[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@rollup/plugin-typescript (source)	12.3.0 → 12.3.1			devDependencies	patch
@typescript-eslint/eslint-plugin (source)	8.71.2 → 8.72.0			devDependencies	minor
@typescript-eslint/parser (source)	8.71.2 → 8.72.0			devDependencies	minor
github/codeql-action	v4.39.0 → v4.39.1			action	patch
rollup (source)	4.64.10 → 4.65.0			devDependencies	minor

---

Release Notes

rollup/plugins (@​rollup/plugin-typescript)

v12.3.1

2026-10-21

Bugfixes

• typescript: clear the pending program update when a build closes the watch program (#​2025)

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.72.0

Compare Source

🚀 Features

• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#​12992)
• eslint-plugin: lazy load rules (#​13010)

🩹 Fixes

• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#​13054)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#​13055)
• eslint-plugin: [require-array-sort-compare] check tuples (#​13058)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#​13053)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#​12704)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#​13016)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#​12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.72.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

github/codeql-action

v4.39.1

Compare Source

• Update default CodeQL bundle version to 2.27.3. #​4256

rollup/rollup (rollup)

v4.65.0

Compare Source

2026-10-22

Features

• Support synthetic named exports in namespaces when preserving modules (#​6589)

Bug Fixes

• Fix a situation where unaligned sourcemaps resulted in a wrong segment (#​6591)
• Forward startup errors on native module load when starting rollup (#​6592)

Pull Requests

• #​6589: Merge synthetic named exports into static namespaces when preserving modules (@​b84330808, @​lukastaegert)
• #​6590: Stabilize flaky watch test "treats filenames literally, not as globs" (@​lukastaegert)
• #​6591: Use the last sourcemap segment for log locations after its start (@​Dev-next-gen)
• #​6592: Preserve native module load errors (@​shuaiyafei, @​lukastaegert)
• #​6593: Close bundles in the Gulp examples (@​shuaiyafei, @​lukastaegert)
• #​6594: Improve review instructions and resolve audit (@​lukastaegert)

v4.64.12

Compare Source

2026-10-20

Bug Fixes

• Allow generating logs from transform hooks at position 0 (#​6587)
• Properly handle global or sticky regular expressions for file names (#​6588)

Pull Requests

• #​6587: Fix transform diagnostics at position zero (@​shuaiyafei)
• #​6588: Match stateful external regular expressions consistently (@​shuaiyafei)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.