Update Mend: high confidence minor and patch dependency updates

[mend-for-github-com]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/chai (source)	4.3.16 -> 4.3.20
@types/config (source)	3.3.4 -> 3.3.5
@types/express-serve-static-core (source)	4.19.5 -> 4.19.6
@types/i18n (source)	^0.12.0 -> ^0.13.0
@types/jasmine (source)	~3.9.1 -> ~3.10.0
@types/multer (source)	1.4.11 -> 1.4.12
@types/pdfkit (source)	^0.10.6 -> ^0.13.0
@types/unzipper (source)	0.10.9 -> 0.10.10
@types/validator (source)	13.12.0 -> 13.12.2
@typescript-eslint/eslint-plugin (source)	6.18.1 -> 6.21.0
@typescript-eslint/parser (source)	6.18.1 -> 6.21.0
body-parser	1.20.2 -> 1.20.3
chai (source)	4.4.1 -> 4.5.0
core-js (source)	3.37.1 -> 3.38.1
eslint (source)	8.57.0 -> 8.57.1
eslint-config-prettier	7.1.0 -> 7.2.0
eslint-plugin-import	2.29.1 -> 2.31.0
ethers (source)	6.13.1 -> 6.13.4
express (source)	4.19.2 -> 4.21.1
http-server	^0.12.3 -> ^0.13.0
i18n	^0.11.1 -> ^0.15.0
jasmine-core (source)	~3.9.0 -> ~3.99.0
karma (source)	6.4.3 -> 6.4.4
karma-chrome-launcher	~3.1.0 -> ~3.2.0
node-pre-gyp	^0.15.0 -> ^0.17.0
pdfkit (source)	^0.11.0 -> ^0.15.0
rxjs (source)	6.6.3 -> 6.6.7
sanitize-html	1.4.2 -> 1.27.5
sass	1.77.8 -> 1.80.4
typescript (source)	~4.6.0 -> ~4.9.0
typescript (source)	~4.8.4 -> ~4.9.0
unzipper	0.9.15 -> 0.12.3
winston	3.13.1 -> 3.15.0
zustand	4.4.1 -> 4.5.5

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v6.21.0

Compare Source

🚀 Features

• export plugin metadata

• allow parserOptions.project: false

• eslint-plugin: add rule prefer-find

🩹 Fixes

• eslint-plugin: [no-unused-vars] don't report on types referenced in export assignment expression

• eslint-plugin: [switch-exhaustiveness-check] better support for intersections, infinite types, non-union values

• eslint-plugin: [consistent-type-imports] dont report on types used in export assignment expressions

• eslint-plugin: [no-unnecessary-condition] handle left-hand optional with exactOptionalPropertyTypes option

• eslint-plugin: [class-literal-property-style] allow getter when same key setter exists

• eslint-plugin: [no-unnecessary-type-assertion] provide valid fixes for assertions with extra tokens before as keyword

❤️ Thank You

• auvred
• Brad Zacher
• Kirk Waiblinger
• Pete Gonzalez
• YeonJuan

You can read about our versioning strategy and releases on our website.

v6.20.0

Compare Source

🚀 Features

• eslint-plugin: [member-ordering] allow easy reuse of the default ordering

🩹 Fixes

• eslint-plugin: [no-useless-template-literals] incorrect bigint autofix result

• eslint-plugin: [prefer-nullish-coalescing] treat any/unknown as non-nullable

• eslint-plugin: [no-useless-template-literals] report Infinity & NaN

• eslint-plugin: [prefer-readonly] disable checking accessors

❤️ Thank You

• Alex Parloti
• auvred
• James Browning
• StyleShit
• YeonJuan

You can read about our versioning strategy and releases on our website.

v6.19.1

Compare Source

🩹 Fixes

• type-utils: preventing isUnsafeAssignment infinite recursive calls

• eslint-plugin: [no-unnecessary-condition] fix false positive for type variable

❤️ Thank You

• YeonJuan

You can read about our versioning strategy and releases on our website.

v6.19.0

Compare Source

🚀 Features

• eslint-plugin: [prefer-promise-reject-errors] add rule

• eslint-plugin: [no-array-delete] add new rule

• eslint-plugin: [no-useless-template-literals] add fix suggestions

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] detect unnecessary non-null-assertion on a call expression

• eslint-plugin: [no-unnecesary-type-assertion] treat unknown/any as nullable

❤️ Thank You

• auvred
• Brad Zacher
• Josh Goldberg ✨
• Joshua Chen
• LJX
• Steven
• StyleShit

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v6.21.0

Compare Source

🚀 Features

• allow parserOptions.project: false

❤️ Thank You

• auvred
• Brad Zacher
• Kirk Waiblinger
• Pete Gonzalez
• YeonJuan

You can read about our versioning strategy and releases on our website.

v6.20.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v6.19.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v6.19.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

expressjs/body-parser (body-parser)

v1.20.3

Compare Source

===================

• deps: qs@6.13.0
• add depth option to customize the depth level in the parser
• IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

chaijs/chai (chai)

v4.5.0

Compare Source

• Update type detect (#​1631) 1a36d35

What's Changed

• Update type detect by @​koddsson in https://github.com/chaijs/chai/pull/1631

Full Changelog: chaijs/chai@v4.4.1...v4.5.0

zloirock/core-js (core-js)

v3.38.1

Compare Source

• Changes v3.38.0...v3.38.1
• Fixed some cases of URLSearchParams percent decoding, #​1357, #​1361, thanks @​slowcheetah
• Some stylistic changes and minor optimizations
• Compat data improvements:
  • Iterator helpers proposal methods marked as shipped from FF131
  • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23
  • RegExp.escape marked as shipped from Bun 1.1.22
  • Promise.try marked as shipped from Bun 1.1.22
  • Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22
  • Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
  • Added Opera Android 84 compat data mapping

v3.38.0

Compare Source

• Changes v3.37.1...v3.38.0
• RegExp.escape proposal:
  • Built-ins:
    • RegExp.escape
  • Moved to stage 3, June 2024 and July 2024 TC39 meetings
  • Updated the way of escaping, regex-escaping/77
  • Throw an error on non-strings, regex-escaping/58
  • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
• Promise.try proposal:
  • Built-ins:
    • Promise.try
  • Moved to stage 3, June 2024 TC39 meeting
  • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
• Uint8Array to / from base64 and hex stage 3 proposal:
  • Built-ins:
    • Uint8Array.fromBase64
    • Uint8Array.fromHex
    • Uint8Array.prototype.setFromBase64
    • Uint8Array.prototype.setFromHex
    • Uint8Array.prototype.toBase64
    • Uint8Array.prototype.toHex
  • Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods
  • Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33
  • Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60
  • Added throwing a TypeError on arrays backed by detached buffers
  • Unconditional forced replacement changed to feature detection
• Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #​1352, thanks @​Ulop
• Improved some cases of environment detection
• Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available
• Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #​1345
• Some minor optimizations
• Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #​1344, browserslist/829, browserslist/836
• Compat data improvements:
  • Added Safari 18.0 compat data:
    • Fixed Object.groupBy and Map.groupBy to work for non-objects
    • Fixed throwing a RangeError if Set methods are called on an object with negative size property
    • Fixed Set.prototype.symmetricDifference to call this.has in each iteration
    • Fixed Array.fromAsync to not call the Array constructor twice
    • Added URL.parse
  • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from FF129
  • Symbol.asyncDispose added and marked as supported from V8 ~ Chromium 127
  • Promise.try added and marked as supported from V8 ~ Chromium 128
  • Added Deno 1.44 and 1.45 compat data mapping
  • self descriptor is broken in Deno 1.45.3 (again)
  • Added Electron 32 and 33 compat data mapping
  • Added Opera Android 83 compat data mapping
  • Added Samsung Internet 27 compat data mapping
  • Added Oculus Quest Browser 34 compat data mapping

eslint/eslint (eslint)

v8.57.1

Compare Source

Bug Fixes

• a19072f fix: add logic to handle fixTypes in the lintText() method (#​18900) (Francesco Trotta)
• 04c7188 fix: Don't lint same file multiple times (#​18899) (Francesco Trotta)
• 87ec3c4 fix: do not throw when defining a global named __defineSetter__ (#​18898) (Francesco Trotta)
• 60a1267 fix: Provide helpful error message for nullish configs (#​18889) (Milos Djermanovic)
• a0dea8e fix: allow name in global ignores, fix --no-ignore for non-global (#​18875) (Milos Djermanovic)
• 3836bb4 fix: do not crash on error in fs.walk filter (#​18886) (Milos Djermanovic)
• 2dec349 fix: skip processor code blocks that match only universal patterns (#​18880) (Milos Djermanovic)

Documentation

• 6a5add4 docs: v8.x Add EOL banner (#​18744) (Amaresh S M)
• b034575 docs: v8.x add version support page to the dropdown (#​18731) (Amaresh S M)
• 760ef7d docs: v8.x add version support page in the side navbar (#​18740) (Amaresh S M)
• 428b7ea docs: Add Powered by Algolia label to the search (#​18658) (Amaresh S M)
• c68c07f docs: version selectors synchronization (#​18265) (Milos Djermanovic)

Build Related

• 35d366a build: Support updates to previous major versions (#​18870) (Milos Djermanovic)

Chores

• 140ec45 chore: upgrade @​eslint/js@​8.57.1 (#​18913) (Milos Djermanovic)
• bcdfc04 chore: package.json update for @​eslint/js release (Jenkins)
• 3f6ce8d chore: pin vite-plugin-commonjs@0.10.1 (#​18910) (Milos Djermanovic)
• 9f07549 chore: ignore /docs/v8.x in link checker (#​18660) (Milos Djermanovic)

prettier/eslint-config-prettier (eslint-config-prettier)

v7.2.0

Compare Source

• Added: [@​typescript-eslint/object-curly-spacing].
• Added: [react/jsx-newline].

import-js/eslint-plugin-import (eslint-plugin-import)

v2.31.0

Compare Source

Added

• support eslint v9 ([#​2996], thanks [@​G-Rath] [@​michaelfaith])
• [order]: allow validating named imports ([#​3043], thanks [@​manuth])
• [extensions]: add the checkTypeImports option ([#​2817], thanks [@​phryneas])

Fixed

• ExportMap / flat config: include languageOptions in context ([#​3052], thanks [@​michaelfaith])
• [no-named-as-default]: Allow using an identifier if the export is both a named and a default export ([#​3032], thanks [@​akwodkiewicz])
• [export]: False positive for exported overloaded functions in TS ([#​3065], thanks [@​liuxingbaoyu])
• exportMap: export map cache is tainted by unreliable parse results ([#​3062], thanks [@​michaelfaith])
• exportMap: improve cacheKey when using flat config ([#​3072], thanks [@​michaelfaith])
• adjust "is source type module" checks for flat config ([#​2996], thanks [@​G-Rath])

Changed

• [Docs] [no-relative-packages]: fix typo ([#​3066], thanks [@​joshuaobrien])
• [Performance] [no-cycle]: dont scc for each linted file ([#​3068], thanks [@​soryy708])
• [Docs] [no-cycle]: add disableScc to docs ([#​3070], thanks [@​soryy708])
• [Tests] use re-exported RuleTester ([#​3071], thanks [@​G-Rath])
• [Docs] [no-restricted-paths]: fix grammar ([#​3073], thanks [@​unbeauvoyage])
• [Tests] [no-default-export], [no-named-export]: add test case (thanks [@​G-Rath])

v2.30.0

Compare Source

Added

• [dynamic-import-chunkname]: add allowEmpty option to allow empty leading comments ([#​2942], thanks [@​JiangWeixian])
• [dynamic-import-chunkname]: Allow empty chunk name when webpackMode: 'eager' is set; add suggestions to remove name in eager mode ([#​3004], thanks [@​amsardesai])
• [no-unused-modules]: Add ignoreUnusedTypeExports option ([#​3011], thanks [@​silverwind])
• add support for Flat Config ([#​3018], thanks [@​michaelfaith])

Fixed

• [no-extraneous-dependencies]: allow wrong path ([#​3012], thanks [@​chabb])
• [no-cycle]: use scc algorithm to optimize ([#​2998], thanks [@​soryy708])
• [no-duplicates]: Removing duplicates breaks in TypeScript ([#​3033], thanks [@​yesl-kim])
• [newline-after-import]: fix considerComments option when require ([#​2952], thanks [@​developer-bandi])
• [order]: do not compare first path segment for relative paths ([#​2682]) ([#​2885], thanks [@​mihkeleidast])

Changed

• [Docs] [no-extraneous-dependencies]: Make glob pattern description more explicit ([#​2944], thanks [@​mulztob])
• [no-unused-modules]: add console message to help debug [#​2866]
• [Refactor] ExportMap: make procedures static instead of monkeypatching exportmap ([#​2982], thanks [@​soryy708])
• [Refactor] ExportMap: separate ExportMap instance from its builder logic ([#​2985], thanks [@​soryy708])
• [Docs] [order]: Add a quick note on how unbound imports and --fix ([#​2640], thanks [@​minervabot])
• [Tests] appveyor -> GHA (run tests on Windows in both pwsh and WSL + Ubuntu) ([#​2987], thanks [@​joeyguerra])
• [actions] migrate OSX tests to GHA ([ljharb#37], thanks [@​aks-])
• [Refactor] exportMapBuilder: avoid hoisting ([#​2989], thanks [@​soryy708])
• [Refactor] ExportMap: extract "builder" logic to separate files ([#​2991], thanks [@​soryy708])
• [Docs] [order]: update the description of the pathGroupsExcludedImportTypes option ([#​3036], thanks [@​liby])
• [readme] Clarify how to install the plugin ([#​2993], thanks [@​jwbth])

ethers-io/ethers.js (ethers)

v6.13.4

Compare Source

• Updated dependencies (1d717ef).
  • Fixed bug in JSON-RPC error checking (#​4827, #​4837, #​4851; be3e6b1).

v6.13.3

Compare Source

• Allow CCIP-read to continue during low-level fetch failures (#​4842; 1c31f95).

v6.13.2

Compare Source

• Prevent mutating transactions when signing (#​4789; 1a51af8).

expressjs/express (express)

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in https://github.com/expressjs/express/pull/6029
• Release: 4.21.1 by @​UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

v4.21.0

Compare Source

What's Changed

• Deprecate "back" magic string in redirects by [@​

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box