chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

[dependabot]

Bumps the npm_and_yarn group with 1 update in the /ui directory: eslint.

Updates eslint from 8.57.0 to 9.26.0

Release notes

Sourced from eslint's releases.

v9.26.0

Features

• e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670) (sethamus)
• 0fa2b7a feat: add suggestions for eqeqeq rule (#19640) (Nitin Kumar)
• dcbdcc9 feat: Add MCP server (#19592) (Nicholas C. Zakas)
• 2dfd83e feat: add ignoreDirectives option in no-unused-expressions (#19645) (sethamus)

Bug Fixes

• 96e84de fix: check cache file existence before deletion (#19648) (sethamus)
• d683aeb fix: don't crash on tests with circular references in RuleTester (#19664) (Milos Djermanovic)
• 9736d5d fix: add namespace to Plugin.meta type (#19661) (Milos Djermanovic)
• 17bae69 fix: update RuleTester.run() type (#19634) (Nitin Kumar)

Documentation

• dd98d63 docs: Update README (GitHub Actions Bot)
• c25e858 docs: Update README (GitHub Actions Bot)
• b2397e9 docs: Update README (GitHub Actions Bot)
• addd0a6 docs: fix formatting of unordered lists in Markdown (#19660) (Milos Djermanovic)
• a21b38d docs: Update README (GitHub Actions Bot)
• c0721a7 docs: fix double space in command (#19657) (CamWass)

Chores

• 5b247c8 chore: upgrade to @eslint/js@9.26.0 (#19681) (Francesco Trotta)
• d6fa4ac chore: package.json update for @​eslint/js release (Jenkins)
• 0958690 chore: disambiguate internal types LanguageOptions and Rule (#19669) (Francesco Trotta)
• f1c858e chore: fix internal type references to Plugin and Rule (#19665) (Francesco Trotta)
• 40dd299 refactor: One-shot ESQuery selector analysis (#19652) (Nicholas C. Zakas)
• 1cfd702 chore: update dependency @​eslint/json to ^0.12.0 (#19656) (renovate[bot])

v9.25.1

Bug Fixes

• cdc8e8c fix: revert directive detection in no-unused-expressions (#19639) (sethamus)

Chores

• 1f2b057 chore: upgrade @​eslint/js@​9.25.1 (#19642) (Milos Djermanovic)
• 771317f chore: package.json update for @​eslint/js release (Jenkins)

v9.25.0

Features

• dcd95aa feat: support TypeScript syntax in no-empty-function rule (#19551) (sethamus)
• 77d6d5b feat: support TS syntax in no-unused-expressions (#19564) (Sweta Tanwar)
• 90228e5 feat: support JSRuleDefinition type (#19604) (루밀LuMir)
• 59ba6b7 feat: add allowObjects option to no-restricted-properties (#19607) (sethamus)
• db650a0 feat: support TypeScript syntax in no-invalid-this rule (#19532) (Tanuj Kanti)
• 9535cff feat: support TS syntax in no-loop-func (#19559) (Nitin Kumar)

Bug Fixes

• 910bd13 fix: nodeTypeKey not being used in NodeEventGenerator (#19631) (StyleShit)

Documentation

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.26.0 - May 2, 2025

• 5b247c8 chore: upgrade to @eslint/js@9.26.0 (#19681) (Francesco Trotta)
• d6fa4ac chore: package.json update for @​eslint/js release (Jenkins)
• e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670) (sethamus)
• 0fa2b7a feat: add suggestions for eqeqeq rule (#19640) (Nitin Kumar)
• dd98d63 docs: Update README (GitHub Actions Bot)
• 96e84de fix: check cache file existence before deletion (#19648) (sethamus)
• c25e858 docs: Update README (GitHub Actions Bot)
• 0958690 chore: disambiguate internal types LanguageOptions and Rule (#19669) (Francesco Trotta)
• dcbdcc9 feat: Add MCP server (#19592) (Nicholas C. Zakas)
• b2397e9 docs: Update README (GitHub Actions Bot)
• d683aeb fix: don't crash on tests with circular references in RuleTester (#19664) (Milos Djermanovic)
• f1c858e chore: fix internal type references to Plugin and Rule (#19665) (Francesco Trotta)
• 9736d5d fix: add namespace to Plugin.meta type (#19661) (Milos Djermanovic)
• 40dd299 refactor: One-shot ESQuery selector analysis (#19652) (Nicholas C. Zakas)
• addd0a6 docs: fix formatting of unordered lists in Markdown (#19660) (Milos Djermanovic)
• a21b38d docs: Update README (GitHub Actions Bot)
• c0721a7 docs: fix double space in command (#19657) (CamWass)
• 1cfd702 chore: update dependency @​eslint/json to ^0.12.0 (#19656) (renovate[bot])
• 2dfd83e feat: add ignoreDirectives option in no-unused-expressions (#19645) (sethamus)
• 17bae69 fix: update RuleTester.run() type (#19634) (Nitin Kumar)

v9.25.1 - April 21, 2025

• 1f2b057 chore: upgrade @​eslint/js@​9.25.1 (#19642) (Milos Djermanovic)
• 771317f chore: package.json update for @​eslint/js release (Jenkins)
• cdc8e8c fix: revert directive detection in no-unused-expressions (#19639) (sethamus)

v9.25.0 - April 18, 2025

• 88dc196 chore: upgrade @​eslint/js@​9.25.0 (#19636) (Milos Djermanovic)
• 345288d chore: package.json update for @​eslint/js release (Jenkins)
• 910bd13 fix: nodeTypeKey not being used in NodeEventGenerator (#19631) (StyleShit)
• ca7a735 docs: update no-undef-init when not to use section (#19624) (Tanuj Kanti)
• affe6be chore: upgrade trunk (#19628) (sethamus)
• 1b870c9 docs: use eslint-config-xo in the getting started guide (#19629) (Nitin Kumar)
• 5d4af16 docs: add types for multiple rule options (#19616) (Tanuj Kanti)
• e8f8d57 docs: Update README (GitHub Actions Bot)
• a40348f docs: no-use-before-define tweaks (#19622) (Kirk Waiblinger)
• 0ba3ae3 docs: Update README (GitHub Actions Bot)
• 865dbfe docs: ensure "learn more" deprecation links point to useful resource (#19590) (Kirk Waiblinger)
• dcd95aa feat: support TypeScript syntax in no-empty-function rule (#19551) (sethamus)
• 77d6d5b feat: support TS syntax in no-unused-expressions (#19564) (Sweta Tanwar)
• 90228e5 feat: support JSRuleDefinition type (#19604) (루밀LuMir)
• f80b746 docs: add known limitations for no-self-compare (#19612) (Nitin Kumar)
• 59ba6b7 feat: add allowObjects option to no-restricted-properties (#19607) (sethamus)
• db650a0 feat: support TypeScript syntax in no-invalid-this rule (#19532) (Tanuj Kanti)
• dd20cf2 test: fix no-loop-func test with duplicate variable reports (#19610) (Milos Djermanovic)
• 9535cff feat: support TS syntax in no-loop-func (#19559) (Nitin Kumar)

... (truncated)

Commits

• 8bbabc4 9.26.0
• 16f5ff7 Build: changelog update for 9.26.0
• 5b247c8 chore: upgrade to @eslint/js@9.26.0 (#19681)
• d6fa4ac chore: package.json update for @​eslint/js release
• e9754e7 feat: add reportGlobalThis to no-shadow-restricted-names (#19670)
• 0fa2b7a feat: add suggestions for eqeqeq rule (#19640)
• dd98d63 docs: Update README
• 96e84de fix: check cache file existence before deletion (#19648)
• c25e858 docs: Update README
• 0958690 chore: disambiguate internal types LanguageOptions and Rule (#19669)
• Additional commits viewable in compare view

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

• Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

• Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

• Types are now exported as yaml.types.XXX.
• Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

• Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

• Check migration guide to see details for all breaking changes.
• Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.
• Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.
• yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.
• yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
• !!binary now always mapped to Uint8Array on load.
• Reduced nesting of /lib folder.
• Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).
• dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.
• Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.
• Code snippet created in exceptions now contains multiple lines with line numbers.
• dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.
• dump() with skipInvalid=true now serializes invalid items in collections as null.
• Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.
• Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

• Added .mjs (es modules) support.
• Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.
• Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

• 9963d36 3.14.2 released
• 10d3c8e dist rebuild
• 5278870 fix prototype pollution in merge (<<) (#731)
• See full diff in compare view

Updates qs from 6.13.0 to 6.14.0

Changelog

Sourced from qs's changelog.

6.14.0

• [New] parse: add throwOnParameterLimitExceeded option (#517)
• [Refactor] parse: use utils.combine more
• [patch] parse: add explicit throwOnLimitExceeded default
• [actions] use shared action; re-add finishers
• [meta] Fix changelog formatting bug
• [Deps] update side-channel
• [Dev Deps] update es-value-fixtures, has-bigints, has-proto, has-symbols
• [Tests] increase coverage

6.13.1

• [Fix] stringify: avoid a crash when a filter key is null
• [Fix] utils.merge: functions should not be stringified into keys
• [Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset
• [Fix] stringify: ensure a non-string filter does not crash
• [Refactor] use __proto__ syntax instead of Object.create for null objects
• [Refactor] misc cleanup
• [Tests] utils.merge: add some coverage
• [Tests] fix a test case
• [actions] split out node 10-20, and 20+
• [Dev Deps] update es-value-fixtures, mock-property, object-inspect, tape

Commits

• 32dcc63 v6.14.0
• 4ec582b [Dev Deps] update es-value-fixtures, has-bigints
• a240c52 [Tests] increase coverage
• 25956a7 [Refactor] parse: use utils.combine more
• b189ed4 [patch] parse: add explicit throwOnLimitExceeded default
• 1d590de [actions] simplify finisher
• 6cd60a5 [actions] use shared action
• 89edfd2 [Deps] update side-channel
• e26e7a8 [Dev Deps] update has-proto, has-symbols
• 51fdc98 [actions] re-add finishers
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.