chore(deps-dev): update development dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@eslint/js (source)	9.29.0 -> 9.31.0					devDependencies	minor
@stylistic/eslint-plugin (source)	5.0.0 -> 5.2.0					devDependencies	minor
@types/node (source)	20.19.1 -> 20.19.8					devDependencies	patch	20.19.9
@types/opossum (source)	8.1.8 -> 8.1.9					devDependencies	patch
@typescript-eslint/utils (source)	8.35.0 -> 8.37.0					devDependencies	minor
@vitest/eslint-plugin	1.3.3 -> 1.3.4					devDependencies	patch
eslint (source)	9.29.0 -> 9.31.0					devDependencies	minor
jose	6.0.11 -> 6.0.12					devDependencies	patch
node (source)	24.3.0 -> 24.4.1					engines	minor
node (source)	24.3.0 -> 24.4.1						minor
pnpm (source)	10.12.4 -> 10.13.1					packageManager	minor
pnpm (source)	10.12.4 -> 10.13.1					engines	minor
prettier-plugin-pkg (source)	0.21.1 -> 0.21.2					devDependencies	patch
typescript-eslint (source)	8.35.0 -> 8.37.0					devDependencies	minor
zod (source)	3.25.67 -> 3.25.76					devDependencies	patch

---

Release Notes

eslint/eslint (@​eslint/js)

v9.31.0

Compare Source

v9.30.1

Compare Source

v9.30.0

Compare Source

eslint-stylistic/eslint-stylistic (@​stylistic/eslint-plugin)

v5.2.0

Compare Source

Features

• add warnOnce utility for deprecation warnings (#​867) (f015822)
• indent: introduce returnType for FunctionDeclaration and FunctionExpression (#​884) (c0a09fb)
• indent: support TSTypeAliasDeclaration (#​796) (c62afea)
• keyword-spacing: support ImportAttribute (#​863) (08d4193)
• multiline-comment-style: add support for exclamation comments (#​876) (b2ece9f)
• no-extra-parens: support part of TS Nodes (#​873) (7d4aa27)
• object-curly-spacing: support ImportAttribute (#​862) (000f2f4)
• support AccessorProperty (#​829) (2143f34)

Bug Fixes

• disallow extra properties in rule options (#​883) (bac5f3f)
• indent: align first element when VariableDeclarator is first (#​861) (ddd14c8)

Documentation

• enhance readability (#​880) (4a5fe59)
• fix link of no-unexpected-multiline (#​847) (0639099)
• operator-linebreak: add description for "ignore" option earlier (#​866) (46e43f5)

Chores

• indent: cleanup cases (#​859) (9d8a9c6)

v5.1.0

Compare Source

Bug Fixes

• correct rule name in disable-legacy (#​849) (e63f1e4)
• indent: correct handling of return type annotations (#​853) (5259950)

Build Related

• migrate to tsdown (#​854) (5d2bec1)

Chores

• cleanup duplicate test cases (#​855) (140db85)
• release-please-mark (da0be03)

typescript-eslint/typescript-eslint (@​typescript-eslint/utils)

v8.37.0

Compare Source

This was a version bump only for utils to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.36.0

Compare Source

🚀 Features

• typescript-eslint: support basePath in tseslint.config() (#​11357)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.35.1

Compare Source

This was a version bump only for utils to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitest-dev/eslint-plugin-vitest (@​vitest/eslint-plugin)

v1.3.4

Compare Source

eslint/eslint (eslint)

v9.31.0

Compare Source

v9.30.1

Compare Source

v9.30.0

Compare Source

panva/jose (jose)

v6.0.12

Compare Source

Documentation

• add known caveats to customFetch (02e1f1e)
• mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)
• update compact setKeyManagementParameters (2f44381)
• use GitHub Flavored Markdown for notes and warnings (f6b4ffc)

Refactor

• createPublicKey is not a constructor (61ded78)
• update asn1.ts helper functions (b2b611c)

nodejs/node (node)

v24.4.1: 2025-07-15, Version 24.4.1 (Current), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

• (CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
• (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()

Commits

• [c33223f1a5] - (CVE-2025-27209) deps: V8: revert rapidhash commits (Michaël Zasso) nodejs-private/node-private#713
• [56f9db2aaa] - (CVE-2025-27210) lib: handle all windows reserved driver name (RafaelGSS) nodejs-private/node-private#721

pnpm/pnpm (pnpm)

v10.13.1

Compare Source

Patch Changes

• Run user defined pnpmfiles after pnpmfiles of plugins.

v10.13.0

Compare Source

Minor Changes

• Added the possibility to load multiple pnpmfiles. The pnpmfile setting can now accept a list of pnpmfile locations #​9702.

• pnpm will now automatically load the pnpmfile.cjs file from any config dependency named @pnpm/plugin-* or pnpm-plugin-* #​9729.

  The order in which config dependencies are initialized should not matter — they are initialized in alphabetical order. If a specific order is needed, the paths to the pnpmfile.cjs files in the config dependencies can be explicitly listed using the pnpmfile setting in pnpm-workspace.yaml.

Patch Changes

• When patching dependencies installed via pkg.pr.new, treat them as Git tarball URLs #​9694.
• Prevent conflicts between local projects' config and the global config in dangerouslyAllowAllBuilds, onlyBuiltDependencies, onlyBuiltDependenciesFile, and neverBuiltDependencies #​9628.
• Sort keys in pnpm-workspace.yaml with deep #​9701.
• The pnpm rebuild command should not add pkgs included in ignoredBuiltDependencies to ignoredBuilds in node_modules/.modules.yaml #​9338.
• Replaced shell-quote with shlex for quoting command arguments #​9381.

un-ts/prettier (prettier-plugin-pkg)

v0.21.2

Compare Source

Patch Changes

• #​485 9e0233e Thanks @​JounQin! - fix: do not use named exports for commonjs

typescript-eslint/typescript-eslint (typescript-eslint)

v8.37.0

Compare Source

🚀 Features

• typescript-estree: infer tsconfigRootDir from call stack (#​11370)

❤️ Thank You

• Josh Goldberg ✨

You can read about our versioning strategy and releases on our website.

v8.36.0

Compare Source

🚀 Features

• typescript-eslint: support basePath in tseslint.config() (#​11357)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger

You can read about our versioning strategy and releases on our website.

v8.35.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

colinhacks/zod (zod)

v3.25.76

Compare Source

v3.25.75

Compare Source

v3.25.74

Compare Source

v3.25.73

Compare Source

Commits:

• 1021d3c v3.25.73 (#​4822)

v3.25.72

Compare Source

v3.25.71

Compare Source

v3.25.70

Compare Source

v3.25.69

Compare Source

v3.25.68

Compare Source

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.