chore(deps-dev): bump eslint-plugin-simple-import-sort from 12.1.1 to 13.0.0

[dependabot]

Bumps eslint-plugin-simple-import-sort from 12.1.1 to 13.0.0.

Changelog

Sourced from eslint-plugin-simple-import-sort's changelog.

Version 13.0.0 (2026-04-06)

This release puts imports from the same source, but with different import styles, in a deterministic order.

// First namespace imports:
import * as Circle from "circle;
// Then default imports:
import createCircle from "circle";
// Then named imports:
import { radius } from "circle";

That is especially useful if you need to have both a namespace import and want to import a few things separately (since that cannot be combined into a single import statement). With the above rule, the imports end up in a deterministic order.

It’s only a breaking change if you import from the same source multiple times in the same file (using different styles), and only in the form that you need to autofix your files.

Thanks to Kannan Goundan (@​cakoose)!

Commits

• 90078e7 eslint-plugin-simple-import-sort v13.0.0
• 7794d14 Determinstic ordering between different import styles (#203)
• 5ce648a Fix deprecation warning when running tests
• 27c4d1a Fix code coverage
• d994f47 Bump picomatch (#208)
• b8f246d Bump flatted from 3.2.9 to 3.4.2 (#207)
• 1c2d0e3 Bump rollup from 4.50.1 to 4.59.0 (#206)
• 23dd72f Bump lodash from 4.17.21 to 4.17.23 (#204)
• 0f8dc7a Bump js-yaml from 4.1.0 to 4.1.1 (#202)
• 4584b9e Bump vite from 7.1.5 to 7.1.11 (#201)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Security Scan Results

Scan completed at 2026-06-15T07:54:49.288Z

Dependencies

• 5 High severity issues

Docker Image

• 18 High severity issues

Configuration

No critical issues found

Secrets

No critical issues found

Action Required

• Review the security scan results in the Security tab
• Fix critical vulnerabilities before merging
• Remove any exposed secrets immediately

[jfilter]

Superseded: simple-import-sort — applied in 6f1ac5b, went further to 14.0.0. Re-derived directly on current main in a local dependency sweep and verified with full lint, typecheck and the 4709-test suite, rather than merging the branch (which was based on an older main).

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.