[dependabot]

Bumps the tooling-updates group with 4 updates: eslint-plugin-jsdoc, jsdom, marked and rollup.

Updates eslint-plugin-jsdoc from 65.0.2 to 65.2.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v65.2.0

65.2.0 (2026-10-07)

Features

• check-alignment: add ignoreEmptyLines option; fixes #1789 (2095a3d)

v65.1.0

65.1.0 (2026-10-04)

Bug Fixes

• check-indentation: avoid resetting section indent with inline tags; fixes #1786 (c8bcbb7)

Features

• check-syntax: add enableFixer option to replace Closure-style optional types (5f15574)
• check-syntax: fix optional types on all tags and over several lines, address review (b5db366)

Commits

• 2095a3d feat(check-alignment): add ignoreEmptyLines option; fixes #1789
• c8bcbb7 fix(check-indentation): avoid resetting section indent with inline tags; fi...
• b5db366 feat(check-syntax): fix optional types on all tags and over several lines, ...
• 5f15574 feat(check-syntax): add enableFixer option to replace Closure-style optio...
• 05e2ffe docs: fix wrong rule name and typos (#1787)
• See full diff in compare view

Updates jsdom from 30.1.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

• Updated URLs to support Unicode v18.0.0 in internationalized domain names.
• Reduced package size and memory use for CSS property definitions. (@​scttcper)
• Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
• Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
• Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
• Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
• Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)
• Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
• Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
• Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)
• Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
• Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
• Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)

Commits

• a23bfb7 30.1.2
• 64a75d2 Update dependencies and dev dependencies
• 7bf9653 Invalidate styles after CSSOM and control state changes
• fe9009c Update focused area handling
• a8d28b3 Release windows retained by stylesheet parsing
• 05a2c01 Deduplicate generated CSS property metadata
• 1efa190 Reduce generated CSS property data
• a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
• b2cd235 Update css-color
• 0542d2b Release idle MutationObserver bookkeeping
• Additional commits viewable in compare view

Updates marked from 18.0.14 to 18.1.0

Release notes

Sourced from marked's releases.

v18.1.0

18.1.0 (2026-10-05)

Bug Fixes

• avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)
• load CLI configs with top-level await (#4100) (c61543e)
• reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

• add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)

Commits

• e809386 chore(release): 18.1.0 [skip ci]
• 3363c99 fix: reject unbalanced parentheses in link destinations (#4107)
• 0d20220 fix: avoid cubic backtracking on unicode whitespace in a link destination (#4...
• c18a64f chore(deps): bump undici (#4122)
• 4ee44f7 feat: add linkParenPossible to lexer state to fail fast for link token genera...
• c61543e fix: load CLI configs with top-level await (#4100)
• See full diff in compare view

Updates rollup from 4.64.0 to 4.64.1

Release notes

Sourced from rollup's releases.

v4.64.1

4.64.1

2026-10-07

Bug Fixes

• Slightly improve performance when rendering ES output (#6534)

Pull Requests

• #6534: Avoid repeated export name scans when rendering ES chunks (@​irontaek, @​lukastaegert)
• #6552: chore(ci): remove redundant rust-src setup (@​TrickyPi, @​lukastaegert)
• #6555: Lock file maintenance (@​renovate[bot], @​lukastaegert)

Changelog

Sourced from rollup's changelog.

4.64.1

2026-10-07

Bug Fixes

• Slightly improve performance when rendering ES output (#6534)

Pull Requests

• #6534: Avoid repeated export name scans when rendering ES chunks (@​irontaek, @​lukastaegert)
• #6552: chore(ci): remove redundant rust-src setup (@​TrickyPi, @​lukastaegert)
• #6555: Lock file maintenance (@​renovate[bot], @​lukastaegert)

Commits

• 2e1a753 4.64.1
• f48508c Avoid repeated export name scans when rendering ES chunks (#6534)
• 68da212 Resolve audit
• 1cc31f7 Lock file maintenance (#6555)
• cf5bd17 chore(ci): remove redundant rust-src setup (#6552)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Updates the tooling-updates dependency group with four dev dependency bumps. The notable changes are in jsdom and marked: jsdom fixes several performance regressions in DOM tree building, computed style invalidation, and focus handling, and marked fixes backtracking and rejects malformed link destinations.

^{Written for commit 2f6bdd7. Summary will update on new commits.}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: fe13d536-4288-4527-8c04-a018a5aff696

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml