Bump the all-dependencies group with 4 updates

[dependabot]

Bumps the all-dependencies group with 4 updates: esrap, oxc-parser, @types/node and tsx.

Updates esrap from 2.2.6 to 2.2.9

Release notes

Sourced from esrap's releases.

v2.2.9

Patch Changes

• aa3078c: fix: keep braces for concise arrow functions with as/satifies type suffix

v2.2.8

Patch Changes

• 6e22ff0: fix: emit valid TS for aliased inline-type import specifiers

  ImportSpecifier with both importKind: 'type' and an alias (e.g. import { type Foo as Bar } from '...') was being printed as Foo as type Bar, which is not valid TypeScript. The type keyword now precedes the imported identifier instead of the local.

v2.2.7

Patch Changes

• 5d382df: fix: print type parameters and return type of arrow functions, and default of type parameters
• 02b140b: fix: add locations to keywords

Changelog

Sourced from esrap's changelog.

2.2.9

Patch Changes

• aa3078c: fix: keep braces for concise arrow functions with as/satifies type suffix

2.2.8

Patch Changes

• 6e22ff0: fix: emit valid TS for aliased inline-type import specifiers

  ImportSpecifier with both importKind: 'type' and an alias (e.g. import { type Foo as Bar } from '...') was being printed as Foo as type Bar, which is not valid TypeScript. The type keyword now precedes the imported identifier instead of the local.

2.2.7

Patch Changes

• 5d382df: fix: print type parameters and return type of arrow functions, and default of type parameters
• 02b140b: fix: add locations to keywords

Commits

• 0d601c9 Version Packages (#123)
• aa3078c fix: keep braces for concise arrow functions with as/satifies type suffix (...
• a8bcc9d Version Packages (#120)
• 6e22ff0 fix: emit valid TS for aliased inline-type import specifiers (#119)
• f668499 Version Packages (#118)
• 5d382df fix: print type parameters and return type of arrow functions (#115)
• 02b140b fix: add locations to keywords (#116)
• See full diff in compare view

Updates oxc-parser from 0.129.0 to 0.131.0

Release notes

Sourced from oxc-parser's releases.

oxc crates_v0.131.0

🚀 Features

• bc91a17 codegen: Expose Codegen::with_source_type method (#22432) (camc314)

🐛 Bug Fixes

• 703557c codegen: Keep exports[STR] = … key as plain string in minify (#22402) (Dunqing)
• 5ac7e79 minifier: Drop unused-var-init pure IIFEs and preserve annotation for downstream (#22349) (Dunqing)
• 4ab57eb allocator: Fixed-size allocators use VirtualAlloc on Windows (#22124) (overlookmotel)
• 66d77eb allocator: Fix segfault on Linux MUSL with fixed-size allocators (#22388) (overlookmotel)
• b8fbc1f transformer/object-rest-spread: Correct scope id when moving bindings (#22419) (camc314)
• 18edc2c codegen: Keep Object.defineProperty property name as plain string in minify (#22400) (Dunqing)
• dda33de transformer/explicit-resource-management: Align lexical binding scopes (#22320) (camc314)
• 8e79de8 transformer: Preserve for-await statement bodies (#22361) (camc314)
• 0cba210 transformer/class: Replace new.target in static blocks (#22360) (camc314)
• 67ab1c9 transformer/es2018/for-await: Hoist for-await generated bindings (#22355) (camc314)
• c3ceb4a transformer/object-rest-spread: Use hoisted scope for for-of temp refs (#22347) (camc314)

⚡ Performance

• 73a9043 allocator/bitset: Avoid temp heap String allocation (#22403) (camc314)
• 8b2f4f9 transformer/object-rest-spread: Collect Vec<SymbolId over Vec<BindingIdentifier> (#22418) (camc314)
• 83679ea parser: Split TriviaBuilder::handle_token hot/cold paths (#22415) (Boshen)
• 2c7d781 codegen: Inline identifier-name accessors (#22411) (Boshen)
• 618bc76 diagnostics: Inline OxcDiagnosticInner to avoid heap allocation (#22406) (Boshen)
• 0b4e158 parser: Reserve cap 2 for sequence expressions vec (#22374) (camc314)
• 5f3bdd0 codegen: Add #[inline] to code, code_len (#22373) (camc314)

oxc crates_v0.130.0

🚀 Features

• 66c9b01 transformer/typescript: Debug_assert that enum_eval ran in semantic (#22252) (Dunqing)
• ffe6475 minifier: Fold Array constructor with safe spreads (#22215) (camc314)

🐛 Bug Fixes

• d3d0b18 traverse: Handle ChainElement::TSNonNullExpression in GatherNodeParts (#22247) (leaysgur)
• 4e880de transformer/object-rest-spread: Declare temp vars for computed keys (#22284) (camc314)
• a7c3e22 semantic: Clear member write target for computed keys (#22302) (camc314)
• 6a8852d codegen: Emit newline after legal-comment orphan flush (#22304) (Dunqing)
• 5da9fda transformer/explicit-resource-management: Preserve class names (#22306) (Dunqing)
• b5d970f transformer/explicit-resource-management: Preserve class names (#22290) (camc314)
• bc54fd4 minifier: Keep function / class names if direct eval is present in the scope (#22241) (sapphi-red)
• 7a810c0 minifier: Refresh direct eval flags after DCE (#21787) (Dunqing)
• dd88726 transformer/legacy-decorator: Preserve accessor type annotation for emitDecoratorMetadata (#21966) (Dunqing)
• 29a3cd7 codegen: Swap mapping/indent order for top-level decls (#22206) (Dunqing)
• 73b4f40 minifier: Preserve catch binding with direct eval (#22221) (camc314)
• 0e13d17 minifier: Preserve optional chain base side effects (#22219) (camc314)
• 0c7c01c transformer/typescript: Inline optional-chain enum member access (#21834) (Dunqing)

... (truncated)

Changelog

Sourced from oxc-parser's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.130.0] - 2026-05-11

📚 Documentation

• a4a6892 napi/parser: Correct code comment (#22278) (overlookmotel)

Commits

• 564ebbf release(crates): oxc v0.131.0 (#22459)
• e3b0d54 refactor(napi/parser, linter/plugins): improve safety of raw transfer interfa...
• c2c8f80 refactor(napi/parser): raw transfer store source text at end of buffer (#22392)
• 650417f release(crates): oxc v0.130.0 (#22316)
• a4a6892 docs(napi/parser): correct code comment (#22278)
• 24946be refactor(napi/parser): use rolldown for browser bundle (#22231)
• See full diff in compare view

Updates @types/node from 25.6.2 to 25.8.0

Commits

• See full diff in compare view

Updates tsx from 4.21.0 to 4.22.0

Release notes

Sourced from tsx's releases.

v4.22.0

4.22.0 (2026-05-14)

Features

• upgrade esbuild to 0.28 (#789) (b29f6ee)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.21.1

4.21.1 (2026-05-14)

Bug Fixes

• support Node 20.11/21.2 import.meta paths (acf3d8f)
• support Node.js 24.15.0 (c1d2d45)
• support Node.js 26.1.0 and 25.9.0 (1d7e528)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• b29f6ee feat: upgrade esbuild to 0.28 (#789)
• 0dd17e9 test: cover registerHooks loader composition
• acf3d8f fix: support Node 20.11/21.2 import.meta paths
• 4bbef80 test: cover configDir paths without baseUrl
• dddc5ce test: cover sync-hook watch reruns and cleanup retries
• 09e8f8c test: assert CLI runs without warnings
• 1d7e528 fix: support Node.js 26.1.0 and 25.9.0
• c1d2d45 fix: support Node.js 24.15.0
• d04672d test: update node version feature gates
• abd863f build: bundle get-tsconfig v5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions