chore(deps-dev): bump the dev-dependencies group with 18 updates

[dependabot]

Bumps the dev-dependencies group with 18 updates:

Package	From	To
@eslint/js	9.35.0	10.0.1
@googlemaps/js-api-loader	1.16.10	2.1.1
@types/react	18.3.24	18.3.31
@vitest/coverage-istanbul	3.2.4	4.1.10
concurrently	9.2.1	10.0.3
eslint	9.35.0	10.7.0
lit	3.3.1	3.3.3
maplibre-gl	5.7.1	5.24.0
prettier	3.6.2	3.9.5
rimraf	6.0.1	6.1.3
semver	7.7.2	7.8.5
thenby	1.3.4	1.4.1
tinybench	5.0.1	6.0.2
tsup	8.5.0	8.5.1
typescript	5.9.2	5.9.3
typescript-eslint	8.43.0	8.64.0
vite	7.3.6	8.1.4
vitest	3.2.6	4.1.10

Updates @eslint/js from 9.35.0 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

• e5c281f chore: updates for v9.39.3 release (Jenkins)
• 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
• 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
• 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
• da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
• 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

• f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
• a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
• c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
• fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
• 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
• 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
• ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
• 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
• c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
• 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
• a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
• a89059d feat!: Program range span entire source text (#20133) (Pixel998)
• 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
• f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
• aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
• f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
• 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
• 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
• 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
• 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
• f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

• bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
• 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
• 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

• 84fb885 chore: package.json update for @​eslint/js release
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
• f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
• b4b3127 chore: package.json update for @​eslint/js release
• 0b14059 chore: package.json update for @​eslint/js release
• fa31a60 feat!: add name to configs (#20015)
• 1e2cad5 chore: package.json update for @​eslint/js release
• 454a292 feat!: update eslint:recommended configuration (#20210)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
• c7ebefc chore: package.json update for @​eslint/js release
• Additional commits viewable in compare view

Updates @googlemaps/js-api-loader from 1.16.10 to 2.1.1

Release notes

Sourced from @​googlemaps/js-api-loader's releases.

v2.1.1

2.1.1 (2026-06-09)

Bug Fixes

• avoid unconditional use of window in policy creation logic (#1234) (2db1e08)

v2.1.0

2.1.0 (2026-06-03)

Features

• use TrustedTypes policy to create script URL (#1217) (b370586)

Bug Fixes

• add warning message about common "apiKey" misspelling (#1228) (9bdc3f3)
• update dependencies and google maps types (#1229) (a76955a)

v2.0.2

2.0.2 (2025-10-29)

Bug Fixes

• replace __DEV__ with process.env.NODE_ENV for environment checks (e7279fe)

v2.0.1

2.0.1 (2025-09-30)

Bug Fixes

• add sideEffects to package.json (#1084) (2f6bb31), closes #1083

v2.0.0

2.0.0 (2025-09-29)

⚠ BREAKING CHANGES

• reimplement with updated and simplified API (#1068)

Features

• reimplement with updated and simplified API (#1068) (107cf47)

Changelog

Sourced from @​googlemaps/js-api-loader's changelog.

2.1.1 (2026-06-09)

Bug Fixes

• avoid unconditional use of window in policy creation logic (#1234) (2db1e08)

2.1.0 (2026-06-03)

Features

• use TrustedTypes policy to create script URL (#1217) (b370586)

Bug Fixes

• add warning message about common "apiKey" misspelling (#1228) (9bdc3f3)
• update dependencies and google maps types (#1229) (a76955a)

2.0.2 (2025-10-29)

Bug Fixes

• replace __DEV__ with process.env.NODE_ENV for environment checks (e7279fe)

2.0.1 (2025-09-30)

Bug Fixes

• add sideEffects to package.json (#1084) (2f6bb31), closes #1083

2.0.0 (2025-09-29)

⚠ BREAKING CHANGES

• reimplement with updated and simplified API (#1068)

Features

• reimplement with updated and simplified API (#1068) (107cf47)

Commits

• daceba6 chore(main): release 2.1.1 (#1236)
• 2db1e08 fix: avoid unconditional use of window in policy creation logic (#1234)
• 2b0a90a build(deps-dev): bump rollup from 4.61.0 to 4.61.1 (#1232)
• f2c2bf8 build(deps): bump @​types/google.maps from 3.65.0 to 3.65.1 (#1231)
• 2f77877 chore(main): release 2.1.0 (#1230)
• b370586 feat: use TrustedTypes policy to create script URL (#1217)
• 9bdc3f3 fix: add warning message about common "apiKey" misspelling (#1228)
• a76955a fix: update dependencies and google maps types (#1229)
• e4a2435 build(deps-dev): bump jest-environment-jsdom from 30.2.0 to 30.3.0 (#1216)
• 504c12f build(deps-dev): bump rollup-plugin-dts from 6.3.0 to 6.4.0 (#1215)
• Additional commits viewable in compare view

Updates @types/react from 18.3.24 to 18.3.31

Commits

• See full diff in compare view

Updates @vitest/coverage-istanbul from 3.2.4 to 4.1.10

Release notes

Sourced from @​vitest/coverage-istanbul's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in vitest-dev/vitest#10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in vitest-dev/vitest#10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

... (truncated)

Commits

• db616d2 chore: release v4.1.10 (#10718)
• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• a09d472 chore: release v4.1.7
• a8fd24c chore: release v4.1.6
• e399846 chore: release v4.1.5
• 0e0ff41 feat(coverage): istanbul to support instrumenter option (#10119)
• ac04bac chore: release v4.1.4
• 2dc0d62 chore: release v4.1.3
• fc6f482 chore: release v4.1.2
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitest/coverage-istanbul since your current version.

Updates concurrently from 9.2.1 to 10.0.3

Release notes

Sourced from concurrently's releases.

v10.0.3

Republish of https://github.com/open-cli-tools/concurrently/releases/tag/v10.0.1 with Trusted Publishing enabled (see #595)

Full Changelog: open-cli-tools/concurrently@v10.0.2...v10.0.3

v10.0.2

Test version to restore Trusted Publishing. Not published to npm.

v10.0.1

• Ensure FlowController type is exported - #594

Full Changelog: open-cli-tools/concurrently@v10.0.0...v10.0.1

v10.0.0

💥 Breaking Changes

• Dropped support for Node.js <22.0.0. Older Node.js version have reached end-of-life, and certain features require new-ish JS APIs.
• concurrently is now ESM-only. It's now possible to require(esm). See here for interoperability.
• Prefix colors now default to automatic - #581 The colors used to default to reset (which does nothing). Concurrently now automatically selects a color, out of the box. The list of colors used is not jarring nor carries semantic meaning, and reads well in both dark and light terminal backgrounds.
• Removed deprecated flags and options
  • CLI flag --name-separator: use commas instead.
  • API option killOthers: use killOthersOn instead.

✨ New Features

• Support applying modifiers to hex prefix colors (e.g. #ff0000.bold) - #450
• Support chalk's color functions in prefixes (e.g. rgb(), hex(), bgRgb(), etc) - #578
• Set prefix background color via bg#RRGGBB - #578
• Allow shell override via --shell CLI flag/shell API option - #288, #589, #556 concurrently distinguishes between cmd.exe, powershell, and POSIX-based shells.
• Manual prefix coloring in templates e.g. [{color}{name}{/color}] - #583, #587

🐛 Bug fixes

• Scope quote normalization to CLI input - #582, #585 It should now also be possible to run commands like "/some/command" foo bar"
• Don't throw when color doesn't exist - #580

🔐 Security

• Address vulnerability in shellquote - #591

Other changes

• Warn about running on Snap - #584

New Contributors

• @​philfreo made their first contribution in open-cli-tools/concurrently#566
• @​garretmh made their first contribution in open-cli-tools/concurrently#450
• @​CodeF53 made their first contribution in open-cli-tools/concurrently#574
• @​nkappler made their first contribution in open-cli-tools/concurrently#577

... (truncated)

Commits

• 435f61b 10.0.3
• 5ea69c6 ci: use node 24 in the release workflow
• 18e1281 10.0.2
• e70686f 10.0.1
• a95bceb Rename flow-controller{.d -> }.ts
• ced4245 ci: configure trusted publisher flow
• cf2eaa2 10.0.0
• 1b9bae4 deps: upgrade yargs to v18 (#593)
• b05ee75 Bump min Node.js version to v22
• ae60bc4 Scope quote normalization to CLI input (#585)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for concurrently since your current version.

Updates eslint from 9.35.0 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
• 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
• 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
• 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
• 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
• 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
• b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
• e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
• a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
• d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
• 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
• a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
• 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

• c30d808 docs: Update README (GitHub Actions Bot)
• 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
• 04174cb docs: Update README (GitHub Actions Bot)
• 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
• 9d42fef docs: Update README (GitHub Actions Bot)
• b230159 docs: Update README (GitHub Actions Bot)
• 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
• 81a4774 chore: updates for v9.39.5 release (Jenkins)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
• 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
• 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
• 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
• e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
• 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
• 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
• 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
• 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
• 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
• 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
• a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
• 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

• b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits

• fabd99b 10.7.0
• 37c5e75 Build: changelog update for 10.7.0
• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
• 81a4774 chore: updates for v9.39.5 release
• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
• c30d808 docs: Update README
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
• Additional commits viewable in compare view

Updates lit from 3.3.1 to 3.3.3

Release notes

Sourced from lit's releases.

lit-html@3.3.3

Patch Changes

• #5218 be6b275035079db3239be4019c4f93c2b1f32428 Thanks @​louis-bompart! - Ensure the ref directive disconnect gracefuly when its internal ref is undefined.

lit@3.3.3

Patch Changes

• #5218 be6b275035079db3239be4019c4f93c2b1f32428 Thanks @​louis-bompart! - Ensure the ref directive disconnect gracefuly when its internal ref is undefined.

Changelog

Sourced from lit's changelog.

3.3.3

Patch Changes

• #5218 be6b275035079db3239be4019c4f93c2b1f32428 Thanks @​louis-bompart! - Ensure the ref directive disconnect gracefuly when its internal ref is undefined.

3.3.2

Patch Changes

• #5044 0d0170e87b06edd8295a31893c820162d0f16a23 Thanks @​ava-cassiopeia! - Make ClassInfo mutable

• #4999 6c174c8d0ed0230ba765d699591d933d7ab5d4bb - Fix a bug in change detection with decorated standard private accessors.

Commits

• 20afabd Version Packages (#5337)
• 0fc671b Version Packages (#5183)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lit since your current version.

Updates maplibre-gl from 5.7.1 to 5.24.0

Release notes

Sourced from maplibre-gl's releases.

v5.24.0

✨ Features and improvements

• GPU performance optimization: Render halo and glyph in a single pass (-40% Time Reduction) (#7436) (by @​xavierjs)
• Optimize matrix inversions and reduce GPU stalls (#7367) (by @​xavierjs)
• Add example showing how to measure map performance using built-in events (load, idle, render) (#7077) (by @​CommanderStorm)

🐞 Bug fixes

• Fix Popup not updating its position when switching between terrain/globe projections (#7468) (by @​CommanderStorm)
• Skip fog computation when fog opacity is zero (#7476) (by @​CommanderStorm)

v5.23.0

✨ Features and improvements

• Add touchZoomRotate.setZoomRate() and touchZoomRotate.setZoomThreshold() to customize touch zoom speed and pinch sensitivity (#7271)
• Improve ability to communicate with imported scripts in workers and use makeRequest in workres as well (#7451) (by @​HarelM)
• Allow opacity and opacityWhenCovered in Marker and MarkerOptions to accept number in addition to string, and add maplibregl-marker-covered CSS class to Marker element when covered by 3D terrain or a globe (#7433) (by @​YuChunTsao)
• perf: add a bench for terrain rendering and fix _demMatrixCache lookup being wasted cycles by actually using the cache (#7400) (by @​CommanderStorm)

🐞 Bug fixes

• Fix polygon text label placement drifting far from center for convex polygons at high zoom due to coordinate rounding in geojson-vt (#7380) (by @​CommanderStorm)
• Ensure that a successful ArrayBuffer response from a custom protocol that is null/undefined is set to an empty ArrayBuffer (#7427) (by @​neodescis)
• Fix error in _contextRestored when map was initialized without a style (#7432) (by @​mvanhorn)
• Fix issue with the cache used for zoomLevelsToOverscale feature (#7450) (by @​HarelM)
• Update stylelint and fix old issues with the CSS (mainly change rgb to use spaces) (#7365) (by @​HarelM)

v5.22.0

✨ Features and improvements

• Make line-cap, line-miter-limit, and line-round-limit data-driven properties, allowing per-feature values (#7351) (by @​CommanderStorm)
• GPU performance optimization: early culling of transparent symbols in vertex shaders (#7364) (by @​xavierjs)
• Add example showing how to measure map performance using built-in events (load, idle, render) (#7077) (by @​CommanderStorm)
• UX: Clarify error message language so if layout and paint properties are confused in setPaintProperty or setLayoutProperty (#6954) (by @​Willjfield and @​CommanderStorm)

🐞 Bug fixes

• Fix startup crash caused by a stale async style load completing after the style was cleared or replaced (#7377)
• Make fitBounds and fitScreenCoordinates respect the zoomSnap map option by snapping the zoom level down to keep bounds fully visible (#7332 (by @​CommanderStorm)
• Make jumpTo, easeTo, and flyTo respect the zoomSnap map option by snapping the zoom level to the nearest valid increment (