fix(deps): update all dependencies #1178
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.28.4->7.28.57.28.3->7.28.57.27.1->7.28.5^0.64.0->^0.67.0^0.205.0->^0.208.0^0.205.0->^0.208.022.18.6->22.19.11.12.2->1.13.217.2.2->17.2.30.25.10->0.27.016.2.0->16.2.622.19.0->22.21.129.4.4->29.4.50.28.13->0.28.145.9.2->5.9.35.101.3->5.102.1Release Notes
babel/babel (@babel/core)
v7.28.5Compare Source
👓 Spec Compliance
babel-parserRuntime Errors for Function Call Assignment Targets(@liuxingbaoyu)babel-helper-validator-identifier🐛 Bug Fix
babel-plugin-proposal-destructuring-privatebabel-parser@babel/parsererror typing (@JLHwung)babel-plugin-proposal-discard-binding,babel-plugin-transform-destructuringrestcorrectly returns plain array (@liuxingbaoyu)babel-helper-create-class-features-plugin,babel-helper-member-expression-to-functions,babel-plugin-transform-block-scoping,babel-plugin-transform-optional-chaining,babel-traverse,babel-typesJSXIdentifierhandling inisReferencedIdentifier(@JLHwung)babel-traverse🏠 Internal
babel-types🏃♀️ Performance
babel-corebuildCodeFrameError(@liuxingbaoyu)open-telemetry/opentelemetry-js-contrib (@opentelemetry/auto-instrumentations-node)
v0.67.0Compare Source
Features
Dependencies
v0.66.0Compare Source
Features
Dependencies
v0.65.0Compare Source
Features
Dependencies
v0.64.6Compare Source
Bug Fixes
Dependencies
v0.64.5Compare Source
Dependencies
open-telemetry/opentelemetry-js (@opentelemetry/exporter-metrics-otlp-http)
v0.208.0Compare Source
v0.207.0Compare Source
v0.206.0Compare Source
axios/axios (axios)
v1.13.2Compare Source
Bug Fixes
Performance Improvements
Contributors to this release
v1.13.1Compare Source
Bug Fixes
Contributors to this release
v1.13.0Compare Source
Bug Fixes
Features
Contributors to this release
1.12.2 (2025-09-14)
Bug Fixes
Contributors to this release
1.12.1 (2025-09-12)
Bug Fixes
Contributors to this release
motdotla/dotenv (dotenv)
v17.2.3Compare Source
Changed
evanw/esbuild (esbuild)
v0.27.0Compare Source
This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of
esbuildin yourpackage.jsonfile (recommended) or be using a version range syntax that only accepts patch upgrades such as^0.26.0or~0.26.0. See npm's documentation about semver for more information.Use
Uint8Array.fromBase64if available (#4286)With this release, esbuild's
binaryloader will now use the newUint8Array.fromBase64function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specifytargetwhen using this feature with Node (for example--target=node22) unless you're using Node v25+.Update the Go compiler from v1.23.12 to v1.25.4 (#4208, #4311)
This raises the operating system requirements for running esbuild:
v0.26.0Compare Source
Enable trusted publishing (#4281)
GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.
Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).
v0.25.12Compare Source
Fix a minification regression with CSS media queries (#4315)
The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for
@media <media-type> and <media-condition-without-or> { ... }was missing an equality check for the<media-condition-without-or>part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.Update the list of known JavaScript globals (#4310)
This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global
Arrayproperty is considered to be side-effect free but accessing the globalscrollYproperty can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:From ES2017:
AtomicsSharedArrayBufferFrom ES2020:
BigInt64ArrayBigUint64ArrayFrom ES2021:
FinalizationRegistryWeakRefFrom ES2025:
Float16ArrayIteratorNote that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from
Iterator:Add support for the new
@view-transitionCSS rule (#4313)With this release, esbuild now has improved support for pretty-printing and minifying the new
@view-transitionrule (which esbuild was previously unaware of):The new view transition feature provides a mechanism for creating a
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.