[dependabot]

Bumps the vscode-dependencies group in /vscode with 14 updates:

Package	From	To
liquidjs	10.29.0	10.30.1
@types/sinon	22.0.0	22.0.2
@vscode/vsce	4.0.0	4.1.0
eslint	10.11.0	10.13.0
eslint-plugin-jest	29.16.6	29.17.0
eslint-plugin-jsdoc	64.5.4	65.4.2
eslint-plugin-n	18.4.0	18.5.0
eslint-plugin-perfectionist	5.12.1	5.13.0
eslint-plugin-prettier	5.5.6	5.5.7
glob	13.0.6	14.0.3
mocha	12.0.2	12.0.3
npm-run-all2	9.0.3	9.0.4
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.1

Updates liquidjs from 10.29.0 to 10.30.1

Release notes

Sourced from liquidjs's releases.

v10.30.1

10.30.1 (2026-10-28)

Bug Fixes

• apply outputEscape to {% echo %} (46ab5d8)
• array_to_sentence_string: coerce non-array input with toArray (#968) (e843466), closes #964
• base64_decode: throw on invalid input in every build (#971) (83bbfe0), closes #965
• date_to_rfc822: use English day and month names (#974) (e94a1c4), closes #973
• filters: round must not alter large or high-precision numbers (#980) (ea22af4), closes hi#precision
• filters: truncate and slice must not split surrogate pairs (#981) (57016eb), closes String#length String#slice
• pad %Y to 4 digits like Ruby (#978) (95a2eed)
• security: apply outputEscape to {% cycle %} (#984) (2e1ebe0)

v10.30.0

10.30.0 (2026-10-01)

Bug Fixes

• base64_encode: encode large input in browser builds (#969) (8aace78), closes #967
• date: compute %C and %y from the numeric year (#961) (e68514f)
• date: compute %U and %W week numbers like strftime (#958) (0587ca8)
• trim custom characters by Unicode code point (#955) (3fe244f)
• truncatewords: ignore leading whitespace when counting words (#954) (65e200e)
• url_decode: keep %2B as a literal plus when decoding (#939) (9af92f5)

Features

• await promises returned by Drop.valueOf() (#948) (#953) (#959) (7dfa76b)

Changelog

Sourced from liquidjs's changelog.

10.30.1 (2026-10-28)

Bug Fixes

• apply outputEscape to {% echo %} (46ab5d8)
• array_to_sentence_string: coerce non-array input with toArray (#968) (e843466), closes #964
• base64_decode: throw on invalid input in every build (#971) (83bbfe0), closes #965
• date_to_rfc822: use English day and month names (#974) (e94a1c4), closes #973
• filters: round must not alter large or high-precision numbers (#980) (ea22af4), closes hi#precision
• filters: truncate and slice must not split surrogate pairs (#981) (57016eb), closes String#length String#slice
• pad %Y to 4 digits like Ruby (#978) (95a2eed)
• security: apply outputEscape to {% cycle %} (#984) (2e1ebe0)

10.30.0 (2026-10-01)

Bug Fixes

• base64_encode: encode large input in browser builds (#969) (8aace78), closes #967
• date: compute %C and %y from the numeric year (#961) (e68514f)
• date: compute %U and %W week numbers like strftime (#958) (0587ca8)
• trim custom characters by Unicode code point (#955) (3fe244f)
• truncatewords: ignore leading whitespace when counting words (#954) (65e200e)
• url_decode: keep %2B as a literal plus when decoding (#939) (9af92f5)

Features

• await promises returned by Drop.valueOf() (#948) (#953) (#959) (7dfa76b)

Commits

• 0b7e735 chore(release): 10.30.1 [skip ci]
• e843466 fix(array_to_sentence_string): coerce non-array input with toArray (#968)
• 83bbfe0 fix(base64_decode): throw on invalid input in every build (#971)
• edd0221 docs: add OsamaAnsar as a contributor for code (#985)
• 57016eb fix(filters): truncate and slice must not split surrogate pairs (#981)
• ea22af4 fix(filters): round must not alter large or high-precision numbers (#980)
• e94a1c4 fix(date_to_rfc822): use English day and month names (#974)
• 95a2eed fix: pad %Y to 4 digits like Ruby (#978)
• 2e1ebe0 fix(security): apply outputEscape to {% cycle %} (#984)
• 46ab5d8 fix: apply outputEscape to {% echo %}
• Additional commits viewable in compare view

Updates @types/sinon from 22.0.0 to 22.0.2

Commits

• See full diff in compare view

Updates @vscode/vsce from 4.0.0 to 4.1.0

Release notes

Sourced from @​vscode/vsce's releases.

v4.1.0

Changes:

• #1348: cli: Show OIDC publishing in help
• #1346: Set npm minimum release age and apply audit fixes
• #1345: publish: send X-Market-CI-Provider header with Marketplace requests
• #1342: chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 in the github-actions group
• #1335: chore(deps-dev): bump fast-uri from 3.1.6 to 3.1.8
• #1338: chore(deps): bump brace-expansion
• #1337: oidc: align token exchange with the Marketplace contract
• #1332: Update qs transitive dependency to 6.16.0

This list of changes was auto generated.

v4.0.1-6

Changes:

• #1348: cli: Show OIDC publishing in help

This list of changes was auto generated.

v4.0.1-5

Changes:

• #1346: Set npm minimum release age and apply audit fixes
• #1345: publish: send X-Market-CI-Provider header with Marketplace requests

This list of changes was auto generated.

v4.0.1-4

Changes:

• #1342: chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 in the github-actions group

This list of changes was auto generated.

v4.0.1-3

Changes:

• #1335: chore(deps-dev): bump fast-uri from 3.1.6 to 3.1.8

... (truncated)

Commits

• 33c66df Show OIDC publishing in help (#1348)
• cc5321a Set npm minimum release age and apply audit fixes (#1346)
• 402a12c Merge pull request #1345 from microsoft/benibenj/agents/ci-provider-header-lo...
• b84c665 Send CI provider header with Marketplace requests
• aeed595 chore(deps): bump actions/setup-node (#1342)
• 04811a9 chore(deps-dev): bump fast-uri from 3.1.6 to 3.1.8 (#1335)
• 19b4ca9 chore(deps): bump brace-expansion (#1338)
• 0765451 Merge pull request #1337 from microsoft/benibenj/agents/oidc-vsce-endpoint-up...
• c960f2e Update OIDC exchange to the final Marketplace contract
• c1eebf3 Update qs transitive dependency to 6.16.0 (#1332)
• See full diff in compare view

Updates eslint from 10.11.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

• 4637f98 10.13.0
• 96df05c Build: changelog update for 10.13.0
• 4783a68 docs: Update README
• b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410)
• 317fcb3 chore: update ecosystem plugins (#21409)
• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238)
• 43f0ac9 docs: clarify parameter description in getText (#21287)
• a39d9fb feat: add globalThis to no-obj-calls (#21382)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#21365)
• Additional commits viewable in compare view

Updates eslint-plugin-jest from 29.16.6 to 29.17.0

Release notes

Sourced from eslint-plugin-jest's releases.

v29.17.0

29.17.0 (2026-10-12)

Features

• no-standalone-expect: allow expect assertions in beforeEach hooks (#2031) (ddcab00)

v29.16.11

29.16.11 (2026-10-10)

Bug Fixes

• no-export: report export all declarations (#2040) (3ca13a7)
• no-mocks-import: check dynamic imports (#2039) (3e363d1)

v29.16.10

29.16.10 (2026-10-10)

Bug Fixes

• make sure most rules account for optional chaining (#2038) (2d68f61)

v29.16.9

29.16.9 (2026-10-10)

Bug Fixes

• consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)

Performance Improvements

• cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)

v29.16.8

29.16.8 (2026-10-10)

Bug Fixes

• prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)

v29.16.7

29.16.7 (2026-10-10)

... (truncated)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.17.0 (2026-10-12)

Features

• no-standalone-expect: allow expect assertions in beforeEach hooks (#2031) (ddcab00)

29.16.11 (2026-10-10)

Bug Fixes

• no-export: report export all declarations (#2040) (3ca13a7)
• no-mocks-import: check dynamic imports (#2039) (3e363d1)

29.16.10 (2026-10-10)

Bug Fixes

• make sure most rules account for optional chaining (#2038) (2d68f61)

29.16.9 (2026-10-10)

Bug Fixes

• consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)

Performance Improvements

• cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)

29.16.8 (2026-10-10)

Bug Fixes

• prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)

29.16.7 (2026-10-10)

Bug Fixes

• unbound-method: account for optional chaining (#2034) (b918d73)

Commits

• 0d0c459 chore(release): 29.17.0 [skip ci]
• ddcab00 feat(no-standalone-expect): allow expect assertions in beforeEach hooks (#2031)
• 69dd5bd chore(deps): lock file maintenance (#2042)
• 5878acf test: make test.each and it.each cases semantically valid (#2041)
• 1a7fc77 chore(release): 29.16.11 [skip ci]
• 3e363d1 fix(no-mocks-import): check dynamic imports (#2039)
• 3ca13a7 fix(no-export): report export all declarations (#2040)
• 169fda0 chore(release): 29.16.10 [skip ci]
• 2d68f61 fix: make sure most rules account for optional chaining (#2038)
• 68a144d chore(release): 29.16.9 [skip ci]
• Additional commits viewable in compare view

Updates eslint-plugin-jsdoc from 64.5.4 to 65.4.2

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v65.4.2

65.4.2 (2026-10-23)

Bug Fixes

• ts-method-signature-style: do not turn optional or readonly function properties into method signatures (94952b2)
• ts-method-signature-style: keep ? when converting between function properties and method signatures (a4040aa)

v65.4.1

65.4.1 (2026-10-22)

Bug Fixes

• ts-prefer-function-type: do not throw on call signatures inside object fields, parameters or return types, and keep the type when fixing (8830b2e)

v65.4.0

65.4.0 (2026-10-20)

Features

• check-tag-names: move matching @​prop descriptions onto properties (84eee2c), closes #1054

v65.3.16

65.3.16 (2026-10-20)

Bug Fixes

• handle typed computed properties; fixes #1822 (516263d)

v65.3.15

65.3.15 (2026-10-19)

Bug Fixes

• prefer-import-tag: only exempt @typedef itself, not every name-defining tag (4901870)
• prefer-import-tag: only use @typedef names as aliases for import() types (df6e281)

v65.3.14

65.3.14 (2026-10-19)

Bug Fixes

• check-param-names, require-jsdoc, convert-to-jsdoc-comments: do not throw on settings.jsdoc.contexts entries the rule cannot handle (f5ba20b)
• require-jsdoc, convert-to-jsdoc-comments: throw a clear error for a comment in the contexts setting (ebe5186)

... (truncated)

Commits

• a4040aa fix(ts-method-signature-style): keep ? when converting between function p...
• 94952b2 fix(ts-method-signature-style): do not turn optional or readonly function p...
• e4a69dd refactor: share rule defaults between code and meta.defaultOptions
• 45c789c chore: lint rule files with eslint-plugin-eslint-plugin
• 44a3c45 chore: update jsdoccomment, devDep
• 8830b2e fix(ts-prefer-function-type): do not throw on call signatures inside object...
• 0a1b435 docs: move nojekyll file to /docs
• a218be3 docs: avoid jekyll processing
• 1b32353 docs: fix issues with GH Pages
• 84eee2c feat(check-tag-names): move matching @​prop descriptions onto properties
• Additional commits viewable in compare view

Updates eslint-plugin-n from 18.4.0 to 18.5.0

Release notes

Sourced from eslint-plugin-n's releases.

v18.5.0

18.5.0 (2026-10-18)

🌟 Features

• node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

• no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
• no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

• explain module aliases for no-missing-require (#579) (fcf1256)

v18.4.1

18.4.1 (2026-10-03)

🩹 Fixes

• prefer-promises/fs: cover fs.watch (#566) (37bf3a2)
• properly handle extension override mappings in file-extension-in-import (#572) (995c881)

🧹 Chores

• cache parsed tsconfig per directory (#571) (1cfd694)
• Remove stale TypeScript suppressions blocking the Lint job (#574) (73f4d4f)
• resolve import targets lazily and reuse resolvers (#570) (aff82d1)

Changelog

Sourced from eslint-plugin-n's changelog.

18.5.0 (2026-10-18)

🌟 Features

• node-builtins: ✨ support 20.20, 22.23, 24.22 and 26.12 (#578) (2fa0069)

🩹 Fixes

• no-mixed-requires: classify modern Node built-ins (#580) (58c5d56)
• no-unsupported-features/es-syntax: Promise.withResolvers is supported since Node.js 22.0.0 (#577) (4a6dee1)

📚 Documentation

• explain module aliases for no-missing-require (#579) (fcf1256)

18.4.1 (2026-10-03)

🩹 Fixes

• prefer-promises/fs: cover fs.watch (#566) (37bf3a2)
• properly handle extension override mappings in file-extension-in-import (#572) (995c881)

🧹 Chores

• cache parsed tsconfig per directory (#571) (1cfd694)
• Remove stale TypeScript suppressions blocking the Lint job (#574) (73f4d4f)
• resolve import targets lazily and reuse resolvers (#570) (aff82d1)

Commits

• 5bbe603 chore(master): release 18.5.0 (#581)
• 2fa0069 feat(node-builtins): ✨ support 20.20, 22.23, 24.22 and 26.12 (#578)
• fcf1256 docs: explain module aliases for no-missing-require (#579)
• 58c5d56 fix(no-mixed-requires): classify modern Node built-ins (#580)
• 4a6dee1 fix(no-unsupported-features/es-syntax): Promise.withResolvers is supported si...
• f1d47af chore(master): release 18.4.1 (#573)
• 73f4d4f chore: Remove stale TypeScript suppressions blocking the Lint job (#574)
• 37bf3a2 fix(prefer-promises/fs): cover fs.watch (#566)
• aff82d1 perf: resolve import targets lazily and reuse resolvers (#570)
• 1cfd694 perf: cache parsed tsconfig per directory (#571)
• Additional commits viewable in compare view

Updates eslint-plugin-perfectionist from 5.12.1 to 5.13.0

Release notes

Sourced from eslint-plugin-perfectionist's releases.

v5.13.0

   🚀 Features

• Add sort-constructor-parameters rule  -  by @​hugop95 (4d542)

   🐞 Bug Fixes

• Restore alphabet reverse method  -  by @​azat-io (8292c)
• Register the exported plugin object in configs  -  by @​azat-io (a9361)
• Stop the tsconfig search at the drive root on windows  -  by @​azat-io (8a8f4)
• Validate setting values and allow partitioning imports by newlines  -  by @​azat-io (79513)
• Support lists of locales in natural sorting  -  by @​azat-io (f1665)
• sort-imports: Treat prefix-only modules without prefix as external  -  by @​azat-io (2e946)
• sort-maps: Reject newline options combined with partitioning by newlines  -  by @​azat-io (8c713)

   🏎 Performance

• Cache disabled lines and narrow dependency scope walks  -  by @​pbomb (8b7f6)
• Skip elements whose options cannot report errors  -  by @​pbomb (4d069)
• sort-objects: Skip work for objects that cannot be reported  -  by @​pbomb (0f3cd)

    View changes on GitHub

Changelog

Sourced from eslint-plugin-perfectionist's changelog.

v5.13.0

compare changes

🚀 Features

• Add sort-constructor-parameters rule (4d542f6)

🏎 Performance Improvements

• sort-objects: Skip work for objects that cannot be reported (0f3cda2)
• Cache disabled lines and narrow dependency scope walks (8b7f6d1)
• Skip elements whose options cannot report errors (4d06954)

🐞 Bug Fixes

• Restore alphabet reverse method (8292ce8)
• sort-imports: Treat prefix-only modules without prefix as external (2e94623)
• Register the exported plugin object in configs (a93611b)
• Stop the tsconfig search at the drive root on windows (8a8f4f3)
• Validate setting values and allow partitioning imports by newlines (7951342)
• Support lists of locales in natural sorting (f1665c1)
• sort-maps: Reject newline options combined with partitioning by newlines (8c713e1)

❤️ Contributors

• Azat S. to@azat.io
• Matt Parrish matt.r.parrish@icloud.com
• Hugo

Commits

• 9ee9e5b build: publish v5.13.0
• d898b96 docs: fix broken examples and reversed alias descriptions
• 640b3e2 docs: add playground
• 8c713e1 fix(sort-maps): reject newline options combined with partitioning by newlines
• f1665c1 fix: support lists of locales in natural sorting
• 11429bf chore: update dependencies
• 7951342 fix: validate setting values and allow partitioning imports by newlines
• 02a10f5 ci: add sort-constructor-parameters to allowed scopes
• 4d06954 perf: skip elements whose options cannot report errors
• 4d542f6 feat: add sort-constructor-parameters rule
• Additional commits viewable in compare viewDescription has been truncated