[dependabot]

Bumps the minor-and-patch group with 29 updates in the / directory:

Package	From	To
@commitlint/cli	21.2.1	21.2.4
@commitlint/config-conventional	21.2.0	21.2.4
@playwright/test	1.62.1	1.64.1
lefthook	2.1.10	2.2.2
oxfmt	0.61.0	0.74.0
oxlint	1.76.0	1.89.0
tsx	4.23.1	4.23.15
turbo	2.10.8	2.11.10
react-hook-form	7.84.0	7.91.0
@prisma/adapter-pg	7.9.1	7.10.1
@prisma/client	7.9.1	7.10.1
pg	8.22.0	8.23.1
@types/pg	8.20.3	8.23.1
@types/pg	8.20.3	8.23.1
prisma	7.9.1	7.10.1
@aws-sdk/client-s3	3.1101.0	3.1156.0
@aws-sdk/s3-request-presigner	3.1101.0	3.1156.0
@base-ui/react	1.6.0	1.9.0
input-otp	1.4.2	1.5.0
react-resizable-panels	4.12.2	4.15.0
sonner	2.0.7	2.0.8
tailwind-merge	3.6.0	3.7.0
shadcn	4.16.1	4.22.1
better-auth	1.6.26	1.7.12
next	16.3.0	16.4.3
react-dom	19.2.8	19.3.1
@types/react-dom	19.2.4	19.3.0
react	19.2.8	19.3.1
@types/react	19.2.18	19.3.0
zod	4.4.1	4.6.7

Updates @commitlint/cli from 21.2.1 to 21.2.4

Release notes

Sourced from @​commitlint/cli's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

• fix(load): replace config file arrays with seed arrays by @​escapedcat in conventional-changelog/commitlint#5056
• fix: update dependency jsonc to v3 by @​renovate[bot] in conventional-changelog/commitlint#5020

Performance Improvements

• perf(load): load typescript configs with jiti directly by @​escapedcat in conventional-changelog/commitlint#5052

Docs, etc

• docs: add AGENTS.md with commit type guidance by @​escapedcat in conventional-changelog/commitlint#5053
• test(ensure): pin case conversion of digits, punctuation and accents by @​escapedcat in conventional-changelog/commitlint#5055

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

• fix(types): correct breaking-change-exclamation-mark rule config type by @​lazerg in conventional-changelog/commitlint#4954
• fix(config-nx-scopes): read scopes from the nx project graph by @​dylanpulver in conventional-changelog/commitlint#4957
• fix(lint): trim trailing whitespace off the message handed to ignore matchers by @​dylanpulver in conventional-changelog/commitlint#4960
• fix(load): detect dynamic await support on node majors above 20 by @​dylanpulver in conventional-changelog/commitlint#4961
• fix(rules): report the case that matched in case rule failure messages by @​dylanpulver in conventional-changelog/commitlint#4962
• fix(load): run the parser factory of scoped conventional-changelog presets by @​maximilliangrand in conventional-changelog/commitlint#4968

Refactor

• refactor(load): drop the node version check gating cosmiconfig loaders by @​dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

• build: install pnpm via npm instead of corepack by @​escapedcat in conventional-changelog/commitlint#4948
• build: retire the docker compose dev environment by @​escapedcat in conventional-changelog/commitlint#4949
• build: verify pnpm tarball against the packageManager sha512 pin by @​escapedcat in conventional-changelog/commitlint#4952
• ci: stabilize Windows CI by raising Vitest default timeout by @​escapedcat with @​Copilot in conventional-changelog/commitlint#4959
• docs: drop the Node 24 config-loading workaround note by @​escapedcat in conventional-changelog/commitlint#4976
• chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @​escapedcat in conventional-changelog/commitlint#4977
• chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @​escapedcat in conventional-changelog/commitlint#4984

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/cli

21.2.3 (2026-09-19)

Bug Fixes

• lint: trim trailing whitespace off the message handed to ignore matchers (#4960) (a6f279b)

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/cli

Commits

• d8e3656 v21.2.4
• 95d4056 v21.2.3
• a6f279b fix(lint): trim trailing whitespace off the message handed to ignore matchers...
• d00d190 v21.2.2
• f2e8dae chore: update dependency typescript to v7 (#4886)
• 5769d9f docs: fix typos in comments and JSDoc (#4880)
• See full diff in compare view

Updates @commitlint/config-conventional from 21.2.0 to 21.2.4

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

• fix(load): replace config file arrays with seed arrays by @​escapedcat in conventional-changelog/commitlint#5056
• fix: update dependency jsonc to v3 by @​renovate[bot] in conventional-changelog/commitlint#5020

Performance Improvements

• perf(load): load typescript configs with jiti directly by @​escapedcat in conventional-changelog/commitlint#5052

Docs, etc

• docs: add AGENTS.md with commit type guidance by @​escapedcat in conventional-changelog/commitlint#5053
• test(ensure): pin case conversion of digits, punctuation and accents by @​escapedcat in conventional-changelog/commitlint#5055

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

v21.2.3

21.2.3 (2026-09-19)

Bug Fixes

• fix(types): correct breaking-change-exclamation-mark rule config type by @​lazerg in conventional-changelog/commitlint#4954
• fix(config-nx-scopes): read scopes from the nx project graph by @​dylanpulver in conventional-changelog/commitlint#4957
• fix(lint): trim trailing whitespace off the message handed to ignore matchers by @​dylanpulver in conventional-changelog/commitlint#4960
• fix(load): detect dynamic await support on node majors above 20 by @​dylanpulver in conventional-changelog/commitlint#4961
• fix(rules): report the case that matched in case rule failure messages by @​dylanpulver in conventional-changelog/commitlint#4962
• fix(load): run the parser factory of scoped conventional-changelog presets by @​maximilliangrand in conventional-changelog/commitlint#4968

Refactor

• refactor(load): drop the node version check gating cosmiconfig loaders by @​dylanpulver in conventional-changelog/commitlint#4972

Chore, ci, build, etc.

• build: install pnpm via npm instead of corepack by @​escapedcat in conventional-changelog/commitlint#4948
• build: retire the docker compose dev environment by @​escapedcat in conventional-changelog/commitlint#4949
• build: verify pnpm tarball against the packageManager sha512 pin by @​escapedcat in conventional-changelog/commitlint#4952
• ci: stabilize Windows CI by raising Vitest default timeout by @​escapedcat with @​Copilot in conventional-changelog/commitlint#4959
• docs: drop the Node 24 config-loading workaround note by @​escapedcat in conventional-changelog/commitlint#4976
• chore: move pnpm settings from .npmrc to pnpm-workspace.yaml by @​escapedcat in conventional-changelog/commitlint#4977
• chore: swap pnpm resolutionMode time-based for minimumReleaseAge by @​escapedcat in conventional-changelog/commitlint#4984

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @​commitlint/config-conventional

21.2.3 (2026-09-19)

Bug Fixes

• rules: report the case that matched in case rule failure messages (#4962) (9f5f7bc)

21.2.2 (2026-08-13)

Note: Version bump only for package @​commitlint/config-conventional

Commits

• d8e3656 v21.2.4
• 95d4056 v21.2.3
• 9f5f7bc fix(rules): report the case that matched in case rule failure messages (#4962)
• d00d190 v21.2.2
• 3146d04 docs(config-conventional): document rules that go beyond the spec (#4910)
• f2e8dae chore: update dependency typescript to v7 (#4886)
• See full diff in compare view

Updates @playwright/test from 1.62.1 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates lefthook from 2.1.10 to 2.2.2

Release notes

Sourced from lefthook's releases.

v2.2.2

Changelog

• 4aeffd72a6e3ea846c2054cffd6294c943fd7fbb fix: cleanup only current stash hash (#1597)
• db62412c82ddac71cf536e60e50edb2826624870 packaging: add support for android (#1591)
• e3fa81b1f01881829ef95e37211da7923a4fd6df refactor(filter): simplify mimetype matching (#1596)

v2.2.1

Changelog

• 6dd11f61f54595935746f9e0814c16844fc6d31b feat: support php composer (#1583)
• c702ccf154bb180107ba5f790518c161d9ce111d fix: generate different patch names when in a worktree (#1582)
• 486fdd317d29f815821ce2450d42e3a49b066eb0 refactor: cache paths in wrapper (#1570)

v2.2.0

Changelog

• 46c65b3871dd96c81624f413b24b3d273b41a4e5 deps: October 2026 (#1571)
• 37f17131b605cf0f64c29252ebfe94610368f769 fix: don't write an install-time lefthook path into AI hook configs (#1544)
• cc9969c2e2198aafff8accc63ee1aee30e9a2aa4 fix: ignore trailing NUL in --files-from-stdin (#1574)
• 57fee374b70c18e17ada20e09a336142d6d8899f fix: pass --output path to git diff as a single argument (#1581)

v2.1.17

Changelog

• 8d8073d427fac49cc982919f5280b295645d196d fix: diff push files against the merge base with the default branch (#1565)
• c12bccd193f43a8419038787bd83b12fe3a4470c fix: don't hash submodules when checking fail_on_changes (#1566)
• 03225efde40226b14459e901707fbd988d62fcc0 refactor: naming of helpers (#1568)
• 66746ace996c72ac31b3cb4a70af85607568baf4 refactor: working with git (#1564)

v2.1.16

Changelog

• 3ee04318fd06d56a70cc9c90dc8385b19918f520 ci: refactor publishing scripts (#1559)
• 91407e537b2fa36539506963a33e582dca394798 deps: bump mod and text deps to resolve CVEs (#1560)
• be6f0ae8793533449cb9a07a253fa9a381e82206 fix: preserve unrelated unstaged changes on conflict (#1483)
• cf4ef1e19baf0581871f69b40914d64c94ff19d7 fix: test staging fixed files with partially staged

v2.1.15

Changelog

• 2388dde2b31dc9a782e967764046b41b404cece9 feat: propagate forced colors to hook commands via CLICOLOR_FORCE (#1547)
• 49260b57c2a56bc4d65d09395458bb3ce3c63311 fix(lfs): do not pipe stdin into post-checkout git-lfs hook (#1523)
• 38bc1c6cef3192a36002d0dcc37973416249c07e fix: quote paths in the generated hook shim (#1509)
• 0892f5f256ebe162485492af5ca14c2ced45586f fix: remove color blending (#1558)
• f1de41cd5cd6a6c5e0179c65e00d5ed6d90078c2 fix: resolve push-files fallback against the remote-tracking ref (#1485)
• 07ce565bcc73465bc18fb36561b935ee2a53eab6 fix: sanitize slashes in remote ref when building the checkout dir name (#1486)
• c465ca8ef4fc9ee0695aa4a9530fc404ed838b7a test(cmd): regression for valid fish shell completion output (#1527)

v2.1.14

Changelog

v2.1.12

Changelog

• b8350fde604197b2422adfc4ae0af080725822b9 ci: fix npm publishing by bumping Node to 24 (#1508)
• 9fb290d786a0e122fe113b1b49a45bbd0ffa7d28 fix: LEFTHOOK_OUTPUT precedence (#1506)

... (truncated)

Changelog

Sourced from lefthook's changelog.

2.2.2

• fix: cleanup only current stash hash (#1597) by @​mrexox
• refactor: simplify mimetype matching (#1596) by @​scop
• packaging: add support for android (#1591) by @​mrexox

2.2.1

• feat: support php composer (#1583) by @​mrexox
• fix: generate different patch names when in a worktree (#1582) by @​mrexox
• refactor: cache paths in wrapper (#1570) by @​mrexox

2.2.0

• fix: don't write an install-time lefthook path into AI hook configs (#1544) by @​anandghegde
• docs: publish JSON schema at lefthook.dev/schema.json (#1579) by @​BUTTERFINGERS7498
• fix: pass --output path to git diff as a single argument (#1581) by @​cpruijsen
• fix: ignore trailing NUL in --files-from-stdin (#1574) by @​jasonwbarnett
• deps: October 2026 (#1571) by @​mrexox

2.1.7

• fix: don't hash submodules when checking fail_on_changes (#1566) by @​tiagovilasboas
• refactor: naming of helpers (#1568) by @​mrexox
• fix: diff push files against the merge base with the default branch (#1565) by @​mrexox
• refactor: working with git (#1564) by @​mrexox
• docs: add protect-branch example to docs (#1563) by @​vim89

2.1.16

• fix: test staging fixed files with partially staged by @​mrexox
• fix: preserve unrelated unstaged changes on conflict (#1483) by @​Sakshamm-Goyal
• deps: bump mod and text deps to resolve CVEs (#1560) by @​devindavies
• ci: refactor publishing scripts (#1559) by @​mrexox

2.1.15

• fix: do not pipe stdin into post-checkout git-lfs hook (#1523) by @​rwinkelman
• fix: remove color blending (#1558) by @​mrexox
• fix: resolve push-files fallback against the remote-tracking ref (#1485) by @​hamodywe
• test: regression for valid fish shell completion output (#1527) by @​rwinkelman
• fix: sanitize slashes in remote ref when building the checkout dir name (#1486) by @​hamodywe
• fix: quote paths in the generated hook shim (#1509) by @​addielaruee
• feat: propagate forced colors to hook commands via CLICOLOR_FORCE (#1547) by @​Yash121l

2.1.13/2.1.14 (2026-09-14)

• fix: error when --job/--command matches nothing (#1512) by @​nityanand123gupta
• fix: disable tty things when stdout is not TTY (#1545) by @​mrexox
• docs: document files inheritance for grouped jobs (#1536) by @​chiliec

... (truncated)

Commits

• eb4e504 2.2.2: keep backups for worktree flows and release android NPM package
• 4aeffd7 fix: cleanup only current stash hash (#1597)
• e3fa81b refactor(filter): simplify mimetype matching (#1596)
• db62412 packaging: add support for android (#1591)
• 60c1ddd 2.2.1: support concurrent work in worktrees and release PHP package
• 6dd11f6 feat: support php composer (#1583)
• c702ccf fix: generate different patch names when in a worktree (#1582)
• 486fdd3 refactor: cache paths in wrapper (#1570)
• 125cd28 2.2.0: new Go version and git worktree fixes
• 37f1713 fix: don't write an install-time lefthook path into AI hook configs (#1544)
• Additional commits viewable in compare view

Attestation changes

This version has no provenance attestation, while the previous version (2.1.10) was attested. Review the package versions before updating.

Updates oxfmt from 0.61.0 to 0.74.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.74.0

🐛 Bug Fixes

• e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#27957) (leaysgur)
• 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
• a5d8184 jsdoc: Parse code spans after quotes in descriptions (#27955) (leaysgur)
• 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#27948) (leaysgur)
• 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#27947) (leaysgur)
• 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#27946) (leaysgur)
• c22a9b2 formatter: Treat static block with only empty statements as empty (#27945) (leaysgur)
• d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#27823) (leaysgur)
• c4c1727 formatter/sort_imports: Keep comments after the last import (#27822) (leaysgur)
• a64677e formatter: Print JSDoc embedded snippets with LF (#27821) (leaysgur)
• 2c1cc20 formatter: Keep comment only Vue bindings as-is (#27820) (leaysgur)
• 1bf236d formatter/sort_imports: Do not use comments as import source (#27819) (leaysgur)
• 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#27818) (leaysgur)
• 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#27814) (leaysgur)
• a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#27812) (leaysgur)
• de110ce formatter: Keep more parens around TSInstantiationExpression (#27811) (leaysgur)
• 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#27785) (leaysgur)
• 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#27780) (leaysgur)
• 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#27778) (leaysgur)
• 5b2acb0 formatter_core: Report error position releative to CRLF source (#27777) (leaysgur)
• c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#27776) (leaysgur)
• 3a980c9 formatter_toml: Handle BOM like other languages (#27775) (leaysgur)
• 97c9fc4 oxfmt: Handle BOM in config JSON (#27774) (leaysgur)
• 28eb4a7 oxfmt: Print trailing newline for --list-different (#27773) (leaysgur)
• d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#27737) (leaysgur)
• 6a95ec1 formatter: Keep comment position on holey array (#27730) (leaysgur)
• 54769da formatter: Break after dangling line comment in holey array (#27729) (leaysgur)
• 99077ef formatter_json: Reject unary expressions other than signed numbers (#27728) (leaysgur)
• 22cd4cd formatter_json: Handle holey array and comments (#27727) (leaysgur)
• 644ca1c formatter: Do not indent logical chains whose right sides all inline (#27667) (leaysgur)
• a07a0fb formatter: Wrap comment-only JSX expression container in a group (#27666) (leaysgur)

⚡ Performance

• e220293 formatter: Check only the operator suppression mark in is_quiet (#27952) (leaysgur)
• e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#27559) (leaysgur)
• a342f7e formatter: Skip comment handling for nodes with no comment near them (#27557) (leaysgur)
• d8ce750 formatter: Write string literals with swapped quotes into the arena (#27558) (Yuji Sugiura)
• 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#27561) (leaysgur)
• 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#27673) (leaysgur)

📚 Documentation

• 1325225 oxfmt: Update useless comment prefix (#27956) (leaysgur)
• d0dd140 formatter: Note lossy cooked round-trip in template embeds (#27944) (leaysgur)
• 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#27824) (leaysgur)

... (truncated)

Commits

• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• a495e82 feat(oxfmt): support associations config to specify language over filepath ...
• 408d87f docs(oxfmt): simplify oxfmtrc docs (#27432)
• 5db28fa feat(oxfmt): support Astro via prettier-plugin-astro@1.x (#27386)
• 902e188 docs(oxfmt): update how embeddedLanguageFormatting option works (#27362)
• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
• f158bff chore(deps): update npm packages (#26865)
• 288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
• Additional commits viewable in compare view

Updates oxlint from 1.76.0 to 1.89.0

Release notes

Sourced from oxlint's releases.

oxlint v1.89.0

💥 BREAKING CHANGES

• e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
• a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

• 770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)
• ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)
• d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)
• e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)
• 7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)
• d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)
• 199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)
• 780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)
• 6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)
• b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)
• c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)
• 6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

• 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
• 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
• 326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)
• f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)
• 00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)
• 9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)
• 01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)
• 7f474d5 linter/eslint/no-loop-func: Detect writes after the loop (#27754) (camc314)
• 4b7fea6 linter/eslint/block-scoped-var: Ignore declarations without writes (#27760) (camc314)
• 2947917 linter/eslint/no-lonely-if: Check final else blocks in else-if chains (#27759) (camc314)
• fc039b5 linter/eslint/sort-imports: Check imports after other statements (#27749) (camc314)
• 1acba97 linter/unicorn/prefer-at: Report slice index reads once (#27762) (camc314)
• 6190e26 linter/eslint/prefer-arrow-callback: Ignore functions used as conditional tests (#27533) (Anzal Husain Abidi)
• b3cdaaf linter/eslint/sort-keys: Check computed identifier names (#27748) (camc314)
• 170e608 linter/unicorn/prefer-native-coercion-functions: Check object methods and function properties (#27750) (camc314)
• 9261df7 linter/unicorn/prefer-string-raw: Check object property values (#27758) (camc314)
• ddea86b linter/eslint/prefer-template: Report separate nested concatenations (#27764) (camc314)
• 2c67197 linter/eslint/no-unused-vars: Count conditional calls in sequences as uses (#27755) (camc314)
• 7f22fa0 linter/unicorn/prefer-regexp-test: Check logical operands in boolean contexts (#27761) (camc314)
• 3c44398 linter/eslint/class-methods-use-this: Count this in parameter defaults (#27756) (camc314)
• d85923f linter/eslint/no-param-reassign: Report rest parameter writes (#27765) (camc314)
• 8ea47bb linter/unicorn/prefer-type-error: Handle parenthesized type checks (#27766) (camc314)
• e96856c linter/unicorn/catch-error-name: Check unused underscore-prefixed names (#27751) (camc314)
• d8ca399 linter/unicorn/no-array-callback-reference: Ignore callback factory calls (#27763) (camc314)
• 1267ab8 linter/eslint/max-params: Count rest parameters (#27757) (camc314)
• 9ff25c3 linter/eslint/no-useless-assignment: Report dead stores to function parameters (#27735) (camc314)
• ee5e730 linter/eslint/no-setter-return: Check setters in property descriptors (#27731) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.89.0] - 2026-10-19

🐛 Bug Fixes

• 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)

[1.88.0] - 2026-10-13

🚀 Features

• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

• 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
• e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

• 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

• d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

• 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

• 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
• aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
• 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
• beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
• 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
• 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
• 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

[1.78.0] - 2026-08-10

🚀 Features

... (truncated)

Commits

• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 9a424c2 fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)
• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• 3c361a7 feat(linter/unicorn/prefer-query-selector): add allowWithVariables option (...
• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
• 9d80eed feat(linter/react/only-export-components): support allowCompoundComponents ...
• e05b155 feat(linter): add typescript/no-generat...

  Description has been truncated