[dependabot]

Bumps the minor-patch group with 6 updates in the / directory:

Package	From	To
@lightningjs/blits	2.8.9	2.10.0
eslint	10.10.0	10.11.0
lint-staged	17.5.0	17.5.1
prettier	3.9.6	3.9.8
shaka-player	5.2.9	5.2.11
vite	8.2.2	8.3.0

Updates @lightningjs/blits from 2.8.9 to 2.10.0

Release notes

Sourced from @​lightningjs/blits's releases.

v2.10.0

• Fixed / improved type definitions
• Fixed issue with accidental sideeffect running when $hasFocus triggers after destroy
• Fixed issue where an error in an effect can break execution of other effects
• Added support for reactivity of array.length
• Improved reactivity in the case of nested array operations
• Fixed case where transition callbacks could run after destroy
• Fixed case where keyup callback could fire after component destroy
• Improved error handling and parse rejection for fetchJson method
• Fixed typing of fpsUpdate
• Added textCalculated listener to trigger layout changes
• Added mouseMoveThrottle setting to configure responsiveness of mouse movements
• Fixed issue where hover is not recognized after keyboard use
• Added support for numeric rgba colors
• Bumped renderer to 3.5.0

v2.9.0

• Added DOM based Aria announcer implementation

Changelog

Sourced from @​lightningjs/blits's changelog.

2.10.0

21 sep 2026

• Fixed / improved type definitions
• Fixed issue with accidental sideeffect running when $hasFocus triggers after destroy
• Fixed issue where an error in an effect can break execution of other effects
• Added support for reactivity of array.length
• Improved reactivity in the case of nested array operations
• Fixed case where transition callbacks could run after destroy
• Fixed case where keyup callback could fire after component destroy
• Improved error handling and parse rejection for fetchJson method
• Fixed typing of fpsUpdate
• Added textCalculated listener to trigger layout changes
• Added mouseMoveThrottle setting to configure responsiveness of mouse movements
• Fixed issue where hover is not recognized after keyboard use
• Added support for numeric rgba colors
• Bumped renderer to 3.5.0

2.9.0

9 sep 2026

• Added DOM based Aria announcer implementation

Commits

• 077bebf Merge pull request #768 from lightning-js/dev
• 653ccc5 Bumped version to 2.10.0 and updated changelog.
• 836e576 Fixed merged conflict in package.json.
• 0ca9e93 Merge pull request #765 from wouterlucas/chore/bump-renderer-3.5.0
• c702e49 Merge branch 'master' into chore/bump-renderer-3.5.0
• df02478 Merge pull request #763 from johanneszelger/feature/configurable-mouse-throttle
• bcd6300 Removed option to change mouseMoveThrottle runtime (for now).
• 3ef90fc Merge pull request #766 from brava-apps/feat/allow-rgba-numeric-colors
• 3b1fd32 Merge branch 'dev' into feature/configurable-mouse-throttle
• b12380d Merge pull request #736 from brava-apps/docs-add-animation-plugin
• Additional commits viewable in compare view

Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

• 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
• 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
• 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
• 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
• 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
• ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
• c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
• f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
• fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

Commits

• 3c0b7c6 10.11.0
• 321f0a7 Build: changelog update for 10.11.0
• 520dd77 perf: Implement fast paths in critical areas (#21210)
• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
• 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
• 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
• 24310e3 chore: update ecosystem plugins (#21324)
• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
• 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
• Additional commits viewable in compare view

Updates lint-staged from 17.5.0 to 17.5.1

Release notes

Sourced from lint-staged's releases.

v17.5.1

Patch Changes

• #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

  A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

Changelog

Sourced from lint-staged's changelog.

17.5.1

Patch Changes

• #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

  A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

Commits

• f8b1ab1 Merge pull request #1853 from lint-staged/changeset-release/main
• 3b54961 chore(changeset): release
• 09317ff Merge pull request #1852 from lint-staged/fix-ambient-declaration
• bfcca94 fix: change defineConfig signature from const to a function
• See full diff in compare view

Updates prettier from 3.9.6 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

... (truncated)

Commits

• 4f2ab67 Release 3.9.8
• 3d82af8 Update Regex related dependencies (#20082)
• 5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
• 5b142ed Release Release @​prettier/plugin-hermes@​0.2.3, @​prettier/plugin-oxc@​0.2.3, an...
• 0df8eb8 Bump Prettier dependency to 3.9.7
• 3cf6c8c Clean changelog_unreleased
• 0449af3 Release 3.9.7
• 43cd5b0 Allow verify markdown test with mdx parser
• ab8c911 Fix test on Node.js v26 (#19927)
• 4a5adf9 Fix tests
• Additional commits viewable in compare view

Updates shaka-player from 5.2.9 to 5.2.11

Release notes

Sourced from shaka-player's releases.

v5.2.11

5.2.11 (2026-09-18)

Bug Fixes

• Ads: Report the last ad of a pod as complete when using SVTA tracking (#10576) (5c23a03), closes #10545
• Demo: Avoid requesting missing UI locales repeatedly (#10610) (959c271)
• enforce paused state when seeking from ended state (#10579) (6389f43), closes #10410
• HLS: Add missing AV2 video codec detection (#10594) (612b093)
• HLS: Avoid TypeError when a media playlist fails during load() (#10560) (0e3f38f)
• Keep captions working when periods disagree on caption vs subtitle (#10600) (1af2c7e), closes #10599
• TTML: Clip each sample of a multi-sample stpp segment to its own time (#10602) (6588698), closes #10597

v5.2.10

5.2.10 (2026-09-11)

Bug Fixes

• Ads: Do not report a resume for an ad's first playout (#10566) (c217ec3), closes #10562
• Ads: Report the last ad of a pod as complete (#10546) (9742fc3), closes #10545
• Demo: Persist array config values in the URL hash (#10539) (4fb25e2)
• Don't fall back to another role when the preferred text role is unmatched (#10549) (c44678d), closes #9993
• HLS: Support legacy X-CUE for interstitials (#10558) (a968cf5)
• HLS: synchronize HTML5 audio track selection in src= mode (fixes #10551) (#10568) (139d6b1)
• Mp4Parser: Don't hang on a 64-bit largesize of 0 (#10548) (79b6129), closes #10542
• Prevent infinite loop on zero-length WVTT payload box (#10565) (af1b276), closes #10561
• Try every preferredText entry when choosing the text track (#10547) (6c4695c), closes #10544

Changelog

Sourced from shaka-player's changelog.

5.2.11 (2026-09-18)

Bug Fixes

• Ads: Report the last ad of a pod as complete when using SVTA tracking (#10576) (5c23a03), closes #10545
• Demo: Avoid requesting missing UI locales repeatedly (#10610) (959c271)
• enforce paused state when seeking from ended state (#10579) (6389f43), closes #10410
• HLS: Add missing AV2 video codec detection (#10594) (612b093)
• HLS: Avoid TypeError when a media playlist fails during load() (#10560) (0e3f38f)
• Keep captions working when periods disagree on caption vs subtitle (#10600) (1af2c7e), closes #10599
• TTML: Clip each sample of a multi-sample stpp segment to its own time (#10602) (6588698), closes #10597

5.2.10 (2026-09-11)

Bug Fixes

• Ads: Do not report a resume for an ad's first playout (#10566) (c217ec3), closes #10562
• Ads: Report the last ad of a pod as complete (#10546) (9742fc3), closes #10545
• Demo: Persist array config values in the URL hash (#10539) (4fb25e2)
• Don't fall back to another role when the preferred text role is unmatched (#10549) (c44678d), closes #9993
• HLS: Support legacy X-CUE for interstitials (#10558) (a968cf5)
• HLS: synchronize HTML5 audio track selection in src= mode (fixes #10551) (#10568) (139d6b1)
• Mp4Parser: Don't hang on a 64-bit largesize of 0 (#10548) (79b6129), closes #10542
• Prevent infinite loop on zero-length WVTT payload box (#10565) (af1b276), closes #10561
• Try every preferredText entry when choosing the text track (#10547) (6c4695c), closes #10544

Commits

• e825bc6 chore(v5.2.x): release 5.2.11 (#10615)
• 959c271 fix(Demo): Avoid requesting missing UI locales repeatedly (#10610)
• 0e3f38f fix(HLS): Avoid TypeError when a media playlist fails during load() (#10560)
• 1af2c7e fix: Keep captions working when periods disagree on caption vs subtitle (#10600)
• 6588698 fix(TTML): Clip each sample of a multi-sample stpp segment to its own time (#...
• 612b093 fix(HLS): Add missing AV2 video codec detection (#10594)
• 6389f43 fix: enforce paused state when seeking from ended state (#10579)
• 5c23a03 fix(Ads): Report the last ad of a pod as complete when using SVTA tracking (#...
• 0cd5d80 chore(v5.2.x): release 5.2.10 (#10575)
• 139d6b1 fix(HLS): synchronize HTML5 audio track selection in src= mode (fixes #10551)...
• Additional commits viewable in compare view

Updates vite from 8.2.2 to 8.3.0

Release notes

Sourced from vite's releases.

create-vite@8.3.0

Please refer to CHANGELOG.md for details.

v8.3.0

Features

• build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)

Bug Fixes

• handle CRLF line endings in code frame positions (#23219) (9913672)
• only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)

Performance Improvements

• proxy: pre-compile context matchers at server creation (#23263) (8abf700)

v8.3.0-beta.1

Features

• devtools: enable dev server integration (#23333) (68aeb8a)

Bug Fixes

• build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
• bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
• deps: update all non-major dependencies (#23445) (fc7c104)
• html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
• resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
• shortcuts extend error (#23447) (4ec58d1)

Miscellaneous Chores

• introducing @e18e/eslint-plugin (#23357) (f794133)
• remove unnecessary comment (#23448) (b919a1a)

v8.3.0-beta.0

Features

• accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
• add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
• add top-level tsconfig option (#23310) (93164c3)
• add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
• cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
• config: warn on named imports from JSON modules (#23378) (472385e)
• css: minify style tag (#23183) (8156684)
• searched params attached to workers are now preserved (#22280) (517b97f)
• support subpath imports in dynamic import statements (#23185) (b78e2f1)
• use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
• use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.0 (2026-09-10)

Features

• build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)
• devtools: enable dev server integration (#23333) (68aeb8a)
• accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
• add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
• add top-level tsconfig option (#23310) (93164c3)
• add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
• cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
• config: warn on named imports from JSON modules (#23378) (472385e)
• css: minify style tag (#23183) (8156684)
• searched params attached to workers are now preserved (#22280) (517b97f)
• support subpath imports in dynamic import statements (#23185) (b78e2f1)
• use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
• use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)
• worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

• handle CRLF line endings in code frame positions (#23219) (9913672)
• only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)
• build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
• bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
• deps: update all non-major dependencies (#23445) (fc7c104)
• html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
• resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
• shortcuts extend error (#23447) (4ec58d1)
• config: close bundles when generation fails (#23256) (6bacc95)
• css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)
• deps: update all non-major dependencies (#23337) (d550815)
• deps: update all non-major dependencies (#23404) (238ad81)
• deps: update rolldown-related dependencies (#23338) (76e8082)
• deps: update rolldown-related dependencies (#23405) (b882566)
• dev: run closeBundle after buildEnd failure (#23165) (8cb872e)
• hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)
• utils: handle dot in srcset density descriptor (#23346) (b50e1b4)
• utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

• proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

• introducing @e18e/eslint-plugin (#23357) (f794133)
• remove unnecessary comment (#23448) (b919a1a)
• delete unused PluginContainerOptions (#23382) (ee64401)
• use oxfmt sortImports (#23319) (97ad042)

... (truncated)

Commits

• 95e8923 release: v7.3.1
• 9d39d37 feat: add ignoreOutdatedRequests option to optimizeDeps (#21364)
• acf7e05 release: v7.3.0
• cff26ec feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)
• 317b3b2 release: v7.2.7
• 721f163 fix: plugin shortcut support (#21211)
• bda5dbb release: v7.2.6
• 3aa7527 release: v7.2.5
• 72e398a fix(deps): update all non-major dependencies (#21175)
• 3765f7b fix: shortcuts not rebound after server restart (#21166)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.