chore(deps): lock file maintenance npm packages

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
		lockFileMaintenance	All locks refreshed
@types/node (source)	devDependencies	minor	24.4.0 -> 24.5.2
esbuild	devDependencies	patch	0.25.9 -> 0.25.10
oxc-minify (source)	devDependencies	minor	^0.87.0 -> ^0.91.0
oxlint (source)	devDependencies	minor	1.15.0 -> 1.16.0
pnpm (source)	packageManager	minor	10.16.1 -> 10.17.0

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

evanw/esbuild (esbuild)

v0.25.10

Compare Source

• Fix a panic in a minification edge case (#​4287)

  This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

  function identity(x) { return x }
  identity({ y: identity(123) })

• Fix @supports nested inside pseudo-element (#​4265)

  When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

  The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

  However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

  /* Original code */
  ::placeholder {
    color: red;
    body & { color: green }
    @​supports (color: blue) { color: blue }
  }
  
  /* Old output (with --supported:nesting=false) */
  ::placeholder {
    color: red;
  }
  body :is() {
    color: green;
  }
  @​supports (color: blue) {
     {
      color: blue;
    }
  }
  
  /* New output (with --supported:nesting=false) */
  ::placeholder {
    color: red;
  }
  body :is() {
    color: green;
  }
  @​supports (color: blue) {
    ::placeholder {
      color: blue;
    }
  }

oxc-project/oxc (oxc-minify)

v0.91.0

💥 BREAKING CHANGES

• 6fcb0d0 minifier: [BREAKING] Receive supported engines instead of ecmascript versions (#​13933) (sapphi-red)

🐛 Bug Fixes

• 21bbf95 napi: Rebuild bindings file for NAPI packages (#​13889) (overlookmotel)

v0.90.0

🚀 Features

• b52389a node: Bump engines field to require Node.js 20.19.0+ for ESM support (#​13879) (Copilot)

🐛 Bug Fixes

• 9796ec1 napi: Fix binding files (Boshen)

oxc-project/oxc (oxlint)

v1.16.0: oxlint v1.16.0

Compare Source

[1.16.0] - 2025-09-16

🚀 Features

• 97c8d06 linter: Add preserve-caught-error rule (#​13748) (孔辉)
• 8c19b18 linter/exhaustive-deps: Implement fixer for dep in global scope (#​13783) (camc314)
• 06bce8f linter/exhaustive-deps: Implement fixer for missing dep (#​13782) (camc314)
• a8675f4 linter: Add eslint/class-methods-use-this rule (#​12977) (Peter Cardenas)
• db33196 parser: Adds typescript rule for empty argument list (#​13730) (Karan Kiri)
• 2751193 linter: Add eslint/no-useless-computed-key rule (#​13428) (yefan)
• 9a205d1 regex-parser: Parse simple TemplateLiterals (#​13265) (Sysix)

🐛 Bug Fixes

• a2c91cd linter: Drop rules to allow mutable access to ctx_host in run_external_rules (#​13832) (camc314)
• 3af1e5d linter/no-unsafe-declaration-merging: Always mark first span as primary (#​13830) (camc314)
• 1c43c7c linter: Keep message when merging composite fixes (#​13827) (camc314)
• 26af302 linter/exhaustive-deps: Check stable value is on lhs of assignment expr (#​13815) (camc314)
• 4bc12d0 linter/exhaustive-deps: Remove impossible comparison with parent kind (#​13814) (camc314)
• 12baf5e linter/exhaustive-deps: Respect primary span when identifying disable directive location (#​13781) (camc314)
• fa7400a linter/no-undef: False positive with arguments in functions (#​13763) (camc314)
• 50e6e3c editor: Restrict servers paths for oxc.path.server (#​13740) (Sysix)
• b45077d editor: Strip leading slash for bin path on windows (#​13738) (Sysix)
• 8fa6227 editor: Don't allow oxc.path.server for untrusted workspaces (#​13734) (Sysix)
• 56da114 linter/react/jsx-handler-names: Do not detect the function name within the inline-function's body block (#​13456) (Takuji Shimokawa)
• b2bc5b4 linter/react-perf/jsx-no-new-object-as-prop: Skip as/satisfies exprs (#​13718) (camc314)
• ab51394 raw_transfer: Disable layout assertions on some 32-bit platforms (#​13716) (overlookmotel)
• 09428f6 linter/plugins: Remove outdated comment (#​13691) (overlookmotel)
• a294721 linter/plugins: Exit early if JS plugins enabled on unsupported platforms (#​13689) (overlookmotel)
• 68a2280 linter/plugins: More graceful exit for --experimental-js-plugins CLI option (#​13688) (overlookmotel)

🚜 Refactor

• 395d40d linter: Derive inmpls for PartialEq, Eq over manual ones (#​13828) (camc314)
• 8e4cd8f linter/func-names: Use run_once over looping over all nodes (#​13798) (camc314)
• 7f4e2fe eslint/func-names: Clean up implementation and improve documentation (#​13601) (Antoine Zanardi)
• 137896a language_server: Split options for linting and formatting (#​13627) (Sysix)
• 7346099 linter: Move oxlint application code into separate module (#​13745) (overlookmotel)
• 6dd4107 linter: Remove #[cfg(test)] attributes from tester module (#​13714) (overlookmotel)
• c40c6ef linter/plugins: Directory for JS plugins-related code (#​13701) (overlookmotel)
• a0022c1 linter/plugins: Improve error messages for JS plugins (#​13699) (overlookmotel)
• 1fd993f napi/oxlint: Rename napi/oxlint2 to napi/oxlint (#​13682) (overlookmotel)

⚡ Performance

• 90c8286 linter: Detect node types from let..else statements (#​13690) (camchenry)
• 08c05df semantic: Make CFG construction a compile-time feature (#​13678) (Boshen)

🎨 Styling

• 99a7638 linter: Add comments + re-organise imports (#​13715) (overlookmotel)

🧪 Testing

• 18a1145 linter: Add debug assertions for skipping rules (#​13724) (camc314)
• cb080de linter/no-unused-vars: Add test for non ASCII chars in JSX components (#​13820) (camc314)
• b6eba27 linter/no-undef: Add more test cases for arguments (#​13764) (camc314)
• fb2d087 linter: Set CWD for tests (#​13722) (overlookmotel)

💼 Other

• b99de17 oxlint: V1.16.0 (#​13833) (Boshen)

pnpm/pnpm (pnpm)

v10.17.0

Compare Source

Minor Changes

• The minimumReleaseAgeExclude setting now supports patterns. For instance:

  minimumReleaseAge: 1440
  minimumReleaseAgeExclude:
    - "@​eslint/*"

  Related PR: #​9984.

Patch Changes

• Don't ignore the minimumReleaseAge check, when the package is requested by exact version and the packument is loaded from cache #​9978.
• When minimumReleaseAge is set and the active version under a dist-tag is not mature enough, do not downgrade to a prerelease version in case the original version wasn't a prerelease one #​9979.

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for oxc-project ready!

Name	Link
🔨 Latest commit	c0156c3
🔍 Latest deploy log	https://app.netlify.com/projects/oxc-project/deploys/68d06d359af21000080ea8f9
😎 Deploy Preview	https://deploy-preview-508--oxc-project.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.