chore(js-client): bump npm dependencies

[claude]

Requested by Łukasz Komoszyński · Slack thread

Dependency-maintenance pass on the js-client/ package (the Nx + Lerna workspace that publishes @leancodepl/pipe).

Before: eslint 8 legacy .eslintrc, Node 20, Nx 19 + jest 29, @leancodepl/* on 7.x, @microsoft/signalr 8.

After: shared flat-config ESLint 9 (matching js_corelibrary), Node 24, Nx 23 + jest 30, @leancodepl/* on 10.5.2, @microsoft/signalr 10. Lint and build are green on Node 24; the only failing test is an egress-blocked live integration test (details below).

Only the js-client/ package is touched.

What changed

Nx 19.5.2 → 23.0.1 + jest 29 → 30

• Ran the Nx migration; nx, @nx/eslint, @nx/eslint-plugin, @nx/jest, @nx/js, @nx/rollup, @nx/workspace all 19.5.2 → 23.0.1.
• Peer fixes Nx 23 requires: @swc/cli 0.3.14 → 0.8.1, and rollup added (^4.62.2) because @nx/rollup@23 declares rollup a peer instead of bundling it (build failed with Cannot find module 'rollup' until added).
• Migration edits: both jest.config.ts files converted from ESM (import / export default) to CommonJS (require / module.exports), keeping the @leancodepl ESM transformIgnorePatterns; nx.json lint/production inputs repointed from .eslintrc.json to eslint.config.mjs; packages/pipe/project.json tags reordered.
• The Nx 23 bump unblocked jest → 30.4.2 — the old @nx/jest@19 clearMocksOnScope is not a function error is gone since @nx/jest@23 is jest-30-compatible. Related: jest-environment-jsdom → 30.4.1, @types/jest → 30.0.0, jest-util 30.4.1 added, @swc/jest → 0.2.39.

ESLint 8 → 9 flat-config migration

Migrated to ESLint 9 flat config, matching leancodepl/js_corelibrary.

• New eslint.config.mjs at the workspace root spreading @nx/eslint-plugin flat/base + flat/typescript + flat/javascript, plus @leancodepl/eslint-config's base + imports only (SignalR/rxjs library — no React/a11y). Thin packages/pipe/eslint.config.mjs re-exports it.
• Legacy .eslintrc.base.json, packages/pipe/.eslintrc.json, and .eslintignore deleted.
• eslint 8.57.0 → ^9.39.4; unified typescript-eslint 8.62.1 added, replacing the separate @typescript-eslint/parser + @typescript-eslint/eslint-plugin (7.17.0, removed); eslint-plugin-prettier (5.2.1) removed; eslint-config-prettier 9.1.0 → 10.1.8; prettier resolved via @leancodepl/prettier-config.
• Config quirk worth noting: @nx/dependency-checks lives in a dedicated **/*.json block (jsonc parser) with @typescript-eslint/naming-convention disabled there — the shared @leancodepl base applies type-aware naming-convention globally, which crashes under the JSON parser on package.json.
• Prettier reformatting from the new config touched packages/pipe/src/lib/pipe.ts (indentation and import order only, no logic change).

@leancodepl/* and runtime bumps

• @leancodepl/eslint-config and @leancodepl/prettier-config 7.5.0 → 10.5.2; @leancodepl/resolve-eslint-flat-config 10.5.2 added.
• Runtime @leancodepl/utils >=7.0.0 → >=10.0.0 (now ESM). Because jest runs CommonJS, a naive bump breaks tests with Cannot use import statement outside a module; fixed by transformIgnorePatterns: ["node_modules/(?!(@leancodepl)/)"] in packages/pipe/jest.config.ts so @swc/jest transforms @leancodepl/* ESM to CJS.
• Other bumps: lerna 8.1.7 → 9.0.7; @microsoft/signalr 8.0.7 → 10.0.0 (ships a patched ws, so npm audit --omit=dev reports 0 vulnerabilities); rxjs 7.8.1 → 7.8.2; lodash 4.17.21 → 4.18.1; tslib ^2.3.0 → ^2.8.1; @types/node 18.19.9 → 24.13.2 (kept Node-24-aligned); @swc/core 1.5.7 → 1.15.43; typescript 5.5.4 → 5.9.3; verdaccio ^5.0.4 → 6.7.4; plus prettier, ts-jest, @types/lodash, @swc-node/register, @swc/helpers.

Node 20 → 24

• .nvmrc 20 → 24.13, which also cleanly satisfies the @leancodepl linting packages' engines.node >=22.
• Published @leancodepl/pipe engines.node raised >=18 → >=22.

Test status

Verified on Node 24: lint (nx lint pipe) and build (nx build pipe) are green. Tests pass except the single live-backend integration test (packages/pipe/__tests__/pipe.spec.ts), which hits https://api.exampleapp.test.lncd.pl and fails only because the sandbox blocks that host by egress policy (403). This is an environmental limitation, not a code failure — the spec compiles, imports, and executes cleanly (no clearMocksOnScope error), and only the network call fails. It is expected to pass in CI where the backend is reachable.

Held / needs a maintainer decision

• typescript 6 — held on 5.9.3. TS 6 turns the baseUrl deprecation into a hard build error (TS5101), and tsconfig.base.json uses baseUrl: "." for the @leancodepl/pipe path mapping. Adopting it needs a tsconfig migration (drop baseUrl + rebase paths, or add ignoreDeprecations). Deferred to its own PR.
• eslint 10 — kept on 9.39.x to match js_corelibrary.
• @types/node 26 — kept on 24.x to stay aligned with the Node 24 runtime; opt in if the toolchain moves to Node 26.