[dependabot]

Bumps the npm-minor group with 5 updates in the / directory:

Package	From	To
follow-redirects	1.16.1	1.16.2
node-forge	1.4.1	1.4.2
@types/sinon	22.0.1	22.0.2
eslint-plugin-jsdoc	65.4.0	65.4.2
typescript-eslint	8.72.0	8.72.1

Updates follow-redirects from 1.16.1 to 1.16.2

Commits

• e3b45a7 Release version 1.16.2 of the npm package.
• b0a7751 Use Array.isArray.
• d96d1fe Add funding emergency notice.
• See full diff in compare view

Updates node-forge from 1.4.1 to 1.4.2

Changelog

Sourced from node-forge's changelog.

1.4.2 - 2026-10-27

Fixed

• [pem] Convert non-string input to a string in pem.decode() as before 1.4.1. The 1.4.1 PEM ReDoS fix (GHSA-7wch-p9px-956x) caused a TypeError for Buffer input, which is used by node-jose. (#1165)

Commits

• 7928054 Release 1.4.2.
• 1d8c245 Update changelog.
• ce5b576 Convert non-string input in pem.decode().
• c1d64ef Fix changelog typo.
• 453d196 Start 1.4.2-0.
• See full diff in compare view

Updates @types/sinon from 22.0.1 to 22.0.2

Commits

• See full diff in compare view

Updates eslint-plugin-jsdoc from 65.4.0 to 65.4.2

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v65.4.2

65.4.2 (2026-10-23)

Bug Fixes

• ts-method-signature-style: do not turn optional or readonly function properties into method signatures (94952b2)
• ts-method-signature-style: keep ? when converting between function properties and method signatures (a4040aa)

v65.4.1

65.4.1 (2026-10-22)

Bug Fixes

• ts-prefer-function-type: do not throw on call signatures inside object fields, parameters or return types, and keep the type when fixing (8830b2e)

Commits

• a4040aa fix(ts-method-signature-style): keep ? when converting between function p...
• 94952b2 fix(ts-method-signature-style): do not turn optional or readonly function p...
• e4a69dd refactor: share rule defaults between code and meta.defaultOptions
• 45c789c chore: lint rule files with eslint-plugin-eslint-plugin
• 44a3c45 chore: update jsdoccomment, devDep
• 8830b2e fix(ts-prefer-function-type): do not throw on call signatures inside object...
• 0a1b435 docs: move nojekyll file to /docs
• a218be3 docs: avoid jekyll processing
• 1b32353 docs: fix issues with GH Pages
• See full diff in compare view

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
eslint-plugin-jsdoc	[>= 63.a, < 64]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

🟡 Changes recommended

The update introduces eslint-plugin-jsdoc@65.4.2, which requires newer Node versions than the repository’s Node 20 lint CI lane and may break installation or runtime there.

1 open issue

• Keep the jsdoc dependency compatible with the Node 20 CI job · New

What changed in this PR

This pull request updates five npm dependencies and synchronizes their lockfile resolutions and transitive metadata.

Changes:

• Bumps follow-redirects and node-forge.
• Bumps @types/sinon, eslint-plugin-jsdoc, and typescript-eslint.
• Refreshes resolved versions, integrity hashes, and dependency metadata.
• The updated eslint-plugin-jsdoc requires newer Node versions than the repository’s Node 20 lint CI lane, requiring resolution.

File	Description
package.json	Updates the five direct dependency version ranges.
package-lock.json	Records the updated packages, transitive dependencies, integrity data, and engine metadata.

This pull request requires changes.

_{Review effort: Lite (auto)}

[github-actions]

Pushed a commit to rebuild the Action. Please approve running the PR checks.