[dependabot]

Bumps the development group with 2 updates: oxfmt and oxlint.

Updates oxfmt from 0.74.0 to 0.75.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.75.0

🐛 Bug Fixes

• 5042019 formatter: Keep fill layout for array with comment after [ (#28170) (leaysgur)
• 9d37ff6 formatter: Use position-based comment checks for concise arrays (#28169) (leaysgur)
• 016c4a2 formatter: Keep a comment before } inside a JSX spread child (#28103) (vidigoat)
• 190bb1e formatter: Keep parens around an instantiation expression ending an operand through any tight parent (#28168) (leaysgur)
• a5314a1 formatter: Keep ; before in and instanceof class members (#28166) (leaysgur)
• 3a56e7c formatter: Keep closing HTML comments at the start of a line (#28064) (Cameron)
• 23d23d6 formatter_markdown: Honor range ignore inside directives (#28164) (leaysgur)
• 5f1fd3d formatter: Measure width heuristics by display width (#28098) (leaysgur)
• a5a52cf formatter: Keep parens around private in expressions (#28096) (leaysgur)
• 999496e formatter: Measure a short key by its display width (#28026) (vidigoat)
• 7e9aa44 formatter: Keep parens around a looser operand of an instantiation expression (#28025) (vidigoat)
• 6912d1f formatter: Keep an arrow signature that exactly fills the line for any body (#27989) (leaysgur)
• eb1d9f9 formatter_core: Count a flat line space in fits only when text follows (#27987) (leaysgur)

⚡ Performance

• 1ed93af data_structures: Copy short strings without a memcpy call (#27953) (leaysgur)
• 7948f0b formatter_core: Shrink FormatElement to 16B (#28012) (leaysgur)
• 788af22 formatter: Keep AstNodes on the stack, and only chain links in the arena (#27963) (leaysgur)

📚 Documentation

• 068a8ea formatter: Fix up wording (#28167) (leaysgur)
• db55461 formatter_core: Document text width divergence (#28095) (leaysgur)
• 880d229 formatter: Add vitest-test-call to known divergences (#28006) (leaysgur)

Commits

• 9b6fff4 release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)
• 3e7f0f5 chore(oxfmt): bump prettier-plugin-astro to 1.1.2 (#28162)
• See full diff in compare view

Updates oxlint from 1.89.0 to 1.90.0

Release notes

Sourced from oxlint's releases.

oxlint v1.90.0

🚀 Features

• cf34678 oxlint: Export Oxlintrc type (#28132) (Sysix)
• 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
• d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
• 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

🐛 Bug Fixes

• 7f3c908 linter/eslint/array-callback-return: Check callbacks passed with extra arguments (#28133) (sarankumar)
• 53be530 linter: Filter by type aware rules when looking up tsgolint rule severity (#28138) (NavpreetSSidhu)
• e0f8937 react-compiler: Compile a try whose catch is unreachable instead of panicking (#28066) (Dunqing)
• f5b625f linter/eslint/no-useless-concat: See through parenthesized expressions (#27984) (Rahul Kashyap)
• 4629bb2 linter/jest/no-conditional-expect: Check function expression callbacks (#28055) (camc314)
• 5c84098 semantic,linter: Report names with lone surrogates in enum and lint checks (#27991) (Dunqing)
• f3705a9 linter/eslint/prefer-const: Skip fixers if any declarator is reassigned (#28008) (Prince Jain)
• 4c0fa90 minifier,linter: Keep delete of constant members and later JSX keys (#27990) (Dunqing)
• 0298062 linter/arrow-body-style: Keep type assertions when adding a block body (#27978) (Yan Almeida)

Changelog

Sourced from oxlint's changelog.

[1.90.0] - 2026-10-27

🚀 Features

• 831cdf1 oxlint: Require mininum oxlint-tsgolint version v7.0.2005 (#28118) (camc314)
• d1b00f4 linter/typescript: Implement no-unsafe-enum-assignment rule (#28117) (camc314)
• 165c91f linter/typescript/await-thenable: Support allowMixedPromiseArrays option (#28116) (camc314)

Commits

• 9b6fff4 release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)
• 831cdf1 feat(oxlint): require mininum oxlint-tsgolint version v7.0.2005 (#28118)
• d1b00f4 feat(linter/typescript): implement no-unsafe-enum-assignment rule (#28117)
• 165c91f feat(linter/typescript/await-thenable): support allowMixedPromiseArrays opt...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[clawsweeper]

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review complete

ClawSweeper finished reviewing this revision. The review result is being finalized.

View the workflow run.

[clawsweeper]

Codex review: needs maintainer review before merge.

What this changes

This PR updates development tooling to oxfmt 0.75.0 and oxlint 1.90.0, including their platform bindings.

Example: A contributor installs dependencies using the frozen lockfile.

• Before: Formatting and linting use oxfmt 0.74.0 and oxlint 1.89.0.
• After: Formatting and linting use oxfmt 0.75.0 and oxlint 1.90.0.

Review scores

Measure	Result	What it means
Overall readiness	🦐 gold shrimp (3/6)	A focused, compatible maintenance patch supported by passing CI; evidence consists of automated validation rather than separate live behavior proof.
Proof confidence	🦐 gold shrimp (3/6)	This bot-authored development dependency refresh is outside the contributor proof gate; exact-head CI exercises the existing formatting, type-aware lint, build, test, and browser checks.
Patch quality	🐚 platinum hermit (4/6)	No actionable review findings were identified.

Product

Kind: Maintenance · Worth it: Yes · Fix scope: Complete
User problem: Contributors use older formatter and linter releases that lack the upstream fixes included in these updates.
Reason: The update follows the established tooling maintenance pattern, preserves supported Node versions and runtime pins, and adds no public API or configuration.

Merge readiness

✅ Ready for maintainer review

Keep this PR open: the dependency updates are absent from main, remain useful, and have passing checks with no actionable defect found.

Priority: P3
Reviewed head: 0e998a884970c4b0026ea25412060f69614c98d3

Before merge

None.

Findings

None.

Agent review details

How this fits together

These development dependencies process repository files through formatting and type-aware lint checks used locally and in CI.

flowchart LR
  A[Repository files] --> B[pnpm check]
  C[Dependency lockfile] --> D[oxfmt and oxlint]
  B --> D
  D --> E[Formatting and lint diagnostics]

Loading

Technical review

Best possible solution:

Land the focused dependency refresh through the existing passing repository checks.

Do we have a high-confidence way to reproduce the issue?

This is dependency maintenance rather than a reported libterminal bug; source verifies the before-and-after versions.

Is this the best way to solve the issue?

The manifest and generated lockfile changes are a focused way to update the existing tools without adding another implementation or changing runtime dependencies.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning medium; reviewed against 7a94649de488.

Provenance checked

• Formatter and linter dependency selection keeps the original intent (fd1ff8f: Refresh terminal test tooling while retaining patched test-server dependencies, the cooldown, supported Node versions, and runtime pins.)
• Type-aware lint compatibility keeps the original intent (7a94649: Refresh build and type-aware lint tooling with compatible transitive dependencies.)

Testing

Proof path: in-process harness.

Security

None.

Evidence

What I checked:

• Verified introduced changes: The pinned diff changes only the formatter range and formatter/linter lock entries, bindings, integrity hashes, and peer requirements. (package.json:97, 0e998a884970)
• Main still uses older tooling: Current main locks oxfmt 0.74.0 and oxlint 1.89.0; the requested update is not already implemented. (pnpm-lock.yaml:33, 7a94649de488)
• Compatible type-aware lint dependency: The existing oxlint-tsgolint 7.0.2005 satisfies oxlint 1.90.0's raised minimum; the existing oxlint manifest range also admits 1.90.0. (pnpm-lock.yaml:36, 0e998a884970)
• Head checks and discussion: GitHub confirms the reviewed head is open and mergeable, with successful platform checks, browser smoke, and analysis checks; discussion contains only automated status comments and no reviews. (0e998a884970)
• Tooling provenance: build(deps): secure and refresh terminal test tooling #116 established the preceding formatter/linter versions while preserving runtime pins and cooldown; build(deps): refresh terminal build and lint tooling #118 supplied the compatible type-aware lint version. (package.json:97, fd1ff8ff0326)
• Policy and history coverage: Read the complete root policy; no maintainer notes or pr-simplify skill exist in this checkout. Feature history identifies repeated tooling work by Peter Steinberger and earlier package work by Vincent Koc. Following package history eventually reaches an unavailable older object; inspected change and ownership evidence remain available. (AGENTS.md:1, 0e998a884970)

Likely related people:

• Peter Steinberger: Raw commit 7a94649 adds package.json:99 relative to its recorded parents. This identifies author metadata, not feature responsibility or a PR merger. (role: source-line author; confidence: high; commits: 7a94649de488; files: package.json)
• Vincent Koc: Raw commit 402f019 adds package.json:78 relative to its recorded parents. This identifies author metadata, not feature responsibility or a PR merger. (role: source-line author; confidence: medium; commits: 402f019f2b17; files: package.json)

Labels

Label changes:

• add P3: Routine development-tool maintenance with no demonstrated runtime defect or urgent user impact.
• add rating: 🦐 gold shrimp: Overall readiness is 🦐 gold shrimp; proof is 🦐 gold shrimp and patch quality is 🐚 platinum hermit.
• add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR.

Label justifications:

• P3: Routine development-tool maintenance with no demonstrated runtime defect or urgent user impact.
• rating: 🦐 gold shrimp: Overall readiness is 🦐 gold shrimp; proof is 🦐 gold shrimp and patch quality is 🐚 platinum hermit.
• status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR.

Rating scale

6/6 🦀 challenger crab · 5/6 🦞 diamond lobster · 4/6 🐚 platinum hermit · 3/6 🦐 gold shrimp · 2/6 🦪 silver shellfish · 1/6 🧂 unranked krab. Overall follows the weaker of proof and patch quality; ✨ marks media proof (a screenshot, video, or linked artifact) that directly shows the changed behavior.

Workflow

ClawSweeper edits this one comment on every review. Comment @clawsweeper re-review for a fresh review only. Repair and merge execution lanes are retired.

Reviewed October 29, 2026, 1:27 PM ET / 17:27 UTC.