[dependabot]

Bumps the development group with 3 updates: knip, puppeteer and typescript-eslint.

Updates knip from 6.42.1 to 6.43.0

Release notes

Sourced from knip's releases.

Release 6.43.0

• Document and pin exports that only keep each other alive (#2160) (39af70abb32523a992a7d6152b8cd95ef317f237)
• Don't add config files without an extension as entry files (resolve #2168) (46a825ddf15d3073b899ed6ef34689e5da5508f2)
• Recognize unscoped ~name workspace packages (resolve #2172) (ba527f7386e7741507f2f18d84864058e02ac907)
• Follow imports and re-exports in ambient modules (resolve #2174) (dbd3a8b8b0429433e5385371c09e805b808a32c2) - thanks @​tlq5l!
• Follow @reference in Tailwind CSS compiler (#2177) (219f16de95e174cdcfd6a90782bcef13cf79bd64) - thanks @​mkantautas!
• Support { find, replacement } array form of Vite alias (#2179) (5d0779bc4cf8c0469c50d5b2cda1a6bd1f053d81) - thanks @​mkantautas!
• fix(expo): treat local config plugins as entry files (#2176) (100ef491509a88b00ea9956ba40dbc1b0ac0c205) - thanks @​Cayan!
• fix(next): detect Turbopack loaders in shared config factories (#2161) (9cf928be5022928a38c12fe8001cec7bf467040c) - thanks @​jakeleventhal!
• Ignore osascript as global binary (#2182) (c301e44c7975442d4d25595f084e6b853f07a434) - thanks @​abrahamguo!
• Skip --fix for exports in multi-declarator variable statements (#2178) (326afd9c1e66eef04d986b83ed829b506f506c48) - thanks @​mkantautas!
• Watch the project directory instead of process.cwd() (#2183) (16d9932d0239f649cf2c1349cc7bc893850cd4f0) - thanks @​abrahamguo!
• Follow directory paths in tsconfig references (#2186) (d741c46e3f2a9caaf6bf4e81e9d4c8cfca48623e) - thanks @​mkantautas!
• Handle @plugin options blocks in Tailwind CSS compiler (#2187) (9fae773eb75bcba03e62f44ce3e9aa0b889bf4ac) - thanks @​mkantautas!
• Remove anonymous default-exported functions and classes in --fix (#2188) (6748259fbb2ea9a5940ea3861626f77677610a86) - thanks @​mkantautas!
• Recognize bun fmt as a built-in command (#2189) (e971b0924bcb7ff8dcab01a180d3016cc08b675d) - thanks @​TomasHubelbauer!
• Add plugin for @​bufbuild/buf (#2142) (90216c261c2273967125669beb611bf763d762c7) - thanks @​ryanquinn3!
• Pass isSsrBuild to Vite config functions (#2191) (d2aa101c55e5d7e8d26548808ce008b214622099) - thanks @​mkantautas!
• Follow src of <script> and <style> blocks in Vue SFCs (#2193) (3d148393d5129a096a182fab36a873b9f710f388) - thanks @​mkantautas!
• Remove import attributes with emptied re-exports in --fix (#2192) (231026cf9c21cc7890f21d048f4af6ea7233d7b8) - thanks @​mkantautas!
• Update npmx.dev snapshot (b2cc439006ec98ff5bbc1c99b99bc1ac5203b6b2)
• Read string parserOptions.parser in ESLint flat configs (#2198) (302f908aa135669d6fe96869ec6452b7570856a4) - thanks @​mkantautas!
• Resolve directory matches in Vitest test.projects to their config (#2195) (4d386138011c27e01e6e910be6d58266e07c9cf1) - thanks @​fixfon!
• Ignore custom elements named script-* when extracting script blocks (#2199) (23e6479b233e1882ddaf29736390309d0f3f040f) - thanks @​mkantautas!
• feat(mcp): add MCP plugin (#2180) (fc92470a9f687e2f1da60b84612ebf3e59a8bbb9) - thanks @​jakeleventhal!
• Handle non-Error plugin config failures (8f21ea2182fac5a96edd7d6d4280a0fa1051e434)
• Update articles list (6569cdcde1a79a6196a35a934b6c0d9d0e23faa4)
• Skip --fix export ranges inside a larger removal (204a8091baf91cb8cfb4e7a9aa70d461cc926baa)
• Detect .travis.yml with a stat instead of a glob (3601c6e32afef3d1d76a3944e540225da5190b9b)
• Mark YAML catalog entries fixed only when their line is removed (#2201) (813fa30e55ef3a8ed749d9d6d5a02a00810cfe72) - thanks @​mkantautas!
• Add Electron Forge plugin (#2158) (12e4355a43ea63c417d3b9ebfbbac1c8510b139e) - thanks @​mehdimirzafaruk!
• Resolve function and promise entries in Vitest test.projects (#2197) (ec293d1a33d30a8b0521725d1148e6e72c6e4220) - thanks @​mkantautas!
• Follow npm lifecycle scripts and run-script aliases (#2202) (89dfdc881e6865aef326c2b9dc700cf5c46b73b4) - thanks @​sushanta-neupane!
• Follow pnpm t, tst and run-script aliases (ce91e230e0823433dfcc1ee4562335c34d2b73ef)
• Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils) (db9aa7443c5b3839df5c0fe320d78ea42f0f3446)
• Ignore tool output before the first report section in ecosystem snapshots (9434bf678e60d16832f13e892d7c1ebc2b9e6ed1)
• Update dependencies (21c3b75fc4ae94208311abb630ff129fcd9fe820)
• Bump engines.node to follow Astro's (9d7a5e07212b093f9d422cab813fad5d01273fc6)

Commits

• 0712156 Release knip@6.43.0
• 21c3b75 Update dependencies
• db9aa74 Treat vitest-environment-nuxt as optional (it comes with @nuxt/test-utils)
• ce91e23 Follow pnpm t, tst and run-script aliases
• 89dfdc8 Follow npm lifecycle scripts and run-script aliases (#2202)
• ec293d1 Resolve function and promise entries in Vitest test.projects (#2197)
• 12e4355 Add Electron Forge plugin (#2158)
• 813fa30 Mark YAML catalog entries fixed only when their line is removed (#2201)
• 3601c6e Detect .travis.yml with a stat instead of a glob
• 204a809 Skip --fix export ranges inside a larger removal
• Additional commits viewable in compare view

Updates puppeteer from 25.15.0 to 25.16.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.16.0

25.16.0 (2026-10-22)

🎉 Features

• network: support unmodified post data via HTTPRequest.content() and decode base64 post data (#15585) (ee2a8de)
• roll to Chrome 156.0.8078.47 (#15621) (48705f6)

🛠️ Fixes

• bidi: accept page ranges without spaces in Page.pdf() (#15628) (49372d1)
• bidi: update request headers on response and error events (#15612) (611b320)
• cdp: destroy replaced service_worker target when re-installing an extension (#15614) (e6686fb)
• cdp: fall back to blockedReason when loadingFailed errorText is empty (#15624) (66ee3ea)
• cdp: ignore fileChooserOpened events without backendNodeId (#15625) (2bd58eb)
• cdp: skip undefined header values in HTTPRequest.respond() (#15595) (4dd58bc)
• connect: report permission denied when DevToolsActivePort fails with EPERM/EACCES (#15615) (64ee541)
• locators: reject read-only elements and unaccepted values in Locator.fill (#15603) (46cfff5)
• log browser WebSocket transport errors (#15519) (027927b)
• make deleteMatchingCookies respect domain, path, url and partitionKey (#15581) (deab4f3)
• network: intercept requests on the session that paused them (#15605) (68ae9b8)
• network: return post data of a paused request without asking Chrome (#15607) (c7fcd9a)
• pdf: use exact CSS unit ratios in unitToPixels and respect lengthUnit for default paper size (#15611) (ba0fdea)
• respect the navigation timeout after a follow-up navigation (#15488) (bd227ce)
• return null from SerializedAXNode.elementHandle() after a navigation (#15634) (244e68c)
• roll to Firefox 158.0.1 (#15619) (6fde1bd)
• webdriver: type an apostrophe for the Quote key (#15622) (69f1b57)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.5 to 3.2.6

puppeteer: v25.16.0

25.16.0 (2026-10-22)

🎉 Features

• roll to Chrome 156.0.8078.47 (#15621) (48705f6)

Dependencies

• The following workspace dependencies were updated
  • dependencies

... (truncated)

Commits

• a207faf chore: release main (#15610)
• 244e68c fix: return null from SerializedAXNode.elementHandle() after a navigation (#1...
• 0a4eb48 chore: fix docs link and file name of PR title workflow (#15635)
• 69f1b57 fix(webdriver): type an apostrophe for the Quote key (#15622)
• 0afe136 chore(deps): bump modern-tar from 0.8.5 to 0.8.6 in the dependencies group (#...
• 6b1848d chore(deps-dev): bump rollup from 4.64.6 to 4.64.7 in the dev-dependencies gr...
• 49372d1 fix(bidi): accept page ranges without spaces in Page.pdf() (#15628)
• ca12a3b chore(deps-dev): bump the dev-dependencies group with 4 updates (#15626)
• ee2a8de feat(network): support unmodified post data via HTTPRequest.content() and dec...
• 027927b fix: log browser WebSocket transport errors (#15519)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	typescript-eslint@​8.72.0 ⏵ 8.72.1
	puppeteer@​25.15.0 ⏵ 25.16.0				+1
	knip@​6.42.1 ⏵ 6.43.0	+1		+1	+1

View full report