[dependabot]

Bumps the minor-patch group with 22 updates in the / directory:

Package	From	To
@opentelemetry/api	1.9.1	1.10.0
@playwright/test	1.64.0	1.65.0
@typescript-eslint/eslint-plugin	8.71.1	8.72.1
@typescript-eslint/parser	8.71.1	8.72.1
@vitest/coverage-v8	5.0.3	5.1.0
cspell	10.3.6	10.4.0
eslint	10.12.0	10.14.0
eslint-plugin-n	18.4.1	18.5.0
markdown-it	15.0.2	15.0.3
markdownlint-cli2	0.23.3	0.24.0
vitest	5.0.3	5.1.0
@modelcontextprotocol/sdk	1.32.1	1.32.2
react	19.3.0	19.3.1
@types/node	26.6.5	26.6.6
@github/copilot-sdk	1.0.19	1.0.28
typedoc-plugin-markdown	4.13.1	4.14.1
@opentelemetry/exporter-metrics-otlp-grpc	0.223.0	0.301.0
@opentelemetry/exporter-trace-otlp-grpc	0.223.0	0.301.0
@opentelemetry/sdk-node	0.223.0	0.301.0
@opentelemetry/semantic-conventions	1.43.0	1.44.0
sql.js	1.14.2	1.15.2
ws	8.22.0	8.22.1

Updates @opentelemetry/api from 1.9.1 to 1.10.0

Release notes

Sourced from @​opentelemetry/api's releases.

api/v1.10.0

1.10.0

🚀 Features

• feat(api): integrate the Logs API into @opentelemetry/api #4862 @​hectorhdzg
• feat(api): add imperative context.attach() for setting context across callback boundaries that with() cannot wrap. #6845 @​pichlermarc
  • attach() returns a Token whose dispose() method restores the previous context. Use token.dispose() to detach.
  • attach is an optional method on the ContextManager interface; when the active context manager does not implement it, context.attach() logs a warning and returns a no-op token.
• feat(api): add AnyValue type (of type unknown) and extend Attributes type values to use AnyValue #6780 @​trentm
  • This is part of supporting OTEP 4485.
  • This is a breaking change for SDK implementations, in that they may need to support more attribute types for any APIs that accept Attributes or AnyValue. Implementors should refer to the OTEP 4485 link above for "MUST / SHOULD" requirements for complex attributes handling. See also the attributes-handling utilities provided by @opentelemetry/core to help. For example, cleanSimpleAttributes() can be used to limit user-provided attributes to the set of value types supported in earlier @opentelemetry/api versions.
  • This change is typically not a breaking change for users of @opentelemetry/api. There is one possible breaking case: If a TypeScript user was using the Attributes type in their own code and using TypeScript Narrowing to reduce an attribute value to an expected type (example here). It is expected that this usage should be rare and, likely, limited to SDK implementations, if at all. (If this impacted your code, please let us know.)
  • Note for users of attributes: Simple attributes SHOULD be used whenever possible. Instrumentations SHOULD assume that backends do not index individual properties of complex attributes, that querying or aggregating on such properties is inefficient and complicated, and that reporting complex attributes carries higher performance overhead.

🐛 Bug Fixes

• fix(api): cap tracestate list-members and total length in the deprecated TraceState.set() so it stays in step with TraceState from @opentelemetry/core #6964 @​Zuhef
• fix: resolve the ESM build through the default export condition instead of import, so a resolver that activates neither import nor require still finds an entry point #7132 @​overbalance

📚 Documentation

• docs(api): complete @since annotations for the public API #7023 @​nabeelamjadsheikh
  • Adds the three missing exported-type annotations and the member-level annotations for methods and properties introduced after their enclosing type.
  • Corrects Attributes, AttributeValue and TracerOptions from 1.3.0 to 1.1.0; all three were already importable in 1.1.0 via wildcard re-export.

🏠 Internal

• build: migrate the package build from tsc to tsdown, emitting dual CJS/ESM output from a single dist/ directory #6293 @​overbalance
  • The public entry points are unchanged: @opentelemetry/api and @opentelemetry/api/experimental. This package already declared an exports map, so deep imports such as @opentelemetry/api/build/src/... were rejected before this change and continue to be.
  • The emitted files moved out of build/src (CJS), build/esm and build/esnext (ESM) into dist/, using .cjs/.mjs extensions with matching .d.cts/.d.mts declarations. The non-standard esnext condition has been dropped in favour of the standard import/require conditions.
• perf(api): add getGlobal fast-path #6956 @​legendecas
• chore: remove the redundant module field from package.json; bundlers resolve the ESM build through the exports map #7130 @​overbalance

Changelog

Sourced from @​opentelemetry/api's changelog.

1.10.0

🚀 (Enhancement)

• feat(resource): create sync resource with some attributes that resolve asynchronously #3460 @​samimusallam
• feat: collect host id for non-cloud environments #3575 @​mwear
• feat (api-logs): separate Events API into its own package 3550 @​martinkuba
• feat(sdk-metrics): apply binary search in histogram recording #3539 @​legendecas
• perf(propagator-jaeger): improve deserializeSpanContext performance #3541 @​doochik
• feat: support TraceState in SamplingResult #3530 @​raphael-theriault-swi
• feat(sdk-trace-base): add diagnostic logging when spans are dropped #3610 @​neoeinstein
• feat: add unit to view instrument selection criteria #3647 @​jlabatut
• feat(tracing): expose dropped counts for attributes, events and links on span #3576 @​mohitk05

🐛 (Bug Fix)

• fix(core): added falsy check to make otel core work with browser where webpack config had process as false or null #3613 @​ravindra-dyte
• fix(instrumentation-http): include query params in http.target #3646 @​kobi-co

📚 (Refine Doc)

• chore: update http example #3651 @​JamieDanielson

🏠 (Internal)

• chore(exporter-jaeger): deprecate jaeger exporter #3585 @​pichlermarc
• fix(sdk-metrics): fix flaky LastValueAggregator test by using fake timer #3587 @​pichlermarc
• fix(test): fix failing tests by preventing source-map generation #3642 @​pichlermarc

Commits

• 56e6b1b chore: Release API 1.4.1, SDK 1.10.0, Experimental 0.36.0 (#3654)
• ecb5ebe fix: Minor typing issues for web sandbox (#3660)
• 48ecf22 feat(sdk-trace-base): add dropped attributes and events count on span (#3576)
• 95bf6fc fix(build): add example/http to ignore list in update-ts-configs (#3657)
• 3a2ca58 feat: add unit to view instrument selection criteria (#3647)
• ebc8575 chore(jeager-exporter): deprecate jaeger exporter (#3585)
• 2f715bd feat: allow to add attributes from grpc metadata in the patched server (#3589)
• cbbdfd3 fix(sdk-node): update instrumentations once MeterProvider is initialized (#3624)
• 4a4484a chore: update http example (#3651)
• 494efff fix(otlp-exporter-base): fix changelog for merged retry pr (#3650)
• Additional commits viewable in compare view

Updates @playwright/test from 1.64.0 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

• There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
• Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
• Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
• Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

• New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

  test('restart the server', { lock: '-exclusive-' }, async () => {
    // No other test runs while this one is running.
  });

• test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

  test('upload a file', async ({ page }) => {
    test.skip('Not implemented yet');
  });

... (truncated)

Commits

• a1f35e1 chore: mark v1.65.0 (#43925)
• a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
• 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
• daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
• 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
• 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
• 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
• d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
• 6e3f5ff docs: release notes for v1.65 (#43874)
• aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
• Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.71.1 to 8.72.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• eslint-plugin: lazy load rules (#13010)

🩹 Fixes

• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

... (truncated)

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• 1166ba2 chore(type-utils): detect methods in isTypeReadonly without reading the inter...
• 2f0343a fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...
• c49d287 chore: [ci] test on oldest supported TS version (#13024)
• 594fe28 fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...
• a4c2603 chore(release): publish 8.72.0
• c6eb98c feat(eslint-plugin): [await-thenable] add allowMixedPromiseArrays option (#...
• b382b74 fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...
• 79edd89 fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...
• Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.71.1 to 8.72.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

8.72.0 (2026-10-19)

🚀 Features

• eslint-plugin: lazy load rules (#13010)
• eslint-plugin: [await-thenable] add allowMixedPromiseArrays option (#12992)
• typescript-estree: error on abstract keyword that precedes export (#13019)

🩹 Fixes

• ast-spec: add JSXFragment to JSXAttribute['value'] (#13051)
• eslint-plugin: [prefer-readonly-parameter-types] check where allowed type aliases are declared (#13016)
• eslint-plugin: [no-deprecated] report deprecated properties in object literals (#12704)
• eslint-plugin: use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (#13053)
• eslint-plugin: [require-array-sort-compare] check tuples (#13058)
• eslint-plugin: [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (#13055)
• type-utils: discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (#13054)
• typescript-estree: include leading and trailing comments & whitespace in Program range (#12991)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Junichiro Kasuya @​jksy
• Mitch Fultz @​fitchmultz
• Shaan GS @​ShaanGS

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.2

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.72.1 (2026-10-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.72.0 (2026-10-19)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.2 (2026-10-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• a4c2603 chore(release): publish 8.72.0
• 7488d68 chore(release): publish 8.71.2
• See full diff in compare view

Updates @vitest/coverage-v8 from 5.0.3 to 5.1.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.1.0

   🚀 Features

• Add --last-failed to run only failed tests  -  by @​sheremet-va in vitest-dev/vitest#11558 (82f63)
• Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime()  -  by @​Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M context), @​hi-ogawa and Codex (GPT-6) in vitest-dev/vitest#11321 (f150f)
• Introduce --since-last-run flag  -  by @​sheremet-va in vitest-dev/vitest#11516 (08bd9)
• Expose per-retry/repeat attempt result  -  by @​hi-ogawa, Codex (GPT-6) and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11232 (21be4)
• Support fake timers for node:timers and node:timers/promise  -  by @​hi-ogawa, OpenCode and Codex (GPT-6) in vitest-dev/vitest#10899 (fbe97)
• Allow coverage providers to store data in fs module cache  -  by @​AriPerkkio in vitest-dev/vitest#11747 (54a2b)
• Interactively review failed snapshots  -  by @​macarie and @​hi-ogawa in vitest-dev/vitest#11325 (54e5b)
• browser:
  • Mock modules through an import map  -  by @​sheremet-va in vitest-dev/vitest#11534 (707f8)
  • Drop experimental label from trace view  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11518 (44c3c)
  • Introduce experimental pointer API  -  by @​macarie in vitest-dev/vitest#10780 (5dc09)
  • Capture aria snapshot in trace view  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11492 (0cc39)
  • Show trace steps timeline on terminal on test failure  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11594 (973dc)
  • Add failure-only trace view mode  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11612 (d5d7d)
  • Enable failure-only trace view by default  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11766 (f37b6)
• coverage:
  • V8 to support ignoreNode option  -  by @​erickserra and @​AriPerkkio in vitest-dev/vitest#11688 (e02db)
• experimental:
  • Add trace timeline for node  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11753 (4e985)
  • Add message option to vi.waitFor and vi.waitUntil  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11754 (fd145)

   🐞 Bug Fixes

• Rerun setup files after --changed filtering  -  by @​sheremet-va in vitest-dev/vitest#11621 (3a39c)
• Return the mock to concurrent imports  -  by @​sheremet-va in vitest-dev/vitest#11623 (1453b)
• Don&#39;t fail on console log pending at teardown  -  by @​sheremet-va in vitest-dev/vitest#11619 (a60b8)
• Reference chai types in every d.ts chunk  -  by @​sheremet-va in vitest-dev/vitest#11618 (fb150)
• Detect mock factory cycles that form later  -  by @​sheremet-va in vitest-dev/vitest#11642 (e9554)
• Skip fs module cache for typed import.meta.glob  -  by @​sheremet-va in vitest-dev/vitest#11666 (79501)
• Run tests that import a deleted file  -  by @​sheremet-va in vitest-dev/vitest#11669 (80aa1)
• Keep syntax highlighting in code frames  -  by @​sheremet-va in vitest-dev/vitest#11705 (d39f5)
• Respect CLI filters when prewarming browsers  -  by @​sheremet-va and Benjamin Tang in vitest-dev/vitest#11706 (10947)
• Read cached source as utf-8  -  by @​juan-fernandez in vitest-dev/vitest#11682 and vitest-dev/vitest#11709 (867a5)
• Inherit watch from the root config in projects  -  by @​nstepien and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11724 (77c12)
• Prefix expect.poll message to all errors  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11756 (cab58)
• Support api.port 0  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11641 (3667c)
• Show attempts in test error logs of retried tests  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11696 (77a94)
• Preserve rootDir in project paths  -  by @​btea in vitest-dev/vitest#11816 (bf96d)
• browser:
  • Change default port to 23315  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11640 (a2ec4)
  • Advance fake timers in actions and expect.element  -  by @​julienw, @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11242 (68190)
  • Drop trace view warning without html reporter  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11665 (e6407)
  • Detect shared chunks via the optimizer  -  by @​sheremet-va in vitest-dev/vitest#11661 (e2e9c)
  • Clear screenshot stability timeout  -  by @​sheremet-va in vitest-dev/vitest#11659 (fbe37)
  • Measure prepare duration with one clock  -  by @​sheremet-va in vitest-dev/vitest#11667 (a3ed4)
  • Keep failure screenshot per attempt  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11694 (a5022)
  • Print trace timeline of each attempt  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11695 (27229)

... (truncated)

Commits

• 7a38449 chore: release v5.1.0 (#11838)
• 5901fb4 fix(coverage): v8 to ignore Vite's generated CJS namespace import helper (#11...
• e02db08 feat(coverage): v8 to support ignoreNode option (#11688)
• e1b0d33 chore: release v5.1.0-beta.1 (#11647)
• de5af29 fix(coverage): v8 autoAttachSubprocess to use .tmp directory (#11632)
• 7a825db chore: release v5.0.5 (#11609)
• 6a11cf6 chore: release v5.0.4 (#11554)
• 2297d93 fix(coverage): v8 browser memory leak between test files (#11466)
• c74e099 fix(deps): update all non-major dependencies (#11167)
• See full diff in compare view

Updates cspell from 10.3.6 to 10.4.0

Release notes

Sourced from cspell's releases.

v10.4.0

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"

• --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
• CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
• API: globSymlinks in the lint options.
• It can't be set in a configuration file.
• Files are reported by the path through the link. A file reached by two paths is checked under both.
• It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.

• The design decisions are recorded in docs/ADRs/glob-symlinks/.
• Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

---

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you choose a narrower width, which helps with large fonts and screen magnifiers. The help in the cspell README now fits on npmjs.com without scrolling sideways.

Feature

Set COLUMNS to pick the output width:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.4.0 (2026-10-14)

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"

• --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
• CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
• API: globSymlinks in the lint options.
• It can't be set in a configuration file.
• Files are reported by the path through the link. A file reached by two paths is checked under both.
• It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.

• The design decisions are recorded in docs/ADRs/glob-symlinks/.
• Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

---

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you...

Description has been truncated

[Copilot]

🟡 Changes recommended

Active moderate and critical findings remain around incompatible OpenTelemetry dependency and Node-version constraints and the removed vscode-jsonrpc upper bound, leaving regressions possible for tests and consumers.

4 open issues

• Restore the Copilot SDK upper bound to avoid the ESM regression · New
• Align root OTel test packages with the API version · New
• Align optional OTel dependencies to a compatible generation · New
• Align the OTel dependency with the supported Node minimum · New

What changed in this PR

This pull request refreshes dependencies across the root workspace, SDK, and CLI, including OpenTelemetry, Copilot SDK, MCP, React, testing, linting, and documentation tooling.

Changes:

• Updates SDK runtime, optional telemetry, storage, WebSocket, and documentation dependencies.
• Updates CLI MCP, React, and Node.js type dependencies.
• Refreshes root testing, linting, Playwright, Markdown, spelling, and OpenTelemetry dependencies.

This pull request requires changes.

File	Summary
packages/​squad-sdk/​package.json	Updates SDK and telemetry dependencies. Findings include a critical removal of the Copilot SDK upper bound, plus moderate OpenTelemetry peer mismatches and Node.js engine incompatibilities.
packages/​squad-cli/​package.json	Updates MCP SDK, React, and Node.js type dependencies.
package.json	Updates root development and testing dependencies. A moderate finding identifies an incompatible OpenTelemetry API and test-package combination.

_{Review effort: Lite (auto)}

[bradygaster]

Dependency triage: do not merge this head. It removes the intentional JavaScript @github/copilot-sdk <1.0.29-0 cap introduced in #2416, and root npm ci fails ERESOLVE because API 1.10 conflicts with the retained OTel 2.12 peers requiring <1.10. The optional OTel 0.301 generation also raises the Node floor beyond the SDK advertised >=22.5.0. I attempted a bounded repair retaining the original SDK cap and compatible OTel generation in an isolated worktree, but clean-install validation is blocked by the configured package feed returning HTTP 404 for vite-8.3.6.tgz (the public registry is not reachable here). No unvalidated repair was pushed, no force/legacy-peer-deps bypass was used, and the active review findings remain open. Other independent safe dependency PRs are being processed separately.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.