Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@babel/eslint-parser (source)	7.24.6 -> 7.24.8					devDependencies	patch
actions/setup-node	v4.0.2 -> v4.0.3					action	patch
eslint (source)	9.3.0 -> 9.7.0					devDependencies	minor
glob	10.4.1 -> 10.4.5					dependencies	patch
mega-linter-runner	7.11.1 -> 7.13.0					devDependencies	minor
mocha (source)	10.4.0 -> 10.7.0					devDependencies	minor

---

Release Notes

babel/babel (@​babel/eslint-parser)

v7.24.8

Compare Source

👓 Spec Compliance

• babel-parser
  • #​16567 Do not use strict mode in TS declare (@​liuxingbaoyu)

🐛 Bug Fix

• babel-generator
  • #​16630 Correctly print parens around in in for heads (@​nicolo-ribaudo)
  • #​16626 Fix printing of comments in await using (@​nicolo-ribaudo)
  • #​16591 fix typescript code generation for yield expression inside type expre… (@​SreeXD)
• babel-parser
  • #​16613 Disallow destructuring assignment in using declarations (@​H0onnn)
  • #​16490 fix: do not add .value: undefined to regexp literals (@​liuxingbaoyu)
• babel-types
  • #​16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@​nicolo-ribaudo)
• babel-plugin-transform-typescript
  • #​16566 fix: Correctly handle export import x = (@​liuxingbaoyu)

💅 Polish

• babel-generator
  • #​16625 Avoid unnecessary parens around async in for await (@​nicolo-ribaudo)
• babel-traverse
  • #​16619 Avoid checking Scope.globals multiple times (@​liuxingbaoyu)

v7.24.7

Compare Source

🐛 Bug Fix

• babel-node
  • #​16554 Allow extra flags in babel-node (@​nicolo-ribaudo)
• babel-traverse
  • #​16522 fix: incorrect constantViolations with destructuring (@​liuxingbaoyu)
• babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  • #​16524 fix: Transform using in switch correctly (@​liuxingbaoyu)

🏠 Internal

• babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16525 Delete unused array helpers (@​blakewilson)

actions/setup-node (actions/setup-node)

v4.0.3

Compare Source

eslint/eslint (eslint)

v9.7.0

Compare Source

Features

• 7bd9839 feat: add support for es2025 duplicate named capturing groups (#​18630) (Yosuke Ota)
• 1381394 feat: add regex option in no-restricted-imports (#​18622) (Nitin Kumar)

Bug Fixes

• 14e9f81 fix: destructuring in catch clause in no-unused-vars (#​18636) (Francesco Trotta)

Documentation

• 9f416db docs: Add Powered by Algolia label to the search. (#​18633) (Amaresh S M)
• c8d26cb docs: Open JS Foundation -> OpenJS Foundation (#​18649) (Milos Djermanovic)
• 6e79ac7 docs: loadESLint does not support option cwd (#​18641) (Francesco Trotta)

Chores

• 793b718 chore: upgrade @​eslint/js@​9.7.0 (#​18680) (Francesco Trotta)
• 7ed6f9a chore: package.json update for @​eslint/js release (Jenkins)
• 7bcda76 refactor: Add type references (#​18652) (Nicholas C. Zakas)
• 51bf57c chore: add tech sponsors through actions (#​18624) (Strek)
• 6320732 refactor: don't use parent property in NodeEventGenerator (#​18653) (Milos Djermanovic)
• 9e6d640 refactor: move "Parsing error" prefix adding to Linter (#​18650) (Milos Djermanovic)

v9.6.0

Compare Source

v9.5.0

Compare Source

v9.4.0

Compare Source

isaacs/node-glob (glob)

v10.4.5

Compare Source

v10.4.4

Compare Source

v10.4.3

Compare Source

v10.4.2

Compare Source

oxsecurity/megalinter (mega-linter-runner)

v7.13.0

Compare Source

• New linters

  • Add ls-lint, file and folder linter, by @​scolladon in #​3681

• Core

  • Handle renovate version comments in build script, by @​echoix in #​3617 , #​3627 , #​3643 , #​3699 , #​3700
  • Update base image to python:3.12.4-alpine3.20
  • Use dotnet8-sdk available in the main repository, by @​TommyE123 in #​3696

• Media

  • Introducing MegaLinter: Streamlining Code Quality Checks Across Multiple Languages, by Cloud Tuned
  • Infrastructure as Code GitHub Codespace Template, by Luke Murray
  • Video: How to: Secrets scanning, by Hackitect's playground

• Linters enhancements

  • Add SARIF support (v2) for all PHP linters by @​llaville in #​3745 , #​3729
  • Add python package Pygments to rst-lint venv, by @​bobidle in #​3631
  • CSharpier added ability to override config filename and path, by @​TommyE123 in #​3664
  • xmllint added support for xsd files, by @​TommyE123 in #​3665

• Fixes

  • Improve support for single argument in get_list_args function, by @​TommyE123 in #​3589
  • ansible-lint Improved activation by checking for .ansible-lint config file, by @​TommyE123 in #​3697
  • DevSkim fixed fatal errors when scanning and ability to override config path, by @​TommyE123 in #​3673
  • GitLeaks add missing schema properties, by @​TommyE123 in #​3675
  • Powershell Error table truncation improvements, by @​TommyE123 in #​3620
  • Powershell added missing schema property POWERSHELL_POWERSHELL_FORMATTER_OUTPUT_ENCODING, by @​TommyE123 in #​3678
  • syft use scan instead of deprecated packages arg, by @​TommyE123 in #​3613
  • tflint added missing schema property TERRAFORM_TFLINT_SECURED_ENV, by @​TommyE123 in #​3679
  • tflint fixed deprecated argument and other improvements to default .tflint.hcl template, by @​TommyE123 in #​3688
  • xmllint added missing schema properties XML_XMLLINT_AUTOFORMAT and XML_XMLLINT_INDENT, by @​TommyE123 in #​3677
  • yamllint fix error/warning count to work with different log output formats, by @​TommyE123 in #​3612

• Doc

  • Update documentation icons by @​nvuillam in #​3625

• Flavors

  • Add gherkin-lint in c_cpp flavor, by @​nvuillam in #​3698

• CI

  • Bump actions/checkout from 3 to 4, by @​KristjanESPERANTO in #​2994
  • Reduce dependabot PR frequency to weekly by @​echoix in #​3642

• Linter versions upgrades

  • ansible-lint from 24.2.3 to 24.6.1
  • bandit from 1.7.8 to 1.7.9
  • bash-exec from 5.2.21 to 5.2.26
  • bicep_linter from 0.27.1 to 0.28.1
  • cfn-lint from 0.87.4 to 1.5.0
  • checkov from 3.2.122 to 3.2.174
  • clang-format from 17.0.5 to 17.0.6
  • clippy from 0.1.78 to 0.1.79
  • cspell from 8.8.3 to 8.10.4
  • editorconfig-checker from 3.0.1 to 3.0.3
  • flake8 from 7.0.0 to 7.1.0
  • git_diff from 2.43.4 to 2.45.2
  • gitleaks from 8.18.2 to 8.18.4
  • golangci-lint from 1.59.0 to 1.59.1
  • grype from 0.78.0 to 0.79.2
  • helm from 3.14.2 to 3.14.3
  • jscpd from 4.0.4 to 4.0.5
  • kics from 2.0.1 to 2.1.1
  • ktlint from 1.2.1 to 1.3.1
  • lightning-flow-scanner from 2.26.0 to 2.28.0
  • markdown-table-formatter from 1.6.0 to 1.6.1
  • mypy from 1.10.0 to 1.10.1
  • npm-package-json-lint from 7.1.0 to 8.0.0
  • php-cs-fixer from 3.58.1 to 3.59.3
  • phplint from 9.3.1 to 9.4.1
  • phpstan from 1.11.3 to 1.11.7
  • pmd from 7.1.0 to 7.3.0
  • prettier from 3.3.0 to 3.3.2
  • protolint from 0.49.7 to 0.50.2
  • psalm from Psalm.5.24.0@​ to Psalm.5.25.0@​
  • pylint from 3.2.2 to 3.2.5
  • pyright from 1.1.365 to 1.1.370
  • ruff from 0.4.10 to 0.5.1
  • sfdx-scanner-apex from 3.25.0 to 4.3.2
  • sfdx-scanner-aura from 3.25.0 to 4.3.2
  • sfdx-scanner-lwc from 3.25.0 to 4.3.2
  • snakemake from 8.12.0 to 8.15.2
  • sqlfluff from 3.0.7 to 3.1.0
  • swiftlint from 0.54.0 to 0.55.1
  • syft from 1.5.0 to 1.8.0
  • terraform-fmt from 1.8.4 to 1.9.0
  • terragrunt from 0.58.13 to 0.59.6
  • tflint from 0.51.1 to 0.52.0
  • trivy-sbom from 0.51.4 to 0.53.0
  • trivy from 0.51.4 to 0.53.0
  • trufflehog from 3.77.0 to 3.79.0
  • v8r from 3.0.0 to 3.1.0
  • vale from 3.4.2 to 3.6.0
  • xmllint from 21108 to 21207

v7.12.0

Compare Source

• Core

  • Add new logs (at debug level) on each linter activation/deactivation
  • Clean MegaLinter own CVE exceptions and order the remaining ones with links to related issues
  • Upgrade to Java 21 except for npm-groovy-lint that requires Java 17

• Media

  • Add blog post 5 ways MegaLinter upped our DevSecOps game to the list of English articles by @​wesley-dean-flexion in #​3596

• Linters

  • Add PHP fixer by @​llaville in #​3598
  • API_SPECTRAL was added as replacement for OPENAPI_SPECTRAL (deprecated), supporting AsyncAPI and OpenAPI by default. Uses Spectral's standard config file name .spectral.yaml instead of .openapirc.yml with a default config with rulesets for AsyncAPI and OpenAPI enabled. Fixes #​3387
  • Disable SQL_TSQLLINT until security issues are solved. Related to tsqllint/tsqllint#333
  • PHP linters (PHP_PHPCS, PHP_PHPLINT, PHP_PHPSTAN) add support to SARIF report output format with help of https://github.com/llaville/sarif-php-sdk
  • Php psalm improvement by @​llaville in #​3541
  • KOTLIN_KTLINT now supports list_of_files mode, and has better error counting
  • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project

• Reporters

• Fixes

  • Change golangci-lint lint mode to project, by @​wandering-tales in #​3509
  • Disable sql-lint as it is no longer maintained
  • Add new entries findUnusedCode and findUnusedBaselineEntry in default psalm.xml configuration file for PHP_PSALM linter. Related to #​3538
  • fix(pylint): overgeneral-exceptions fully qualified name by @​gardar in #​3576
  • Update ktlint descriptor to support list_of_files and better error counting by @​Yann-J in #​3575
  • Sync PowerShell version in arm.megalinter-descriptor.yml by @​echoix in #​3586
  • Adjust find commands to clean up files in same step by @​echoix in #​3588
  • Upgrade KOTLIN_DETEKT and make it work with cli_lint_mode = project by @​nvuillam in #​3590

• Doc

  • Handle disabled_reason property in descriptors
  • Sort enums in json schema, by @​echoix in #​3595

• Flavors

• CI

  • Build: take in account disabled linters for workflow auto-update
  • Remove useless package-lock.json that was in python tests folder
  • Fix SARIF_REPORTER that was wrongly sent to true to format & fix test methods
  • Build: Write ARG lines at the top of Dockerfiles if they are used by FROM variables
  • Remove Github Actions Workflow telemetry to improve performances
  • Update Docker image for Gitpod to run on Ubuntu Noble, by @​echoix
  • Update makefile bootstrap config (gitpod or local) to use uv for package installation, by @​echoix
  • Use uv to install Python deps for CI by @​echoix in #​3561
  • Use a single find command to delete pycache files by @​echoix in #​3562
  • Sort schema enums by @​echoix in #​3595

• Linter versions upgrades

  • actionlint from 1.6.27 to 1.7.1
  • ansible-lint from 24.2.2 to 24.2.3
  • bicep_linter from 0.26.170 to 0.27.1
  • black from 24.4.0 to 24.4.2
  • cfn-lint from 0.86.4 to 0.87.4
  • checkov from 3.2.74 to 3.2.122
  • checkstyle from 10.15.0 to 10.17.0
  • clippy from 0.1.77 to 0.1.78
  • clj-kondo from 2024.03.13 to 2024.05.24
  • csharpier from 0.28.1 to 0.28.2
  • cspell from 8.7.0 to 8.8.3
  • detekt from 1.23.5 to 1.23.6
  • dotnet-format from 8.0.104 to 8.0.106
  • editorconfig-checker from 2.7.2 to 3.0.1
  • git_diff from 2.43.0 to 2.43.4
  • golangci-lint from 1.57.2 to 1.59.0
  • grype from 0.77.0 to 0.78.0
  • jscpd from 3.5.10 to 4.0.4
  • kics from 2.0.0 to 2.0.1
  • kubeconform from 0.6.4 to 0.6.6
  • lightning-flow-scanner from 2.22.0 to 2.24.0
  • luacheck from 1.1.2 to 1.2.0
  • lychee from 0.14.3 to 0.15.1
  • markdown-link-check from 3.12.1 to 3.12.2
  • markdown-table-formatter from 1.5.0 to 1.6.0
  • markdownlint from 0.39.0 to 0.41.0
  • mypy from 1.9.0 to 1.10.0
  • npm-groovy-lint from 14.4.1 to 14.6.0
  • phpcs from 3.9.1 to 3.10.1
  • phplint from 9.1.2 to 9.3.1
  • phpstan from 1.10.67 to 1.11.0 to 1.11.3
  • pmd from 6.55.0 to 7.1.0
  • powershell from 7.4.1 to 7.4.2
  • powershell_formatter from 7.4.1 to 7.4.2
  • prettier from 3.2.5 to 3.3.0
  • proselint from 0.13.0 to 0.14.0
  • protolint from 0.49.6 to 0.49.7
  • psalm from Psalm.5.23.1@​ to Psalm.5.24.0@​
  • pylint from 3.1.0 to 3.2.2
  • pyright from 1.1.359 to 1.1.365
  • roslynator from 0.8.6.0 to 0.8.9.0
  • rubocop from 1.63.3 to 1.64.1
  • ruff from 0.4.1 to 0.4.7
  • scalafix from 0.12.0 to 0.12.1
  • secretlint from 8.2.3 to 8.2.4
  • sfdx-scanner-apex from 3.23.0 to 3.25.0
  • sfdx-scanner-aura from 3.23.0 to 3.25.0
  • sfdx-scanner-lwc from 3.23.0 to 3.25.0
  • snakefmt from 0.10.1 to 0.10.2
  • snakemake from 8.10.8 to 8.12.0
  • sqlfluff from 3.0.5 to 3.0.7
  • stylelint from 16.4.0 to 16.6.1
  • syft from 1.2.0 to 1.5.0
  • tekton-lint from 1.0.2 to 1.1.0
  • terraform-fmt from 1.8.1 to 1.8.4
  • terragrunt from 0.57.5 to 0.58.10
  • tflint from 0.50.3 to 0.51.1
  • trivy-sbom from 0.50.2 to 0.51.4
  • trivy from 0.50.2 to 0.51.4
  • trufflehog from 3.73.0 to 3.77.0
  • vale from 3.4.0 to 3.4.2
  • xmllint from 21107 to 21108

mochajs/mocha (mocha)

v10.7.0

Compare Source

🎉 Enhancements

• #​4771 feat: add option to not fail on failing test suite (@​ilgonmic)

v10.6.1

Compare Source

🐛 Fixes

• #​3825 fix: do not exit when only unref'd timer is present in test code (@​boneskull)
• #​5040 fix: support canonical module (@​JacobLey)

v10.6.0

Compare Source

🎉 Enhancements

• #​5150 feat: allow ^ versions for character encoding packages (@​JoshuaKGoldberg)
• #​5151 feat: allow ^ versions for file matching packages (@​JoshuaKGoldberg)
• #​5152 feat: allow ^ versions for yargs packages (@​JoshuaKGoldberg)
• #​5153 feat: allow ^ versions for data serialization packages (@​JoshuaKGoldberg)
• #​5154 feat: allow ^ versions for miscellaneous packages (@​JoshuaKGoldberg)

v10.5.2

Compare Source

🐛 Fixes

• #​5032 fix: better tracking of seen objects in error serialization (@​sam-super)

v10.5.1

Compare Source

🐛 Fixes

• #​5086 fix: Add error handling for nonexistent file case with --file option (@​khoaHyh)

v10.5.0

Compare Source

🎉 Enhancements

• #​5015 feat: use <progress> and <svg> for browser progress indicator instead of <canvas> (@​yourWaifu)
• #​5143 feat: allow using any 3.x chokidar dependencies (@​simhnna)
• #​4835 feat: add MOCHA_OPTIONS env variable (@​icholy)

🐛 Fixes

• #​5107 fix: include stack in browser uncaught error reporting (@​JoshuaKGoldberg)

🔩 Other

• #​5110 chore: switch two-column list styles to be opt-in (@​marjys)
• #​5135 chore: fix some typos in comments (@​StevenMia)
• #​5130 chore: rename 'master' to 'main' in docs and tooling (@​JoshuaKGoldberg)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.35%. Comparing base (652ff7f) to head (4c0e74a).
Report is 7 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #55   +/-   ##
=======================================
  Coverage   82.35%   82.35%           
=======================================
  Files           4        4           
  Lines          85       85           
=======================================
  Hits           70       70           
  Misses         15       15           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.