chore(deps): bump the npm-dependencies group with 76 updates

[dependabot]

Bumps the npm-dependencies group with 76 updates:

Package	From	To
simple-git	3.28.0	3.36.0
@agentclientprotocol/sdk	0.16.1	0.25.1
@octokit/rest	22.0.0	22.0.1
@vitest/eslint-plugin	1.3.4	1.6.20
esbuild	0.25.0	0.28.1
eslint-config-prettier	10.1.2	10.1.8
eslint-plugin-headers	1.3.3	1.3.4
google-artifactregistry-auth	3.4.0	3.5.0
memfs	4.42.0	4.57.7
mnemonist	0.40.3	0.40.4
msw	2.3.4	2.14.6
prettier	3.5.3	3.8.4
react-dom	19.2.4	19.2.7
@types/react-dom	19.2.0	19.2.3
semver	7.7.2	7.8.4
@types/semver	7.7.0	7.7.1
strip-ansi	7.1.0	7.2.0
tsx	4.20.3	4.22.4
typescript-eslint	8.30.1	8.61.0
node-pty	1.0.0	1.1.0
@a2a-js/sdk	0.3.11	0.3.13
@google-cloud/storage	7.19.0	7.21.0
express	5.1.0	5.2.1
@types/express	5.0.3	5.0.6
fs-extra	11.3.0	11.3.5
tar	7.5.11	7.5.16
@types/tar	6.1.13	7.0.87
winston	3.17.0	3.19.0
supertest	7.1.4	7.2.2
@types/supertest	6.0.3	7.2.0
@modelcontextprotocol/sdk	1.23.0	1.29.0
clipboardy	5.2.1	5.3.1
react	19.2.4	19.2.7
@types/react	19.2.0	19.2.17
shell-quote	1.8.3	1.8.4
string-width	8.1.0	8.2.1
ws	8.16.0	8.21.0
@types/ws	8.5.10	8.18.1
@bufbuild/protobuf	2.11.0	2.12.0
@google-cloud/logging	11.2.1	11.2.2
@grpc/grpc-js	1.14.3	1.14.4
@opentelemetry/api	1.9.0	1.9.1
@opentelemetry/api-logs	0.218.0	0.219.0
@opentelemetry/core	2.7.1	2.8.0
@opentelemetry/exporter-logs-otlp-grpc	0.218.0	0.219.0
@opentelemetry/exporter-logs-otlp-http	0.218.0	0.219.0
@opentelemetry/exporter-metrics-otlp-grpc	0.218.0	0.219.0
@opentelemetry/exporter-metrics-otlp-http	0.218.0	0.219.0
@opentelemetry/exporter-trace-otlp-grpc	0.218.0	0.219.0
@opentelemetry/exporter-trace-otlp-http	0.218.0	0.219.0
@opentelemetry/instrumentation-http	0.218.0	0.219.0
@opentelemetry/otlp-exporter-base	0.218.0	0.219.0
@opentelemetry/resources	2.7.1	2.8.0
@opentelemetry/sdk-logs	0.218.0	0.219.0
@opentelemetry/sdk-metrics	2.7.1	2.8.0
@opentelemetry/sdk-node	0.218.0	0.219.0
@opentelemetry/sdk-trace-base	2.7.1	2.8.0
@opentelemetry/sdk-trace-node	2.7.1	2.8.0
@opentelemetry/semantic-conventions	1.39.0	1.41.1
ajv	8.17.1	8.20.0
fdir	6.4.6	6.5.0
ignore	7.0.0	7.0.5
js-yaml	4.1.1	4.2.0
mime	4.0.7	4.1.0
picomatch	4.0.1	4.0.4
@types/picomatch	4.0.1	4.0.3
systeminformation	5.25.11	5.31.7
tree-sitter-bash	0.25.0	0.25.1
web-tree-sitter	0.25.10	0.26.9
zod-to-json-schema	3.25.1	3.25.2
@types/json-stable-stringify	1.1.0	1.2.0
cors	2.8.5	2.8.6
@types/vscode	1.99.0	1.120.0
@typescript-eslint/eslint-plugin	8.31.1	8.61.0
@typescript-eslint/parser	8.31.1	8.61.0
@vscode/vsce	3.6.0	3.9.2

Updates simple-git from 3.28.0 to 3.36.0

Release notes

Sourced from simple-git's releases.

simple-git@3.36.0

Minor Changes

• 89a2294: Extend known exploitable configuration keys and per-task environment variables.

  Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

  Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

• 1ad57e8: Remove conflicting node:buffer import
• Updated dependencies [89a2294]
• Updated dependencies [675570a]
  • @​simple-git/argv-parser@​1.1.0
  • @​simple-git/args-pathspec@​1.0.3

simple-git@3.35.2

Patch Changes

• 0cf9d8c: Improvements for mono-repo publishing pipeline
• Updated dependencies [0cf9d8c]
  • @​simple-git/args-pathspec@​1.0.2
  • @​simple-git/argv-parser@​1.0.3

simple-git@3.35.1

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

simple-git@3.33.0

Minor Changes

• a263635: Use pathspec wrappers for remote and local paths when running either git.clone or git.mirror to avoid leaving them less open for unexpected outcomes when passing unsanitised data into these tasks.

Patch Changes

• e253a0d: Enhanced git -c checks in unsafe plugin.

  Thanks to @​JohannesLks for identifying the issue

simple-git@3.32.3

Patch Changes

• f704208: Enhanced protocol.allow checks in allowUnsafeExtProtocol handling.

... (truncated)

Changelog

Sourced from simple-git's changelog.

3.36.0

Minor Changes

• 89a2294: Extend known exploitable configuration keys and per-task environment variables.

  Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

  Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

• 1ad57e8: Remove conflicting node:buffer import
• Updated dependencies [89a2294]
• Updated dependencies [675570a]
  • @​simple-git/argv-parser@​1.1.0
  • @​simple-git/args-pathspec@​1.0.3

3.35.2

Patch Changes

• 0cf9d8c: Improvements for mono-repo publishing pipeline
• Updated dependencies [0cf9d8c]
  • @​simple-git/args-pathspec@​1.0.2
  • @​simple-git/argv-parser@​1.0.3

3.35.1

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

3.35.0

Minor Changes

• 3d8708b: Updating publish config

Patch Changes

• Updated dependencies [3d8708b]
  • @​simple-git/args-pathspec@​1.0.1
  • @​simple-git/argv-parser@​1.0.1

3.34.0

... (truncated)

Commits

• 7dc1a53 Version Packages
• 76f5376 Merge pull request #1061 from Vinzent03/fix/buffer-import
• 89a2294 Environment Parsing (#1156)
• 1b91b76 fix: remove explicit node:buffer import
• e390685 Version Packages
• 3c9e4b8 Pin version of @​simple-git/args-pathspec
• 94ee21f Export pathspec types through simple-git for backward compatibility
• 6d7cb51 Version Packages
• 0de400e Switch to semver from workspace revisions
• 2264722 Version Packages
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for simple-git since your current version.

Updates @agentclientprotocol/sdk from 0.16.1 to 0.25.1

Release notes

Sourced from @​agentclientprotocol/sdk's releases.

v0.25.1

0.25.1 (2026-06-13)

Bug Fixes

• cleanup zod generation (#170) (be44483)
• Zod type inference errors (#177) (d9fafa2)

v0.25.0

0.25.0 (2026-06-05)

Features

• schema: stabilize deleteSession (#168) (2cc77af)

v0.24.0

0.24.0 (2026-06-02)

Features

• Add resilient schema deserialization (#167) (5864e73)
• schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

v0.23.0

0.23.0 (2026-06-01)

Features

• schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)

v0.22.1

0.22.1 (2026-05-18)

Bug Fixes

• Event ordering (#153) (7b63226)

v0.22.0

0.22.0 (2026-05-18)

Features

• unstable: Add session delete handling (#152) (f9384f5)
• Update schema to v0.13.2 (#150) (b15960b)

... (truncated)

Changelog

Sourced from @​agentclientprotocol/sdk's changelog.

0.25.1 (2026-06-13)

Bug Fixes

• cleanup zod generation (#170) (be44483)
• Zod type inference errors (#177) (d9fafa2)

0.25.0 (2026-06-05)

Features

• schema: stabilize deleteSession (#168) (2cc77af)

0.24.0 (2026-06-02)

Features

• Add resilient schema deserialization (#167) (5864e73)
• schema: Stabilize addl dirs and remove unstable model selectors (#165) (fa6e302)

0.23.0 (2026-06-01)

Features

• schema: Stabilize logout and update schema to v0.13.4 (#163) (cfd900a)

0.22.1 (2026-05-18)

Bug Fixes

• Event ordering (#153) (7b63226)

0.22.0 (2026-05-18)

Features

• unstable: Add session delete handling (#152) (f9384f5)
• Update schema to v0.13.2 (#150) (b15960b)

0.21.1 (2026-05-14)

Bug Fixes

... (truncated)

Commits

• cd8dc79 chore(main): release 0.25.1 (#171)
• d9fafa2 fix: Zod type inference errors (#177)
• 04c7fd9 chore(deps): bump esbuild from 0.28.0 to 0.28.1 (#176)
• 8d9de29 chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#173)
• 8ca7903 chore(deps): bump crate-ci/typos from 1.47.0 to 1.47.2 (#174)
• 1c6c0b8 chore(deps-dev): bump @​types/node in the minor group (#175)
• be44483 fix: cleanup zod generation (#170)
• c55af88 chore(main): release 0.25.0 (#169)
• 2cc77af feat(schema): stabilize deleteSession (#168)
• 8966c11 chore(main): release 0.24.0 (#166)
• Additional commits viewable in compare view

Updates @octokit/rest from 22.0.0 to 22.0.1

Release notes

Sourced from @​octokit/rest's releases.

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

• deps: update octokit monorepo (major) (#538) (ded2f17)

Commits

• daa3ec9 ci(action): update actions/setup-node action to v6 (#534)
• 1dec0c7 ci(action): update peter-evans/create-or-update-comment action to v5 (#531)
• ded2f17 fix(deps): update octokit monorepo (major) (#538)
• 0e0eaea chore(deps): update dependency @​types/node to v24 (#537)
• c04acc8 chore(deps): update vitest monorepo to v4 (major) (#536)
• e6dd306 chore(deps): update dependency undici to v7 (#474)
• 5f380d0 build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (#520)
• dc6827d build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (#516)
• See full diff in compare view

Updates @vitest/eslint-plugin from 1.3.4 to 1.6.20

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.20

   🐞 Bug Fixes

• hoisted-apis-on-top: Detect vitest.mock and aliased vi/vitest mock calls  -  by @​spokodev in vitest-dev/eslint-plugin-vitest#909 (8fff9)
• require-test-timeout: Treat imported bindings as explicit timeouts  -  by @​spokodev in vitest-dev/eslint-plugin-vitest#906 (bd82c)
• valid-expect: Treat .finally() as part of async assertion promise chains  -  by @​spokodev in vitest-dev/eslint-plugin-vitest#908 (7c697)

    View changes on GitHub

v1.6.19

No significant changes

    View changes on GitHub

v1.6.18

   🐞 Bug Fixes

• Correct requiresTypeChecking metadata for four rules  -  by @​inglec-arista in vitest-dev/eslint-plugin-vitest#905 (e06a3)

    View changes on GitHub

v1.6.17

   🐞 Bug Fixes

• Recommend toBeTypeOf instead of expectTypeOf in prefer-expect-type-of  -  by @​sheremet-va in vitest-dev/eslint-plugin-vitest#896 (a4bcd)
• no-standalone-expect: Allow expect inside vi.defineHelper callbacks  -  by @​nami8824 in vitest-dev/eslint-plugin-vitest#894 (fd8eb)

    View changes on GitHub

v1.6.16

   🚀 Features

• require-test-timeout: Support ancestor traversal  -  by @​hamirmahal in vitest-dev/eslint-plugin-vitest#890 (8110b)

    View changes on GitHub

v1.6.15

What's Changed

• feat: allow same-file const variable timeouts by @​hamirmahal in vitest-dev/eslint-plugin-vitest#888

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.14...v1.6.15

v1.6.14

What's Changed

• chore: bump @​typescript-eslint packages to ^8.58.0 by @​null0rUndefined in vitest-dev/eslint-plugin-vitest#886

New Contributors

• @​null0rUndefined made their first contribution in vitest-dev/eslint-plugin-vitest#886

... (truncated)

Commits

• 9cca3c3 chore: release v1.6.20
• 7c697f8 fix(valid-expect): treat .finally() as part of async assertion promise chains...
• 8fff969 fix(hoisted-apis-on-top): detect vitest.mock and aliased vi/vitest mock calls...
• 7606e1d docs(no-large-snapshots): describe allowSnapshots as a map (#916)
• bd82c7d fix(require-test-timeout): treat imported bindings as explicit timeouts (#906)
• 28bc45f chore: release v1.6.19
• 8566d7f chore: prefer-called-with should report toHaveBeenCalledOnce() (#911)
• 3b428d6 chore: release v1.6.18
• e06a3dc fix: correct requiresTypeChecking metadata for four rules (#905)
• 789966e chore: release v1.6.17
• Additional commits viewable in compare view

Updates esbuild from 0.25.0 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1

• Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

  This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

  Thanks to @​dellalibera for reporting this issue.

• Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

  The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

  Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

  Thanks to @​sondt99 for reporting this issue.

• Avoid inlining using and await using declarations (#4482)

  Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

  // Original code
  {
    using x = new Resource()
    x.activate()
  }
  // Old output (with --minify)
  new Resource().activate();
  // New output (with --minify)
  {using e=new Resource;e.activate()}

• Fix module evaluation when an error is thrown (#4461, #4467)

  If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

• Fix some edge cases around the new operator (#4477)

  Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

  // Original code
  new (foo()`bar`)()
  new (foo()?.bar)()
  // Old output
  new foo()bar();
  new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2025

This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).

0.27.2

• Allow import path specifiers starting with #/ (#4361)

  Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

  This change was contributed by @​hybrist.

• Automatically add the -webkit-mask prefix (#4357, #4358)

  This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

  /* Original code */
  main {
    mask: url(x.png) center/5rem no-repeat
  }
  /* Old output (with --target=chrome110) */
  main {
  mask: url(x.png) center/5rem no-repeat;
  }
  /* New output (with --target=chrome110) */
  main {
  -webkit-mask: url(x.png) center/5rem no-repeat;
  mask: url(x.png) center/5rem no-repeat;
  }

  This change was contributed by @​BPJEnnova.

• Additional minification of switch statements (#4176, #4359)

  This release contains additional minification patterns for reducing switch statements. Here is an example:

  // Original code
  switch (x) {
    case 0:
      foo()
      break
    case 1:
    default:
      bar()
  }

... (truncated)

Commits

• bb9db84 publish 0.28.1 to npm
• 9ff053e security: add integrity checks to the Deno API
• 0a9bf21 enforce non-negative size in gzip parser
• e2a1a71 security: forbid \\ in local dev server requests
• 83a2cbf fix #4482: don't inline using declarations
• 308ad74 fix #4471: renaming of nested var declarations
• f013f5f fix some typos
• aafd6e4 chore: fix some minor issues in comments (#4462)
• 15300c3 follow up: cjs evaluation fixes
• 1bda0c3 fix #4461, fix #4467: esm evaluation fixes
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.

Updates eslint-config-prettier from 10.1.2 to 10.1.8

Release notes

Sourced from eslint-config-prettier's releases.

v10.1.8

republish latest version

Full Changelog: prettier/eslint-config-prettier@v10.1.5...v10.1.8

v10.1.5

Patch Changes

• #332 60fef02 Thanks @​JounQin! - chore: add funding field into package.json

Full Changelog: prettier/eslint-config-prettier@v10.1.4...v10.1.5

v10.1.4

Patch Changes

• #328 94b4799 Thanks @​silvenon! - fix(cli): do not crash on no rules configured

Full Changelog: prettier/eslint-config-prettier@v10.1.3...v10.1.4

v10.1.3

Patch Changes

• #325 4e95a1d Thanks @​pilikan! - fix: this package is commonjs, align its types correctly

New Contributors

• @​pilikan made their first contribution in prettier/eslint-config-prettier#325

Full Changelog: prettier/eslint-config-prettier@v10.1.2...v10.1.3

Changelog

Sourced from eslint-config-prettier's changelog.

eslint-config-prettier

10.1.5

Patch Changes

• #332 60fef02 Thanks @​JounQin! - chore: add funding field into package.json

10.1.4

Patch Changes

• #328 94b4799 Thanks @​silvenon! - fix(cli): do not crash on no rules configured

10.1.3

Patch Changes

• #325 4e95a1d Thanks @​pilikan! - fix: this package is commonjs, align its types correctly

Commits

• 9b0b0a4 fix: release a new latest version
• 4c94893 chore: release eslint-config-prettier (#333)
• 60fef02 chore: add funding field into package.json (#332)
• f55501f chore: release eslint-config-prettier (#329)
• 50a8a22 chore(deps): update all dependencies (#330)
• 94b4799 fix(cli): do not crash on no rules configured (#328)
• cdc4a5c chore: release eslint-config-prettier (#326)
• 4e95a1d fix: this package is commonjs, align its types correctly (#325)
• See full diff in compare view

Updates eslint-plugin-headers from 1.3.3 to 1.3.4

Release notes

Sourced from eslint-plugin-headers's releases.

v1.3.4

• Support ESLint 10.

Full Changelog: robmisasi/eslint-plugin-headers@v1.3.3...v1.3.4

Commits

• c8f8537 1.3.4
• 7a1f7a0 Tweak AST traversal to support ESLint 10. Update dev dependencies.
• d31dee9 Update dev dependencies.
• See full diff in compare view

Updates google-artifactregistry-auth from 3.4.0 to 3.5.0

Release notes

Sourced from google-artifactregistry-auth's releases.

v3.5.0

Add yarn support in GoogleCloudPlatform/artifact-registry-npm-tools#78

Commits

• adf7988 Bump to version v3.5.0 for release
• 36fc4c0 Revert "Bump to version v3.5.0 for release"
• 31f9653 Bump to version v3.5.0 for release
• 9f8b4ad Adding support of .yarnrc.yml to npm tools (#78)
• See full diff in compare view

Updates memfs from 4.42.0 to 4.57.7

Release notes

Sourced from memfs's releases.

Release v4.57.7

What's Changed

• fix: 🐛 do not allow relative paths in snapshot restoration by @​streamich in streamich/memfs#1260

Full Changelog: streamich/memfs@v4.57.6...v4.57.7

Release v4.57.6

Full Changelog: streamich/memfs@v4.57.5...v4.57.6

Release v4.57.5

Full Changelog: streamich/memfs@v4.57.4...v4.57.5

Release v4.57.4

What's Changed

• Add structured documentation for memfs by @​streamich in streamich/memfs#1259

Full Changelog: streamich/memfs@v4.57.3...v4.57.4

Release v4.57.3

What's Changed

• fix: uncomment cpSync and statfsSync in fsSynchronousApiList by @​GoodbyeNJN in streamich/memfs#1256

New Contributors

• @​GoodbyeNJN made their first contribution in streamich/memfs#1256

Full Changelog: streamich/memfs@v4.57.2...v4.57.3

Release v4.57.2

What's Changed

• fix(access): ensure symlinks are followed when checking for executable flag by @​boneskull in streamich/memfs#1253

New Contributors

• @​boneskull made their first contribution in streamich/memfs#1253

Full Changelog: streamich/memfs@v4.57.1...v4.57.2

Release v4.57.1

What's Changed

• fix: EBADF when calling fileHandle.close() after streaming via pipeline by @​Copilot in streamich/memfs#1249

Full Changelog: streamich/memfs@v4.57.0...v4.57.1

Release v4.57.0

What's Changed

• feat: allow injecting custom process implementation for better testability by @​Copilot in streamich/memfs#1248

... (truncated)

Changelog

Sourced from memfs's changelog.

4.54.0 (2026-01-18)

Features

• 🎸 add locking for FSA writable handles (35d3519)

4.53.0 (2026-01-17)

Features

• implement Result type and improve error handling for exists methods (f95531f), closes #1218

4.52.0 (2026-01-15)

Bug Fixes

• 🐛 add deprecated Dirent.path with deprecation notice (ebf8ea9)

Features

• 🎸 add disposable methods to Dir (d237aa9)
• 🎸 add Dirent.parentPath (f72f9fe)

4.51.1 (2025-11-30)

Bug Fixes

• add glob functions to API lists (445f337)

4.51.0 (2025-11-12)

Features

• sort files and folder when using toTreeSync() (673cb7a), closes #1214

4.50.0 (2025-10-28)

Features

• 🎸 improve Node buffer allocation strategy (d1edb3f)
• optimize Node buffer management to prevent O(n^2) overhead (95d6f09)

4.49.0 (2025-10-06)

... (truncated)

Commits

• bbcc695 chore: release v4.57.7
• c67f51e Merge pull request #1260 from streamich/snapshot-fix
• d20c3e9 fix: 🐛 do not allow relative paths in snapshot restoration
• 8a5e792 chore: release v4.57.6
• b204b04 style: 💄 run formatter
• 3af3b90 fix: 🐛 update docs
• b8a82d7 chore: release v4.57.5
• 612be41 fix: distribute docs
• 61073ce chore: release v4.57.4
• 913bbc2 fix: release docs
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for memfs since your current version.

Updates mnemonist from 0.40.3 to 0.40.4

Release notes

Sourced from mnemonist's releases.

v0.40.4

• Fixing LRUMap.setpop & LRUCache.setpop type declaration (@​richardgarnier).

Changelog

Sourced from mnemonist's changelog.

0.40.4

• Fixing LRUMap.setpop & LRUCache.setpop type declaration (@​richardgarnier).

Commits

• 1f2c752 Bump 0.40.4

[github-actions]

📊 PR Size: size/XL

• Lines changed: 7431
• Additions: +3437
• Deletions: -3994
• Files changed: 9

[github-actions]

You already have 7 pull requests open. Please work on getting existing PRs merged before opening more.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml