deps(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems

[dependabot]

Bumps the dependencies group with 17 updates:

Package	From	To
jdfalk/docs-generator-action	348ba194a5f4060f07d954cbc0d1f123230c4580	8207d873d6300212e4d22b97aa22e9b1114f64a7
jdfalk/pr-auto-label-action	54023423d4f61a781402f6c801d3c3b48af7a3c4	329b41e704ab05c0ffc2b3581dffa249be11dea4
jdfalk/load-config-action	482b9f0e631b2325071cd9bf04c8fda4591044b0	bb213cbf6b6e789bea8ad0787f2914760d00536b
jdfalk/ci-generate-matrices-action	96db335687d5263a5f9ca676ba2df8d834465b18	8c36d080ec55e96d3532e9b02417054fc6aaaeac
jdfalk/ghcommon/.github/workflows/reusable-advanced-cache.yml	cf2068996e1ecf737a6e2c269a9429f0764e76cd	1e106b5c7bc2e80beb0c6019e8ac263d41f2ed5f
jdfalk/gha-release-protobuf	afcb06673c957919bf28b9661b58038931588ea5	1c07a62621ea5bdaf7fd46643fd4e650c69de8d9
jdfalk/ci-workflow-helpers-action	e64725c836a7ea33925f02a86d673d898ce4a713	c8b87fae92ee0a0458e47b970ed892310323aa58
vladopajic/go-test-coverage	2.18.7	2.18.8
jdfalk/get-frontend-config-action	9a5882d405edad2f4f48c3f584fee779d478f4a4	517d41adc382a541ea13dead79a12a57a7172dcf
jdfalk/detect-languages-action	e8b6061298420be7fd087ea148587fa61176137b	d5712363aae458b4bbb47bbb1780f02de2a03784
jdfalk/gha-release-go	c7f72a3df997a97a1c9433893d4d25fc98f99c7e	68295f41570b9f4fd264bb0a167a43b79ca30310
jdfalk/gha-release-python	120e1dfd3b9379841eb079869681fdacdab71198	900b75fc7585c37cf448dbb7e30330f5ff891607
jdfalk/gha-release-rust	1a704db1fba3239c4ce8a543cd35defab6198ca2	5e0cfb831f58d00fc22e4dfe6d7e51a97eb6dbcd
jdfalk/gha-release-frontend	f77c3d10f7d3f6be435be9bbbd1446f5599f48aa	3fe7d567a6a6f25cadb618a3cb0abe311c765abb
jdfalk/gha-release-docker	9f854f0837efd3eac6647c93b86ca06d6b58cf6a	2f0979263a455d556526d9f53589c3eb4d837136
jdfalk/package-assets-action	49725e715503b7021778d248f56fe50e001a68ed	c1dc41c8fb6800606eee2714da4d7b807d55ecc4
github/codeql-action	4.35.2	4.35.3

Updates jdfalk/docs-generator-action from 348ba194a5f4060f07d954cbc0d1f123230c4580 to 8207d873d6300212e4d22b97aa22e9b1114f64a7

Changelog

Sourced from jdfalk/docs-generator-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.0.0] - 2025-12-29

Added

• Initial release as composite GitHub Action
• API documentation generation from Python docstrings
  • Extracts function signatures and docstrings
  • Generates class documentation with methods
  • Version extraction from module headers
• Workflow reference documentation generation
  • Parses GitHub Actions YAML workflows
  • Catalogs jobs and trigger events
  • Links to source workflow files
• Search index generation for documentation sites
• Version management for multi-version documentation builds
• Support for multiple source directories
• Embedded Python logic (no external dependencies)
• Comprehensive error handling and warnings
• GitHub Actions output integration
• Full documentation and examples

Changed

• Ported from ghcommon/.github/workflows/scripts/docs_workflow.py
• Converted to composite action format for direct GitHub Actions integration
• Improved error messages with GitHub Actions annotations

Removed

• Command-line only interface (now integrated as action)
• Dependency on workflow_common module (all logic embedded)

Commits

• 8207d87 chore(gitignore): sync managed ignore block
• 86f6bf6 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• e5920b5 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/pr-auto-label-action from 54023423d4f61a781402f6c801d3c3b48af7a3c4 to 329b41e704ab05c0ffc2b3581dffa249be11dea4

Changelog

Sourced from jdfalk/pr-auto-label-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.0.1] - 2025-12-30

Fixed

• Corrected comment formatting for action metadata

[1.0.0] - 2025-12-29

Added

• Initial release of PR Auto Label action
• Keyword-based pattern matching for bug, enhancement, documentation, and tests labels
• File extension-based labeling for language detection (Go, Python, Frontend, Docker)
• Dry-run mode for safe testing without applying labels
• Skip existing labels option to avoid re-labeling PRs
• Detailed analysis output with matched rules and file patterns
• Composite action format (embedded Python, no external dependencies)
• Support for GitHub API authentication via token
• Comprehensive README with examples and troubleshooting

Migrated From

• ghcommon/.github/workflows/scripts/intelligent_labeling.py
• Maintains full backward compatibility with original labeling logic
• Adds new features: dry-run, skip-existing, detailed analysis output

Commits

• 329b41e chore(gitignore): sync managed ignore block
• fd4dc82 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• d6ec2d2 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/load-config-action from 482b9f0e631b2325071cd9bf04c8fda4591044b0 to bb213cbf6b6e789bea8ad0787f2914760d00536b

Changelog

Sourced from jdfalk/load-config-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.0.0] - 2025-12-20

Added

• Initial release of load-config-action
• Support for loading and parsing .github/repository-config.yml
• Automatic PyYAML installation
• Graceful fallback handling when config is missing
• Optional fail-on-missing input for strict validation
• Rich step summaries with config sections
• JSON output for downstream GitHub Actions

[Unreleased]

Added

• Dockerized execution path controlled by use-docker/docker-image
• Automated GHCR publish workflow with digest pinning and tag bump

Changed

• Updated composite action outputs to support host and docker paths

Security

• Container base pinned by digest for reproducible builds

Commits

• bb213cb chore(gitignore): sync managed ignore block
• 18787cb fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• ce2538a fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/ci-generate-matrices-action from 96db335687d5263a5f9ca676ba2df8d834465b18 to 8c36d080ec55e96d3532e9b02417054fc6aaaeac

Changelog

Sourced from jdfalk/ci-generate-matrices-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• Dockerized execution path controlled by use-docker/docker-image
• Automated GHCR publish workflow with digest pinning and tag bump
• README updated with docker usage and inputs/outputs tables

Changed

Fixed

Security

[1.0.0] - 2026-01-02

Added

• Initial implementation of action functionality
• Core workflow integration
• Documentation and usage examples

---

Format: [version] - YYYY-MM-DD

Commits

• 8c36d08 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 1dad6b0 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/ghcommon/.github/workflows/reusable-advanced-cache.yml from cf20689 to 1e106b5

Changelog

Sourced from jdfalk/ghcommon/.github/workflows/reusable-advanced-cache.yml's changelog.

Changelog

[Unreleased]

Completed

January 10, 2026 - Docker Rollout Across Action Repositories

• Completed Docker support for 11/18 action repositories representing all actions where Docker adds clear value
• Dockerized actions: detect-languages-action, load-config-action, get-frontend-config-action, package-assets-action, ci-generate-matrices-action, auto-module-tagging-action, generate-version-action, release-docker-action, release-frontend-action, release-go-action, release-protobuf-action
• Each dockerized action includes:
  • Dockerfile with pinned base image by digest
  • .dockerignore for build optimization
  • publish-docker.yml workflow for GHCR publishing with auto-versioning
  • use-docker/docker-image inputs with docker/host execution branching
  • Updated README, CHANGELOG, TODO with Docker usage instructions
• Intentionally skipped Docker for 7 actions:
  • Release orchestrators (release-python-action, release-rust-action): Require GitHub Actions ecosystem (setup-python, setup-rust) and external service publishing
  • Embedded Python actions (ci-workflow-helpers-action, pr-auto-label-action, docs-generator-action, security-summary-action, release-strategy-action): Use shell: python with code embedded in action.yml; Docker support would require significant refactoring for marginal benefit

In Progress

(No active Docker rollout work - 11/18 suitable actions completed)

Security

January 2, 2026 - Action Security Hardening

• Pinned all external GitHub Actions to full-length commit SHAs across 9 action repositories
• Updated action format to owner/action@FULL_SHA # vX.Y.Z for security + dependabot compatibility
• Audited and fetched latest versions for 15 external action dependencies:
  • GitHub official actions: checkout v6.0.1, setup-go v5.6.0, setup-node v6.1.0, setup-python v6.1.0, upload-artifact v6.0.0
  • Third-party actions: yamllint v3.1.1, gh-release v2.5.0, rust-toolchain v1.15.2, goreleaser v6.4.0, buf-setup v1.50.0
  • Docker actions: login v3.6.0, setup-buildx v3.12.0, setup-qemu v3.7.0, build-push v6.18.0, metadata v5.10.0
• Updated 9 repos with pinned hashes: get-frontend-config-action,

... (truncated)

Commits

• 1e106b5 feat(scripts): add sync-gitignore.py for managed ignore block across repos
• 64f69dc chore(gitignore): sync managed ignore block
• aac93cb fix(ci): handle missing artifacts dir in reusable-release cleanup step
• fe1e308 fix(ci): update jdfalk/* action pins to current SHAs
• See full diff in compare view

Updates jdfalk/gha-release-protobuf from afcb06673c957919bf28b9661b58038931588ea5 to 1c07a62621ea5bdaf7fd46643fd4e650c69de8d9

Commits

• 1c07a62 chore(gitignore): sync managed ignore block
• 1f7b5a6 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 68eaace fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/ci-workflow-helpers-action from e64725c836a7ea33925f02a86d673d898ce4a713 to c8b87fae92ee0a0458e47b970ed892310323aa58

Changelog

Sourced from jdfalk/ci-workflow-helpers-action's changelog.

Changelog

[Unreleased]

Commits

• c8b87fa fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 40f2adb fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates vladopajic/go-test-coverage from 2.18.7 to 2.18.8

Release notes

Sourced from vladopajic/go-test-coverage's releases.

v2.18.8

What's Changed

• fix(coverage): wrong index returned in #308 by @​vladopajic in vladopajic/go-test-coverage#312

Full Changelog: vladopajic/go-test-coverage@v2.18.7...v2.18.8

Commits

• a93b868 chore(version): bump to v2.18.8
• c4cedbc chore: better logs
• 8099a47 fix(coverage): wrong index returned in #308 (#312)
• a3306c2 chore(deps): bump dawidd6/action-download-artifact from 20 to 21 (#311)
• See full diff in compare view

Updates jdfalk/get-frontend-config-action from 9a5882d405edad2f4f48c3f584fee779d478f4a4 to 517d41adc382a541ea13dead79a12a57a7172dcf

Changelog

Sourced from jdfalk/get-frontend-config-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• Dockerized execution path controlled by use-docker/docker-image
• Automated GHCR publish workflow with digest pinning and tag bump
• README now documents inputs/outputs and usage examples (host and docker)

Changed

Fixed

Security

[1.0.0] - 2026-01-02

Added

• Initial implementation of action functionality
• Core workflow integration
• Documentation and usage examples

---

Format: [version] - YYYY-MM-DD

Commits

• 517d41a chore(gitignore): sync managed ignore block
• 2fd261c fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 636fb22 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/detect-languages-action from e8b6061298420be7fd087ea148587fa61176137b to d5712363aae458b4bbb47bbb1780f02de2a03784

Changelog

Sourced from jdfalk/detect-languages-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• Dockerized execution path controlled by use-docker/docker-image
• Automated GHCR publish workflow with digest pinning and tag bump

Changed

• Updated composite action outputs to work across host and docker paths

Fixed

• Prevented future additions of build artifacts from docker publishing

Security

• Container base pinned by digest for reproducible builds

[1.0.0] - 2026-01-02

Added

• Initial implementation of action functionality
• Core workflow integration
• Documentation and usage examples

---

Format: [version] - YYYY-MM-DD

Commits

• d571236 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 9940bed fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/gha-release-go from c7f72a3df997a97a1c9433893d4d25fc98f99c7e to 68295f41570b9f4fd264bb0a167a43b79ca30310

Commits

• 68295f4 chore(gitignore): sync managed ignore block
• 0b83bc4 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 4e5ba5e fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/gha-release-python from 120e1dfd3b9379841eb079869681fdacdab71198 to 900b75fc7585c37cf448dbb7e30330f5ff891607

Commits

• 900b75f chore(gitignore): sync managed ignore block
• bb6b9b6 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• f309902 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/gha-release-rust from 1a704db1fba3239c4ce8a543cd35defab6198ca2 to 5e0cfb831f58d00fc22e4dfe6d7e51a97eb6dbcd

Commits

• 5e0cfb8 chore(gitignore): sync managed ignore block
• a95714f fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 0399a9d fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/gha-release-frontend from f77c3d10f7d3f6be435be9bbbd1446f5599f48aa to 3fe7d567a6a6f25cadb618a3cb0abe311c765abb

Commits

• 3fe7d56 chore(gitignore): sync managed ignore block
• 564ac9b fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• 5f00fe6 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/gha-release-docker from 9f854f0837efd3eac6647c93b86ca06d6b58cf6a to 2f0979263a455d556526d9f53589c3eb4d837136

Commits

• 2f09792 chore(gitignore): sync managed ignore block
• fd158db fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• b708847 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates jdfalk/package-assets-action from 49725e715503b7021778d248f56fe50e001a68ed to c1dc41c8fb6800606eee2714da4d7b807d55ecc4

Changelog

Sourced from jdfalk/package-assets-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• Dockerized execution path controlled by use-docker/docker-image
• Automated GHCR publish workflow with digest pinning and tag bump
• README updated with docker usage and input/output tables

Changed

Fixed

Security

[1.0.0] - 2026-01-02

Added

• Initial implementation of action functionality
• Core workflow integration
• Documentation and usage examples

---

Format: [version] - YYYY-MM-DD

Commits

• c1dc41c chore(gitignore): sync managed ignore block
• 6aa4365 fix(ci): update ghcommon reusable-release SHA to include artifacts fix
• d625fd7 fix(ci): push-to-main creates RC, dispatch creates stable release
• See full diff in compare view

Updates github/codeql-action from 4.35.2 to 4.35.3

Release notes

Sourced from github/codeql-action's releases.

v4.35.3

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837
• Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850
• Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853
• Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852
• Update default CodeQL bundle version to 2.25.3. #3865

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.35.3 - 01 May 2026

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837
• Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850
• Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853
• Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852
• Update default CodeQL bundle version to 2.25.3. #3865

4.35.2 - 15 Apr 2026

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
• Update default CodeQL bundle version to 2.25.2. #3823

4.35.1 - 27 Mar 2026

• Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

4.35.0 - 27 Mar 2026

• Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
• Update default CodeQL bundle version to 2.25.1. #3773

4.34.1 - 20 Mar 2026

• Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

4.34.0 - 20 Mar 2026

• Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
• We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
• Update default CodeQL bundle version to 2.25.0. #3585

4.33.0 - 16 Mar 2026

• Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

  To opt out of this change:

  • Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
  • User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

... (truncated)

Commits

• e46ed2c Merge pull request #3867 from github/update-v4.35.3-8c6e48dbe
• b73d1d1 Add changelog entry for #3853
• 24e0bb0 Reorder changelog entries
• ec298da Update changelog for v4.35.3
• 8c6e48d Merge pull request #3865 from github/update-bundle/codeql-bundle-v2.25.3
• 7190983 Add changelog note
• 2bb2095 Update default bundle to codeql-bundle-v2.25.3
• 7851e55 Merge pull request #3850 from github/mbg/private-registry/cloudsmith-gcp
• 262a15f Add generic non-printable chars test for OIDC configs
• a6109b1 Merge pull request #3853 from github/mbg/start-proxy/improved-checks
• Additional commits viewable in compare view

Bumps the dependencies group with 2 updates: @typescript-eslint/eslint-plugin and typescript-eslint.

Updates @typescript-eslint/eslint-plugin from 8.59.1 to 8.59.2

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.59.2

8.59.2 (2026-05-04)

🩹 Fixes

• eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#12150)
• eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#12292)
• rule-tester: add TypeScript as a peer dependency (#12288)

❤️ Thank You

• Dariusz Czajkowski
• Dima Barabash
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.59.2 (2026-05-04)

🩹 Fixes

• eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#12292)
• eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#12150)

❤️ Thank You

• Dima Barabash
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 2ec35f1 chore(release): publish 8.59.2
• ec3ef25 test: make no-useless-empty-export tests fully static (#12260)
• 60d0a51 chore(eslint-plugin): switch auto-generated test cases to hand-written in no-...
• 5c53da2 fix(eslint-plugin): [no-deprecated] object destructuring values should be tre...
• 80c28a1 fix(eslint-plugin): [no-unsafe-type-assertion] handle crash on recursive temp...
• b7b2670 test: make no-this-alias tests fully static (#12258)
• See full diff in compare view

Updates typescript-eslint from 8.59.1 to 8.59.2

Release notes

Sourced from typescript-eslint's releases.

v8.59.2

8.59.2 (2026-05-04)

🩹 Fixes

• eslint-plugin: [no-unsafe-type-assertion] handle crash on recursive template literal types (#12150)
• eslint-plugin: [no-deprecated] object destructuring values should be treated as declarations (#12292)
• rule-tester: add TypeScript as a peer dependency (#12288)

❤️ Thank You

• Dariusz Czajkowski
• Dima Barabash
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.59.2 (2026-05-04)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 2ec35f1 chore(release): publish 8.59.2
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions