chore(deps-dev): bump the all group with 4 updates

[dependabot]

Bumps the all group with 4 updates: eslint, neostandard, node-gyp and pre-commit.

Updates eslint from 9.39.5 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates neostandard from 0.12.2 to 0.14.1

Release notes

Sourced from neostandard's releases.

v0.14.1

0.14.1 (2026-10-09)

📚 Documentation

• clarify global ignore behavior (#409) (939f7b9)

v0.14.0

0.14.0 (2026-10-08)

🩹 Fixes

• complete release workflow lifecycle (#401) (7c5379b)
• select committed Release Please configs (#402) (9bf2092)

🧹 Chores

• request stable 0.14.0 (#407) (3a2295a)

v0.14.0-next.1

0.14.0-next.1 (2026-08-10)

🌟 Features

• deps: update dependency eslint-plugin-n to ^18.2.2 (#381) (3172802)
• deps: update dependency globals to ^17.9.0 (#366) (4b8bb40)

🩹 Fixes

• deps: update dependency peowly to v2 (#391) (f98d93d)
• style: ignore TSTypeParameterInstantiation indent (#394) (74afb95)

v0.14.0-next

0.14.0-next (2026-08-06)

⚠ BREAKING CHANGES

• package is ESM-only; Node.js floor raised to ^22.13.0 || >=24; peer eslint range is ^9.22.0 || ^10.0.0; @stylistic pinned at 5.10.0; eslint-plugin-n v18; eslint-plugin-react and all React logic rules removed (JSX style rules remain); cli.mjs renamed to cli.js; default export property access deprecated in favor of named exports. All configs are now scoped to files and ignores is applied to those scopes rather than being global.

🌟 Features

• convert to ESM, support ESLint 10, adopt @​stylistic v5 (#340) (409c468)

... (truncated)

Changelog

Sourced from neostandard's changelog.

0.14.1 (2026-10-09)

📚 Documentation

• clarify global ignore behavior (#409) (939f7b9)

0.14.0 (2026-10-08)

🩹 Fixes

• complete release workflow lifecycle (#401) (7c5379b)
• select committed Release Please configs (#402) (9bf2092)

🧹 Chores

• request stable 0.14.0 (#407) (3a2295a)

0.14.0-next.1 (2026-08-10)

🌟 Features

• deps: update dependency eslint-plugin-n to ^18.2.2 (#381) (3172802)
• deps: update dependency globals to ^17.9.0 (#366) (4b8bb40)

🩹 Fixes

• deps: update dependency peowly to v2 (#391) (f98d93d)
• style: ignore TSTypeParameterInstantiation indent (#394) (74afb95)

0.14.0-next (2026-08-06)

⚠ BREAKING CHANGES

• package is ESM-only; Node.js floor raised to ^22.13.0 || >=24; peer eslint range is ^9.22.0 || ^10.0.0; @stylistic pinned at 5.10.0; eslint-plugin-n v18; eslint-plugin-react and all React logic rules removed (JSX style rules remain); cli.mjs renamed to cli.js; default export property access deprecated in favor of named exports. All configs are now scoped to files and ignores is applied to those scopes rather than being global.

🌟 Features

• convert to ESM, support ESLint 10, adopt @​stylistic v5 (#340) (409c468)

📚 Documentation

• correct version number in README.md import docs (#365) (99205a3)

... (truncated)

Commits

• 2d12a3e chore(main): release 0.14.1 (#411)
• 041c6dd ci: quarantine failing canary dependents (#410)
• 939f7b9 docs: clarify global ignore behavior (#409)
• 91b55eb chore(main): release 0.14.0 (#403)
• 3a2295a chore: request stable 0.14.0 (#407)
• 0662df8 Release-As: 0.14.0
• 0acd5d3 ci: restore static release workflow (#405)
• 62e71bc ci: support explicit stable release version (#404)
• 9bf2092 fix: select committed Release Please configs (#402)
• 7c5379b fix: complete release workflow lifecycle (#401)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for neostandard since your current version.

Updates node-gyp from 12.4.0 to 13.1.0

Release notes

Sourced from node-gyp's releases.

v13.1.0

13.1.0 (2026-10-02)

Features

• update gyp-next to v0.22.3 (#3361) (729bfb8)

Bug Fixes

• accept --msvs_version as the README documents it (#3364) (8cca9c9)
• add Python 3.15 and update OS versions in tests.yml (#3369) (03c7b3b)
• let --loglevel on the command line override npm_config_loglevel (#3384) (2275aa9)

Core

• deps-dev: bump eslint to 10 and neostandard to 0.14.0-next.1 (#3374) (d389298)

Tests

• fix missing cb in fs.unlink (#3368) (e91cd76)
• fix non-ASCII addon cache path (#3370) (e6f699f)

Doc

• use Visual Studio 2026 in Windows setup instructions (#3367) (20bd442)

Miscellaneous

• deps: upgrade tar to 7.5.7 to address CVE-2026-24842 (#3375) (79048c9)
• use Visual Studio 2026 on windows-11-arm (#3380) (6feed93)

v13.0.2

13.0.2 (2026-08-25)

Bug Fixes

• ci: add zizmor security linter for github actions (#3358) (8466166)
• ci: do not ruff format gyp example code in markdown (#3357) (4a74fbe)
• fall back gracefully when build symlink creation fails (#3339) (eae161f)

Core

... (truncated)

Changelog

Sourced from node-gyp's changelog.

13.1.0 (2026-10-02)

Features

• update gyp-next to v0.22.3 (#3361) (729bfb8)

Bug Fixes

• accept --msvs_version as the README documents it (#3364) (8cca9c9)
• add Python 3.15 and update OS versions in tests.yml (#3369) (03c7b3b)
• let --loglevel on the command line override npm_config_loglevel (#3384) (2275aa9)

Core

• deps-dev: bump eslint to 10 and neostandard to 0.14.0-next.1 (#3374) (d389298)

Tests

• fix missing cb in fs.unlink (#3368) (e91cd76)
• fix non-ASCII addon cache path (#3370) (e6f699f)

Doc

• use Visual Studio 2026 in Windows setup instructions (#3367) (20bd442)

Miscellaneous

• deps: upgrade tar to 7.5.7 to address CVE-2026-24842 (#3375) (79048c9)
• use Visual Studio 2026 on windows-11-arm (#3380) (6feed93)

13.0.2 (2026-08-25)

Bug Fixes

• ci: add zizmor security linter for github actions (#3358) (8466166)
• ci: do not ruff format gyp example code in markdown (#3357) (4a74fbe)
• fall back gracefully when build symlink creation fails (#3339) (eae161f)

Core

• deps: bump actions/checkout from 6 to 7 (#3335) (353050b)
• deps: bump actions/setup-node from 6 to 7 (#3348) (005a7c5)

... (truncated)

Commits

• 399f6fa chore(main): release 13.1.0 (#3366)
• 2275aa9 fix: let --loglevel on the command line override npm_config_loglevel (#3384)
• 6feed93 ci: use Visual Studio 2026 on windows-11-arm (#3380)
• 729bfb8 feat: update gyp-next to v0.22.3 (#3361)
• 79048c9 chore(deps): upgrade tar to 7.5.7 to address CVE-2026-24842 (#3375)
• d389298 build(deps-dev): bump eslint to 10 and neostandard to 0.14.0-next.1 (#3374)
• 03c7b3b fix: add Python 3.15 and update OS versions in tests.yml (#3369)
• e6f699f test: fix non-ASCII addon cache path (#3370)
• e91cd76 test: fix missing cb in fs.unlink (#3368)
• 20bd442 docs: use Visual Studio 2026 in Windows setup instructions (#3367)
• Additional commits viewable in compare view

Updates pre-commit from 1.2.2 to 2.0.0

Changelog

Sourced from pre-commit's changelog.

2.0.0

• Breaking: requires Node.js 16.13 or newer. engines.node is now declared as ">=16.13.0" to match the minimum required by which@4.
• Breaking: cross-spawn upgraded ^5 → ^7.0.5, fixing the ReDoS vulnerability (GHSA-3xgq-45jj-v275). cross-spawn's spawnSync now returns status/signal/error instead of code; index.js was updated to match.
• Breaking: which upgraded 1.2.x → ^4. The spawn-sync runtime dependency is dropped in favor of cross-spawn's built-in spawnSync.
• Breaking: the generated .git/hooks/pre-commit wrapper is rewritten. It is now a small bash script that execs the package's hook file via an absolute path (single-line invocation instead of multi-line inline bash). Anyone parsing the wrapper file will need to adjust.
• Breaking: hook file mode tightened from 0777 to 0755 (CIS 6.1.10).
• Breaking: submodule installs now write to <super>/.git/modules/<sub>/hooks/pre-commit. The previous behavior silently walked up to the super-project's .git directory and installed there because the gitdir-parsing branch was unreachable. Linked worktrees (whose .git is also a file) are handled correctly too.
• The hook now unsets GIT_LITERAL_PATHSPECS, so commits triggered from emacs/magit behave the same as on the command line (magit FAQ).
• The hook now cds to the git root before resolving pre-commit via require.resolve, so Yarn Plug'n'Play and GUI git clients that invoke hooks with an unexpected cwd resolve dependencies correctly.
• The hook is resilient to a missing pre-commit package: switching to a branch without node_modules (or removing the package) no longer blocks commits — it exits 0 with a warning instead of throwing a Node module-not-found stack trace.
• Fixed handling of null close codes and signal-terminated scripts; the hook no longer treats a signal kill as success.
• Hardened install.js gitdir parsing against missing matches and bad input; gitdir: paths are resolved relative to the directory containing the .git file (was incorrectly resolved against the package root).
• install.js: typo fix ("backuped" → "backed up").
• Dev tooling refresh: mocha 3 → 10, assume 1 → 2, dropped istanbul for nyc.

1.0.2

• Check /usr/local/bin/node if we cannot find the binaries in the PATH.

1.0.1

• Corrected the hook file so it doesn't attempt to run your index.js but ours instead.

1.0

• Create symlinks instead of a copying the hook file so we can depend on modules.
• More readable output messages.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.68%. Comparing base (25c6b21) to head (a807c4c).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1757   +/-   ##
=======================================
  Coverage   63.68%   63.68%           
=======================================
  Files           3        3           
  Lines        2065     2065           
  Branches      731      731           
=======================================
  Hits         1315     1315           
  Misses        162      162           
  Partials      588      588           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.