Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/checkout	action	minor	v4.1.1 -> v4.2.2
actions/setup-node	action	minor	v4.0.2 -> v4.2.0
actions/upload-artifact	action	minor	v4.3.1 -> v4.6.0
coverallsapp/github-action	action	minor	v2.2.3 -> v2.3.6
css-loader	devDependencies	major	^6.5.1 -> ^7.0.0
eslint (source)	devDependencies	major	^8.0.0 -> ^9.0.0
eslint-plugin-jest	devDependencies	major	^27.0.0 -> ^28.0.0
github/codeql-action	action	minor	v3.24.3 -> v3.28.8
ossf/scorecard-action	action	minor	v2.3.1 -> v2.4.0
step-security/harden-runner	action	minor	v2.7.0 -> v2.10.4
style-loader	devDependencies	major	^3.3.0 -> ^4.0.0
webpack-cli (source)	devDependencies	major	^5.0.0 -> ^6.0.0

---

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in https://github.com/actions/checkout/pull/1732

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1692
• Add dependabot config by @​cory-miller in https://github.com/actions/checkout/pull/1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in https://github.com/actions/checkout/pull/1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in https://github.com/actions/checkout/pull/1643

v4.1.3

Compare Source

What's Changed

• Update actions/checkout version in update-main-version.yml by @​jww3 in https://github.com/actions/checkout/pull/1650
• Check git version before attempting to disable sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1656
• Add SSH user parameter by @​cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in https://github.com/actions/checkout/pull/1598

actions/setup-node (actions/setup-node)

v4.2.0

Compare Source

v4.1.0

Compare Source

v4.0.4

Compare Source

v4.0.3

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

• Expose env vars to control concurrency and timeout by @​yacaovsnc in https://github.com/actions/upload-artifact/pull/662

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

v4.4.3

Compare Source

What's Changed

• Undo indirect dependency updates from #​627 by @​joshmgross in https://github.com/actions/upload-artifact/pull/632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

• Bump @actions/artifact to 2.1.11 by @​robherley in https://github.com/actions/upload-artifact/pull/627
  • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in https://github.com/actions/upload-artifact/pull/607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/upload-artifact/pull/621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in https://github.com/actions/upload-artifact/pull/625

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/upload-artifact/pull/621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

v4.3.6

Compare Source

v4.3.5

Compare Source

v4.3.4

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in https://github.com/actions/upload-artifact/pull/584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

v4.3.3

Compare Source

What's Changed

• updating @actions/artifact dependency to v2.1.6 by @​eggyhead in https://github.com/actions/upload-artifact/pull/565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

• Update release-new-action-version.yml by @​konradpabjan in https://github.com/actions/upload-artifact/pull/516
• Minor fix to the migration readme by @​andrewakim in https://github.com/actions/upload-artifact/pull/523
• Update readme with v3/v2/v1 deprecation notice by @​robherley in https://github.com/actions/upload-artifact/pull/561
• updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @​eggyhead in https://github.com/actions/upload-artifact/pull/562

New Contributors

• @​andrewakim made their first contribution in https://github.com/actions/upload-artifact/pull/523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

coverallsapp/github-action (coverallsapp/github-action)

v2.3.6

Compare Source

What's Changed

• Explicitly set auto-detect as default for platform by @​fredden in https://github.com/coverallsapp/github-action/pull/240

Full Changelog: coverallsapp/github-action@v2...v2.3.6

v2.3.5

Compare Source

What's Changed

• Automatically detect the platform to install by @​fredden in https://github.com/coverallsapp/github-action/pull/238
• README/Inputs: list all (non-deprecated) inputs by @​jrfnl in https://github.com/coverallsapp/github-action/pull/239

New Contributors

• @​fredden made their first contribution in https://github.com/coverallsapp/github-action/pull/238
• @​jrfnl made their first contribution in https://github.com/coverallsapp/github-action/pull/239

Full Changelog: coverallsapp/github-action@v2...v2.3.5

v2.3.4

Compare Source

What's Changed

• Add coverage-reporter-platform input option by @​afinetooth in https://github.com/coverallsapp/github-action/pull/233
  • Since we have added support for coverage-reporter on aarch64, we need to provide users of our github-action the ability to select this architecture-specific version of coverage-reporter when they're using an aarch64 / arm64 runner in CI.

Full Changelog: coverallsapp/github-action@v2...v2.3.4

v2.3.3

Compare Source

What's Changed

• Make sure the major version tag always points to the latest release (fixes #​222) by @​afinetooth in https://github.com/coverallsapp/github-action/pull/230

Full Changelog: coverallsapp/github-action@v2...v2.3.3

v2.3.2

Compare Source

What's Changed

• Verify that coverage-reporter-version option is recognized by @​afinetooth in https://github.com/coverallsapp/github-action/pull/229
• Add build-number to supported inputs options by @​afinetooth and @​brianatgather in https://github.com/coverallsapp/github-action/pull/228
• Change sha256sum command flag to be compatible with alpine linux distros by @​afinetooth and @​jdebbink in https://github.com/coverallsapp/github-action/pull/227
• Docs: Fix the action version in usage example by @​Jeff-Tian in https://github.com/coverallsapp/github-action/pull/210

New Contributors

• @​brianatgather made their first contribution in https://github.com/coverallsapp/github-action/pull/228 / https://github.com/coverallsapp/github-action/pull/199
• @​jdebbink made their first contribution in https://github.com/coverallsapp/github-action/pull/227 / https://github.com/coverallsapp/github-action/pull/198
• @​Jeff-Tian made their first contribution in https://github.com/coverallsapp/github-action/pull/210

Full Changelog: coverallsapp/github-action@v2.3.1...v2.3.2

v2.3.1

Compare Source

What's Changed

Extend behavior of fail-on-error option to setup failures by @​afinetooth in https://github.com/coverallsapp/github-action/pull/226

• Technically an enhancement, these changes make the action behave as many customers already expect by ignoring any and all failures when the fail-on-error input is set to false.

• Adds logic to handle any failures in "setup" tasks, including downloading the coverage-reporter binary, verifying the binary, and finding the binary by its expected name after extraction.

• The new logic checks these actions and exits with code 1 on failure, except if fail-on-error is set to true, in which case it returns exit code 0.

• Adds a matrix workflow that tests the action for each os and the two key binary commands (coveralls report and coevralls done). Each of these scenarios implicitly tests our setup tasks since they run first in each scenario.

• Also extends the behavior of debug: true to flip the shell-specific debug flag for each os including set -x for linux and macos and Set-PSDebug -Trace 1 for windows.

Full Changelog: coverallsapp/github-action@v2.3.0...v2.3.1

v2.3.0

Compare Source

What's Changed

• Set default values as strings per GH Action requirements by @​littleforest in https://github.com/coverallsapp/github-action/pull/204
• Allow pinning of coverage reporter version by @​littleforest in https://github.com/coverallsapp/github-action/pull/208

New Contributors

• @​littleforest made their first contribution in https://github.com/coverallsapp/github-action/pull/204

Full Changelog: coverallsapp/github-action@v2.2.3...v2.3.0

webpack-contrib/css-loader (css-loader)

v7.1.2

Compare Source

v7.1.1

Compare Source

v7.1.0

Compare Source

Features

• added the getJSON option to output CSS modules mapping (#​1577) (af834b4)

v7.0.0

Compare Source

⚠ BREAKING CHANGES

• The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:

import style from "./style.css";

console.log(style.myClass);

After:

import * as style from "./style.css";

console.log(style.myClass);

• The modules.exportLocalsConvention has the value as-is when the modules.namedExport option is true and you don't specify a value
• Minimum supported webpack version is 5.27.0
• Minimum supported Node.js version is 18.12.0

Features

• The modules.namedExports option works fine with any modules.exportLocalsConvention values (f96a110)
• Added dashed variants for the modules.exportLocalsConvention options (40e1668)

v6.11.0

Compare Source

Features

• supports multiple composes (#​1582) (bbca614)

Bug Fixes

• do not break @scope at-rule without params (#​1581) (e022e3b)

eslint/eslint (eslint)

v9.19.0

Compare Source

v9.18.0

Compare Source

v9.17.0

Compare Source

v9.16.0

Compare Source

Features

• 8f70eb1 feat: Add ignoreComputedKeys option in sort-keys rule (#​19162) (Milos Djermanovic)

Documentation

• 9eefc8f docs: fix typos in use-isnan (#​19190) (루밀LuMir)
• 0c8cea8 docs: switch the order of words in no-unreachable (#​19189) (루밀LuMir)
• 0c19417 docs: add missing backtick to no-async-promise-executor (#​19188) (루밀LuMir)
• 8df9276 docs: add backtick in -0 in description of no-compare-neg-zero (#​19186) (루밀LuMir)
• 7e16e3f docs: fix caseSensitive option's title of sort-keys (#​19183) (Tanuj Kanti)
• 0c6b842 docs: fix typos in migration-guide.md (#​19180) (루밀LuMir)
• 353266e docs: fix a typo in debug.md (#​19179) (루밀LuMir)
• 5ff318a docs: delete unnecessary horizontal rule(---) in nodejs-api (#​19175) (루밀LuMir)
• 576bcc5 docs: mark more rules as handled by TypeScript (#​19164) (Tanuj Kanti)
• 742d054 docs: note that no-restricted-syntax can be used with any language (#​19148) (Milos Djermanovic)

Chores

• feb703b chore: upgrade to @eslint/js@9.16.0 (#​19195) (Francesco Trotta)
• df9bf95 chore: package.json update for @​eslint/js release (Jenkins)
• f831893 chore: add type for ignoreComputedKeys option of sort-keys (#​19184) (Tanuj Kanti)
• 3afb8a1 chore: update dependency @​eslint/json to ^0.8.0 (#​19177) (Milos Djermanovic)
• 1f77c53 chore: add repository.directory property to package.json (#​19165) (루밀LuMir)
• d460594 chore: update dependency @​arethetypeswrong/cli to ^0.17.0 (#​19147) (renovate[bot])
• 45cd4ea refactor: update default options in rules (#​19136) (Milos Djermanovic)

v9.15.0

Compare Source

v9.14.0

Compare Source

v9.13.0

Compare Source

v9.12.0

Compare Source

Features

• 5a6a053 feat: update to jiti v2 (#​18954) (Arya Emami)
• 17a07fb feat: Hooks for test cases (RuleTester) (#​18771) (Anna Bocharova)
• 2ff0e51 feat: Implement alternate config lookup (#​18742) (Nicholas C. Zakas)
• 2d17453 feat: Implement modified cyclomatic complexity (#​18896) (Dmitry Pashkevich)

Bug Fixes

• ea380ca fix: Upgrade retry to avoid EMFILE errors (#​18986) (Nicholas C. Zakas)
• fdd6319 fix: Issues with type definitions (#​18940) (Arya Emami)

Documentation

• ecbd522 docs: Mention code explorer (#​18978) (Nicholas C. Zakas)
• 7ea4ecc docs: Clarifying the Use of Meta Objects (#​18697) (Amaresh S M)
• d3e4b2e docs: Clarify how to exclude .js files (#​18976) (Milos Djermanovic)
• 57232ff docs: Mention plugin-kit in language docs (#​18973) (Nicholas C. Zakas)
• b80ed00 docs: Update README (GitHub Actions Bot)
• cb69ab3 docs: Update README (GitHub Actions Bot)
• 7fb0d95 docs: Update README (GitHub Actions Bot)
• 493348a docs: Update README (GitHub Actions Bot)
• 87a582c docs: fix typo in id-match rule (#​18944) (Jay)

Chores

• 555aafd chore: upgrade to @eslint/js@9.12.0 (#​18987) (Francesco Trotta)
• 873ae60 chore: package.json update for @​eslint/js release (Jenkins)
• d0a5414 refactor: replace strip-ansi with native module (#​18982) (Cristopher)
• b827029 chore: Enable JSON5 linting (#​18979) (Milos Djermanovic)
• 8f55ca2 chore: Upgrade espree, eslint-visitor-keys, eslint-scope (#​18962) (Nicholas C. Zakas)
• c1a2725 chore: update dependency mocha to ^10.7.3 (#​18945) (Milos Djermanovic)

v9.11.1

Compare Source

v9.11.0

Compare Source

Features

• ec30c73 feat: add "eslint/universal" to export Linter (#​18883) (唯然)
• c591da6 feat: Add language to types (#​18917) (Nicholas C. Zakas)
• 492eb8f feat: limit the name given to ImportSpecifier in id-length (#​18861) (Tanuj Kanti)
• 19c6856 feat: Add no-useless-constructor suggestion (#​18799) (Jordan Thomson)
• a48f8c2 feat: add type FormatterFunction, update LoadedFormatter (#​18872) (Francesco Trotta)

Bug Fixes

• 5e5f39b fix: add missing types for no-restricted-exports rule (#​18914) (Kristóf Poduszló)
• 8f630eb fix: add missing types for no-param-reassign options (#​18906) (Kristóf Poduszló)
• d715781 fix: add missing types for no-extra-boolean-cast options (#​18902) (Kristóf Poduszló)
• 2de5742 fix: add missing types for no-misleading-character-class options (#​18905) (Kristóf Poduszló)
• c153084 fix: add missing types for no-implicit-coercion options (#​18903) (Kristóf Poduszló)
• fa11b2e fix: add missing types for no-empty-function options (#​18901) (Kristóf Poduszló)
• a0deed1 fix: add missing types for camelcase options (#​18897) (Kristóf Poduszló)

Documentation

• e4e5709 docs: correct prefer-object-has-own type definition comment (#​18924) (Nitin Kumar)
• 91cbd18 docs: add unicode abbreviations in no-irregular-whitespace rule (#​18894) (Alix Royere)
• 59cfc0f docs: clarify resultsMeta in LoadedFormatter type (#​18881) (Milos Djermanovic)
• adcc50d docs: Update README (GitHub Actions Bot)
• 4edac1a docs: Update README (GitHub Actions Bot)

Build Related

• 959d360 build: Support updates to previous major versions (#​18871) (Milos Djermanovic)

Chores

• ca21a64 chore: upgrade @​eslint/js@​9.11.0 (#​18927) (Milos Djermanovic)
• a10f90a chore: package.json update for @​eslint/js release (Jenkins)
• e4e02cc refactor: Extract processor logic into ProcessorService (#​18818) (Nicholas C. Zakas)
• 6d4484d chore: updates for v8.57.1 release (Jenkins)
• 71f37c5 refactor: use optional chaining when validating config rules (#​18893) (lucasrmendonca)
• 2c2805f chore: Add PR note to all templates (#​18892) (Nicholas C. Zakas)
• 7b852ce refactor: use Directive class from @eslint/plugin-kit (#​18884) (Milos Djermanovic)
• d594ddd chore: update dependency @​eslint/core to ^0.6.0 (#​18863) (renovate[bot])
• 78b2421 chore: Update change.yml (#​18882) (Nicholas C. Zakas)
• a416f0a chore: enable $ExpectType comments in .ts files (#​18869) (Francesco Trotta)

v9.10.0

Compare Source

v9.9.1

Compare Source

v9.9.0

Compare Source

Features

• 41d0206 feat: Add support for TS config files (#​18134) (Arya Emami)
• 3a4eaf9 feat: add suggestion to require-await to remove async keyword (#​18716) (Dave)

Documentation

• 9fe068c docs: how to author plugins with configs that extend other configs (#​18753) (Alec Gibson)
• 48117b2 docs: add version support page in the side navbar (#​18738) (Amaresh S M)
• fec2951 docs: add version support page to the dropdown (#​18730) (Amaresh S M)
• 38a0661 docs: Fix typo (#​18735) (Zaina Al Habash)
• 3c32a9e docs: Update yarn command for creating ESLint config (#​18739) (Temitope Ogunleye)
• f9ac978 docs: Update README (GitHub Actions Bot)

Chores

• 461b2c3 chore: upgrade to @eslint/js@9.9.0 (#​18765) (Francesco Trotta)
• 59dba1b chore: package.json update for @​eslint/js release (Jenkins)
• fea8563 chore: update dependency @​eslint/core to ^0.3.0 (#​18724) (renovate[bot])
• aac191e chore: update dependency @​eslint/json to ^0.3.0 (#​18760) (renovate[bot])
• b97fa05 chore: update wdio dependencies for more stable tests (#​18759) (Christian Bromann)

v9.8.0

Compare Source

v9.7.0

Compare Source

Features

• 7bd9839 feat: add support for es2025 duplicate named capturing groups (#​18630) (Yosuke Ota)
• 1381394 feat: add regex option in no-restricted-imports (#​18622) (Nitin Kumar)

Bug Fixes

• 14e9f81 fix: destructuring in catch clause in no-unused-vars (#​18636) (Francesco Trotta)

Documentation

• 9f416db docs: Add Powered by Algolia label to the search. (#​18633) (Amaresh S M)
• c8d26cb docs: Open JS Foundation -> OpenJS Foundation (#​18649) (Milos Djermanovic)
• 6e79ac7 docs: loadESLint does not support option cwd (#​18641) (Francesco Trotta)

Chores

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.