[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
oxlint (source)	1.86.0 → 1.87.0
release-it	21.1.0 → 21.1.1
zod (source)	4.6.5 → 4.6.6

---

Release Notes

oxc-project/oxc (oxlint)

v1.87.0: oxlint v1.87.0

Compare Source

🚀 Features

• 42dcfd2 linter/react/no-unescaped-entities: Implement suggestion (#​27292) (Mikhail Baev)
• cd4510d linter/unicorn/no-useless-switch-case: Implement suggestion (#​27245) (Mikhail Baev)
• 1a7c902 linter/react/jsx-no-target-blank: Implement suggestion (#​27181) (Mikhail Baev)

🐛 Bug Fixes

• 176b4b9 linter/jsx-a11y/label-has-associated-control: Validate label attribute values (#​27302) (sama Pyb)
• 7d381c3 linter/jsx-a11y/mouse-events-have-key-events: Handle nullish event handlers (#​27306) (sama Pyb)
• 4e09837 linter/jsx-a11y/lang: Validate lang expression strings (#​27304) (sama Pyb)
• 7d28a66 linter/unicorn/numeric-separators-style: Report misgrouped BigInt literals (#​27207) (breken)
• e928322 linter/unicorn/no-zero-fractions: Parenthesize separator and large integers in fixer (#​27206) (breken)
• 3d61a59 parser: Validate TypeScript type member separators (#​27222) (camc314)
• f08236b linter/eslint/prefer-exponentiation-operator: Preserve autofix precedence (#​27150) (camc314)
• 7d60ae3 linter/valid-title: Continue checks after allowed words (#​27146) (Cameron)
• ad5dd5d linter/eslint/no-unused-vars: Respect disabled argument checks for used ignore patterns (#​26925) (camc314)

release-it/release-it (release-it)

v21.1.1

Compare Source

• docs: add release-it-git-cliff to plugins list (#​1334) (bf2a3d8) - thanks @​adamhl8!
• Update undici to 7.29.1 (resolve #​1335) (37898f1)
• Update more dependencies (7bd73af)
• Migrate verkit import (5336543)

colinhacks/zod (zod)

v4.6.6

Compare Source

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #​6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243f, the pre-rewrite copy of 9c21983 with identical contents.

Commits:

• 0cd3af5 docs: load the en locale directly in Zod Mini
• 9d5e60f docs: import locales from zod/locales, not z.locales
• 34a626f docs: tighten the z.locales tree-shaking note
• 74304ce release: stage npm versions instead of publishing them (#​6622)
• b2ef983 docs: add Code for Japan to bronze sponsors
• 8fb2faf docs: crop the Code for Japan logo and list it first in bronze
• bacad51 docs: square the Code for Japan logo to match the other bronze tiles
• c42596b release: hold the run on the release-approval environment until the staged versions are approved (#​6638)
• a2ba4a6 fix(types): declare record output and input as members, not base type arguments (#​6645)
• a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#​6652)
• 529f78d 4.6.6
• 9c21983 ci: stage at verbose so a failed OIDC token exchange says why

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 5am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.