chore(dev-deps): bump the dev-minor-patch group across 1 directory with 21 updates

[dependabot]

Bumps the dev-minor-patch group with 21 updates in the / directory:

Package	From	To
@eslint/compat	2.1.0	2.1.1
@typescript-eslint/eslint-plugin	8.59.2	8.70.0
@typescript-eslint/parser	8.59.2	8.70.0
@vitest/eslint-plugin	1.6.17	1.6.27
eslint	10.3.0	10.10.0
eslint-plugin-prettier	5.5.5	5.5.6
fs-extra	11.3.5	11.4.0
globals	17.6.0	17.12.0
nock	14.0.15	14.0.17
playwright	1.59.1	1.63.0
prettier	3.8.3	3.9.6
@testing-library/react	16.3.2	16.3.3
@vitejs/plugin-react	6.0.1	6.1.1
vite	8.0.10	8.3.0
@tailwindcss/postcss	4.2.4	4.3.3
@tailwindcss/vite	4.2.4	4.3.3
autoprefixer	10.5.0	10.5.6
eslint-plugin-react-refresh	0.5.2	0.5.6
postcss	8.5.14	8.5.28
tailwindcss	4.2.4	4.3.3
typescript-eslint	8.59.2	8.70.0

Updates @eslint/compat from 2.1.0 to 2.1.1

Release notes

Sourced from @​eslint/compat's releases.

compat: v2.1.1

2.1.1 (2026-09-01)

Bug Fixes

• preserve markVariableAsUsed return value in compat context (#503) (66d9790)

Changelog

Sourced from @​eslint/compat's changelog.

2.1.1 (2026-09-01)

Bug Fixes

• preserve markVariableAsUsed return value in compat context (#503) (66d9790)

Commits

• a4466ca chore: release main (#504)
• 714ffde docs: Update README sponsors
• 66d9790 fix: preserve markVariableAsUsed return value in compat context (#503)
• caffae7 docs: Update README sponsors
• ae1ba25 docs: Update README sponsors
• 50051c6 docs: Update README sponsors
• ea83524 docs: Update README sponsors
• 29956ae docs: Update README sponsors
• f6d5bdf docs: Update README sponsors
• 8b71ed3 chore: restore eslint-plugin-jsdoc rules (#316)
• Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.59.2 to 8.70.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
• website: generate per-page social preview cards (#12734)

🩹 Fixes

• use stable release of pnpm 12 (#12808)
• update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
• project-service: avoid discarded tsserver logs (#12748)
• typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

• Barry @​barry166
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨ @​JoshuaKGoldberg
• Kirk Waiblinger @​kirkwaiblinger
• Ulrich Stark @​ulrichstark
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
• website: respect allowJs playground config (#12744)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.70.0 (2026-09-07)

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#12730)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)

❤️ Thank You

• Josh Goldberg ✨ @​JoshuaKGoldberg
• Ulrich Stark @​ulrichstark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#12086)

... (truncated)

Commits

• 7ee7608 chore(release): publish 8.70.0
• f66bdca test(eslint-plugin): [member-ordering] use RuleTester directly in `optional...
• 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
• f8e1e4e fix(eslint-plugin): [no-unnecessary-condition] no false positive on RHS of a ...
• 889cece fix(eslint-plugin): [member-ordering] don't report fields that read fields de...
• 1a5a8b1 feat(eslint-plugin): [no-generated-empty-object-type] add rule (#12730)
• 9a6e546 chore(release): publish 8.69.0
• 513638e fix(eslint-plugin): [no-meaningless-void-operator] report void on non-call ex...
• 1dba4c5 chore(eslint-plugin): fix eslint-plugin/require-test-error-positions report...
• a2fccae fix(eslint-plugin): [unified-signatures] compare type parameters by constrain...
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.59.2 to 8.70.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
• website: generate per-page social preview cards (#12734)

🩹 Fixes

• use stable release of pnpm 12 (#12808)
• update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
• project-service: avoid discarded tsserver logs (#12748)
• typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

• Barry @​barry166
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨ @​JoshuaKGoldberg
• Kirk Waiblinger @​kirkwaiblinger
• Ulrich Stark @​ulrichstark
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
• website: respect allowJs playground config (#12744)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.70.0 (2026-09-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

• Evyatar Daud @​StyleShit

... (truncated)

Commits

• 7ee7608 chore(release): publish 8.70.0
• 9a6e546 chore(release): publish 8.69.0
• 8f4e00a chore(release): publish 8.68.0
• 55f6d5d chore: enable source maps (#12677)
• 20a261f chore(release): publish 8.67.0
• 3b155bb chore: use typescript 7 for typechecking (#12601)
• e51b11b chore(release): publish 8.66.0
• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
• Additional commits viewable in compare view

Updates @vitest/eslint-plugin from 1.6.17 to 1.6.27

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.27

   🐞 Bug Fixes

• valid-title:
  • Refine the reportEmptyTitle message  -  by @​ysknsid25 in vitest-dev/eslint-plugin-vitest#941 (08973)
  • Handle missing argument in valid-title rule  -  by @​ysknsid25 in vitest-dev/eslint-plugin-vitest#942 (ef700)

    View changes on GitHub

v1.6.26

   🐞 Bug Fixes

• Detect test modes in options objects  -  by @​Guflly in vitest-dev/eslint-plugin-vitest#937 (68454)

    View changes on GitHub

v1.6.25

   🐞 Bug Fixes

• valid-expect: Support expect.assert members  -  by @​happykawayigt and Guan Tong in vitest-dev/eslint-plugin-vitest#936 (bc37d)

    View changes on GitHub

v1.6.24

   🐞 Bug Fixes

• valid-expect: Fix poll and element taking 1 or 2 arguments  -  by @​julienw in vitest-dev/eslint-plugin-vitest#931 (57e53)

    View changes on GitHub

v1.6.23

   🚀 Features

• prefer-expect-assertions: Add disallowHasAssertions option  -  by @​ssssota in vitest-dev/eslint-plugin-vitest#929 (5e1e1)

   🐞 Bug Fixes

• 8 warnings for unexpected node version input  -  by @​hirehamir in vitest-dev/eslint-plugin-vitest#928 (394dd)
• valid-expect: Handle static expect APIs  -  by @​w3lld1 in vitest-dev/eslint-plugin-vitest#930 (79232)

    View changes on GitHub

v1.6.22

   🐞 Bug Fixes

• Handle expect.any separately from Chai any flag  -  by @​nami8824 in vitest-dev/eslint-plugin-vitest#925 (34157)

    View changes on GitHub

v1.6.21

... (truncated)

Commits

• aad57d1 chore: release v1.6.27
• d1c0a34 docs(valid-title): fixed the description of the valid-title option (#940)
• ef70063 fix(valid-title): handle missing argument in valid-title rule (#942)
• 089732f fix(valid-title): Refine the reportEmptyTitle message (#941)
• 96f6bfd chore: release v1.6.26
• 684545f fix: detect test modes in options objects (#937)
• 48abf8d chore: release v1.6.25
• bc37d2d fix(valid-expect): support expect.assert members (#936)
• 1a0fdaf chore: release v1.6.24
• 57e5389 fix(valid-expect): fix poll and element taking 1 or 2 arguments (#931)
• Additional commits viewable in compare view

Updates eslint from 10.3.0 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

• 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
• c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
• 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

• bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
• 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
• 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
• 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
• 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
• 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

• 2417cad docs: Update README (GitHub Actions Bot)
• 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
• 8724829 docs: update compat table links (#21263) (fnx)
• 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

• b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
• 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
• 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])
• 3c753f1 chore: update eslint (#21289) (renovate[bot])
• 1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)
• 08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)
• 77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])
• 007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)
• 0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

v10.9.1

Bug Fixes

• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

• ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

• 3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

• 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
• 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

• 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
• 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
• 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

... (truncated)

Commits

• 3f20a57 10.10.0
• f4e5284 Build: changelog update for 10.10.0
• bb47dc6 fix: update dependency file-entry-cache to v11 (#20801)
• 427ac0a fix: use format strings in debug calls (#21247)
• b3d876b chore: disable npm audit in ecosystem tests (#21306)
• 9d81532 fix: support __proto__ in /* exported */ comments (#21261)
• 264b434 feat: add d and v flags to no-unexpected-multiline (#21305)
• 1696682 ci: restore EMFILE test on Node.js 26 (#21297)
• 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296)
• 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282)
• Additional commits viewable in compare view

Updates eslint-plugin-prettier from 5.5.5 to 5.5.6

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.6

Patch Changes

• #791 b5c96a3 Thanks @​JounQin! - chore: bump all (dev)Dependencies

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.6

Patch Changes

• #791 b5c96a3 Thanks @​JounQin! - chore: bump all (dev)Dependencies

Commits

• 4f33ea5 chore: release eslint-plugin-prettier (#792)
• 4745b54 ci: declare workflow-level contents: read on 2 workflows (#790)
• b5c96a3 chore: bump all (dev)Dependencies (#791)
• e867680 chore(deps): update all dependencies (#766)
• e8e2f7f chore: testing eslint v10 (#779)
• ca076d9 chore: update dev dependencies (#780)
• 42e6369 build(deps): Bump the actions group with 2 updates (#778)
• 53ff214 Remove empty NPM_TOKEN from release.yml
• See full diff in compare view

Updates fs-extra from 11.3.5 to 11.4.0

Changelog

Sourced from fs-extra's changelog.

11.4.0 / 2026-07-23

• Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#925, #1076)

11.3.6 / 2026-06-29

• Fix handling of symlinked destination ancestors in copy/move methods (#1071, #1073)
• Docs typo fixed (#1074)

Commits

• 53a8d1a 11.4.0
• 9c2d3c9 Throw EEXIST when ensureSymlink dest is a broken symlink (#1076)
• 62a4e72 11.3.6
• 01c0ca6 Fix copy/move recursing into source through a symlinked dest ancestor (#1073)
• 7268250 docs: fix typo in README.md (seperate → separately) (#1074)
• 2fd7b6c chore: Add Node 26 to the test matrix (#1072)
• See full diff in compare view

Updates globals from 17.6.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

• Update globals (2026-09-01) (#353) 50a2119
• Add __webpack_layer__ global (#351) 779a11a

---

sindresorhus/globals@v17.11.0...v17.12.0

v17.11.0

• Add react-native globals (#337) 61eafbf

---

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

• Add GM_cookie to Greasemonkey globals (#349) f468407

---

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

• Update globals (2026-08-01) (#348) 5a958ed

---

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

• Update globals (2026-07-01) (#347) 7394811

---

sindresorhus/globals@v17.7.0...v17.8.0

v17.7.0

• Update globals (2026-06-22) (#345) 33b75f9

---

sindresorhus/globals@v17.6.0...v17.7.0

Commits

• 98008c3 17.12.0
• 50a2119 Update globals (2026-09-01) (#353)
• 779a11a Add __webpack_layer__ global (#351)
• 8c59927 17.11.0
• 61eafbf Add react-native globals (#337)
• 7bed4af 17.10.0
• f468407 Add GM_cookie to Greasemonkey globals (#349)
• 8e7b935 17.9.0
• 5a958ed Update globals (2026-08-01) (#348)
• 36c7659 17.8.0
• Additional commits viewable in compare view

Updates nock from 14.0.15 to 14.0.17

Release notes

Sourced from nock's releases.

v14.0.17

14.0.17 (2026-07-30)

Bug Fixes

• remove interceptor from scope.interceptors on nock.removeInterceptor (#2997) (1ee467c)

v14.0.16

14.0.16 (2026-06-26)

Bug Fixes

• guard against AbortSignal-aborted requests in response handler (#2977) (2d68e8a), closes #2949

Commits

• 1ee467c fix: remove interceptor from scope.interceptors on nock.removeInterceptor (#2...
• da20f4b chore(deps): bump actions/checkout from 6 to 7 (#2987)
• 2d68e8a fix: guard against AbortSignal-aborted requests in response handler (#2977)
• See full diff in compare view

Updates playwright from 1.59.1 to 1.63.0

Release notes

Sourced from playwright's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
cli-web-cli	Ready	Preview	Sep 14, 2026 10:02am UTC

[ci-lockfile-regen]

Dependabot Fix Assessment

Package: Group bump of 21 dev dependencies (minor/patch)
Scope: devDependencies
Workspace: root + packages/react-web-cli

What changed upstream

The two packages that caused lint failures after the lockfile was regenerated:

• prettier 3.8.3 → 3.9.6: Changed formatting of union types — now prefers inline style (string | Blob | ArrayBuffer) instead of multi-line when types fit on one line. Affected 13 source/test files.
• @typescript-eslint 8.59.2 → 8.70.0: Tightened the @typescript-eslint/unbound-method rule. The monkey-patching of process.stdin.setRawMode in terminal-diagnostics.ts now triggers the rule because the method was extracted without .bind().

Migration concerns checked

• Peer dependencies: OK
• Type changes: OK
• Config files: OK (prettier config is oclif-inherited, not file-based)
• Module format: OK (all ESM)
• React compatibility: OK — web CLI tests pass
• Monorepo impact: OK — checked root, packages/react-web-cli, and test/e2e files

What broke

• Lint check (Run Tests workflow): eslint-plugin-prettier reported formatting errors in 13 files due to prettier's new inline union type preference, plus one @typescript-eslint/unbound-method error in src/utils/terminal-diagnostics.ts:108.

The initial lockfile mismatch error (the earlier CI run) was already resolved by the fix(deps): regenerate pnpm-lock.yaml commit.

What was fixed

1. Reformatted 13 files with prettier --write to adopt the new inline union type style: src/commands/apps/rules/list.ts, src/commands/channels/occupancy/get.ts, src/commands/init.ts, src/commands/push/batch-publish.ts, src/commands/push/devices/get.ts, src/commands/push/devices/list.ts, src/commands/spaces/occupancy/get.ts, src/commands/spaces/occupancy/subscribe.ts, src/services/config-manager.ts, src/services/skills-attestation-verifier.ts, src/spaces-base-command.ts, packages/react-web-cli/src/TerminalOverlay.tsx, packages/react-web-cli/src/types.ts, plus 4 test files.

2. Fixed unbound-method in terminal-diagnostics.ts: Replaced const originalSetRawMode = stdinWithRaw.setRawMode + originalSetRawMode.call(this, mode) with const originalSetRawMode = stdinWithRaw.setRawMode.bind(stdinWithRaw) + an arrow function wrapper + originalSetRawMode(mode). Preserves identical runtime behaviour.

Verification

• Build: ✅ (pnpm run build)
• Lint: ✅ (0 errors, 10 pre-existing warnings)
• Unit tests: ✅ (188 files, 2644 tests passed)
• Web CLI tests: ✅ (4 files, 57 tests passed)

Notes for reviewer

The 10 remaining lint warnings (@typescript-eslint/no-deprecated for app and currentlyTyping) are pre-existing and unrelated to this bump.

[ci-lockfile-regen]

Dependabot Fix Assessment

Package: Group bump of 21 dev dependencies (patch/minor updates)
Key packages: `prettier` `3.8.3` → `3.9.6`, `@typescript-eslint/eslint-plugin` `8.59.2` → `8.70.0`, `@typescript-eslint/parser` `8.59.2` → `8.70.0`
Scope: devDependencies
Workspace: root

What changed upstream

• prettier 3.9.x: Changed union type formatting — multi-line union types (leading | on separate lines) are now formatted inline. This caused 44 formatting errors across 18 files.
• @typescript-eslint 8.70.0: Stricter unbound-method rule now flags method references extracted without binding (e.g. const fn = obj.method). This caused 1 new lint error in src/utils/terminal-diagnostics.ts.

Migration concerns checked

• Peer dependencies: OK
• Type changes: OK (warnings only — pre-existing @typescript-eslint/no-deprecated for currentlyTyping and app fields)
• Config files: OK
• Module format: OK
• React compatibility: OK
• Monorepo impact: OK (formatting fix also applied to packages/react-web-cli/)

What broke

• Lint check: 44 prettier/prettier formatting errors — union types reformatted by prettier 3.9.x across 18 files
• Lint check: 1 @typescript-eslint/unbound-method error in src/utils/terminal-diagnostics.ts:108 — setRawMode method stored without binding

What was fixed

• Ran eslint --fix to auto-fix all 44 prettier formatting errors
• Fixed unbound-method by using .bind(stdinWithRaw) when storing the setRawMode reference and calling the bound function directly (instead of .call(this, mode))
• Commit: 033fc72a fix(deps): migrate code to prettier 3.9.6 and typescript-eslint 8.70.0

Verification

• Build: ✅
• Lint: ✅ (0 errors, 10 pre-existing warnings)
• Unit tests: ✅
• Web CLI tests: ✅

Notes for reviewer

• The 10 remaining warnings are pre-existing (disabled vitest tests, deprecated currentlyTyping and app fields) — not introduced by this bump.
• No functional changes — all fixes are formatting and linting only.

[ci-lockfile-regen]

Dependabot Fix Assessment

Package: 21 dev-group updates (prettier `3.8.3→3.9.6`, typescript-eslint `8.59.2→8.70.0`, eslint `10.3.0→10.10.0`, vite `8.0.10→8.3.0`, playwright `1.59.1→1.63.0`, and 16 others)
Scope: devDependencies only — formatters, linters, test infrastructure
Workspace: root + `packages/react-web-cli` + `examples/web-cli`

What changed upstream

• All 21 bumped packages are dev/build-time tools. None affect the CLI's runtime behavior.
• No breaking API changes in any of the bumped packages require code migration.

Migration concerns checked

• Peer dependencies: ✅ OK
• Type changes: ✅ OK (no runtime type usage changed)
• Config files: ✅ OK (prior commit already migrated prettier/typescript-eslint config)
• Module format: ✅ OK
• React compatibility: ✅ OK
• Monorepo impact: ✅ OK

What broke

• test/e2e/skills/skills-e2e.test.ts — GitHub API rate limit (403) when the skills install command calls https://api.github.com/repos/ably/agent-skills/releases/latest

  Root cause: Unauthenticated GitHub API calls are capped at 60 req/hour per IP. CI runners share IP ranges and exhaust this. This failure is not caused by the dependency update — it's a pre-existing infrastructure issue that became visible on this run.

What was fixed

1. src/services/skills-downloader.ts (pushed to this branch): When GITHUB_TOKEN env var is set, include it as a Bearer token in GitHub API requests. Authenticated requests have a 5,000 req/hour limit, making rate-limit failures negligible.

2. .github/workflows/e2e-tests.yml (requires human action — see below): Add GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }} to the job's env block so the token is available to the CLI process. GitHub automatically provides this secret in every workflow run.

Action required from reviewer

The GitHub App used here lacks workflows permission and cannot push to .github/workflows/. A human reviewer needs to add one line to .github/workflows/e2e-tests.yml:

    env:
      NO_COLOR: 1
      E2E_ABLY_API_KEY: ${{ secrets.E2E_ABLY_API_KEY }}
      E2E_ABLY_ACCESS_TOKEN: ${{ secrets.E2E_ABLY_ABLY_ACCESS_TOKEN }}
      TERMINAL_SERVER_SIGNING_SECRET: ${{ secrets.TERMINAL_SERVER_SIGNING_SECRET }}
      E2E_TESTS: true
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}   # ← add this line

Without this line, the GITHUB_TOKEN env var won't reach the CLI process and the skills test may still hit rate limits on busy CI days.

Verification

• Build: ✅
• Lint: ✅
• Unit tests: ✅

Notes for reviewer

• The workflow file change is safe — secrets.GITHUB_TOKEN is automatically provisioned by GitHub with read-only default permissions scoped to the repository. It does not expose any user secrets or elevated access.
• Once the workflow line is added and CI re-runs, the skills E2E test should pass consistently.