chore(deps): update dev dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@faker-js/faker (source)	10.5.0 → 10.6.0
@next/env (source)	16.3.0 → 16.3.2
@vitest/coverage-v8 (source)	4.1.10 → 4.1.11
eslint-config-next (source)	16.3.0 → 16.3.2
eslint-config-turbo (source)	2.10.8 → 2.10.11
globals	17.9.0 → 17.11.0
turbo (source)	2.10.8 → 2.10.11
typescript-eslint (source)	8.66.0 → 8.67.0
vitest (source)	4.1.10 → 4.1.11

---

Release Notes

faker-js/faker (@​faker-js/faker)

v10.6.0

Compare Source

New Locales

• locale: add 060 Japanese mobile phone number formats (#​3922) (afa272d)
• locale: add Norwegian (nb_NO) animal module (#​3901) (1232937)
• locale: add Norwegian (nb_NO) food module (#​3900) (bd23594)
• locale: add vehicle data for de (#​3958) (974490f)
• locale: better middle names by gender for en locale (#​3932) (aba3fb1)
• locale: better organize first_name by gender for en (#​3924) (119386b)

Features

• introduce NumberRange type (#​3838) (acd5fda)
• phone: mobile styles for more locales (#​3902) (1107eab)

Changed Locales

• locale: add en_NP and change ne to Devangari (#​3868) (fc788cc)
• locale: normalize phone_number data (#​3518) (9a1cb7d)

Bug Fixes

• apidocs: scope code group tab identifiers (#​3976) (3125eaf)
• color: give the LCH hue its full 360 degree range (#​3978) (1ce5994)
• color: stop scaling the HSLA alpha into a percentage (#​3979) (1143329)
• groupBy handling for prototype property keys (#​3906) (c898ff1)
• internet: exclude reserved port 0 from internet.port() (#​3948) (d4b35a4)
• internet: generate long passwords without stack overflow (#​3946) (4782978)
• internet: validate CIDR prefix length and octet range in ipv4() (#​3933) (15cb8fb)
• locale: exclude forbidden letter combinations from nl postcodes (#​3888) (9bebe67)
• locale: only generate valid French postal codes (#​3905) (711f36f)
• locale: update nl_BE phone number patterns (#​3981) (9616076)
• locale: use only common surnames for zh_CN last names (#​3938) (58394eb)
• locale: use only valid letters in en_CA postcodes (#​3951) (3b184d6)
• string: reject refDates that a ULID timestamp cannot encode (#​3982) (81717bc)
• vehicle: calculate VIN check digit (#​3954) (a4c6757)
• word: pick nearest length for closest strategy (#​3943) (42fd322)

vercel/next.js (@​next/env)

v16.3.2

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [backport] Scope app-entry export validation to files inside the app directory (#​97357)
• [backport] Fix catch-all index page being served for every other slug (#​97416)
• [16.3] Turbopack: don't trace embedded WASM loader helpers (#​97353) (#​97463)
• [16.3] Turbopack: retain conditions when replacing resolve request keys (#​97453)
• [16.3.x] Fix Turbopack worker chunk loading with asset prefix (#​97419)
• [16.3.x] Authenticate Turborepo remote caching with OIDC instead of a static PAT (#​97603)

Credits

Huge thanks to @​lubieowoce, @​unstubbable, @​timneutkens, @​mischnic, and @​eps1lon for helping!

v16.3.1

Compare Source

What's Changed

• [16.x] Turbopack: don't strip async-module runtime from shared runtime chunks by @​lukesandberg in #​96653
• [16.x] [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions by @​lukesandberg in #​96655
• [16.x] [turbopack] Collapse nested promises in the analyzer by @​sampoder in #​96675
• [16.x] fix(next/image): preserve image response after optimization by @​styfle in #​96733
• [16.3.x] Default deploy e2e tests to the repo next version by @​eps1lon in #​96900
• [backport] Bump @​swc/helpers by @​mischnic in #​96885
• [backport] [turbopack] Raise registration calls in hoisted modules to the top by @​lukesandberg in #​97308
• [backport] Fix missing styled-jsx styles in Pages Router SSR on adapter builds by @​lukesandberg in #​97302
• [backport] [turbopack] Fix HMR for dynamic imports evaluated from layouts by @​lukesandberg in #​97317
• [backport] Restore the live headers() view of the incoming request by @​unstubbable in #​97311
• [backport] Allow literal exports in 'use cache' files by @​unstubbable in #​97312
• [backport] Keep the dev validation worker alive across HMR updates by @​unstubbable in #​97315
• [backport] Discard only cache entries that predate a tag revalidation, and reuse completed entries by @​unstubbable in #​97314
• [backport] Encode the cache item name built by unstable_cache by @​unstubbable in #​97313
• [16.3] [ci] Use OIDC tokens to read private preview builds by @​eps1lon in #​97258
• [backport] [test] Compile the middleware redirect routes up front in dev by @​lukesandberg in #​97328
• [backport] Fix Nav Inspector request loop on repeat captures by @​acdlite in #​97326
• [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops by @​acdlite in #​97325
• [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fallback by @​lukesandberg in #​97304
• [backport] Revert i18n localization change for dynamic Pages API routes (#​94905) by @​gaojude in #​97330

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.11

Compare Source

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in #​10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in #​10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in #​10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in #​10974 (fe5a1)

    View changes on GitHub

vercel/turborepo (eslint-config-turbo)

v2.10.11: Turborepo v2.10.11

Compare Source

What's Changed

Changelog

• chore: Release Turborepo 2.10.10 by @​github-actions[bot] in #​13741
• fix: Automatically approve release workflows by @​anthonyshew in #​13743
• chore: Release Turborepo 2.10.11-canary.1 by @​github-actions[bot] in #​13744
• fix: Avoid repeated strict entrypoint traversal by @​anthonyshew in #​13745
• chore: Release Turborepo 2.10.11-canary.2 by @​github-actions[bot] in #​13747
• feat: Cache native uv tool tasks by @​anthonyshew in #​13748
• chore: Release Turborepo 2.10.11-canary.3 by @​github-actions[bot] in #​13749
• fix: Isolate concurrent generator config bundles by @​anthonyshew in #​13750
• chore: Forbid release-age exclusions in examples maintenance by @​anthonyshew in #​13751
• fix: Respect gitignore without git metadata by @​anthonyshew in #​13756
• chore: Release Turborepo 2.10.11-canary.4 by @​github-actions[bot] in #​13759
• feat: Expand performance agent toolbox by @​anthonyshew in #​13761
• docs: Redesign Turborepo homepage by @​christopherkindl in #​13702
• fix: Tolerate transient input files by @​anthonyshew in #​13734

Full Changelog: vercel/turborepo@v2.10.10...v2.10.11

v2.10.10: Turborepo v2.10.10

Compare Source

What's Changed

Changelog

• chore: Release Turborepo 2.10.9 by @​github-actions[bot] in #​13696
• docs: Update Geistdocs to 1.19.6 by @​molebox in #​13701
• feat: Support nub.lock files by @​akshat-OwO in #​13699
• chore: Release Turborepo 2.10.10-canary.1 by @​github-actions[bot] in #​13703
• perf: Walk the repository once when pruning by @​anthonyshew in #​13705
• fix(deps): Upgrade js-yaml to 4.3.1 (GHSA-5p4m-2wfm-xmqj) by @​anthonyshew in #​13704
• chore: Move pnpm overrides to pnpm-workspace.yaml by @​anthonyshew in #​13706
• chore: Release Turborepo 2.10.10-canary.2 by @​github-actions[bot] in #​13707
• fix: Enable Eve examples pull requests by @​anthonyshew in #​13708
• feat: Add Eve operator dashboard by @​anthonyshew in #​13710
• fix: Remove unsupported sandbox network policy by @​anthonyshew in #​13712
• feat: Rotate Eve example maintenance daily by @​anthonyshew in #​13715
• fix: Resolve agent lint errors by @​anthonyshew in #​13716
• chore: Upgrade TypeScript to 7.0.2 by @​anthonyshew in #​13713
• fix(cli): Move EXPERIMENTAL label from ls command to --output flag by @​okxint in #​13709
• fix: Apply nested parent gitignore patterns in manual hashing by @​alexey-yunoshev-1 in #​13690
• feat: Add pytest task discovery by @​anthonyshew in #​13720
• chore: Release Turborepo 2.10.10-canary.3 by @​github-actions[bot] in #​13721
• chore: Validate updated examples with turbo by @​anthonyshew in #​13723
• chore: Update with-rollup example by @​vercel-gh-bot-3[bot] in #​13718
• feat: Notify Slack when agents open PRs by @​anthonyshew in #​13722
• chore: Enforce draft pull requests by @​anthonyshew in #​13726
• fix: Expose Slack delivery diagnostics by @​anthonyshew in #​13733
• chore: Update non-monorepo example by @​vercel-gh-bot-2[bot] in #​13727
• chore: Update with-rsbuild example by @​vercel-gh-bot-3[bot] in #​13730
• feat: Add daily performance agent by @​anthonyshew in #​13729
• feat: Support cross-toolchain repository affectedness by @​anthonyshew in #​13737
• fix: Scope musl library dependency installation by @​anthonyshew in #​13738
• chore: Release Turbo repository packages 0.0.1-canary.24 by @​github-actions[bot] in #​13739
• fix(bun): Preserve overrides objects, trustedDependencies, workspace bins and git integrity through prune; accept lockfileVersion 3 by @​Jarred-Sumner in #​13740

New Contributors

• @​akshat-OwO made their first contribution in #​13699
• @​okxint made their first contribution in #​13709
• @​alexey-yunoshev-1 made their first contribution in #​13690
• @​vercel-gh-bot-3[bot] made their first contribution in #​13718
• @​vercel-gh-bot-2[bot] made their first contribution in #​13727
• @​Jarred-Sumner made their first contribution in #​13740

Full Changelog: vercel/turborepo@v2.10.9...v2.10.10

v2.10.9: Turborepo v2.10.9

Compare Source

What's Changed

Changelog

• chore: Release Turborepo 2.10.8 by @​github-actions[bot] in #​13626
• perf: Walk literal-prefix tree globs without wax compilation by @​charpeni in #​13522
• fix: Accept semver ranges in devEngines.packageManager.version by @​bangseongbeom in #​13623
• docs: Explain affected package invalidation reasons by @​ghoullier in #​13594
• perf(lockfiles): Borrow field-name scalars in the pnpm fast parser by @​anthonyshew in #​13648
• perf(repository): Avoid discarded alias allocation in Relationship by @​anthonyshew in #​13650
• perf(lockfiles): Drop redundant human_name clone for pnpm v7/v9 by @​anthonyshew in #​13649
• perf: Index workspace nodes by name in project_relationships by @​anthonyshew in #​13647
• perf: Share resolution identity lists across identical workspace closures by @​anthonyshew in #​13641
• docs: Fix duplicated word in runtime dependencies guide summary by @​anthonyshew in #​13630
• refactor: Remove turborepo-lsp dependency on turborepo-lib by @​anthonyshew in #​13631
• perf: Index Bun nested lockfile entries by name for fallback resolution by @​anthonyshew in #​13633
• perf: Memoize framework inference per package during task hashing by @​anthonyshew in #​13634
• perf: Avoid materializing transient declarations in external_dependencies by @​anthonyshew in #​13646
• perf: Enable shared closure DP for npm and yarn1 lockfiles by @​anthonyshew in #​13635
• perf: Parse pnpm explicit-key entries in the lockfile fast path by @​anthonyshew in #​13640
• perf: Parallelize resolution fingerprint hashing by @​anthonyshew in #​13642
• perf: Build resolution identity lists in parallel by @​anthonyshew in #​13643
• perf: Intern resolution identities as Arc<str> across closures by @​anthonyshew in #​13645
• fix: Compose affected tasks with package filters by @​anthonyshew in #​13656
• docs: Explain worktree cache path isolation by @​anthonyshew in #​13657
• fix: Upgrade brace-expansion to 5.0.9 by @​anthonyshew in #​13658
• docs: Correct verified inaccuracies in the Turborepo Agent Skill by @​charpeni in #​13644
• chore: Update Next.js to 16.3.0 by @​anthonyshew in #​13659
• fix: Don't use eprintln! in the panic hook by @​molofsky in #​13637
• fix: Invalidate only when Git ignore sources change by @​smasato in #​13632
• docs: Update Geistdocs to 1.19.4 by @​christopherkindl in #​13680
• docs: Exclude Turborepo from its own OSS products menu by @​christopherkindl in #​13681
• docs: Use the geistdocs Turborepo logo in the navbar by @​christopherkindl in #​13682
• docs: Update redirected vercel.com/nextjs.org links to current targets by @​molebox in #​13685
• refactor: Generalize native command arguments by @​anthonyshew in #​13664
• refactor: Move native contracts to tasks by @​anthonyshew in #​13665
• docs: Fix loadTransformers reference in turbo-codemod README by @​latent-9 in #​13683
• refactor: Model native task execution explicitly by @​anthonyshew in #​13666
• feat: Compose aggregate native task dependencies by @​anthonyshew in #​13667
• fix: Respect aggregate task overrides by @​anthonyshew in #​13668
• test: Stabilize watch task inputs regression test by @​anthonyshew in #​13686
• feat: Parse Python quality tool declarations by @​anthonyshew in #​13669
• feat: Resolve Python quality plans by @​anthonyshew in #​13670
• refactor: Extract uv native task specs by @​anthonyshew in #​13671
• feat: Synthesize Python quality tasks by @​anthonyshew in #​13672
• test: Cover Python quality task commands by @​anthonyshew in #​13673
• feat: Hash Python quality task inputs by @​anthonyshew in #​13674
• test: Cover Python quality task graph by @​anthonyshew in #​13675
• chore: Release Turborepo 2.10.9-canary.1 by @​github-actions[bot] in #​13687
• docs: Document dependency-driven Python tasks by @​anthonyshew in #​13676
• fix: Prune Bun wildcard workspace dev dependencies by @​anthonyshew in #​13694
• fix: Prevent Windows process cleanup PID reuse by @​anthonyshew in #​13695

New Contributors

• @​bangseongbeom made their first contribution in #​13623
• @​ghoullier made their first contribution in #​13594
• @​molofsky made their first contribution in #​13637
• @​smasato made their first contribution in #​13632
• @​latent-9 made their first contribution in #​13683

Full Changelog: vercel/turborepo@v2.10.8...v2.10.9

sindresorhus/globals (globals)

v17.11.0

Compare Source

v17.10.0

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.67.0

Compare Source

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#​12105)

❤️ Thank You

• Claude Sonnet 5
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.