chore(deps): update all patch dependencies

Author: renovate[bot]

.github/workflows/benchmark-go.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
-          go-version: '1.26.0'
+          go-version: '1.26.5'
           cache: false
 
       - name: Run benchmarks

.github/workflows/copilot-setup-steps.yml

@@ -38,7 +38,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
-          go-version: 1.26.0
+          go-version: 1.26.5
       - name: Install pnpm
         run: corepack enable
       - name: Install JavaScript dependencies

.github/workflows/devbird.yml

@@ -79,7 +79,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
-          go-version: 1.26.0
+          go-version: 1.26.5
       - name: Install pnpm
         run: corepack enable
       - name: Install JavaScript dependencies

.github/workflows/release-crates.yml

@@ -64,7 +64,7 @@ jobs:
       - name: Authenticate with crates.io
         if: ${{ inputs.dry_run == false }}
         id: auth
-        uses: rust-lang/crates-io-auth-action@bbd81622f20ce9e2dd9622e3218b975523e45bbe # v1.0.4
+        uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18 # v1.0.5
 
       - name: Publish tsgo-client
         if: ${{ inputs.dry_run == false }}

Cargo.lock

@@ -10,7 +10,7 @@ crate-type = ["cdylib"]
 
 [dependencies]
 napi = "3.9.0"
-napi-derive = "3.5.6"
+napi-derive = "3.5.10"
 oxc_allocator = "0.133.0"
 # oxc_ast is a direct dependency solely to enable its `serialize` feature, which provides
 # `Program::to_estree_*_json`. The Program value itself comes back from oxc_parser.
@@ -20,7 +20,7 @@ oxc_ast_visit = { version = "0.133.0", features = ["serialize"] }
 oxc_parser = "0.133.0"
 oxc_span = "0.133.0"
 # token_map builds the AST cover from the ESTree JSON value.
-serde_json = "1"
+serde_json = "1.0.150"
 
 [build-dependencies]
 napi-build = "2.3.2"

crates/rslint-native/Cargo.toml

@@ -21,6 +21,6 @@
     "build:debug": "napi build --platform --no-js && node ../../scripts/place-host-build.mjs node"
   },
   "devDependencies": {
-    "@napi-rs/cli": "3.7.0"
+    "@napi-rs/cli": "3.7.3"
   }
 }

crates/rslint-native/package.json

@@ -6,12 +6,12 @@ description = "TypeScript Go client library"
 license = "MIT"
 
 [dependencies]
-thiserror = "2"
-serde = { version = "1", features = [ "derive" ] }
-cbor4ii = {version = "1", features = ["serde1"]}
+thiserror = "2.0.18"
+serde = { version = "1.0.228", features = [ "derive" ] }
+cbor4ii = {version = "1.2.2", features = ["serde1"]}
 serde_bytes = "0.11.19"
-bitflags = { version = "2.13.0"}
+bitflags = { version = "2.13.1"}
 
 [dev-dependencies]
 insta = { version = "1.47.2", features = ["json"] }
-serde_json = "1"
+serde_json = "1.0.150"

crates/tsgo-client/Cargo.toml

@@ -1,6 +1,6 @@
 module github.com/web-infra-dev/rslint
 
-go 1.26.0
+go 1.26.5
 
 replace (
 	github.com/microsoft/typescript-go/shim/api => ./shim/api
@@ -73,7 +73,7 @@ require (
 
 require (
 	github.com/dlclark/regexp2 v1.12.0
-	github.com/fxamacker/cbor/v2 v2.9.0
+	github.com/fxamacker/cbor/v2 v2.9.2
 	github.com/go-json-experiment/json v0.0.0-20260623181947-01eb4420fa68
 	github.com/microsoft/typescript-go v0.0.0-20260714195723-448614f8f409 // indirect
 	golang.org/x/text v0.38.0

go.mod

@@ -41,10 +41,10 @@
     "ajv": "6.15.0",
     "husky": "^9.1.7",
     "lint-staged": "^16.4.0",
-    "prettier": "3.9.4",
+    "prettier": "3.9.5",
     "typescript": "5.9.3",
     "zx": "8.8.5",
-    "@typescript/native-preview": "7.0.0-dev.20250904.1"
+    "@typescript/native-preview": "7.0.0-dev.20260707.2"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx}": [
@@ -54,12 +54,12 @@
       "prettier --write"
     ]
   },
-  "packageManager": "pnpm@10.34.4",
+  "packageManager": "pnpm@10.34.5",
   "engines": {
-    "pnpm": ">=10.34.4"
+    "pnpm": ">=10.34.5"
   },
   "files": [],
   "dependencies": {
-    "@types/react": "^19.2.14"
+    "@types/react": "^19.2.17"
   }
 }