[dependabot]

Bumps the minor-patch group with 7 updates in the / directory:

Package	From	To
@lightningjs/blits	2.8.9	2.11.0
@lightningjs/msdf-generator	1.3.0	1.4.0
eslint	10.10.0	10.12.0
lint-staged	17.5.0	17.6.0
prettier	3.9.6	3.9.9
shaka-player	5.2.9	5.2.12
vite	8.2.2	8.3.3

Updates @lightningjs/blits from 2.8.9 to 2.11.0

Release notes

Sourced from @​lightningjs/blits's releases.

v2.11.0

• Improved $select() method by adding caching
• Upgraded several dependencies
• Bumped renderer to 3.5.1

v2.10.0

• Fixed / improved type definitions
• Fixed issue with accidental sideeffect running when $hasFocus triggers after destroy
• Fixed issue where an error in an effect can break execution of other effects
• Added support for reactivity of array.length
• Improved reactivity in the case of nested array operations
• Fixed case where transition callbacks could run after destroy
• Fixed case where keyup callback could fire after component destroy
• Improved error handling and parse rejection for fetchJson method
• Fixed typing of fpsUpdate
• Added textCalculated listener to trigger layout changes
• Added mouseMoveThrottle setting to configure responsiveness of mouse movements
• Fixed issue where hover is not recognized after keyboard use
• Added support for numeric rgba colors
• Bumped renderer to 3.5.0

v2.9.0

• Added DOM based Aria announcer implementation

Changelog

Sourced from @​lightningjs/blits's changelog.

2.11.0

28 sep 2026

• Improved $select() method by adding caching
• Upgraded several dependencies
• Bumped renderer to 3.5.1

2.10.0

21 sep 2026

• Fixed / improved type definitions
• Fixed issue with accidental sideeffect running when $hasFocus triggers after destroy
• Fixed issue where an error in an effect can break execution of other effects
• Added support for reactivity of array.length
• Improved reactivity in the case of nested array operations
• Fixed case where transition callbacks could run after destroy
• Fixed case where keyup callback could fire after component destroy
• Improved error handling and parse rejection for fetchJson method
• Fixed typing of fpsUpdate
• Added textCalculated listener to trigger layout changes
• Added mouseMoveThrottle setting to configure responsiveness of mouse movements
• Fixed issue where hover is not recognized after keyboard use
• Added support for numeric rgba colors
• Bumped renderer to 3.5.0

2.9.0

9 sep 2026

• Added DOM based Aria announcer implementation

Commits

• da5a00c Merge pull request #788 from lightning-js/dev
• d6008c8 Updated changelog.
• 1369f0d Bumped renderer to 3.5.1.
• a2d7bca Merge pull request #789 from lightning-js/fix/holder-ref-issue
• 5880cea Not setting ref attribute on holder node
• f6193f9 Bumped version to 2.11.0 and updated changelog.
• 644d2f9 Merge pull request #785 from brava-apps/feat/select-method-optimizations
• 6ced9ac Merge branch 'feat/select-method-optimizations' of https://github.com/brava-a...
• a1bda6a remove optional chaining pattern
• 84d3c94 Merge branch 'master' into feat/select-method-optimizations
• Additional commits viewable in compare view

Updates @lightningjs/msdf-generator from 1.3.0 to 1.4.0

Changelog

Sourced from @​lightningjs/msdf-generator's changelog.

1.4.0

• Fix: removed an outdated baseline/y-offset correction in adjustFont.ts that was misaligning generated fonts (affects fonts generated with v1.2.0 through v1.3.0).
• Migrated to opentype.js 2.0.0 — replaced the opentype.load() with opentype.parse()
• Updated tsconfig.json for TypeScript 7 — set moduleResolution to "Bundler" and removed the no-longer-supported baseUrl option.

Commits

• See full diff in compare view

Updates eslint from 10.10.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

v10.11.0

Features

• d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
• 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
• d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

• 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
• b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
• 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

• 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
• 6c789ff docs: Update README (GitHub Actions Bot)
• 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

... (truncated)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates lint-staged from 17.5.0 to 17.6.0

Release notes

Sourced from lint-staged's releases.

v17.6.0

Minor Changes

• #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*': {
  title: 'Fail if PDF files are committed',
  task: async (filepaths, { log }) => {
  const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
  if (pdfFiles.length > 0) {
  log('PDF files should not be committed: %s', pdfFiles)
  throw new Error('Failed')
  }
  },
  },
  })

• #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

  If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

• #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

• #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
  })

• #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

• #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

v17.5.1

Patch Changes

• #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

  A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

Changelog

Sourced from lint-staged's changelog.

17.6.0

Minor Changes

• #1850 938d3f4 - Task functions like { title, task } can now use a logger function log() to emit output while the task runs. By default, the output will only be visible if the task fails, unless the --verbose option was used. Additionally, when the task rejects, the error will be shown in the output.

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*': {
  title: 'Fail if PDF files are committed',
  task: async (filepaths, { log }) => {
  const pdfFiles = filepaths.filter((f) => f.toLowerCase().endsWith('.pdf'))
  if (pdfFiles.length > 0) {
  log('PDF files should not be committed: %s', pdfFiles)
  throw new Error('Failed')
  }
  },
  },
  })

• #1854 30562bc - lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like () => "prettier --write .".

  If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use --hide-unstaged to hide your changes while tasks run.

Patch Changes

• #1860 4296532 - The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.

• #1861 c45f28a - Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following example eslint and prettier will run in parallel (for all files, when any JS files are staged):

  import { defineConfig } from 'lint-staged/config'
  export default defineConfig({
  '*.js': () => [['eslint --max-warnings=0 .', 'prettier --list-different .']],
  })

• #1859 f0ea69d - Various performance improvements from skipping redundant internal Git calls.

• #1856 69d7d17 - Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.

17.5.1

Patch Changes

• #1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

... (truncated)

Commits

• 48f9f4e Merge pull request #1857 from lint-staged/changeset-release/main
• 16b2e21 chore(changeset): release
• 195f156 docs: improve changeset
• 0ba6261 fix: create hidden directory only when required
• 66ac2de docs: fixes to changesets
• 80af8d7 Merge pull request #1863 from lint-staged/fix-issues
• e433488 fix: handle task editing a symlinked file to a regular file, and --fail-on-ch...
• e5019b3 fix: handle trailing newlines when detecting changed files
• 74efec8 ci: run Cygwin and MSYS2 tests on Node.js 26
• 655b7dc fix: use TypeScript types instead of JSDoc
• Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

• Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
</tr></table> 

... (truncated)

Commits

• cdd17f2 Release 3.9.9
• dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
• f9be58f Git blame ignore 3.9.8
• 88470cb Bump Prettier dependency to 3.9.8
• 9559cab Clean changelog_unreleased
• 4fc8ee8 Update dependents count
• 4f2ab67 Release 3.9.8
• 3d82af8 Update Regex related dependencies (#20082)
• 5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
• 5b142ed Release Release @​prettier/plugin-hermes@​0.2.3, @​prettier/plugin-oxc@​0.2.3, an...
• Additional commits viewable in compare view

Updates shaka-player from 5.2.9 to 5.2.12

Release notes

Sourced from shaka-player's releases.

v5.2.12

5.2.12 (2026-09-25)

Bug Fixes

• CEA: Honor CEA-708 caption pen opacity (#10621) (4dc1474), closes #10620
• DASH: Get the key ID from the init segment when the manifest has none (#10552) (7ee04ec), closes #10390
• DRM: Ignore session creation during teardown (#10614) (fc396d0)
• net: Avoid dropping low-latency segments when a retried request succeeds (#10646) (d6f939f)
• Prevent destroy() from hanging when playback is wedged (#10624) (5d713d0), closes #10623
• WebVTT: Parse every fragment of a multi-fragment MP4 segment (#10642) (0d8a677)

v5.2.11

5.2.11 (2026-09-18)

Bug Fixes

• Ads: Report the last ad of a pod as complete when using SVTA tracking (#10576) (5c23a03), closes #10545
• Demo: Avoid requesting missing UI locales repeatedly (#10610) (959c271)
• enforce paused state when seeking from ended state (#10579) (6389f43), closes #10410
• HLS: Add missing AV2 video codec detection (#10594) (612b093)
• HLS: Avoid TypeError when a media playlist fails during load() (#10560) (0e3f38f)
• Keep captions working when periods disagree on caption vs subtitle (#10600) (1af2c7e), closes #10599
• TTML: Clip each sample of a multi-sample stpp segment to its own time (#10602) (6588698), closes #10597

v5.2.10

5.2.10 (2026-09-11)

Bug Fixes

• Ads: Do not report a resume for an ad's first playout (#10566) (c217ec3), closes #10562
• Ads: Report the last ad of a pod as complete (#10546) (9742fc3), closes #10545
• Demo: Persist array config values in the URL hash (#10539) (4fb25e2)
• Don't fall back to another role when the preferred text role is unmatched (#10549) (c44678d), closes #9993
• HLS: Support legacy X-CUE for interstitials (#10558) (a968cf5)
• HLS: synchronize HTML5 audio track selection in src= mode (fixes #10551) (#10568) (139d6b1)
• Mp4Parser: Don't hang on a 64-bit largesize of 0 (#10548) (79b6129), closes #10542
• Prevent infinite loop on zero-length WVTT payload box (#10565) (af1b276), closes #10561
• Try every preferredText entry when choosing the text track (#10547) (6c4695c), closes #10544

Changelog

Sourced from shaka-player's changelog.

5.2.12 (2026-09-25)

Bug Fixes

• CEA: Honor CEA-708 caption pen opacity (#10621) (4dc1474), closes #10620
• DASH: Get the key ID from the init segment when the manifest has none (#10552) (7ee04ec), closes #10390
• DRM: Ignore session creation during teardown (#10614) (fc396d0)
• net: Avoid dropping low-latency segments when a retried request succeeds (#10646) (d6f939f)
• Prevent destroy() from hanging when playback is wedged (#10624) (5d713d0), closes #10623
• WebVTT: Parse every fragment of a multi-fragment MP4 segment (#10642) (0d8a677)

5.2.11 (2026-09-18)

Bug Fixes

• Ads: Report the last ad of a pod as complete when using SVTA tracking (#10576) (5c23a03), closes #10545
• Demo: Avoid requesting missing UI locales repeatedly (#10610) (959c271)
• enforce paused state when seeking from ended state (#10579) (6389f43), closes #10410
• HLS: Add missing AV2 video codec detection (#10594) (612b093)
• HLS: Avoid TypeError when a media playlist fails during load() (#10560) (0e3f38f)
• Keep captions working when periods disagree on caption vs subtitle (#10600) (1af2c7e), closes #10599
• TTML: Clip each sample of a multi-sample stpp segment to its own time (#10602) (6588698), closes #10597

5.2.10 (2026-09-11)

Bug Fixes

• Ads: Do not report a resume for an ad's first playout (#10566) (c217ec3), closes #10562
• Ads: Report the last ad of a pod as complete (#10546) (9742fc3), closes #10545
• Demo: Persist array config values in the URL hash (#10539) (4fb25e2)
• Don't fall back to another role when the preferred text role is unmatched (#10549) (c44678d), closes #9993
• HLS: Support legacy X-CUE for interstitials (#10558) (a968cf5)
• HLS: synchronize HTML5 audio track selection in src= mode (fixes #10551) (#10568) (139d6b1)
• Mp4Parser: Don't hang on a 64-bit largesize of 0 (#10548) (79b6129), closes #10542
• Prevent infinite loop on zero-length WVTT payload box (#10565) (af1b276), closes #10561
• Try every preferredText entry when choosing the text track (#10547) (6c4695c), closes #10544

Commits

• cae0ceb chore(v5.2.x): release 5.2.12 (#10653)
• d6f939f fix(net): Avoid dropping low-latency segments when a retried request succeeds...
• 0d8a677 fix(WebVTT): Parse every fragment of a multi-fragment MP4 segment (#10642)
• 7ee04ec fix(DASH): Get the key ID from the init segment when the manifest has none (#...
• 5d713d0 fix: Prevent destroy() from hanging when playback is wedged (#10624)
• 4dc1474 fix(CEA): Honor CEA-708 caption pen opacity (#10621)
• fc396d0 fix(DRM): Ignore session creation during teardown (#10614)
• 43803f0 build: Pin Closure Compiler to 20260819 to avoid size regression (#10637)
• dd3ce75 chore: Migrate from Iterator to IteratorLike (#10633)
• e825bc6 chore(v5.2.x): release 5.2.11 (#10615)
• Additional commits viewable in compare view

Updates vite from 8.2.2 to 8.3.3

Release notes

Sourced from vite's releases.

v8.3.3

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

v8.3.2

Bug Fixes

• build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
• bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
• bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
• deps: update all non-major dependencies (#23601) (9944fa6)
• deps: update rolldown-related dependencies (#23602) (88c1741)
• html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
• limit size of object and array printing via forwardConsole (#23565) (e64a587)
• merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
• optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
• optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
• pass queries to renderBuiltUrl (#23586) (744269e)
• server: handle file watcher errors without crashing (#23503) (6894f5c)
• server: release previous environments after initialization (#23499) (5a3a010)
• ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
• worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

• avoid encoding intermediate source maps (#23461) (89574f6)
• build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
• only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

• fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

• deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

• use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

• bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

v8.3.1

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.3 (2026-10-06)

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

8.3.2 (2026-10-01)

Bug Fixes

• build: preload CSS correct...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.