Comparing changes

Bumps the dependencies group with 4 updates: [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell), [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack), [lint-staged](https://github.com/lint-staged/lint-staged) and [memfs](https://github.com/streamich/memfs). Updates `cspell` from 10.3.4 to 10.3.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/streetsidesoftware/cspell/releases">cspell's releases</a>.</em></p> <blockquote> <h2>v10.3.6</h2> <h2>Fixes</h2>  <h3>fix: Report unknown CSpell directives again (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9319">#9319</a>)</h3> <h2>Summary</h2> <p><code>cspell lint</code> reports unknown in-document directives again, such as <code>cspell:bad-dir</code>, when <code>--validate-directives</code> or <code>validateDirectives: true</code> in the config asks for them. Since 9.1.0 they were found but never shown or counted.</p> <ul> <li><code>--validate-directives</code> and <code>--no-validate-directives</code> override the config setting.</li> <li>An unknown directive counts as an issue, so <code>cspell lint</code> exits with an error, as it did before 9.1.0.</li> <li>The JSON reporter, <code>@cspell/cspell-json-reporter</code>, includes them in its output again.</li> </ul>  <ul> <li>The default reporter and the JSON reporter now ask to receive directive issues. Other reporters still only get them if they ask for them.</li> <li>The command-line flag is now applied as a setting, like <code>--report</code>, so it controls what is shown as well as what is checked.</li> </ul>  <hr />   <h3>fix(cspell-io): Keep redirected requests under the private root (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9329">#9329</a>)</h3> <h2>Summary</h2> <p><code>createRedirectProvider</code> in <code>cspell-io</code> now only serves requests that map to a location under its private root. A request that would resolve outside the private root is refused with <code>VFSErrorUnsupportedRequest</code>, the same error as a request outside the public root.</p> <ul> <li>Refused: a path that starts with a separator (<code>/</code>, <code>\</code>, <code>%2F</code>, <code>%5C</code>) right after the public root.</li> <li>Now served from inside the private root: file names that look like a URL scheme or a drive, such as <code>a:b.txt</code> or <code>C|</code>. They used to resolve to a different URL.</li> </ul> <p>cspell itself does not use <code>createRedirectProvider</code>. This affects projects that use <code>cspell-io</code> directly.</p>  <ul> <li>The part of the URL after the public root is resolved as a relative path under the private root, and the result is checked to be under the private root: same protocol, same host, and the same path prefix.</li> <li>Results coming back from the private file system are checked the same way before they are shown under the public root.</li> <li>The change is in commit <a href="https://github.com/streetsidesoftware/cspell/commit/25359026e157f349185d39ff814bc91b85b1c4d9">25359026e1</a>.</li> </ul>   </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md">cspell's changelog</a>.</em></p> <blockquote> <h2>v10.3.6 (2026-09-29)</h2> <h3>Fixes</h3>  <h3>fix: Report unknown CSpell directives again (<a href="https://redirect.github.com/streetsidesoftware/cspell/pull/9319">#9319</a>)</h3> <h2>Summary</h2> <p><code>cspell lint</code> reports unknown in-document directives again, such as <code>cspell:bad-dir</code>, when <code>--validate-directives</code> or <code>validateDirectives: true</code> in the config asks for them. Since 9.1.0 they were found but never shown or counted.</p> <ul> <li><code>--validate-directives</code> and <code>--no-validate-directives</code> override the config setting.</li> <li>An unknown directive counts as an issue, so <code>cspell lint</code> exits with an error, as it did before 9.1.0.</li> <li>The JSON reporter, <code>@cspell/cspell-json-reporter</code>, includes them in its output again.</li> </ul>  <ul> <li>The default reporter and the JSON reporter now ask to receive directive issues. Other reporters still only get them if they ask for them.</li> <li>The command-line flag is now applied as a setting, like <code>--report</code>, so it controls what is shown as well as what is checked.</li> </ul>  <hr />   <h3>fix(cspell-io): Keep redirected requests under the private root (<a href="https://redirect.github.com/streetsidesoftware/cspell/pull/9329">#9329</a>)</h3> <h2>Summary</h2> <p><code>createRedirectProvider</code> in <code>cspell-io</code> now only serves requests that map to a location under its private root. A request that would resolve outside the private root is refused with <code>VFSErrorUnsupportedRequest</code>, the same error as a request outside the public root.</p> <ul> <li>Refused: a path that starts with a separator (<code>/</code>, <code>\</code>, <code>%2F</code>, <code>%5C</code>) right after the public root.</li> <li>Now served from inside the private root: file names that look like a URL scheme or a drive, such as <code>a:b.txt</code> or <code>C|</code>. They used to resolve to a different URL.</li> </ul> <p>cspell itself does not use <code>createRedirectProvider</code>. This affects projects that use <code>cspell-io</code> directly.</p>  <ul> <li>The part of the URL after the public root is resolved as a relative path under the private root, and the result is checked to be under the private root: same protocol, same host, and the same path prefix.</li> <li>Results coming back from the private file system are checked the same way before they are shown under the public root.</li> <li>The change is in commit <a href="https://github.com/streetsidesoftware/cspell/commit/25359026e157f349185d39ff814bc91b85b1c4d9">25359026e1</a>.</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/streetsidesoftware/cspell/commit/8559198ccfcac2f745911db1ffe2ee62c17cba49"><code>8559198</code></a> v10.3.6</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/72e1be3d0112d446d4c59c269f723c14d8f9e089"><code>72e1be3</code></a> chore: Prepare Release v10.3.6 (auto-deploy) (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9305">#9305</a>)</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/e230ca038dd37bf7a0f75a97cf60ec54c2ce582c"><code>e230ca0</code></a> test: Give time-limited RPC and worker tests room on slow runners (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9330">#9330</a>)</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/8eae6b6aa2f6d3e01a98c7c18fac1108f210441f"><code>8eae6b6</code></a> fix: Report unknown CSpell directives again (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9319">#9319</a>)</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/a5f5111f17537bd6c60ca0467c4976cf8e6cd75e"><code>a5f5111</code></a> fix: Don't reuse cached results made with different command-line options (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9318">#9318</a>)</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/2f897bee42c23e25b6ea750e8b4c05b7ec111432"><code>2f897be</code></a> fix: <code>--show-perf-summary</code> shows where all of the run's time goes (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9307">#9307</a>)</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/fe37b7bcb3731163bba423dfc072132a807c52f9"><code>fe37b7b</code></a> chore: Label per package, and bugs links to its open issues (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9309">#9309</a>)</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/f37a244a54b686fc1ac11272d6019b9a059b062a"><code>f37a244</code></a> v10.3.5</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/b36374c2f010dac286d18c6079d898b53269b5fe"><code>b36374c</code></a> chore: Prepare Release v10.3.5 (auto-deploy) (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9277">#9277</a>)</li> <li><a href="https://github.com/streetsidesoftware/cspell/commit/93e55c0129b931064ecca11fd124bad44229ec0f"><code>93e55c0</code></a> fix(cspell-lib): <code>shouldCheckDocument</code> honors the <code>forceCheck</code> option (<a href="https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell/issues/9303">#9303</a>)</li> <li>Additional commits viewable in <a href="https://github.com/streetsidesoftware/cspell/commits/v10.3.6/packages/cspell">compare view</a></li> </ul> </details> <br /> Updates `eslint-config-webpack` from 4.14.0 to 4.15.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/eslint-config-webpack/releases">eslint-config-webpack's releases</a>.</em></p> <blockquote> <h2>v4.15.0</h2> <h3>Minor Changes</h3> <ul> <li>Move <code>prettier/prettier</code> out of the recommended configs into the opt-in <code>stylistic/prettier</code> config; run Prettier on its own instead. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/212">#212</a>)</li> </ul> <h3>Patch Changes</h3> <ul> <li> <p>Turn off jsdoc rules that TypeScript already reports: <code>require-param-type</code>, <code>require-param-name</code>, <code>require-property-name</code> and <code>implements-on-classes</code>. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/211">#211</a>)</p> </li> <li> <p>Turn off <code>jsdoc/require-next-type</code>, <code>jsdoc/require-throws-type</code> and <code>jsdoc/require-yields-type</code>. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/210">#210</a>)</p> </li> <li> <p>Check <code>jsdoc/no-restricted-syntax</code> with one combined selector, so it lints faster. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/208">#208</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md">eslint-config-webpack's changelog</a>.</em></p> <blockquote> <h2>4.15.0</h2> <h3>Minor Changes</h3> <ul> <li>Move <code>prettier/prettier</code> out of the recommended configs into the opt-in <code>stylistic/prettier</code> config; run Prettier on its own instead. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/212">#212</a>)</li> </ul> <h3>Patch Changes</h3> <ul> <li> <p>Turn off jsdoc rules that TypeScript already reports: <code>require-param-type</code>, <code>require-param-name</code>, <code>require-property-name</code> and <code>implements-on-classes</code>. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/211">#211</a>)</p> </li> <li> <p>Turn off <code>jsdoc/require-next-type</code>, <code>jsdoc/require-throws-type</code> and <code>jsdoc/require-yields-type</code>. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/210">#210</a>)</p> </li> <li> <p>Check <code>jsdoc/no-restricted-syntax</code> with one combined selector, so it lints faster. (by <a href="https://github.com/alexander-akait"><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/eslint-config-webpack/pull/208">#208</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/eslint-config-webpack/commit/a67ea3a043d164a5ea2c3dea22b26fbda6647b97"><code>a67ea3a</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/eslint-config-webpack/issues/209">#209</a>)</li> <li><a href="https://github.com/webpack/eslint-config-webpack/commit/8e7805c4231d3f1b64e0cc8d8db451ad8fb2aab4"><code>8e7805c</code></a> feat(stylistic): move prettier/prettier into an opt-in stylistic/prettier con...</li> <li><a href="https://github.com/webpack/eslint-config-webpack/commit/8464b5f2fbe08ff04717e39c2efb6908464401f9"><code>8464b5f</code></a> perf(jsdoc): turn off require-param-type and explain the disabled type rules ...</li> <li><a href="https://github.com/webpack/eslint-config-webpack/commit/a7db55d3f63df63568e5de325ea09ee135166355"><code>a7db55d</code></a> fix(jsdoc): turn off require-next-type, require-throws-type and require-yield...</li> <li><a href="https://github.com/webpack/eslint-config-webpack/commit/dff9d5eacc0b0eca60e31967f9130194c31a6b53"><code>dff9d5e</code></a> perf(jsdoc): check no-restricted-syntax with one combined selector (<a href="https://redirect.github.com/webpack/eslint-config-webpack/issues/208">#208</a>)</li> <li><a href="https://github.com/webpack/eslint-config-webpack/commit/16a18a9e9cef21ac4074db7c885b718c7b821c52"><code>16a18a9</code></a> chore(deps): bump codecov/codecov-action in the dependencies group (<a href="https://redirect.github.com/webpack/eslint-config-webpack/issues/206">#206</a>)</li> <li><a href="https://github.com/webpack/eslint-config-webpack/commit/397f027817fc86afbeee3a453758c285c4eaabcd"><code>397f027</code></a> chore(deps): bump the dependencies group across 1 directory with 2 updates (#...</li> <li>See full diff in <a href="https://github.com/webpack/eslint-config-webpack/compare/v4.14.0...v4.15.0">compare view</a></li> </ul> </details> <br /> Updates `lint-staged` from 17.5.1 to 17.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lint-staged/lint-staged/releases">lint-staged's releases</a>.</em></p> <blockquote> <h2>v17.6.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1850">#1850</a> <a href="https://github.com/lint-staged/lint-staged/commit/938d3f43d07cbd74f08052dfb8a7380ce8868180"><code>938d3f4</code></a> - Task functions like <code>{ title, task }</code> can now use a logger function <code>log()</code> to emit output while the task runs. By default, the output will only be visible if the task fails, unless the <code>--verbose</code> option was used. Additionally, when the task rejects, the error will be shown in the output.</p> <pre lang="js"><code>import { defineConfig } from 'lint-staged/config' <p>export default defineConfig({ '*': { title: 'Fail if PDF files are committed', task: async (filepaths, { log }) => { const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf')) if (pdfFiles.length > 0) { log('PDF files should not be committed: %s', pdfFiles) throw new Error('Failed') } }, }, }) </code></pre></p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1854">#1854</a> <a href="https://github.com/lint-staged/lint-staged/commit/30562bcbc5267bdb733c257c79c0a65c34465ba3"><code>30562bc</code></a> - <em>lint-staged</em> now stages changes to <strong>all tracked files modified by tasks</strong>, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like <code>() => "prettier --write ."</code>.</p> <p>If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use <code>--hide-unstaged</code> to hide your changes while tasks run.</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1860">#1860</a> <a href="https://github.com/lint-staged/lint-staged/commit/4296532155fb893ab8f754a47f3518f691fd4d98"><code>4296532</code></a> - The assignment of staged files to <em>lint-staged</em> configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.</p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1861">#1861</a> <a href="https://github.com/lint-staged/lint-staged/commit/c45f28af47a540730de2bf22fddedeb8fac5952a"><code>c45f28a</code></a> - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example <code>eslint</code> and <code>prettier</code> will run in parallel (for all files, when any JS files are staged):</p> <pre lang="js"><code>import { defineConfig } from 'lint-staged/config' <p>export default defineConfig({ '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']], }) </code></pre></p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1859">#1859</a> <a href="https://github.com/lint-staged/lint-staged/commit/f0ea69dc67399e504a08db67594f697d4c24df6d"><code>f0ea69d</code></a> - Various performance improvements from skipping redundant internal Git calls.</p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1856">#1856</a> <a href="https://github.com/lint-staged/lint-staged/commit/69d7d17ca6d3b10f2ececf8b2756c1927a627821"><code>69d7d17</code></a> - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of <em>lint-staged</em> overwriting it. This makes it safer to run <em>lint-staged</em> in multiple worktrees at the same time.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md">lint-staged's changelog</a>.</em></p> <blockquote> <h2>17.6.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1850">#1850</a> <a href="https://github.com/lint-staged/lint-staged/commit/938d3f43d07cbd74f08052dfb8a7380ce8868180"><code>938d3f4</code></a> - Task functions like <code>{ title, task }</code> can now use a logger function <code>log()</code> to emit output while the task runs. By default, the output will only be visible if the task fails, unless the <code>--verbose</code> option was used. Additionally, when the task rejects, the error will be shown in the output.</p> <pre lang="js"><code>import { defineConfig } from 'lint-staged/config' <p>export default defineConfig({ '*': { title: 'Fail if PDF files are committed', task: async (filepaths, { log }) => { const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf')) if (pdfFiles.length > 0) { log('PDF files should not be committed: %s', pdfFiles) throw new Error('Failed') } }, }, }) </code></pre></p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1854">#1854</a> <a href="https://github.com/lint-staged/lint-staged/commit/30562bcbc5267bdb733c257c79c0a65c34465ba3"><code>30562bc</code></a> - <em>lint-staged</em> now stages changes to <strong>all tracked files modified by tasks</strong>, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like <code>() => "prettier --write ."</code>.</p> <p>If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use <code>--hide-unstaged</code> to hide your changes while tasks run.</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1860">#1860</a> <a href="https://github.com/lint-staged/lint-staged/commit/4296532155fb893ab8f754a47f3518f691fd4d98"><code>4296532</code></a> - The assignment of staged files to <em>lint-staged</em> configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.</p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1861">#1861</a> <a href="https://github.com/lint-staged/lint-staged/commit/c45f28af47a540730de2bf22fddedeb8fac5952a"><code>c45f28a</code></a> - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example <code>eslint</code> and <code>prettier</code> will run in parallel (for all files, when any JS files are staged):</p> <pre lang="js"><code>import { defineConfig } from 'lint-staged/config' <p>export default defineConfig({ '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']], }) </code></pre></p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1859">#1859</a> <a href="https://github.com/lint-staged/lint-staged/commit/f0ea69dc67399e504a08db67594f697d4c24df6d"><code>f0ea69d</code></a> - Various performance improvements from skipping redundant internal Git calls.</p> </li> <li> <p><a href="https://redirect.github.com/lint-staged/lint-staged/pull/1856">#1856</a> <a href="https://github.com/lint-staged/lint-staged/commit/69d7d17ca6d3b10f2ececf8b2756c1927a627821"><code>69d7d17</code></a> - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of <em>lint-staged</em> overwriting it. This makes it safer to run <em>lint-staged</em> in multiple worktrees at the same time.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lint-staged/lint-staged/commit/48f9f4ea4b88eb605de3546e4599083de7a394b2"><code>48f9f4e</code></a> Merge pull request <a href="https://redirect.github.com/lint-staged/lint-staged/issues/1857">#1857</a> from lint-staged/changeset-release/main</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/16b2e213efeec330f7e1576a8d35776822bf698a"><code>16b2e21</code></a> chore(changeset): release</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/195f15677da877431b63dfd001e1ed9369bb1479"><code>195f156</code></a> docs: improve changeset</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/0ba6261cabfdade60e487385ebec4fc2b4b44309"><code>0ba6261</code></a> fix: create hidden directory only when required</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/66ac2de6f71d19256cc5d11026d37e653af11549"><code>66ac2de</code></a> docs: fixes to changesets</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/80af8d7f8246c4246cdf8b53229bd1bf7763f959"><code>80af8d7</code></a> Merge pull request <a href="https://redirect.github.com/lint-staged/lint-staged/issues/1863">#1863</a> from lint-staged/fix-issues</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/e4334881d49d94669bc2b2fb5a73705d822c69bb"><code>e433488</code></a> fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/e5019b32138e301c777c683f95e4a1e17362845f"><code>e5019b3</code></a> fix: handle trailing newlines when detecting changed files</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/74efec85fa276618837d3c4602062ef30d16abf1"><code>74efec8</code></a> ci: run Cygwin and MSYS2 tests on Node.js 26</li> <li><a href="https://github.com/lint-staged/lint-staged/commit/655b7dcd9f7eb57a6f574f03be371190afeb9f5c"><code>655b7dc</code></a> fix: use TypeScript types instead of JSDoc</li> <li>Additional commits viewable in <a href="https://github.com/lint-staged/lint-staged/compare/v17.5.1...v17.6.0">compare view</a></li> </ul> </details> <br /> Updates `memfs` from 4.79.0 to 4.80.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/streamich/memfs/releases">memfs's releases</a>.</em></p> <blockquote> <h2>Release v4.80.0</h2> <h2>What's Changed</h2> <ul> <li>feat: allow configuring the synchronous FSA worker timeout by <a href="https://github.com/Firatakti"><code>@Firatakti</code></a> in <a href="https://redirect.github.com/streamich/memfs/pull/1298">streamich/memfs#1298</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Firatakti"><code>@Firatakti</code></a> made their first contribution in <a href="https://redirect.github.com/streamich/memfs/pull/1298">streamich/memfs#1298</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/streamich/memfs/compare/v4.79.0...v4.80.0">https://github.com/streamich/memfs/compare/v4.79.0...v4.80.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/streamich/memfs/commit/adae41a54ff34c89db4e0d0708ec7c166e8998c6"><code>adae41a</code></a> chore: release v4.80.0</li> <li><a href="https://github.com/streamich/memfs/commit/d9cfa1874f8189140b9d99908026031b2fe21f29"><code>d9cfa18</code></a> Merge pull request <a href="https://redirect.github.com/streamich/memfs/issues/1298">#1298</a> from Firatakti/codex/fsa-sync-timeout</li> <li><a href="https://github.com/streamich/memfs/commit/fe75fbc40e0d344b33d813b2dd8f449269307ba2"><code>fe75fbc</code></a> feat: allow configuring the synchronous FSA worker timeout</li> <li>See full diff in <a href="https://github.com/streamich/memfs/compare/v4.79.0...v4.80.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.16.0 to 1.16.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/46301256333c90b7faac7aa126effe72ec16d16e"><code>4630125</code></a> Release version 1.16.1 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/9865ca45490e4d0f7b6944870318408344570aff"><code>9865ca4</code></a> Support key/value header arrays.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8"><code>080a76d</code></a> Escape all RegExp modifiers.</li> <li>See full diff in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.16.0...v1.16.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=follow-redirects&package-manager=npm_and_yarn&previous-version=1.16.0&new-version=1.16.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/webpack/enhanced-resolve/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.16.1 to 1.16.2. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/e3b45a7a104fd84ab8e8914c78e9df4b930c1651"><code>e3b45a7</code></a> Release version 1.16.2 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/b0a7751e9cd64cd8eeb6ec67d2f206a9cc88d3f8"><code>b0a7751</code></a> Use Array.isArray.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/d96d1fe6781172705baf6ae2d3d56a2a99a52397"><code>d96d1fe</code></a> Add funding emergency notice.</li> <li>See full diff in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.16.1...v1.16.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=follow-redirects&package-manager=npm_and_yarn&previous-version=1.16.1&new-version=1.16.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/webpack/enhanced-resolve/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

## Summary `@types/node` 26 changed two sync methods: - **`fs.statSync`:** the `{ bigint: boolean }` overload now takes `throwIfNoEntry?: true` (24 declared `throwIfNoEntry?: false` while returning `Stats | BigIntStats`, though `false` can return `undefined`). - **`fs.readFileSync`:** dropped the overload that accepted every kind of options at once (`string | object | null | undefined`). Node's `fs` typed by 26 therefore no longer fits `ReadFileSync`, `StatSync` and `LStatSync` here. `new CachedInputFileSystem(fs)` fails to type-check for projects on `@types/node` 26, and webpack carries a `@ts-expect-error` on that line in `NodeEnvironmentPlugin`. This PR: - **`StatSync`/`LStatSync`:** keeps only the overloads 24 and 26 agree on. The `{ bigint: true | false }` forms now say `throwIfNoEntry?: true`, as 26 does. The `{ bigint: boolean }` form is dropped, so such a call goes to the general overload, which includes `undefined`, as Node can when `throwIfNoEntry` is `false`. - **`ReadFileSync`:** its last overload takes a required options object, matching what both versions provide. - **`SyncAsyncFileSystemDecorator`:** it forwarded `readFile`/`readFileSync` options to `fs.readFileSync` as a single value of all kinds. It now hands `null`/`undefined`, an encoding string and an options object each to their own overload through a small `readFileSyncWith` helper. Each branch makes the same call as before, so behavior is unchanged. Both directions type-check: - `npm run lint:types` and `lint:types-test` pass here, against `@types/node` 24. - With these types in webpack (`@types/node` 26), `new CachedInputFileSystem(fs, 60000)` is accepted. Once webpack's own `StatSync` drops the same `{ bigint: boolean }` overload, the result is assignable to webpack's `InputFileSystem` and the suppression can go. That webpack change is ready and waits for this release. ## Test `test/SyncAsyncFileSystemDecorator.test.js` reads a fixture through `readFileSync` and `readFile` with no options, `null`, an encoding string and an options object, and checks the buffer or string for each. ## Testing - `npm run lint:code`, `lint:types`, `lint:types-test`, `fmt:check` and `lint:spellcheck` pass. - All 1,640 tests pass, including the 5 new ones. --- --- _Generated by [Claude Code](https://claude.ai/code/session_01HArJAXZagrHVVNLZZk9soh)_   ## Summary by CodeRabbit * **Bug Fixes** * Synchronous and callback-based file reads now handle supported encoding options consistently, including omitted options and `null`. * File metadata type definitions now clarify when results may be absent and when they return number- or bigint-based stats. * **Compatibility** * Filesystem type definitions support projects using `@types/node` 26. * Additional file-read option types are available through the filesystem decorator’s type declarations.  --------- Co-authored-by: Claude Opus 5.5 <[email protected]>

`lts/*` now resolves to Node.js 26.13.0. On that version, the `@codspeed/core` native add-on fails to load before any benchmark runs: ``` node: symbol lookup error: .../@codspeed/core/prebuilds/linux-x64/node.napi.node: undefined symbol: _ZNK2v86String10Utf8LengthEPNS_7IsolateE ``` Because of this, both `benchmark (simulation)` and `benchmark (memory)` fail on `main` (e.g. run 41404243699) and on every pull request. This PR pins the benchmark job to Node.js `24.21.0`. That is the version the last measured `main` baseline used (CodSpeed run 6adf032a). Pinning to 24.22.0 first made memory benchmarks move by up to 68% on identical code, purely from the runtime patch version. Matching the baseline keeps comparisons like-for-like. A move to a newer Node.js can come later as its own change, re-baselined on `main`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01HArJAXZagrHVVNLZZk9soh --------- Co-authored-by: Claude Opus 5.5 <[email protected]>

@alexander-akait

This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated. # Releases ## [email protected] ### Patch Changes - Accept `fs` typed by `@types/node` 26 in the file system types. (by [@alexander-akait](https://github.com/alexander-akait) in [#700](#700)) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Navigation Menu

Repository navigation

Comparing changes

Open a pull request

Commits on Oct 5, 2026

Commits on Oct 12, 2026

Commits on Oct 19, 2026

Commits on Oct 20, 2026

Commits on Oct 26, 2026

Commits on Nov 2, 2026

Commits on Nov 3, 2026

This comparison is taking too long to generate.

Uh oh!