chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	^24.13.5 → ^24.13.6
eslint (source)	^10.10.0 → ^10.11.0
eslint-plugin-jsdoc	64.5.1 → 64.5.4
fast-check (source)	^4.10.1 → ^4.10.2
knip (source)	^6.35.1 → ^6.37.0
rollup (source)	^4.63.3 → ^4.63.4
verkit	^0.4.0 → ^0.5.0
vue (source)	^3.5.42 → ^3.5.43

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

eslint/eslint (eslint)

v10.11.0

Compare Source

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v64.5.4

Compare Source

Bug Fixes

• no-unnecessary-type-assertion: only try typescript if the rule is enabled; fixes #​1773 (3c1c209)

v64.5.3

Compare Source

Bug Fixes

• for @​link targets, check properties within export class declarations; fixes #​1771 (2d85fed)

v64.5.2

Compare Source

Bug Fixes

• set optional typescript peer dep. to any to undo breaking change (f469cdf)

dubzzz/fast-check (fast-check)

v4.10.2

Compare Source

Fix interrupt plugin (throwing)
[Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

webpro-nl/knip (knip)

v6.37.0: Release 6.37.0

Compare Source

• fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#​2048) (06a68fc) - thanks @​RobHannay!
• fix: enable JSX in the config loader (#​1959) (5b21dc9) - thanks @​addielaruee!
• Match binaries only to their actual dependency providers (c5bdb69)
• Preserve executable references across package manager commands (54af171)
• Correct binary provider metadata in Relay fixtures (e67dfcb)
• Separate shell binary expectations from reporting exemptions (resolve #​2022) (c1d7d75)
• Respect npx no-install flags before the executable (4237010)
• Update dependencies (038ea17)
• Remove npm auth check now that's in release-it (4aaf77c)
• Fix --format name resolution in the ESLint plugin (#​2046) (1269e98) - thanks @​bytedoe!

v6.36.0: Release 6.36.0

Compare Source

• Add @​tailwindcss/webpack as Tailwind plugin enabler (#​2027) (b5ac0cf) - thanks @​igas!
• Fix Next.js Turbopack loader dependencies (23419b4)
• Explain ambiguous star exports in traces (#​2025) (3c2c1a5) - thanks @​gioboa!
• Fix eslintrc parserOptions.parser handling in ESLint plugin (#​2028) (c79463c) - thanks @​bytedoe!
• fix(compilers): require word boundary around import keyword (#​2029) (68bbe51) - thanks @​thanadolps!
• fix: recover from corrupt cache file (#​2034) (30ff756) - thanks @​gioboa!
• fix: fix trailing comma on dependency removal (#​2033) (adfaf4f) - thanks @​gioboa!
• Document built-in compiler scope (a05e155)
• Add babel, khan and oxc to projects and optimize svgs (1c26560)
• Add section to test preview packages & extension (d911c18)
• Fix shared info/exclude handling in linked Git worktrees (#​2037) (c1f18d5) - thanks @​kenfdev!
• Shard Node specs on Windows and enable Bun test parallelism (66e966b)
• Add Varlock plugin support (#​2000) (e4fbf46) - thanks @​Joehoel!
• Apply NODE_OPTIONS inputs to package manager binaries (#​2038) (c8df8a2) - thanks @​giaBaoJS!
• Handle array form of import/resolver setting in ESLint plugin (#​2041) (a80d386) - thanks @​bytedoe!
• fix(node): add valueless Node CLI flags to boolean options (#​2042) (4c67685) - thanks @​shoutoutuoadi325!
• fix(typedoc): accept string form of plugin and theme options (#​2043) (ce387b0) - thanks @​giaBaoJS!
• Add textlint plugin (#​2039) (532dab5) - thanks @​anandghegde!
• fix: Correctly resolve Vitest setupFiles from nested configs (#​2040) (84a4943) - thanks @​CruseCtrl!
• Add n8n to projects (3f756a7)
• Resolve re-export traces to their defining bindings (43b3f9b)
• Show ambiguous, shadowed and converged exports (f1e97b9)
• Document export tracing and editor contention (0188e7d)
• Resolve local extends files in eslintrc configs (#​2044) (62b5bf5) - thanks @​bytedoe!
• docs: link each page to its own OG image (#​2045) (a85eb4e) - thanks @​bytedoe!
• fix: fix language server bundled knip fallback (#​2035) (882ba3a) - thanks @​gioboa!

rollup/rollup (rollup)

v4.63.4

Compare Source

2026-09-19

Bug Fixes

• Ensure meta information of the cached module is exposed in shouldTransformCachedModule (#​6442)
• Do not create invalid code if import attribute values contain special characters (#​6502)

Pull Requests

• #​6429: ci: collect Rust coverage from JS tests in dedicated job (@​lukastaegert)
• #​6442: fix: expose cached module meta during cache checks (@​ychampion, @​lukastaegert)
• #​6496: docs: name the parameter runHook actually takes (@​darkdi, @​lukastaegert)
• #​6502: Escape quotes and backslashes in import attribute values (@​dylanpulver, @​lukastaegert)
• #​6517: Improve agent instructions (@​lukastaegert)
• #​6518: fix(deps): update minor/patch updates (@​renovate[bot])
• #​6519: Request Copilot code review via workflow (@​lukastaegert)

sxzz/verkit (verkit)

v0.5.0

Compare Source

Migration guide

v0.5.0 removes the deprecated shorthand aliases for version comparisons.
Replace any imports of these APIs with their *Than equivalents:

Removed API	Replacement
isGreater	isGreaterThan
isGreaterOrEqual	isGreaterThanOrEqual
isLess	isLessThan
isLessOrEqual	isLessThanOrEqual

// Before
import { isGreater, isLessOrEqual } from 'verkit'

// After
import { isGreaterThan, isLessThanOrEqual } from 'verkit'

The replacement functions have the same behavior and arguments; only their exported names have changed.

   🚨 Breaking Changes

• Remove deprecated version comparison aliases  -  by @​sxzz (08eb3)

    View changes on GitHub

v0.4.1

Compare Source

   🚀 Features

• Add explicit Than comparison helpers  -  by @​sxzz (2bde9)

    View changes on GitHub

vuejs/core (vue)

v3.5.43

Compare Source

Bug Fixes

• compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#​15548) (2fde323)
• compiler-sfc: prepend semicolon for await in switch case (#​15498) (9a1df69), closes #​15495
• compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #​15465
• compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #​15478) (#​15480) (d6febaa)
• hydration: run leave hooks for hydration placeholders (#​15431) (5dda192)
• reactivity: preserve readonly wrappers in array copy methods (#​15469) (599f35b)
• runtime-core: unmount v-once children after parent rerenders (#​15435) (d720338)
• shared: handle circular references in looseEqual (#​15499) (718f782), closes #​15496
• shared: preserve comment-like text in style values (#​15471) (b9456cb)
• suspense: don't drop nested suspense patches during hydration (#​15429) (76d42dc)
• suspense: keep the boundary pending while its branch is patched (#​15411) (bfcfe9e), closes #​7506
• suspense: patch a hydrating boundary's pending branch in place (#​15432) (2cde6f7)
• suspense: unmount the DOM an interrupted async component claimed (#​15430) (fb9b45c)
• types: keep optional props when a runtime prop uses a generic PropType (#​15523) (243aabc), closes #​9546

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​node@​24.13.5 ⏵ 24.13.6
	verkit@​0.5.0
	oxc-parser@​0.148.0 ⏵ 0.150.0
	vue@​3.5.42 ⏵ 3.5.43			+1
	fast-check@​4.10.1 ⏵ 4.10.2				+2
	knip@​6.35.1 ⏵ 6.37.0			+1
	rollup@​4.63.3 ⏵ 4.63.4				+1
	eslint@​10.10.0 ⏵ 10.11.0	+1

View full report