chore(deps): update npm non-breaking updates by renovate[bot] · Pull Request #44 · catbee-technologies/catbee-utils

Note: Version bump only for package @commitlint/config-conventional

scalar/scalar (@scalar/express-api-reference)

`v0.10.13`

`v0.10.12`

`v0.10.11`

Patch Changes

#9719: docs: update the Scalar platform overview block in the README

`v0.10.10`

Patch Changes

#9710: Republish so the updated README (with the Scalar platform overview) reaches npm. Also renames the README generator metadata in package.json from readme to scalarReadme: npm treats a readme field as the readme text itself, so affected packages were published with a literal [object Object] readme on the registry instead of README.md.

`v0.10.9`

`v0.10.8`

`v0.10.7`

`v0.10.6`

`v0.10.5`

`v0.10.4`

`v0.10.3`

`v0.10.2`

`v0.10.1`

`v0.10.0`

Minor Changes

#9422: Add a nonce option for Content Security Policy support.

When you pass a nonce, the rendered HTML stamps it onto the inline <script> and the CDN <script> tag (and Scalar's own <style> tags, plus a matching <meta property="csp-nonce">). This lets the API Reference run under a strict script-src with no unsafe-inline and no unsafe-eval.
```
ApiReference({
  url: '/openapi.json',
  // Match this value in your `script-src` CSP directive.
  nonce: 'r4nd0m',
})
```
Note: style-src still needs 'unsafe-inline'. The reference renders inline style="…" attributes, which a CSP nonce can never authorize (nonces only apply to <script>, <style> and <link> elements), so a nonce-only style-src is not possible. The win is a fully strict script-src.

`v0.9.20`

`v0.9.19`

`v0.9.18`

`v0.9.17`

`v0.9.16`

`v0.9.14`

`v0.9.13`

`v0.9.12`

`v0.9.11`

`v0.9.10`

`v0.9.9`

Patch Changes

#8873: refactor: migrate integrations to client-side rendering package

`v0.9.8`

`v0.9.7`

swc-project/swc (@swc/core)

`v1.15.47`

Bug Fixes

(es) Preserve numeric property key identity (#12050) (46900a3)
(es/ast) Support hashing non-finite numbers (#12043) (f4b85a6)
(es/codegen) Emit non-finite numeric literals (#12047) (883abc4)
(es/decorators) Avoid class state leakage for nested undecorated classes (#12076) (4c9d277)
(es/minifier) Apply ToInt32 when folding bitwise NOT (#12058) (550e2f7)
(es/minifier) Avoid inexact number radix folding (#12057) (506a0ea)
(es/minifier) Preserve invalid Array lengths (#12056) (3ce9e16)
(es/minifier) Preserve non-canonical arguments access (#12052) (850230b)
(es/minifier) Apply ToUint16 in fromCharCode (#12055) (9ae7b92)
(es/minifier) Index strings by UTF-16 code unit (#12054) (bc263d2)
(es/minifier) Use numeric literals for non-finite values (#12048) (b830786)
(es/minifier) Preserve top-level declarations referenced only by direct eval (#12029) (ad0e3b4)
(es/optimization) Preserve JSON numeric values (#12051) (667af8c)
(es/transforms) Use numeric literals for non-finite enum values (#12049) (1e3ed5c)
(es/typescript) Evaluate cooked enum templates (#12059) (49d0b0f)
(html/minifier) Preserve JSON script boundaries (#12080) (e1877b4)
(testing) Check ignored fixtures relative to crate root (#12073) (da858b4)
(ts/fast-strip) Preserve ASI before interpolated templates (#12040) (54467fe)
(ts/fast-strip) Preserve UTF-16 source positions (#12067) (ac4bfc9)

Features

(es/minifier) Expand support for trivial spreads (#12068) (aa49e36)
(es/react-compiler) Expose reactCompiler.environment.enableFunctionOutlining (#12030) (52b78aa)

Performance

(es/renamer) Skip identity rename mappings on apply (#12041) (0f9ff15)

`v1.15.46`

Bug Fixes

(deps) Update crossbeam-epoch to 0.9.20 (#12004) (fababa1)
(es/fixer) Normalize for-head ident patterns (#11968) (af681bc)
(es/fixer) Preserve parens around PURE-annotated receivers (#12022) (73d8941)
(es/hygiene) Ignore eval in default hygiene pass (#12003) (dd43ad6)
(es/minifier) Eliminate unused classes with cyclic references (#11963) (63a94b9)
(es/minifier) Preserve switch fallthrough termination (#11971) (a5d19ae)
(es/minifier) Check last case (#11972) (060c7ac)
(es/minifier) Disable IIFE invoke when there's eval (#11984) (eabe4be)
(es/minifier) Invoke IIFE when has eval (#11987) (457df11)
(es/minifier) Make Infect Collect collect every used ident (#11998) (fb9ebee)
(es/minifier) Measure number length precisely (#12026) (54d139a)
(es/module) Rewrite .tsx imports to .js unless JSX is preserved (#11995) (c341d9c)
(es/module) Rewrite SystemJS transform (#11996) (2f47530)
(es/modules) Resolve relative symlinked inputs from cwd (#11883) (01e857d)
(es/react) Emit jsxdev source for fragments (#11993) (a70ce24)
(es/react-compiler) Correct catch and parameter scope resolution (#11985) (3867e57)
(react-compiler) Remove React-like prefilter (#12007) (ab66869)
(ts/fast-strip) Handle generic arrow line breaks (#12034) (3d82701)

Documentation

(agents) Document minifier assumptions (#11966) (58df612)

Features

(bindings) Add lint / lintSync API to @swc/react-compiler (#11965) (ab4ce67)
(es/minifier) Remove unused param for new Function or Class Expr (#12017) (be56e09)
(es/minifier) Remove unused param for new expr (#12027) (661067c)
(wasm) Add @swc/nodejs-support-wasm (#11975) (b617562)

Refactor

(es/helpers) Generate inline helpers from canonical ESM sources (#12006) (f36e4b6)
(es/helpers) Remove unused jsx helper (#12009) (ccbc906)
(es/lexer) Remove smartstring dependency (#12013) (d6833cc)
(es/minifier) Remove ProgramData.top (#12031) (a72571f)
(es/module) Align module transform records with spec terms (#11992) (f680df5)
(es/module) Introduce source module lowering pipeline (#11999) (9609b7f)
Remove direct rkyv dependencies (#12010) (5761a2b)

Testing

(react-compiler) Add build-pass fixtures for wrapped assignment targets (#11967) (58d9b53)

Build

Remove vergen dependency (#11976) (26d8a28)

Ci

Allow publish milestone PR updates (#11960) (885d3e2)
Allow memmap2 advisory (#11961) (0be5872)
Update rust-toolchain action pin (#12021) (78b41b5)
Use Node.js 24 by default (#12035) (d658d08)
Update rust-toolchain action pin (#12036) (d1a1e23)
Use Node.js 24 for wasm publishing (#12038) (516bf3c)

`v1.15.43`

Bug Fixes

(es/es2022) Correct scope for private property brand checks (#11953) (fb5afa2)
(es/minifier) Preserve cooked when concatenating template literals (#11939) (a7244a6)
(es/minifier) Gate Number(x) -> +x on unsafe flag (#11944) (#11949) (6176019)
(es/parser) Parse Flow bare renders types (#11929) (a71c8eb)
(es/parser) Allow no-default builds (#11956) (baab240)
(es/react-compiler) Skip TypeScript this pseudo-params in scope collector (#11940) (9066c43)
(es/react-compiler) Scope ClassStaticBlock and TsModuleBlock as var boundaries (#11943) (1ee74a0)
(react-compiler) Avoid reporting non-fatal success errors as diagnostics (#11951) (cb4cb23)
(react-compiler) React compiler AST conversion for wrapped assignment targets (#11952) (fc9b453)
(react-compiler) Disable parser default features (#11957) (75ddb28)

Documentation

Document untrusted input security scope (#11937) (677305b)

Features

(es/react-compiler) Add React Compiler (#11917) (b182fbd)
(swc) Gate react compiler re-export (#11941) (dcc0f2d)

Miscellaneous Tasks

(es/react-compiler) Update forked react compiler to 0.2.0 (#11946) (6fbe188)

Refactor

(es/react-compiler) Preserve TS metadata during AST roundtrip (#11950) (9c4dec3)
Remove production tracing hooks (#11945) (0dffdc4)

`v1.15.41`

Bug Fixes

(bindings/node) Preserve source context for AST transforms (#11920) (b6dfa74)
(es/codegen) Emit export as namespace correctly (#11923) (4e1f832)
(es/codegen) Emit export as namespace minified correctly (#11924) (7157499)
(es/compat) Rewrite this in destructuring defaults (#11909) (68af779)
(es/decorators) Delay 2022 decorator initializers after private fields (#11847) (3f1a4f5)
(es/decorators) Handle import types in decorator metadata (#11916) (f411429)
(es/fixer) Preserve new tagged template callee parens (#11922) (242a03a)
(es/minifier) Handle unknown member props (#11927) (e59ba68)
(es/parser) Handle Flow async generic arrows (#11926) (b9b8993)
(es/renamer) Avoid duplicate mangled names across eval scope boundaries (#11913) (4a1af84)
(plugin) Avoid importing __free from env (#11908) (4584296)
(swc) Preserve plugin error context (#11904) (4e2e9fc)
(swc_common) Fix sourcemap panic for multibyte mapping positions (#11918) (40c1601)

Documentation

Fix architecture fixer link (#11911) (51cbc8c)

Performance

Lazily compute source file hashes (#11879) (a3cfbd7)
Optimize Atom equality (#11902) (c6f8cb0)

Revert

(es/decorators) Revert decorator initializer ordering (#11901) (a3f23b1)
(swc_common) Revert sourcemap multibyte mapping clamp (#11919) (08b4200)

`v1.15.40`

Bug Fixes

(es/minifier) Preserve args for destructured callbacks (#11830) (21873b0)
(es/minifier) Avoid generating mangled property names that collide with existing properties (#11839) (9b4fab5)
(es/minifier) Respect ecma for iife temp vars (#11873) (e481934)
(es/minifier) Preserve default parameter object props (#11884) (71ff84f)
(es/parser) Reject object-rest assignment to array/object literal (#11875) (7b57d1f)
(es/parser) Reject object rest assignment to literals (#11881) (4ec2eaf)
(es/react) Exclude self-recursive hooks from refresh dependency array (#11838) (9101c71)
(ts/fast-dts) Strip definite assertions in dts (#11858) (2ab1b8a)
(ts/fast-strip) Reject unsafe assertion erasure in binary expressions (#11828) (aa5b539)
(typescript) Strip parameter binding defaults in dts (#11857) (800bc17)

Documentation

Update agent guidance (#11842) (bf2d015)
Add security policy (#11876) (6c43c2d)
Clarify security scope for npm packages (#11877) (4662db8)
Clarify untrusted input security model (#11882) (5463777)

Features

(es/minifier) Fine grained effect analysis of class (#11814) (c9058ad)
(swc_cli) Implement all features for swc_cli (#11797) (9300ede)

Miscellaneous Tasks

(es/minifier) Fix typo in debug log (#11866) (3de0254)
(html) Add webcontainer fallback for @swc/html (#11860) (7692eed)

Performance

(ecma) Reduce transformer compat overhead (#11856) (d03cb71)
(es/codegen) Speed up JsWriter position and srcmap tracking (#11867) (dbceade)
(es/codegen) Remove JsWriter last_srcmap cache (#11869) (3bc1c2b)
(es/minifier) Reduce minifier profiling hotspots (#11853) (28c1091)
Optimize es parser comment finalization (#11852) (2959ddf)

Testing

(es/minifier) Move issue_11835 fixture out of terser folder (#11840) (3dd3431)

Ci

Update corepack in publish docker jobs (#11885) (9a7d954)
Pass publish docker env explicitly (#11888) (c5f7547)
Lock issues closed by merged prs (#11887) (6bd74e5)
Provide aarch64 musl linker in publish job (#11889) (20234fd)
Fix publish musl linker and windows tests (#11890) (a798a23)
Make minifier test path explicit (#11891) (e7cba97)

Security

Save CI caches only on main (#11848) (7582529)
Update rkyv and Rust dependencies (#11851) (20d92eb)
Harden PR workflow permissions (#11849) (e199564)

`v1.15.33`

Bug Fixes

(ci) Update rand lockfile entries (#11827) (7988966)
(es/minifier) Fold unary bool nullish coalescing (#11826) (e39ae3d)
(es/minifier) Preserve for-init sequence order (#11837) (16a56d0)
(es/parser) Parse empty Flow exact object type (#11836) (3d18a26)

Features

Move swc ast explorer into workspace (#11831) (02a8f81)

`v1.15.32`

Bug Fixes

(es/flow) Fix Flow type-only modules in script transforms (#11817) (be38316)
(es/flow) Avoid restoring module context when flow syntax is enabled (#11819) (3ed7243)
(es/minifier) Preserve frozen spread registry keys (#11825) (347181c)
(es/parser) Align Flow generic arrow JSX disambiguation (#11821) (28a7fad)

Features

(es) Add jsc.preserveSymlinks to swc::Options (#11813) (fe38342)

`v1.15.30`

Bug Fixes

(deploy) Fix musl binding test workflow (#11804) (c30a522)
(deploy) Build package ts before Linux GNU binding tests (#11806) (a3d3ef3)
(es/jsx) Preserve quoted JSX attribute newlines (#11796) (9fe56c8)
(es/minifier) Support full ES version parsing in minify (#11800) (af1f08f)
(es/module) Add opt-in symlink-preserving resolver (#11801) (6028240)
(es/parser) Allow return type annotation on Flow constructors (#11790) (d66b29c)
(es/parser) Support Flow anonymous keyof indexers (#11792) (452c4e5)
(es/parser) Add Flow strip RN and RNW regression corpus (#11799) (23a9109)

Documentation

Require PR template for pull requests (#11793) (3a1084a)

Features

(es/minify) Support extracting comments (#11798) (5986411)

`v1.15.26`

Bug Fixes

(es/decorators) Preserve super in moved static members (#11781) (778328e)
(es/decorators) Scope moved static super rewrite (#11782) (f73cacc)
(es/parser) Parse mixed Flow anonymous callable params (#11786) (05e7b69)
(es/transforms) Rewrite class references in non-static members (#11772) (fff1426)
(es/typescript) Handle TypeScript expressions in enum transformation (#11769) (85aa4a8)

Documentation

Document Flow strip support (#11778) (8f176cc)

Features

(swc_common) Add SourceMapper.map_raw_pos (#11777) (7d2e94c)
(swc_config) Add Hash/Eq for options and CachedRegex (#11775) (86a4c38)

Performance

(swc) Use larger input for es/full benchmarks (#11779) (4409920)

Refactor

(es/minifier) Inline into shorthand prop early (#11766) (450bdfa)

Build

Update rustc to nightly-2026-04-10 (#11783) (6facc79)

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.67.0`

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

`v8.66.0`

🩹 Fixes

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)
eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)
eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)
eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls ([#12591](https://redirect.github.com/typescrip

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Kolkata)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2025-11-15T08:34:32Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

sonarqubecloud · 2026-05-08T03:54:18Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

sonarqubecloud · 2026-05-10T10:45:28Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

sonarqubecloud · 2026-06-06T19:46:37Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

sonarqubecloud · 2026-06-12T13:46:48Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

socket-security · 2026-06-20T11:17:08Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
jest@30.3.0 ⏵ 30.4.2	⁺¹	⁺¹
rollup-plugin-dts@6.4.1 ⏵ 6.5.1			⁺⁸
@typescript-eslint/parser@8.58.1 ⏵ 8.67.0		⁺¹
@types/supertest@7.2.0 ⏵ 7.2.1
typescript-eslint@8.58.1 ⏵ 8.67.0		⁺¹
@typescript-eslint/eslint-plugin@8.58.1 ⏵ 8.67.0	⁺¹¹	⁺¹
@scalar/express-api-reference@0.9.6 ⏵ 0.10.13	⁺¹	⁺⁵	⁺¹
@types/node@25.5.2 ⏵ 25.9.5
helmet@8.1.0 ⏵ 8.3.0
dotenv@17.4.1 ⏵ 17.4.2			^-1
typescript@6.0.2 ⏵ 6.0.3
eslint-plugin-prettier@5.5.5 ⏵ 5.5.6		⁺¹	⁺⁵
@swc/core@1.15.24 ⏵ 1.15.47
@commitlint/config-conventional@20.5.0 ⏵ 20.5.3			^-4
ts-jest@29.4.9 ⏵ 29.4.12		⁺¹	⁺³
express-rate-limit@8.3.2 ⏵ 8.6.2
rollup@4.60.1 ⏵ 4.62.4			^-1
eslint@9.39.4 ⏵ 9.39.5
prettier@3.8.1 ⏵ 3.9.6		⁺¹

View full report

socket-security · 2026-06-20T11:17:09Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

github-actions · 2026-06-20T11:18:08Z

Package	Line Rate	Branch Rate	Health
array	97%	95%	✔
async	93%	85%	✔
cache	98%	91%	✔
config	100%	100%	✔
context-store	98%	94%	✔
crypto	92%	84%	✔
date	99%	79%	✔
decorator	90%	84%	✔
directory	97%	91%	✔
env	96%	88%	✔
exception	98%	89%	✔
fs	89%	84%	✔
http-status-codes	100%	100%	✔
id	100%	80%	✔
logger	93%	78%	✔
middleware	97%	83%	✔
object	95%	93%	✔
performance	100%	93%	✔
request	98%	92%	✔
response	100%	100%	✔
server	70%	50%	➖
stream	97%	83%	✔
string	90%	84%	✔
type	99%	100%	✔
url	100%	96%	✔
validation	93%	90%	✔
Summary	92% (4267 / 4621)	84% (2487 / 2971)	✔

github-actions · 2026-06-23T23:59:35Z

Package	Line Rate	Branch Rate	Health
array	97%	95%	✔
async	93%	85%	✔
cache	98%	91%	✔
config	100%	100%	✔
context-store	98%	94%	✔
crypto	92%	84%	✔
date	99%	79%	✔
decorator	90%	84%	✔
directory	97%	91%	✔
env	96%	88%	✔
exception	98%	89%	✔
fs	89%	84%	✔
http-status-codes	100%	100%	✔
id	100%	80%	✔
logger	93%	78%	✔
middleware	97%	83%	✔
object	95%	93%	✔
performance	100%	93%	✔
request	98%	92%	✔
response	100%	100%	✔
server	70%	50%	➖
stream	97%	83%	✔
string	90%	84%	✔
type	99%	100%	✔
url	100%	96%	✔
validation	93%	90%	✔
Summary	92% (4267 / 4621)	84% (2487 / 2971)	✔

github-actions · 2026-06-23T23:59:56Z

Package	Line Rate	Branch Rate	Health
array	97%	95%	✔
async	93%	85%	✔
cache	98%	91%	✔
config	100%	100%	✔
context-store	98%	94%	✔
crypto	92%	84%	✔
date	99%	79%	✔
decorator	90%	84%	✔
directory	97%	91%	✔
env	96%	88%	✔
exception	98%	89%	✔
fs	89%	84%	✔
http-status-codes	100%	100%	✔
id	100%	80%	✔
logger	93%	78%	✔
middleware	97%	83%	✔
object	95%	93%	✔
performance	100%	93%	✔
request	98%	92%	✔
response	100%	100%	✔
server	70%	50%	➖
stream	97%	83%	✔
string	90%	84%	✔
type	99%	100%	✔
url	100%	96%	✔
validation	93%	90%	✔
Summary	92% (4267 / 4621)	84% (2487 / 2971)	✔

sonarqubecloud · 2026-08-11T07:36:13Z

Quality Gate passed

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code