build: update all non-major dependencies (main)#36
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Author
|
cc84316 to
55102c4
Compare
55102c4 to
c6cf7c9
Compare
c6cf7c9 to
2d123ee
Compare
2d123ee to
d2f832e
Compare
d2f832e to
e0bf34a
Compare
e0bf34a to
885afac
Compare
ee5a98d to
4879ed5
Compare
4879ed5 to
d01f039
Compare
38a229d to
00543f6
Compare
00543f6 to
b54331b
Compare
b54331b to
def3c40
Compare
a89871a to
311a13e
Compare
3d35640 to
e515669
Compare
5ca15a5 to
a4fe45e
Compare
83be774 to
65e159d
Compare
c6ba72b to
7959fc4
Compare
124a01d to
6ae6924
Compare
See associated pull request for more information.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.52.0→5.55.15.52.0→5.55.15.52.0→5.55.15.52.0→5.55.17.28.6→7.29.77.29.0→7.29.77.29.1→7.29.76.20.1→6.20.36.10.3→6.10.46.12.3→6.12.46.9.5→6.9.76.7.0→6.7.16.6.0→6.7.06.41.1→6.43.43.2.0→3.2.14.1.0→4.1.91.3.3→1.3.41.0.2→1.0.31.11.0→1.11.1^0.1.0→^0.2.028.0.1→28.0.324.12.2→24.13.25.52.0→5.55.110.5.0→10.5.29.2.1→9.2.31.0.6→1.0.715.14.2→15.18.00.28.0→0.28.10.8.2→0.8.36.2.0→6.3.06.2.0→6.3.030.3.0→30.4.230.3.0→30.4.130.3.0→30.4.118.0.2→18.0.511.14.0→11.16.011.7.5→11.7.61.59.1→1.61.18.5.13→8.5.1610.29.1→10.29.46.6.7→6.7.03.8.3→3.9.424.42.0→24.43.14.60.2→4.62.24.0.2→4.3.10.2.16→0.2.170.16.1→0.16.2Release Notes
algolia/algoliasearch-client-javascript (@algolia/client-common)
v5.55.1Compare Source
getObjectsoperation now returns a list of nullable objects, as the API can send backnullrecords. The clients previously only allowed a list of objects, so the response type has been updated to allownullvalues.v5.55.0Compare Source
v5.54.1Compare Source
v5.54.0Compare Source
v5.53.0Compare Source
BREAKING CHANGES: this minor version includes breaking changes. See below for more details.
createHttpRequester(#6347) by @zigzagdevv5.52.1Compare Source
babel/babel (@babel/cli)
v7.29.7Compare Source
v7.29.7 (2026-05-25)
Re-release all packages with npm provenance attestations
codemirror/commands (@codemirror/commands)
v6.10.4Compare Source
codemirror/language (@codemirror/language)
v6.12.4Compare Source
codemirror/state (@codemirror/state)
v6.7.0Compare Source
csstools/postcss-plugins (@csstools/css-calc)
v3.2.1Compare Source
May 13, 2026
round(line-width, 1.2345px)to match the latest speccsstools/postcss-plugins (@csstools/css-color-parser)
v4.1.9Compare Source
June 25, 2026
@csstools/color-helpersto6.1.0(minor)v4.1.8Compare Source
June 19, 2026
color-mixsyntax flag to mix notations with only a single value (e.g.color-mix(in oklch, red))v4.1.7Compare Source
June 14, 2026
hueto[0, 360]range whenhueis not finitev4.1.6Compare Source
June 14, 2026
hueto[0, 360]range whenhueis a negative numberv4.1.5Compare Source
June 14, 2026
huein interpolation when both parts have a missinghuecomponentv4.1.4Compare Source
June 13, 2026
nonealpha inalpha()v4.1.3Compare Source
June 10, 2026
rgbcolor notation tocontrast-color()(instead ofsrgb).v4.1.2Compare Source
June 10, 2026
color-mix()v4.1.1Compare Source
May 13, 2026
hwb()@csstools/css-calcto3.2.1(patch)lezer-parser/css (@lezer/css)
v1.3.4Compare Source
marijnh/find-cluster-break (@marijn/find-cluster-break)
v1.0.3Compare Source
stackblitz/sdk (@stackblitz/sdk)
v1.11.1Compare Source
postcss/autoprefixer (autoprefixer)
v10.5.2Compare Source
-webkit-fill-availablebefore-moz-available, so Firefoxwill use
-webkit-version which is closer tostretch.v10.5.1Compare Source
grid-areaspan reset for overriding areas (by @puneetdixit200).open-cli-tools/concurrently (concurrently)
v9.2.3Compare Source
Full Changelog: open-cli-tools/concurrently@v9.2.2...v9.2.3
marijnh/crelt (crelt)
v1.0.7Compare Source
cypress-io/cypress (cypress)
v15.18.0Compare Source
Changelog: https://docs.cypress.io/app/references/changelog#15-18-0
v15.17.0Compare Source
Changelog: https://docs.cypress.io/app/references/changelog#15-17-0
v15.16.0Compare Source
Changelog: https://docs.cypress.io/app/references/changelog#15-16-0
v15.15.0Compare Source
Changelog: https://docs.cypress.io/app/references/changelog#15-15-0
evanw/esbuild (esbuild)
v0.28.1Compare Source
Disallow
\in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a
\backslash character. It happened due to the use of Go'spath.Clean()function, which only handles Unix-style/characters. HTTP requests with paths containing\are no longer allowed.Thanks to @dellalibera for reporting this issue.
Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)
The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.
Note that esbuild's Deno API installs from
registry.npmjs.orgby default, but allows theNPM_CONFIG_REGISTRYenvironment variable to override this with a custom package registry. This change means that the esbuild executable served byNPM_CONFIG_REGISTRYmust now match the expected content.Thanks to @sondt99 for reporting this issue.
Avoid inlining
usingandawait usingdeclarations (#4482)Previously esbuild's minifier sometimes incorrectly inlined
usingandawait usingdeclarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done forletandconstdeclarations by avoiding doing it forvardeclarations, which no longer worked when more declaration types were added. Here's an example:Fix module evaluation when an error is thrown (#4461, #4467)
If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if
import()orrequire()is used to import a module multiple times. The thrown error is supposed to be thrown by every call toimport()orrequire(), not just the first. With this release, esbuild will now throw the same error every time you callimport()orrequire()on a module that throws during its evaluation.Fix some edge cases around the
newoperator (#4477)Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a
newexpression (specifically an optional chain and/or a tagged template literal). The generated code for thenewtarget was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap thenewtarget in parentheses. Here is an example of some affected code:Fix renaming of nested
vardeclarations (#4471)This release fixes a bug where
vardeclarations in nested scopes that are hoisted up to module scope were not correctly being renamed during bundling. That could previously lead to name collisions when minification was disabled, which could potentially cause a behavior change. The bug has been fixed so that these hoisted declarations are now considered to be module-level symbols during the name collision avoidance pass.Emit
varinstead ofconstfor certain TypeScript-only constructs for ES5 (#4448)While esbuild doesn't generally support converting
consttovarfor ES5 due to nested scoping rules (which is currently a build-time error), esbuild previously incorrectly converted TypeScript-onlyimportassignment constructs into aconstdeclaration even when targeting ES5. With this release, esbuild will now usevarfor this case instead:101arrowz/fflate (fflate)
v0.8.3Compare Source
Z_SYNC_FLUSHin zlib)zip/zipSyncwhen using cross-realmUint8Arrayjasmine/jasmine-npm (jasmine)
v6.3.0: 6.3.0Compare Source
Please see the release notes.
jasmine/jasmine (jasmine-core)
v6.3.0: 6.3.0Compare Source
Please see the release notes.
jestjs/jest (jest)
v30.4.2Compare Source
Fixes
[jest-runtime]Fix named imports from CJS modules whosemodule.exportsis a function with own-property exports (#16150)v30.4.1Compare Source
Features
[jest-config, jest-core, jest-runner, jest-schemas, jest-types]Allow custom runner configuration options via tuple format['runner-path', {options}](#16141)Fixes
[jest-runtime]Align CJS-from-ESM default export with Node:module.exportsis always the ESM default,__esModuleunwrapping is no longer applied (#16143)v30.4.0Compare Source
Features
[babel-jest]Support collecting coverage from.mts,.cts(and other) files (#15994)[jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types]Add--collect-testsflag to discover and list tests without executing them (#16006)[jest-config, jest-runner, jest-worker]AddworkerGracefulExitTimeoutconfig option to control how long workers are given to exit before being force-killed (#15984)[jest-config]Add support forjest.config.mtsas a valid configuration file (#16005)[jest-config, jest-core, jest-reporters, jest-runner]verboseandsilentcan now be set per-project; the project-level value overrides the global value for that project's tests (#16133)[@jest/fake-timers]AcceptTemporal.Durationinjest.advanceTimersByTime()andjest.advanceTimersByTimeAsync()(#16128)[@jest/fake-timers]AcceptTemporal.InstantandTemporal.ZonedDateTimeinjest.setSystemTime()anduseFakeTimers({now})(#16128)[@jest/fake-timers]Support fakingTemporal.Now.*(#16131)[jest-mock]AddclearMocksOnScope(scope)onModuleMockerfor clearing every mock function exposed on a scope object (#16088)[jest-resolve]AddcanResolveSync()onResolverso callers can detect when a user-configured resolver only exports anasynchook (#16064)[jest-runtime]Use synchronousevaluate()for ES modules without top-levelawaiton Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)[jest-runtime]Supportrequire()of ES modules on Node v24.9+ (#16074)[jest-runtime]Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)[@jest/transform]AddcanTransformSync(filename)onScriptTransformerso callers can pick the sync vs async transform path (#16062)[jest-util]AddisErrorhelper (#16076)[pretty-format]Support React 19 (#16123)Fixes
[expect-utils]FixtoStrictEqualfailing onstructuredCloneresults due to cross-realm constructor mismatch (#15959)[@jest/expect-utils]PreventtoMatchObject/subset matching from throwing when encountering exotic iterables (#15952)[fake-timers]ConvertDateto milliseconds before passing to@sinonjs/fake-timers(#16029)[jest]ExportGlobalConfigandProjectConfigTypeScript types ([#16132](https://redirect.github.com/jestjs/jest