib zstd bindings, added in Node 22.15. Node 18 and 20 are both past end-of-life.

Containers with unknown header values are rejected (#50)

tile_format and precompression values the library did not recognise fell back to bin and raw. Reading a zstd container this way reported tileCompression: 'raw', and getTileUncompressed() returned the still-compressed zstd frame — with no error raised anywhere. The failure surfaced far from its cause, usually as a protobuf parse error.

Both now throw:

Unsupported tile_format value 5 in v02 container header
Unsupported precompression value 7 in v02 container header

This is what the container spec requires: a reader must reject a reserved value, not substitute a default.

versatiles_v01 containers can no longer be read

The v01 format is obsolete. Opening one throws:

versatiles_v01 containers are no longer supported. Convert it to v02 with: versatiles convert <input> <output>

Header.version is therefore always 'v02'.

Compression gained a 'zstd' member

export type Compression = 'br' | 'gzip' | 'raw' | 'zstd';

Exhaustive switch statements over this type need a zstd branch.

decompress() rejects unknown compression instead of passing data through

It previously resolved with the input buffer unchanged for anything it did not recognise, which is how mislabelled data reached callers unnoticed. It now rejects.

Deep imports are blocked

... (truncated)

Changelog

Sourced from @​versatiles/container's changelog.

[2.0.0] - 2026-08-21

This release makes the library strict about containers it cannot read correctly, adds Zstandard support, and drops the obsolete v01 format. It requires Node.js 22.15 or newer.

The headline fix is that a container the library could not actually decode used to be reported as readable, with its tile data handed back mislabelled. That now fails loudly. If getHeader() starts throwing on a file that "worked" in 1.x, the 1.x behaviour was returning corrupt data.

Breaking changes

Node.js 22.15 or newer is required

Previously >= 18. Zstandard decompression uses the node:zlib zstd bindings, added in Node 22.15. Node 18 and 20 are both past end-of-life.

Containers with unknown header values are rejected (#50)

tile_format and precompression values the library did not recognise fell back to bin and raw. Reading a zstd container this way reported tileCompression: 'raw', and getTileUncompressed() returned the still-compressed zstd frame — with no error raised anywhere. The failure surfaced far from its cause, usually as a protobuf parse error.

Both now throw:

Unsupported tile_format value 5 in v02 container header
Unsupported precompression value 7 in v02 container header

This is what the container spec requires: a reader must reject a reserved value, not substitute a default.

versatiles_v01 containers can no longer be read

The v01 format is obsolete. Opening one throws:

versatiles_v01 containers are no longer supported. Convert it to v02 with: versatiles convert <input> <output>

Header.version is therefore always 'v02'.

Compression gained a 'zstd' member

export type Compression = 'br' | 'gzip' | 'raw' | 'zstd';

Exhaustive switch statements over this type need a zstd branch.

decompress() rejects unknown compression instead of passing data through

It previously resolved with the input buffer unchanged for anything it did not recognise, which is how mislabelled data reached callers unnoticed. It now rejects.

Deep imports are blocked

The package declares an exports map. @versatiles/container and @versatiles/container/package.json resolve; anything else — for example @versatiles/container/dist/lib/decompress.js — fails with ERR_PACKAGE_PATH_NOT_EXPORTED.

... (truncated)

Commits
  • 18398d5 v2.0.0
  • 418ce56 feat: add protocol handling and malformed range response tests for getHTTPReader
  • 3bbd617 refactor: remove v01 support
  • 4fd4e09 chore: update TypeScript configuration to target ES2023 and adjust library ve...
  • 2b3730b fix: replace parseInt with Number for range parsing in HTTP reader tests and ...
  • 91b7f58 feat: enhance HTTP reader close method to ensure proper promise resolution
  • c94a89e feat: add exports field to package.json for improved module resolution
  • 24bc3e8 feat: enhance HTTP reader with close method and update documentation for reso...
  • 2f74448 feat: add options for timeout and TMS ordering in Container and update docume...
  • 701b914 refactor: remove Decompressor type definition from interfaces
  • Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.4.0

Commits

Updates @typescript-eslint/eslint-plugin from 8.67.0 to 8.68.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)
  • utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • website: playground crashes on extends configs (#12608)
  • website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)

🩹 Fixes

  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 8f4e00a chore(release): publish 8.68.0
  • db30514 feat(eslint-plugin): [strict-void-return] add fix suggestions (#12086)
  • 9690339 test(eslint-plugin): [prefer-optional-chain] use createRuleTesterWithTypes ...
  • abe9011 fix(eslint-plugin): [no-empty-object-type] ignore suggestions that result in ...
  • 79c16e7 chore(eslint-plugin): extract FunctionSignature and enum comparison utils (#1...
  • 2442e30 test(eslint-plugin): [no-floating-promises] format test snippets (#12723)
  • 3596323 fix(eslint-plugin): [no-floating-promises] setting ignoreVoid: false result...
  • 956a339 fix(eslint-plugin): [no-unnecessary-type-assertion] prevent stack overflow in...
  • 55f6d5d chore: enable source maps (#12677)
  • 3aefb6a test: improve vitest performance with isolate: false (#12703)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.67.0 to 8.68.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)
  • utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • website: playground crashes on extends configs (#12608)
  • website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint from 10.8.1 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

  • 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

  • ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

  • 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
  • 87f66f4 docs: Update README (GitHub Actions Bot)
  • 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
  • f3993b0 docs: Update README (GitHub Actions Bot)
  • ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
  • 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
  • 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
  • 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

  • 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
  • 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
  • dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
  • f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
  • 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])
Commits

Updates typescript-eslint from 8.67.0 to 8.68.0

Release notes

Sourced from typescript-eslint's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

  • eslint-plugin: [strict-void-return] add fix suggestions (#12086)
  • utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

  • eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
  • eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
  • eslint-plugin: [unified-signatures] report identical signatures (#12678)
  • eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
  • eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
  • eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
  • website: playground crashes on extends configs (#12608)
  • website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.68.0 (2026-08-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the npm group with 6 updates
b448621 
Bumps the npm group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@versatiles/container](https://github.com/versatiles-org/node-versatiles-container) | `1.5.1` | `2.0.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.67.0` | `8.68.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.67.0` | `8.68.0` |
| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.9.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.68.0` |


Updates `@versatiles/container` from 1.5.1 to 2.0.0
- [Release notes](https://github.com/versatiles-org/node-versatiles-container/releases)
- [Changelog](https://github.com/versatiles-org/node-versatiles-container/blob/main/CHANGELOG.md)
- [Commits](versatiles-org/node-versatiles-container@v1.5.1...v2.0.0)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.67.0 to 8.68.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.67.0 to 8.68.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/parser)

Updates `eslint` from 10.8.1 to 10.9.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.1...v10.9.1)

Updates `typescript-eslint` from 8.67.0 to 8.68.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@versatiles/container"
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: typescript-eslint
  dependency-version: 8.68.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants