Update all npm dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@typescript-eslint/eslint-plugin (source)	8.46.4 -> 8.48.0
@typescript-eslint/parser (source)	8.46.4 -> 8.48.0
mediabunny (source)	1.24.6 -> 1.25.3
playcanvas (source)	2.13.0 -> 2.13.6
rollup (source)	4.53.2 -> 4.53.3
typedoc (source)	0.28.14 -> 0.28.15

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.48.0

Compare Source

🚀 Features

• eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#​10744)

🩹 Fixes

• typescript-estree: disallow binding patterns in parameter properties (#​11760)
• eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#​10477)

❤️ Thank You

• Dima Barabash @​dbarabashh
• JamesHenry @​JamesHenry
• Josh Goldberg
• mdm317 @​gen-ip-1

You can read about our versioning strategy and releases on our website.

v8.47.0

Compare Source

🚀 Features

• eslint-plugin: [no-unused-private-class-members] new extension rule (#​10913)

❤️ Thank You

• Brad Zacher @​bradzacher

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.48.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.47.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Vanilagy/mediabunny (mediabunny)

v1.25.3

Compare Source

• UrlSource: Now deals gracefully with servers that cap unbounded range requests (#​231)
• Narrowed types related to ArrayBuffer views due to TypeScript 5.9

v1.25.2

Compare Source

• UrlSource now stops retrying failed requests when the Input is disposed
• Stronger video encodability checks for Firefox to avoid false positives (#​222)

v1.25.1

Compare Source

• Fixed /* #__PURE__ */ annotation warnings when bundling with Rollup (#​225)

v1.25.0

Compare Source

• Added read/write support for track disposition metadata, which carries information about the intended usage of the track. You can now check which tracks are marked as default, are meant for hearing-impaired users, and other things.
• Disabled ISOBMFF tracks will now be surfaced in input.getTracks() (#​214), just with disposition.default set to false.

v1.24.7

Compare Source

• Fixed VideoSamples not being closed when doing a conversion with frame rate change and resizing
• Removed incorrect reordering of Matroska blocks, fixed WebM distortions (#​178)
• Improved tree shaking for some bundlers (#​172)
• Fixed interlaced AVC crashing the decoder on Chromium
• Fixed playback for invalid Matroska files with no audio key frames (#​192)
• Fixed incorrect timestamp rounding logic (#​207)

playcanvas/engine (playcanvas)

v2.13.6

Compare Source

Fixes

• Fix UploadStream functionality to handle lost context by @​mvaligursky in #​8160
• Add GSplat to ComponentSystemRegistry by @​mvaligursky in #​8174
• Add loadingCount parameter to GSplat frame:ready event by @​mvaligursky in #​8178

Full Changelog: playcanvas/engine@v2.13.5...v2.13.6

v2.13.5

Compare Source

Fixes

• Gizmo mouse button option by @​kpal81xd in #​8153

Full Changelog: playcanvas/engine@v2.13.4...v2.13.5

v2.13.4

Compare Source

Fixes

• Camera controls fly shift fix kb @​kpal81xd in #​8152
• Gizmo snap state fix by @​kpal81xd in #​8151

Full Changelog: playcanvas/engine@v2.13.3...v2.13.4

v2.13.3

Compare Source

Fixes

• Optimize BoundingBox.containsPoint performance by @​mvaligursky in #​8137
• Fix GSplat LOD calculation to use nearest point on bounding box by @​mvaligursky in #​8138
• Fix PBO texture uploads by ensuring correct texture binding state by @​mvaligursky in #​8146
• Fix unified GSplat rendering when viewport is resized by @​mvaligursky in #​8147

Full Changelog: playcanvas/engine@v2.13.2...v2.13.3

v2.13.2

Compare Source

Fixes

• Fix unified gsplat double transformation bug by @​mvaligursky in #​8135

Full Changelog: playcanvas/engine@v2.13.1...v2.13.2

v2.13.1

Compare Source

Fixes

• Fixed gsplat shader effect to correctly handle “limit to a camera” by @​mvaligursky in #​8117.
• Workaround for packHalf2x16 precision issues on some Android devices by @​mvaligursky in #​8121.
• CameraControls enablePan logic fixes (desktop pan + double touch) by @​kpal81xd in #​8126.
• Added frame:ready event to GSplatComponentSystem for video-capture workflows by @​mvaligursky in #​8128.
• Updated main JSDoc block for GSplatComponent by @​mvaligursky in #​8130.
• Refactor gsplat shader chunks: move helpers/customize to common by @​mvaligursky in #​8129.

Full Changelog: playcanvas/engine@v2.13.0...v2.13.1

rollup/rollup (rollup)

v4.53.3

Compare Source

2025-11-19

Bug Fixes

• Fix an error where too many modules where flagged for having an unused external import (#​6182)
• Fix an error where an assignment was wrongly tree-shaken when mutating it (#​6183)

Pull Requests

• #​6171: Add test-install CI job to test packaging, installation and importing of rollup package (@​antoninkriz, @​lukastaegert)
• #​6174: Re-enable TypeScript test (@​lukastaegert)
• #​6180: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6182: Tracing the importers chain for exported variables in external module (@​TrickyPi, @​lukastaegert)
• #​6183: Check if left side is included when checking if assigning to an assignment has side effects (@​lukastaegert)

TypeStrong/TypeDoc (typedoc)

v0.28.15

Compare Source

Features

• The gitRevision option now accepts the special value {branch}, which indicates source links should use
  the current git branch for links, #​3041.
• Introduced validation.invalidPath for suppressing warnings caused by referencing relative paths which
  do not exist when building the documentation, #​3033.
• API: Introduced Logger.validationWarning for validation which occurs during conversion rather than
  during TypeDoc's normal validation step, #​3033.

---

Configuration

📅 Schedule: Branch creation - "on monday at 10:00am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.