chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	^20.8.3 -> ^20.8.10
eslint (source)	^8.51.0 -> ^8.53.0
pnpm (source)	8.8.0 -> 8.10.2

---

Release Notes

eslint/eslint (eslint)

v8.53.0

Compare Source

Features

• 528e1c0 feat: Deprecate formatting rules (#​17696) (Nicholas C. Zakas)
• c0b11dd feat: Add suggestions for no-prototype-builtins (#​17677) (Yonathan Randolph)

Bug Fixes

• 1ad6257 fix: ensure that exit code for fatal errors is not overwritten (#​17683) (Milos Djermanovic)
• b329ea7 fix: add ; after JSX nodes in no-object-constructor autofix (#​17672) (Francesco Trotta)

Documentation

• ab8c60d docs: change position of return to top button (#​17688) (Tanuj Kanti)
• 4fc44c0 docs: update twitter icon to new X icon (#​17687) (Tanuj Kanti)
• 4164b2c docs: Update README (GitHub Actions Bot)
• 8651895 docs: Fix tabs in rule examples (#​17653) (Francesco Trotta)
• 3aec1c5 docs: explained rule fixers and suggestions (#​17657) (Josh Goldberg ✨)

Chores

• ba4d4d5 chore: remove metascraper (#​17707) (Milos Djermanovic)
• 0d07338 chore: Update dependencies (#​17706) (Milos Djermanovic)
• 93256a3 chore: package.json update for @​eslint/js release (ESLint Jenkins)
• 485ec7d test: fix ESLint tests for caching (#​17699) (Milos Djermanovic)
• db06a7f ci: bump actions/setup-node from 3 to 4 (#​17676) (dependabot[bot])
• 994596b ci: run tests in Node.js 21 (#​17673) (Francesco Trotta)

v8.52.0

Compare Source

Features

• 70648ee feat: report-unused-disable-directive to report unused eslint-enable (#​17611) (Yosuke Ota)

Bug Fixes

• 5de9637 fix: Ensure shared references in rule configs are separated (#​17666) (Nicholas C. Zakas)
• dcfe573 fix: add preceding semicolon in suggestions of no-object-constructor (#​17649) (Francesco Trotta)

Documentation

• 476d58a docs: Add note about invalid CLI flags when using flat config. (#​17664) (Nicholas C. Zakas)
• 660ed3a docs: Plugin flat config migration guide (#​17640) (Nicholas C. Zakas)
• a58aa20 docs: fix examples for several rules (#​17645) (Milos Djermanovic)
• 179929b docs: Remove trailing newline from the code of Playground links (#​17641) (Francesco Trotta)
• f8e5c30 docs: Update README (GitHub Actions Bot)
• b7ef2f3 docs: Enable pretty code formatter output (#​17635) (Nicholas C. Zakas)
• 0bcb9a8 docs: Fix syntax errors in rule examples (#​17633) (Francesco Trotta)
• 61b9083 docs: Make no-continue example code work (#​17643) (Zhongyuan Zhou)
• 9fafe45 docs: upgrade to 11ty 2.0 (#​17632) (Percy Ma)
• ff8e4bf docs: Update README (GitHub Actions Bot)
• fab249a docs: Update README (GitHub Actions Bot)
• 392305b docs: Update no-irregular-whitespace and fix examples (#​17626) (Francesco Trotta)
• 6b8acfb docs: Add real whitespace to no-trailing-spaces examples (#​17630) (Francesco Trotta)
• 1000187 docs: Fix examples in unicode-bom (#​17631) (Francesco Trotta)
• 000290c docs: Update README (GitHub Actions Bot)

Chores

• 6d1f0c2 chore: upgrade @​eslint/js@​8.52.0 (#​17671) (Milos Djermanovic)
• d63d4fe chore: package.json update for @​eslint/js release (ESLint Jenkins)
• f30cefe test: fix FlatESLint tests for caching (#​17658) (Milos Djermanovic)
• ef650cb test: update tests for no-promise-executor-return (#​17661) (Milos Djermanovic)

pnpm/pnpm (pnpm)

v8.10.2

Compare Source

Patch Changes

• Fixed a regression that was shipped with pnpm v8.10.0. Dependencies that were already built should not be rebuilt on repeat install. This issue was introduced via the changes related to supportedArchitectures. Related issue #​7268.

Our Gold Sponsors

Our Silver Sponsors

v8.10.1

Compare Source

Patch Changes

• (Important) Tarball resolutions in pnpm-lock.yaml will no longer contain a registry field. This field has been unused for a long time. This change should not cause any issues besides backward compatible modifications to the lockfile #​7262.
• Fix issue when trying to use pnpm dlx in the root of a Windows Drive #​7263.
• Optional dependencies that do not have to be built will be reflinked (or hardlinked) to the store instead of copied #​7046.
• If a package's tarball cannot be fetched, print the dependency chain that leads to the failed package #​7265.
• After upgrading one of our dependencies, we started to sometimes have an error on publish. We have forked @npmcli/arborist to patch it with a fix #​7269.

Our Gold Sponsors

Our Silver Sponsors

v8.10.0

Compare Source

Minor Changes

• Support for multiple architectures when installing dependencies #​5965.

  You can now specify architectures for which you'd like to install optional dependencies, even if they don't match the architecture of the system running the install. Use the supportedArchitectures field in package.json to define your preferences.

  For example, the following configuration tells pnpm to install optional dependencies for Windows x64:

  {
    "pnpm": {
      "supportedArchitectures": {
        "os": ["win32"],
        "cpu": ["x64"]
      }
    }
  }

  Whereas this configuration will have pnpm install optional dependencies for Windows, macOS, and the architecture of the system currently running the install. It includes artifacts for both x64 and arm64 CPUs:

  {
    "pnpm": {
      "supportedArchitectures": {
        "os": ["win32", "darwin", "current"],
        "cpu": ["x64", "arm64"]
      }
    }
  }

  Additionally, supportedArchitectures also supports specifying the libc of the system.

• The pnpm licenses list command now accepts the --filter option to check the licenses of the dependencies of a subset of workspace projects #​5806.

Patch Changes

• Allow scoped name as bin name #​7112.

• When running scripts recursively inside a workspace, the logs of the scripts are grouped together in some CI tools. (Only works with --workspace-concurrency 1)

• Print a warning when installing a dependency from a non-existent directory #​7159

• Should fetch dependency from tarball url when patching dependency installed from git #​7196

• pnpm setup should add a newline at the end of the updated shell config file #​7227.

• Improved the performance of linking bins of hoisted dependencies to node_modules/.pnpm/node_modules/.bin #​7212.

• Wrongful ELIFECYCLE error on program termination #​7164.

• pnpm publish should not pack the same file twice sometimes #​6997.

  The fix was to update npm-packlist to the latest version.

Our Gold Sponsors

Our Silver Sponsors

v8.9.2

Compare Source

Patch Changes

• Don't use reflink on Windows #​7186.
• Do not run node-gyp rebuild if preinstall lifecycle script is present #​7206.

Our Gold Sponsors

Our Silver Sponsors

v8.9.1

Compare Source

Patch Changes

• Optimize selection result output of pnpm update --interactive 7109
• When shared-workspace-lockfile is set to false, read the pnpm settings from package.json files that are nested. This was broken in pnpm v8.9.0 #​7184.
• Fix file cloning to node_modules on Windows Dev Drives #​7186. This is a fix to a regression that was shipped with v8.9.0.
• pnpm dlx should ignore any settings that are in a package.json file found in the current working directory #​7198.

Our Gold Sponsors

Our Silver Sponsors

v8.9.0

Compare Source

Minor Changes

• 🚀Performance improvement: Use reflinks instead of hard links by default on macOS and Windows Dev Drives #​5001.

• The list of packages that are allowed to run installation scripts now may be provided in a separate configuration file. The path to the file should be specified via the pnpm.onlyBuiltDependenciesFile field in package.json. For instance:

  {
    "dependencies": {
      "@​my-org/policy": "1.0.0"
    }
    "pnpm": {
      "onlyBuiltDependenciesFile": "node_modules/@​my-org/policy/allow-build.json"
    }
  }

  In the example above, the list is loaded from a dependency. The JSON file with the list should contain an array of package names. For instance:

  ["esbuild", "@​reflink/reflink"]

  With the above list, only esbuild and @reflink/reflink will be allowed to run scripts during installation.

  Related issue: #​7137.

• Add disallow-workspace-cycles option to error instead of warn about cyclic dependencies

• Allow env rm to remove multiple node versions at once, and introduce env add for installing node versions without setting as default #​7155.

Patch Changes

• Fix memory error in pnpm why when the dependencies tree is too big, the command will now prune the tree to just 10 end leafs and now supports --depth argument #​7122.
• Use neverBuiltDependencies and onlyBuiltDependencies from the root package.json of the workspace, when shared-workspace-lockfile is set to false #​7141.
• Optimize peers resolution to avoid out-of-memory exceptions in some rare cases, when there are too many circular dependencies and peer dependencies #​7149.
• Instead of pnpm.overrides replacing resolutions, the two are now merged. This is intended to make it easier to migrate from Yarn by allowing one to keep using resolutions for Yarn, but adding additional changes just for pnpm using pnpm.overrides.

Our Gold Sponsors

Our Silver Sponsors

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov]

Codecov Report

Merging #184 (8d4171b) into main (57e1487) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #184   +/-   ##
=======================================
  Coverage   95.11%   95.11%           
=======================================
  Files           7        7           
  Lines         840      840           
  Branches      180      180           
=======================================
  Hits          799      799           
  Misses         41       41