chore(deps-dev): bump the dev-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the dev-dependencies group with 4 updates in the / directory: @sentry/cli, eslint-plugin-sonarjs, greptile and typescript-eslint.

Updates @sentry/cli from 3.6.0 to 3.6.1

Release notes

Sourced from @​sentry/cli's releases.

3.6.1

Fixes

• (sourcemaps) Prevent Debug ID collisions between distinct JS files that share identical sourcemaps by hashing both the JS and sourcemap bytes when injecting Debug IDs (#3356)

3.6.1-snapshot.20260717.0718e61

Snapshot build from master at 0718e61.

3.6.1-snapshot.20260717.28f7c1f

Snapshot build from master at 28f7c1f.

3.6.1-snapshot.20260717.ecb5dd0

Snapshot build from master at ecb5dd0.

3.6.1-snapshot.20260717.ec650c1

Snapshot build from master at ec650c1.

3.6.1-snapshot.20260707.1bf4117

Snapshot build from master at 1bf4117.

3.6.1-snapshot.20260707.f19f288

Snapshot build from master at f19f288.

3.6.1-snapshot.20260707.ee8a2dd

Snapshot build from master at ee8a2dd.

3.6.1-snapshot.20260706.14ba8c3

Snapshot build from master at 14ba8c3.

3.6.1-snapshot.20260629.fb79c59

Snapshot build from master at fb79c59.

3.6.1-snapshot.20260626.903b388

Snapshot build from master at 903b388.

3.6.1-snapshot.20260626.33e0b91

Snapshot build from master at 33e0b91.

Changelog

Sourced from @​sentry/cli's changelog.

3.6.1

Fixes

• (sourcemaps) Prevent Debug ID collisions between distinct JS files that share identical sourcemaps by hashing both the JS and sourcemap bytes when injecting Debug IDs (#3356)

Commits

• b2d322a release: 3.6.1
• 308c9ad chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 (#3366)
• 28f7c1f chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#3367)
• 0718e61 chore(deps): bump github/codeql-action from 4.35.4 to 4.36.2 (#3331)
• ec650c1 build(deps): bump swatinem/rust-cache from 2.8.2 to 2.9.1 (#3233)
• ecb5dd0 fix(sourcemaps): Prevent Debug ID collisions (#3356)
• 0f55bf4 ref(organizations): Use control silo endpoint for org listing (#3352)
• 1bf4117 chore(deps): Ran cargo update (#3358)
• f19f288 chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#3332)
• ee8a2dd chore(deps): bump getsentry/github-workflows from 3.3.0 to 3.4.0 (#3333)
• Additional commits viewable in compare view

Updates eslint-plugin-sonarjs from 4.1.0 to 4.2.0

Changelog

Sourced from eslint-plugin-sonarjs's changelog.

Release Guide

SonarJS currently has two distinct release targets:

Target	Artifact	Main workflow	Notes
Standard SonarQube analyzer	Maven/JAR release artifacts	.github/workflows/automated-release.yml	This is the normal SonarJS release flow.
SQAA (previously A3S)	Docker image for LanguageAnalyzerService	.github/workflows/docker-sqaa.yml	Manual SQAA-only entry point and fallback.

Terminology

• SQAA is the current name for what older docs and repository names still call A3S.
• Some external identifiers still keep the legacy a3s name for compatibility. The important ones are:
  • the Docker repository path a3s/analysis/javascript
  • packages/grpc/src/proto/language_analyzer.proto with option java_package = "com.sonarsource.a3s.analyzer.grpc";
• Do not rename those compatibility-sensitive identifiers as part of a routine release.

Standard SonarQube Analyzer Release

This is the regular SonarJS analyzer release. It produces the standard SonarQube analyzer artifacts and can also automate the SQAA handoff using the same build number.

Entry points

1. Start .github/workflows/automated-release.yml.
2. That workflow orchestrates the release and then calls .github/workflows/release.yml for the actual artifact publication.
3. After the release succeeds, .github/workflows/bump-versions.yml opens the next development iteration PR.

What .github/workflows/automated-release.yml does

The SonarJS workflow is a thin wrapper around SonarSource/release-github-actions/.github/workflows/automated-release.yml@v1 with SonarJS-specific inputs:

• project name SonarJS
• plugin name javascript
• Jira project JS
• optional SQC and SQS integration PRs
• optional SQAA integration, enabled in the SonarJS wrapper and implemented by a custom local workflow
• SLVS, SLVSCODE, SLE, and SLI integration tickets enabled
• the generic release-github-actions SQAA integration explicitly disabled, because SonarJS uses analysis/js_ts_image_tag instead of gradle/sonar-plugins.versions.toml

The reusable workflow performs the following steps:

1. Freeze the target branch.
2. Run the releasability checks with SonarSource/gh-action_releasability@v3.
3. Resolve the release version with get-release-version.
4. Resolve the Jira version with get-jira-version.
5. Generate Jira-based release notes with get-jira-release-notes unless explicit notes were provided.
6. Create the REL Jira ticket with create-jira-release-ticket.
7. Publish the GitHub release with publish-github-release.
8. Unfreeze the branch.
9. Release the Jira version, create the next Jira version, and move the REL ticket to Technical Release Done.

... (truncated)

Commits

• See full diff in compare view

Updates greptile from 3.2.0 to 3.2.3

Release notes

Sourced from greptile's releases.

v3.2.3

3.2.3 - 2026-07-17

Fixed

• Repository-aware commands now use the current branch's configured Git remote, or the sole remote, instead of requiring a remote named origin.

v3.2.2

3.2.2 - 2026-07-16

Added

• Manage repositories directly from greptile settings.

Changed

• Settings navigation now replaces outdated cards as you move between sections.
• Reduced redundant status and cancellation messages.

Fixed

• GitHub repository setup now recovers more smoothly from expired authorization and temporary connection issues.

v3.2.1

3.2.1 - 2026-07-15

Added

• greptile fix install, status, and uninstall manage the macOS app used by "Fix in Claude Code" links.
• Fix in Claude Code maps repositories, launches Claude Code in the active terminal, submits full Fix All prompts, and returns the browser to the pull request after handoff.
• Onboarding includes Blimp and SF Buses as referral source choices.

Changed

• The macOS support now ships inside the main CLI bundle. Setup is explicit and no longer requires the archived package or Python.

Commits

• See full diff in compare view

Updates typescript-eslint from 8.64.0 to 8.65.0

Release notes

Sourced from typescript-eslint's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)

❤️ Thank You

• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• 0d06406 chore: add attw validation to repo (#12437)
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• See full diff in compare view

[greptile-apps]

PR author is in the excluded authors list.

[codspeed-hq]

Merging this PR will degrade performance by 0.18%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 6 improved benchmarks
❌ 4 regressed benchmarks
✅ 1 untouched benchmark

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
❌	createQueryFingerprint	517.4 µs	527.5 µs	-1.91%
❌	encodeQueryCursor	101 µs	101.1 µs	-0.05%
❌	build index (200 docs x 40 words)	8.4 ms	8.4 ms	-0.01%
❌	score query over 2000 docs	5.6 ms	5.6 ms	0%
⚡	stableStringify (nested contract)	161.5 µs	161.3 µs	+0.1%
⚡	build index (2000 docs x 80 words)	161.4 ms	161.4 ms	+0.05%
⚡	decodeQueryCursor	114.3 µs	114.3 µs	+0.03%
⚡	jaccardSimilarity	153.3 µs	153.3 µs	+0.02%
⚡	tokenize + score query over 2000 docs	7.5 ms	7.5 ms	+0.01%
⚡	tokenizeAlphaNumeric	367.3 µs	367.3 µs	+0.01%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dependabot/npm_and_yarn/dev-dependencies-5d8fc81106 (7d39c7d) with main (a82427a)}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[unbraind]

Tracked in pm-pegcmx, the existing dependency-update review queue.

[unbraind]

Canonical dependency-update tracking: pm-pegcmx. (The earlier link used the wrong item-type directory; this corrected link resolves to the live tracker item.)

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.