chore(deps): update all npm dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/react (source)	19.2.9 → 19.2.10
@typescript-eslint/eslint-plugin (source)	8.53.1 → 8.54.0
@typescript-eslint/parser (source)	8.53.1 → 8.54.0
globals	17.0.0 → 17.2.0
playcanvas (source)	2.15.1 → 2.15.2
react (source)	19.2.3 → 19.2.4
react-dom (source)	19.2.3 → 19.2.4
rollup (source)	4.55.3 → 4.57.0

---

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.54.0

Compare Source

🚀 Features

• eslint-plugin-internal: add prefer-tsutils-methods rule (#​11974, #​11625)
• typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#​11965, #​11955)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#​11967, #​11559)
• deps: update dependency prettier to v3.8.0 (#​11991)
• scope-manager: fix catch clause scopes def.name (#​11982)
• eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#​11785)

❤️ Thank You

• Brad Zacher @​bradzacher
• Josh Goldberg
• MinJae @​Ju-MINJAE
• Minyeong Kim @​minyeong981
• overlookmotel
• Yuya Yoshioka @​YuyaYoshioka
• 김현수 @​Kimsoo0119

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.54.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

sindresorhus/globals (globals)

v17.2.0

Compare Source

• jasmine: Add throwUnless and throwUnlessAsync globals (#​335) 97f23a7

---

v17.1.0

Compare Source

• Add webpack and rspack globals (#​333) 65cae73

---

playcanvas/engine (playcanvas)

v2.15.2

Compare Source

Fixes

• Fix XrInputSource crash when grip unavailable by @​willeastcott in #​8389
• Fix controller models in XR movement example by @​willeastcott in #​8390
• Fix XrInputSource JSDoc errors and redundant code by @​willeastcott in #​8391
• Fix duplicate XrViews instance and clean up handler in XrManager by @​willeastcott in #​8392
• Fix WebXR stereo frustum culling by @​willeastcott in #​8393
• Add XrMenu script and example for WebXR hand/controller menus by @​willeastcott in #​8407
• Fix account for camera local offset in XrNavigation teleport by @​willeastcott in #​8409
• Improve XrControllers script robustness and documentation by @​willeastcott in #​8410
• Correct vertex format mismatch when decoding Draco meshes by @​willeastcott in #​8394

Full Changelog: playcanvas/engine@v2.15.1...v2.15.2

facebook/react (react)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (@​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

rollup/rollup (rollup)

v4.57.0

Compare Source

2026-01-27

Features

• Add import attributes to all plugin hooks that did not provide them yet (#​5700)
• Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#​5700)

Pull Requests

• #​5700: extend more hooks to include import attributes and add warnings (@​TrickyPi, @​lukastaegert)
• #​6243: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6244: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6245: chore(deps): lock file maintenance (@​renovate[bot])
• #​6246: Refactor to reduce Rollup 5 upgrade diff (@​lukastaegert)

v4.56.0

Compare Source

2026-01-22

Features

• Track object property inclusions of dynamic namespace members (#​6230)

Bug Fixes

• Handle methods that access dynamically imported namespace members via this (#​6230)

Pull Requests

• #​6230: Refine namespace handling (@​lukastaegert)

---

Configuration

📅 Schedule: Branch creation - "on monday at 10:00am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.