CCM-9336: Bump the major group across 2 directories with 19 updates

[dependabot]

Bumps the major group with 18 updates in the / directory:

Package	From	To
@types/node	24.13.3	26.2.0
jest	29.7.0	30.4.2
@types/jest	29.5.14	30.0.0
jest-mock-extended	3.0.7	4.0.1
typescript	5.9.3	7.0.2
jose	5.10.0	6.2.8
@eslint/js	9.39.5	10.0.1
@stylistic/eslint-plugin	3.1.0	5.10.0
eslint-config-airbnb-extended	2.3.3	3.2.0
eslint-plugin-json	4.0.1	5.0.0
eslint-plugin-security	3.0.1	4.0.1
eslint-plugin-sonarjs	3.0.7	4.2.0
eslint-plugin-sort-destructure-keys	2.0.0	3.0.0
eslint-plugin-unicorn	61.0.2	73.0.0
eslint	9.39.5	10.8.1
jest-environment-jsdom	29.7.0	30.4.1
lcov-result-merger	5.0.1	6.0.0
eslint-config-next	15.5.23	16.3.0

Bumps the major group with 17 updates in the /docs directory:

Package	From	To
@types/jest	29.5.14	30.0.0
@types/node	24.13.3	26.2.0
jest	29.7.0	30.4.2
typescript	5.9.3	7.0.2
@eslint/js	9.39.5	10.0.1
@stylistic/eslint-plugin	3.1.0	5.10.0
eslint-config-airbnb-extended	2.3.3	3.2.0
eslint-plugin-json	4.0.1	5.0.0
eslint-plugin-security	3.0.1	4.0.1
eslint-plugin-sonarjs	3.0.7	4.2.0
eslint-plugin-sort-destructure-keys	2.0.0	3.0.0
eslint-plugin-unicorn	61.0.2	73.0.0
eslint	9.39.5	10.8.1
jest-environment-jsdom	29.7.0	30.4.1
lcov-result-merger	5.0.1	6.0.0
eslint-config-next	15.5.23	16.3.0
nhsuk-frontend	8.3.0	10.5.2

Updates @types/node from 24.13.3 to 26.2.0

Commits

• See full diff in compare view

Updates jest from 29.7.0 to 30.4.2

Release notes

Sourced from jest's releases.

v30.4.2

Fixes

• [jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Full Changelog: jestjs/jest@v30.4.1...v30.4.2

v30.4.1

Features

• [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

• [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

Full Changelog: jestjs/jest@v30.4.0...v30.4.1

v30.4.0

Big release! 😀

Main feature is a rewrite of our custom runtime in preparation for stabilisation of native support of ESM. As part of that work require(esm) module is now supported on Node 24.9+ (still requires --experimental-vm-modules like before).

In addition we now support fake timers for the recently released Temporal API in Node v26.

React 19 is also supported properly in pretty-format, meaning snapshots of React components now work like they should.

Due to all the changes, there might be regressions that snuck in. Please report them!

Full list of changes below

Features

• [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)
• [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)
• [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)
• [jest-config] Add support for jest.config.mts as a valid configuration file (#16005)
• [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)
• [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)
• [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)
• [@jest/fake-timers] Support faking Temporal.Now.* (#16131)
• [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)
• [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)
• [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)
• [jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)
• [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)
• [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)
• [jest-util] Add isError helper (#16076)

... (truncated)

Changelog

Sourced from jest's changelog.

30.4.2

Fixes

• [jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

30.4.1

Features

• [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

• [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

30.4.0

Features

• [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)
• [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)
• [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)
• [jest-config] Add support for jest.config.mts as a valid configuration file (#16005)
• [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)
• [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)
• [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)
• [@jest/fake-timers] Support faking Temporal.Now.* (#16131)
• [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)
• [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)
• [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)
• [jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)
• [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)
• [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)
• [jest-util] Add isError helper (#16076)
• [pretty-format] Support React 19 (#16123)

Fixes

• [expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)
• [@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)
• [fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)
• [jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)
• [jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#16003)
• [jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#15967)
• [jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#15961)
• [jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#16132)
• [jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#16132)
• [jest-environment-node] Fix --localstorage-file warning on Node 25+ (#16086)
• [jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#16137)

... (truncated)

Commits

• 746f2a0 v30.4.2
• b3b4a09 v30.4.1
• 5cbb21e v30.4.0
• db7141a fix: allow collectCoverage and coverageProvider in project config (#16132)
• efb59c2 v30.3.0
• 96c53d3 feat(jest-config): add defineConfig and mergeConfig functions (#15844)
• 855864e v30.2.0
• da9b532 v30.1.3
• ebfa31c v30.1.2
• d347c0f v30.1.1
• Additional commits viewable in compare view

Updates @types/jest from 29.5.14 to 30.0.0

Commits

• See full diff in compare view

Updates jest-mock-extended from 3.0.7 to 4.0.1

Release notes

Sourced from jest-mock-extended's releases.

4.0.1

Patch release containing the recently merged fixes after 4.0.0.

Changes

• Added TypeScript 6 compatibility.

  • Updated dev dependency support for TypeScript 6.
  • Expanded the TypeScript peer dependency range to include ^6.0.0.

• Fixed calledWith matching for object arguments.

  • calledWith now compares literal object arguments by value instead of only by reference.
  • This allows calls like mockFn.calledWith({ id: 1 }) to match later calls with equivalent object literals.
  • Added regression coverage for nested object literal matching.

• Fixed overloaded function support in mock proxy types.

  • Restored inferred argument and return types for mocked function properties.
  • Improves typing for overloaded methods on both flat mocks and deep mocks.
  • Adds regression coverage for overloaded method mocks.

4.0.0

Upgrade to jest 30

Commits

• 3784780 bump version - to 4.0.1.
• fe30345 Merge pull request #141 from gzm0/leave-infer
• b51d866 Merge pull request #145 from marchaos/pr-127-resolved
• d66a39d fix: allow objects as a parameter in the 'calledWith' method
• 7479be9 Merge pull request #143 from brunotp99/chore/upgrade-deps/jest-30-typescript-6
• dc4e958 chore: use original indentation
• 7ac0b14 chore: remove package lock
• 784f526 chore(deps): upgrade typescript major dependency and tsconfig
• 2a762bb Fix overloads: Revive infer statements from 3.0.7
• 75bfd0e bump version - to 4.0.0.
• Additional commits viewable in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates jose from 5.10.0 to 6.2.8

Release notes

Sourced from jose's releases.

v6.2.8

Fixes

• enforce a single recipient when decrypting dir and ECDH-ES (505c383)
• reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

• index the JWS and JWE registries without a wrapper (925f3bb)
• name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Fixes

• require own JOSE properties for presence checks (90ab09c)

Refactor

• reduce bundle size (767d7f1)

v6.2.6

Fixes

• types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Fixes

• compare claim values for falsy validation options (eb86956)
• forward key management parameters for a single JWE recipient (2d4f801)
• handle a zero-length JWE additional authenticated data (16ca398)
• reject a generateKeyPair crv option the algorithm does not imply (76364e9)
• reject an unencoded payload in the JWS Compact Serialization (01d053f)
• reject characters outside the Base64URL alphabet (0ebb971), references #879
• reject duplicate "crit" values when producing (31d60e1)
• reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
• reject truncated ASN.1 key data (7a16c66)
• surface non-ASCII token segments as JOSE errors (194fe11)
• types: correct JWK and CryptoKey types (62a196d)
• types: correct key resolver and JWT header types (e95f8c4)
• validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

• correct subpaths and API documentation (2daec38)
• document consumer-supplied type parameters (9e9f66c)
• stop claiming the JWK "use" parameter is used during import (47a07b2)
• update CHANGELOG.md (fc51bf5)

Refactor

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.8 (2026-08-03)

Fixes

• enforce a single recipient when decrypting dir and ECDH-ES (505c383)
• reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

• index the JWS and JWE registries without a wrapper (925f3bb)
• name the "alg" source in unsupported algorithm failures (1500459)

6.2.7 (2026-08-01)

Fixes

• require own JOSE properties for presence checks (90ab09c)

Refactor

• reduce bundle size (767d7f1)

6.2.6 (2026-07-31)

Fixes

• types: accept host CryptoKey declarations (b48a15b)

6.2.5 (2026-07-29)

Fixes

• compare claim values for falsy validation options (eb86956)
• forward key management parameters for a single JWE recipient (2d4f801)
• handle a zero-length JWE additional authenticated data (16ca398)
• reject a generateKeyPair crv option the algorithm does not imply (76364e9)
• reject an unencoded payload in the JWS Compact Serialization (01d053f)
• reject characters outside the Base64URL alphabet (0ebb971), references #879
• reject duplicate "crit" values when producing (31d60e1)
• reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
• reject truncated ASN.1 key data (7a16c66)
• surface non-ASCII token segments as JOSE errors (194fe11)
• types: correct JWK and CryptoKey types (62a196d)
• types: correct key resolver and JWT header types (e95f8c4)
• validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

• correct subpaths and API documentation (2daec38)
• document consumer-supplied type parameters (9e9f66c)

... (truncated)

Commits

• 8b768eb chore(release): 6.2.8
• 1500459 refactor: name the "alg" source in unsupported algorithm failures
• 714f870 fix: reject a non-string "alg" in EmbeddedJWK
• 925f3bb refactor: index the JWS and JWE registries without a wrapper
• 505c383 fix: enforce a single recipient when decrypting dir and ECDH-ES
• 514831d chore(deps): bump the actions group with 3 updates
• 45965db chore: cleanup after release
• 60b941f chore(release): 6.2.7
• 90ab09c fix: require own JOSE properties for presence checks
• 767d7f1 refactor: reduce bundle size
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jose since your current version.

Updates @eslint/js from 9.39.5 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

• e5c281f chore: updates for v9.39.3 release (Jenkins)
• 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
• 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
• 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
• da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
• 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

• f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
• a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
• c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
• fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
• 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
• 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
• ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
• 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
• c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
• 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
• a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
• a89059d feat!: Program range span entire source text (#20133) (Pixel998)
• 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
• f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
• aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
• f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
• 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
• 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
• 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
• 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
• f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

• bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
• 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
• 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

• 84fb885 chore: package.json update for @​eslint/js release
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
• f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
• b4b3127 chore: package.json update for @​eslint/js release
• 0b14059 chore: package.json update for @​eslint/js release
• fa31a60 feat!: add name to configs (#20015)
• 1e2cad5 chore: package.json update for @​eslint/js release
• 454a292 feat!: update eslint:recommended configuration (#20210)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
• See full diff in compare view

Updates @stylistic/eslint-plugin from 3.1.0 to 5.10.0

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.10.0

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

v5.9.0

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

v5.8.0

5.8.0 (2026-02-09)

... (truncated)

Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.10.0 (2026-03-06)

Features

• list-style: allow 'off' in overrides (#1144) (c43bd4b)
• padding-line-between-statements: introduce lineMode for selector matcher (#1143) (1ebd6d8)

Build Related

• deps: bump actions/download-artifact from 7 to 8 (#1153) (78ca032)
• deps: bump actions/upload-artifact from 6 to 7 (#1154) (01f7b17)

Performance

• no export all for @​typescript-eslint/utils (#1150) (258f9d8)

5.9.0 (2026-02-19)

Features

• no-trailing-spaces: support more file types (#1138) (501e838)
• padding-line-between-statements: support selector-based statement matchers (#1134) (8f5cc9e)
• support ESLint 10 (#1066) (5d99706)
• update deps (#1141) (f29fcff)

Bug Fixes

• comma-dangle: check tsx file correctly (#1127) (271da42)
• comma-dangle: prevent crash when linting non-js files (#1140) (4a96eae)
• indent: ignore when source code is not ESTree (#1139) (9e7f422)
• no-extra-parens: don't report jsdoc type assertion by default (#1100) (cfb6296)
• object-curly-spacing: correctly handle object patterns with type annotations (#1129) (5aaaec6)

Chores

• lines-around-comment: improve extensibility of allow boundary checks (#1136) (18b961e)
• no-extra-parens: simplify fixer (#1133) (3504e1f)
• on-var-declaration-per-line: simplify fixer (#1132) (c827fde)

5.8.0 (2026-02-09)

Features

... (truncated)

Commits

• efbb1bc chore: release v5.10.0 (main) (#1151)
• 1ebd6d8 feat(padding-line-between-statements): introduce lineMode for selector matc...
• c43bd4b feat(list-style): allow 'off' in overrides (#1144)
• 95884fc chore: replace prettier with oxfmt (#1147)
• 96ce1c7 chore: release v5.9.0 (main) (#1131)
• 5d99706 feat: support ESLint 10 (#1066)
• cfb6296 fix(no-extra-parens): don't report jsdoc type assertion by default (#1100)
• 501e838 feat(no-trailing-spaces): support more file types (#1138)
• 8f5cc9e fe...

  Description has been truncated