build(deps): bump the version-bumps-patch group across 1 directory with 6 updates

[dependabot]

Bumps the version-bumps-patch group with 6 updates in the / directory:

Package	From	To
@grpc/grpc-js	1.14.4	1.14.5
google-protobuf	4.0.2	4.0.3
eslint-plugin-perfectionist	5.11.0	5.11.1
eslint-plugin-tsdoc	0.5.2	0.5.3
jest	30.5.1	30.5.2
typedoc-plugin-markdown	4.13.0	4.13.1

Updates @grpc/grpc-js from 1.14.4 to 1.14.5

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.5

• Fix a bug that caused clients to automatically transmit excessive error details to clients by default (advisory GHSA-f596-whhp-79r4)
• Fix a bug that caused getAuthContext to return unverified certificates as though they were verified in some configurations (advisory GHSA-m9gg-hp2v-232j)
• Fix a bug that could cause stale call data to accumulate if a channel failed to connect for a long period of time (#3078)
• Fix a bug that could cause call status to be reported with expected fields missing (#3079)
• Avoid redundant end() calls on completed HTTP/2 streams (#3082 contributed by @​olavloite)
• Unify call numbers and avoid disabled trace allocations (#3084 contributed by @​olavloite)

Commits

• 56567d9 Merge pull request #3086 from murgatroid99/grpc-js_1.14.5
• 748ae86 Merge pull request #3088 from murgatroid99/grpc-js_perf_improvement_backport
• 526702d test(grpc-js): fix type errors in client stream lifecycle tests
• 26a8d3d fix(grpc-js): avoid redundant end() calls on completed HTTP/2 streams
• 152eebd chore(grpc-js): unify call numbers and avoid disabled trace allocations
• c5ae750 grpc-js(-xds): Increment version numbers (1.14.x)
• 735a09a Merge commit from fork
• af9b140 Merge commit from fork
• 45ac33e Merge commit from fork
• 9df49e3 Merge pull request #3081 from murgatroid99/grpc-js-xds_weighted_target_fix_ba...
• Additional commits viewable in compare view

Updates google-protobuf from 4.0.2 to 4.0.3

Release notes

Sourced from google-protobuf's releases.

v4.0.3

Fix unbounded recursion during binary deserialization (GHSA-5h29-r2cp-hfmr) .

We now use a depth limit of 200. Previously, overruns trigger RangeErrors from the VM. We are now catching these and swapping them to SyntaxError.

Commits

• fd70b00 Add binary deserialization depth limit and swap to Syntax
• a749e29 Bump adm-zip from 0.5.16 to 0.6.0 in /protoc_plugin
• 3500510 Fix workflow issues exposed by analyzer
• 24815b7 Bump runners to node 24 and protobuf 35.1
• c1f8dde Bump picomatch from 2.3.1 to 2.3.2
• 291b460 Adopt Protobuf's toolchain setup
• e20272e Bump minimatch from 3.1.2 to 3.1.5
• 50646b7 fixup package.jsons
• See full diff in compare view

Maintainer changes

This version was pushed to npm by npm-protocolbuffers, a new releaser for google-protobuf since your current version.

Updates eslint-plugin-perfectionist from 5.11.0 to 5.11.1

Release notes

Sourced from eslint-plugin-perfectionist's releases.

v5.11.1

   🐞 Bug Fixes

• Add safety semicolon when the next element continues an expression  -  by @​azat-io (bbb4d)
• sort-modules: Detect decorator metadata dependencies without tsconfig  -  by @​azat-io (be18b)

   🏎 Performance

• Build a sortable list's fix once instead of once per report  -  by @​azat-io (78472)

    View changes on GitHub

Changelog

Sourced from eslint-plugin-perfectionist's changelog.

v5.11.1

compare changes

🏎 Performance Improvements

• Build a sortable list's fix once instead of once per report (784725a)

🐞 Bug Fixes

• sort-modules: Detect decorator metadata dependencies without tsconfig (be18b94)
• Add safety semicolon when the next element continues an expression (bbb4db2)

❤️ Contributors

• Azat S. (@​azat-io)

Commits

• 3e100d2 build: publish v5.11.1
• ef12a53 chore: update dependencies
• 7788b8c chore: disable top-level var rewriting in build
• f20889b test: fix invalid syntax and cwd dependency in rule tests
• 784725a perf: build a sortable list's fix once instead of once per report
• bbb4db2 fix: add safety semicolon when the next element continues an expression
• c0b3b8e ci: move to pnpm v12
• 5c35518 chore: fix vite native config loader warning
• be18b94 fix(sort-modules): detect decorator metadata dependencies without tsconfig
• 4a57d49 docs: fix dead legacy config links
• See full diff in compare view

Updates eslint-plugin-tsdoc from 0.5.2 to 0.5.3

Changelog

Sourced from eslint-plugin-tsdoc's changelog.

0.5.3

Wed, 16 Sep 2026 01:24:29 GMT

Patches

• Declare eslint as an optional peer dependency so published typings resolve against the consumer's ESLint under non-hoisted installers.

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for eslint-plugin-tsdoc since your current version.

Updates jest from 30.5.1 to 30.5.2

Release notes

Sourced from jest's releases.

v30.5.2

Features

• [@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

• [jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)
• [jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)
• [@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

New Contributors

• @​winklemad made their first contribution in jestjs/jest#16345

Full Changelog: jestjs/jest@v30.5.1...v30.5.2

Changelog

Sourced from jest's changelog.

30.5.2

Features

• [@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

• [jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)
• [jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)
• [@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

Commits

• 202dd8a v30.5.2
• See full diff in compare view

Updates typedoc-plugin-markdown from 4.13.0 to 4.13.1

Release notes

Sourced from typedoc-plugin-markdown's releases.

typedoc-plugin-markdown@4.13.1

Patch Changes

• Load plugin translations for the merge entry point strategy (#900).
• Translate the @example heading in de, fr and ko (#900).
• Fix truncated option descriptions in the published JSON schema and type declarations.
• Fixed broken links on Windows when using excludeScopesInPaths (#903).

Changelog

Sourced from typedoc-plugin-markdown's changelog.

4.13.1 (2026-09-18)

Patch Changes

• Load plugin translations for the merge entry point strategy (#900).
• Translate the @example heading in de, fr and ko (#900).
• Fix truncated option descriptions in the published JSON schema and type declarations.
• Fixed broken links on Windows when using excludeScopesInPaths (#903).

Commits

• c816716 Version Packages
• bba8325 fix(core): keep url separators platform independent with excludeScopesInPaths
• 1d69896 fix(core): load plugin translations in merge mode (#900)
• bb32a11 fix(core): stop JSDoc truncating the entryModule deprecation notice
• e6f1c38 fix(release): stop prepublishOnly rebuilding during concurrent publish
• 2d45394 chore(all): npm metadata upkeep and version-drift guidance
• 7f51004 docs(quality): correct custom theme examples
• 309ce15 chore(core): broaden npm keywords for discoverability
• 99a9417 chore(release): changelog scripts
• See full diff in compare view