deps: bump the dev-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the dev-dependencies group with 4 updates in the / directory: @opentelemetry/sdk-trace-node, @types/node, lint-staged and typescript-eslint.

Updates @opentelemetry/sdk-trace-node from 2.5.0 to 2.5.1

Release notes

Sourced from @​opentelemetry/sdk-trace-node's releases.

v2.5.1

2.5.1

🐛 Bug Fixes

• fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @​maryliag

🏠 Internal

• perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @​overbalance
• test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @​overbalance
• fix(example-web): update Docker config and deps for collector #6342 @​overbalance
• perf(sdk-trace-base): optimize setAttribute performance #6283 @​AbhiPrasad
• refactor(core): remove unnecessary closure in _export() #6360 @​cjihrig

Changelog

Sourced from @​opentelemetry/sdk-trace-node's changelog.

2.5.1

🐛 Bug Fixes

• fix(opentelemetry-sdk-node): the custom value from env variable for service.instance.id should take priority over random uuid as backup #6345 @​maryliag

🏠 Internal

• perf(sdk-trace-base): use Uint8Array for browser RandomIdGenerator #6209 @​overbalance
• test(sdk-trace-base): remove obsolete TypeScript and platform workarounds #6327 @​overbalance
• fix(example-web): update Docker config and deps for collector #6342 @​overbalance
• perf(sdk-trace-base): optimize setAttribute performance #6283 @​AbhiPrasad
• refactor(core): remove unnecessary closure in _export() #6360 @​cjihrig

Commits

• ad92be4 chore: prepare next release (#6402)
• 3e68499 feat(configuration): add prometheus exporter support (#6400)
• b743747 fix(configuration): remove default propagator initialization (#6399)
• 48e2fb4 chore(deps): update fossas/fossa-action action to v1.8.0 (#6405)
• 90d1afa ci: allow different release bumps for groups (#6397)
• c1d0543 fix(deps): update dependency axios to v1.13.5 [security] (#6398)
• a78d112 fix(deps): update dependency @​grpc/grpc-js to v1.8.22 [security] (#6366)
• fcafab5 chore: fix lint (#6388)
• a0d5c14 fix(otlp-exporter-base): avoid use of a wrapped fetch (#6353)
• 819ebb2 chore(deps): update dependency webpack-merge to v6 (#6364)
• Additional commits viewable in compare view

Updates @types/node from 25.0.10 to 25.3.2

Commits

• See full diff in compare view

Updates lint-staged from 16.2.7 to 16.3.0

Release notes

Sourced from lint-staged's releases.

v16.3.0

Minor Changes

• #1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

• #1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

• #1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

Changelog

Sourced from lint-staged's changelog.

16.3.0

Minor Changes

• #1698 feda37a Thanks @​iiroj! - Run external processes with tinyexec instead of nano-spawn. nano-spawn replaced execa in lint-staged version 16 to limit the amount of npm dependencies required, but caused some unknown issues related to spawning tasks. Let's hope tinyexec improves the situation.

• #1699 1346d16 Thanks @​iiroj! - Remove pidtree as a dependency. When a task fails, its sub-processes are killed more efficiently via the process group on Unix systems, and the taskkill command on Windows.

Patch Changes

• #1726 87467aa Thanks @​iiroj! - Incorrect brace expansions like *.{js} (nothing to expand) are detected exhaustively, instead of just a single pass.

Commits

• 9aa2cd7 chore(changeset): release
• 0c387bc test: make long-running task longer because of GitHub Actions slowness
• 87467aa refactor: detect incorrect brace expansion exhaustively
• dceabc6 ci: run npm audit in GitHub Actions
• d0e4c2a build(deps): update dependencies
• 93cf144 docs: add tip about lint-staged.sh
• 9809fee test: adjust integration test logging setup for concurrency
• cc432df feat: use tinyexec to spawn tasks
• feda37a feat: use tinyexec for Git commands
• e15178a docs: fix typos in example comments for environment variables (#1721)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.53.1 to 8.56.1

Release notes

Sourced from typescript-eslint's releases.

v8.56.1

8.56.1 (2026-02-23)

What's Changed

• chore(deps): update dependency minimatch to v10.2.2 by @​benmccann in typescript-eslint/typescript-eslint#12074

You can read about our versioning strategy and releases on our website.

v8.56.0

8.56.0 (2026-02-16)

🚀 Features

• support ESLint v10 (#12057)

🩹 Fixes

• use parser options from context.languageOptions (#12043)

❤️ Thank You

• Brad Zacher @​bradzacher
• fnx @​DMartens
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

8.55.0 (2026-02-09)

🚀 Features

• utils: deprecate defaultOptions in favor of meta.defaultOptions (#11992)

🩹 Fixes

• eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#11990)
• eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#11966, #12000)
• eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#11984)
• eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#11949)
• typescript-estree: forbid invalid modifier in object expression (#11931)

❤️ Thank You

• Christian Rose @​chrros95
• fisker Cheung @​fisker
• Josh Goldberg
• Maria Solano @​MariaSolOs

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.56.1 (2026-02-23)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.56.0 (2026-02-16)

🚀 Features

• support ESLint v10 (#12057)

❤️ Thank You

• Brad Zacher @​bradzacher
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.55.0 (2026-02-09)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.54.0 (2026-01-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

• 96a04a9 chore(release): publish 8.56.1
• 8b8b68f chore(release): publish 8.56.0
• 68a074f feat: support ESLint v10 (#12057)
• fedfe86 chore(release): publish 8.55.0
• b931f8c chore: use workspace refs for workspace deps (#12018)
• 1f17a79 chore: migrate to pnpm (#11248)
• d423e57 chore(release): publish 8.54.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Agent Ready Scan Results

Metric	Value
Level	L1
Score	56%
Project Type	cli
Passed	true

Full Report

Agent Readiness Report

Level: L1
Score: 56%
Project Type: cli

Pillar Summary

• docs: L3 (53%)
• style: L5 (100%)
• build: L5 (89%)
• test: L4 (50%)
• security: L5 (67%)
• observability: L5 (100%)
• env: L5 (100%)
• task_discovery: L5 (67%)
• product: L5 (100%)
• agent_config: L1 (36%)
• code_quality: L2 (0%)

Failed Checks

• [L1] agent_config.gitignore_agent: File exists but does not contain required pattern: .gitignore
• [L2] agent_config.claude_commands: Found 0 files matching '.claude/commands/*.md', need at least 1
• [L2] agent_config.cursorrules: Only 0/2 alternatives passed (need 1)
• [L2] agent_config.aider_config: Only 0/3 alternatives passed (need 1)
• [L2] agent_config.copilot_config: Only 0/2 alternatives passed (need 1)
• [L2] agent_config.windsurf_rules: File not found: .windsurfrules
• [L3] agent_config.mcp_json: Only 0/2 alternatives passed (need 1)
• [L3] agent_config.claude_hooks: Found 0 files matching '.claude/hooks/*', need at least 1
• [L4] agent_config.multi_agent_support: Only 0/3 alternatives passed (need 1)
• [L4] agent_config.context_injection: Only 0/3 alternatives passed (need 1)

...and 22 more