chore(deps): bump the npm-dependencies group with 4 updates

[dependabot]

Bumps the npm-dependencies group with 4 updates: @oxlint/plugins, oxc-parser, oxlint and prettier.

Updates @oxlint/plugins from 1.86.0 to 1.87.0

Release notes

Sourced from @​oxlint/plugins's releases.

oxlint v1.87.0

🚀 Features

• 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)
• cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)
• 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

• 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)
• 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)
• 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)
• 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)
• e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)
• 3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)
• f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)
• 7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)
• ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#26925) (camc314)

Commits

• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• See full diff in compare view

Updates oxc-parser from 0.152.0 to 0.153.0

Release notes

Sourced from oxc-parser's releases.

oxc crates_v0.153.0

🚀 Features

• 61003c7 minifier: Fold undefined argument in non delegating yield (#27324) (Armano)
• 07833c0 ast: Tie debug_name return lifetime to the underlying AST node (#27295) (sadan)
• adb1139 minifier: Merge import statements against the same module (#25534) (翠)
• cc82598 minifier: Merge import and export statements against the same module (#25533) (翠)
• 1c352ce minifier: Minimize bitwise binary expressions (#27107) (Armano)
• d1a0bcc minifier: Merge statements after terminating if block branches (#26667) (Armano)
• 7a95376 minifier: Merge adjucent if stmt with the same content (#26445) (Armano)

🐛 Bug Fixes

• 6a7d48b parser: Report abstract private field error on modifier (#27314) (camc314)
• 2ff6fb5 parser: Include generator marker in overload diagnostic span (#27313) (camc314)
• 4359a66 parser: Reject TypeScript class modifiers in JavaScript (#27312) (camc314)
• 565d75d minifier: Correct indopedency when processing nested sequences (#27273) (Armano)
• d0b9372 parser: Remove type-dependent tuple rest diagnostics (#27234) (camc314)
• 3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)
• b2793fa parser: Reject module syntax in script (#27220) (leaysgur)
• 5914a24 parser: Report TS1243 for abstract async methods (#27192) (camc314)
• c6c6e5e parser: Report TS1242 for interfaces with abstract modifier (#27191) (camc314)
• dd0bbb9 parser: Avoid duplicate index signature modifier diagnostic (#27190) (camc314)
• 8f61129 regex: Decode escaped capturing group names (#27156) (camc314)
• da1fed2 minifier: Fold conditional expressions with long sequences (#27083) (Armano)
• 0c601f4 isolated-declarations: Allow adding undefined to keyof parameter types (#27173) (Dunqing)
• 4896287 isolated-declarations: Support readonly parameter types (#27009) (sama Pyb)
• 72d62a1 transformer/explicit-resource-management: Transform classic for loop using declarations (#27148) (camc314)
• 4cf9ae2 minifier: Preserve sibling declarations in arguments copy rewrite (#27140) (camc314)
• 24b7015 transformer/explicit-resource-management: Lower using in catch and finally (#27142) (camc314)

⚡ Performance

• 99e3c15 minifier: Small performance improvement when merging imports (#27238) (Armano)
• d37d1db codegen: Pre-allocate sourcemap builder vectors (#27230) (codspeed)
• 466ef10 minifier: Update expressions in place in merge_import_export (#27226) (Armano)
• 028ffb8 minifier: Update nodes in place in wrap_to_avoid_ambiguous_else (#27194) (Armano)
• 6fcd135 minifier: Avoid conversion from ident to str when for substitute symbols (#27209) (Armano)
• 0b9799d minifier: Reduce usage of minimize_conditional (#26028) (Armano)
• 3ca3ded minifier: Short-circuit IfStatement termination on alternate (#25198) (Armano)

📚 Documentation

• 335ce79 agents: Scope verification for local and stacked work (#27299) (Dunqing)

Changelog

Sourced from oxc-parser's changelog.

[0.153.0] - 2026-10-05

🐛 Bug Fixes

• b2793fa parser: Reject module syntax in script (#27220) (leaysgur)

Commits

• 7f56ec9 release(crates): oxc v0.153.0 (#27342)
• 2031896 chore(deps): update dependency @​napi-rs/cli to v3.10.6 (#27272)
• b2793fa fix(parser): reject module syntax in script (#27220)
• See full diff in compare view

Updates oxlint from 1.86.0 to 1.87.0

Release notes

Sourced from oxlint's releases.

oxlint v1.87.0

🚀 Features

• 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)
• cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)
• 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

• 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)
• 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)
• 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)
• 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)
• e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)
• 3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)
• f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)
• 7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)
• ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#26925) (camc314)

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[1.88.0] - 2026-10-13

🚀 Features

• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

Commits

• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: b95ff632-b106-49d3-92f2-17c8aee50fa0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}