[dependabot]

Bumps the dev-patch group with 6 updates in the / directory:

Package	From	To
@commitlint/cli	21.2.3	21.2.4
@vitest/eslint-plugin	1.6.27	1.6.28
nock	15.0.1	15.0.6
prettier	3.9.9	3.9.10
rimraf	6.1.3	6.1.4
tsc-alias	1.9.5	1.9.10

Updates @commitlint/cli from 21.2.3 to 21.2.4

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

• fix(load): replace config file arrays with seed arrays by @​escapedcat in conventional-changelog/commitlint#5056
• fix: update dependency jsonc to v3 by @​renovate[bot] in conventional-changelog/commitlint#5020

Performance Improvements

• perf(load): load typescript configs with jiti directly by @​escapedcat in conventional-changelog/commitlint#5052

Docs, etc

• docs: add AGENTS.md with commit type guidance by @​escapedcat in conventional-changelog/commitlint#5053
• test(ensure): pin case conversion of digits, punctuation and accents by @​escapedcat in conventional-changelog/commitlint#5055

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/cli

Commits

• d8e3656 v21.2.4
• See full diff in compare view

Updates @vitest/eslint-plugin from 1.6.27 to 1.6.28

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.28

   🐞 Bug Fixes

• parse-vitest-fn-call: Recognize member-form hooks like test.aroundAll  -  by @​MFA-G in vitest-dev/eslint-plugin-vitest#959 (8eb69)
• prefer-comparison-matcher: Skip non-numeric operands with typecheck  -  by @​RagedPanda in vitest-dev/eslint-plugin-vitest#984 (a6acf)
• prefer-describe-function-title: Ignore type-only imports  -  by @​MFA-G in vitest-dev/eslint-plugin-vitest#957 (e2aaa)
• prefer-spy-on: Pass an implementation to mockImplementation in the fix  -  by @​RaphaelFakhri in vitest-dev/eslint-plugin-vitest#982 (4c0ae)
• unbound-method: Account for optional chaining  -  by @​G-Rath in vitest-dev/eslint-plugin-vitest#975 (743f8)

    View changes on GitHub

Commits

• c5df105 chore: release v1.6.28
• 8eb6991 fix(parse-vitest-fn-call): recognize member-form hooks like test.aroundAll ...
• e2aaac6 fix(prefer-describe-function-title): ignore type-only imports (#957)
• 4c0ae5a fix(prefer-spy-on): pass an implementation to mockImplementation in the fix (...
• a6acf78 fix(prefer-comparison-matcher): skip non-numeric operands with typecheck (#984)
• 743f81f fix(unbound-method): account for optional chaining (#975)
• 8bdb180 docs: typo in prefer-to-contain rule docs (#973)
• 0bea6e1 refactor(valid-expect): remove unneeded conditions and use optional chaining ...
• b3636d8 docs(consistent-test-it): fixed the description of the consistent-test-it opt...
• 22d672a chore: Update TypeScript version to v6 (#945)
• Additional commits viewable in compare view

Updates nock from 15.0.1 to 15.0.6

Release notes

Sourced from nock's releases.

v15.0.6

15.0.6 (2026-11-05)

Bug Fixes

• support @​mswjs/interceptors 0.45 by streaming delayed bodies wit… (#3056) (3e817ab)

v15.0.5

15.0.5 (2026-10-20)

Bug Fixes

• types: align Definition with runtime; add rawHeaders, drop headers (#3051) (415fc64)

v15.0.4

15.0.4 (2026-10-19)

Bug Fixes

• post release fixes (#3048) (fc32d74)

v15.0.3

15.0.3 (2026-10-19)

Bug Fixes

• count bytes, not characters, for replyContentLength (#3007) (5bfb9ed), closes String#length #2294

v15.0.2

15.0.2 (2026-10-16)

Bug Fixes

• don't decompress an empty request body (#3042) (76d2069), closes #3041

Commits

• 3e817ab fix: support @​mswjs/interceptors 0.45 by streaming delayed bodies wit… (#3056)
• 415fc64 fix(types): align Definition with runtime; add rawHeaders, drop headers (#3051)
• fc32d74 fix: post release fixes (#3048)
• 5bfb9ed fix: count bytes, not characters, for replyContentLength (#3007)
• 76d2069 fix: don't decompress an empty request body (#3042)
• d91282e Update migration guide for version 15 changes
• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Updates rimraf from 6.1.3 to 6.1.4

Commits

• cbbc000 6.1.4
• 3c35eb4 glob 14
• 5fd6d20 make taprc yaml
• 051e6c7 bump tap for better module.register/registerHooks behavior
• dec62fd update tap
• 9fd58c1 project updates
• a51c7b0 remove rimraf test start/end char stuff
• f433d9f ci: update test workflow
• 78d68ef update deps
• 7263194 test: make opt-arg output a less ridiculous amount of logging
• Additional commits viewable in compare view

Updates tsc-alias from 1.9.5 to 1.9.10

Release notes

Sourced from tsc-alias's releases.

v1.9.10 (2026-10-31)

🚀 Release v1.9.10

🌟 New Features & Enhancements

• Configurable Bare Package Subpath Resolution (resolvePackageSubpaths) : You can now explicitly control whether --resolve-full-paths appends extensions to third-party package subpaths (e.g., next/font/google).

  When using bundlers or packages without an exports field (like Next.js), you can prevent unwanted file extensions from breaking virtual/magic imports.

---

⚙️ How to use

Via tsconfig.json

{
  "compilerOptions": {
    "moduleResolution": "node"
  },
  "tsc-alias": {
    "resolveFullPaths": true,
    "resolvePackageSubpaths": false
  }
}

Via CLI

# Keep relative and alias extensions, but preserve bare package subpaths
tsc-alias --resolve-full-paths --no-resolve-package-subpaths

Via API

await replaceTscAliasPaths({
  resolveFullPaths: true,
  resolvePackageSubpaths: false
});

---

🐛 Bug Fixes & Smarter Defaults

• Default to false for moduleResolution: "bundler": If your tsconfig.json specifies "moduleResolution": "bundler" (or "Bundler"), bare package subpaths are automatically preserved as written by default.
• Full opt-out for moduleResolution: "node": Libraries built for bundlers with "moduleResolution": "node" can now cleanly opt out without staying locked on v1.9.7.

v1.9.9 (2026-10-22)

What's Changed

... (truncated)

Commits

• e314a74 1.9.10
• 4f5e0fd chore(ci): update pnpm to v12
• 4d2c016 chore: replace @​esfx/collections-hashmap with @​nestjs/common
• 63cee2f feat: add resolvePackageSubpaths option to control package subpath resolution
• a89851b Merge pull request #293 from justkey007:dependabot/npm_and_yarn/ip-address-10...
• 43dfaf0 Merge pull request #294 from awais-ur-rehman/tsc-alias:feat/preserve-bundler-...
• 22559d9 fix: preserve bundler package subpaths
• 344ac2d chore(deps): bump ip-address from 10.7.2 to 10.7.5
• dd4a35b 1.9.9
• 9759422 Merge pull request #291 from justkey007:justkey007/issue290
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions