chore(deps-dev): bump the development-dependencies group across 1 directory with 13 updates

[dependabot]

Bumps the development-dependencies group with 13 updates in the /ui directory:

Package	From	To
@halo-dev/ui-plugin-bundler-kit	2.26.0	2.27.0
@vitejs/plugin-vue	6.0.9	6.0.10
@types/node	26.6.2	26.6.5
eslint	10.11.0	10.12.0
eslint-plugin-oxlint	1.83.0	1.88.0
eslint-plugin-vue	10.11.0	10.11.1
jsdom	30.1.0	30.1.2
oxfmt	0.68.0	0.73.0
oxlint	1.83.0	1.88.0
sass	1.104.1	1.105.1
vite	8.3.0	8.3.4
vitest	5.0.1	5.0.4
vue-tsc	3.3.11	3.3.13

Updates @halo-dev/ui-plugin-bundler-kit from 2.26.0 to 2.27.0

Release notes

Sourced from @​halo-dev/ui-plugin-bundler-kit's releases.

2.27.0

新特性

• 已启用 TOTP 或验证邮箱的用户，在修改密码和管理个人访问令牌前需安全确认；确认后 30 分钟内无需再次确认 by @​JohnNiang in #10333
• 为评论和回复提供统一固定链接，方便从通知和 Console 跳转到对应讨论 by @​ruibaby in #10318
• 支持在 Console 中编辑评论和回复 by @​ruibaby in #10302
• 编辑器图片集支持为单张图片设置替代文本 by @​ruibaby in #10303
• 编辑器图片集支持替换单张图片 by @​ruibaby in #10304
• 支持在编辑菜单项时切换链接、内置路由及内容类型 by @​ruibaby in #10305
• 菜单项支持绑定文章归档、分类列表和标签列表，主题路由设置变化后链接会自动更新 by @​ruibaby in #10284
• 上传附件前可修改文件名 by @​ruibaby in #10288
• Console 支持超级管理员以其他用户身份登录，并在切换期间显示提示横幅和退出入口 by @​JohnNiang in #10354
• 评论管理支持将评论和回复设为私密，并可在创建回复时选择私密回复 by @​ruibaby in #10348

功能优化

• 附件库复制的视频 HTML 默认包含播放控件 by @​ruibaby in #10323
• 附件库复制的音频 HTML 默认包含播放控件 by @​ruibaby in #10324
• 完善邮箱验证、注册登录、评论和附件上传等操作的多语言错误提示 by @​ruibaby in #10320
• 优化 Console 加载体验，无需主题信息的页面不再等待主题加载 by @​ruibaby in #10296
• 新安装的默认本地存储策略仅允许上传图片（不含 SVG）、视频和音频，单个文件最大为 200MB；已有站点的存储策略配置保持不变 by @​ruibaby in #10365
• 移除旧「用户设置」和「文章设置」中的附件存储项；仍使用旧配置的站点需改用「附件配置」中的对应策略和分组，旧个人中心上传接口也统一使用「个人中心附件配置」 by @​ruibaby in #10346
• 编辑器支持在表格自适应模式下调整列宽，保持表格总宽度为 100%，并在容器宽度变化后保留列宽比例 by @​ruibaby in #10369
• 缩短新生成的个人访问令牌（PAT）长度，已有令牌仍可使用至撤销或过期 by @​JohnNiang in #10367
• 超级管理员在 Console 用户管理中重置密码时不再需要二次安全验证，个人中心修改密码仍保留安全验证 by @​ruibaby in #10368
• 更新默认预置的评论、代码高亮、超链接卡片、AI 基础功能及应用市场插件版本 by @​ruibaby in #10350

问题修复

• 修复默认本地存储策略的配置在重启后被还原的问题 by @​bedhere in #10253
• 修复按作者筛选文章或页面时，未列出仅被设为作者但未参与编辑的内容的问题 by @​ryanchou1994 in #10274
• 修复投稿者可通过个人中心自行置顶文章或绕过发布权限的问题 by @​ruibaby in #10344
• 修复拥有文章或页面查看权限的用户无法预览他人创建的未发布内容的问题 by @​ruibaby in #10337
• 修复“待审核”评论筛选遗漏含待审核回复的评论树的问题 by @​kindaokay in #10329
• 修复公开评论详情接口返回 HTTP 500 的问题 by @​ruibaby in #10315
• 修复评论回复的置顶和排序优先级不生效的问题 by @​ruibaby in #10314
• 修复关闭评论或回复通知后仍收到回复通知的问题 by @​ruibaby in #10313
• 修复通过评论名称读取时可能访问无权查看的评论的问题 by @​ruibaby in #10312
• 修复激活其他主题后，主题管理页面未自动选中新主题的问题 by @​ruibaby in #10306
• 修复主题重复选择后设置选项消失、主题列表无法关闭的问题，并在地址中保留所选主题 by @​ruibaby in #10295
• 修复删除用户后，其上传的头像文件未清理的问题 by @​ruibaby in #10300
• 修复删除存储策略后，关联附件无法删除且持续记录 404 错误的问题 by @​ryanchou1994 in #10294
• 修复评论详情中注册用户的昵称和头像显示不正确的问题 by @​ruibaby in #10293
• 修复菜单和分类父级异常时无法拖动排序的问题，并改善层级迁移后的状态保持 by @​ruibaby in #10289
• 修复禁用用户后，其个人访问令牌仍可访问 API，以及用户降权后令牌仍可保留超出当前权限的问题 by @​ruibaby in #10362
• 修复个人资料接口可修改邮箱、密码及两步验证等敏感字段的问题，资料更新仅允许修改显示名称和个人简介 by @​ruibaby in #10364
• 收紧用户管理权限，角色分配、密码重置及通过用户管理修改邮箱仅限超级管理员；新建用户统一使用注册默认角色 by @​ruibaby in halo-dev/halo@8660db0
• 注册默认角色不再支持超级管理员；若此前已配置为超级管理员，需改选其他角色，否则注册和使用默认角色创建用户将被阻止 by @​ruibaby in #10357
• 修复修改密码或管理个人访问令牌时安全验证弹窗的显示布局 by @​ruibaby in #10352
• 修复关闭开放注册后邮箱验证设置被隐藏的问题，并补充其对已有用户和个人访问令牌的影响说明 by @​ruibaby in #10374

... (truncated)

Commits

• ab7810d Upgrade Tiptap to 3.32.0 and update ProseMirror (#10380)
• fe77aac Upgrade Vite+ to 1.0.0-rc.1 and Vitest 5 (#10349)
• 912d155 refactor: upgrade Tiptap to 3.31.3 and migrate editor decorations (#10343)
• 95bc703 Update UI packages for Halo 2.27.0 (#10334)
• ccb05cf Support theme route bindings for menu items (#10284)
• cc4e13f Upgrade Vite+ to 0.3.1 (#10299)
• 41d4212 Remove deprecated bundler kit exports and make toolchain peers optional (#10290)
• 6ac53a1 Update documentation links in READMEs (#10273)
• See full diff in compare view

Updates @vitejs/plugin-vue from 6.0.9 to 6.0.10

Release notes

Sourced from @​vitejs/plugin-vue's releases.

[email protected]

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.10 (2026-10-10)

Bug Fixes

• plugin-vue: compile transformed normal scripts outside vapor mode (#857) (7b63e3c)
• plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)

Documentation

• plugin-vue: clarify compiler initialization hooks (55d0cab)

Commits

• a03675e release: [email protected]
• 7b63e3c fix(plugin-vue): compile transformed normal scripts outside vapor mode (#857)
• ccc06dd fix(plugin-vue): correct AST reuse checks and allow Vue 3.6 RC
• 55d0cab docs(plugin-vue): clarify compiler initialization hooks
• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates eslint-plugin-oxlint from 1.83.0 to 1.88.0

Release notes

Sourced from eslint-plugin-oxlint's releases.

v1.88.0

What's Changed

• chore: upgrade to Vite+ 1.1 by @​fengmk2 in oxc-project/eslint-plugin-oxlint#795
• chore: remove eslint-plugin-unicorn lint rules by @​Sysix in oxc-project/eslint-plugin-oxlint#796
• feat: add buildFromConfigFile to load oxlint js/ts config files by @​Sysix in oxc-project/eslint-plugin-oxlint#797
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/eslint-plugin-oxlint#793
• fix: use oxlint ts types for buildFromOxlintConfig by @​Sysix in oxc-project/eslint-plugin-oxlint#798
• release: v1.88.0 by @​oxc-guard[bot] in oxc-project/eslint-plugin-oxlint#800

New Contributors

• @​fengmk2 made their first contribution in oxc-project/eslint-plugin-oxlint#795

Full Changelog: oxc-project/eslint-plugin-oxlint@v1.87.0...v1.88.0

v1.87.0

What's Changed

• release: v1.87.0 by @​oxc-guard[bot] in oxc-project/eslint-plugin-oxlint#794

Full Changelog: oxc-project/eslint-plugin-oxlint@v1.86.0...v1.87.0

v1.86.0

What's Changed

• fix: import type DummyRule for vite config by @​camc314 in oxc-project/eslint-plugin-oxlint#786
• chore: update bump_oxlint workflow by @​camc314 in oxc-project/eslint-plugin-oxlint#787
• chore(deps): update npm packages (major) by @​renovate[bot] in oxc-project/eslint-plugin-oxlint#769
• chore(deps): update npm packages by @​renovate[bot] in oxc-project/eslint-plugin-oxlint#780
• chore(deps): update oxlint-tsgolint lockfile to 7.0.2003 by @​camc314 in oxc-project/eslint-plugin-oxlint#792
• release: v1.86.0 by @​oxc-guard[bot] in oxc-project/eslint-plugin-oxlint#791

Full Changelog: oxc-project/eslint-plugin-oxlint@v1.85.0...v1.86.0

v1.85.0

What's Changed

• release: v1.85.0 by @​oxc-guard[bot] in oxc-project/eslint-plugin-oxlint#785

Full Changelog: oxc-project/eslint-plugin-oxlint@v1.84.0...v1.85.0

v1.84.0

What's Changed

• fix: turn off react-hooks rules that oxlint namespaces under react/ by @​mfeltscher in oxc-project/eslint-plugin-oxlint#777
• release: v1.84.0 by @​oxc-guard[bot] in oxc-project/eslint-plugin-oxlint#784

New Contributors

• @​mfeltscher made their first contribution in oxc-project/eslint-plugin-oxlint#777

Full Changelog: oxc-project/eslint-plugin-oxlint@v1.83.0...v1.84.0

Commits

• 75d4256 release: v1.88.0 (#800)
• 5aba29a fix: use oxlint ts types for buildFromOxlintConfig (#798)
• f0d168f chore(deps): update pnpm to v12.7.0 (#793)
• 655c705 feat: add buildFromConfigFile to load oxlint js/ts config files (#797)
• 8371c42 chore: remove eslint-plugin-unicorn lint rules (#796)
• 6dd6516 chore: upgrade to Vite+ 1.1 (#795)
• defd283 release: v1.87.0 (#794)
• cfaebba release: v1.86.0 (#791)
• 235ee7c chore(deps): update oxlint-tsgolint lockfile to 7.0.2003 (#792)
• 93bb767 chore(deps): update npm packages (#780)
• Additional commits viewable in compare view

Updates eslint-plugin-vue from 10.11.0 to 10.11.1

Release notes

Sourced from eslint-plugin-vue's releases.

v10.11.1

Patch Changes

• Fixed vue/no-ref-object-reactivity-loss false negatives for values gotten in an immediately invoked function expression (IIFE) (#3115)
• Fixed vue/no-unused-properties false positive for props explicitly typed as never (#3113)
• Fixed vue/require-default-prop to no longer require a default value for defineModel (#3138)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.11.1

Patch Changes

• Fixed vue/no-ref-object-reactivity-loss false negatives for values gotten in an immediately invoked function expression (IIFE) (#3115)
• Fixed vue/no-unused-properties false positive for props explicitly typed as never (#3113)
• Fixed vue/require-default-prop to no longer require a default value for defineModel (#3138)

Commits

• ec9c53a Version Packages (#3139)
• 50ffb7f docs: explain how to apply the configs to a subset of files (#3122)
• ad239b4 fix(no-unused-properties): ignore props typed as never (#3113)
• 24cb5bc fix(no-ref-object-reactivity-loss): improve IIFE handling (#3115)
• ef6f53e fix(require-default-prop): don't report on defineModel (#3138)
• 121030c Format changelog
• See full diff in compare view

Updates jsdom from 30.1.0 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

• Updated URLs to support Unicode v18.0.0 in internationalized domain names.
• Reduced package size and memory use for CSS property definitions. (@​scttcper)
• Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
• Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
• Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
• Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
• Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)
• Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
• Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
• Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)
• Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
• Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
• Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)

v30.1.1

• Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
• Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
• Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
• Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
• Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
• Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
• Fixed the storageQuota option being ignored by frames.
• Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
• Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
• Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
• Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
• Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

Commits

• a23bfb7 30.1.2
• 64a75d2 Update dependencies and dev dependencies
• 7bf9653 Invalidate styles after CSSOM and control state changes
• fe9009c Update focused area handling
• a8d28b3 Release windows retained by stylesheet parsing
• 05a2c01 Deduplicate generated CSS property metadata
• 1efa190 Reduce generated CSS property data
• a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
• b2cd235 Update css-color
• 0542d2b Release idle MutationObserver bookkeeping
• Additional commits viewable in compare view

Updates oxfmt from 0.68.0 to 0.73.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.73.0

💥 BREAKING CHANGES

• 1ef2888 oxfmt: [BREAKING] Improve --migrate prettier (#27444) (leaysgur)
• c2e6d5f formatter_toml: [BREAKING] Add oxc_formatter_toml crate wrapping oxc-toml (#27365) (leaysgur)

🚀 Features

• ce4e8dc oxfmt: Support overrides[].parser -> associations[].language migration (#27475) (leaysgur)
• a495e82 oxfmt: Support associations config to specify language over filepath (#27437) (leaysgur)
• 77f8156 oxfmt/lsp: Show root config errors to LSP client (#26014) (Sysix)
• c1adce3 oxfmt/lsp: Support astro language (#27388) (leaysgur)
• 4f024a1 oxfmt: Support astro plugin in --migrate prettier (#27387) (leaysgur)
• 5db28fa oxfmt: Support Astro via [email protected] (#27386) (leaysgur)

🐛 Bug Fixes

• 76ec31b formatter_css: Support css-in-js placeholders in property names and conditions (#27640) (leaysgur)
• 99bb268 formatter_css: Keep css-in-js placeholder as media type (#27639) (leaysgur)
• 372849e formatter: Fix crash on css-in-js comment containing interpolation (#27638) (leaysgur)
• da692b8 formatter: Wrap export default class|function consistently (#27628) (leaysgur)
• 21dee96 formatter: Keep parens around TSInstantiationExpression before ! and export (#27626) (leaysgur)
• b6eb914 oxfmt: Normalize symlink targets in CLI snapshots (#27498) (camc314)
• 5dae56f oxfmt/lsp: Return error on config resolving error (#26003) (Sysix)
• 676cc60 formatter/jsdoc: Preserve paragraphs by checking @description tag width (#27439) (leaysgur)
• 2349a31 oxfmt: Follow symlinked configs in discovery (#27389) (leaysgur)
• db360de oxfmt: Load svelte plugin for svelte-in-mdx-in-md (#27369) (leaysgur)
• 6e573f9 oxlint,oxfmt: Set stderr blocking (#27363) (leaysgur)
• d730fdd formatter_core: Leave blank frontmatter without dispatcher (#27359) (leaysgur)

📚 Documentation

• 4a28c91 formatter_css: Clarify missed-semicolon-accepted divergence (#27433) (leaysgur)
• 408d87f oxfmt: Simplify oxfmtrc docs (#27432) (leaysgur)
• 902e188 oxfmt: Update how embeddedLanguageFormatting option works (#27362) (leaysgur)
• 37b3c48 formatter_markdown: Fix DIVERGENCES.md examples and slug to match behavior (#27358) (leaysgur)

oxfmt v0.72.0

💥 BREAKING CHANGES

• e2c68b1 oxfmt: [BREAKING] Format parser:markdown files by oxc_formatter_markdown (#27256) (leaysgur)

🚀 Features

• b538e3c formatter_css: Parse embedded CSS as a block's contents (#27284) (leaysgur)

🐛 Bug Fixes

• 71e400b formatter_markdown: Fixed remaining issues found by fuzz (#27334) (leaysgur)
• 7d0e54d formatter_markdown: Preserve line breaks around Chinese/Japanese characters in all proseWrap (#27331) (leaysgur)

... (truncated)

Changelog

Sourced from oxfmt's changelog.

[0.73.0] - 2026-10-13

🚀 Features

• a495e82 oxfmt: Support associations config to specify language over filepath (#27437) (leaysgur)
• 5db28fa oxfmt: Support Astro via [email protected] (#27386) (leaysgur)

📚 Documentation

• 408d87f oxfmt: Simplify oxfmtrc docs (#27432) (leaysgur)
• 902e188 oxfmt: Update how embeddedLanguageFormatting option works (#27362) (leaysgur)

[0.67.0] - 2026-09-07

🛡️ Security

• 9a612d5 deps: Update npm packages (#26178) (renovate[bot])

[0.64.0] - 2026-08-18

🚀 Features

• c07fe7c oxfmt: Support experimentalOperatorPosition (#25643) (leaysgur)

📚 Documentation

• fed6681 oxfmt: Skip expanding overrides options (#25572) (leaysgur)

[0.62.0] - 2026-08-03

🐛 Bug Fixes

• e6e584b oxfmt: Type jsdoc. enum options (#25008) (leaysgur)

[0.59.0] - 2026-07-13

🐛 Bug Fixes

• 415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)

[0.55.0] - 2026-06-15

🚀 Features

• 9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

[0.54.0] - 2026-06-08

📚 Documentation

... (truncated)

Commits

• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• a495e82 feat(oxfmt): support associations config to specify language over filepath ...
• 408d87f docs(oxfmt): simplify oxfmtrc docs (#27432)
• 5db28fa feat(oxfmt): support Astro via [email protected] (#27386)
• 902e188 docs(oxfmt): update how embeddedLanguageFormatting option works (#27362)
• 2bd08eb release(apps): oxlint v1.87.0 && oxfmt v0.72.0 (#27341)
• 2ae2939 release(apps): oxlint v1.86.0 && oxfmt v0.71.0 (#27132)
• f158bff chore(deps): update npm packages (#26865)
• 288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
• f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
• See full diff in compare view

Updates oxlint from 1.83.0 to 1.88.0

Release notes

Sourced from oxlint's releases.

oxlint v1.88.0

💥 BREAKING CHANGES

• 7730e14 ast: [BREAKING] Refactor comment attachment storage (#27512) (camc314)
• c904b61 ast: [BREAKING] Add comment attachment storage (#27393) (camc314)

🚀 Features

• bde9f69 oxlint/lsp: Show config errors to LSP client (#25486) (Sysix)
• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

🐛 Bug Fixes

• 82ecc43 linter/sort-keys: Compare natural order like ESLint (#27579) (Dunqing)
• 598ac03 linter/unicorn/prefer-bigint-literals: Unwrap redundant constructor call; don't auto-fix for lost precision (#25690) (Jacob Bandes-Storch)
• 2512213 linter: Prevent conflicting type import fixes (#27409) (camc314)
• 2349a31 oxfmt: Follow symlinked configs in discovery (#27389) (leaysgur)
• 6e573f9 oxlint,oxfmt: Set stderr blocking (#27363) (leaysgur)

⚡ Performance

• 91b588c linter/oxc/bad-array-method-on-arguments: Check arguments references once (#26930) (camc314)
• c5f47ed linter/plugins: Inline firstCommentAtOrAfter into call sites (#27539) (overlookmotel)
• c5f9235 linter/plugins: Use shift over multiply for powers of 2 (#27536) (overlookmotel)
• 8c57c5e linter: Share one source per file across type-aware diagnostics (#27462) (Max Schwenk)
• 19c227d minifier: Use ident when checking specific id names (#27208) (Armano)

📚 Documentation

• 98cc2b4 linter/plugins: Improve documentation for firstCommentAtOrAfter (#27538) (overlookmotel)
• 3bb54f6 linter: Update stale comment (#27519) (overlookmotel)
• 848a4e7 linter: Update fix metadata for tsgolint rules that already provide fixes (#27408) (Mikhail Baev)

oxlint v1.87.0

🚀 Features

• 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#27292) (Mikhail Baev)
• cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#27245) (Mikhail Baev)
• 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#27181) (Mikhail Baev)

🐛 Bug Fixes

• 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#27302) (sama Pyb)
• 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#27306) (sama Pyb)
• 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#27304) (sama Pyb)
• 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#27207) (breken)
• e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#27206) (breken)
• 3d61a59 parser: Validate TypeScript type member separators (#27222) (camc314)
• f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#27150) (camc314)
• 7d60ae3 linter/valid-title: Continue checks after allowed words (#27146) (Cameron)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.88.0] - 2026-10-13

🚀 Features

• 3c361a7 linter/unicorn/prefer-query-selector: Add allowWithVariables option (#27346) (Mikhail Baev)

[1.86.0] - 2026-09-28

🚀 Features

• 9d80eed linter/react/only-export-components: Support allowCompoundComponents (#27117) (Kuroda Kayn)
• e05b155 linter: Add typescript/no-generated-empty-object-type (#26958) (camc314)

[1.82.0] - 2026-09-07

🚀 Features

• 6a0e19c linter/eslint/no-unmodified-loop-condition: Support checkConditionalExpressions option (#26249) (camc314)

[1.81.0] - 2026-08-31

📚 Documentation

• d5be037 linter/typescript/switch-exhaustiveness-check: Clarify default case comment pattern (#26100) (camc314)

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

• 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

• 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
• aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
• 36f8451 linter/eslint...

  Description has been truncated