[dependabot]

Bumps the npm group with 5 updates:

Package	From	To
@11ty/eleventy-plugin-rss	3.0.0	3.1.0
eslint	10.11.0	10.12.0
globals	17.12.0	17.13.0
html-minifier-next	8.5.3	8.10.2
stylelint	17.15.0	17.16.0

Updates @11ty/eleventy-plugin-rss from 3.0.0 to 3.1.0

Release notes

Sourced from @​11ty/eleventy-plugin-rss's releases.

Feeds (RSS, Atom, JSON) v3.1.0

• Add collection.sort option to the Virtual Template: "auto" (default, previous behavior), "descending" (newest first by date, regardless of collection order), or "ascending". Use "descending" if your collection is sorted newest-first and your feed was showing your oldest posts. 11ty/plugin-rss#63
• Add getFeedTemplate(options) export, which returns { content, data } for use with eleventyConfig.addTemplate so you can choose the virtual template path yourself (useful for multiple feeds of the same type).

  import { rssPlugin, getFeedTemplate } from "@11ty/eleventy-plugin-rss";
  export default function($config) {
  $config.addPlugin(rssPlugin);
  let { content, data } = getFeedTemplate({ type: "atom", outputPath: "/posts.xml", collection: { name: "posts" } });
  $config.addTemplate("feeds/posts.njk", content, data);
  
  };

• Feed entries without a URL (e.g. permalink: false) are now skipped by the Virtual Template instead of failing the build. 11ty/plugin-rss#66 (thank you @​robb-j for the assist in 11ty/plugin-rss#59)
• Plugin helpers (feedPlugin, dateToRfc3339, dateToRfc822, getNewestCollectionItemDate, absoluteUrl, convertHtmlToAbsoluteUrls) are available on the default export again (matching CommonJS behavior in v2). Named exports are still the preferred method 11ty/plugin-rss#91
• JSON Virtual Template now falls back to metadata.subtitle for the feed description (matching Atom and RSS) when metadata.description isn't set.
• Fix Atom Virtual Template using <icon> instead of <logo> for metadata.logo by @​philipmw in 11ty/plugin-rss#90
• Swap debug dependency for obug. DEBUG=Eleventy* works the same. 11ty/plugin-rss#100

Milestone: https://github.com/11ty/plugin-rss/milestone/10?closed=1 Full Changelog: 11ty/plugin-rss@v3.0.0...v3.1.0

Commits

• 71036e8 v3.1.0
• 0b6d51a Fixes 11ty/plugin-rss#101
• 4c12cc6 Feed items must have a URL! Fixes #66
• 2e41008 Fixes #63
• ed4cca8 Reuse subtitle in JSON Virtual Template
• 83400b9 Fixes #100
• ea5c25e Fix #91
• a118986 Revert Node 22 bump for 3.x
• 34486fc Restore posthtml-urls@1 for v3
• 68c29fd Simplification
• Additional commits viewable in compare view

Updates eslint from 10.11.0 to 10.12.0

Release notes

Sourced from eslint's releases.

v10.12.0

Features

• 4618052 feat: handle astral letters in new-cap (#21357) (sary)
• 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
• efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
• 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
• 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
• b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
• 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
• 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

• 67eb586 docs: Update README (GitHub Actions Bot)
• 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
• 8816c1d docs: Update README (GitHub Actions Bot)
• 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

• 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
• bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
• d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
• 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
• 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])
• 182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])
• f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)
• b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])
• 3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

Commits

• a438ec3 10.12.0
• 32a73f1 Build: changelog update for 10.12.0
• bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
• bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
• 152067f chore: update ecosystem plugins (#21362)
• b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
• 67eb586 docs: Update README
• bfaea12 perf: cache normalized config globals per languageOptions (#21364)
• 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
• d166567 chore: update dependency prettier to v3.9.9 (#21371)
• Additional commits viewable in compare view

Updates globals from 17.12.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

• Update globals (2026-10-01) (#354) b007369

---

sindresorhus/globals@v17.12.0...v17.13.0

Commits

• ce512bc 17.13.0
• b007369 Update globals (2026-10-01) (#354)
• 16cb1fe Meta tweaks
• See full diff in compare view

Updates html-minifier-next from 8.5.3 to 8.10.2

Changelog

Sourced from html-minifier-next's changelog.

[8.10.2] - 2026-10-02

Fixed

• Fixed collapseWhitespace removing whitespace before inline elements not written in lowercase, also without caseSensitive (e.g., a <SPAN>b</SPAN> became a<span>b</span>), including custom elements from inlineCustomElements (e.g., myElement)
• Fixed collapseWhitespace keeping a single trailing line break in a pre element closed by </PRE> (e.g., in <pre>\nfoo\n</PRE>), which it removes before </pre>
• Fixed collapseWhitespace not removing whitespace next to hidden inputs whose type isn’t written in lowercase (e.g., <input type=Hidden>)
• Fixed caseSensitive treating HTML elements and attributes not written in lowercase as unknown ones, which kept most options from applying to them (e.g., minifyJS to <SCRIPT>, removeOptionalTags to <LI>, or removeRedundantAttributes to DIR=ltr) and made collapseWhitespace collapse whitespace in <PRE> and <TEXTAREA> and remove it around inline elements like <SPAN>; HTML names are now read in any case, as browsers do, while the output and hooks get them as written (with removeEmptyElementsExcept and inlineCustomElements matching any case)
• Fixed some boolean attributes without a value getting their name for a value (e.g., <input disabled> became <input disabled=disabled>, and <input DISABLED> <input disabled=DISABLED>), which collapseBooleanAttributes would only undo
• Fixed canCollapseWhitespace having no effect on its own, as trimming collapsed the whitespace between tags anyway; it now keeps the runs inside an element as written, which canTrimWhitespace may still trim at the edges
• Fixed canTrimWhitespace not keeping whitespace as written in an element it decides on by attributes, where a later end tag could still trim the element’s trailing whitespace (e.g., the space before the first </div> in <div><div class=keep>a </div></div>), or in text next to only one tag

Changed

• Improved parser performance, with fewer allocations per tag and text node and the raw-text check only rerun when open elements change

[8.10.1] - 2026-10-02

Fixed

• Fixed collapseWhitespace keeping whitespace before elements that don’t render, like script, meta, or link, where nothing after them renders it (e.g., the space in <img src="a"> <script></script></body>), and after them, where nothing before them renders it (e.g., in <p><script></script> text), as well as on both sides of such an element, where one space is enough (a <script></script> b now becomes a<script></script> b)
• Fixed collapseWhitespace keeping whitespace between an element that doesn’t render and an htmlmin:ignore block that starts with one (e.g., between meta elements in head)

[8.10.0] - 2026-10-01

Fixed

• Fixed removeEmptyElements removing label, output, and template elements with a for attribute, like a label styled as a menu toggle, an output for scripts to fill, or a template that clears the content it targets
• Fixed minifySVG removing empty attributes, which may serve as CSS hooks (e.g., [data-v-…] selectors) or carry meaning (alt="" in foreignObject); SVGO’s removeEmptyAttrs plugin is now off for inline SVG
• Fixed minifySVG skipping SVGO for an SVG with an attribute without a value (e.g., Vue’s data-v-… markers), which isn’t valid XML; such attributes now get an empty value for SVGO, which collapseEmptyAttributes removes again afterwards
• Fixed minifyURLs treating <script for> as a URL
• Fixed removeUnusedCSS overlooking classes and IDs that follow another name in a selector (e.g., p.note, ul#menu, or the second class in .a.b), whose rules it never removed
• Fixed cache keys for large CSS, JavaScript, and SVG inputs, whose 32-bit hash could, if rarely, hand one input another’s minified result; they now use a 53-bit hash

Added

• Added the removal of individual selectors to removeUnusedCSS: Selectors naming an unused class or ID now go from their list, and the rule stays for the rest (e.g., .used, .unused {…} becomes .used {…}), where previously the rule was kept whole unless all its selectors were unused
• Added the removal of selectors for elements a document doesn’t contain to removeUnusedCSS (e.g., dialog {…} on a page without dialog); elements the parser supplies (like html, body, or tbody) and element names in inline scripts count as used, and safelist keeps those only external scripts create
• Added <audio src>, <button formaction>, <embed src>, <frame longdesc>, <frame src>, <iframe src>, <input formaction>, <source src>, <track src>, <video poster>, and <video src> to the attributes minifyURLs processes
• Added support for processing instructions (e.g., <?start name="feed">, <?end>, and <?marker name="feed"> for \<template for>), which the parser now reads without a parse error and HMN keeps as written: removeComments leaves them alone, removeEmptyElements keeps elements holding them, and collapseWhitespace keeps whitespace between them and text; with continueOnParseError, what starts like one but isn’t (e.g., <?xml …> or <? …>) is now read as a bogus comment, as in browsers, and kept as written unless removeComments removes it

Changed

• Changed the default ignoreCustomFragments pattern for <? … ?> to /<\?(?:php[\t\n\r ]|=|\$|xml(?:-stylesheet)?(?![\w-])|\s)[\s\S]*?\?>/i, which covers PHP (including short tags) and XML declarations but not processing instructions: The previous pattern reached from a processing instruction to the next ?>, and could break markup in between (e.g., dropping </div> from <?start name="a"><div><?php echo 1 ?></div>)
• Implemented removal of repeated class names from class attributes (e.g., class="a b a" becomes class="a b")

[8.9.0] - 2026-10-01

Fixed

... (truncated)

Commits

• See full diff in compare view

Updates stylelint from 17.15.0 to 17.16.0

Release notes

Sourced from stylelint's releases.

17.16.0

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

• Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

Changelog

Sourced from stylelint's changelog.

17.16.0 - 2026-10-01

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

• Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

Commits

• bc06c7c Release 17.16.0 (#9551)
• f4fb76f Set target-branch to v18 in Dependabot config (#9488)
• 2019478 Fix property-layout-mappings and unit-layout-mappings false negatives for...
• e875710 Fix value-keyword-layout-mappings false positives for caption-side (#9483)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions