chore(deps): combined dependency bumps (#8297, #8242, #8299)

[jherr]

Combines three open dependency-bump PRs into one branch, plus the one code fix the bumps require.

Included

Source PR	Change
#8297	shell-quote 1.8.3 → 1.8.4 (transitive)
#8242	fast-uri 3.1.0 → 3.1.2 (transitive)
#8299	@netlify/build → 35.15.0, @netlify/zip-it-and-ship-it → 14.7.1

Required follow-on fix

• netlify-function.ts: removed a now-obsolete @ts-expect-error. The @netlify/build bump ships the updated @netlify/config type, so the previously-suppressed error no longer occurs (TS2578).

Scope notes

• chore(deps): update dependency @vitest/eslint-plugin to v1.3.20 #7701 (@vitest/eslint-plugin 1.3.20) was split out into its own PR (chore(deps-dev): bump @vitest/eslint-plugin to 1.3.20 (supersedes #7701) #8305) and is no longer part of this branch.
• build(deps-dev): bump vitest and @vitest/coverage-v8 #8288 (vitest 4) is intentionally excluded — it's blocked by an @opentelemetry/api peer conflict that fails install without legacy-peer-deps, and needs a separate decision.

Verification

Local (Node 24): format:check, lint, typecheck pass; 373/373 unit tests pass. Integration/e2e not run locally (need auth token / network / Git LFS).

🤖 Generated with Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: d7cd7d10-edb6-46ff-bcf6-36e4cb47be11

📥 Commits

Reviewing files that changed from the base of the PR and between 78f81fc and 01c06ae.

📒 Files selected for processing (1)

• src/lib/functions/netlify-function.ts

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• netlify/blueprints (manual)

💤 Files with no reviewable changes (1)

• src/lib/functions/netlify-function.ts

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated build and development dependencies to latest versions

Walkthrough

Three dependency versions are bumped in package.json: @netlify/build from ^35.13.9 to ^35.15.0, @netlify/zip-it-and-ship-it from ^14.7.0 to ^14.7.1, and @vitest/eslint-plugin from 1.3.13 to 1.3.20. In src/lib/functions/netlify-function.ts, a stale @ts-expect-error TODO comment is removed from the isBackground getter's invocationMode === 'background' branch; no runtime logic is altered.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• netlify/cli#8209: Also modifies @netlify/build version in package.json, making it directly related to the dependency bump in this PR.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main change as a consolidated dependency bump PR combining multiple referenced PRs.
Description check	✅ Passed	The description comprehensively explains the combined dependency bumps and includes the required follow-on code fix with clear scope notes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/combined-dep-bumps-8297-8242-8299-7701

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

📊 Benchmark results

Comparing with 30ba6a1

• Dependency count: 1,127 (no change)
• Package size: 379 MB ⬆️ 0.01% increase vs. 30ba6a1
• Number of ts-expect-error directives: 352 ⬇️ 0.28% decrease vs. 30ba6a1