build(deps): bump the dependencies group across 1 directory with 34 updates

[dependabot]

Bumps the dependencies group with 33 updates in the / directory:

Package	From	To
@eslint/js	9.39.1	9.39.2
@stylistic/eslint-plugin	5.6.1	5.7.1
@types/node	24.10.1	25.0.10
eslint-plugin-jest	29.2.1	29.12.1
globals	16.5.0	17.1.0
lerna	9.0.1	9.0.3
ts-jest	29.4.5	29.4.6
typescript-eslint	8.47.0	8.53.1
eventemitter3	5.0.1	5.0.4
node-forge	1.3.2	1.3.3
rollup	4.55.1	4.56.0
@aws-sdk/client-route-53	3.936.0	3.975.0
body-parser	2.2.1	2.2.2
express	5.2.0	5.2.1
@types/express	5.0.1	5.0.6
lodash	4.17.21	4.17.23
@types/lodash	4.17.21	4.17.23
@electron/rebuild	4.0.1	4.0.2
webpack	5.103.0	5.104.1
ipaddr.js	2.2.0	2.3.0
lru-cache	11.2.2	11.2.5
ws	8.18.3	8.19.0
bufferutil	4.0.9	4.1.0
utf-8-validate	6.0.5	6.0.6
mmdb-lib	3.0.1	3.0.2
tar	7.5.2	7.5.6
cors	2.8.5	2.8.6
zod	4.1.13	4.3.6
supertest	7.1.4	7.2.2
env-paths	2.2.1	4.0.0
nightwatch	3.12.3	3.15.0
pino	10.1.0	10.3.0
pino-pretty	13.1.2	13.1.3

Updates @eslint/js from 9.39.1 to 9.39.2

Release notes

Sourced from @​eslint/js's releases.

v9.39.2

Bug Fixes

• 5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

• 506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

• 7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)
• c43ce24 chore: package.json update for @​eslint/js release (Jenkins)
• 4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

• c43ce24 chore: package.json update for @​eslint/js release
• See full diff in compare view

Updates @stylistic/eslint-plugin from 5.6.1 to 5.7.1

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.7.1

5.7.1 (2026-01-23)

Bug Fixes

• add meta to plugin (#1102) (f9d8a21)
• deps: revert eslint-visitor-keys and espree to compatible versions (#1111) (572f1ab)
• disable-legacy: disable multiline-comment-style (#1103) (03fc476)
• no-whitespace-before-property: detect whitespace in TSIndexedAccessType with parens (#1099) (60aafcb)
• upgrade deps (#1112) (29a1d0a)

Documentation

• indent: update deprecation tips (#1109) (6a6d30b)

Chores

• extract safeReplaceTextBetween to reuse common fix logic (#1104) (a49451f)
• jsx-rules: cleanup meta, use defaultOptions (#1108) (55bbd1d)
• line-comment-position: simplify options initialization (#1106) (4d6b10a)
• use defaultOptions in rules (#1105) (666e8ee)

v5.7.0

5.7.0 (2026-01-09)

Features

• customize: allow indent option as full rule options (#1091) (ab50c71)
• deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
• dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
• eol-last: improve to make language-agnostic (#1051) (9152494)
• linebreak-style: improve to make language-agnostic (#1050) (132926d)
• type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
• update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

• list-style: replace text range with delimiter directly (#1062) (c2ac348)
• object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

• fix command to run docs (#1058) (f597441)

... (truncated)

Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.7.1 (2026-01-23)

Bug Fixes

• add meta to plugin (#1102) (f9d8a21)
• deps: revert eslint-visitor-keys and espree to compatible versions (#1111) (572f1ab)
• disable-legacy: disable multiline-comment-style (#1103) (03fc476)
• no-whitespace-before-property: detect whitespace in TSIndexedAccessType with parens (#1099) (60aafcb)
• upgrade deps (#1112) (29a1d0a)

Documentation

• indent: update deprecation tips (#1109) (6a6d30b)

Chores

• extract safeReplaceTextBetween to reuse common fix logic (#1104) (a49451f)
• jsx-rules: cleanup meta, use defaultOptions (#1108) (55bbd1d)
• line-comment-position: simplify options initialization (#1106) (4d6b10a)
• use defaultOptions in rules (#1105) (666e8ee)

5.7.0 (2026-01-09)

Features

• customize: allow indent option as full rule options (#1091) (ab50c71)
• deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
• dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
• eol-last: improve to make language-agnostic (#1051) (9152494)
• linebreak-style: improve to make language-agnostic (#1050) (132926d)
• type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
• update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

• list-style: replace text range with delimiter directly (#1062) (c2ac348)
• object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

• fix command to run docs (#1058) (f597441)

Build Related

... (truncated)

Commits

• 5c4b512 chore: release v5.7.1 (main) (#1101)
• 29a1d0a fix: upgrade deps (#1112)
• 6a6d30b docs(indent): update deprecation tips (#1109)
• 62b7247 chore(lint): enable eslint-plugin/no-meta-schema-default internally (#1110)
• 666e8ee refactor: use defaultOptions in rules (#1105)
• 55bbd1d refactor(jsx-rules): cleanup meta, use defaultOptions (#1108)
• 4d6b10a refactor(line-comment-position): simplify options initialization (#1106)
• a49451f refactor: extract safeReplaceTextBetween to reuse common fix logic (#1104)
• b250f84 chore: setup eslint-plugin-eslint-plugin, sort meta & createRule (#1107)
• f9d8a21 fix: add meta to plugin (#1102)
• Additional commits viewable in compare view

Updates @types/node from 24.10.1 to 25.0.10

Commits

• See full diff in compare view

Updates eslint-plugin-jest from 29.2.1 to 29.12.1

Release notes

Sourced from eslint-plugin-jest's releases.

v29.12.1

29.12.1 (2026-01-02)

Bug Fixes

• no-unnecessary-assertion: don't report for any and unknown types (#1918) (388a36c)

v29.12.0

29.12.0 (2025-12-30)

Features

• prefer-mock-return-shorthand: greatly improve checking if mutable variables are used (#1914) (13bbd20)

v29.11.4

29.11.4 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore use of update expressions (#1913) (5713ac9)

v29.11.3

29.11.3 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore async implementations (#1912) (80288e2)

v29.11.2

29.11.2 (2025-12-29)

Bug Fixes

• prefer-mock-return-shorthand: don't report mutable implementations (#1908) (b164700)

v29.11.1

29.11.1 (2025-12-29)

Bug Fixes

• unbound-method: ignore inline use of jest.mocked(...) (#1862) (3a50b97)

v29.11.0

29.11.0 (2025-12-23)

... (truncated)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.12.1 (2026-01-02)

Bug Fixes

• no-unnecessary-assertion: don't report for any and unknown types (#1918) (388a36c)

29.12.0 (2025-12-30)

Features

• prefer-mock-return-shorthand: greatly improve checking if mutable variables are used (#1914) (13bbd20)

29.11.4 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore use of update expressions (#1913) (5713ac9)

29.11.3 (2025-12-30)

Bug Fixes

• prefer-mock-return-shorthand: ignore async implementations (#1912) (80288e2)

29.11.2 (2025-12-29)

Bug Fixes

• prefer-mock-return-shorthand: don't report mutable implementations (#1908) (b164700)

29.11.1 (2025-12-29)

Bug Fixes

• unbound-method: ignore inline use of jest.mocked(...) (#1862) (3a50b97)

29.11.0 (2025-12-23)

Features

• create new prefer-mock-return-shorthand rule (#1897) (0eb94b6)

29.10.1 (2025-12-22)

... (truncated)

Commits

• 45edad2 chore(release): 29.12.1 [skip ci]
• 388a36c fix(no-unnecessary-assertion): don't report for any and unknown types (#1...
• badfe77 docs: put rule descriptions after title (#1916)
• ce44f84 chore: update eslint-remote-tester (#1915)
• cc3cd98 chore(release): 29.12.0 [skip ci]
• 13bbd20 feat(prefer-mock-return-shorthand): greatly improve checking if mutable varia...
• eaa5549 chore(release): 29.11.4 [skip ci]
• 5713ac9 fix(prefer-mock-return-shorthand): ignore use of update expressions (#1913)
• e9f1a58 chore(release): 29.11.3 [skip ci]
• 80288e2 fix(prefer-mock-return-shorthand): ignore async implementations (#1912)
• Additional commits viewable in compare view

Updates globals from 16.5.0 to 17.1.0

Release notes

Sourced from globals's releases.

v17.1.0

• Add webpack and rspack globals (#333) 65cae73

---

sindresorhus/globals@v17.0.0...v17.1.0

v17.0.0

Breaking

• Split audioWorklet environment from browser (#320) 7bc293e

Improvements

• Update globals (#329) ebe1063
• Get all browser globals from both chrome and firefox (#321) 59ceff8
• Add bunBuiltin environment (#324) 1bc6e3b
• Add denoBuiltin environment (#324) 1bc6e3b
• Add paintWorklet environment (#323) 4b78f56
• Add sharedWorker environment (#322) 4a02a85

---

sindresorhus/globals@v16.5.0...v17.0.0

Commits

• 7a2f354 17.1.0
• 65cae73 Add webpack and rspack globals (#333)
• 3efe5aa Remove script transform (#332)
• bb89b18 17.0.0
• ebe1063 Update globals (2026-01-01) (#329)
• e3d8da3 Revert "Automate script for paintWorklet environment (#325)" (#328)
• e7c0453 Automate script for paintWorklet environment (#325)
• 1bc6e3b Add bunBuiltin and denoBuiltin (#324)
• 4b78f56 Add paintWorklet environment (#323)
• 59ceff8 Get all browser globals from both chrome and firefox (#321)
• Additional commits viewable in compare view

Updates lerna from 9.0.1 to 9.0.3

Release notes

Sourced from lerna's releases.

v9.0.3

9.0.3 (2025-11-27)

Bumped some dependencies to reduce audit warning noise.

NOTE: 9.0.2 does not exist because of a failed release

Changelog

Sourced from lerna's changelog.

9.0.3 (2025-11-27)

Note: Version bump only for package lerna

9.0.2 (2025-11-27)

Note: Version bump only for package lerna

Commits

• 215ff00 chore(misc): publish 9.0.3
• b1b2166 chore(misc): publish 9.0.2
• 6c1ea96 chore(deps): bump js-yaml from 4.1.0 to 4.1.1 (#4245)
• See full diff in compare view

Updates ts-jest from 29.4.5 to 29.4.6

Release notes

Sourced from ts-jest's releases.

v29.4.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.6 (2025-12-01)

Bug Fixes

• log hybrid module as warning instead of failing tests (#5144) (528d37c), closes #5130

Commits

• 202bde5 chore(release): 29.4.6 (#5146)
• 528d37c fix: log hybrid module as warning instead of failing tests (#5144)
• 141e5af build(deps): update github/codeql-action digest to 497990d
• d281cce build(deps): update google/osv-scanner-action action to v2.3.0
• 0d20322 build(deps): update dependency memfs to ^4.51.0
• 455dde2 build(deps): update dependency js-yaml to ^4.1.1
• d579480 build(deps): update dependency @​types/node to v20.19.25
• f6859d0 build(deps): update dependency @​types/yargs to ^17.0.35
• 4d7e432 build(deps): update github/codeql-action digest to d3ced5c
• 4ea70c9 build(deps): update actions/checkout digest to 34e1148
• Additional commits viewable in compare view

Updates typescript-eslint from 8.47.0 to 8.53.1

Release notes

Sourced from typescript-eslint's releases.

v8.53.1

8.53.1 (2026-01-19)

🩹 Fixes

• eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#11951)
• utils: make RuleCreator root defaultOptions optional (#11956)

❤️ Thank You

• Cameron
• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

• eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)
• eslint-plugin: add rule [strict-void-return] (#9707)
• project-service: allow passing Partial<ts.server.ServerHost> to project service (#11932)

🩹 Fixes

• eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
• eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
• typescript-estree: forbid type-only import with both default and named specifiers (#11930)
• typescript-estree: fix syntax check for using declaration (#11910)
• typescript-estree: forbid invalid class implements (#11934)
• typescript-estree: forbid invalid "import equals" declaration (#11936)
• typescript-estree: forbid invalid extends and implements in interface declaration (#11935)

❤️ Thank You

• auvred @​auvred
• Brad Zacher @​bradzacher
• fisker Cheung @​fisker
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger
• Niki @​phaux
• Nikita
• SungHyun627 @​SungHyun627
• Will Harney @​wjhsf

You can read about our versioning strategy and releases on our website.

v8.52.0

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.53.1 (2026-01-19)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.53.0 (2026-01-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.52.0 (2026-01-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.51.0 (2025-12-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.1 (2025-12-22)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.50.0 (2025-12-15)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.49.0 (2025-12-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.1 (2025-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.48.0 (2025-11-24)

... (truncated)

Commits

• 9940e53 chore(release): publish 8.53.1
• 3021ede chore(release): publish 8.53.0
• 9ddd571 chore(release): publish 8.52.0
• 95c7c73 chore: update deps to latest minor/patch (#11921)
• e4c57f5 chore(release): publish 8.51.0
• d520b88 chore(release): publish 8.50.1
• c62e858 chore(release): publish 8.50.0
• 864595a chore(release): publish 8.49.0
• 32b7e89 chore(deps): update dependency @​vitest/eslint-plugin to v1.5.1 (#11816)
• 8fe3445 chore(release): publish 8.48.1
• Additional commits viewable in compare view

Updates eventemitter3 from 5.0.1 to 5.0.4

Release notes

Sourced from eventemitter3's releases.

5.0.4

Bug fixes

• Restored TypeScript type definitions to their pre-5.0.2 state (92fb3c66, 71ab64b6).

5.0.3

Bug fixes

• Fixed TypeScript type definitions (#282).

5.0.2

Bug fixes

• Fixed type definitions for ESM import (#279).

Commits

• b0144e9 [dist] 5.0.4
• 92fb3c6 Revert "[ts] Fix type definitions for ESM import (#279)"
• 71ab64b Revert "[ts] Fix TypeScript type definitions (#282)"
• d84265a [dist] 5.0.3
• 7ec84d9 [ts] Fix TypeScript type definitions (#282)
• 7b6aef8 [dist] 5.0.2
• f5552f8 [doc] Remove reference to a script that no longer exists
• 9d10e6f [pkg] Remove unused dependency
• c1507bf [ci] Update actions/setup-node action to v6
• 08f8450 [ci] Update actions/checkout action to v5
• Additional commits viewable in compare view

Updates node-forge from 1.3.2 to 1.3.3

Changelog

Sourced from node-forge's changelog.

1.3.3 - 2025-12-02

Fixed

• [pkcs12] Make digestAlgorithm parameters optional to fix PKCS#12/PFX issues introduced in 1.3.2.

Commits

• 1cea0af Release 1.3.3.
• 5265989 Update changelog.
• e4f3961 Fix changelog for release.
• 503979b Update changelog.
• c3b3b32 Make digestAlgorithm parameters optional
• 6f70043 Update CVE details.
• f547b0d Start 1.3.3-0.
• See full diff in compare view

Updates rollup from 4.55.1 to 4.56.0

Release notes

Sourced from rollup's releases.

v4.56.0

4.56.0

2026-01-22

Features

• Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

• Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

• #6230: Refine namespace handling (@​lukastaegert)

v4.55.3

4.55.3

2026-01-21

Bug Fixes

• Fix JSX semicolon insert position in variable declarations (#6241)

Pull Requests

• #6241: Fix JSX semicolon insertion (@​lukastaegert)

v4.55.2

4.55.2

2026-01-19

Bug Fixes

• Sort manual chunks by execution order to reduce circular dependency issues (#6240)

Pull Requests

• #6234: chore(deps): pin cross-platform-actions/action action to 492b0c8 (@​renovate[bot])
• #6235: chore(deps): update dependency globals to v17 (@​renovate[bot], @​lukastaegert)
• #6236: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #6237: chore(deps): lock file maintenance (@​renovate[bot])
• #6239: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6240: Sort manual chunks by module execution order (@​TrickyPi)

Changelog

Sourced from rollup's changelog.

4.56.0

2026-01-22

Features

• Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

• Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

• #6230: Refine namespace handling (@​lukastaegert)

4.55.3

2026-01-21

Bug Fixes

• Fix JSX semicolon insert position in variable declarations (#6241)

Pull Requests

• #6241: Fix JSX semicolon insertion (@​lukastaegert)

4.55.2

2026-01-19

Bug Fixes

• Sort manual chunks by execution order to reduce circular dependency issues (#6240)

Pull Requests

• #6234: chore(deps): pin cross-platform-actions/action action to 492b0c8 (@​renovate[bot])
• #6235: chore(deps): update dependency globals to v17 (@​renovate[bot], @​lukastaegert)
• #6236: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #6237: chore(deps): lock file maintenance (@​renovate[bot])
• #6239: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #6240: Sort manual chunks by module execution order (@​TrickyPi)

Commits

• 1cbac18 4.56.0
• 3506af2 Update audit resolver exclusions
• 18ccab2 Refine namespace handling (#6230)
• 6764d54 4.55.3
• 9c45516 Update audit resolver exclusions
• 726ce5d Fix JSX semicolon insertion (#6241)
• bd293ba 4.55.2
• 3dae637 Update generated WASM adapter code
• cde042f Sort manual chunks by module execution order (#6240)
• fc4d8f7 Ignore irrelevant vulnerability for a month
• Additional commits viewable in compare view

Updates @aws-sdk/client-route-53 from 3.936.0 to 3.975.0

Release notes

Sourced from @​aws-sdk/client-route-53's releases.

v3.975.0

3.975.0(2026-01-23)

Chores

• codegen: upgrade smithy to 1.66.0 (#7678) (784b9f3d)
• ci: use repo-specific IAM role for PR builds (#7680) (e392336c)

New Features

• client-connect: Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. (718c3222)
• client-qconnect: Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. (30cc5fa9)
• client-datazone: Added api for deleting data export configuration for a domain (089a6f1a)

---

For list of updated packages, view updated-packages.md in assets-3.975.0.zip

v3.974.0

3.974.0(2026-01-22)

Chor...

Description has been truncated

---

[!NOTE]
Medium Risk
Although the diff is dependency-only, it upgrades many widely used runtime packages (HTTP server, AWS SDK, WebSocket, validation/logging), which can cause subtle behavior or compatibility regressions at runtime and in build/test tooling.

Overview
Updates a large set of npm dependencies across the monorepo, including tooling (ESLint/TypeScript/Jest/rollup/webpack) and runtime libraries used by multiple packages (e.g., express, lodash, ws, ipaddr.js, zod, pino, @aws-sdk/client-route-53).

Changes are primarily version bumps in root and package-level package.json files plus corresponding package-lock.json updates; no product/runtime code changes are introduced beyond what upstream dependency updates may affect.

^{Written by Cursor Bugbot for commit cadfecf. This will update automatically on new commits. Configure here.}

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.