Chore(deps): Bump the node-minor-patch group across 4 directories with 16 updates

[dependabot]

Bumps the node-minor-patch group with 7 updates in the /backend/compact-connect-ui-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1029.0	3.1121.0
@aws-sdk/client-s3	3.1029.0	3.1121.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.9.1
mocha	11.7.5	11.8.0

Bumps the node-minor-patch group with 16 updates in the /backend/compact-connect/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1121.0
@aws-sdk/client-s3	3.1045.0	3.1121.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.9.1
mocha	11.7.5	11.8.0
@aws-sdk/client-sesv2	3.1045.0	3.1121.0
nodemailer	9.0.1	9.0.6
@types/aws-lambda	8.10.161	8.10.162
@types/nodemailer	8.0.0	8.0.1
@typescript-eslint/eslint-plugin	8.58.1	8.68.0
@typescript-eslint/parser	8.58.1	8.68.0
jest	30.4.2	30.5.0
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13

Bumps the node-minor-patch group with 16 updates in the /backend/cosmetology-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1121.0
@aws-sdk/client-s3	3.1045.0	3.1121.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.9.1
mocha	11.7.5	11.8.0
@aws-sdk/client-sesv2	3.1045.0	3.1121.0
nodemailer	9.0.1	9.0.6
@types/aws-lambda	8.10.161	8.10.162
@types/nodemailer	8.0.0	8.0.1
@typescript-eslint/eslint-plugin	8.58.1	8.68.0
@typescript-eslint/parser	8.58.1	8.68.0
jest	30.4.2	30.5.0
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13

Bumps the node-minor-patch group with 16 updates in the /backend/social-work-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.32.0	2.35.0
@aws-sdk/client-dynamodb	3.1045.0	3.1121.0
@aws-sdk/client-s3	3.1045.0	3.1121.0
@aws-sdk/util-dynamodb	3.996.2	3.996.9
esbuild	0.28.0	0.28.2
eslint	10.2.1	10.9.1
mocha	11.7.5	11.8.0
@aws-sdk/client-sesv2	3.1045.0	3.1121.0
nodemailer	9.0.1	9.0.6
@types/aws-lambda	8.10.161	8.10.162
@types/nodemailer	8.0.0	8.0.1
@typescript-eslint/eslint-plugin	8.58.1	8.68.0
@typescript-eslint/parser	8.58.1	8.68.0
jest	30.4.2	30.5.0
ts-jest	29.4.9	29.4.12
tsx	4.21.0	4.23.13

Updates @aws-lambda-powertools/logger from 2.32.0 to 2.35.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.35.0

Summary

In this release, the Parameters utility gains support for the AWS AppConfig Agent Lambda extension. A new getConfig function fetches application configurations from the agent's local HTTP endpoint, without the AWS SDK and without a cache to manage, since caching, polling, and prefetching are all handled by the agent.

In Logger, the log buffer and the debug sampling log level are now scoped per invocation under Lambda Managed Instances concurrency, so concurrent invocations no longer clear each other's buffered logs or override each other's sampling decision. Logger also now accepts IANA timezone aliases such as Asia/Kolkata in the TZ environment variable, which were previously rejected and produced timestamps for the wrong instant. When a timezone can't be resolved at all, Logger now falls back to UTC consistently and emits a warning, instead of doing so silently.

The Parser utility adds a schema for Amazon Connect Outbound Campaigns custom action events.

Finally, the documentation site has been restyled to match the AWS Developer Guide.

[!IMPORTANT] The project's Discord server has been shut down. Community conversations now happen in GitHub Discussions, and all Discord links in the READMEs, docs, and issue templates now point there.

⭐ Congratulations to @​leiwilson for their first PR merged in the project 🎉

AppConfig Agent support

If you use the AWS AppConfig Agent Lambda extension, you can now fetch application configurations from the agent's local HTTP endpoint with getConfig:

import { getConfig } from '@aws-lambda-powertools/parameters/appconfig-agent';
const config = await getConfig('my-configuration', {
environment: 'my-env',
application: 'my-app',
transform: 'json',
});
export const handler = async (): Promise<void> => {
console.log(config);
};

A few things to know:

• You must add the AppConfig Agent Lambda extension layer to your function. getConfig talks to it over the agent's local endpoint, so it doesn't need the AWS SDK.
• Because the agent handles caching, polling, and prefetching, the maxAge and forceFetch options don't apply. You can reduce cold start latency by setting AWS_APPCONFIG_EXTENSION_PREFETCH_LIST so the agent fetches your configuration before your handler runs.
• When the configuration doesn't exist, getConfig returns undefined, so you can fall back with ??, or set throwOnMissing to get a ParameterNotFoundError instead. Any other failure to reach the agent throws a GetParameterError.
• Outside of Lambda, or when POWERTOOLS_DEV is enabled, getConfig returns undefined without making a request, so your tests never need to mock the agent. Set POWERTOOLS_APPCONFIG_AGENT_RETURN_VALUE when you want it to return a value instead.

Changes

• refactor(logger): isolate log level InvokeStore access in a store (#5548) by @​vishwakt
• fix(logger): scope log buffer per invocation under LMI concurrency (#5543) by @​vishwakt
• fix(logger): scope debug sampling log level per invocation under LMI concurrency (#5544) by @​vishwakt
• chore(ci): remove boring-cyborg and semantic config files (#5535) by @​dreamorosi
• chore(ci): remove greetings now handled by oss-automation (#5532) by @​dreamorosi
• chore: replace Discord server with GitHub Discussions (#5530) by @​dreamorosi
• docs: restyle documentation to match AWS Developer Guide (#5426) by @​dreamorosi

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.35.0 (2026-08-18)

Improvements

• logger isolate log level InvokeStore access in a store (#5548) (a47c7a6)

Bug Fixes

• logger scope log buffer per invocation under LMI concurrency (#5543) (0d4071b)
• logger scope debug sampling log level per invocation under LMI concurrency (#5544) (1b4b013)
• logger accept resolvable IANA timezone aliases in timestamps (#5458) (4cdc936)

Features

• parameters add support for AppConfig Agent (#5399) (f1deacc)
• parser add schema for Amazon Connect Outbound Campaigns (#5502) (30d7beb)

2.34.0 (2026-07-10)

Improvements

• commons extract shared isRunningInLambda helper (#5424) (aec888b)
• logger remove unsafe context cast in createChild (#5443) (ac97f52)
• event-handler extract shared IP-extraction util for HTTP middleware (#5346) (3230ca7)

Maintenance

• commons bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• commons guard UA string against duplicate PTEnv suffix (#5311) (6b59973)
• logger bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• metrics bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• tracer bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• idempotency bump @​aws/durable-execution-sdk-js to ^1.1.6 (#5298) (dbc07c7)
• batch bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)

Bug Fixes

• commons clear LRUCache pointers on eviction of last item (#5295) (acf1ba1)
• logger scope lambda context per invocation under LMI concurrency (#5430) (e5d2e69)
• metrics detect key collisions between dimensions, metrics, and metadata (#5240) (c1e62a6)
• tracer isolate active segment per invocation under LMI concurrency (#5446) (5890d94)
• tracer scope middy middleware segments per invocation (#5444) (14f68b1)
• idempotency recompute key prefix from base on each configure call (#5442) (a739c36)
• event-handler preserve original string for invalid Bedrock Agent number params (#5363) (9cce9f9)
• event-handler avoid runtime import of metrics package in HTTP metrics middleware (#5310) (f4a6752)
• event-handler correct InvalidHttpMethodError name (#5254) (7d410fc)
• event-handler normalize trailing slashes in HTTP Router prefix joining (#5255) (7a500a1)

Features

... (truncated)

Commits

• 7bcc27b chore(ci): bump version to 2.35.0 (#5563)
• 66e901c chore(deps): bump the aws-cdk group across 1 directory with 3 updates (#5524)
• 6bd97ae chore(deps-dev): bump @​valkey/valkey-glide from 2.5.0 to 2.5.1 (#5559)
• f100ced chore(deps): bump the codeql-action group across 1 directory with 3 updates (...
• b681b94 chore(deps-dev): bump @​biomejs/biome from 2.5.7 to 2.5.8 (#5560)
• 97581fd chore(deps-dev): bump @​redis/client from 6.2.0 to 6.2.1 (#5558)
• 4742290 chore(deps): bump the aws-sdk-v3 group across 1 directory with 48 updates (#5...
• 6c96925 chore(deps-dev): bump protobufjs from 8.7.1 to 8.7.2 (#5551)
• 347f60f chore(deps): bump esbuild from 0.28.1 to 0.28.2 (#5552)
• a47c7a6 refactor(logger): isolate log level InvokeStore access in a store (#5548)
• Additional commits viewable in compare view

Updates @aws-sdk/client-dynamodb from 3.1029.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1120.0 (2026-08-27)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1119.0 (2026-08-26)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1118.0 (2026-08-25)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1117.0 (2026-08-24)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1116.0 (2026-08-21)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1115.0 (2026-08-20)

... (truncated)

Commits

• e53a25a Publish v3.1121.0
• d6be6f8 Publish v3.1120.0
• ba4e449 Publish v3.1119.0
• c65dd65 Publish v3.1118.0
• 78b069a Publish v3.1117.0
• d760a00 Publish v3.1116.0
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 5318b44 Publish v3.1114.0
• 73a06d2 Publish v3.1113.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.1029.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @​aws-sdk/client-s3

3.1120.0 (2026-08-27)

Note: Version bump only for package @​aws-sdk/client-s3

3.1119.0 (2026-08-26)

Note: Version bump only for package @​aws-sdk/client-s3

3.1118.0 (2026-08-25)

Note: Version bump only for package @​aws-sdk/client-s3

3.1117.0 (2026-08-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1116.0 (2026-08-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1115.0 (2026-08-20)

... (truncated)

Commits

• e53a25a Publish v3.1121.0
• d6be6f8 Publish v3.1120.0
• ba4e449 Publish v3.1119.0
• c65dd65 Publish v3.1118.0
• 78b069a Publish v3.1117.0
• d760a00 Publish v3.1116.0
• 8369ada chore(codegen): update to sync with the latest smithy-ts (#8272)
• efc86fc Publish v3.1115.0
• 5318b44 Publish v3.1114.0
• 73a06d2 Publish v3.1113.0
• Additional commits viewable in compare view

Updates @aws-sdk/util-dynamodb from 3.996.2 to 3.996.9

Commits

• See full diff in compare view

Updates esbuild from 0.28.0 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x
    bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

• Fix tree shaking bug due to TypeScript import alias (#4507)

  This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

  import Base from './dep.js';
  import Alias = Base.SomeType;

• Fix CSS minification bug involving & (#4497)

  This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

  /* Original code */
  .a .b {
    & .b:not(& .c) {
      color: red;
    }
  }
  /* Old output (with --minify) */
  .a .b{.b:not(& .c){color:red}}
  /* New output (with --minify) */
  .a .b{& .b:not(& .c){color:red}}

  This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

• Avoid overwriting input files without --allow-overwrite (#4484)

  For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

  This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

• Fix incorrect code generated when using top-level await (#4498)

  Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

• Fix a minification bug with lowered logical assignment operators (#4508)

  This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

  // Original code
  function foo() {
    let x

... (truncated)

Commits

• 609683d publish 0.28.2 to npm
• 11b1fe4 add to release notes
• ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
• 04627b6 fix #4498: async TLA checks need a worklist
• 5c15177 disable gopls in the go folder
• fc2ee9b css: adjust parser to allow --foo: {...}
• 209db54 release notes for css nesting bugfix
• c625d31 fix #4497: preserve nested ampersands during minification (#4500)
• 34474e2 better isolation of current part in js parser
• 07f6e8c fix #4507: import assignment tree-shaking bug
• Additional commits viewable in compare view

Updates eslint from 10.2.1 to 10.9.1

Release notes

Sourced from eslint's releases.

v10.9.1

Bug Fixes

• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251) (Aleksandr Shoronov)

Documentation

• ad74a8d docs: add deprecation steps for EOL package versions (#21248) (Francesco Trotta)

Chores

• 3c3ae53 chore: update ecosystem plugins (#21249) (ESLint Bot)

v10.9.0

Features

• 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
• 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

• 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
• 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
• 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

• 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
• 87f66f4 docs: Update README (GitHub Actions Bot)
• 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
• f3993b0 docs: Update README (GitHub Actions Bot)
• ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
• 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
• 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
• 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

• 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
• 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
• dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
• f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
• 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])

v10.8.1

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

• 5c8c241 10.9.1
• a7f3b7d Build: changelog update for 10.9.1
• 1e641c9 fix: no-loss-of-precision false positive with trailing decimal point (#21251)
• ad74a8d docs: add deprecation steps for EOL package versions (#21248)
• 3c3ae53 chore: update ecosystem plugins (#21249)
• c27bc92 10.9.0
• fa831d9 Build: changelog update for 10.9.0
• 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243)
• 08de88e feat: handle underflow in no-loss-of-precision (#21218)
• 9ef407a docs: use eslint.config.* wherever config file names are listed (