[agntcy-automation]

This PR contains the following updates:

Package	Change	Age	Confidence
@grpc/grpc-js (source)	1.14.6 → 1.14.7
@microsoft/api-extractor (source)	7.60.0 → 7.60.1
@rollup/rollup-linux-x64-gnu (source)	4.65.1 → 4.68.0
@sigstore/bundle (source)	5.0.0 → 5.0.1
@sigstore/tuf (source)	5.0.0 → 5.0.1
@sigstore/verify (source)	4.1.2 → 4.1.3
eslint (source)	10.13.0 → 10.14.0
globals	17.13.0 → 17.14.0
npm (source)	11.21.1 → 11.21.2
sigstore (source)	5.0.0 → 5.0.1

---

Release Notes

grpc/grpc-node (@​grpc/grpc-js)

v1.14.7: @​grpc/grpc-js 1.14.7

Compare Source

• Fix a bug causing automatic retries to continue after a call is cancelled (#​3102 contributed by @​phyous)
• Fix a bug causing automatic retries to fail to trigger in some cases (#​3111 contributed by @​kahirokunn)

microsoft/rushstack (@​microsoft/api-extractor)

v7.60.1

Fri, 30 Oct 2026 21:34:20 GMT

Version update only

rollup/rollup (@​rollup/rollup-linux-x64-gnu)

v4.68.0

Compare Source

2026-11-06

Features

• Use the directory name instead of "index" for dynamic chunks of index.js files (#​6630)
• Support tree-shaking of namespace members through default exports (#​6631)
• Use cached sourcemaps if available when reading cached files (#​6636)

Bug Fixes

• No longer confuse import names starting with a literal "*" with internal namespace import placeholders (#​6628)
• Resolve a situation where a shared module accessed through different dynamic imports was wrongly merged into the first (#​6632)

Pull Requests

• #​6628: Preserve import and export names starting with "*" (@​clean99, @​lukastaegert)
• #​6630: Name dynamic chunks of index files after their directory (@​clean99, @​lukastaegert)
• #​6631: Tree-shake namespace members accessed through a default export (@​thelastbackspace)
• #​6632: Record live dynamic import edges for chunk assignment (@​mayankdhingra02, @​lukastaegert)
• #​6633: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6634: Update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6635: Lock file maintenance (@​renovate[bot], @​lukastaegert)
• #​6636: Do not decode cached sourcemaps again when reusing cached modules (@​Ice-Hazymoon, @​lukastaegert)

v4.67.5

Compare Source

2026-11-04

Bug Fixes

• Do not ignore output.sourcemapFile when the output.file option is not used (#​6623)
• Change chunk hash when debug IDs are enabled/disabled (#​6625)
• Avoid an unnecessary optional dependency on Linux system (#​6627)

Pull Requests

• #​6623: Honor output.sourcemapFile when output.file is not set (@​simpleqt)
• #​6625: Include debug ID comments in chunk hashes (@​clean99, @​lukastaegert)
• #​6627: Do not publish the build-only @​napi-rs/lzma-linux-x64-gnu optional dependency (@​christophehurpeau, @​lukastaegert)

v4.67.4

Compare Source

2026-11-01

Bug Fixes

• Make rollup work again on older Xeon processors (#​6622)

Pull Requests

• #​6622: Build linux-x64-gnu C code for baseline x86-64 CPUs (@​TrickyPi)

v4.67.3

Compare Source

2026-10-31

Bug Fixes

• Ensure line breaks in module ids are handled correctly in imports (#​6620)

Pull Requests

• #​6620: Preserve line terminators in module ids (@​clean99, @​lukastaegert)

v4.67.2

Compare Source

2026-10-30

Features

• Support X64 Android (#​6603)

Pull Requests

• #​6603: Add android-x64 native build (@​x-labb, @​lukastaegert)
• #​6605: Install libatomic1 for Node 26 in smoke test containers (@​lukastaegert)
• #​6606: Update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6608: Update dependency eslint-plugin-unicorn to v79 (@​renovate[bot])
• #​6610: Lock file maintenance (@​renovate[bot])
• #​6611: Lock file maintenance (@​renovate[bot])
• #​6612: Lock file maintenance (@​renovate[bot])
• #​6615: Lock file maintenance (@​renovate[bot])
• #​6616: Update estree dependency (@​lukastaegert)

v4.66.0

Compare Source

2026-10-28

Features

• Support null sources in plugin-generated sourcemaps (#​6600)
• Support plugin-generated "index" sourcemaps (#​6601)

Bug Fixes

• Preserve rendering errors when the rendereError hook fails (#​6602)

Pull Requests

• #​6600: Treat null sources in plugin sourcemaps as unmapped (@​wleeaf, @​lukastaegert)
• #​6601: Flatten index sourcemaps returned by plugins (@​wleeaf, @​lukastaegert)
• #​6602: Preserve rendering errors when renderError fails (@​shuaiyafei)

sigstore/sigstore-js (@​sigstore/bundle)

v5.0.1

Compare Source

Patch Changes

• 7d0ad01: Bump @​sigstore/protobuf-specs from 0.5.0 to 0.5.2

eslint/eslint (eslint)

v10.14.0

Compare Source

Features

• d23a7f9 feat: fix property descriptor handling in func-name-matching (#​21400) (xbinaryx)

Bug Fixes

• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#​21460) (lumir)
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#​21449) (xbinaryx)
• 161558a fix: handle LS, PS and empty hashbang comments (#​21419) (lumir)
• 6194939 fix: no-invalid-this crash on accessor fields without initializer (#​21442) (xbinaryx)
• 9155e14 fix: Update @​humanfs/node dependency version (#​21434) (Nicholas C. Zakas)
• cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#​21323) (dvd233)
• 5ee3915 fix: yoda invalid autofix at statement start (#​21424) (Daniel Pinto)

Documentation

• 0f94f47 docs: remove zh-hans from docs language switcher (#​21437) (lumir)
• dab466e docs: Update README (GitHub Actions Bot)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#​21452) (Pixel)
• 7697550 docs: Update README (GitHub Actions Bot)
• 0c699d5 docs: Remove Tidelift commercial support (#​21416) (Milos Djermanovic)
• 0880666 docs: update loadESLint() documentation for v10 (#​21374) (Minseon Kim)
• e06fe87 docs: Revise AI acknowledgment options in PR template (#​21414) (Nicholas C. Zakas)

Chores

• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#​21462) (Francesco Trotta)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#​21450) (renovate[bot])
• a031c40 chore: update ecosystem plugins (#​21445) (ESLint Bot)
• 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#​21429) (Milos Djermanovic)
• 276021d chore: update github/codeql-action action to v4.39.0 (#​21432) (renovate[bot])
• 449724e chore: update ecosystem plugins (#​21420) (ESLint Bot)
• 8ffeb8c chore: update dependency prettier to v3.9.10 (#​21417) (renovate[bot])

sindresorhus/globals (globals)

v17.14.0

Compare Source

• Update globals (2026-11-01) (#​355) 7abfb5d

---

npm/cli (npm)

v11.21.2

Compare Source

Bug Fixes

• 9433b48 #​10195 accept supported Node.js prereleases at startup (#​10195) (@​github-actions[bot], @​reggi, @​Copilot)

Dependencies

• 8cbc35a #​10206 semver@7.8.6 (@​reggi, @​Copilot)
• 9c0af6b #​10172 ip-address@10.7.5
• f3707dc #​10172 undici@6.29.1
• 484a19d #​10176 pacote@21.5.2 (@​martinrrm, @​Copilot)
• bfae5d0 #​10176 promise-spawn@9.0.2 (@​martinrrm)
• 2ef644b #​10176 bin-links@6.0.3 (@​martinrrm)
• workspace: libnpmexec@10.3.5

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!