chore(deps-dev): bump the dev-dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #626 · wcpos/monorepo

dependabot · 2026-07-07T21:31:04Z

Bumps the dev-dependencies group with 11 updates in the / directory:

Package	From	To
eslint	`9.39.4`	`10.6.0`
lint-staged	`16.4.0`	`17.0.8`
@babel/core	`7.29.7`	`8.0.1`
@playwright/test	`1.60.0`	`1.61.1`
playwright	`1.60.0`	`1.61.1`
tsx	`4.22.4`	`4.23.0`
vitest	`4.1.8`	`4.1.10`
@faker-js/faker	`10.4.0`	`10.5.0`
eslint-config-expo	`56.0.4`	`57.0.0`
prettier	`3.8.4`	`3.9.4`
react-test-renderer	`19.2.3`	`19.2.7`

Updates eslint from 9.39.4 to 10.6.0

Release notes

Sourced from eslint's releases.

v10.6.0

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)

bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)

8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)

5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)

9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)

d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)

2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)

63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)

7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)

399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)

f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)

bea49f7 docs: Update README (GitHub Actions Bot)

e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)

8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)

3eb3d9b docs: Update README (GitHub Actions Bot)

c5bb59c docs: Update README (GitHub Actions Bot)

eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)

3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])

c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)

a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)

27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)

865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])

27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)

970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)

b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])

6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

v10.5.0

Features

5ca8c52 feat: correct stack tracking in max-nested-callbacks (#20973) (Pixel998)

b565783 feat: report no-with violations at the with keyword (#20971) (Pixel998)

2ce032f feat: report max-lines-per-function violations at function head (#20966) (Pixel998)

732cb3e feat: report max-nested-callbacks violations at function head (#20967) (Pixel998)

f9c138a feat: report max-depth violations on keywords (#20943) (Pixel998)

bdb496c feat: correct max-depth handling for else-if chains (#20944) (Pixel998)

c296873 feat: update error loc in max-statements to function header (#20907) (Taejin Kim)

Documentation

... (truncated)

Commits

5d12a04 10.6.0
f7ca54b Build: changelog update for 10.6.0
6a42034 ci: run ecosystem tests on main branch (#20891)
b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014)
c3abfca chore: correct JSDoc param types in html formatter (#21018)
a83683d docs: Update README
a832320 ci: split ecosystem tests into separate jobs (#21001)
6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013)
Additional commits viewable in compare view

Updates lint-staged from 16.4.0 to 17.0.8

Release notes

Sourced from lint-staged's releases.

v17.0.8

Patch Changes

#1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

#1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

v17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

v17.0.5

Patch Changes

#1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

v17.0.4

Patch Changes

#1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

after editing <file> it is staged with git add <file>, and then committed with git commit

after editing <file> it is committed with git commit --all without explicit git add

after editing <file> it is committed with git commit <pathspec> without explicit git add

There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

v17.0.3

Patch Changes

#1782 06813f9 Thanks @iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:

git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files

git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

v17.0.2

Patch Changes

#1779 88670ca Thanks @iiroj! - Enable immutable GitHub releases

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.0.8

Patch Changes

#1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

#1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

17.0.5

Patch Changes

#1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

17.0.4

Patch Changes

#1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

after editing <file> it is staged with git add <file>, and then committed with git commit

after editing <file> it is committed with git commit --all without explicit git add

after editing <file> it is committed with git commit <pathspec> without explicit git add

There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

17.0.3

Patch Changes

#1782 06813f9 Thanks @iiroj! - Fix lint-staged behavior when implicitly committing files without using git add by either:

git commit -am "my commit message" where -a (--all) means to automatically stage all tracked modified and deleted files

git commit -m "my commit message" . where . is an example of a pathspec where matching files will be staged

... (truncated)

Commits

5f3b8f2 Merge pull request #1812 from lint-staged/changeset-release/main
43a9b8d chore(changeset): release
630e2f6 Merge pull request #1809 from lint-staged/restore-merge-status
179b437 fix: restore Git merge status after creating backup stash
6bae2e2 Merge pull request #1811 from lint-staged/exec-git-ignore-stderr
b82a830 ci: run npm audit omitting dev, including prod dependencies
0b19b80 build(deps): update dependencies
3d0b2c0 fix: ignore stderr when doing Git operations
cd11fec Merge pull request #1807 from lint-staged/changeset-release/main
15a8ee0 chore(changeset): release
Additional commits viewable in compare view

Updates @babel/core from 7.29.7 to 8.0.1

Release notes

Sourced from @babel/core's releases.

v8.0.1 (2026-06-17)

This release includes a breaking change that was in the Babel 8 migration guide's Getting ready section and in the release post, but the actual removal of the feature from the codebase was accidentally not complete.

💥 Breaking Change

babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

#18079 Actually remove preset-env's useBuiltIns (@nicolo-ribaudo)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

v8.0.0 (2026-06-16)

NOTE: The changelog below is relative to v8.0.0-rc.6. You can find a summary of all the breaking changes shipped in the Babel 8 release line in the migration guide for users and migration guide for plugin developers.

Read the release blog post at http://babeljs.io/blog/2026/06/16/8.0.0!

👓 Spec Compliance

babel-core

#18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

💥 Breaking Change

babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register

#18069 Fallback to assuming ESM support with modules: auto (@nicolo-ribaudo)

babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime

#18036 Remove corejs exports for @babe/runtime-corejs3 (@liuxingbaoyu)

babel-parser

#18034 Remove locations: "packed" (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#18046 fix(generator): improve new callee parens check (@JLHwung)

babel-plugin-transform-modules-systemjs

#18032 fix(systemjs): support proto as an export name (@JLHwung)

📝 Documentation

#18070 Add EOL date for Babel 7 (end of June 2027) to SECURITY.md (@nicolo-ribaudo)

🏠 Internal

#18018 ci: enforce yarn integrity (@JLHwung)

🏃‍♀️ Performance

babel-core

#18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

Committers: 6

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

James Garbutt (@43081j)

... (truncated)

Changelog

Sourced from @babel/core's changelog.

v8.0.1 (2026-06-17)

💥 Breaking Change

babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

#18079 Actually remove preset-env's useBuiltIns (@nicolo-ribaudo)

v8.0.0 (2026-06-16)

👓 Spec Compliance

babel-core

#18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

💥 Breaking Change

babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register

#18069 Fallback to assuming ESM support with modules: auto (@nicolo-ribaudo)

babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime

#18036 Remove corejs exports for @babe/runtime-corejs3 (@liuxingbaoyu)

babel-parser

#18034 Remove locations: "packed" (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#18046 fix(generator): improve new callee parens check (@JLHwung)

babel-plugin-transform-modules-systemjs

#18032 fix(systemjs): support proto as an export name (@JLHwung)

📝 Documentation

#18070 Add EOL date for Babel 7 (end of June 2027) to SECURITY.md (@nicolo-ribaudo)

🏠 Internal

#18018 ci: enforce yarn integrity (@JLHwung)

🏃‍♀️ Performance

babel-core

#18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

v8.0.0-rc.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18011 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#17999 fix: improve inputSourceMap URL handling (@JLHwung)

babel-core, babel-generator

#17992 Preserve original identifier names from input sourcemaps (@Andarist)

🏠 Internal

babel-core

#17970 Always use native Node.js TS support for config files (@nicolo-ribaudo)

babel-compat-data, babel-register

#17993 chore: use bundled dts for register and eslint-* (@JLHwung)

babel-helper-transform-fixture-test-runner, babel-node

... (truncated)

Commits

b4be199 v8.0.1
b68b1cb Actually remove preset-env's useBuiltIns (#18079)
de007ea Avoid trailing zeroes in Babel 9 generated version (#18078)
7dc825a v8.0.0
b71c35a perf: Only extract source map comments at the end of the file (#18039)
e74b70d chore: Remove unused file (#18033)
ae57969 chore: consolidate upwards traversal to empathic (#18030)
827d003 Change jest snapshotFormat (#18029)
34cf24e Update deps (#18023)
73bceef v8.0.0-rc.6
Additional commits viewable in compare view

Updates @playwright/test from 1.60.0 to 1.61.1

Release notes

Sourced from @playwright/test's releases.

v1.61.1

Bug Fixes

#41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher

#41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)

#41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000

#41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15

#41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:
const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.
You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
4328122 chore: mark v1.61.1 (#41404)
2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
b5a3175 cherry-pick(#41319): fix(loader): support other node versions
d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
Additional commits viewable in compare view

Updates playwright from 1.60.0 to 1.61.1

Release notes

Sourced from playwright's releases.

v1.61.1

Bug Fixes

#41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher

#41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)

#41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000

#41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15

#41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:
const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.
You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
4328122 chore: mark v1.61.1 (#41404)
2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
b5a3175 cherry-pick(#41319): fix(loader): support other node versions
d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
Additional commits viewable in compare view

Updates tsx from 4.22.4 to 4.23.0

Release notes

Sourced from tsx's releases.

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #809 hi#signal privatenumber/tsx#145 #809

This release is also available on:

npm package (@latest dist-tag)

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

isolate hook state per async module.register() registration (a305f36)

This release is also available on:

npm package (@latest dist-tag)

Commits

1dfad37 docs: cite esbuild's extension-resolution model in node notes
257bbbb fix: avoid redundant filesystem probes during module resolution
c178197 feat: add multi-scenario startup benchmark suite
51800ac docs: add Node internals knowledge base (notes/node)
a305f36 fix: isolate hook state per async module.register() registration
ca501a9 chore: upgrade skills-npm to v1.2.0
596cd1f test: cover __dirname, __filename, & require.cache in CJS TS file
75d9bf0 test: lock in lenient ESM for ambiguous and CJS-typed packages
1472f3e test: cover ESM-syntax dependency with omitted "type" field
See full diff in compare view

Updates vitest from 4.1.8 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

v4.1.9

🐞 Bug Fixes

Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)

browser:

Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)

Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)

mocker:

Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)

pool:

Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
a7a61e7 chore: release v4.1.9 (#10598)
934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
See full diff in compare view

Updates @faker-js/faker from 10.4.0 to 10.5.0

Release notes

Sourced from @faker-js/faker's releases.

v10.5.0

What's Changed

docs: fix contribution git commands by @hiSandog in faker-js/faker#3770

infra: trusted publishing via OIDC token by @Shinigami92 in faker-js/faker#3743

docs: add favicon by @ST-DDT in faker-js/faker#2853

chore(deps): update eslint (major) by @renovate[bot] in

…ith 11 updates Bumps the dev-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.6.0` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `16.4.0` | `17.0.8` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.7` | `8.0.1` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.10` | | [@faker-js/faker](https://github.com/faker-js/faker) | `10.4.0` | `10.5.0` | | [eslint-config-expo](https://github.com/expo/expo/tree/HEAD/packages/eslint-config-expo) | `56.0.4` | `57.0.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.4` | `3.9.4` | | [react-test-renderer](https://github.com/facebook/react/tree/HEAD/packages/react-test-renderer) | `19.2.3` | `19.2.7` | Updates `eslint` from 9.39.4 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.6.0) Updates `lint-staged` from 16.4.0 to 17.0.8 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.4.0...v17.0.8) Updates `@babel/core` from 7.29.7 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core) Updates `@playwright/test` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `playwright` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `tsx` from 4.22.4 to 4.23.0 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.22.4...v4.23.0) Updates `vitest` from 4.1.8 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) Updates `@faker-js/faker` from 10.4.0 to 10.5.0 - [Release notes](https://github.com/faker-js/faker/releases) - [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md) - [Commits](faker-js/faker@v10.4.0...v10.5.0) Updates `eslint-config-expo` from 56.0.4 to 57.0.0 - [Changelog](https://github.com/expo/expo/blob/main/packages/eslint-config-expo/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/HEAD/packages/eslint-config-expo) Updates `prettier` from 3.8.4 to 3.9.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.4...3.9.4) Updates `react-test-renderer` from 19.2.3 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-test-renderer) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@babel/core" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@playwright/test" dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: playwright dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: tsx dependency-version: 4.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@faker-js/faker" dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: eslint-config-expo dependency-version: 57.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: prettier dependency-version: 3.9.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: react-test-renderer dependency-version: 19.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

wcpos-bot · 2026-07-07T21:36:49Z

Fix triage for this CI round:

#	Source	File	Class	Category	Decision	Outcome
1	CI: 🧹 Lint	`pnpm-lock.yaml`	Mechanical	Blocking CI	Fix	ESLint 10 crashes while loading `react/display-name` through `eslint-plugin-react`; update config/lock state minimally so lint can run.
2	CI: ✅ Merge Gate	workflow	Mechanical	Downstream CI	Skip	Same root cause as #1; merge gate failed because lint reported `failure`.

Unresolved inline review threads: 0 from fresh GraphQL inventory.

wcpos-bot · 2026-07-07T21:48:04Z

Post-fix triage for this round:

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`index.js`	ESLint 10 crashed while loading `react/display-name` through `eslint-plugin-react`; after that was fixed locally, `eslint-plugin-import` also crashed on `import/no-default-export`.	Fixed by setting React version explicitly after Expo config and replacing the crashing import-plugin default-export rule with ESLint core `no-restricted-exports`.	`5357777`

Skipped / downstream items:

Thread	Reason for skipping
CI: ✅ Merge Gate	Downstream of lint; it should re-evaluate after the lint job completes on `5357777`.

Unresolved inline review threads after push: 0.
CI status after push: pending.

github-actions · 2026-07-07T21:52:37Z

🚀 Deployment Summary

Item	Status
Preview URL	❌ Failed to deploy
E2E Tests	⏭️ Skipped
Commit	`3d1af7d`

_{🤖 Updated by GitHub Actions}

kilbot · 2026-07-07T21:54:17Z

Post-fix triage for ESLint 10 crash:

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`index.js`	ESLint 10 legacy rule context compatibility for Expo's flat config stack.	Fixed by wrapping Expo config with `@eslint/compat` and updating the lockfile.	`9a04c44`
CI: ✅ Merge Gate	`pnpm-lock.yaml`	Downstream failure from the lint crash.	Fixed by same commit; checks are rerunning on the new head.	`9a04c44`

Excluded threads:

Thread	Reason for skipping
None	Fresh GraphQL inventory after push found 0 unresolved inline review threads.

Verification:

PNPM_CONFIG_VERIFY_DEPS_BEFORE_RUN=false pnpm --filter @wcpos/eslint-config exec eslint . passed locally.
PNPM_CONFIG_VERIFY_DEPS_BEFORE_RUN=false pnpm --filter @wcpos/utils exec eslint src/app-info/index.electron.ts --ext .ts passed locally.
Full local pnpm lint is blocked in this checkout by submodule initialization causing apps/electron to appear as an extra workspace not present in this PR lockfile; CI is rerunning on the pushed branch.

wcpos-bot · 2026-07-07T21:59:33Z

CI fix pushed: reverted ESLint to the latest 9.x range (^9.39.4) because eslint-plugin-react@7.37.5 is still the latest npm release and only peers through ESLint 9.x. Removed the temporary ESLint 10 compatibility workaround from the shared ESLint config.

Thread	File	Issue	Decision	Commit
N/A	N/A	No unresolved inline review threads found in the fresh GraphQL inventory.	not applicable	369665f

Excluded threads:

Thread	Reason for skipping
N/A	No unresolved inline review threads were present.

Verification:

pnpm --filter @wcpos/eslint-config test
pnpm --filter @wcpos/eslint-config lint

Note: pnpm install --frozen-lockfile without --ignore-scripts is blocked in this container by missing libsecret-1.so.0 during uniwind postinstall; install succeeded with --ignore-scripts for local verification.

wcpos-bot · 2026-07-07T22:02:25Z

Post-fix verification for requested ESLint revert:

Fresh GraphQL unresolved inline review-thread inventory: 0.

Thread	File	Issue	Decision	Commit

No new commit was created in this pass because the PR branch already contains the requested fix: root package.json has devDependencies.eslint at ^9.39.4, and origin is already at 369665f (fix: revert eslint to v9). git push returned Everything up-to-date.

Excluded threads:

Thread	Reason for skipping
None	Fresh GraphQL inventory found 0 unresolved inline review threads.

kilbot · 2026-07-07T22:03:01Z

Post-fix triage for commit 8d6bdd3.

Fresh unresolved inline review-thread inventory after push: 0.

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`packages/eslint/index.js`, `patches/eslint-plugin-react@7.37.5.patch`	ESLint 10 crashed loading `react/display-name` because the published `eslint-plugin-react@7.37.5` still called removed RuleContext APIs. npm has no `eslint-plugin-react@7.37.6` or later release, so this applies the upstream compatibility patch through pnpm patched dependencies and wraps Expo's legacy flat config with `@eslint/compat`.	Fixed	8d6bdd3
CI: ✅ Merge Gate	workflow	Merge gate failed downstream because lint failed.	Fixed by lint fix	8d6bdd3

Skipped threads: none; the fresh review-thread inventory is empty.

wcpos-bot · 2026-07-07T22:22:13Z

Fix triage for the current CI round:

#	Source	File	Class	Category	Decision	Outcome
1	CI: 🧹 Lint	`packages/components`, `packages/core`, `packages/query`, `packages/database`	Mechanical	Blocking CI	Fix	Run lint auto-fix for Prettier-only formatting errors; no dependency version changes.
2	CI: ✅ Merge Gate	workflow	Mechanical	Downstream CI	Skip	Downstream of lint; it should re-evaluate after lint passes.
3	CI: 🚀 Deploy	workflow	Mechanical	Downstream CI	Skip	Deploy failed/skipped because the current PR checks are blocked by lint.

Unresolved inline review threads from fresh GraphQL inventory: 0.

wcpos-bot · 2026-07-07T22:28:05Z

Post-fix triage for Prettier formatting failures on commit 7f34ae4.

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`tree-combobox.tsx` and 19 related source files	Prettier-only ESLint formatting errors across components, core, query, and database packages.	Fixed by applying ESLint/Prettier auto-formatting only; dependency versions were not changed.	`7f34ae4`
CI: ✅ Merge Gate	`workflow`	Merge gate failed downstream because lint failed.	Fixed by lint formatting commit; checks are rerunning on the new head.	`7f34ae4`
CI: 🚀 Deploy	`workflow`	Deploy was blocked/skipped while PR checks were failing.	Fixed by lint formatting commit; deploy is rerunning on the new head.	`7f34ae4`

Excluded threads:

Thread	Reason for skipping
None	Fresh post-push GraphQL inventory found 0 unresolved inline review threads.

Verification:

pnpm lint passed locally on 7f34ae4 with 0 errors. Existing warnings remain outside this formatting-only scope.
Post-push unresolved inline review threads: 0.
GitHub checks are rerunning on the new head at the time of this comment.

wcpos-bot · 2026-07-07T22:28:09Z

Post-fix triage for formatting lint failures:

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`components`, `core`, `query`, `database`	Prettier formatting errors in union/cast type layout after the dependency bump.	Fixed	`7f34ae4`

Excluded / downstream items:

Thread	Reason for skipping
CI: ✅ Merge Gate	Downstream of lint; it is expected to re-evaluate after the lint job completes on `7f34ae4`.
CI: 🚀 Deploy	Downstream of the current PR check state; deploy has restarted on `7f34ae4`.

Fresh unresolved inline review-thread inventory after push: 0.

Verification:

pnpm lint passed locally: 9 successful lint tasks, 0 errors, warnings only.
CI is rerunning on 7f34ae4; lint was pending when this comment was posted.

wcpos-bot · 2026-07-07T22:34:03Z

Post-fix triage for script-test CI failure on commit 28ee5f4.

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint / Run script tests	`check-dep-duplicates.mjs`	`expo-constants` resolves to two compatible Expo 56 patch versions in this PR lockfile after the dependency bump.	Fixed by adding the script's documented allowlist entry with a reason; package manifests and dependency versions were not changed.	`28ee5f4`
CI: 🧹 Lint / Run script tests	`check-expo-alignment.mjs`	`eslint-config-expo@57.0.0` is intentionally part of the lint toolchain bump while Expo SDK 56 prescribes `~56.0.4`.	Fixed by adding the script's documented allowlist entry with a reason; package manifests and dependency versions were not changed.	`28ee5f4`
CI: ✅ Merge Gate	`workflow`	Merge gate failed downstream because the Lint job failed in script tests.	Fixed by script-test allowlist commit; checks are rerunning on the new head.	`28ee5f4`

Excluded threads:

Thread	Reason for skipping
None	Fresh post-push GraphQL inventory found 0 unresolved inline review threads.

Verification:

pnpm test:scripts passed locally.
pnpm lint passed locally with 0 errors; existing warnings remain outside this CI-fix scope.
Post-push unresolved inline review threads: 0.
GitHub checks are rerunning on the new head at the time of this comment.

wcpos-bot · 2026-07-07T22:34:14Z

Post-fix triage for the follow-up CI script failure:

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint / `pnpm test:scripts`	`check-dep-duplicates.mjs`, `check-expo-alignment.mjs`	After Prettier lint passed, CI failed on dependency policy checks for the intentional Expo 56 patch split and the dev-only `eslint-config-expo` lint-toolchain bump.	Fixed	`28ee5f4`
CI: ✅ Merge Gate	workflow	Downstream failure because lint/test-scripts reported failure.	Fixed by lint/test-scripts fix	`28ee5f4`

Excluded / downstream items:

Thread	Reason for skipping
CI: 🚀 Deploy	Downstream of the PR check state; it should re-run against `28ee5f4`.

Fresh unresolved inline review-thread inventory after push: 0.

Verification:

pnpm test:scripts passed locally.
pnpm lint passed locally: 9 successful lint tasks, 0 errors, warnings only.
CI is rerunning on 28ee5f4.

wcpos-bot · 2026-07-07T22:38:39Z

Post-fix verification for the formatting lint request.

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`packages/components`, `packages/core`, `packages/query`, `packages/database`	Prettier formatting errors after the dependency bump.	Fixed; `pnpm lint:fix` now produces no additional diff on the branch. GitHub `🧹 Lint` passed on current head.	`7f34ae4`

Excluded threads:

Thread	Reason for skipping
N/A	Fresh GraphQL inventory found 0 unresolved inline review threads.

Verification:

pnpm lint:fix completed successfully and left the worktree clean on 28ee5f4.
pnpm lint passed locally with 0 errors. Existing warnings remain outside this formatting-only scope.
pnpm test:scripts passed locally, including dependency duplicate and Expo alignment checks.
git push origin dependabot/npm_and_yarn/dev-dependencies-acf4ba3e5e returned Everything up-to-date; no dependency versions were changed.
GitHub 🧹 Lint passed on 28ee5f416a6a6e571e78efde12aeacf00c1b637d.

Post-push unresolved inline review threads: 0.

wcpos-bot · 2026-07-07T22:39:24Z

Current CI status after 28ee5f4: Lint is fixed, but Deploy has a separate dependency compatibility blocker.

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`tree-combobox.tsx` and related files	Prettier formatting errors across components/core/query/database.	Fixed; GitHub Lint job passed on `28ee5f4`.	`7f34ae4`
CI: 🧹 Lint / Run script tests	`check-dep-duplicates.mjs`, `check-expo-alignment.mjs`	Script-test blockers from intentional dependency-bump exceptions.	Fixed; GitHub Lint job passed on `28ee5f4`.	`28ee5f4`
CI: 🚀 Deploy	`workflow`	`expo export` fails because `@babel/core@8.0.1` is loaded while the React Native Reanimated/Babel preset path requires Babel `^7.0.0-0`.	Blocked under the current instruction not to change dependency versions.	N/A

Excluded threads:

Thread	Reason for skipping
None	Fresh GraphQL inventory found 0 unresolved inline review threads.

Verification:

GitHub 🧹 Lint passed on 28ee5f4.
Local pnpm lint passed with 0 errors.
Local pnpm test:scripts passed.
Post-push unresolved inline review threads: 0.

github-actions · 2026-07-07T22:41:28Z

📊 Test Coverage Report

Package	Statements	Branches	Functions	Lines
@wcpos/core	🔴 23.1%	🔴 26.9%	🔴 22.3%	🔴 22.6%
@wcpos/components	🔴 24.6%	🔴 27.3%	🔴 16.8%	🔴 24.3%
@wcpos/database	🟡 60.2%	🔴 55.0%	🟡 62.7%	🔴 59.7%
@wcpos/hooks	🔴 52.4%	🔴 50.1%	🔴 45.0%	🔴 52.4%
@wcpos/utils	🔴 55.9%	🟡 61.5%	🟡 71.4%	🔴 53.8%
@wcpos/query	🟢 83.9%	🟡 76.9%	🟡 77.7%	🟢 84.0%
Average	🔴 50.0%	🔴 49.6%	🔴 49.3%	🔴 49.5%

Coverage Legend

🟢 Good (≥80%)
🟡 Moderate (60-79%)
🔴 Needs improvement (<60%)
⚪ No coverage data

--- _{🤖 Updated by GitHub Actions • [View full report](https://github.com/wcpos/monorepo/actions/runs/28903342064)}

wcpos-bot · 2026-07-07T22:42:41Z

Final CI status after the pushed fixes:

Thread	File	Issue	Decision	Commit
CI: 🧹 Lint	`components`, `core`, `query`, `database`	Prettier formatting errors in union/cast type layout.	Fixed; GitHub lint passes.	`7f34ae4`
CI: 🧹 Lint / `pnpm test:scripts`	`check-dep-duplicates.mjs`, `check-expo-alignment.mjs`	Dependency policy checks needed explicit exceptions for the intentional Expo 56 patch split and dev-only `eslint-config-expo` lint-toolchain bump.	Fixed; GitHub lint passes.	`28ee5f4`
CI: ✅ Merge Gate	workflow	Previously failed downstream of lint.	Fixed; GitHub merge gate passes.	`28ee5f4`

Excluded / remaining items:

Thread	Reason for skipping
CI: 🚀 Deploy	Still failing separately in `expo export`: Babel `8.0.1` is loaded while Reanimated/`@babel/preset-typescript` require Babel `^7.0.0-0`. I did not change dependency versions because this task explicitly said not to downgrade or change dependency versions.

Fresh unresolved inline review-thread inventory: 0.

Verification:

Local pnpm lint passed: 9 successful lint tasks, 0 errors, warnings only.
Local pnpm test:scripts passed: script checks plus 45 tests passed.
GitHub 🧹 Lint, 🧪 Unit Tests, and ✅ Merge Gate pass on 28ee5f4.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2026

fix: update eslint-plugin-react for ESLint 10 compatibility

5357777

fix: wrap Expo ESLint config for ESLint 10

9a04c44

fix: revert eslint to v9

369665f

fix: pin eslint-plugin-react for ESLint 10 compatibility

8d6bdd3

fix: format prettier lint errors

7f34ae4

fix: allow intentional lint dependency exceptions

28ee5f4

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026

v10.6.0

Features

Bug Fixes

Documentation

Chores

v10.5.0

Features

Documentation

v17.0.8

Patch Changes

v17.0.7

Patch Changes

v17.0.6

Patch Changes

v17.0.5

Patch Changes

v17.0.4

Patch Changes

v17.0.3

Patch Changes

v17.0.2

Patch Changes

17.0.8

Patch Changes

17.0.7

Patch Changes

17.0.6

Patch Changes

17.0.5

Patch Changes

17.0.4

Patch Changes

17.0.3

Patch Changes

v8.0.1 (2026-06-17)

💥 Breaking Change

Committers: 2

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

🐛 Bug Fix

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v8.0.1 (2026-06-17)

💥 Breaking Change

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

🐛 Bug Fix

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

v8.0.0-rc.6 (2026-05-25)

🐛 Bug Fix

🏠 Internal

v1.61.1

Bug Fixes

v1.61.0

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

v1.61.1

Bug Fixes

v1.61.0

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

Features

github-actions Bot commented Jul 7, 2026 •

edited

Loading