chore(deps): bump the npm-minor group across 1 directory with 6 updates

[dependabot]

Bumps the npm-minor group with 6 updates in the / directory:

Package	From	To
video.js	8.23.3	8.23.4
@eslint/js	9.32.0	9.33.0
esbuild	0.25.8	0.25.9
eslint	9.32.0	9.33.0
sass-embedded	1.89.2	1.90.0
stylelint	16.23.0	16.23.1

Updates video.js from 8.23.3 to 8.23.4

Release notes

Sourced from video.js's releases.

v8.23.4

8.23.4 (2025-08-01)

Bug Fixes

• Component.js string arg type for for removeChild (#9070) (31f8d7c)

Chores

• package: update VHS to v3.17.2 (#9079) (c3e4f6b)

Documentation

• Update README.md w/ v10 news link (#9037) (09eb715)

netlify preview for this version

Changelog

Sourced from video.js's changelog.

8.23.4 (2025-08-01)

Bug Fixes

• Component.js string arg type for for removeChild (#9070) (31f8d7c)

Chores

• package: update VHS to v3.17.2 (#9079) (c3e4f6b)

Documentation

• Update README.md w/ v10 news link (#9037) (09eb715)

Commits

• 8e4ec97 8.23.4
• c3e4f6b chore(package): update VHS to v3.17.2 (#9079)
• 31f8d7c fix: Component.js string arg type for for removeChild (#9070)
• 09eb715 docs: Update README.md w/ v10 news link (#9037)
• See full diff in compare view

Updates @eslint/js from 9.32.0 to 9.33.0

Release notes

Sourced from @​eslint/js's releases.

v9.33.0

Features

• e07820e feat: add global object access detection to no-restricted-globals (#19939) (sethamus)
• 90b050e feat: support explicit resource management in one-var (#19941) (Sweta Tanwar)

Bug Fixes

• 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)
• e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#19975) (諏訪原慶斗)

Documentation

• 34f0723 docs: playground button for TypeScript code example (#19671) (Tanuj Kanti)
• dc942a4 docs: Update README (GitHub Actions Bot)
• 5a4b6f7 docs: Update no-multi-assign.md (#19979) (Yuki Takada (Yukinosuke Takada))
• 247e156 docs: add missing let declarations in no-plusplus (#19980) (Yuki Takada (Yukinosuke Takada))
• 0d17242 docs: Update README (GitHub Actions Bot)
• fa20b9d docs: Clarify when to open an issue for a PR (#19974) (Nicholas C. Zakas)

Build Related

• 27fa865 build: use ESLint class to generate formatter examples (#19972) (Milos Djermanovic)

Chores

• 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998) (renovate[bot])
• ad28371 chore: package.json update for @​eslint/js release (Jenkins)
• 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
• 54920ed test: switch to Linter.Config in ESLintRules type tests (#19977) (Francesco Trotta)

Changelog

Sourced from @​eslint/js's changelog.

v9.33.0 - August 8, 2025

• 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998) (renovate[bot])
• ad28371 chore: package.json update for @​eslint/js release (Jenkins)
• 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
• 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)
• 34f0723 docs: playground button for TypeScript code example (#19671) (Tanuj Kanti)
• dc942a4 docs: Update README (GitHub Actions Bot)
• 5a4b6f7 docs: Update no-multi-assign.md (#19979) (Yuki Takada (Yukinosuke Takada))
• 247e156 docs: add missing let declarations in no-plusplus (#19980) (Yuki Takada (Yukinosuke Takada))
• 0d17242 docs: Update README (GitHub Actions Bot)
• e07820e feat: add global object access detection to no-restricted-globals (#19939) (sethamus)
• fa20b9d docs: Clarify when to open an issue for a PR (#19974) (Nicholas C. Zakas)
• 54920ed test: switch to Linter.Config in ESLintRules type tests (#19977) (Francesco Trotta)
• e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#19975) (諏訪原慶斗)
• 90b050e feat: support explicit resource management in one-var (#19941) (Sweta Tanwar)
• 27fa865 build: use ESLint class to generate formatter examples (#19972) (Milos Djermanovic)

Commits

• ad28371 chore: package.json update for @​eslint/js release
• See full diff in compare view

Updates esbuild from 0.25.8 to 0.25.9

Release notes

Sourced from esbuild's releases.

v0.25.9

• Better support building projects that use Yarn on Windows (#3131, #3663)

  With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

  1. Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive
  2. Some developers put their projects on the D: drive
  3. Yarn generates relative paths that use ../.. to get from the project directory to the cache directory
  4. Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)
  5. I didn't have access to a Windows machine for testing this edge case

  Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.

• Preserve parentheses around function expressions (#4252)

  The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

  Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:

  // Original code
  const fn0 = () => 0
  const fn1 = (() => 1)
  console.log(fn0, function() { return fn1() }())
  // Old output
  const fn0 = () => 0;
  const fn1 = () => 1;
  console.log(fn0, function() {
  return fn1();
  }());
  // New output
  const fn0 = () => 0;
  const fn1 = (() => 1);
  console.log(fn0, (function() {
  return fn1();
  })());

  Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.

• Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

  This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.

Changelog

Sourced from esbuild's changelog.

0.25.9

• Better support building projects that use Yarn on Windows (#3131, #3663)

  With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

  1. Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive
  2. Some developers put their projects on the D: drive
  3. Yarn generates relative paths that use ../.. to get from the project directory to the cache directory
  4. Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)
  5. I didn't have access to a Windows machine for testing this edge case

  Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.

• Preserve parentheses around function expressions (#4252)

  The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

  Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:

  // Original code
  const fn0 = () => 0
  const fn1 = (() => 1)
  console.log(fn0, function() { return fn1() }())
  // Old output
  const fn0 = () => 0;
  const fn1 = () => 1;
  console.log(fn0, function() {
  return fn1();
  }());
  // New output
  const fn0 = () => 0;
  const fn1 = (() => 1);
  console.log(fn0, (function() {
  return fn1();
  })());

  Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.

• Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

  This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.

Commits

• 195e05c publish 0.25.9 to npm
• 3dac33f fix #3131, fix #3663: yarnpnp + windows + D drive
• 0f2c5c8 mock fs now supports multiple volumes on windows
• 100a51e split out yarnpnp snapshot tests
• 13aace3 remove C: assumption from windows snapshot tests
• f1f413f fix #4252: preserve parentheses around functions
• 1bc8091 fix #4257, close #4258: go 1.23.10 => 1.23.12
• bc52135 move the go compiler version to go.version
• a0af5d1 makefile: use ESBUILD_VERSION consistently
• See full diff in compare view

Updates eslint from 9.32.0 to 9.33.0

Release notes

Sourced from eslint's releases.

v9.33.0

Features

• e07820e feat: add global object access detection to no-restricted-globals (#19939) (sethamus)
• 90b050e feat: support explicit resource management in one-var (#19941) (Sweta Tanwar)

Bug Fixes

• 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)
• e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#19975) (諏訪原慶斗)

Documentation

• 34f0723 docs: playground button for TypeScript code example (#19671) (Tanuj Kanti)
• dc942a4 docs: Update README (GitHub Actions Bot)
• 5a4b6f7 docs: Update no-multi-assign.md (#19979) (Yuki Takada (Yukinosuke Takada))
• 247e156 docs: add missing let declarations in no-plusplus (#19980) (Yuki Takada (Yukinosuke Takada))
• 0d17242 docs: Update README (GitHub Actions Bot)
• fa20b9d docs: Clarify when to open an issue for a PR (#19974) (Nicholas C. Zakas)

Build Related

• 27fa865 build: use ESLint class to generate formatter examples (#19972) (Milos Djermanovic)

Chores

• 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998) (renovate[bot])
• ad28371 chore: package.json update for @​eslint/js release (Jenkins)
• 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
• 54920ed test: switch to Linter.Config in ESLintRules type tests (#19977) (Francesco Trotta)

Changelog

Sourced from eslint's changelog.

v9.33.0 - August 8, 2025

• 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998) (renovate[bot])
• ad28371 chore: package.json update for @​eslint/js release (Jenkins)
• 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
• 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)
• 34f0723 docs: playground button for TypeScript code example (#19671) (Tanuj Kanti)
• dc942a4 docs: Update README (GitHub Actions Bot)
• 5a4b6f7 docs: Update no-multi-assign.md (#19979) (Yuki Takada (Yukinosuke Takada))
• 247e156 docs: add missing let declarations in no-plusplus (#19980) (Yuki Takada (Yukinosuke Takada))
• 0d17242 docs: Update README (GitHub Actions Bot)
• e07820e feat: add global object access detection to no-restricted-globals (#19939) (sethamus)
• fa20b9d docs: Clarify when to open an issue for a PR (#19974) (Nicholas C. Zakas)
• 54920ed test: switch to Linter.Config in ESLintRules type tests (#19977) (Francesco Trotta)
• e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#19975) (諏訪原慶斗)
• 90b050e feat: support explicit resource management in one-var (#19941) (Sweta Tanwar)
• 27fa865 build: use ESLint class to generate formatter examples (#19972) (Milos Djermanovic)

Commits

• a90d7c4 9.33.0
• 9534b55 Build: changelog update for 9.33.0
• 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998)
• ad28371 chore: package.json update for @​eslint/js release
• 06a22f1 test: resolve flakiness in --mcp flag test (#19993)
• 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995)
• 34f0723 docs: playground button for TypeScript code example (#19671)
• dc942a4 docs: Update README
• 5a4b6f7 docs: Update no-multi-assign.md (#19979)
• 247e156 docs: add missing let declarations in no-plusplus (#19980)
• Additional commits viewable in compare view

Updates sass-embedded from 1.89.2 to 1.90.0

Changelog

Sourced from sass-embedded's changelog.

1.90.0

• Allow a @forwarded module to be loaded with a configuration when that module has already been loaded with a different configuration and the module doesn't define any variables that would have been configured anyway.

Commits

• 81c48ba Update Dart Sass version and release
• 13fe81b Add libc field to package.json (#388)
• 4c312c4 Support pure JS sass executable (#344)
• a7d5c64 Bump jest from 29.7.0 to 30.0.3 (#384)
• a91a57d Bump @​types/node from 22.15.32 to 24.0.3 (#380)
• See full diff in compare view

Updates stylelint from 16.23.0 to 16.23.1

Release notes

Sourced from stylelint's releases.

16.23.1

It fixes 7 bugs.

• Fixed: no-invalid-position-declaration false positives for embedded styles (#8701) (@​sw1tch3roo).
• Fixed: property-no-deprecated erroneously autofixing clip (#8699) (@​immitsu).
• Fixed: property-no-deprecated false positives for -webkit-box-orient: vertical; (#8699) (@​immitsu).
• Fixed: selector-pseudo-*-no-unknown false positives for some meter pseudo classes/elements (#8708) (@​Mouvedia).
• Fixed: selector-pseudo-class-no-unknown false positives for :unchecked (#8705) (@​Mouvedia).
• Fixed: selector-pseudo-element-no-unknown false positives for ::search-text (#8707) (@​Mouvedia).
• Fixed: selector-type-no-unknown false positives for selectedcontent (#8716) (@​Mouvedia).

Changelog

Sourced from stylelint's changelog.

16.23.1 - 2025-08-07

It fixes 7 bugs.

• Fixed: no-invalid-position-declaration false positives for embedded styles (#8701) (@​sw1tch3roo).
• Fixed: property-no-deprecated erroneously autofixing clip (#8699) (@​immitsu).
• Fixed: property-no-deprecated false positives for -webkit-box-orient: vertical; (#8699) (@​immitsu).
• Fixed: selector-pseudo-*-no-unknown false positives for some meter pseudo classes/elements (#8708) (@​Mouvedia).
• Fixed: selector-pseudo-class-no-unknown false positives for :unchecked (#8705) (@​Mouvedia).
• Fixed: selector-pseudo-element-no-unknown false positives for ::search-text (#8707) (@​Mouvedia).
• Fixed: selector-type-no-unknown false positives for selectedcontent (#8716) (@​Mouvedia).

Commits

• a282f6c 16.23.1
• 93e33f0 Prepare 16.23.1 (#8706)
• 2811636 Fix no-invalid-position-declaration false positives for embedded styles (#8...
• 6006370 Fix selector-type-no-unknown false positives for selectedcontent (#8716)
• 5e7c4f0 Fix selector-pseudo-*-no-unknown false positives for some meter pseudo clas...
• 5ef3ad8 Improve postcss-naive-css-in-js test fixture (#8715)
• 5c66db7 Fix selector-pseudo-element-no-unknown false positives for ::search-text ...
• b17f5a4 Bump typescript from 5.8.3 to 5.9.2 in the typescript group (#8711)
• ce1283b Fix property-no-deprecated false positive for `-webkit-box-orient: vertical...
• 94b6d69 Bump rollup from 4.46.0 to 4.46.2 (#8709)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.