Skip to content

chore(deps): update all non-major npm dependencies#1237

Open
renovate[bot] wants to merge 1 commit intostagingfrom
renovate/all-minor-patch-npm
Open

chore(deps): update all non-major npm dependencies#1237
renovate[bot] wants to merge 1 commit intostagingfrom
renovate/all-minor-patch-npm

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 2, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@babel/preset-env (source) ^7.29.0^7.29.2 age confidence
@babel/runtime (source) ^7.28.6^7.29.2 age confidence
@eslint/eslintrc ^3.3.4^3.3.5 age confidence
@eslint/js (source) ^9.39.3^9.39.4 age confidence
babel-loader ^10.0.0^10.1.1 age confidence
caniuse-lite ^1.0.30001774^1.0.30001788 age confidence
core-js (source) ^3.48.0^3.49.0 age confidence
eslint (source) ^9.39.3^9.39.4 age confidence
eslint-webpack-plugin ^5.0.2^5.0.3 age confidence
globals ^17.3.0^17.5.0 age confidence
postcss (source) ^8.5.6^8.5.10 age confidence
postcss-preset-env (source) ^11.2.0^11.2.1 age confidence
puppeteer (source) ^24.37.5^24.41.0 age confidence
sass ^1.97.3^1.99.0 age confidence
stylelint (source) ^17.4.0^17.8.0 age confidence
stylelint-config-recess-order ^7.6.1^7.7.0 age confidence
webpack ^5.105.2^5.106.2 age confidence
yarn (source) 4.12.04.14.0 age confidence

Release Notes

babel/babel (@​babel/preset-env)

v7.29.2

Compare Source

babel/babel (@​babel/runtime)

v7.29.2

Compare Source

v7.29.2 (2026-03-16)
👓 Spec Compliance
🐛 Bug Fix
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
  • babel-preset-env
🏠 Internal
Committers: 2
eslint/eslintrc (@​eslint/eslintrc)

v3.3.5

Compare Source

Bug Fixes
eslint/eslint (@​eslint/js)

v9.39.4

Compare Source

babel/babel-loader (babel-loader)

v10.1.1

Compare Source

v10.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v10.0.0...v10.1.0

browserslist/caniuse-lite (caniuse-lite)

v1.0.30001788

Compare Source

v1.0.30001787

Compare Source

v1.0.30001786

Compare Source

v1.0.30001785

Compare Source

v1.0.30001784

Compare Source

v1.0.30001782

Compare Source

v1.0.30001781

Compare Source

v1.0.30001780

Compare Source

v1.0.30001779

Compare Source

v1.0.30001778

Compare Source

v1.0.30001777

Compare Source

v1.0.30001776

Compare Source

v1.0.30001775

Compare Source

zloirock/core-js (core-js)

v3.49.0

Compare Source

  • Changes v3.48.0...v3.49.0 (373 commits)
  • Iterator.range updated following the actual spec version
    • Throw a RangeError on NaN start / end / step
    • Allow null as optionOrStep
  • Improved accuracy of Math.{ asinh, atanh } polyfills with big and small values
  • Improved accuracy of Number.prototype.toExponential polyfills with big and small values
  • Improved performance of atob, btoa, Uint8Array.fromHex, Uint8Array.prototype.setFromHex, and Uint8Array.prototype.toHex, #​1503, #​1464, #​1510, thanks @​johnzhou721
  • Minor performance optimization polyfills of methods from Map upsert proposal
  • Polyfills of methods from Map upsert proposal from the pure version made generic to make it work with polyfilled and native collections
  • Wrap Symbol.for in Symbol.prototype.description polyfill for correct handling of empty string descriptions
  • Fixed a modern Safari bug in Array.prototype.includes with sparse arrays and fromIndex
  • Fixed one more case (Iterator.prototype.take) of a V8 ~ Chromium < 126 bug
  • Forced replacement of Iterator.{ concat, zip, zipKeyed } in the pure version for ensuring proper wrapped Iterator instances as the result
  • Fixed proxying .return() on exhausted iterator from some methods of iterator helpers polyfill to the underlying iterator
  • Fixed double .return() calling in case of throwing error in this method in the internal iterate helper that affected some polyfills
  • Fixed closing iterator on IteratorValue errors in the internal iterate helper that affected some polyfills
  • Fixed iterator closing in Array.from polyfill on failure to create array property
  • Fixed order of arguments validation in Array.fromAsync polyfill
  • Fixed a lack of counter validation on MAX_SAFE_INTEGER in Array.fromAsync polyfill
  • Fixed order of arguments validation in Array.prototype.flat polyfill
  • Fixed handling strings as iterables in Iterator.{ zip, zipKeyed } polyfills
  • Fixed some cases of iterators closing in Iterator.{ zip, zipKeyed } polyfills
  • Fixed validation of iterators .next() results an objects in Iterator.{ zip, zipKeyed } polyfills
  • Fixed a lack of early error in Iterator.concat polyfill on primitive as an iterator
  • Fixed buffer mutation exposure in Iterator.prototype.windows polyfill
  • Fixed iterator closing in Set.prototype.{ isDisjointFrom, isSupersetOf } polyfill
  • Fixed (updated following the final spec) one more case Set.prototype.difference polyfill with updating this
  • Fixed DataView.prototype.setFloat16 polyfill in (0, 1) range
  • Fixed order of arguments validation in String.prototype.{ padStart, padEnd } polyfills
  • Fixed order of arguments validation in String.prototype.{ startsWith, endsWith } polyfills
  • Fixed some cases of Infinity handling in String.prototype.substr polyfill
  • Fixed String.prototype.repeat polyfill with a counter exceeding 2 ** 32
  • Fixed some cases of chars case in escape polyfill
  • Fixed named backreferences in RegExp NCG polyfill
  • Fixed some cases of RegExp NCG polyfill in combination with other types of groups
  • Fixed some cases of RegExp NCG polyfill in combination with dotAll
  • Fixed String.prototype.replace with sticky polyfill, #​810, #​1514
  • Fixed RegExp sticky polyfill with alternation
  • Fixed handling of some line terminators in case of multiline + sticky mode in RegExp polyfill
  • Fixed .input slicing on result object with RegExp sticky mode polyfill
  • Fixed handling of empty groups with global and unicode modes in polyfills
  • Fixed URLSearchParam.prototype.delete polyfill with duplicate key-value pairs
  • Fixed possible removal of unnecessary entries in URLSearchParam.prototype.delete polyfill with second argument
  • Fixed an error in some cases of non-special URLs without a path in the URL polyfill
  • Fixed some percent encode cases / character sets in the URL polyfill
  • Fixed parsing of non-IPv4 hosts ends in a number in the URL polyfill
  • Fixed some cases of '' and null host handling in the URL polyfill
  • Fixed host parsing with hostname = host:port in the URL polyfill
  • Fixed host inheritance in some cases of file scheme in the URL polyfill
  • Fixed block of protocol change for file with empty host in the URL polyfill
  • Fixed invalid code points handling in UTF-8 decode in the URLSearchParams polyfill
  • Fixed some cases of serialization in URL polyfill (/. prefix for non-special URLs with null host and path starting with empty segment)
  • Fixed URL polyfill .origin getter with blob scheme
  • Fixed a lack of error in URLSearchParams.prototype.set polyfill on calling only with 1 argument
  • Fixed handling invalid UTF-8 continuation bytes in URLSearchParams polyfill
  • Fixed incomplete sequences with out-of-range continuation bytes handling in URLSearchParams polyfill
  • Fixed allowing unexpected symbols in scheme in the URL polyfill
  • Fixed repeated ToPropertyKey calling in Reflect.{ get, set, deleteProperty } polyfills
  • Fixed Reflect.set polyfill with some descriptors cases
  • Fixed Reflect.set polyfill with some non-extensible receiver cases
  • Fixed the order of Reflect.construct polyfill arguments validation (observable only in the error message)
  • Fixed a lack of error in Reflect.defineProperty polyfill with malformed descriptor
  • Fixed a lack of error in JSON.parse polyfill on unterminated object and array literals
  • Fixed a lack of error in JSON.parse polyfill on numbers with ., but without a fraction part
  • Fixed a lack of error on \u{} in String.dedent polyfill
  • Fixed some cases of hex escaping in the end of string in String.dedent polyfill
  • Fixed %AsyncFromSyncIteratorPrototype% to make it a little stricter
  • Fixed counter in some cases of some AsyncIterator methods
  • Fixed order of async iterators closing
  • Fixed iterator closing in AsyncIterator.prototype.flatMap polyfill
  • Fixed iterator closing in AsyncIterator.prototype.map polyfill on error in underlying iterator .next()
  • Fixed iterator closing in AsyncIterator.prototype.take polyfill with return: null
  • Fixed validation .return() result as object in AsyncIterator.prototype.take polyfill
  • Fixed a lack of error in structuredClone polyfill on attempt to transfer multiple objects, some of which are non-transferable
  • Fixed resizable ArrayBuffer transferring where newByteLength exceeds the original maxByteLength
  • Fixed possible loss of symbol enumerability in Object.defineProperty in Symbol polyfill
  • Fixed return value of Object.defineProperty in Symbol polyfill in Android ~ 2
  • Fixed order of %TypedArray%.from arguments validation
  • Fixed a lack of error on passing an ArrayBuffer and a negative length to the %TypedArray% and DataView constructors polyfills
  • Fixed some cases of @@&#8203;toStringTag on %TypedArray% polyfill
  • Fixed some cases of ToUint8Clamp conversion
  • Fixed NaN handling in Date.prototype.setYear polyfill
  • Fixed false positive on a WeakMap validation in the pure version
  • Fixed some minor { Map, Set }.prototype.forEach moments in the pure version
  • Fixed possible error in Array.isTemplateObject polyfill on frozen array
  • Fixed semantics of Observable.from with multiple subscriptions of the obsolete ECMAScript Observable proposal polyfill
  • Fixed handling of ending zeroes in the fraction part in Number.fromString polyfill
  • Fixed esmodules: intersect option of core-js-compat
  • Fixed a lack of reactnative alias in core-js-compat types
  • Fixed a minor logical bug in the debugging output of core-js-builder
  • Fixed ignorance of the obsolete blacklist option of core-js-builder - it should be removed only in the next major release
  • In case of bugs in String.prototype.{ match, matchAll, replace, split } in modern engines, add s, d and v flag support to polyfills of those methods
  • Just in case, added an extra input string validation to the polyfill of obsolete Number.fromString proposals
  • Simplified iOS detection
  • Many minor stylistic fixes and optimizations
  • Compat data improvements:
eslint/eslint (eslint)

v9.39.4

Compare Source

Bug Fixes

Documentation

Chores

webpack/eslint-webpack-plugin (eslint-webpack-plugin)

v5.0.3

Compare Source

sindresorhus/globals (globals)

v17.5.0

Compare Source

v17.4.0

Compare Source

postcss/postcss (postcss)

v8.5.10

Compare Source

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

v8.5.9

Compare Source

  • Speed up source map encoding paring in case of the error.

v8.5.8

Compare Source

  • Fixed Processor#version.

v8.5.7

Compare Source

  • Improved source map annotation cleaning performance (by CodeAnt AI).
csstools/postcss-plugins (postcss-preset-env)

v11.2.1

Compare Source

puppeteer/puppeteer (puppeteer)

v24.41.0

Compare Source

🎉 Features
Dependencies
  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.40.0 to 24.41.0
🛠️ Fixes
📄 Documentation

v24.40.0

Compare Source

♻️ Chores
  • puppeteer: Synchronize puppeteer versions
Dependencies
  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.39.1 to 24.40.0
🎉 Features
  • support PUPPETEER_DANGEROUS_NO_SANDBOX environment variable (#​14756) (2a8276e)
🛠️ Fixes

v24.39.1

Compare Source

♻️ Chores
  • puppeteer: Synchronize puppeteer versions
Dependencies
  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.39.0 to 24.39.1
🛠️ Fixes

v24.39.0

Compare Source

♻️ Chores
  • puppeteer: Synchronize puppeteer versions
Dependencies
  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.38.0 to 24.39.0
🎉 Features
🛠️ Fixes

v24.38.0

Compare Source

🎉 Features
Dependencies
  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.37.5 to 24.38.0
🛠️ Fixes
  • consider browsingContext.navigationCommitted to dispose an existing navigation (#​14724) (b4e92c6)
  • disable PartitionAllocSchedulerLoopQuarantineTaskControlledPurge (#​14744) (e6c7425)
  • roll to Chrome 145.0.7632.117 (#​14719) (1d407e1)
sass/dart-sass (sass)

v1.99.0

Compare Source

  • Add support for parent selectors (&) at the root of the document. These are
    emitted as-is in the CSS output, where they're interpreted as the scoping
    root
    .

  • User-defined functions named calc or clamp are no longer forbidden. If
    such a function exists without a namespace in the current module, it will be
    used instead of the built-in calc() or clamp() function.

  • User-defined functions whose names begin with - and end with -expression,
    -url, -and, -or, or -not are no longer forbidden. These were
    originally intended to match vendor prefixes, but in practice no vendor
    prefixes for these functions ever existed in real browsers.

  • User-defined functions named EXPRESSION, URL, and ELEMENT, those that
    begin with - and end with -ELEMENT, as well as the same names with some
    lowercase letters are now deprecated, These are names conflict with plain CSS
    functions that have special syntax.

    See the Sass website for details.

  • In a future release, calls to functions whose names begin with - and end
    with -expression and -url will no longer have special parsing. For now,
    these calls are deprecated if their behavior will change in the future.

    See the Sass website for details.

  • Calls to functions whose names begin with - and end with -progid:... are
    deprecated.

    See the Sass website for details.

v1.98.0

Compare Source

Command-Line Interface
  • Gracefully handle dependency loops in --watch mode.
Dart API
  • Add a const Logger.defaultLogger field. This provides a logger that emits to
    standard error or the browser console, but automatically chooses whether to
    use terminal colors.
JavaScript API
  • Fix a crash when manually constructing a SassCalculation for 'calc' with
    an argument that can't be simplified.

  • Properly emit deprecation warnings as text rather than StringBuffer objects
    when running in a browser.

  • Emit colored warnings and other messages on the console when running in a
    browser.

stylelint/stylelint (stylelint)

v17.8.0

Compare Source

It adds 3 new rules and 1 configuration property.

v17.7.0

Compare Source

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

v17.6.0

Compare Source

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

  • Added: support for extending units to languageOptions (#​9166) (@​jeddy3).
  • Fixed: missing ruleMetadata when linting multiple files with overrides (#​9154) (@​kovsu).
  • Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#​9164) (@​splincode).

v17.5.0

Compare Source

It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released 2.1.0 of our VS Code extension, which adds 8 new requested features, and our first release of the Stylelint Language Server.

stormwarning/stylelint-config-recess-order (stylelint-config-recess-order)

v7.7.0

Compare Source

Minor Changes
webpack/webpack (webpack)

v5.106.2

Compare Source

v5.106.1

Compare Source

Patch Changes
  • Fix two ES5-environment regressions in the anonymous default export .name fix-up: the generated code referenced an undeclared __WEBPACK_DEFAULT_EXPORT__ binding causing ReferenceError, and used Reflect.defineProperty which is not available in pre-ES2015 runtimes. The fix-up now references the real assignment target and uses Object.defineProperty / Object.getOwnPropertyDescriptor. (by @​xiaoxiaojx in #​20796)

  • Prevent !important from being renamed as a local identifier in CSS modules. (by @​xiaoxiaojx in #​20798)

  • Use compiler context instead of module context for CSS modules local ident hashing to avoid hash collisions when files with the same name exist in different directories. (by @​xiaoxiaojx in #​20799)

v5.106.0

Compare Source

Minor Changes
  • Add exportType: "style" for CSS modules to inject styles into DOM via HTMLStyleElement, similar to style-loader functionality. (by @​xiaoxiaojx in #​20579)

  • Add context option support for VirtualUrlPlugin (by @​xiaoxiaojx in #​20449)

    • The context for the virtual module. A string path. Defaults to 'auto', which will try to resolve the context from the module id.
    • Support custom context path for resolving relative imports in virtual modules
    • Add examples demonstrating context usage and filename customization
  • Generate different CssModule instances for different exportType values. (by @​xiaoxiaojx in #​20590)

  • Added the localIdentHashFunction option to configure the hash function to be used for hashing. (by @​alexander-akait in #​20694)
    Additionally, the localIdentName option can now be a function.

  • Added support for destructuring assignment require in cjs, allowing for tree shaking. (by @​ahabhgk in #​20548)

  • Added the validate option to enable/disable validation in webpack/plugins/loaders, also implemented API to make it inside plugins. (by @​xiaoxiaojx in #​20275)

  • Added source support for async WASM modules. (by @​magic-akari in #​20364)

Patch Changes
  • Add a static getSourceBasicTypes method to the Module class to prevent errors across multiple versions. (by @​xiaoxiaojx in #​20614)

  • Included fragment groups in the conflicting order warning for CSS. (by @​aryanraj45 in #​20660)

  • Avoid rendering unused top-level __webpack_exports__ declaration when output ECMA module library. (by @​hai-x in #​20669)

  • Fixed resolving in CSS modules. (by @​alexander-akait in #​20771)

  • Allow external modules place in async chunks when output ECMA module. (by @​hai-x in #​20662)

  • Implement deprecate flag in schema for better TypeScript support to show which options are already deprecated by the configuration (by @​bjohansebas in #​20432)

  • Set .name to "default" for anonymous default export functions and classes per ES spec (by @​xiaoxiaojx in #​20773)

  • Hash entry chunks after runtime chunks to prevent stale content hash references in watch mode (by @​xiaoxiaojx in #​20724)

  • Fix multiple bugs and optimizations in CSS modules: correct third code point position in walkCssTokens number detection, fix multiline CSS comment regex, fix swapped :import/:export error message, fix comma callback incorrectly popping balanced stack, fix cache comparison missing array length check, fix match.index mutation side effect, move publicPathAutoRegex to module scope, precompute merged callbacks in consumeUntil, simplify redundant ternary in CssGenerator, fix typo GRID_TEMPLATE_ARES, remove duplicate grid-column-start, and merge duplicate getCompilationHooks calls. (by @​xiaoxiaojx in #​20648)

  • Correct url() path resolution and preserve source maps for non-link CSS export types (style, text, css-style-sheet) (by @​xiaoxiaojx in #​20717)

  • Emit error when proxy server returns non-200 status code in HttpUriPlugin instead of silently failing. (by @​xiaoxiaojx in #​20646)

  • import.meta as standalone expression now returns a complete object with known properties (url, webpack, main, env) instead of an empty object ({}), and hoists it as a module-level variable to ensure import.meta === import.meta identity. In preserve-unknown mode (ESM output), the hoisted object merges runtime import.meta properties via Object.assign. (by @​xiaoxiaojx


Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Mar 2, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Mar 2, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.59%. Comparing base (502d857) to head (644a0b4).

Additional details and impacted files
@@           Coverage Diff            @@
##           staging    #1237   +/-   ##
========================================
  Coverage    77.59%   77.59%           
========================================
  Files           54       54           
  Lines         1406     1406           
========================================
  Hits          1091     1091           
  Misses         315      315           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch 7 times, most recently from 2951c6c to dfd697b Compare March 9, 2026 18:59
@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch 7 times, most recently from 3edef4e to 7528cd9 Compare March 17, 2026 08:33
@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch 3 times, most recently from f3adeb7 to a1339e8 Compare March 23, 2026 05:43
@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch 8 times, most recently from 7445071 to f277959 Compare April 1, 2026 05:56
@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch 3 times, most recently from e4ea03a to a8c3c3a Compare April 6, 2026 08:42
@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch 9 times, most recently from d6cf02b to b7116b9 Compare April 14, 2026 05:50
@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch from b7116b9 to 6ac509c Compare April 16, 2026 09:48
@renovate renovate bot force-pushed the renovate/all-minor-patch-npm branch from 6ac509c to 644a0b4 Compare April 16, 2026 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants