Update all npm dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@rollup/plugin-node-resolve (source)	16.0.1 -> 16.0.2
@typescript-eslint/eslint-plugin (source)	8.44.1 -> 8.46.0
@typescript-eslint/parser (source)	8.44.1 -> 8.46.0
eslint (source)	9.36.0 -> 9.37.0
mediabunny (source)	1.20.0 -> 1.23.0
playcanvas (source)	2.11.8 -> 2.12.0
rollup (source)	4.52.2 -> 4.52.4
typescript (source)	5.9.2 -> 5.9.3

---

Release Notes

rollup/plugins (@​rollup/plugin-node-resolve)

v16.0.2

2025-10-04

Bugfixes

• fix: error thrown with empty entry (#​1893)

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.46.0

Compare Source

🚀 Features

• eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#​11659)
• rule-schema-to-typescript-types: clean up and make public (#​11633)

🩹 Fixes

• eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#​11660)
• typescript-estree: forbid abstract method and accessor to have implementation (#​11657)
• eslint-plugin: removed error type previously deprecated (#​11674)
• eslint-plugin: [no-deprecated] ignore deprecated export imports (#​11603)
• eslint-plugin: [unbound-method] improve wording around this: void and binding (#​11634)
• rule-tester: deprecate TestCaseError#type and LintMessage#nodeType (#​11628)
• eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#​11487)

❤️ Thank You

• fisker Cheung @​fisker
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Mark de Dios @​peanutenthusiast
• Richard Torres @​richardtorres314
• Victor Genaev @​mainframev

You can read about our versioning strategy and releases on our website.

v8.45.0

Compare Source

🚀 Features

• eslint-plugin: expose rule name via RuleModule interface (#​11616)

🩹 Fixes

• eslint-plugin: [prefer-nullish-coalescing] ignoreBooleanCoercion should not apply to top-level ternary expressions (#​11614)
• eslint-plugin: [no-base-to-string] check if superclass is ignored (#​11617)

❤️ Thank You

• mdm317
• Moses Odutusin @​thebolarin
• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.46.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.45.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

eslint/eslint (eslint)

v9.37.0

Compare Source

Vanilagy/mediabunny (mediabunny)

v1.23.0

Compare Source

• Added FilePathTarget, a way to directly write to the file system in server-side environments
• Fixed reader race conditions when disposing an Input (#​163)

v1.22.0

Compare Source

• Added keyFrameInterval to Conversion API video options (#​162)
• getRetryDelay adjustments: Now receives src as argument and tries not to retry CORS errors (#​158)
• Fixed infinite recursion issue in Matroska seeking logic

v1.21.1

Compare Source

• Fixed unbounded memory usage issue when reading Matroska files
• Reading Matroska and fragmented MP4 now use less memory overall
• Allow non-finite and non-integer values for the maxCacheSize source option
• Fixed TypeScript declaration file errors when using "NodeNext" module resolution

v1.21.0

Compare Source

• Added a new alpha video option to the Conversion API for retaining transparency when converting videos
• Improved Conversion API error messages to be more helpful when missing encoder support
• Added a new isValid field to Conversion to check if execute() is even able to run
• Added a new showWarnings field to ConversionOptions to silence console warnings
• Fixed an incorrect default crop region being used in drawWithFit for rotated video samples (#​151)

v1.20.1

Compare Source

• Fixed udta box being read as string when the field was non-string, fixing out of bounds read (#​150)

playcanvas/engine (playcanvas)

v2.12.0

Compare Source

Changes

• Add xr-session.mjs script by @​willeastcott in #​7942
• Support .sog files generated with deflate by @​slimbuck in #​7943
• Publish workflow update by @​kpal81xd in #​7949
• README format update by @​kpal81xd in #​7952
• chore(deps): update actions/setup-node action to v5 by @​renovate[bot] in #​7944
• chore(deps): update actions/download-artifact action to v5 by @​renovate[bot] in #​7950
• GSplat using streaming LOD supports unloading files no longer needed by @​mvaligursky in #​7955
• CameraFrame shader chunks can be overwritten by @​mvaligursky in #​7958
• Public API to control unified gsplat behavior by @​mvaligursky in #​7959
• Gizmo changes by @​kpal81xd in #​7963
• Camera controls entity enabled check by @​kpal81xd in #​7966
• Gizmo API and style changes by @​kpal81xd in #​7967
• Exposed additional parameters for gsplat LOD by @​mvaligursky in #​7962
• SOG focus by @​slimbuck in #​7978
• Support for progressive LOD loading for unified splats by @​mvaligursky in #​7980
• Remove allocations in camera controls by @​LeXXik in #​7973
• Gizmo render update cleanup by @​kpal81xd in #​7983
• Log an error if orthographic camera uses cascades shadows, which are not supported by @​mvaligursky in #​7988
• Expose compose shader customization along with the example by @​mvaligursky in #​7989
• Add joystick movement to xr-navigation script by @​willeastcott in #​7996
• Mesh instance can use more than one indirect drawing call by @​mvaligursky in #​7995
• Generate SOG centers buffer on GPU instead of CPU by @​mvaligursky in #​7999
• Multi-draw support, WebGL & WebGPU by @​mvaligursky in #​8004
• Add caps multi draw by @​AlexAPPi in #​8007
• Add custom feedback varyings for WebGL Shader with useTransformFeedback by @​AlexAPPi in #​7992
• Avoid gl_DrawID related warning during shader setup by @​mvaligursky in #​8008
• Debug rendering of AABBs of individual gsplat octree nodes by @​mvaligursky in #​8009
• Expose CameraComponent.depthValue and fix issue when that is zero by @​mvaligursky in #​8011
• Small optimization in the way the number of rendered splats is rendered by @​mvaligursky in #​8022
• Batch LOD updates to avoid overloading on slower devices by @​mvaligursky in #​8027
• Improved sorting precision of unified splats by @​mvaligursky in #​8029
• Unified splats support radial sorting by @​mvaligursky in #​8031
• Support loading bundled sog from request by @​slimbuck in #​8017
• Update NPM dependencies by @​willeastcott in #​8036

Fixes

• SOG fix on mobile by @​slimbuck in #​7947
• Gizmo fixes and updates by @​kpal81xd in #​7946
• Gizmo fixes by @​kpal81xd in #​7954
• Gizmo fixes by @​kpal81xd in #​7956
• Fixes to SOGS data unloading by @​mvaligursky in #​7951
• Gizmo fixes by @​kpal81xd in #​7960
• Gizmo theme fix by @​kpal81xd in #​7961
• Gizmos render update patch by @​kpal81xd in #​7969
• Camera controls enable/disabled input deltas fix by @​kpal81xd in #​7970
• Fix SH bug on SOG import by @​slimbuck in #​7972
• Fixed rotation from negatively scaled transform by @​kpal81xd in #​7976
• Gizmo fixes by @​kpal81xd in #​7971
• Camera controls fixes by @​kpal81xd in #​7977
• Fix for bundled SOG loading by @​slimbuck in #​7982
• Gizmo angle guide fix by @​kpal81xd in #​7984
• (fix) Debug.assert raising react error by @​marklundin in #​7985
• Doc fix by @​slimbuck in #​7987
• [Fix] Fixed texture VRAM tracking then Texture.resize is used by @​mvaligursky in #​7997
• Unified gsplat rendering fixes and optimizations by @​mvaligursky in #​7981
• fix(template-asset): invalidate cached _previewRoot upon receiving new data by @​abstrakt8 in #​8003
• Fixed min and mag filter for matrices texture by @​AlexAPPi in #​8013
• Destroy orderTexture by @​fimbox in #​8016
• Fix GS artifacts by @​slimbuck in #​8030
• [Fix] Small changes to avoid unset uniform warnings when particle systems are rendered by @​mvaligursky in #​8028
• Remove obsolete parts of JSDocs on an internal function in ShaderDefinition by @​mvaligursky in #​8032
• [Fix] Grid (script) is no longer pickable by @​mvaligursky in #​8033
• Fix: Morph weights now respect animation layer weights by @​mvaligursky in #​8034
• Unload sog dependent assets by @​slimbuck in #​8037
• [Fix] WebGPU: Use textureLoad for data textures instead of textureSample by @​mvaligursky in #​8038
• Use exp table for gs by @​slimbuck in #​8040

New Contributors

• @​abstrakt8 made their first contribution in #​8003
• @​fimbox made their first contribution in #​8016

Full Changelog: playcanvas/engine@v2.11.8...v2.12.0

rollup/rollup (rollup)

v4.52.4

Compare Source

2025-10-03

Bug Fixes

• Fix an issue where the wrong branch of nullish coalescing was picked (#​6133)

Pull Requests

• #​6128: Enable npm OIDC publishing (@​lukastaegert)
• #​6133: Correct nullish coalescing branch resolution for symbol left value (@​TrickyPi)
• #​6134: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

v4.52.3

Compare Source

2025-09-27

Bug Fixes

• Fix check in native loader for environments that do not support reports (#​6123)

Pull Requests

• #​6123: fix(native-loader): safely handle report.getReport() on Termux/Android (@​Jobians, @​lukastaegert)
• #​6124: chore(deps): pin msys2/setup-msys2 action to fb197b7 (@​renovate[bot])
• #​6125: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6126: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])

microsoft/TypeScript (typescript)

v5.9.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on monday at 10:00am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.