chore(deps-dev): bump the development-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the development-dependencies group with 5 updates in the / directory:

Package	From	To
@stylistic/stylelint-plugin	5.0.1	5.1.0
esbuild	0.27.4	0.27.5
eslint-plugin-jsdoc	62.8.0	62.9.0
stylelint	17.5.0	17.6.0
undici	7.24.6	7.24.7

Updates @stylistic/stylelint-plugin from 5.0.1 to 5.1.0

Release notes

Sourced from @​stylistic/stylelint-plugin's releases.

Release v5.1.0

Added

• The no-multiple-whitespaces rule, which disallows multiple whitespaces between property values and function arguments.

Fixed

• The dependencies have now been updated to versions that include security fixes.

Changelog

Sourced from @​stylistic/stylelint-plugin's changelog.

[5.1.0] — 2026–03–28

Added

• The no-multiple-whitespaces rule, which disallows multiple whitespaces between property values and function arguments.

Fixed

• The dependencies have now been updated to versions that include security fixes.

Commits

• f9dc380 5.1.0
• 8623888 Add no-multiple-whitespaces rule
• a45a777 Update dependencies
• 61be92e Make .editorconfig non-root
• 8d9a904 Disallow array reduction
• 347c8f7 Disallow parameter reassignment
• e85bd43 Fix jsDoc comments
• f654e68 Replace eslint with oxlint
• 3b48d00 fixup! Change pre-commit hook
• See full diff in compare view

Updates esbuild from 0.27.4 to 0.27.5

Release notes

Sourced from esbuild's releases.

v0.27.5

• Fix for an async generator edge case (#4401, #4417)

  Support for transforming async generators into the equivalent state machine was added in version 0.19.0. However, the generated state machine didn't work correctly when polling async generators concurrently, such as in the following code:

  async function* inner() { yield 1; yield 2 }
  async function* outer() { yield* inner() }
  let gen = outer()
  for await (let x of [gen.next(), gen.next()]) console.log(x)

  Previously esbuild's output of the above code behaved incorrectly when async generators were transformed (such as with --supported:async-generator=false). The transformation should be fixed starting with this release.

  This fix was contributed by @​2767mr.

• Fix a regression when metafile is enabled (#4420, #4418)

  This release fixes a regression introduced by the previous release. When metafile: true was enabled in esbuild's JavaScript API, builds with build errors were incorrectly throwing an error about an empty JSON string instead of an object containing the build errors.

• Use define semantics for TypeScript parameter properties (#4421)

  Parameter properties are a TypeScript-specific code generation feature that converts constructor parameters into class fields when they are prefixed by certain keywords. When "useDefineForClassFields": true is present in tsconfig.json, the TypeScript compiler automatically generates class field declarations for parameter properties. Previously esbuild didn't do this, but esbuild will now do this starting with this release:

  // Original code
  class Foo {
    constructor(public x: number) {}
  }
  // Old output (with --loader=ts)
  class Foo {
  constructor(x) {
  this.x = x;
  }
  }
  // New output (with --loader=ts)
  class Foo {
  constructor(x) {
  this.x = x;
  }
  x;
  }

• Allow es2025 as a target in tsconfig.json (#4432)

  TypeScript recently added es2025 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.5

• Fix for an async generator edge case (#4401, #4417)

  Support for transforming async generators into the equivalent state machine was added in version 0.19.0. However, the generated state machine didn't work correctly when polling async generators concurrently, such as in the following code:

  async function* inner() { yield 1; yield 2 }
  async function* outer() { yield* inner() }
  let gen = outer()
  for await (let x of [gen.next(), gen.next()]) console.log(x)

  Previously esbuild's output of the above code behaved incorrectly when async generators were transformed (such as with --supported:async-generator=false). The transformation should be fixed starting with this release.

  This fix was contributed by @​2767mr.

• Fix a regression when metafile is enabled (#4420, #4418)

  This release fixes a regression introduced by the previous release. When metafile: true was enabled in esbuild's JavaScript API, builds with build errors were incorrectly throwing an error about an empty JSON string instead of an object containing the build errors.

• Use define semantics for TypeScript parameter properties (#4421)

  Parameter properties are a TypeScript-specific code generation feature that converts constructor parameters into class fields when they are prefixed by certain keywords. When "useDefineForClassFields": true is present in tsconfig.json, the TypeScript compiler automatically generates class field declarations for parameter properties. Previously esbuild didn't do this, but esbuild will now do this starting with this release:

  // Original code
  class Foo {
    constructor(public x: number) {}
  }
  // Old output (with --loader=ts)
  class Foo {
  constructor(x) {
  this.x = x;
  }
  }
  // New output (with --loader=ts)
  class Foo {
  constructor(x) {
  this.x = x;
  }
  x;
  }

• Allow es2025 as a target in tsconfig.json (#4432)

  TypeScript recently added es2025 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

... (truncated)

Commits

• 0102ae3 publish 0.27.5 to npm
• eb93887 split off CHANGELOG-2025.md
• a54a51a fix #4421: use define for ts parameter props
• 31a7c67 remove unused variable in __asyncGenerator
• 1ea01a6 update release notes
• a8f8c0e fix: Handle non-awaited async generator (#4417)
• 4844d4b fix #4420, close #4418: metafile JSON regression
• edbdce8 fix #4432: add es2025 as a valid target
• See full diff in compare view

Updates eslint-plugin-jsdoc from 62.8.0 to 62.9.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v62.9.0

62.9.0 (2026-04-01)

Features

• update jsdoccomment, devDeps. (8569d0c)

v62.8.1

62.8.1 (2026-03-25)

Bug Fixes

• valid-types: allow required default names; fixes #1675 (bca557b)

Commits

• 8569d0c feat: update jsdoccomment, devDeps.
• 5b668af chore(deps): bump brace-expansion from 1.1.12 to 1.1.13
• 7d0e91a chore: update comment-parser, jsdoccomment, espree, devDeps.
• bca557b fix(valid-types): allow required default names; fixes #1675
• 78335ff chore(deps): bump picomatch from 2.3.1 to 2.3.2
• 7bc2525 chore(deps): bump undici from 6.23.0 to 6.24.0
• See full diff in compare view

Updates stylelint from 17.5.0 to 17.6.0

Release notes

Sourced from stylelint's releases.

17.6.0

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

• Added: support for extending units to languageOptions (#9166) (@​jeddy3).
• Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
• Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

Changelog

Sourced from stylelint's changelog.

17.6.0 - 2026-03-26

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

• Added: support for extending units to languageOptions (#9166) (@​jeddy3).
• Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
• Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

Commits

• f74ceaf Release 17.6.0 (#9180)
• 895f7f2 Add support for extending units to languageOptions (#9166)
• dd7231b Refactor to replace imurmurhash with node:crypto (#9177)
• 5b6b024 Bump picomatch (#9178)
• 7e25378 Bump @​csstools/css-syntax-patches-for-csstree from 1.0.29 to 1.1.1 in the css...
• 9edeff4 Group csstree and @csstools/css-syntax-patches-for-csstree in dependabot ...
• 2f7c0ca Bump actions/download-artifact from 8.0.0 to 8.0.1 (#9167)
• 59f310d Bump write-file-atomic from 7.0.0 to 7.0.1 (#9169)
• ab2ffcb Bump @​vscode/windows-process-tree from 0.6.3 to 0.7.0 (#9170)
• a9f3e5b Bump lint-staged from 16.3.3 to 16.4.0 (#9171)
• Additional commits viewable in compare view

Updates undici from 7.24.6 to 7.24.7

Release notes

Sourced from undici's releases.

v7.24.7

What's Changed

• docs: update broken links in file "Dispatcher.md" by @​samuel871211 in nodejs/undici#4924
• doc: remove unused parameter redirectionLimitReached by @​samuel871211 in nodejs/undici#4933
• test: skip flaky macOS Node 20 cookie fetch cases by @​mcollina in nodejs/undici#4932
• fix(types): align Response with DOM fetch types by @​theamodhshetty in nodejs/undici#4867
• fix(types): Fix clone method type declaration to be an instance method rather than instance property by @​mistval in nodejs/undici#4925
• test: skip IPv6 tests when IPv6 is not available by @​mcollina in nodejs/undici#4939
• fix: correctly handle multi-value rawHeaders in fetch by @​mcollina in nodejs/undici#4938
• ignore AGENTS.md by @​mcollina in nodejs/undici#4942

New Contributors

• @​samuel871211 made their first contribution in nodejs/undici#4924
• @​mistval made their first contribution in nodejs/undici#4925

Full Changelog: nodejs/undici@v7.24.6...v7.24.7

Commits

• 84f23e2 Bumped v7.24.7 (#4947)
• a770b10 ignore AGENTS.md (#4942)
• 6acd19b fix: correctly handle multi-value rawHeaders in fetch (#4938)
• 1da1c74 test: skip IPv6 tests when IPv6 is not available (#4939)
• 04cb773 fix(types): Fix clone method type declaration to be an instance method rather...
• 5145a7c fix(types): align Response with DOM fetch types (#4867)
• ec23620 test: skip flaky macOS Node 20 cookie fetch cases
• 5559235 doc: remove unused parameter redirectionLimitReached (#4933)
• a4e4b84 docs: update broken links in file "Dispatcher.md" (#4924)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: 8d9bb13

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	undici@​7.24.6 ⏵ 7.24.7	+1		+1
	esbuild@​0.27.4 ⏵ 0.27.5	+1
	@​stylistic/​stylelint-plugin@​5.0.1 ⏵ 5.1.0	+1		+1	+1
	stylelint@​17.5.0 ⏵ 17.6.0	+1			-1
	eslint-plugin-jsdoc@​62.8.0 ⏵ 62.9.0	+1			+2

View full report