fix(deps): update devtools-owned toolchain

[ankhorage-renovate-sync]

This PR contains the following updates:

Package	Change	Age	Confidence
@ankhorage/ankh	^0.13.1 → ^0.13.2
@ankhorage/apm	^0.8.14 → ^0.8.15
@ankhorage/capability	^0.2.1 → ^0.2.2
@ankhorage/doctor	0.14.13 → 0.14.18
@ankhorage/paradox	^0.3.4 → ^0.3.5
@next/eslint-plugin-next (source)	^16.4.0 → ^16.4.2
eslint (source)	^10.12.0 → ^10.13.0
eslint-plugin-prettier	^5.5.6 → ^5.5.7
knip (source)	^6.41.0 → ^6.42.0

---

Release Notes

ankhorage/ankh (@​ankhorage/ankh)

v0.13.2

Compare Source

Patch Changes

• 11cd58d: Update the published Contracts and capability descriptor runtime to Contracts 26 and Capability 0.2.2.

ankhorage/apm (@​ankhorage/apm)

v0.8.15

Compare Source

Patch Changes

• a32d80b: Publish the canonical APM capability catalog and synchronize package metadata.

ankhorage/capability (@​ankhorage/capability)

v0.2.2

Compare Source

Patch Changes

• 397b4fe: Require published Contracts 26 for the capability toolkit runtime dependency.

ankhorage/doctor (@​ankhorage/doctor)

v0.14.18

Compare Source

Patch Changes

• 795f62c: Migrate OAuth readiness planning to the canonical @ankhorage/auth-supabase provider.

v0.14.17

Compare Source

Patch Changes

• 9798673: Update dependencies: @ankhorage/capability.

v0.14.16

Compare Source

Patch Changes

• 3ddaa1d: Update dependencies: @ankhorage/rules-architecture.

v0.14.15

Compare Source

Patch Changes

• b72a1b3: Allow the canonical Rules owner to publish a new Bun runtime contract while retaining strict checks for consumer repositories.

v0.14.14

Compare Source

Patch Changes

• b660c9a: Update dependencies: @ankhorage/contracts, @ankhorage/paradox, @ankhorage/supabase-auth.

ankhorage/paradox (@​ankhorage/paradox)

v0.3.5

Compare Source

Patch Changes

• be63189: Update Ankhorage dependencies: @ankhorage/ankh.

vercel/next.js (@​next/eslint-plugin-next)

v16.4.2

Compare Source

What's Changed

• [lts-active] turbo-tasks snapshot consistency fixes (#​99644, #​99732, #​99649) by @​lukesandberg in #​100002
• [lts-active] Turbopack: backport Pages Router dev module graph chaining (#​98823, #​99910, #​100091) by @​sokra in #​100008
• [lts-active] fix(next-code-frame): snap visible window to char boundaries by @​lukesandberg in #​100212
• [lts-active] [turbopack] Fix two GC paths that leave half-torn-down dependency edges by @​lukesandberg in #​100209
• [lts-active] Turbopack: Ignore realpath errors during module resolution, matching node's behavior by @​lukesandberg in #​100217
• [lts-active] Backport docs fixes since v16.4.0 by @​icyJoseph in #​100246
• [lts-active] Fix Turbopack lazy dynamic-import chunk-list collisions by @​lukesandberg in #​100211
• [lts-active] Backport additional documentation fixes since v16.4.0 by @​aurorascharff in #​100262

Full Changelog: vercel/next.js@v16.4.1...v16.4.2

v16.4.1

Compare Source

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution in use cache functions returning typed arrays
• Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

High:

• Denial of Service in App Router using Server Actions

eslint/eslint (eslint)

v10.13.0

Compare Source

Features

• 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#​21238) (Irfan fandi)
• a39d9fb feat: add globalThis to no-obj-calls (#​21382) (synthex-byte)
• 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#​21399) (xbinaryx)

Bug Fixes

• 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#​21389) (Daniel Pinto)

Documentation

• 4783a68 docs: Update README (GitHub Actions Bot)
• 43f0ac9 docs: clarify parameter description in getText (#​21287) (lumir)

Chores

• b59d889 chore: update github/codeql-action action to v4.38.3 (#​21412) (renovate[bot])
• 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#​21410) (Francesco Trotta)
• 317fcb3 chore: update ecosystem plugins (#​21409) (ESLint Bot)
• b92decf perf: skip no-redeclare scan for single-declaration variables (#​21365) (James Ross)
• 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#​21398) (renovate[bot])
• e5aea41 chore: update ecosystem plugins (#​21390) (ESLint Bot)

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.5.7

Compare Source

Patch Changes

• #​796 7e53ecd Thanks @​OskarEichler! - Fix fallback diagnostic locations for all supported line endings.

• #​805 1b7c433 Thanks @​JounQin! - Report a clear error when the sync worker fails to load, so a missing prettier dependency now fails fast with Cannot find package 'prettier' instead of hanging ESLint indefinitely.

webpro-nl/knip (knip)

v6.42.0: Release 6.42.0

Compare Source

• fix: add bun 1.4.3 check subcommand (#​2131) (09129b8) - thanks @​NimmLor!
• Detect pnpm workspaces correctly around packages: (resolve #​2133, close #​2134) (d1cc092)
• fix(github-actions): resolve working-directory nested under checkout path (#​2136) (87e051e) - thanks @​kenny-ish!
• fix(nx): track local generator and executor entry points (#​2117) (#​2121) (558407f) - thanks @​DreamLongYT!
• Update dependency bun to v1.4.3 (#​2137) (71f90bf) - thanks @​renovate[bot]!
• docs(react-router): note to run react-router typegen before Knip (#​2140) (f21ce9a) - thanks @​MannXo!
• fix: normalize scoped binary names (close #​2143) (c8509c4)
• Clarify plugin implementation boundaries (c5a67f5)
• fix(jest): treat mocked and required dependencies as used (#​2141) (3eaf1ba) - thanks @​TkDodo!
• fix: preserve root-only plugins for trailing-slash cwd (#​2139) (7f0db0e) - thanks @​sean0407!
• fix(nx): resolve run-commands script paths from the target cwd (#​2151) (516bd9a) - thanks @​JeanBeaurepaire!
• Resolve Nx run-commands loader paths from the target cwd (fa8ca13)
• Add @​solidjs/vite-plugin plugin (#​2144) (579a88d) - thanks @​everton-dgn!
• feat: add filesystem-routing plugin (#​2145) (1abd9e1) - thanks @​everton-dgn!
• Support tags in line comments (resolve #​1924) (5abef48)
• Keep resolveFromAST to static values in plugin guide (4cd353f)
• fix(solidjs-vite-plugin): keep entry overrides in production (#​2155) (e4b5f89) - thanks @​everton-dgn!
• feat(angular): resolve styleUrl and styleUrls of @​Component (#​2157) (c20d4d7) - thanks @​Cayan!
• Update npmx.dev snapshot (59eb873)
• fix(next): recognize Turbopack alias targets (#​2156) (1d44f6a) - thanks @​jakeleventhal!
• fix: preserve re-exports from framework entries (#​2154) (263ce20) - thanks @​jakeleventhal!
• feat(solidjs-vite-plugin): follow Solid's SSR and client mode entry rules (#​2148) (d711231) - thanks @​everton-dgn!
• feat(filesystem-routing): read route options from Vite configs (#​2149) (585f206) - thanks @​everton-dgn!
• feat(filesystem-routing): resolve routes from the Vite root (#​2150) (8cc0cb0) - thanks @​everton-dgn!
• fix: track namespace members in Promise.all imports (#​2162) (3f17cdf) - thanks @​everton-dgn!
• Update a few dependencies (161dbed)
• Fix Solid setup fixture coverage (ebe4180)
• Migrate shell script parsing to unbash v6 (f86044c)
• Add sponsors: @​pennylane-hq, @​agentscore, @​oblique-security (thank you!) (57ff23e)
• Stop pairing Promise.all imports and bindings after a spread (5bd2c64)
• Update some stats (dd02dde)
• fix(nx): read karmaConfig from target options (#​2164) (4e1e4bc) - thanks @​Cayan!
• Add tsrs plugin (#​2163) (ba09126) - thanks @​jakeleventhal!
• Drop redundant containingFilePath from plugin config inputs (ffb6caf)
• Resolve Nx target option configs from the workspace root (52c5233)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.