chore(deps-dev): bump the dev-dependencies group across 1 directory with 10 updates

[dependabot]

Bumps the dev-dependencies group with 10 updates in the / directory:

Package	From	To
@eslint/js	9.39.4	9.39.5
@google/genai	2.11.0	2.12.0
@blackwell-systems/gcf	2.2.2	2.4.0
@types/node	26.1.0	26.1.1
@typescript-eslint/eslint-plugin	8.62.1	8.63.0
@typescript-eslint/parser	8.62.1	8.63.0
eslint	9.39.4	9.39.5
prettier	3.9.4	3.9.5
typescript	6.0.3	7.0.2
typescript-eslint	8.62.1	8.63.0

Updates @eslint/js from 9.39.4 to 9.39.5

Release notes

Sourced from @​eslint/js's releases.

v9.39.5

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

Commits

• 202117b chore: package.json update for @​eslint/js release
• See full diff in compare view

Updates @google/genai from 2.11.0 to 2.12.0

Release notes

Sourced from @​google/genai's releases.

v2.12.0

2.12.0 (2026-07-15)

Features

• Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (872aa26)
• Add history config. (8666bc2)
• Add support for preserve custom headers for gaos (f96662a)
• add trigger resource (43e0137)
• Add Triggers resource to GoogleGenAI client. (8d520cd)
• interactions: add CodeMenderAgentConfig (4469a85)
• Populate per-modality prompt token count in embedding responses for gemini-embedding-2 (163bf72)

Changelog

Sourced from @​google/genai's changelog.

2.12.0 (2026-07-15)

Features

• Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs. (872aa26)
• Add history config. (8666bc2)
• Add support for preserve custom headers for gaos (f96662a)
• add trigger resource (43e0137)
• Add Triggers resource to GoogleGenAI client. (8d520cd)
• interactions: add CodeMenderAgentConfig (4469a85)
• Populate per-modality prompt token count in embedding responses for gemini-embedding-2 (163bf72)

Commits

• 4106e89 chore(main): release 2.12.0 (#1761)
• aa2fd80 chore: internal change
• c0b64fe feat: Add max_total_tokens for Interaction.
• 3b40b82 chore: Add basic trigger life cycle samples
• 8666bc2 feat: Add history config.
• 872aa26 feat: Add AntigravityAgentConfig to OpenAPI schema overlays and regenerate SDKs.
• 8d520cd feat: Add Triggers resource to GoogleGenAI client.
• 7b5a133 chore: refresh model list
• c10c048 chore: Use trigger_id instead of id for run and list_execution method
• 7ff69c8 No public description
• Additional commits viewable in compare view

Updates @blackwell-systems/gcf from 2.2.2 to 2.4.0

Release notes

Sourced from @​blackwell-systems/gcf's releases.

v2.4.0: Graph delta decode + verify; session + conformance hardening

Fixes

• The conformance runner now hard-fails on any unhandled operation (instead of silently skipping it) and exercises session, delta, roundtrip, and pack-root fixtures end to end; the graph delta wire decode and verify path is now covered, so no operations remain allow-listed.
• Implemented the graph delta wire decoder and verifier (decodeDelta / verifyDelta): parse a GCF profile=graph delta=true wire back into removed/added symbols and edge changes, apply them atomically to a base snapshot, recompute pack_root, and reject a wrong new_root with root_mismatch (SPEC 10.4). The ## added encoder now emits the trailing distance field (SPEC 3.4.1, Section 10.1). The shared graph-delta fixtures now run end to end: 001 (encode, gains the trailing distance), 002 (verified apply), 003 (root_mismatch rejection).
• Session encoding correctness fix. encodeWithSession assigned per-response local IDs instead of stable session-global IDs, so the cross-call dedup references (@N # previously transmitted) pointed at the wrong symbols, and the header emitted zero-valued budget/tokens/edges. Both are fixed to match the reference; graph session output is now byte-identical across all six SDKs. This had gone undetected because the conformance runner skipped the shared graph-session fixtures (now wired).
• Buffered graph encoder: order edges by source ID, then target ID, then edge type (SPEC 16.1), instead of emitting them in input order. Decode-invariant (edges are a set) and does not affect pack_root (which sorts edge records independently), so no content addresses change. Pinned by shared fixture graph-encode/003. Streaming edges remain in producer-arrival order.
• Decoder: reject an orphan .field attachment (a .field whose name is neither a ^-marked column of its row nor a >-containing field name, SPEC 7.4.6.1.4) instead of silently absorbing it as an undeclared extra field. Such a stray attachment previously decoded to a record no encoder produces, silently injecting a field onto the last-parsed row (a lossless round-trip hole); now rejected per SPEC 16.5 (orphan_attachment).
• Decoder: reject an orphan positional inline body (a pipe-delimited line with no eligible ^{} attachment-marker cell) instead of silently dropping it. The object-body parser previously skipped any unrecognized line, so a stray positional body (e.g. a second Bob|b@t.com after a row's one inline cell was filled) vanished with no error (silent data loss); now rejected per SPEC 16.5 (orphan_inline_attachment).
• Graph streaming trailer: the edge count is now always the last counts entry, even when the stream has no edges (positional counts=2,1,0; labeled counts=…,edges:0). A zero-edge stream previously dropped it, violating the SPEC §8.4 / §8.4.1 rule that the edge count is always present and last (the invariant that keeps the positional form unambiguous). The graph trailer is decoder-ignored, so this changes producer output only.

Streaming: opt-in labeled trailer counts (SPEC §8.4.1)

• New labeledTrailerCounts stream option on StreamEncoder. When set, the ##! summary graph streaming trailer emits counts= in the labeled form label:count per group (e.g. counts=targets:2,related:1,edges:3) instead of the default positional values-only form (counts=2,1,3). Default false is byte-identical to prior output.
• Opt-in and non-breaking: a producer-side comprehension aid for known weak consumers. The trailer counts remain informational (decoder-ignored) in both forms; neither changes the decoded payload. Mirrors the gcf-go reference.

Conformance and docs

• Streaming graph trailer now emits distance_N group counts in pure group-header emission order (dropping a fixed targets,related,extended prefix), matching the other SDKs and deterministic per SPEC 16.1. Byte-identical for contract-conformant (ascending-distance) input; pinned by shared fixtures streaming-v2/010–011.
• The conformance runner now executes the graph-stream-encode fixtures (streaming-encode parity, previously decode-only): fixture 004 (positional trailer) and 005 (labeled trailer).
• README: corrected the streaming example trailer from the defunct ## _summary … sections= to the real ##! summary … counts=; README now leads with the project diagram.

Full Changelog: blackwell-systems/gcf-typescript@v2.3.0...v2.4.0

v2.3.0

Generic-profile delta + re-anchor session helper (SPEC §10a)

Delta encoding comes to the generic profile — the multi-turn compression that JSON and TOON structurally lack — plus a producer-side re-anchor helper. Byte-for-byte interoperable across all six GCF SDKs (Go, Python, TypeScript, Rust, Swift, Kotlin) against a shared conformance suite.

Generic-profile delta (§10a)

Keyed row diffs: send only what changed (## added / ## changed / ## removed) instead of re-sending the whole table each turn.

• GenericSet + GenericDeltaPayload; genericPackRoot (content-addressed gcf-pack-root-v1)
• diffGenericSets (producer) · encodeGenericFull / encodeGenericDelta · decodeGenericFull / decodeGenericDelta · verifyGenericDelta (atomic apply + new_root verification)
• Opt-in and bilateral; the existing encode path is unchanged. Node-only (uses crypto).

Re-anchor session helper (§10a.8)

GenericDeltaSession — a thin stateful producer that manages the re-anchor cadence for you. Each next() returns either a compact delta or, on its cadence, a full re-anchor, updating its held base.

• fixedN(n) (default N=15) or sizeGuard() (size-adaptive, production-recommended)
• No new wire syntax; cadence knobs are never wire fields, so the decoder stays cadence-agnostic. A schema change forces a full.

Why it matters

Across a 50-turn comprehension study, six of seven cleanly-measured models comprehend delta as well as full-resend at a fraction of the tokens; the one model that drifts at depth is closed by the re-anchor.

Correctness

Byte-for-byte identical wire and pack roots across all six SDKs, verified by shared conformance fixtures (generic-pack-root, generic-delta, generic-delta-session). Fuzzed: the decoder never crashes on arbitrary input and arbitrary string cells survive the round-trip with the pack root preserved. MIT, zero runtime dependencies. Ships with GCF SPEC v3.3.0.

Install: npm i @blackwell-systems/gcf

... (truncated)

Changelog

Sourced from @​blackwell-systems/gcf's changelog.

v2.4.0 (2026-07-12)

Fixes

• The conformance runner now hard-fails on any unhandled operation (instead of silently skipping it) and exercises session, delta, roundtrip, and pack-root fixtures end to end; the graph delta wire decode and verify path is now covered, so no operations remain allow-listed.
• Implemented the graph delta wire decoder and verifier (decodeDelta / verifyDelta): parse a GCF profile=graph delta=true wire back into removed/added symbols and edge changes, apply them atomically to a base snapshot, recompute pack_root, and reject a wrong new_root with root_mismatch (SPEC 10.4). The ## added encoder now emits the trailing distance field (SPEC 3.4.1, Section 10.1). The shared graph-delta fixtures now run end to end: 001 (encode, gains the trailing distance), 002 (verified apply), 003 (root_mismatch rejection).
• Session encoding correctness fix. encodeWithSession assigned per-response local IDs instead of stable session-global IDs, so the cross-call dedup references (@N # previously transmitted) pointed at the wrong symbols, and the header emitted zero-valued budget/tokens/edges. Both are fixed to match the reference; graph session output is now byte-identical across all six SDKs. This had gone undetected because the conformance runner skipped the shared graph-session fixtures (now wired).
• Buffered graph encoder: order edges by source ID, then target ID, then edge type (SPEC 16.1), instead of emitting them in input order. Decode-invariant (edges are a set) and does not affect pack_root (which sorts edge records independently), so no content addresses change. Pinned by shared fixture graph-encode/003. Streaming edges remain in producer-arrival order.
• Decoder: reject an orphan .field attachment (a .field whose name is neither a ^-marked column of its row nor a >-containing field name, SPEC 7.4.6.1.4) instead of silently absorbing it as an undeclared extra field. Such a stray attachment previously decoded to a record no encoder produces, silently injecting a field onto the last-parsed row (a lossless round-trip hole); now rejected per SPEC 16.5 (orphan_attachment).
• Decoder: reject an orphan positional inline body (a pipe-delimited line with no eligible ^{} attachment-marker cell) instead of silently dropping it. The object-body parser previously skipped any unrecognized line, so a stray positional body (e.g. a second Bob|b@t.com after a row's one inline cell was filled) vanished with no error (silent data loss); now rejected per SPEC 16.5 (orphan_inline_attachment).
• Graph streaming trailer: the edge count is now always the last counts entry, even when the stream has no edges (positional counts=2,1,0; labeled counts=…,edges:0). A zero-edge stream previously dropped it, violating the SPEC §8.4 / §8.4.1 rule that the edge count is always present and last (the invariant that keeps the positional form unambiguous). The graph trailer is decoder-ignored, so this changes producer output only.

Streaming: opt-in labeled trailer counts (SPEC §8.4.1)

• New labeledTrailerCounts stream option on StreamEncoder. When set, the ##! summary graph streaming trailer emits counts= in the labeled form label:count per group (e.g. counts=targets:2,related:1,edges:3) instead of the default positional values-only form (counts=2,1,3). Default false is byte-identical to prior output.
• Opt-in and non-breaking: a producer-side comprehension aid for known weak consumers. The trailer counts remain informational (decoder-ignored) in both forms; neither changes the decoded payload. Mirrors the gcf-go reference.

Conformance and docs

• Streaming graph trailer now emits distance_N group counts in pure group-header emission order (dropping a fixed targets,related,extended prefix), matching the other SDKs and deterministic per SPEC 16.1. Byte-identical for contract-conformant (ascending-distance) input; pinned by shared fixtures streaming-v2/010–011.
• The conformance runner now executes the graph-stream-encode fixtures (streaming-encode parity, previously decode-only): fixture 004 (positional trailer) and 005 (labeled trailer).
• README: corrected the streaming example trailer from the defunct ## _summary … sections= to the real ##! summary … counts=; README now leads with the project diagram.

v2.3.0 (2026-07-12)

Generic-profile delta encoding (SPEC §10a)

• Full producer + consumer implementation of generic-profile delta, byte-for-byte interoperable with gcf-go and gcf-python:
  • GenericSet (keyed record set), GenericDeltaPayload
  • genericPackRoot (gcf-pack-root-v1, generic profile) with a purpose-built cell canonicalization (canonicalCell) decoupled from the wire cell encoder: collision-free (null/bool/number bare, strings always quoted) and record-safe. Fields and records sort by UTF-8 byte order (Buffer.compare) to match Go's sort.Strings, so pack roots are identical across SDKs.
  • diffGenericSets (the blessed producer path; centralizes the keyed-diff invariants), encodeGenericFull, encodeGenericDelta
  • decodeGenericFull, decodeGenericDelta (consumer wire parsing)
  • verifyGenericDelta (atomic apply + new_root verification)
• Delta is opt-in and bilateral; the existing encodeGeneric path is unchanged (backward compatible). Node-only (uses crypto.createHash), exported from the main entry alongside packRoot/verifyDelta.
• GenericDeltaSession (SPEC §10a.8): producer-side re-anchor cadence helper over the delta primitives. Emits either a compact delta or, on its policy's cadence, a full re-anchor (a schema change always forces a full per §10a.7); introduces no new wire syntax. Policies: fixedN(n) (default DEFAULT_REANCHOR_N = 15) and sizeGuard() (re-anchors once cumulative delta bytes reach the current full-payload byte size). Byte-length comparisons use UTF-8 bytes (Buffer.byteLength) to match Go's len(string), so cadence is identical across SDKs. Exports: GenericDeltaSession, ReanchorMode, fixedN, sizeGuard, DEFAULT_REANCHOR_N, ReanchorPolicy. Shared conformance fixtures generic-delta-session/001–003 verified against gcf-go.

Tests

• Unit suite mirroring gcf-go/gcf-python: self-proving round-trip (diff -> encode -> apply -> recomputed root), determinism / row-order invariance, no-type-collision canonicalization, every invariant/error path, full-payload wire round-trip, the complete server -> wire -> consumer end-to-end loop, and malformed-wire-fails-closed.
• Conformance runner support for generic-pack-root, generic-delta, generic-delta-verify, generic-delta-decode (12 shared fixtures); verified to produce identical pack roots and delta wire to gcf-go and gcf-python.
• Generic-delta fuzz (generic_delta_fuzz.test.ts), mirroring gcf-go: the decoder never throws uncontrolled on arbitrary/mutated input, and arbitrary UTF-8 string cells (including multi-byte and control characters) survive the full-wire round-trip with the pack root preserved.

v2.2.3 (2026-07-10)

Fixes

• Losslessness (nested null): a nested object that is null at an intermediate level (e.g. {meta:{owner:null}}) is no longer flattened. Previously its leaves encoded as absent (~) and unflattened to a missing key, silently dropping the null. Such fields now fall back to the attachment mechanism; a top-level null still flattens losslessly (emits -, reconstructs via the all-null rule). This is a cross-SDK format-logic bug; regression fixtures added to the conformance suite (flatten/017–019).
• Prototype pollution (JS/TS-specific): the generic decoder no longer mutates Object.prototype. unflattenPaths, checkDup, the object-build assignments and the tabular row merge used key in obj and bracket assignment, so a __proto__ path segment could pollute the prototype and any key shadowing an Object.prototype member (toString/constructor) was misparsed as a duplicate. Membership now uses Object.prototype.hasOwnProperty.call; a shared safeAssign writes a literal __proto__ as an own property via Object.defineProperty; unflattenPaths drops unsafe path segments and guards non-object intermediates; canonicalShape uses Object.create(null) and rejects __proto__/constructor/prototype. Keys named toString/constructor/valueOf now round-trip correctly.
• Strict count parsing: shared-schema row counts use the strict parseCount helper instead of a loose parseInt.

... (truncated)

Commits

• 65d6b6c feat: graph delta wire decode + verify (decodeDelta)
• 8482f1c fix: session encoding used per-response IDs, not stable session-global IDs
• 0dc50b8 test: exercise graph pack-root fixtures in conformance runner
• 9cbc625 fix: order graph edges by source then target in buffered encoder (SPEC 16.1)
• e6b1594 stream: emit graph trailer distance groups in pure emission order (SPEC 16.1)
• 395178b fix: reject orphan positional inline bodies in generic decoder (SPEC 16.5)
• 350aeea fix: reject orphan attachments in generic decoder (SPEC 16.5)
• cd967cd test: fixture-count floor assertion in conformance runner
• cbeb0ee fix: always emit edge count as last graph trailer entry (SPEC 8.4)
• 91bcace release: v2.4.0 (opt-in labeled trailer counts, SPEC 8.4.1)
• Additional commits viewable in compare view

Updates @types/node from 26.1.0 to 26.1.1

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.62.1 to 8.63.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)
• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)
• scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.63.0 (2026-07-06)

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)
• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 290cf6c chore(release): publish 8.63.0
• 8d8fda6 feat(eslint-plugin): [no-misused-promises] detect async usage of a sync dispo...
• fec4f4f fix(eslint-plugin): [no-base-to-string] don't flag a shadowed String() call (...
• fb3da79 fix(eslint-plugin): [no-unnecessary-type-assertion] handle optional-chained c...
• dd02057 docs: [no-base-to-string] clarify ignoredTypeNames description (#12488)
• 5b224e7 docs: [ban-ts-comment] clarify that @ts-expect-error is allowed by default ...
• a9a9d43 docs: [restrict-template-expressions] clarify allowArray option behavior (#...
• 091fe82 fix(eslint-plugin): [method-signature-style] suggest converting readonly func...
• d5502f9 docs: clarify consistent-type-imports guidance for verbatimModuleSyntax (#12194)
• 61a9dba chore(eslint-plugin): switch auto-generated test cases to hand-written in pre...
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.62.1 to 8.63.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)
• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)
• scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.63.0 (2026-07-06)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 290cf6c chore(release): publish 8.63.0
• See full diff in compare view

Updates eslint from 9.39.4 to 9.39.5

Release notes

Sourced from eslint's releases.

v9.39.5

Bug Fixes

• 253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

• 74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
• eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
• 202117b chore: package.json update for @​eslint/js release (Jenkins)
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
• daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
• daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
• 116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

Commits

• 4a24e8c 9.39.5
• 1fba874 Build: changelog update for 9.39.5
• 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077)
• 202117b chore: package.json update for @​eslint/js release
• d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21...
• 253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065)
• 7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068)
• 74930ed docs: switch build to Node.js 24 (#20894)
• daf7791 chore: pin fflate@0.8.2 (#20895)
• eaec8bb docs: Add ESLint v9.x EOL notice (#20828)
• Additional commits viewable in compare view

Updates prettier from 3.9.4 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text
<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text
<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](https://github.com/prettier/prettier/blob/main/<> "title")
<!-- Prettier 3.9.4 -->
[link](https://github.com/prettier/prettier/blob/main/ "title")
<!-- Prettier 3.9.5 -->
</tr></table>

... (truncated)

Commits

• b6c7d18 Release 3.9.5
• cd54ccc Avoid corrupting empty Markdown link with title (#19487)
• 2bb67ce Preserving comments' placement property (#19567)
• 91bcac8 Add more tests for comment-only object type (#19587)
• cbee737 Remove space in empty object type (#19583)
• 6394c73 Align empty module declaration with TS (#19568)
• a4e6f7a Prevent the addition of space in type() with + (#19516)
• 3d063b5 Ignore dangling comments when checking type parameter comments (#19572)
• 908503e Handle dangling comments in SwitchStatement (#19581)
• 943a475 Angular: Support expression for exhaustive typechecking (#19571)
• Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates typescript-eslint from 8.62.1 to 8.63.0

Release notes

Sourced from typescript-eslint's releases.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

• eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

• eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)
• eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)
• eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)
• scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Kristjan @​KristjanTammekivi
• Michael Naumov @​mnaoumov
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 290cf6c chore(release): publish 8.63.0
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
eslint	[>= 10.a, < 11]
@eslint/js	[>= 10.a, < 11]