chore(deps): bump the minor-and-patch group across 1 directory with 14 updates by dependabot[bot] · Pull Request #925 · lnp2pBot/bot

dependabot · 2026-09-07T06:04:35Z

Bumps the minor-and-patch group with 13 updates in the / directory:

Package	From	To
@grammyjs/ratelimiter	`1.2.0`	`1.2.1`
axios	`1.18.0`	`1.20.0`
canvas	`3.0.0`	`3.2.3`
invoices	`6.0.5`	`6.1.4`
lightning	`12.2.4`	`12.2.11`
nostr-tools	`2.10.3`	`2.25.2`
telegraf	`4.8.0`	`4.16.3`
winston	`3.17.0`	`3.19.0`
@types/node-schedule	`2.1.7`	`2.1.8`
@types/qrcode	`1.5.5`	`1.5.6`
@typescript-eslint/eslint-plugin	`8.11.0`	`8.69.0`
eslint-plugin-import	`2.31.0`	`2.32.0`
prettier	`3.6.2`	`3.9.6`

Updates @grammyjs/ratelimiter from 1.2.0 to 1.2.1

Commits

c2a6423 Update README.md to include keyPrefix
5966cde Merge pull request #11 from slavafomin/main
fedf4c3 Fixed defaultOptions typing
2462125 Removed extraneous undefined guard
0d9a4ec Added keyPrefix option, plus some trivial fixes
b089ea9 Merge pull request #9 from grammyjs/2024
ad096a1 chore: update license year to 2024
7a29c26 Merge pull request #8 from grammyjs/remove-charset
7f1542e chore: remove charset option from tsconfig
See full diff in compare view

Updates axios from 1.18.0 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)

Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)

XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)

Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)

Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)

Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)

Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)

CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

@yens1 (#11109)

@Sasireddy001 (#11113)

@ari-token-security (#11094)

@timothyokooboh (#11097)

@gi9439041-png (#11119)

@Hashim1999164 (#11082)

@v-dev-cl (#11091)

@r0h1tb (#11118)

@ostapondo (#11121)

Full Changelog (axios/axios@v1.19.0...v1.20.0)

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)

Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)

HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)

Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)

Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)

Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)

Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)

Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

@afonsojramos (#11028)

@MahinAnowar (#11006)

@yassertawfik4 (#11024)

@AnandSundar (#11029)

@lin-hongkuan (#11035)

@Wali007-lab (#11054)

@magicdawn (#11043)

... (truncated)

Commits

84a9f3b chore(release): prepare release 1.20.0 (#11152)
e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
d19040b fix: harden runtime option handling (#11141)
e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
ba98559 docs: add ScrapingBee sponsor (#11137)
Additional commits viewable in compare view

Updates canvas from 3.0.0 to 3.2.3

Release notes

Sourced from canvas's releases.

v3.2.3

Fixed

Fix building with gcc (#2559)

v3.2.2

Fixed

Fix dangling env pointer in image MIME data cleanup (#2550)

Fix ctx.direction not affected by ctx.save and ctx.restore

Preserve rest of PDF pages when changing width and height (#2538)

Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.

v3.2.1

3.2.1

Fix error message HTTP response status code in image src setter

roundRect() shape incorrect when radii were large relative to rectangle size (#2400)

Reject loadImage when src is null or invalid (#2304)

Fix compilation on GCC 15 by including <cstdint> (#2545)

v3.2.0

3.2.0

Added

Added ctx.lang to set the ISO language code for text

v3.1.2

3.1.2

Fixed

Fix crash when setting width/height on PDF, SVG canvas (#2520)

v3.1.1

3.1.1

This release also introduces arm64 prebuilds for Linux!

Fixed

Fix a crash when SVGs without width or height are loaded (#2486)

Fix fetching prebuilds during installation on certain newer versions of Node (#2497)

Fixed issue with fillText that was breaking subsequent fillText calls (#2171)

Fix svg rendering when the image is resized (#2498)

Fix measureText with direction rtl textAlign start/end

Fix a crash in Node 24, due to external memory API change (#2514)

v3.1.0

3.1.0

Replaced simple-get with Node.js builtin fetch (#2309)

ctx.font has a new C++ parser and is 2x-400x faster. Please file an issue if you experience different results, as caching has been removed.

The restriction of registering fonts before a canvas is created has been removed. You can now register a font as late as right before the fillText call (#1921)

... (truncated)

Changelog

Sourced from canvas's changelog.

3.2.3

Fixed

Fix building with gcc (#2559)

3.2.2

Fixed

Fix dangling env pointer in image MIME data cleanup (#2550)

Fix ctx.direction not affected by ctx.save and ctx.restore

Preserve rest of PDF pages when changing width and height (#2538)

Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.

3.2.1

Fix error message HTTP response status code in image src setter

roundRect() shape incorrect when radii were large relative to rectangle size (#2400)

Reject loadImage when src is null or invalid (#2304)

Fix compilation on GCC 15 by including (#2545)

3.2.0

Added

Added ctx.lang to set the ISO language code for text

3.1.2

Fixed

Fix crash when setting width/height on PDF, SVG canvas (#2520)

3.1.1

Fixed

Fix a crash when SVGs without width or height are loaded (#2486)

Fix fetching prebuilds during installation on certain newer versions of Node (#2497)

Fixed issue with fillText that was breaking subsequent fillText calls (#2171)

Fix svg rendering when the image is resized (#2498)

Fix measureText with direction rtl textAlign start/end

Fix a crash in Node 24, due to external memory API change (#2514)

3.1.0

Changed

Replaced simple-get with Node.js builtin fetch (#2309)

ctx.font has a new C++ parser and is 2x-400x faster. Please file an issue if you experience different results, as caching has been removed.

The restriction of registering fonts before a canvas is created has been removed. You can now register a font as late as right before the fillText call (#1921)

Added

Support for accessibility and links in PDFs

ctx.direction is implemented: 'rtl' or 'ltr' set the base direction of text

... (truncated)

Commits

f91598e v3.2.3
1541544 PAGE_SIZE shouldn't be unsigned
ac82fa7 v3.2.2
103a620 add the last flurry of commits to CHANGELOG
7304c7a avoid integer overflow in getImageData
f9fcc5f avoid integer overflow in putImageData
802a8ca avoid integer overflow in new ImageData
9d1b478 wrap negative values passed to createImageData
779483c bail early when setting zero-length image source
22ed2b7 make canvas types unsigned
Additional commits viewable in compare view

Updates invoices from 6.0.5 to 6.1.4

Changelog

Sourced from invoices's changelog.

6.1.4

parsePaymentRequest: Add support for signet payment requests

Commits

See full diff in compare view

Updates lightning from 12.2.4 to 12.2.11

Changelog

Sourced from lightning's changelog.

12.2.11

Add support for LND 0.21.3

Add support for LND 0.20.4

12.2.10

Add support for LND 0.21.2

Add support for LND 0.20.3

Commits

See full diff in compare view

Updates nostr-tools from 2.10.3 to 2.25.2

Commits

e1a62b9 close socket from failed connect.
a8fc349 nip27: emit start and ending offsets.
a8c6976 merge nipb0 into nipb7 (I got confused) and fix blossom atob() encoding error.
3000ffa forward options from Relay.connect() to relay.connect().
f4d9a25 Use limit:1 for enablePing dummy REQ
3b58d14 Add React Native section to the README
70eabad basic NIP-AD implementation.
a2fd116 fix(nip46): require a secret in nostrconnect:// URIs
c6d4311 fix(nip98): reject tokens whose created_at is in the future
2ec294b fix(nip59): bind the rumor to the seal when unwrapping
Additional commits viewable in compare view

Updates telegraf from 4.8.0 to 4.16.3

Release notes

Sourced from telegraf's releases.

v4.16.3

Fix: bug with link_preview_options.url caused client to try sending it as media

Fix: add CommandContextExtn type to Composer::{start|help|settings} (adds ctx.command, payload, args)

v4.16.2

Fixed Context::text: was undefined if entities was undefined. Thanks to @AnotiaWang.

v4.16.1

Fixed Context::from: now uses callbackQuery.from instead of msg.from

v4.16.0

Phew, what a feature-packed release! 🎉

*tsk tsk* There's a big announcement at the end of this release!

Support for API 7.0. Highlights are Reactions, Replies 2.0, Link Previews, Blockquotes, and Chat Boosts.

Support for API 7.1.

All methods and update types from these API versions are now fully supported.
To listen on reaction addition and removal, use Composer.reaction:
bot.reaction("👍", (ctx) => {
  // user added a 👍 reaction
});
// prefix with - to listen to reaction removal
bot.reaction("-👍", (ctx) => {
// user removed a 👍 reaction
});
This also just works with custom emoji IDs.
bot.reaction("5368742036629364794", (ctx) => {
  // user added a reaction with the given custom emoji ID
});
bot.reaction("-5368742036629364794", (ctx) => {
// user removed a reaction with the given custom emoji ID
});

... (truncated)

Commits

c591338 chore: lint fix
a0f65f4 fix: includesMedia fix was incorrect
0e3b59f ver: 4.16.3
6a1d6cf fix: add CommandContextExtn to start, help, settings
b68b961 tempfix: except link_preview_options in includesMedia:
e881fa6 ver: 4.16.2
7f2a081 fix: Context::text is undefined when message has only text but no entities ...
d180036 ver: 4.16.1
5bb62ee fix: use callbackQuery.from instead of msg.from
096dd01 merge: #1949 from telegraf/feat/api-7.0
Additional commits viewable in compare view

Updates winston from 3.17.0 to 3.19.0

Release notes

Sourced from winston's releases.

v3.19.0

Run npm audit fix e7ccdc4

Don't include jest.config.js in npm package 5a63c8c

fix: append error cause when using logger.child() (#2467) e74a7ae

Bump rimraf from 5.0.1 to 5.0.10 (#2517) 8a956fd

fix: ensure File transport flushes all data before emitting finish (#2594) 86c890f

Bump actions/setup-node from 4 to 6 (#2589) 3b8be02

Bump @babel/core from 7.28.0 to 7.28.5 (#2591) f4c3e2c

Bump actions/checkout from 4 to 6 (#2593) dd7906e

chore: migrate test runner from mocha to jest (#2567) 2e9eb18

winstonjs/winston@v3.18.3...v3.19.0

v3.18.3

Update diagnostics dependency (removes fix-esm transitive dependency) a15a9e9

winstonjs/winston@v3.18.2...v3.18.3

v3.18.2

Bump diagnostics package to resolve #2583 (again) f4582c3

winstonjs/winston@v3.18.1...v3.18.2

v3.18.1

Bump diagnostics package to resolve #2583 e668c2c

winstonjs/winston@v3.18.0...v3.18.1

v3.18.0

Update diagnostics package to latest version to remove vulnerability 376e331

add @initd.sg/winston-cloudwatch (#2532) 71ee92a

Update transports.md (#2549) 3547a95

docs: update transport.md (#2550) dc88db0

feat: adds helper function for highest log level (#2514) c69cdb0

winstonjs/winston@v3.17.0...v3.18.0

Commits

ed45345 3.19.0
e7ccdc4 Run npm audit fix
5a63c8c Don't include jest.config.js in npm package
e74a7ae fix: append error cause when using logger.child() (#2467)
8a956fd Bump rimraf from 5.0.1 to 5.0.10 (#2517)
86c890f fix: ensure File transport flushes all data before emitting finish (#2594)
3b8be02 Bump actions/setup-node from 4 to 6 (#2589)
f4c3e2c Bump @babel/core from 7.28.0 to 7.28.5 (#2591)
dd7906e Bump actions/checkout from 4 to 6 (#2593)
2e9eb18 chore: migrate test runner from mocha to jest (#2567)
Additional commits viewable in compare view

Updates @types/node-schedule from 2.1.7 to 2.1.8

Commits

See full diff in compare view

Updates @types/qrcode from 1.5.5 to 1.5.6

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.11.0 to 8.69.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)

eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)

eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)

website: respect allowJs playground config (#12744)

❤️ Thank You

Abdu Alim Arlikhozhaev @Arlikhozhaev

Evyatar Daud @StyleShit

Josh Goldberg ✨

wonbeanie @wonbeanie

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.69.0 (2026-08-31)

🚀 Features

eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)

eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)

eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)

❤️ Thank You

Abdu Alim Arlikhozhaev @Arlikhozhaev

Evyatar Daud @StyleShit

Josh Goldberg ✨

wonbeanie @wonbeanie

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

🩹 Fixes

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Niki @phaux

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

... (truncated)

Commits

9a6e546 chore(release): publish 8.69.0
513638e fix(eslint-plugin): [no-meaningless-void-operator] report void on non-call ex...
1dba4c5 chore(eslint-plugin): fix eslint-plugin/require-test-error-positions report...
a2fccae fix(eslint-plugin): [unified-signatures] compare type parameters by constrain...
a23069d test(eslint-plugin): [no-mixed-enums] add error positions (#12779)
3f0dffd fix(eslint-plugin): [no-mixed-enums] use scope analysis instead of type check...
e18fea8 test(eslint-plugin): [no-floating-promises] reactivate skipped node:test sp...
324515c test(eslint-plugin): [no-unnecessary-condition] add tests for optional chains...
2a387f1 feat(eslint-plugin): [no-misused-promises] add flagUnions option for checkCon...
8f4e00a chore(release): publish 8.68.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @typescript-eslint/eslint-plugin since your current version.

Updates @typescript-eslint/parser from 8.11.0 to 8.69.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)

eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)

eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)

website: respect allowJs playground config (#12744)

❤️ Thank You

Abdu Alim Arlikhozhaev @Arlikhozhaev

Evyatar Daud @StyleShit

Josh Goldberg ✨

wonbeanie @wonbeanie

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.69.0 (2026-08-31)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits

9a6e546 chore(release): publish 8.69.0
8f4e00a chore(release): publish 8.68.0
55f6d5d chore: enable source maps (#12677)
20a261f chore(release): publish 8.67.0
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
63ba81b chore(release): publish 8.6...
Description has been truncated

…4 updates Bumps the minor-and-patch group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@grammyjs/ratelimiter](https://github.com/grammyjs/rateLimiter) | `1.2.0` | `1.2.1` | | [axios](https://github.com/axios/axios) | `1.18.0` | `1.20.0` | | [canvas](https://github.com/Automattic/node-canvas) | `3.0.0` | `3.2.3` | | [invoices](https://github.com/alexbosworth/invoices) | `6.0.5` | `6.1.4` | | [lightning](https://github.com/alexbosworth/lightning) | `12.2.4` | `12.2.11` | | [nostr-tools](https://github.com/nbd-wtf/nostr-tools) | `2.10.3` | `2.25.2` | | [telegraf](https://github.com/telegraf/telegraf) | `4.8.0` | `4.16.3` | | [winston](https://github.com/winstonjs/winston) | `3.17.0` | `3.19.0` | | [@types/node-schedule](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node-schedule) | `2.1.7` | `2.1.8` | | [@types/qrcode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qrcode) | `1.5.5` | `1.5.6` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.11.0` | `8.69.0` | | [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.31.0` | `2.32.0` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.6` | Updates `@grammyjs/ratelimiter` from 1.2.0 to 1.2.1 - [Commits](grammyjs/ratelimiter@v1.2.0...v1.2.1) Updates `axios` from 1.18.0 to 1.20.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.0...v1.20.0) Updates `canvas` from 3.0.0 to 3.2.3 - [Release notes](https://github.com/Automattic/node-canvas/releases) - [Changelog](https://github.com/Automattic/node-canvas/blob/master/CHANGELOG.md) - [Commits](Automattic/node-canvas@v3.0.0...v3.2.3) Updates `invoices` from 6.0.5 to 6.1.4 - [Changelog](https://github.com/alexbosworth/invoices/blob/master/CHANGELOG.md) - [Commits](https://github.com/alexbosworth/invoices/commits) Updates `lightning` from 12.2.4 to 12.2.11 - [Changelog](https://github.com/alexbosworth/lightning/blob/master/CHANGELOG.md) - [Commits](https://github.com/alexbosworth/lightning/commits) Updates `nostr-tools` from 2.10.3 to 2.25.2 - [Release notes](https://github.com/nbd-wtf/nostr-tools/releases) - [Commits](nbd-wtf/nostr-tools@v2.10.3...v2.25.2) Updates `telegraf` from 4.8.0 to 4.16.3 - [Release notes](https://github.com/telegraf/telegraf/releases) - [Commits](telegraf/telegraf@v4.8.0...v4.16.3) Updates `winston` from 3.17.0 to 3.19.0 - [Release notes](https://github.com/winstonjs/winston/releases) - [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md) - [Commits](winstonjs/winston@v3.17.0...v3.19.0) Updates `@types/node-schedule` from 2.1.7 to 2.1.8 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node-schedule) Updates `@types/qrcode` from 1.5.5 to 1.5.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qrcode) Updates `@typescript-eslint/eslint-plugin` from 8.11.0 to 8.69.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.11.0 to 8.69.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/parser) Updates `eslint-plugin-import` from 2.31.0 to 2.32.0 - [Release notes](https://github.com/import-js/eslint-plugin-import/releases) - [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md) - [Commits](import-js/eslint-plugin-import@v2.31.0...v2.32.0) Updates `prettier` from 3.6.2 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.9.6) --- updated-dependencies: - dependency-name: "@grammyjs/ratelimiter" dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: axios dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: canvas dependency-version: 3.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: invoices dependency-version: 6.1.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: lightning dependency-version: 12.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: nostr-tools dependency-version: 2.25.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: telegraf dependency-version: 4.16.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: winston dependency-version: 3.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node-schedule" dependency-version: 2.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/qrcode" dependency-version: 1.5.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.69.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/parser" dependency-version: 8.69.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: eslint-plugin-import dependency-version: 2.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026

Navigation Menu

Uh oh!

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates - #925

chore(deps): bump the minor-and-patch group across 1 directory with 14 updates#925
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-4985efac9b

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026

v1.20.0 — August 19, 2026

⚠️ Breaking Changes & Deprecations

🔒 Security Fixes

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.19.0 - July 22, 2026

🔒 Security Fixes

Changelog

v1.19.0 — July 22, 2026

🔒 Security Fixes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v3.2.3

Fixed

v3.2.2

Fixed

v3.2.1

3.2.1

v3.2.0

3.2.0

Added

v3.1.2

3.1.2

Fixed

v3.1.1

3.1.1

Fixed

v3.1.0

3.1.0

3.2.3

Fixed

3.2.2

Fixed

3.2.1

3.2.0

Added

3.1.2

Fixed

3.1.1

Fixed

3.1.0

Changed

Added

6.1.4

12.2.11

12.2.10

v4.16.3

v4.16.2

v4.16.1

v4.16.0

v3.19.0

v3.18.3

v3.18.2

v3.18.1

v3.18.0

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

8.69.0 (2026-08-31)

🚀 Features

🩹 Fixes

❤️ Thank You

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

8.67.0 (2026-08-10)