build(deps): bump the dependencies group across 1 directory with 46 updates

[dependabot]

Bumps the dependencies group with 43 updates in the / directory:

Package	From	To
@eslint/js	9.39.1	10.0.1
@stylistic/eslint-plugin	5.6.1	5.10.0
@tsconfig/node20	20.1.8	20.1.9
@types/node	24.10.1	25.3.5
eslint	9.20.1	10.0.3
eslint-plugin-jest	29.2.1	29.15.0
globals	16.5.0	17.4.0
lerna	9.0.1	9.0.5
semver	7.7.3	7.7.4
ts-jest	29.4.5	29.4.6
typescript-eslint	8.47.0	8.56.1
eventemitter3	5.0.1	5.0.4
node-forge	1.3.2	1.3.3
rollup	4.55.1	4.59.0
@aws-sdk/client-route-53	3.936.0	3.1004.0
body-parser	2.2.1	2.2.2
dotenv	17.2.3	17.3.1
express	5.2.0	5.2.1
@types/express	5.0.1	5.0.6
lodash	4.17.21	4.17.23
@types/lodash	4.17.21	4.17.24
@electron/rebuild	4.0.1	4.0.3
webpack	5.103.0	5.105.4
commander	14.0.2	14.0.3
ipaddr.js	2.2.0	2.3.0
lru-cache	11.2.2	11.2.6
ws	8.18.3	8.19.0
bufferutil	4.0.9	4.1.0
utf-8-validate	6.0.5	6.0.6
mmdb-lib	3.0.1	3.0.2
aedes	0.51.3	1.0.1
ajv	8.17.1	8.18.0
cors	2.8.5	2.8.6
zod	4.1.13	4.3.6
@types/qs	6.14.0	6.15.0
supertest	7.1.4	7.2.2
@types/supertest	6.0.3	7.2.0
env-paths	2.2.1	4.0.0
@rollup/plugin-commonjs	29.0.0	29.0.2
@rollup/plugin-terser	0.4.4	1.0.0
nightwatch	3.12.3	3.15.0
pino	10.1.0	10.3.1
pino-pretty	13.1.2	13.1.3

Updates @eslint/js from 9.39.1 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

• e5c281f chore: updates for v9.39.3 release (Jenkins)
• 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
• 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
• 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
• da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
• 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

• f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
• a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
• c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
• fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
• 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
• 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
• ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
• 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
• c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
• 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
• a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
• a89059d feat!: Program range span entire source text (#20133) (Pixel998)
• 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
• f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
• aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
• f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
• 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
• 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
• 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
• 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
• f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

• bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
• 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
• 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

• 84fb885 chore: package.json update for @​eslint/js release
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
• f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
• b4b3127 chore: package.json update for @​eslint/js release
• 0b14059 chore: package.json update for @​eslint/js release
• fa31a60 feat!: add name to configs (#20015)
• 1e2cad5 chore: package.json update for @​eslint/js release
• 454a292 feat!: update eslint:recommended configuration (#20210)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
• See full diff in compare view

Updates @stylistic/eslint-plugin from 5.6.1 to 5.10.0

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.10.0

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

v5.9.0

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

v5.8.0

5.8.0 (2026-02-09)

... (truncated)

Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

5.8.0 (2026-02-09)

Features

... (truncated)

Commits

• efbb1bc chore: release v5.10.0 (main) (#1151)
• 1ebd6d8 feat(padding-line-between-statements): introduce lineMode for selector matc...
• c43bd4b feat(list-style): allow 'off' in overrides (#1144)
• 95884fc chore: replace prettier with oxfmt (#1147)
• 96ce1c7 chore: release v5.9.0 (main) (#1131)
• 5d99706 feat: support ESLint 10 (#1066)
• cfb6296 fix(no-extra-parens): don't report jsdoc type assertion by default (#1100)
• 501e838 feat(no-trailing-spaces): support more file types (#1138)
• 8f5cc9e feat(padding-line-between-statements): support selector-based statement match...
• 9e7f422 fix(indent): ignore when source code is not ESTree (#1139)
• Additional commits viewable in compare view

Updates @tsconfig/node20 from 20.1.8 to 20.1.9

Commits

• See full diff in compare view

Updates @types/node from 24.10.1 to 25.3.5

Commits

• See full diff in compare view

Updates eslint from 9.20.1 to 10.0.3

Release notes

Sourced from eslint's releases.

v10.0.3

Bug Fixes

• e511b58 fix: update eslint (#20595) (renovate[bot])
• f4c9cf9 fix: include variable name in no-useless-assignment message (#20581) (sethamus)
• ee9ff31 fix: update dependency minimatch to ^10.2.4 (#20562) (Milos Djermanovic)

Documentation

• 9fc31b0 docs: Update README (GitHub Actions Bot)
• 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570) (DesselBane)
• 23b2759 docs: add v10 migration guide link to Use docs index (#20577) (Pixel998)
• 80259a9 docs: Remove deprecated eslintrc documentation files (#20472) (Copilot)
• 9b9b4ba docs: fix typo in no-await-in-loop documentation (#20575) (Pixel998)
• e7d72a7 docs: document TypeScript 5.3 minimum supported version (#20547) (sethamus)

Chores

• ef8fb92 chore: package.json update for eslint-config-eslint release (Jenkins)
• e8f2104 chore: updates for v9.39.4 release (Jenkins)
• 5cd1604 refactor: simplify isCombiningCharacter helper (#20524) (Huáng Jùnliàng)
• 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586) (Milos Djermanovic)
• e32df71 chore: update eslint-plugin-eslint-comments, remove legacy-peer-deps (#20576) (Milos Djermanovic)
• 53ca6ee chore: disable eslint-comments/no-unused-disable rule (#20578) (Milos Djermanovic)
• e121895 ci: pin Node.js 25.6.1 (#20559) (Milos Djermanovic)
• efc5aef chore: update tsconfig.json in eslint-config-eslint (#20551) (Francesco Trotta)

v10.0.2

Bug Fixes

• 2b72361 fix: update ajv to 6.14.0 to address security vulnerabilities (#20537) (루밀LuMir)

Documentation

• 13eeedb docs: link rule type explanation to CLI option --fix-type (#20548) (Mike McCready)
• 98cbf6b docs: update migration guide per Program range change (#20534) (Huáng Jùnliàng)
• 61a2405 docs: add missing semicolon in vars-on-top rule example (#20533) (Abilash)

Chores

• 951223b chore: update dependency @​eslint/eslintrc to ^3.3.4 (#20553) (renovate[bot])
• 6aa1afe chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536) (Milos Djermanovic)

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

... (truncated)

Commits

• bfce7ea 10.0.3
• d44ced8 Build: changelog update for 10.0.3
• e511b58 fix: update eslint (#20595)
• ef8fb92 chore: package.json update for eslint-config-eslint release
• e8f2104 chore: updates for v9.39.4 release
• 5cd1604 refactor: simplify isCombiningCharacter helper (#20524)
• 9fc31b0 docs: Update README
• 70ff1d0 chore: eslint-config-eslint require Node ^20.19.0 || ^22.13.0 || >=24 (#20586)
• f4c9cf9 fix: include variable name in no-useless-assignment message (#20581)
• 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570)
• Additional commits viewable in compare view

Updates eslint-plugin-jest from 29.2.1 to 29.15.0

Release notes

Sourced from eslint-plugin-jest's releases.

v29.15.0

29.15.0 (2026-02-15)

Features

• no-conditional-in-test: only report optional chaining when allowOptionalChaining is false (#1934) (3f5751e)

v29.14.0

29.14.0 (2026-02-12)

Features

• no-conditional-in-test: ban optional chaining (#1933) (6406493)

v29.13.0

29.13.0 (2026-02-08)

Features

• support ESLint v10 (#1929) (7735c44)

v29.12.2

29.12.2 (2026-02-03)

Bug Fixes

• add optional peer dependency on TypeScript (#1926) (82e3b04)

v29.12.1

29.12.1 (2026-01-02)

Bug Fixes

• no-unnecessary-assertion: don't report for any and unknown types (#1918) (388a36c)

v29.12.0

29.12.0 (2025-12-30)

Features

• prefer-mock-return-shorthand: greatly improve checking if mutable variables are used (#1914) (13bbd20)

v29.11.4

29.11.4 (2025-12-30)

... (truncated)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.15.0 (2026-02-15)

Features

• no-conditional-in-test: only report optional chaining when allowOptionalChaining is false (#1934) (3f5751e)

29.14.0 (2026-02-12)

Features

• no-conditional-in-test: ban optional chaining (#1933) (6406493)

29.13.0 (2026-02-08)

Features

• support ESLint v10 (#1929) (7735c44)

29.12.2 (2026-02-03)

Bug Fixes

• add optional peer dependency on TypeScript (#1926) (82e3b04)

29.12.1 (2026-01-02)

Bug Fixes

• no-unnecessary-assertion: don't report for any and unknown types (#1918) (388a36c)

29.12.0 (2025-12-30)

Features

• prefer-mock-return-shorthand: greatly improve checking if mutable variables are used (#1914) (13bbd20)

29.11.4 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore use of update expressions (#1913) (5713ac9)

29.11.3 (2025-12-30)

... (truncated)

Commits

• 258b560 chore(release): 29.15.0 [skip ci]
• 3f5751e feat(no-conditional-in-test): only report optional chaining when `allowOption...
• 2cbd92b chore(release): 29.14.0 [skip ci]
• 6406493 feat(no-conditional-in-test): ban optional chaining (#1933)
• 5698ed5 chore(deps): lock file maintenance (#1931)
• cb36f1f chore(release): 29.13.0 [skip ci]
• 7735c44 feat: support ESLint v10 (#1929)
• 53efb75 test: update titles (#1930)
• 4acda62 chore(release): 29.12.2 [skip ci]
• 82e3b04 fix: add optional peer dependency on TypeScript (#1926)
• Additional commits viewable in compare view

Updates globals from 16.5.0 to 17.4.0

Release notes

Sourced from globals's releases.

v17.4.0

• Update globals (2026-03-01) (#338) d43a051

---

sindresorhus/globals@v17.3.0...v17.4.0

v17.3.0

• Update globals (2026-02-01) (#336) 295fba9

---

sindresorhus/globals@v17.2.0...v17.3.0

v17.2.0

• jasmine: Add throwUnless and throwUnlessAsync globals (#335) 97f23a7

---

sindresorhus/globals@v17.1.0...v17.2.0

v17.1.0

• Add webpack and rspack globals (#333) 65cae73

---

sindresorhus/globals@v17.0.0...v17.1.0

v17.0.0

Breaking

• Split audioWorklet environment from browser (#320) 7bc293e

Improvements

• Update globals (#329) ebe1063
• Get all browser globals from both chrome and firefox (#321) 59ceff8
• Add bunBuiltin environment (#324) 1bc6e3b
• Add denoBuiltin environment (#324) 1bc6e3b
• Add paintWorklet environment (#323) 4b78f56
• Add sharedWorker environment (#322) 4a02a85

---

sindresorhus/globals@v16.5.0...v17.0.0

Commits

• a9cfd74 17.4.0
• d43a051 Update globals (2026-03-01) (#338)
• 5edc602 17.3.0
• 295fba9 Update globals (2026-02-01) (#336)
• 8176ac7 17.2.0
• 97f23a7 jasmine: Add throwUnless and throwUnlessAsync globals (#335)
• 7a2f354 17.1.0
• 65cae73 Add webpack and rspack globals (#333)
• 3efe5aa Remove script transform (#332)
• bb89b18 17.0.0
• Additional commits viewable in compare view

Updates lerna from 9.0.1 to 9.0.5

Release notes

Sourced from lerna's releases.

v9.0.5

9.0.5 (2026-02-28)

Bug Fixes

• bump minimatch from 3.0.5 to 3.1.4 (#4285) (2e3f99e)
• bump tar from 7.5.7 to 7.5.8 (#4273) (bdffd1d)

v9.0.4

9.0.4 (2026-02-10)

Bug Fixes

• bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267) (43e3d46)

v9.0.3

9.0.3 (2025-11-27)

Bumped some dependencies to reduce audit warning noise.

NOTE: 9.0.2 does not exist because of a failed release

Changelog

Sourced from lerna's changelog.

9.0.5 (2026-02-28)

Bug Fixes

• bump minimatch from 3.0.5 to 3.1.4 (#4285) (2e3f99e)
• bump tar from 7.5.7 to 7.5.8 (#4273) (bdffd1d)

9.0.4 (2026-02-10)

Bug Fixes

• bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267) (43e3d46)

9.0.3 (2025-11-27)

Note: Version bump only for package lerna

9.0.2 (2025-11-27)

Note: Version bump only for package lerna

Commits

• 85b9d95 chore(misc): publish 9.0.5
• 2e3f99e fix: bump minimatch from 3.0.5 to 3.1.4 (#4285)
• bdffd1d fix: bump tar from 7.5.7 to 7.5.8 (#4273)
• 5f3669c chore(misc): publish 9.0.4
• 43e3d46 fix: bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267)
• 215ff00 chore(misc): publish 9.0.3
• b1b2166 chore(misc): publish 9.0.2
• 6c1ea96 chore(deps): bump js-yaml from 4.1.0 to 4.1.1 (#4245)
• See full diff in compare view

Updates semver from 7.7.3 to 7.7.4

Release notes

Sourced from semver's releases.

v7.7.4

7.7.4 (2026-01-16)

Bug Fixes

• a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@​mldangelo)

Documentation

• 1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@​mldangelo)

Dependencies

• 120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

• 44d7130 #824 bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@​dependabot[bot])
• 7073576 #820 reorder parameters in invalid-versions.js test (#820) (@​reggi)
...

Description has been truncated

---

[!NOTE]
Medium Risk
Bulk dependency upgrades (including major bumps like eslint v10, @types/node v25, aedes v1, and env-paths v4) can introduce build/lint/test breakages or subtle runtime behavior changes. No application logic changes are apparent, but the upgraded runtime libraries touch core packages like node, sdk, and dht.

Overview
Primarily a dependency-refresh PR. Updates root and workspace package.json files and regenerates package-lock.json to bump ~46 packages.

Notable upgrades include tooling (eslint/@eslint/js to v10, typescript-eslint, jest types) and runtime deps used by core packages (e.g., express, lodash, ws + optional native addons, aedes, ajv, zod, @aws-sdk/client-route-53, env-paths).

^{Written by Cursor Bugbot for commit 1759a51. This will update automatically on new commits. Configure here.}