ci(dev-deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@rebeccastevens/eslint-config	3.6.3 -> 3.7.0					devDependencies	minor
@types/node (source)	18.19.79 -> 18.19.80					devDependencies	patch
codecov/codecov-action	v5.1.2 -> v5.4.0					action	minor
github/accessibility-alt-text-bot	v1.6.0 -> v1.7.1					action	minor
pnpm (source)	10.6.1 -> 10.6.2					packageManager	patch
rollup (source)	4.34.9 -> 4.35.0					devDependencies	minor

---

Release Notes

RebeccaStevens/eslint-config-rebeccastevens (@​rebeccastevens/eslint-config)

v3.7.0

Compare Source

Features

• update (c5821e8)

3.6.3 (2025-02-24)

Bug Fixes

• update deps (517d832)

3.6.2 (2025-02-23)

Bug Fixes

• rely on upstream for turning off rules for prettier (9d2cf76)

3.6.1 (2025-02-19)

Bug Fixes

• remove deprecated rules (3e13442)

codecov/codecov-action (codecov/codecov-action)

v5.4.0

Compare Source

What's Changed

• update wrapper submodule to 0.2.0, add recurse_submodules arg by @​matt-codecov in https://github.com/codecov/codecov-action/pull/1780
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1775
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1776
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1777
• Clarify in README that use_pypi bypasses integrity checks too by @​webknjaz in https://github.com/codecov/codecov-action/pull/1773
• Fix use of safe.directory inside containers by @​Flamefire in https://github.com/codecov/codecov-action/pull/1768
• Fix description for report_type input by @​craigscott-crascit in https://github.com/codecov/codecov-action/pull/1770
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1765
• Fix a typo in the example by @​miranska in https://github.com/codecov/codecov-action/pull/1758
• build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1757
• build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

v5.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

v5.3.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

v5.2.0

Compare Source

What's Changed

• Fix typo in README by @​tserg in https://github.com/codecov/codecov-action/pull/1747
• Th/add commands by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1745
• use correct audience when requesting oidc token by @​juho9000 in https://github.com/codecov/codecov-action/pull/1744
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1742
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1743
• chore(deps): bump wrapper to 0.0.32 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1740
• feat: add disable-telem feature by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1739
• fix: remove erroneous linebreak in readme by @​Vampire in https://github.com/codecov/codecov-action/pull/1734

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

github/accessibility-alt-text-bot (github/accessibility-alt-text-bot)

v1.7.1

Compare Source

What's Changed

• Update README.md with new release version by @​kendallgassner in https://github.com/github/accessibility-alt-text-bot/pull/63
• Bug Fix: add new line between comment id and alt-text-bot message by @​kendallgassner in https://github.com/github/accessibility-alt-text-bot/pull/64

Full Changelog: github/accessibility-alt-text-bot@v1.7.0...v1.7.1

v1.7.0

Compare Source

What's Changed

Docs

• Update README to include latest release version by @​kendallgassner in https://github.com/github/accessibility-alt-text-bot/pull/59
• Update readme to ignore markdown generated by bots by @​kendallgassner in https://github.com/github/accessibility-alt-text-bot/pull/60

Experimental

• Allow users to pass in a custom linting configuration by @​kendallgassner in https://github.com/github/accessibility-alt-text-bot/pull/61

Full Changelog: github/accessibility-alt-text-bot@v1.6.0...v1.7.0

pnpm/pnpm (pnpm)

v10.6.2

Compare Source

Patch Changes

• pnpm self-update should always update the version in the packageManager field of package.json.
• Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.
• pnpm patch-commit will now use the same filesystem as the store directory to compare and create patch files.
• Don't show info output when --loglevel=error is used.
• peerDependencyRules should be set in pnpm-workspace.yaml to take effect.

rollup/rollup (rollup)

v4.35.0

Compare Source

2025-03-08

Features

• Pass build errors to the closeBundle hook (#​5867)

Pull Requests

• #​5852: chore(deps): update dependency eslint-plugin-unicorn to v57 (@​renovate[bot], @​lukastaegert)
• #​5862: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​5867: feat(5858): make closeBundle hook receive the last error (@​GauBen)
• #​5872: chore(deps): update dependency builtin-modules to v5 (@​renovate[bot])
• #​5873: chore(deps): update uraimo/run-on-arch-action action to v3 (@​renovate[bot])
• #​5874: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[graphite-app]

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

• Status: Merge Queue - adds this PR to the back of the merge queue
• Status: Hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.