[dependabot]

Bumps the cli-dependencies group with 10 updates in the /cli directory:

Package	From	To
@clack/prompts	1.7.0	1.8.1
oauth4webapi	3.8.7	3.8.8
yaml	2.9.0	2.9.1
@types/bun	1.4.3	1.4.4
eslint-plugin-no-relative-import-paths	1.6.1	1.7.3
knip	6.32.2	6.43.0
oxfmt	0.71.0	0.74.0
oxlint	1.86.0	1.89.0
oxlint-tsgolint	7.0.2003	7.0.2005
typescript	6.0.3	7.0.2

Updates @clack/prompts from 1.7.0 to 1.8.1

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.8.1

Patch Changes

• 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

• Updated dependencies [8bd9129]:

  • @​clack/core@​1.5.1

@​clack/prompts@​1.8.0

Minor Changes

• #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

• #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

• #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

• #588 6506135 Thanks @​danielroe! - Style the guide bar rendered by box({ withGuide: true }) in grey so it matches the gutter drawn by log, note and the spinner

• #599 0547d6f Thanks @​43081j! - Fixes a withGuide rendering issue leaving extra spaces in text prompts.

• Updated dependencies [227583e, caa32e8, 37fca4e, ae636dd, b20fa2b]:

  • @​clack/core@​1.5.0

Changelog

Sourced from @​clack/prompts's changelog.

1.8.1

Patch Changes

• 8bd9129 Thanks @​gameroman! - Return type for prompts now correctly specifies CANCEL_SYMBOL instead of symbol

• Updated dependencies [8bd9129]:

  • @​clack/core@​1.5.1

1.8.0

Minor Changes

• #592 caa32e8 Thanks @​gameroman! - Export CANCEL_SYMBOL constant from @clack/core and @clack/prompts

• #594 37fca4e Thanks @​dreyfus92! - Add tab-completion to the path prompt: pressing Tab fills the input with the focused suggestion, so you can quickly descend into deep directories (type / and Tab again). Powered by a new opt-in completeOnTab option on autocomplete, which also shows a Tab: complete hint in the instructions footer. Default autocomplete behavior is unchanged.

• #583 ae636dd Thanks @​43081j! - Add async validation support to prompts, and validation state rendering to text prompts.

Patch Changes

• #588 6506135 Thanks @​danielroe! - Style the guide bar rendered by box({ withGuide: true }) in grey so it matches the gutter drawn by log, note and the spinner

• #599 0547d6f Thanks @​43081j! - Fixes a withGuide rendering issue leaving extra spaces in text prompts.

• Updated dependencies [227583e, caa32e8, 37fca4e, ae636dd, b20fa2b]:

  • @​clack/core@​1.5.0

Commits

• da44e23 [ci] release (#605)
• 8bd9129 fix: correctly specify return type of CANCEL_SYMBOL (#601)
• de1ef16 [ci] release (#589)
• 0547d6f fix: output submit gap only when guide enabled (#599)
• ae636dd feat: add async validation (#583)
• 37fca4e feat(prompts): add tab-completion to path prompt (#594)
• caa32e8 feat: export CANCEL_SYMBOL (#592)
• 8d81248 chore: stop publishing CHANGELOG.md to npm (#591)
• e238070 test(box): remove redundant test (#590)
• 6506135 fix(prompts): style box guide bar to match other gutters (#588)
• See full diff in compare view

Updates oauth4webapi from 3.8.7 to 3.8.8

Release notes

Sourced from oauth4webapi's releases.

v3.8.8

Fixes

• accept space runs in Bearer and DPoP credentials (3414db5)
• decode HTTP authentication quoted pairs correctly (bd7fcb0)
• forward arguments to AVA test runners (b898ba5)
• honor explicit auth-time skips in authorization responses (656d762)
• recognize DPoP nonce errors among multiple challenges (70bd8a1)
• release: separate changelog sections (a827c39)
• validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

• consolidate ID Token validation policy (53900cc)

Performance

• cache imported issuer verification keys by algorithm (fbe6c02)
• coalesce compatible in-flight JWKS requests (e64849e)

Changelog

Sourced from oauth4webapi's changelog.

3.8.8 (2026-09-05)

Fixes

• accept space runs in Bearer and DPoP credentials (3414db5)
• decode HTTP authentication quoted pairs correctly (bd7fcb0)
• forward arguments to AVA test runners (b898ba5)
• honor explicit auth-time skips in authorization responses (656d762)
• recognize DPoP nonce errors among multiple challenges (70bd8a1)
• release: separate changelog sections (a827c39)
• validate ID Token subjects and DPoP identifiers as strings (edbebeb)

Refactor

• consolidate ID Token validation policy (53900cc)

Performance

• cache imported issuer verification keys by algorithm (fbe6c02)
• coalesce compatible in-flight JWKS requests (e64849e)

Commits

• 916b979 chore(release): 3.8.8
• eb564a4 test: accept WebCrypto DOMException rejections on Node 20
• fbe6c02 perf: cache imported issuer verification keys by algorithm
• e64849e perf: coalesce compatible in-flight JWKS requests
• 53900cc refactor: consolidate ID Token validation policy
• edbebeb fix: validate ID Token subjects and DPoP identifiers as strings
• bd7fcb0 fix: decode HTTP authentication quoted pairs correctly
• 3414db5 fix: accept space runs in Bearer and DPoP credentials
• 656d762 fix: honor explicit auth-time skips in authorization responses
• b898ba5 fix: forward arguments to AVA test runners
• Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

Updates @types/bun from 1.4.3 to 1.4.4

Commits

• See full diff in compare view

Updates eslint-plugin-no-relative-import-paths from 1.6.1 to 1.7.3

Release notes

Sourced from eslint-plugin-no-relative-import-paths's releases.

1.7.3

No release notes provided.

1.7.2

Re-release

1.7.1

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@1.7.0...1.7.1

1.7.0

What's Changed

• Update index.js for ESLint 10.0.0 compatibility by @​klydra in MelvinVermeer/eslint-plugin-no-relative-import-paths#47

New Contributors

• @​klydra made their first contribution in MelvinVermeer/eslint-plugin-no-relative-import-paths#47

Full Changelog: MelvinVermeer/eslint-plugin-no-relative-import-paths@v1.6.1...1.7.0

Commits

• 2e18795 update workflow
• 39f7e11 fix package json
• 44e77db Update index.js for ESLint 10.0.0 (#47)
• b48a18d Upgrade workflow
• 8ddcc87 update package version v1.6.1 [skip ci]
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-no-relative-import-paths since your current version.

Updates knip from 6.32.2 to 6.43.0

Release notes

Sourced from knip's releases.

Release 6.43.0

• Document and pin exports that only keep each other alive (#2160) (39af70abb32523a992a7d6152b8cd95ef317f237)
• Don't add config files without an extension as entry files (resolve #2168) (46a825ddf15d3073b899ed6ef34689e5da5508f2)
• Recognize unscoped ~name workspace packages (resolve #2172) (ba527f7386e7741507f2f18d84864058e02ac907)
• Follow imports and re-exports in ambient modules (resolve #2174) (dbd3a8b8b0429433e5385371c09e805b808a32c2) - thanks @​tlq5l!
• Follow @reference in Tailwind CSS compiler (#2177) (219f16de95e174cdcfd6a90782bcef13cf79bd64) - thanks @​mkantautas!
• Support { find, replacement } array form of Vite alias (#2179) (5d0779bc4cf8c0469c50d5b2cda1a6bd1f053d81) - thanks @​mkantautas!
• fix(expo): treat local config plugins as entry files (#2176) (100ef491509a88b00ea9956ba40dbc1b0ac0c205) - thanks @​Cayan!
• fix(next): detect Turbopack loaders in shared config factories (#2161) (9cf928be5022928a38c12fe8001cec7bf467040c) - thanks @​jakeleventhal!
• Ignore osascript as global binary (#2182) (c301e44c7975442d4d25595f084e6b853f07a434) - thanks @​abrahamguo!
• Skip --fix for exports in multi-declarator variable statements (#2178) (326afd9c1e66eef04d986b83ed829b506f506c48) - thanks @​mkantautas!
• Watch the project directory instead of process.cwd() (#2183) (16d9932d0239f649cf2c1349cc7bc893850cd4f0) - thanks @​abrahamguo!
• Follow directory paths in tsconfig references (#2186) (d741c46e3f2a9caaf6bf4e81e9d4c8cfca48623e) - thanks @​mkantautas!
• Handle @plugin options blocks in Tailwind CSS compiler (#2187) (9fae773eb75bcba03e62f44ce3e9aa0b889bf4ac) - thanks @​mkantautas!
• Remove anonymous default-exported functions and classes in --fix (#2188) (6748259fbb2ea9a5940ea3861626f77677610a86) - thanks @​mkantautas!
• Recognize bun fmt as a built-in command (#2189) (e971b0924bcb7ff8dcab01a180d3016cc08b675d) - thanks @​TomasHubelbauer!
• Add plugin for @​bufbuild/buf (#2142) (90216c261c2273967125669beb611bf763d762c7) - thanks @​ryanquinn3!
• Pass isSsrBuild to Vite config functions (#2191) (d2aa101c55e5d7e8d26548808ce008b214622099) - thanks @​mkantautas!
• Follow src of <script> and <style> blocks in Vue SFCs (#2193) (3d148393d5129a096a182fab36a873b9f710f388) - thanks @​mkantautas!
• Remove import attributes with emptied re-exports in --fix (#2192) (231026cf9c21cc7890f21d048f4af6ea7233d7b8) - thanks @​mkantautas!
• Update npmx.dev snapshot (b2cc439006ec98ff5bbc1c99b99bc1ac5203b6b2)
• Read string parserOptions.parser in ESLint flat configs (#2198) (302f908aa135669d6fe96869ec6452b7570856a4) - thanks @​mkantautas!
• Resolve directory matches in Vitest test.projects to their config (#2195) (4d386138011c27e01e6e910be6d58266e07c9cf1) - thanks @​fixfon!
• Ignore custom elements named script-* when extracting script blocks (#2199) (23e6479b233e1882ddaf29736390309d0f3f040f) - thanks @​mkantautas!
• feat(mcp): add MCP plugin (#2180) (fc92470a9f687e2f1da60b84612ebf3e59a8bbb9) - thanks @​jakeleventhal!
• Handle non-Error plugin config failures (8f21ea2182fac5a96edd7d6d4280a0fa1051e434)
• Update articles list (6569cdcde1a79a6196a35a934b6c0d9d0e23faa4)
• Skip --fix export ranges inside a larger removal (204a8091baf91cb8cfb4e7a9aa70d461cc926baa)
• Detect .travis.yml with a stat instead of a glob (3601c6e32afef3d1d76a3944e540225da5190b9b)
• Mark YAML catalog entries fixed only when their line is removed (#2201) (813fa30e55ef3a8ed749d9d6d5a02a00810cfe72) - thanks @​mkantautas!
• Add Electron Forge plugin (#2158) (12e4355a43ea63c417d3b9ebfbbac1c8510b139e) - thanks @​mehdimirzafaruk!
• Resolve function and promise entries in Vitest test.projects (#2197) (ec293d1a33d30a8b0521725d1148e6e72c6e4220) - thanks @​mkantautas!
• Follow npm lifecycle scripts and run-script aliases (#2202) (89dfdc881e6865aef326c2b9dc700cf5c46b73b4) - thanks @​sushanta-neupane!
• Follow pnpm t, tst and run-script aliases (ce91e230e0823433dfcc1ee4562335c34d2b73ef)
• Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils) (db9aa7443c5b3839df5c0fe320d78ea42f0f3446)
• Ignore tool output before the first report section in ecosystem snapshots (9434bf678e60d16832f13e892d7c1ebc2b9e6ed1)
• Update dependencies (21c3b75fc4ae94208311abb630ff129fcd9fe820)
• Bump engines.node to follow Astro's (9d7a5e07212b093f9d422cab813fad5d01273fc6)

Release 6.42.1

• fix(semantic-release): resolve shareable configs from extends (#2159) (4c4a5ece9148cf621f3a6e091fd3550b18f6e19a) - thanks @​giaBaoJS!
• fix(jest): load projects entries as Jest configs (#2167) (4c22593724460890e4492ba86119d0188127f2ba) - thanks @​Cayan!
• Update npmx.dev snapshot (4b19797b77a559f7190e9119b3a156e1ac6aef9f)
• fix(tailwind): track packages referenced from CSS url() (#2166) (949da00abf419c1eeabdab1541ce7e5c312371b9) - thanks @​agustincastaing!
• Add .otf to foreign file extensions (fcff4db0b88d6282569743cd779aec5a5df99862)
• Match quoted SCSS url() values within a single line (2c5c2a2efab8f08be538bfe1f40982cb6f0fca3c)
• fix(bun): treat bun test arguments as path filters (#2165) (5f3a7fb526d3eca7561aacfc9d0ac60056525206) - thanks @​jakeleventhal!
• fix(vitest): use default test entries when config has no test key (#2170) (7ee576ccd461f719b533e3783a5b58391ce89e91) - thanks @​fixfon!

Release 6.42.0

... (truncated)

Commits

• 0712156 Release knip@6.43.0
• 21c3b75 Update dependencies
• db9aa74 Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils)
• ce91e23 Follow pnpm t, tst and run-script aliases
• 89dfdc8 Follow npm lifecycle scripts and run-script aliases (#2202)
• ec293d1 Resolve function and promise entries in Vitest test.projects (#2197)
• 12e4355 Add Electron Forge plugin (#2158)
• 813fa30 Mark YAML catalog entries fixed only when their line is removed (#2201)
• 3601c6e Detect .travis.yml with a stat instead of a glob
• 204a809 Skip --fix export ranges inside a larger removal
• Additional commits viewable in compare view

Updates oxfmt from 0.71.0 to 0.74.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.74.0

🐛 Bug Fixes

• e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#27957) (leaysgur)
• 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
• a5d8184 jsdoc: Parse code spans after quotes in descriptions (#27955) (leaysgur)
• 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#27948) (leaysgur)
• 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#27947) (leaysgur)
• 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#27946) (leaysgur)
• c22a9b2 formatter: Treat static block with only empty statements as empty (#27945) (leaysgur)
• d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#27823) (leaysgur)
• c4c1727 formatter/sort_imports: Keep comments after the last import (#27822) (leaysgur)
• a64677e formatter: Print JSDoc embedded snippets with LF (#27821) (leaysgur)
• 2c1cc20 formatter: Keep comment only Vue bindings as-is (#27820) (leaysgur)
• 1bf236d formatter/sort_imports: Do not use comments as import source (#27819) (leaysgur)
• 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#27818) (leaysgur)
• 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#27814) (leaysgur)
• a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#27812) (leaysgur)
• de110ce formatter: Keep more parens around TSInstantiationExpression (#27811) (leaysgur)
• 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#27785) (leaysgur)
• 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#27780) (leaysgur)
• 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#27778) (leaysgur)
• 5b2acb0 formatter_core: Report error position releative to CRLF source (#27777) (leaysgur)
• c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#27776) (leaysgur)
• 3a980c9 formatter_toml: Handle BOM like other languages (#27775) (leaysgur)
• 97c9fc4 oxfmt: Handle BOM in config JSON (#27774) (leaysgur)
• 28eb4a7 oxfmt: Print trailing newline for --list-different (#27773) (leaysgur)
• d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#27737) (leaysgur)
• 6a95ec1 formatter: Keep comment position on holey array (#27730) (leaysgur)
• 54769da formatter: Break after dangling line comment in holey array (#27729) (leaysgur)
• 99077ef formatter_json: Reject unary expressions other than signed numbers (#27728) (leaysgur)
• 22cd4cd formatter_json: Handle holey array and comments (#27727) (leaysgur)
• 644ca1c formatter: Do not indent logical chains whose right sides all inline (#27667) (leaysgur)
• a07a0fb formatter: Wrap comment-only JSX expression container in a group (#27666) (leaysgur)

⚡ Performance

• e220293 formatter: Check only the operator suppression mark in is_quiet (#27952) (leaysgur)
• e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#27559) (leaysgur)
• a342f7e formatter: Skip comment handling for nodes with no comment near them (#27557) (leaysgur)
• d8ce750 formatter: Write string literals with swapped quotes into the arena (#27558) (Yuji Sugiura)
• 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#27561) (leaysgur)
• 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#27673) (leaysgur)

📚 Documentation

• 1325225 oxfmt: Update useless comment prefix (#27956) (leaysgur)
• d0dd140 formatter: Note lossy cooked round-trip in template embeds (#27944) (leaysgur)
• 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#27824) (leaysgur)

... (truncated)

Commits

• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• a495e82 feat(oxfmt): support associations config to specify language over filepath ...
• 408d87f docs(oxfmt): simplify oxfmtrc docs (#27432)
• 5db28fa feat(oxfmt): support Astro via prettier-plugin-astro@1.x (#27386)
• 902e188 docs(oxfmt): update how embeddedLanguageFormatting option works (#27362)
• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• See full diff in compare view

Updates oxlint from 1.86.0 to 1.89.0

Release notes

Sourced from oxlint's releases.

oxlint v1.89.0

💥 BREAKING CHANGES

• e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
• a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

• 770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)
• ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)
• d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)
• e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)
• 7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)
• d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)
• 199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)
• 780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)
• 6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)
• b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)
• c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)
• 6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

• 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
• 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
• 326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)
• f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)
• 00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)
• 9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)
• 01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)
• 7f474d5 linter/eslint/no-loop-func: Detect writes after the loop (#27754) (camc314)
• 4b7fea6 linter/eslint/block-scoped-var: Ignore declarations without writes (#27760) (camc314)
• 2947917 linter/eslint/no-lonely-if: Check final else blocks in else-if chains (#27759) (camc314)
• fc039b5 linter/eslint/sort-imports: Check imports after other statements (#27749) (camc314)
• 1acba97 linter/unicorn/prefer-at: Report slice index reads once (#27762) (camc314)
• 6190e26 linter/eslint/prefer-arrow-callback: Ignore functions used as conditional tests (#27533) (Anzal Husain Abidi)
• b3cdaaf linter/eslint/sort-keys: Check computed identifier names (#27748) (camc314)
• 170e608 linter/unicorn/prefer-native-coercion-functions: Check object methods and function properties (#27750) (camc314)
• 9261df7 linter/unicorn/prefer-string-raw: Check object property values (#27758) (camc314)
• ddea86b linter/eslint/prefer-template: Report separate nested concatenations (#27764) (camc314)
• 2c67197 linter/eslint/no-unused-vars: Count conditional calls in sequences as uses (#27755) (camc314)
• 7f22fa0 linter/unicorn/prefer-regexp-test: Check logical operands in boolean contexts (#27761) (camc314)
• 3c44398 linter/eslint/class-methods-use-this: Count this in parameter defaults (#27756) (camc314)
• d85923f linter/eslint/no-param-reassign: Report rest parameter writes (#27765) (camc314)
• 8ea47bb linter/unicorn/prefer-type-error: Handle parenthesized type checks (#27766) (camc314)
• e96856c linter/unicorn/catch-error-name: Check unused underscore-prefixed names (#27751) (camc314)
• d8ca399 linter/unicorn/no-array-callback-reference: Ignore callback factory calls (#27763) (camc314)
• 1267ab8 linter/eslint/max-params: Count rest parameters (#27757) (camc314)
• 9ff25c3 linter/eslint/no-useless-assignment: Report dead stores to function parameters (#27735) (camc314)
• ee5e730 linter/eslint/no-setter-return: Check setters in property descriptors (#27731) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.89.0] - 2026-10-19

🐛 Bug Fixes

• 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)

[1.88.0] - 2026-10-13

🚀 Features

• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

Commits

• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 9a424c2 fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)
• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• 3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• See full diff in compare view

Updates oxlint-tsgolint from 7.0.2003 to 7.0.2005

Release notes

Sourced from oxlint-tsgolint's releases.

v7.0.2005

What's Changed

• chore(deps): update github actions by @​renovate[bot] in oxc-project/tsgolint#1273
• chore(deps): update gomod by @​renovate[bot] in oxc-project/tsgolint#1274
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1275
• chore(deps): update oxc-project/security-action action to v1.0.9 by @​renovate[bot] in oxc-project/tsgolint#1276
• fix(unbound-method): respect this: void on class properties by @​baevm in oxc-project/tsgolint#1277
• docs(security): inherit organization security policy by @​Boshen in oxc-project/tsgolint#1295
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1301
• fix(no-deprecated): avoid infinite loop on circular alias chains by @​magurotuna in oxc-project/tsgolint#1309
• feat(await-thenable): add allowMixedPromiseArrays option by @​camc314 in oxc-project/tsgolint#1307
• chore: remove update-typescript-go.yml by @​camc314 in oxc-project/tsgolint#1311
• ci: pin just version in setup and autofix by @​camc314 in oxc-project/tsgolint#1312
• fix(no-unnecessary-type-parameters): count generic type arguments by @​farnoodma in oxc-project/tsgolint#1297
• feat(no-unsafe-enum-assignment): add rule by @​camc314 in oxc-project/tsgolint#1316
• fix(require-array-sort-compare): report tuples by @​baevm in oxc-project/tsgolint#1317

New Contributors

• @​magurotuna made their first contribution in oxc-project/tsgolint#1309
• @​farnoodma made their first contribution in oxc-project/tsgolint#1297

Full Changelog: oxc-project/tsgolint@v7.0.2004...v7.0.2005

v7.0.2004

What's Changed

• chore(deps): update taiki-e/install-action action to v2.87.20 by @​renovate[bot] in oxc-project/tsgolint#1246
• chore(deps): update dependency dprint-json to v0.25.0 by @​renovate[bot] in oxc-project/tsgolint#1247
• fix(no-unsafe-return): preserve deferred indexed return type by @​camc314 in oxc-project/tsgolint#1248
• chore(deps): update crate-ci/typos action to v1.50.3 by @​renovate[bot] in oxc-project/tsgolint#1250
• fix(no-misused-promises): don't report comma expressions as conditionals by @​geniusmonir in oxc-project/tsgolint#1254
• chore(deps): update gomod by @​renovate[bot] in oxc-project/tsgolint#1257
• chore(deps): update dprint plugins by @​renovate[bot] in oxc-project/tsgolint#1256
• chore(deps): update taiki-e/install-action action to v2.87.22 by @​renovate[bot] in oxc-project/tsgolint#1258
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/tsgolint#1259
• fix(no-floating-promises): respect safe-call declaration sources by @​camc314 in oxc-project/tsgolint#1261
• fix(no-unsafe-return): avoid panic on JSDoc callbacks without returns by @​camc314 in oxc-project/tsgolint#1264
• fix(no-deprecated): include reasons for variable declarations by @​camc314 in oxc-project/tsgolint#1266
• fix(no-unnecessary-type-parameters): parenthesize constraint in optional tuple elements by @​baevm in oxc-project/tsgolint#1267
• chore(deps): update crate-ci/typos action to v1.51.0 by @​renovate[bot] in oxc-project/tsgolint#1268
• chore(deps): update crate-ci/typos action to v1.51.1 by @​renovate[bot] in oxc-project/tsgolint#1269
• fix: restore line disable comments for type-aware diagnostics by @​camc314 in oxc-project/tsgolint#1271

New Contributors

• @​geniusmonir made their first contribution in oxc-project/tsgolint#1254

Full Changelog: oxc-project/tsgolint@v7.0.2003...v7.0.2004

Commits

• 4ebf80f fix(require-array-sort-compare): report tuples (#1317)
• 62e97c9 feat(no-unsafe-enum-assignment): add rule (#1316)
• e649c1e fix(no-unnecessary-type-parameters): count generic type arguments (#1297)
• e333787 ci: pin just version in setup and autofix (

[albert20260301]

This replacement still fails required verification at src/ui/prompts.ts:70: Type 'string | symbol' is not assignable to type 'string' (job log). It is the same compatibility blocker recorded on the now-closed #162; the updated dependency group does not resolve it.

A compatible prompt result handling change or dependency resolution is needed before this group can be approved. Integration, runtime-compatibility and binary checks cannot establish readiness while canonical verification stops at typecheck.