build(deps): bump the backend-dependencies group across 1 directory with 16 updates

[dependabot]

Bumps the backend-dependencies group with 16 updates in the /Backend directory:

Package	From	To
@noble/ed25519	3.1.0	3.2.0
class-validator	0.14.4	0.15.1
js-yaml	5.0.0	5.4.2
pg	8.22.0	8.23.1
sanitize-html	2.17.5	2.18.0
@types/sanitize-html	2.16.1	2.16.2
@eslint/eslintrc	3.3.5	3.3.7
@swc/cli	0.6.0	0.8.1
@swc/core	1.15.41	1.16.13
@types/sanitize-html	2.16.1	2.16.2
fast-check	4.9.0	4.10.2
globals	17.7.0	17.13.0
prettier	3.8.4	3.9.9
supertest	7.2.2	7.3.0
ts-jest	29.4.11	29.4.14
ts-loader	9.6.1	9.6.2
typescript-eslint	8.61.1	8.71.0

Updates @noble/ed25519 from 3.1.0 to 3.2.0

Release notes

Sourced from @​noble/ed25519's releases.

3.2.0

• sign, signAsync: snapshot inputs to ensure they're not mutable
• verify, verifyAsync: reject null options
• Standardize utils with other noble packages
• Added an actionable error when WebCrypto randomness is unavailable, centralized configurable SHA-512 backend validation, and hardened the public etc.invert() helper to reject modulus one as well as zero and non-invertible values.
• Reduce code size by ~10%, rewrite some utils for this purpose

Full Changelog: paulmillr/noble-ed25519@3.1.0...3.2.0

Changelog

Sourced from @​noble/ed25519's changelog.

3.2.0 (2026-08-27)

• sign, signAsync: snapshot inputs to ensure they're not mutable
• verify, verifyAsync: reject null options
• Standardize utils with other noble packages
• Added an actionable error when WebCrypto randomness is unavailable, centralized configurable SHA-512 backend validation, and hardened the public etc.invert() helper to reject modulus one as well as zero and non-invertible values.
• Reduce code size by ~10%, rewrite some utils for this purpose

Commits

• f3790a0 Release 3.2.0.
• 02c1ec4 Update devdeps
• 2e6c8a5 Reuse wnaf ladder from secp
• c240b17 Update changelog
• 26fc856 Reduce code size by ~10%
• ac7cc55 Add changelog
• 6a3a6bf Add fuzzing
• 43e8563 Refactor package, bring closer to secp256k1 / curves
• 5bc4be5 Remove build artifacts
• 6535214 Upgrade devdeps, sync tests with noble-curves
• Additional commits viewable in compare view

Updates class-validator from 0.14.4 to 0.15.1

Release notes

Sourced from class-validator's releases.

v0.15.1

What's Changed

• chore: publish 0.15.0 for real by @​braaar in typestack/class-validator#2671
• chore: publish 0.15.1 by @​braaar in typestack/class-validator#2672

Full Changelog: typestack/class-validator@v0.15.0...v0.15.1

v0.15.0

What's Changed

• feat: add IsISO31661Numeric decorator for country codes by @​RobinvanderVliet in typestack/class-validator#2657
• feat: validateIf for validation options by @​aoi-umi in typestack/class-validator#1579
• feat: update UUID validation to support versions 1-8, nil, max, and all by @​PleBea in typestack/class-validator#2647
• chore: bump vulnerable dependencies by @​braaar in typestack/class-validator#2669
• feat: add isISO6391 decorator for language codes by @​RobinvanderVliet in typestack/class-validator#2626
• feat(IsIBAN)!: Add IsIBANOptions as argument for IsIBAN decorator by @​LiiaMenke in typestack/class-validator#2618
• fix small grammatical error in README.md by @​igorrocha in typestack/class-validator#2596
• chore: release 0.15.0 by @​braaar in typestack/class-validator#2670

New Contributors

• @​RobinvanderVliet made their first contribution in typestack/class-validator#2657
• @​aoi-umi made their first contribution in typestack/class-validator#1579
• @​PleBea made their first contribution in typestack/class-validator#2647
• @​LiiaMenke made their first contribution in typestack/class-validator#2618
• @​igorrocha made their first contribution in typestack/class-validator#2596

Full Changelog: typestack/class-validator@v0.14.4...v0.15.0

Changelog

Sourced from class-validator's changelog.

0.15.1 (2026-02-26)

BREAKING CHANGES

• Added options argument to IsIBAN validator (#2618), which breaks any existing usage of this decorator that pass an argument to the decorator, e.g. @IsIBAN({forbidUnknownValues: false})

Fixed

• Updated lockfile to patch vulnerabilities (#2669)
• Fixed a small grammatical error in the docs (#2596)

Added

• Added validateIf option to all validators, providing a lot more flexibility in using conditional validation (#1579)
• Added IsISO31661Numeric validator for country codes (#2657)
• Added IsISO6391 validator for language codes (#2626)
• Added more versions to IsUUID validator options. (#2647)

Commits

• 2e1a5c2 chore: publish 0.15.1 (#2672)
• 737d2a7 chore: publish 0.15.0 (#2671)
• 8bc5f96 chore: release 0.15.0 (#2670)
• dc41588 fix small grammatical error in README.md (#2596)
• 2c0ff53 feat(IsIBAN): Add IsIBANOptions as argument for IsIBAN decorator (#2618)
• e0eaa02 feat: add isISO6391 decorator for language codes (#2626)
• a8b2f6e chore: bump vulnerable dependencies (#2669)
• 35e589d feat: update UUID validation to support versions 1-8, nil, max, and all (#2647)
• 042fb57 feat: add validateIf to validation options (#1579)
• 4fcad7b feat: add IsISO31661Numeric decorator for country codes (#2657)
• See full diff in compare view

Updates js-yaml from 5.0.0 to 5.4.2

Changelog

Sourced from js-yaml's changelog.

[5.4.2] - 2026-09-13

Fixed

• forceQuotes no longer quotes non-string scalars, #798.

[5.4.1] - 2026-08-26

Changed

• Hard-limit merge sequence size to 100.

Security

• Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

• Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

• [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
• [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
• Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

• Accept a byte order mark at the start of each document in a stream, #791.
• Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
• Preserve empty scalar items when converting block sequences to flow style.
• Do not apply the 1024-character simple-key limit to flow mapping keys.
• Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
• Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

... (truncated)

Commits

• 494400b 5.4.2 released
• 6d8adb4 Fix forceQuotes quoting non-string scalars, #798
• e5a3ba0 5.4.1 released
• e54dea3 Hard-limit merge sequence size to 100
• dfd3a29 Cleanup 6a8e05f, #797
• 6a8e05f fix: count empty merge sources against maxTotalMergeKeys (#797)
• 6b4ff5e 5.4.0 released
• 3b3625e Update changelog
• 4f25a74 Fix file name
• 3bd003b Expose new scalar styling API
• Additional commits viewable in compare view

Updates pg from 8.22.0 to 8.23.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg@8.23.0

• Add support for query pipelineing.

Commits

• 0980cef Publish
• 2759b2c fix(pg): run a named statement with an empty text more than once (#3781)
• 7feb7df fix(pg): expose detail and hint on errors from the native client (#3780)
• 9683053 fix(pg): do not treat Sync as connection ending (#3772)
• 4589038 fix: validate server certificate against host when connecting to an IP addres...
• 9808955 cleanup: Fix typo in comment
• 2b02f64 fix: avoid mutating query config (#3720)
• 0cef6af Reject portal based queries in pipeline mode instead of misrouting rows (#3737)
• 2991480 Deprecate serializing invalid Dates (#3731)
• c940d7c Fail pipelined queries when the connection dies instead of hanging (#3736)
• Additional commits viewable in compare view

Updates sanitize-html from 2.17.5 to 2.18.0

Changelog

Sourced from sanitize-html's changelog.

2.18.0 (2026-09-30)

Adds

• Added a logger option: pass any console-shaped object, with debug, info, warn and error methods, and sanitize-html's own diagnostics are delivered to it rather than to the console, so an application with a logging pipeline of its own can route them. Missing methods, and no option at all, fall back to the console. Those messages also lost their decorative line breaks and warning icon, so each is now a single line of text; their wording is otherwise unchanged.

Fixes

• allowedSchemesByTag is now applied to srcset and imagesrcset URLs. Previously the per-tag lookup used the attribute name instead of the tag name, so these attributes always fell back to the global allowedSchemes and ignored a tag-specific scheme allowlist. Thanks to spokodev for the fix.
• Starting in version 2.17.6, sanitize-html began escaping any markup preserved inside a disallowed iframe tag, which was a change in behavior due to an upstream change in htmlparser2. This fix ensures such "fallback markup" is preserved without escaping, but also fully sanitized according to the same rules as the original input. Thanks to sumitjhacodes for the fix.

Security

• When meta was allowed together with its http-equiv and content attributes, the destination URL of a <meta http-equiv="refresh" content="0;url=..."> was never checked against allowedSchemes, because it is embedded in content rather than being an attribute of its own. So javascript:, data: and other disallowed destinations passed through. The refresh URL is now extracted the way browsers do it, allowing for the different spellings, separators, quoting and letter case of url=, and checked against allowedSchemes (or allowedSchemesByTag.meta). If it is rejected, or the content cannot be parsed as a refresh, the content attribute is removed. content on other meta elements is unchanged. The default configuration does not allow meta and was not affected (CWE-79, CWE-601, GHSA-cv27-6wvh-8x7j).

  Thanks to adrbogacz for reporting the vulnerability.

• When noscript is listed in nonTextTags, the discarded region could end too early. Browsers with scripting enabled treat <noscript> content as raw text up to the first </noscript>, but the underlying parser treats it as markup, so an end tag for an enclosing element inside <noscript> closed it implicitly and the rest of its content was emitted as ordinary sanitized markup. The discard region now continues until the point where a browser would end the <noscript> element, while implied closes of other nonTextTags such as <option> behave as before (CWE-79, CWE-436, GHSA-x3q4-9hxx-gx8m).

  Thanks to joaquiniglesiaslug for reporting the vulnerability.

• The check that drops SVG animation elements (animate, animateColor, animateMotion, animateTransform, set) when they retarget a URL attribute such as href compared the full tag name, so a namespace-prefixed spelling like svg:animate was not recognized when such tags were allowed (for example with allowedTags: false). In XML serializations such as XHTML or standalone SVG, the prefixed element is a real animation element and could retarget a link to a javascript: URL after sanitization. The element and attributeName are now matched by their local names, ignoring any prefix (CWE-79, CWE-184, GHSA-374f-7chj-9948).

  Thanks to Kai Aizen (SnailSploit) for reporting the vulnerability.

2.17.7 (2026-08-13)

Security

• Fixed an XSS / URL scheme policy bypass affecting configurations that allow the SVG animation elements (animate, animateColor, animateMotion, animateTransform or set) together with attributeName and one of the animation value attributes. The default configuration was not affected, as these elements are not in the default allowedTags. apostrophecms was not affected. Thanks to koyokr for responsibly disclosing the vulnerability (GHSA-g8qq-57p8-ggw5).

2.17.6 (2026-07-10)

Fixes

• Allow transformTags to emit text when textFilter is set, even if the tag is initially empty. This is consistent with the documentation. Thanks to spokodev for the fix.

Security

• Fixed an XSS/allowlist bypass in which the contents of a raw-text element (textarea or xmp) nested inside an svg or math root were re-emitted without HTML-escaping. sanitize-html treated that content as inert raw text because htmlparser2 10.x classified raw-text elements by tag name and ignored the namespace, but a real HTML5 parser treats textarea/xmp as ordinary foreign elements inside SVG/MathML and re-parses their contents as live markup. As a result, markup and event-handler attributes that the allowlist never permitted (for example <svg><textarea><img src=x onerror=alert(1)>) could survive sanitization and execute in the browser. This is now fixed on two fronts: htmlparser2 was upgraded to 12.x, which is namespace-aware and parses textarea/xmp inside SVG/MathML as ordinary elements, so their non-allowlisted children (such as the injected img) are dropped by the allowlist instead of being preserved as raw text; and any raw-text content sanitize-html still emits for these tags (at HTML integration points such as foreignObject/mtext, or outside foreign content) is always HTML-escaped. The default configuration is not affected; the precondition is an allowedTags that includes svg or math together with textarea or xmp. Thanks to khoadb175 for responsibly disclosing the vulnerability.
• Fixed a mutation-XSS / allowedTags bypass affecting configurations that allow the textarea or xmp raw-text tags. htmlparser2 10.x did not recognize an end tag with a trailing solidus (e.g. </textarea/>) as closing the element, so it kept the following markup as raw text, but a spec-compliant browser treats </textarea/> as a valid close and parses that markup as a live element. Because raw-text content was re-emitted without escaping, a payload such as <textarea></textarea/><img src=x onerror=...> could smuggle non-allowlisted, executable markup through the sanitizer. The default configuration was not affected. This is now defended at two layers: htmlparser2 was upgraded to 12.x, whose tokenizer closes these end tags correctly, and the raw text sanitize-html emits for these tags is always escaped so no < can reopen a tag when the output is re-parsed (textarea, an RCDATA element whose entities htmlparser2 decodes, is escaped like normal text, while xmp, a raw-text element, has only its angle brackets escaped to avoid double-encoding already-encoded entities). Because htmlparser2 is ESM-only from version 11 onward, sanitize-html now requires Node.js >=22.12.0 (the first 22.x release in which require() of an ES module is available unflagged). Thanks to bibu123456 for reporting the vulnerability and Kayiz-PT for coordinating the disclosure (GHSA-jxwj-j7wr-gfrw).

Commits

• 9500b8b Latest reconciliation Q3 2026 (#5635)
• 72f4531 Latest reconciliation q2 m3 2026 (#5555)
• 207846a ready for 4.32.0 release (#5513)
• f820033 Latest reconciliation q2 m2 (#5511)
• See full diff in compare view

Updates @types/sanitize-html from 2.16.1 to 2.16.2

Commits

• See full diff in compare view

Updates @eslint/eslintrc from 3.3.5 to 3.3.7

Release notes

Sourced from @​eslint/eslintrc's releases.

eslintrc: v3.3.7

3.3.7 (2026-09-01)

Bug Fixes

• Bump js-yaml to 4.3.1 (#239) (f27e7c9)
• update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

• update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Changelog

Sourced from @​eslint/eslintrc's changelog.

3.3.7 (2026-09-01)

Bug Fixes

• Bump js-yaml to 4.3.1 (#239) (f27e7c9)
• update js-yaml to 4.3.2 to address security vulnerability (#243) (bb0d97a)

3.3.6 (2026-07-10)

Bug Fixes

• update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Commits

• 7943fa6 chore: release 3.3.7 🚀 (#240)
• bb0d97a fix: update js-yaml to 4.3.2 to address security vulnerability (#243)
• 5b4abc9 docs: Update README sponsors
• f27e7c9 fix: Bump js-yaml to 4.3.1 (#239)
• b75e1d2 docs: Update README sponsors
• 302c133 docs: Update README sponsors
• e62e766 docs: Update README sponsors
• cf27f9f docs: Update README sponsors
• c7f4cdf docs: Update README sponsors
• 3319822 docs: Update README sponsors
• Additional commits viewable in compare view

Updates @swc/cli from 0.6.0 to 0.8.1

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​swc/cli since your current version.

Updates @swc/core from 1.15.41 to 1.16.13

Changelog

Sourced from @​swc/core's changelog.

[1.16.13] - 2026-09-30

Bug Fixes

• (swc_config) Show why an options object failed to deserialize (#12441) (e92460a)

Performance

• (node) Optimize macOS native addon first load (#12436) (0b151bf)

Testing

• (es/ast) Add missing ctxt field to jsx_element serde test (#12439) (7dc1796)

[1.16.12] - 2026-09-29

Bug Fixes

• (binding/node) Return an error when a file cannot be read instead of panicking (#12379) (d342acd)

• (bindings) Detect macOS ACLs with supported APIs (#12391) (a73ea68)

• (es) Decode template raw values when cooked is missing (#12347) (7898152)

• (es/codegen) Minify unicode escapes in template literals (#12284) (76ef91c)

• (es/codegen) Separate generic type assertion openers (#12340) (8948dac)

• (es/compat) Preserve array rest when lowering nested object rest (#12352) (9348083)

• (es/lexer) Stop iteration when input is exhausted (#12388) (c392686)

• (es/minifier) Check eval and arguments usage in var define scope (#12174) (5d1aa16)

... (truncated)

Commits

• 1391a34 chore: Publish 1.16.13 with swc_core v81.0.2
• a006b7f chore: Publish 1.16.13-nightly-20260930.1 with swc_core v81.0.2
• 1b2c264 chore: Publish 1.16.12 with swc_core v81.0.1
• 5a1b45a chore: Publish 1.16.12-nightly-20260929.1 with swc_core v81.0.1
• 75a5566 chore: Publish 1.16.11-nightly-20260928.1 with swc_core v81.0.0
• 4c771b8 chore: Publish 1.16.10-nightly-20260928.1 with swc_core v81.0.0
• 2b292c8 fix(node): Repair native release verification and cache handling (#12415)
• 0c5c602 chore: Publish 1.16.9-nightly-20260923.1 with swc_core v80.0.1
• f6561b8 chore: Publish 1.16.8-nightly-20260918.1 with swc_core v80.0.0
• eea8cf9 chore: Publish 1.16.8-nightly-20260917.1 with swc_core v80.0.0
• Additional commits viewable in compare view

Updates @types/sanitize-html from 2.16.1 to 2.16.2

Commits

• See full diff in compare view

Updates fast-check from 4.9.0 to 4.10.2

Release notes

Sourced from fast-check's releases.

v4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

Fix fake-timer compatibility in timeout and interrupt plugins

[Code][Diff]

Fixes

• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

New plugin API and deprecations ahead of v5

[Code][Diff]

Features

• (PR#7216) Introduce a plugin API
• (PR#7221) Refine plugin API
• (PR#7222) Add ability to configure plugins globally
• (PR#7224) Add the beforeEach plugin to hook in life-cycle
• (PR#7227) Create an afterEach plugin
• (PR#7232) Deprecate life-cycle methods
• (PR#7235) Support teardown of beforeEach plugin
• (PR#7228) Add timeout plugin to stop long running predicates
• (PR#7237) Deprecate timeout from parameters
• (PR#7238) Pass a store to plugins
• (PR#7239) Add extra plugin's method called onAllRunsComplete
• (PR#7240) Deprecate reporter and asyncReporter from parameters
• (PR#7229) Add plugin to interrupt after time limit
• (PR#7245) Support failOnInterrupt on the plugin
• (PR#7230) Add plugins to drop runs on already covered cases
• (PR#7259) Add ability to decorate generate via Plugins
• (PR#7231) Add the unbiased plugin to generate without bias
• (PR#7260) Deprecate parameters superseded by plugins
• (PR#7261) Deprecate v5 removals

Fixes

• (PR#7225) Bug: Proper ordering between plugins
• (PR#7127) CI: Announce on Bluesky when drafting the release
• (PR#7217) CI: Dedupe packages for pnpm
• (PR#7137) Doc: Release note for 4.9.0

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

4.10.1

Fix fake-timer compatibility in timeout and interrupt plugins [Code][Diff]

Fixes

• (PR#7292) Bug: Capture timer globals for timeout plugin
• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

4.10.0

New plugin API and deprecations ahead of v5 [Code][Diff]

Features

• (PR#7216) Introduce a plugin API
• (PR#7221) Refine plugin API
• (PR#7222) Add ability to configure plugins globally
• (PR#7224) Add the beforeEach plugin to hook in life-cycle
• (PR#7227) Create an afterEach plugin
• (PR#7232) Deprecate life-cycle methods
• (PR#7235) Support teardown of beforeEach plugin
• (PR#7228) Add timeout plugin to stop long running predicates
• (PR#7237) Deprecate timeout from parameters
• (PR#7238) Pass a store to plugins
• (PR#7239) Add extra plugin's method called onAllRunsComplete
• (PR#7240) Deprecate reporter and asyncReporter from parameters
• (PR#7229) Add plugin to interrupt after time limit
• (PR#7245) Support failOnInterrupt on the plugin
• (PR#7230) Add plugins to drop runs on already covered cases
• (PR#7259) Add ability to decorate generate via Plugins
• (PR#7231) Add the unbiased plugin to generate without bias
• (PR#7260) Deprecate parameters superseded by plugins
• (PR#7261) Deprecate v5 removals

Fixes

... (truncated)

Commits

• c77afa8 v4.10.2
• 1e80f3a v4.10.2
• 2df3265 🐛 Plugin interruptAfterTimeLimit crashes (#7333)
• e93c6a8 🔖 Update CHANGELOG.md for fast-check@4.10.1 (#7294)
• 15744d0 🐛 Capture timers for interruptAfterTimeLimit plugin (#7293)
• fb2ea50 🐛 Capture timer globals for timeout plugin (#7292)
• 4fba17d 🔖 Update CHANGELOG.md for fast-check@4.10.0, @​fast-check/jest@​2.3.0, @​fast-ch...
• a433d8b ⬆️ Update dependency @​types/node to ^24.13.4 (#7263)
• 8470c46 ⬆️ Update dependency @​microsoft/api-extractor to ^7.59.1 (#7255)
• 5382221 🗑️ Deprecate v5 removals (#7261)
• Additional commits viewable in compare view

Updates globals from 17.7.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

• Update globals (2026-10-01) (#354) b007369

---

sindresorhus/globals@v17.12.0...v17.13.0

v17.12.0

• Update globals (2026-09-01) (#353) 50a2119
• Add __webpack_layer__ global (#351) 779a11a

---

sindresorhus/globals@v17.11.0...v17.12.0

v17.11.0

• Add react-native globals (#337) 61eafbf

---

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

• Add GM_cookie to Greasemonkey globals (#349) f468407

---

sindresorhus/globals@v17.9.0...v17.10.0

v17.9.0

• Update globals (2026-08-01) (#348) 5a958ed

---

sindresorhus/globals@v17.8.0...v17.9.0

v17.8.0

• Update globals (2026-07-01) (#347) 7394811

---

sindresorhus/globals@v17.7.0...v17.8.0

Commits

• ce512bc 17.13.0
• b007369 Update globals (2026-10-01) (#354)
• 16cb1fe Meta tweaks
• 98008c3 17.12.0
• 50a2119 Update globals (2026-09-01) (#353)
• 779a11a Add __webpack_layer__ global (#351)
• 8c59927 17.11.0
• 61eafbf Add react-native globals (#337)
• 7bed4af 17.10.0
• f468407 Add GM_cookie to Greasemonkey globals (#349)
• Additional commits viewable in compare view

Updates prettier from 3.8.4 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

• Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`Web...
Description has been truncated