Bump the npm-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the npm-dependencies group with 3 updates in the / directory: eslint-plugin-jsdoc, npm-check-updates and stylelint.

Updates eslint-plugin-jsdoc from 62.8.0 to 62.9.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v62.9.0

62.9.0 (2026-04-01)

Features

• update jsdoccomment, devDeps. (8569d0c)

v62.8.1

62.8.1 (2026-03-25)

Bug Fixes

• valid-types: allow required default names; fixes #1675 (bca557b)

Commits

• 8569d0c feat: update jsdoccomment, devDeps.
• 5b668af chore(deps): bump brace-expansion from 1.1.12 to 1.1.13
• 7d0e91a chore: update comment-parser, jsdoccomment, espree, devDeps.
• bca557b fix(valid-types): allow required default names; fixes #1675
• 78335ff chore(deps): bump picomatch from 2.3.1 to 2.3.2
• 7bc2525 chore(deps): bump undici from 6.23.0 to 6.24.0
• See full diff in compare view

Updates npm-check-updates from 19.6.5 to 20.0.0

Release notes

Sourced from npm-check-updates's releases.

v20.0.0

Auto Cooldown

The cooldown option is now automatically applied from the respective package manager's config:

• npm - min-release-age (#1632)
• yarn - npmMinimalAgeGate (excluding npmPreapprovedPackages) (#1643)
• pnpm - minimumReleaseAge (excluding minimumReleaseAgeExclude) (#1639)

Why is this a breaking change?

• If you use any of the above configs, npm-check-updates will automatically exclude releases that do not exceed the specified minimum age as described in https://github.com/raineorshine/npm-check-updates#cooldown.
• Otherwise, you don't need to do anything.

Other changes

• Bump strip-ansi from 7.1.2 to 7.2.0 by @​dependabot[bot] in raineorshine/npm-check-updates#1620
• Bump lodash and @​types/lodash by @​dependabot[bot] in raineorshine/npm-check-updates#1615
• Bump @​typescript-eslint/eslint-plugin from 8.44.1 to 8.57.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1619
• Bump hosted-git-info from 9.0.0 to 9.0.2 by @​dependabot[bot] in raineorshine/npm-check-updates#1622
• Bump glob and markdownlint-cli by @​dependabot[bot] in raineorshine/npm-check-updates#1625
• update dependencies; fix vulnerabilities by @​onemen in raineorshine/npm-check-updates#1630
• Potential fix for code scanning alert no. 13: Incomplete string escaping or encoding by @​raineorshine in raineorshine/npm-check-updates#1640

New Contributors

• @​onemen made their first contribution in raineorshine/npm-check-updates#1630
• @​Copilot made their first contribution in raineorshine/npm-check-updates#1632

Full Changelog: raineorshine/npm-check-updates@v19.6.6...v20.0.0

v19.6.6

Full Changelog: raineorshine/npm-check-updates@v19.6.5...v19.6.6

Commits

• a5d46ef 20.0.0
• 612a33e feat: auto-apply yarn npmMinimalAgeGate as cooldown, respect `npmPreapprove...
• 4e04b40 feat: auto-apply pnpm minimumReleaseAge as cooldown (#1639)
• cfb1083 Potential fix for code scanning alert no. 13: Incomplete string escaping or e...
• 9b9c139 Automatically apply npm min-release-age config as cooldown (#1632)
• 8d9c32e update dependencies; fix vulnerabilities (#1630)
• fb07ec2 Bump glob and markdownlint-cli (#1625)
• 94f0eee Bump hosted-git-info from 9.0.0 to 9.0.2 (#1622)
• 046f292 Bump @​typescript-eslint/eslint-plugin from 8.44.1 to 8.57.2 (#1619)
• 57f75a6 Bump lodash and @​types/lodash (#1615)
• Additional commits viewable in compare view

Updates stylelint from 17.4.0 to 17.6.0

Release notes

Sourced from stylelint's releases.

17.6.0

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

• Added: support for extending units to languageOptions (#9166) (@​jeddy3).
• Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
• Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

17.5.0

It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released 2.1.0 of our VS Code extension, which adds 8 new requested features, and our first release of the Stylelint Language Server.

• Deprecated: *syntax options from declaration-property-value-no-unknown (#9102) (@​ragini-pandey).
• Added: ignoreMediaFeatureNameValues: {} to media-feature-name-value-no-unknown (#8976) (@​kovsu).
• Fixed: node_modules not ignored when using codeFilename in Node.js API (#9130) (@​adalinesimonian).
• Fixed: Error TS7016 for imported css-tree types (#9133) (@​ragini-pandey).
• Fixed: declaration-property-value-keyword-no-deprecated false positives for function arguments (#9116) (@​ragini-pandey).
• Fixed: declaration-property-value-no-unknown false positives for calc-size() containing size keyword (#9105) (@​hriztam).
• Fixed: no-descending-specificity & no-duplicate-selectors false negatives for equivalent compound selectors (#8977) (@​kovsu).
• Fixed: no-invalid-position-declaration false positives for @mixin and @scope (#9120) (@​ragini-pandey).
• Fixed: property-no-unknown false negatives for types (#9117) (@​Mouvedia).

Changelog

Sourced from stylelint's changelog.

17.6.0 - 2026-03-26

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

• Added: support for extending units to languageOptions (#9166) (@​jeddy3).
• Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
• Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

17.5.0 - 2026-03-19

It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released 2.1.0 of our VS Code extension, which adds 8 new requested features, and our first release of the Stylelint Language Server.

• Deprecated: *syntax options from declaration-property-value-no-unknown (#9102) (@​ragini-pandey).
• Added: ignoreMediaFeatureNameValues: {} to media-feature-name-value-no-unknown (#8976) (@​kovsu).
• Fixed: node_modules not ignored when using codeFilename in Node.js API (#9130) (@​adalinesimonian).
• Fixed: Error TS7016 for imported css-tree types (#9133) (@​ragini-pandey).
• Fixed: declaration-property-value-keyword-no-deprecated false positives for function arguments (#9116) (@​ragini-pandey).
• Fixed: declaration-property-value-no-unknown false positives for calc-size() containing size keyword (#9105) (@​hriztam).
• Fixed: no-descending-specificity & no-duplicate-selectors false negatives for equivalent compound selectors (#8977) (@​kovsu).
• Fixed: no-invalid-position-declaration false positives for @mixin and @scope (#9120) (@​ragini-pandey).
• Fixed: property-no-unknown false negatives for types (#9117) (@​Mouvedia).

Commits

• f74ceaf Release 17.6.0 (#9180)
• 895f7f2 Add support for extending units to languageOptions (#9166)
• dd7231b Refactor to replace imurmurhash with node:crypto (#9177)
• 5b6b024 Bump picomatch (#9178)
• 7e25378 Bump @​csstools/css-syntax-patches-for-csstree from 1.0.29 to 1.1.1 in the css...
• 9edeff4 Group csstree and @csstools/css-syntax-patches-for-csstree in dependabot ...
• 2f7c0ca Bump actions/download-artifact from 8.0.0 to 8.0.1 (#9167)
• 59f310d Bump write-file-atomic from 7.0.0 to 7.0.1 (#9169)
• ab2ffcb Bump @​vscode/windows-process-tree from 0.6.3 to 0.7.0 (#9170)
• a9f3e5b Bump lint-staged from 16.3.3 to 16.4.0 (#9171)
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions