chore(deps): update dev dependencies (non-major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@testing-library/react	16.0.1 -> 16.3.0
@tsconfig/recommended (source)	1.0.7 -> 1.0.8
@types/react (source)	18.3.11 -> 18.3.20
@vitest/coverage-v8 (source)	2.1.2 -> 2.1.9
eslint-plugin-jsdoc	50.3.1 -> 50.6.9
eslint-plugin-react	7.37.1 -> 7.37.5
happy-dom	15.10.2 -> 15.11.7
husky	9.1.6 -> 9.1.7
lint-staged	15.2.10 -> 15.5.0
prettier (source)	3.3.3 -> 3.5.3
semantic-release	24.1.2 -> 24.2.3
typedoc (source)	0.26.8 -> 0.28.2
typescript (source)	5.6.3 -> 5.8.3

---

Release Notes

testing-library/react-testing-library (@​testing-library/react)

v16.3.0

Compare Source

v16.2.0

Compare Source

Features

• Add support for React error handlers (#​1354) (9618c51)

v16.1.0

Compare Source

Features

• Add support for React 19 (#​1367) (85ac253)

tsconfig/bases (@​tsconfig/recommended)

v1.0.8

Compare Source

vitest-dev/vitest (@​vitest/coverage-v8)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport https://github.com/vitest-dev/vitest/issues/7317 to v2 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7343

    View changes on GitHub

v2.1.8

Compare Source

   🐞 Bug Fixes

• Support Node 21  -  by @​sheremet-va (92f7a)

    View changes on GitHub

v2.1.7

Compare Source

   🐞 Bug Fixes

• Revert support for Vite 6  -  by @​sheremet-va (fbe5c)
  • This introduced some breaking changes (https://github.com/vitest-dev/vitest/issues/6992). We will enable support for it later. In the meantime, you can still use pnpm.overrides or yarn resolutions to override the vite version in the vitest package - the APIs are compatible.

    View changes on GitHub

v2.1.6

Compare Source

🚀 Features

• Support Vite 6

    View changes on GitHub

v2.1.5

Compare Source

   🐞 Bug Fixes

• dangerouslyIgnoreUnhandledErrors without base reporter  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6808 (0bf0a)
• Capture unhandledRejection even when base reporter is not used  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6812 (8878b)
• Don't change the working directory when loading workspace projects  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6811 (f0aea)
• Remove sequence.concurrent from the RuntimeConfig type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6880 (6af73)
• Stop the runner before restarting, restart on workspace config change  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6859 (b01df)
• Don't rerun on Esc or Ctrl-C during watch filter  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6895 (98f76)
• Print ssrTransform error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6885 (4c96c)
• Throw an error and a warning if .poll, .element, .rejects/.resolves, and locator.* weren't awaited  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6877 (93b67)
• browser:
  • Don't process the default css styles  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6861 (0d67f)
  • Support non US key input  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6873 (5969d)
  • Stop the browser rpc when the pool is closed  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6858 (9a0c9)
  • Init browsers eagerly when tests are running  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6876 (417bd)
• coverage:
  • Report uncovered files when re-run by enter or 'a'  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6848 (487c8)
• ui:
  • Remove crossorigin attributes for same origin assets  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6883 (6e793)
• vite-node:
  • Improve esm check to decide external  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6816 (7e1fa)
  • Top-level throw in module is not reported properly  -  by @​vanaigr and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6840 (cf0cb)
• vitest:
  • Use fetch() implementation from happy-dom  -  by @​capricorn86 in https://github.com/vitest-dev/vitest/issues/6879 (3c56f)

   🏎 Performance

• Limit workspace project concurrency to available cores  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6869 (f4c04)

    View changes on GitHub

v2.1.4

Compare Source

   🚀 Features

This patch release includes a non-breaking feature for the experimental Browser Mode that doesn't follow SemVer. If you want to avoid picking up releases like this, make sure to pin the Vitest version in your package.json. See npm's documentation about semver for more information.

• browser: Allow custom HTML path, respect plugins transformIndexHtml  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6725 (16902)

   🐞 Bug Fixes

• windows:
  • Don't normalize drive case letter in root  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6792 (b28cd)
• browser:
  • Fix default browser port  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6700 (9c518)
  • Optimize expect-type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6713 (07918)
  • Don't polyfill process.env  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6718 (da6d2)
  • Increment browser port automatically if there are several projects with browser.enabled  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6717 (a9397)
  • Cleanup keyboard state  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6731 (19278)
  • Don't add v= queries to setup files imports  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6759 (b8258)
  • User event cleanup on retry  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6764 (bdd15)
  • Ignore non mocked msw requests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6770 (9d9ba)
  • Initiate MSW in the same frame as tests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6772 (2444f)
• deps:
  • Update dependency sirv to v3  -  in https://github.com/vitest-dev/vitest/issues/6701 (fde5d)
• expect:
  • Correct behavior of toThrowError with empty string parameter  -  by @​shulaoda in https://github.com/vitest-dev/vitest/issues/6710 (a6129)
• mocker:
  • Remove spy from peer dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6777 (3a8b5)
• vitest:
  • Clarify slowTestThreshold, print slow tests in non-TTY mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6715 (2e6aa)
  • Print warnings form Vite plugins  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6724 (121b1)
  • Don't fail if the working directory starts with a lowercase drive letter  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6779 (df6d7)
  • Silence import analysis warning  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6785 (39041)
• vitest,runner:
  • Simplify test.extend type exports  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6707 (e5c38)

   🏎 Performance

• Use hash to replace createHash  -  by @​btea in https://github.com/vitest-dev/vitest/issues/6703 (5d07b)

    View changes on GitHub

v2.1.3

Compare Source

   🐞 Bug Fixes

• Fix error diff of toBeNaN, toBeUndefined, toBeNull, toBeTruthy, toBeFalsy  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6697 (e0027)
• browser:
  • Provide aria role intellisense  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6629 (f36ea)
  • Not.toBeInTheDocument works with locators API  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6634 (8bef5)
  • Use /mockServiceWorker.js instead of /__vitest_msw__  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6687 (4b2ce)
  • Don't override the esbuild option in the browser mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6692 (d131f)
• expect:
  • Preserve prototype in toMatchObject diff  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6620 (d289e)
• mocker:
  • Specify correct spy dependency  -  by @​sheremet-va (7e958)
• runner:
  • Ensure sequential suite overrides sequence.concurrent  -  by @​dsyddall and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6653 (5e6de)
• vitest:
  • Deprecate UserConfig in favor of ViteUserConfig  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6626 (496bd)
  • Don't hang with maxConcurrency 0  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6627 (946d8)
  • Deprecate old task types and node-reliant types  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6632 (00045)
  • Fix <empty line> logs when interleaving console.log/error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6644 (9ece3)
  • Show rollup error details as test error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6686 (47dde)
  • Always inline setup files  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6689 (19d64)
  • Use fast-glob instead of tinyglobby in Vitest  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6688 (70baa)
• web-worker:
  • Share mocker with main executor  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6623 (fe7b8)

   🏎 Performance

• Reuse full name in reported tasks, update generator types  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6666 (7a0de)

    View changes on GitHub

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v50.6.9

Compare Source

Reverts

• Revert "refactor: replace synckit with make-synchronized (#​1366)" (#​1367) (771eadf)

v50.6.8

Compare Source

Bug Fixes

• add missing config type(s) (#​1365) (ed62262)

v50.6.7

Compare Source

Bug Fixes

• no-undefined-types: allow any available identifier; fixes #​178,#​1342 (1c38930)

v50.6.6

Compare Source

Bug Fixes

• empty-tags: allow for JSDoc-block final asterisks; fixes #​670 (23b4bfa)

v50.6.5

Compare Source

Bug Fixes

• text-escaping: always allow content in example tags; fixes #​1360 (6baad05)

v50.6.4

Compare Source

Bug Fixes

• force release (9edf4b1)
• force release (b08733a)

v50.6.3

Compare Source

Bug Fixes

• check-template-names: stop restricting template names to single letters; fixes #​1352 (c283729)

v50.6.2

Compare Source

Bug Fixes

• valid-types: update closure suppress types; fixes #​1349 (#​1350) (a57f36e)

v50.6.1

Compare Source

Bug Fixes

• types: update configs types (#​1344) (d2c6040)

v50.6.0

Compare Source

Features

• lines-before-block: move start-of-block checking behind off-by-default checkBlockStarts option (#​1341) (f9b102d)

v50.5.0

Compare Source

Features

• ability to import iterateJsdoc (#​1338) (b9091f8)

v50.4.3

Compare Source

Bug Fixes

• text-escaping: add missing docs.description (9a93119)

v50.4.2

Compare Source

Bug Fixes

• no-multi-asterisks: add missing docs.description (f6616c7)

v50.4.1

Compare Source

Bug Fixes

• match-name: revert to prior correct behavior of ignoring optional and default code surrounding name (7c0b8c6)

v50.4.0

Compare Source

Features

• require-hyphen-before-param-description: ensure template will be properly stringified; fixes #​1326 (7019d28)

v50.3.2

Compare Source

Bug Fixes

• require-hyphen-before-param-description: inject hyphen at proper place with multiline type (8b5b7f7)

jsx-eslint/eslint-plugin-react (eslint-plugin-react)

v7.37.5

Compare Source

Fixed

• [no-unknown-property]: allow shadow root attrs on <template> (#​3912 @​ljharb)
• [prop-types]: support ComponentPropsWithRef from a namespace import (#​3651 @​corydeppen)
• [jsx-no-constructed-context-values]: detect constructed context values in React 19 <Context> usage (#​3910 @​TildaDares)
• [no-unknown-property]: allow transform-origin on rect (#​3914 @​ljharb)

Changed

• [Docs] [button-has-type]: clean up phrasing (#​3909 @​hamirmahal)

v7.37.4

Compare Source

Fixed

• [no-unknown-property]: support onBeforeToggle, popoverTarget, popoverTargetAction attributes (#​3865 @​acusti)
• [types] fix types of flat configs (#​3874 @​ljharb)

v7.37.3

Compare Source

Fixed

• [no-danger]: avoid a crash on a nested component name (#​3833 @​ljharb)
• [Fix] types: correct generated type declaration (#​3840 @​ocavue)
• [no-unknown-property]: support precedence prop in react 19 (#​3829 @​acusti)
• [prop-types]: props missing in validation when using generic types from a namespace import (#​3859 @​rbondoc96)

Changed

• [Tests] [jsx-no-script-url]: Improve tests (#​3849 @​radu2147)
• [Docs] fix broken links: [default-props-match-prop-types], [jsx-boolean-value], [jsx-curly-brace-presence], [jsx-no-bind], [no-array-index-key], [no-is-mounted], [no-render-return-value], [require-default-props] (#​3841 @​bastiendmt)

v7.37.2

Compare Source

Fixed

• [destructuring-assignment]: fix false negative when using typeof props.a (#​3835 @​golopot)

Changed

• [Refactor] [destructuring-assignment]: use getParentStatelessComponent (#​3835 @​golopot)

capricorn86/happy-dom (happy-dom)

v15.11.7

Compare Source

👷‍♂️ Patch fixes

• Allow for an URL to be a string or an URL object in History.pushState() and History.replaceState() - By @​sohailalam2 in task #​1621

v15.11.6

Compare Source

👷‍♂️ Patch fixes

• Adds support for window.TextEncoder and window.TextDecoder - By @​iradonov in task #​1611

v15.11.5

Compare Source

👷‍♂️ Patch fixes

• HTMLSelectElement should not dispatch "change" event when changing value or index - By @​capricorn86 in task #​1603

v15.11.4

Compare Source

👷‍♂️ Patch fixes

• Strings should be converted into numbers in setters for HTMLMeterElement and HTMLProgressElement - By @​capricorn86 in task #​1601

v15.11.3

Compare Source

👷‍♂️ Patch fixes

• Consider null as empty string in the setter for HTMLInputElement.value - By @​capricorn86 in task #​1604

v15.11.2

Compare Source

👷‍♂️ Patch fixes

• Fixes bug where pseudo selectors without an ending parentheses threw an in invalid selector error - By @​capricorn86 in task #​1558
• Fixes bug where it was not possible to use the characters ":" and "\" in attribute selectors - By @​capricorn86 in task #​1561

v15.11.1

Compare Source

👷‍♂️ Patch fixes

• Fixes bug where Document.activeElement is set to the wrong target when triggering HTMLSelectElement.focus() - By @​capricorn86 in task #​1592
  • HTMLSelectElement is a Proxy since v15 and focus() was setting the target of the Proxy as the active element, but should set the Proxy

v15.11.0

Compare Source

🎨 Features

• Adds support for the :disabled pseudo-class in CSS and query selectors - By @​capricorn86 in task #​1159

v15.10.8

Compare Source

👷‍♂️ Patch fixes

• Validate that object is of type Blob in FileReader.readAsArrayBuffer(), FileReader.readAsBinaryString(), FileReader.readAsDataURL() and FileReader.readAsText() - By @​btea in task #​1565

v15.10.7

Compare Source

👷‍♂️ Patch fixes

• Cookies with values that contains "=" should be supported - By @​btea in task #​1570

v15.10.6

Compare Source

👷‍♂️ Patch fixes

• Accept objects with a stringifier (such as a URL object) in Location.assign() and Location.replace() - By @​silverwind in task #​1568

v15.10.5

Compare Source

👷‍♂️ Patch fixes

• Fixes incorrect serialization of special characters in raw text elements such as <script> and <style> - By @​BenjaminAster in task #​1566

v15.10.4

Compare Source

👷‍♂️ Patch fixes

• Adds missing setter for the HTMLMediaElement.srcObject property - By @​ewesemann in task #​1557

v15.10.3

Compare Source

👷‍♂️ Patch fixes

• Allow to set custom export conditions in @happy-dom/jest-environment - By @​aearly in task #​1555

typicode/husky (husky)

v9.1.7

Compare Source

What's Changed

• fix: add husky label to deprecated warning by @​smackfu in https://github.com/typicode/husky/pull/1538

New Contributors

• @​smackfu made their first contribution in https://github.com/typicode/husky/pull/1538

Full Changelog: typicode/husky@v9.1.6...v9.1.7

lint-staged/lint-staged (lint-staged)

v15.5.0

Compare Source

Minor Changes

• #​1526 630af5f Thanks @​iiroj! - Lint-staged no longer resets to the original state when preventing an empty git commit. This happens when your configured tasks reset all the staged changes, typically when trying to commit formatting changes which conflict with your linter setup like ESLint or Prettier.

Example with Prettier

By default Prettier prefers double quotes.

Previously

1. Stage file.js with only double quotes " changed to '
2. Run git commit -am "I don't like double quotes"
3. Lint-staged runs prettier --write file.js, converting all the ' back to "
4. Because there are now no changes, lint-staged fails, cancels the commit, and resets back to the original state
5. Commit was not done, original state is restored and single quotes ' are staged

Now

1. Stage file.js with only double-quotes " changed to '
2. Run git commit -am "I don't like double quotes"
3. Lint-staged runs prettier --write file.js, converting all the ' back to "
4. Because there are now no changes, lint-staged fails and cancels the commit
5. Commit was not done, and there are no staged changes

v15.4.3

Compare Source

Patch Changes

• #​1512 cbfed1d Thanks @​tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.

v15.4.2

Compare Source

Patch Changes

• #​1509 8827ebf Thanks @​iiroj! - Change lint-staged's dependencies to use caret (^) ranges instead of tilde (~). This makes it easier for package managers to perform dependency management when minor-level updates are also permitted instead of just patch-level.

v15.4.1

Compare Source

Patch Changes

• #​1504 1c7a45e Thanks @​iiroj! - Default TypeScript config filenames match JS equivalents.

• #​1504 [9cc18c9]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Size Change: 0 B

Total Size: 19.6 kB

ℹ️ View Unchanged

Filename	Size
lib/app-check/index.js	59 B
lib/app-check/useAppCheckToken.js	383 B
lib/auth/index.js	75 B
lib/auth/useAuthIdToken.js	519 B
lib/auth/useAuthIdTokenResult.js	532 B
lib/auth/useAuthState.js	396 B
lib/common/index.js	31 B
lib/common/types.js	31 B
lib/database/index.js	70 B
lib/database/internal.js	188 B
lib/database/useObject.js	371 B
lib/database/useObjectOnce.js	430 B
lib/database/useObjectValue.js	687 B
lib/database/useObjectValueOnce.js	657 B
lib/firestore/index.js	128 B
lib/firestore/internal.js	444 B
lib/firestore/types.js	31 B
lib/firestore/useAggregateFromServer.js	589 B
lib/firestore/useDocument.js	650 B
lib/firestore/useDocumentData.js	772 B
lib/firestore/useDocumentDataOnce.js	615 B
lib/firestore/useDocumentOnce.js	560 B
lib/firestore/useQueries.js	650 B
lib/firestore/useQueriesData.js	729 B
lib/firestore/useQueriesDataOnce.js	671 B
lib/firestore/useQuery.js	622 B
lib/firestore/useQueryData.js	770 B
lib/firestore/useQueryDataOnce.js	623 B
lib/firestore/useQueryOnce.js	544 B
lib/index.js	107 B
lib/internal/useGet.js	523 B
lib/internal/useIsMounted.js	185 B
lib/internal/useListen.js	450 B
lib/internal/useLoadingValue.js	351 B
lib/internal/useMultiGet.js	676 B
lib/internal/useMultiListen.js	634 B
lib/internal/useMultiLoadingValue.js	522 B
lib/internal/usePrevious.js	146 B
lib/internal/useStableValue.js	257 B
lib/messaging/index.js	60 B
lib/messaging/useMessagingToken.js	394 B
lib/storage/index.js	90 B
lib/storage/internal.js	142 B
lib/storage/useBlob.js	507 B
lib/storage/useBytes.js	472 B
lib/storage/useDownloadURL.js	368 B
lib/storage/useMetadata.js	360 B
lib/storage/useStream.js	512 B

_{compressed-size-action}