chore(deps): bump the dependencies group across 1 directory with 39 updates by dependabot[bot] · Pull Request #5737 · webpack/webpack-dev-server

dependabot · 2026-09-14T02:06:25Z

Bumps the dependencies group with 35 updates in the / directory:

Package	From	To
@types/express-serve-static-core	`5.1.1`	`5.1.3`
bonjour-service	`1.3.0`	`1.4.4`
http-proxy-middleware	`4.1.1`	`4.2.0`
ipaddr.js	`2.3.0`	`2.5.0`
open	`11.0.0`	`11.0.2`
p-retry	`8.0.0`	`8.0.1`
schema-utils	`4.3.3`	`4.4.0`
tinyglobby	`0.2.15`	`0.2.17`
webpack-dev-middleware	`8.0.3`	`8.3.0`
ws	`8.21.0`	`8.21.3`
@babel/cli	`7.28.6`	`7.29.7`
@babel/core	`7.29.6`	`7.29.7`
@babel/eslint-parser	`7.28.6`	`7.29.7`
@babel/plugin-transform-object-assign	`7.27.1`	`7.29.7`
@babel/preset-env	`7.29.2`	`7.29.7`
@changesets/cli	`2.31.0`	`2.31.1`
@hono/node-server	`1.19.15`	`1.19.17`
@types/node	`24.10.1`	`24.13.4`
@types/picomatch	`4.0.2`	`4.0.3`
acorn	`8.16.0`	`8.18.0`
babel-loader	`10.0.0`	`10.1.1`
core-js	`3.47.0`	`3.50.0`
css-loader	`7.1.2`	`7.1.5`
eslint-plugin-n	`17.23.1`	`17.24.0`
expect	`30.4.1`	`30.5.1`
hono	`4.12.34`	`4.13.7`
html-webpack-plugin	`5.6.5`	`5.6.8`
less	`4.5.1`	`4.9.1`
less-loader	`12.3.0`	`12.3.3`
prettier	`3.6.2`	`3.9.6`
puppeteer	`25.3.0`	`25.10.0`
tcp-port-used	`1.0.2`	`1.0.3`
typescript-eslint	`8.59.3`	`8.70.0`
webpack	`5.108.0`	`5.110.3`
webpack-cli	`7.2.1`	`7.2.3`

Updates @types/express-serve-static-core from 5.1.1 to 5.1.3

Commits

See full diff in compare view

Updates bonjour-service from 1.3.0 to 1.4.4

Release notes

Sourced from bonjour-service's releases.

1.4.4

What's Changed

Export classes as types too, not just values by @andersk in onlxltd/bonjour-service#84

Bump tar from 7.5.16 to 7.5.22 by @dependabot[bot] in onlxltd/bonjour-service#85

Bump js-yaml from 4.2.0 to 4.3.0 by @dependabot[bot] in onlxltd/bonjour-service#86

New Contributors

@andersk made their first contribution in onlxltd/bonjour-service#84

Full Changelog: onlxltd/bonjour-service@1.4.3...1.4.4

1.4.3

Full Changelog: onlxltd/bonjour-service@1.4.2...1.4.3

Update for index.ts to fix imports #79 Thanks to @andersk & @Nerivec for their work identifying this issue.

1.4.2

What's Changed

Bump tar from 7.5.15 to 7.5.16 by @dependabot[bot] in onlxltd/bonjour-service#81

Bump undici from 6.25.0 to 6.27.0 by @dependabot[bot] in onlxltd/bonjour-service#82

Bump js-yaml from 4.1.1 to 4.2.0 by @dependabot[bot] in onlxltd/bonjour-service#83

Full Changelog: onlxltd/bonjour-service@1.4.1...1.4.2

1.4.1

What's Changed

Fix for imports by @mdidon in onlxltd/bonjour-service#80

Addressed onlxltd/bonjour-service#79 raised by @andersk

Full Changelog: onlxltd/bonjour-service@1.4.0...1.4.1

1.4.0

What's Changed

Always define start and stop on Service by @EvanHahn in onlxltd/bonjour-service#48

feat: track service ttl and lastSeen by @Julusian in onlxltd/bonjour-service#55

Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in onlxltd/bonjour-service#71

feat: add types to browser eventemitter by @Julusian in onlxltd/bonjour-service#56

feat: add srv-update event by @Julusian in onlxltd/bonjour-service#57

fix: Properly advertise service type for discovery in mDNS browsers. by @Zandor300 in onlxltd/bonjour-service#67

New Contributors

@EvanHahn made their first contribution in onlxltd/bonjour-service#48

@Julusian made their first contribution in onlxltd/bonjour-service#55

@Zandor300 made their first contribution in onlxltd/bonjour-service#67

Full Changelog: onlxltd/bonjour-service@1.3.0...1.4.0

Commits

e72ca10 Update yarn.lock
693311c Merge branch 'dependabot/npm_and_yarn/js-yaml-4.3.0'
2f0b012 Merge branch 'dependabot/npm_and_yarn/tar-7.5.22'
f870315 Bump js-yaml from 4.2.0 to 4.3.0
a17fe30 Bump tar from 7.5.16 to 7.5.22
38fadf7 Export classes as types too, not just values
ee3a3c0 Update for imports
1eda77d Update .npmignore
d7746b1 Update yarn.lock
6fe0a0d Bump js-yaml from 4.1.1 to 4.2.0
Additional commits viewable in compare view

Updates http-proxy-middleware from 4.1.1 to 4.2.0

Release notes

Sourced from http-proxy-middleware's releases.

v4.2.0

What's Changed

feat(types): export OnProxyEvent type by @Netail in chimurai/http-proxy-middleware#1263

refactor(errors): use HttpProxyMiddlewareError class by @chimurai in chimurai/http-proxy-middleware#1264

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1265

test(e2e): add HttpAgent keepAlive test (#472) by @chimurai in chimurai/http-proxy-middleware#1267

test(e2e): assert invalid multipart error log by @chimurai in chimurai/http-proxy-middleware#1272

feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error by @chimurai in chimurai/http-proxy-middleware#1273

chore(debug-proxy-errors-plugin): fix BODY_PARSER_ERROR_MESSAGE formatting by @chimurai in chimurai/http-proxy-middleware#1274

chore(package.json): update dependencies by @chimurai in chimurai/http-proxy-middleware#1275

chore(package.json): v4.2.0 by @chimurai in chimurai/http-proxy-middleware#1276

New Contributors

@Netail made their first contribution in chimurai/http-proxy-middleware#1263

Full Changelog: chimurai/http-proxy-middleware@v4.1.1...v4.2.0

Changelog

Sourced from http-proxy-middleware's changelog.

v4.2.0

feat(types): export OnProxyEvent type

feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error

chore(package.json): update to httpxy v0.5.4

Commits

4abb1ba chore(package.json): v4.2.0 (#1276)
d40ae3e chore(package.json): update dependencies (#1275)
89a78d0 chore(debug-proxy-errors-plugin): fix BODY_PARSER_ERROR_MESSAGE formatting (#...
7ba87a9 feat(debug-proxy-errors-plugin): debug message for bodyParser + ECONNRESET er...
006f1a4 test(e2e): assert invalid multipart error log (#1272)
22281bf test(e2e): add HttpAgent keepAlive test (#472) (#1267)
5b37301 chore(package.json): bump dev deps (#1265)
3695b93 refactor(errors): use HttpProxyMiddlewareError class (#1264)
b9242af feat(types): export OnProxyEvent type (#1263)
See full diff in compare view

Updates ipaddr.js from 2.3.0 to 2.5.0

Changelog

Sourced from ipaddr.js's changelog.

2.5.0 - 2026-08-04

remove ipaddr.min.js, end users must provide own minification/bundling

fix: compress the leftmost zero run in toString (RFC 5952, 4.2.3)

fix: strict IPv6 validation — reject :: with zero compression and hextets >4 hex digits

fix: reject non-numeric prefix length in subnetMaskFromPrefixLength

fix: compress trailing zero run in toString when a zoneIndex is present

fix: throw a descriptive error for malformed input in IPv6.parse

2.4.0 - 2026-05-03

remove Bower support

add RFC9637, RFC9602, RFC8215, RFC3879 reserved address ranges

Commits

See full diff in compare view

Updates open from 11.0.0 to 11.0.2

Release notes

Sourced from open's releases.

v11.0.2

Update dependencies 6f006ad

sindresorhus/open@v11.0.1...v11.0.2

v11.0.1

Fix WSL failure when the working directory is unreachable from Windows 6ac3fe4

sindresorhus/open@v11.0.0...v11.0.1

Commits

ccf1fd6 11.0.2
52d2d62 Use hasOwn (#372)
6f006ad Update dependencies
f38acc8 11.0.1
6ac3fe4 Fix WSL failure when the working directory is unreachable from Windows
a30acc7 Meta tweaks
See full diff in compare view

Updates p-retry from 8.0.0 to 8.0.1

Release notes

Sourced from p-retry's releases.

v8.0.1

Fix error for invalid fractional retry counts 3c22035

sindresorhus/p-retry@v8.0.0...v8.0.1

Commits

81cd2f0 8.0.1
3c22035 Fix error for invalid fractional retry counts
See full diff in compare view

Updates schema-utils from 4.3.3 to 4.4.0

Release notes

Sourced from schema-utils's releases.

v4.4.0

Minor Changes

The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @laymonage, @alexander-akait in #222)

process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @alexander-akait in #217)

At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @alexander-akait in #217)

Patch Changes

read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @alexander-akait in #225)

output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @alexander-akait in #224)

Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @alexander-akait in #221)

A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @alexander-akait in #223)

Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @alexander-akait in #217)

All notable changes to this project will be documented in this file.

4.3.3 (2025-10-02)

Bug Fixes

reexport ValidationErrorConfiguration type (#204) (49af922)

4.3.2 (2025-04-22)

Bug Fixes

compatibility with old types (#198) (8e31ef3)

4.3.1 (2025-04-22)

Bug Fixes

export Schema and additional schemas (#197) (f72cd60)

Changelog

Sourced from schema-utils's changelog.

4.4.0

Minor Changes

The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @laymonage, @alexander-akait in #222)

process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @alexander-akait in #217)

At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @alexander-akait in #217)

Patch Changes

read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @alexander-akait in #225)

output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @alexander-akait in #224)

Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @alexander-akait in #221)

A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @alexander-akait in #223)

Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @alexander-akait in #217)

All notable changes to this project will be documented in this file.

Commits

b4fd660 chore(release): new release (#220)
0f99aa9 feat: read the format keyword as part of the type (#225)
4baf113 feat: output the type of object properties in error messages (#224)
49bb7ce fix: say which strings an absolutePath keyword accepts (#223)
5c21244 feat: allow file:// protocol prefix in absolute paths (#222)
fc918a9 chore: update dependencies (#221)
d72a15b chore: release with changesets (#219)
1d0404e test: cover collecting a subtree of errors and grouping a nested anyOf (#218)
17c4e3a fix: quadratic error filtering, dropped errors and validation performance (#217)
2c0aedf ci: add nodejs v26 to ci (#216)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for schema-utils since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates tinyglobby from 0.2.15 to 0.2.17

Release notes

Sourced from tinyglobby's releases.

0.2.17

Changed

Enabled staged publishing for stronger supply-chain security

Fixed

Defaults when undefined is passed to any of the options by @chloeelim

Drive-relative paths on Windows by @Andrej730

FileSystemAdapter is now exported again

Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem

0.2.16

Fixed

Upgraded picomatch to 4.0.4, mitigating any potential exposure to CVE-2026-33671 and CVE-2026-33672

Changed

Overhauled and optimized most internals by @Torathion

Ignore patterns are no longer compiled twice by @webpro

Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem

Changelog

Sourced from tinyglobby's changelog.

0.2.17

Changed

Enabled staged publishing for stronger supply-chain security

Fixed

Defaults when undefined is passed to any of the options by chloeelim

Drive-relative paths on Windows by Andrej730

FileSystemAdapter is now exported again

0.2.16

Fixed

Upgraded picomatch to 4.0.4, mitigating any potential exposure to CVE-2026-33671 and CVE-2026-33672

Changed

Overhauled and optimized most internals by Torathion

Ignore patterns are no longer compiled twice by webpro

Commits

f80cb84 release 0.2.17
d5d1ce3 enable staged publishes
ec39d48 Update all non-major dependencies (#204)
d618ed4 improve benchmark infra
dd10cb2 disable cache in publish workflow
749694d set minimumReleaseAge in renovate
937a0c7 remove .vscode folder
298769a fix alt text in readme (#203)
8927f0a run ci on node 26
e8519ee Update all non-major dependencies (#195)
Additional commits viewable in compare view

Updates webpack-dev-middleware from 8.0.3 to 8.3.0

Release notes

Sourced from webpack-dev-middleware's releases.

v8.3.0

Minor Changes

Added a hot option that enables hot module replacement, replacing the need for webpack-hot-middleware. Pass hot: true to enable with defaults, or hot: { path, heartbeat, progress, statsOptions } to customize. The client runtime is served by the middleware itself. (by @bjohansebas in #2370)

Take the diagnostics a hot payload carries from the stats option, so one setting governs what a build reports in the terminal and in the browser: stats: "errors-only" keeps warnings out of both, and stats: false keeps errors and warnings out of both, the client's error overlay included — reach for the client's ?logging= or ?overlay= to quiet the browser alone. hot.statsOptions is deprecated and will be removed in the next major release; its hash, timings and children keys are now ignored, because they could leave a payload without the hash the client compares, or carry a child compilation's hash instead, which stopped updates applying and forced a full page reload on every rebuild. (by @alexander-akait in #2392)

Patch Changes

Fixed a crash when calling invalidate() in plugin mode (isPlugin = true). Since the host (webpack-cli, webpack-dev-server, etc.) owns compiler.watch(), the middleware now invalidates the host's watching instead (each child compiler's one for a MultiCompiler on webpack < 5.109). When nothing is watching it logs a warning and completes the callback, as close() does, rather than leaving invalidate(callback) waiting on a build that never runs. (by @bjohansebas in #2378)

Reject with 403 Forbidden the requests whose resolved filename falls outside outputPath (GHSA-g84c-rxfj-3j2c). With a publicPath without a trailing slash, a sibling path sharing its prefix (/assets../secret) escaped the output root once the prefix was stripped and joined. (by @bjohansebas in #2404)

Update the changelog generator to the @changesets/get-github-info 1.0 API. (by @alexander-akait in #2396)

Update dependencies. (by @alexander-akait in #2394)

v8.2.0

Minor Changes

Added a hot option that enables hot module replacement, replacing the need for webpack-hot-middleware. Pass hot: true to enable with defaults, or hot: { path, heartbeat, progress, statsOptions } to customize. The client runtime ships with the package and is added as a webpack entry. (by @bjohansebas in #2322)

v8.1.1

Patch Changes

Fixed a crash when calling close() in plugin mode (isPlugin = true). Since the host (webpack-cli, webpack-dev-server, etc.) owns compiler.watch(), the middleware has no watching of its own to close, so close() now just calls the callback instead of throwing. (by @bjohansebas in #2347)

v8.1.0

Minor Changes

Reuse an already active MultiCompiler watching session instead of starting a duplicate one (requires webpack >= 5.109). (by @bjohansebas in #2371)

v8.0.4

Patch Changes

Replace the on-finished dependency with Node.js built-in stream.finished. (by @bjohansebas in #2346)

Changelog

Sourced from webpack-dev-middleware's changelog.

8.3.0

Minor Changes

Added a hot option that enables hot module replacement, replacing the need for webpack-hot-middleware. Pass hot: true to enable with defaults, or hot: { path, heartbeat, progress, statsOptions } to customize. The client runtime is served by the middleware itself. (by @bjohansebas in #2370)

Take the diagnostics a hot payload carries from the stats option, so one setting governs what a build reports in the terminal and in the browser: stats: "errors-only" keeps warnings out of both, and stats: false keeps errors and warnings out of both, the client's error overlay included — reach for the client's ?logging= or ?overlay= to quiet the browser alone. hot.statsOptions is deprecated and will be removed in the next major release; its hash, timings and children keys are now ignored, because they could leave a payload without the hash the client compares, or carry a child compilation's hash instead, which stopped updates applying and forced a full page reload on every rebuild. (by @alexander-akait in #2392)

Patch Changes

Fixed a crash when calling invalidate() in plugin mode (isPlugin = true). Since the host (webpack-cli, webpack-dev-server, etc.) owns compiler.watch(), the middleware now invalidates the host's watching instead (each child compiler's one for a MultiCompiler on webpack < 5.109). When nothing is watching it logs a warning and completes the callback, as close() does, rather than leaving invalidate(callback) waiting on a build that never runs. (by @bjohansebas in #2378)

Reject with 403 Forbidden the requests whose resolved filename falls outside outputPath (GHSA-g84c-rxfj-3j2c). With a publicPath without a trailing slash, a sibling path sharing its prefix (/assets../secret) escaped the output root once the prefix was stripped and joined. (by @bjohansebas in #2404)

Update the changelog generator to the @changesets/get-github-info 1.0 API. (by @alexander-akait in #2396)

Update dependencies. (by @alexander-akait in #2394)

8.2.0

Minor Changes

Added a hot option that enables hot module replacement, replacing the need for webpack-hot-middleware. Pass hot: true to enable with defaults, or hot: { path, heartbeat, progress, statsOptions } to customize. The client runtime ships with the package and is added as a webpack entry. (by @bjohansebas in #2322)

8.1.1

Patch Changes

Fixed a crash when calling close() in plugin mode (isPlugin = true). Since the host (webpack-cli, webpack-dev-server, etc.) owns compiler.watch(), the middleware has no watching of its own to close, so close() now just calls the callback instead of throwing. (by @bjohansebas in #2347)

8.1.0

Minor Changes

Reuse an already active MultiCompiler watching session instead of starting a duplicate one (requires webpack >= 5.109). (by @bjohansebas in #2371)

8.0.4

Patch Changes

Replace the on-finished dependency with Node.js built-in stream.finished. (by @bjohansebas in #2346)

Commits

1abbf08 chore(release): new release (#2393)
ef479c9 feat: add missing changelog (#2404)
13344e7 Merge commit from fork
e58a70b test(hot): reach 100% of the client, off the deprecated statsOptions (#2402)
17e689e chore(deps): bump the dependencies group across 1 directory with 2 updates (#...
d816818 fix(plugin): resolve crash on invalidate() in plugin mode (#2378)
09a9095 chore(deps): bump changesets/action (#2384)
4c1dcfc test: rewrite to e2e (#2370)
9133f47 build: update changesets tooling (#2396)
a337174 build: update dependencies (#2394)
Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

Empty fragments are now counted toward the limit (a2f4e7c0).

The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

Commits

c791e70 [dist] 8.21.3
e97a20e [fix] Reject offers with client_max_window_bits below config
787ebf2 [dist] 8.21.2
b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
e4bb883 [security] Use GitHub PVR as main reporting channel
2eb3be0 [test] Skip test on Node.js versions where it does not apply
ae1de54 [dist] 8.21.1
8e9511b [ci] Trust Coveralls Homebrew tap
f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
8df8265 [ci] Update actions/checkout action to v7
Additional commits viewable in compare view

Updates @babel/cli from 7.28.6 to 7.29.7

Release notes

Sourced from @babel/cli's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
See full diff in compare view

Updates @babel/core from 7.29.6 to 7.29.7

Release notes

Sourced from @babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

Commits

4fba754 v7.29.7
See full diff in compare view

Updates @babel/eslint-parser from 7.28.6 to 7.29.7

Release notes

Sourced from @babel/eslint-parser's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

babel-parser

#17923 Support flow extends bound (@JLHwung)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#17931 fix(decorators): replace super within all removed static elements (@JLHwung)

babel-register

#17915 Fix thread synchronization issues in @babel/register (@liuxingbaoyu)

babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

#17788 Add bugfix plugin for Safari array rest destructuring bug (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

4fba754 v7.29.7
See full diff in compare view

Updates @babel/plugin-transform-object-assign from 7.27.1 to 7.29.7

Release notes

Sourced from @babel/plugin-transform-object-assign's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve i...
Description has been truncated

…pdates Bumps the dependencies group with 35 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/express-serve-static-core](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-serve-static-core) | `5.1.1` | `5.1.3` | | [bonjour-service](https://github.com/onlxltd/bonjour-service) | `1.3.0` | `1.4.4` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `4.1.1` | `4.2.0` | | [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.3.0` | `2.5.0` | | [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.2` | | [p-retry](https://github.com/sindresorhus/p-retry) | `8.0.0` | `8.0.1` | | [schema-utils](https://github.com/webpack/schema-utils) | `4.3.3` | `4.4.0` | | [tinyglobby](https://github.com/SuperchupuDev/tinyglobby) | `0.2.15` | `0.2.17` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `8.0.3` | `8.3.0` | | [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.3` | | [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `7.28.6` | `7.29.7` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.6` | `7.29.7` | | [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.28.6` | `7.29.7` | | [@babel/plugin-transform-object-assign](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-object-assign) | `7.27.1` | `7.29.7` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.2` | `7.29.7` | | [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `2.31.0` | `2.31.1` | | [@hono/node-server](https://github.com/honojs/node-server) | `1.19.15` | `1.19.17` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `24.13.4` | | [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch) | `4.0.2` | `4.0.3` | | [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` | | [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` | | [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.47.0` | `3.50.0` | | [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.5` | | [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `17.23.1` | `17.24.0` | | [expect](https://github.com/jestjs/jest/tree/HEAD/packages/expect) | `30.4.1` | `30.5.1` | | [hono](https://github.com/honojs/hono) | `4.12.34` | `4.13.7` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.5` | `5.6.8` | | [less](https://github.com/less/less.js) | `4.5.1` | `4.9.1` | | [less-loader](https://github.com/webpack/less-loader) | `12.3.0` | `12.3.3` | | [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.6` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `25.3.0` | `25.10.0` | | [tcp-port-used](https://github.com/stdarg/tcp-port-used) | `1.0.2` | `1.0.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.3` | `8.70.0` | | [webpack](https://github.com/webpack/webpack) | `5.108.0` | `5.110.3` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.1` | `7.2.3` | Updates `@types/express-serve-static-core` from 5.1.1 to 5.1.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express-serve-static-core) Updates `bonjour-service` from 1.3.0 to 1.4.4 - [Release notes](https://github.com/onlxltd/bonjour-service/releases) - [Commits](onlxltd/bonjour-service@1.3.0...1.4.4) Updates `http-proxy-middleware` from 4.1.1 to 4.2.0 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v4.1.1...v4.2.0) Updates `ipaddr.js` from 2.3.0 to 2.5.0 - [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md) - [Commits](https://github.com/whitequark/ipaddr.js/commits) Updates `open` from 11.0.0 to 11.0.2 - [Release notes](https://github.com/sindresorhus/open/releases) - [Commits](sindresorhus/open@v11.0.0...v11.0.2) Updates `p-retry` from 8.0.0 to 8.0.1 - [Release notes](https://github.com/sindresorhus/p-retry/releases) - [Commits](sindresorhus/p-retry@v8.0.0...v8.0.1) Updates `schema-utils` from 4.3.3 to 4.4.0 - [Release notes](https://github.com/webpack/schema-utils/releases) - [Changelog](https://github.com/webpack/schema-utils/blob/main/CHANGELOG.md) - [Commits](webpack/schema-utils@v4.3.3...v4.4.0) Updates `tinyglobby` from 0.2.15 to 0.2.17 - [Release notes](https://github.com/SuperchupuDev/tinyglobby/releases) - [Changelog](https://github.com/SuperchupuDev/tinyglobby/blob/main/CHANGELOG.md) - [Commits](SuperchupuDev/tinyglobby@0.2.15...0.2.17) Updates `webpack-dev-middleware` from 8.0.3 to 8.3.0 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v8.0.3...v8.3.0) Updates `ws` from 8.21.0 to 8.21.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.0...8.21.3) Updates `@babel/cli` from 7.28.6 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-cli) Updates `@babel/core` from 7.29.6 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core) Updates `@babel/eslint-parser` from 7.28.6 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/eslint/babel-eslint-parser) Updates `@babel/plugin-transform-object-assign` from 7.27.1 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-object-assign) Updates `@babel/preset-env` from 7.29.2 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-env) Updates `@changesets/cli` from 2.31.0 to 2.31.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/@changesets/cli@2.31.1/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.31.1/packages/cli) Updates `@hono/node-server` from 1.19.15 to 1.19.17 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](https://github.com/honojs/node-server/commits/v1.19.17) Updates `@types/node` from 24.10.1 to 24.13.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/picomatch` from 4.0.2 to 4.0.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch) Updates `acorn` from 8.16.0 to 8.18.0 - [Commits](acornjs/acorn@8.16.0...8.18.0) Updates `babel-loader` from 10.0.0 to 10.1.1 - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](babel/babel-loader@v10.0.0...v10.1.1) Updates `core-js` from 3.47.0 to 3.50.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.50.0/packages/core-js) Updates `css-loader` from 7.1.2 to 7.1.5 - [Release notes](https://github.com/webpack/css-loader/releases) - [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md) - [Commits](webpack/css-loader@v7.1.2...v7.1.5) Updates `eslint-plugin-n` from 17.23.1 to 17.24.0 - [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases) - [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md) - [Commits](eslint-community/eslint-plugin-n@v17.23.1...v17.24.0) Updates `expect` from 30.4.1 to 30.5.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/expect) Updates `hono` from 4.12.34 to 4.13.7 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.34...v4.13.7) Updates `html-webpack-plugin` from 5.6.5 to 5.6.8 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v5.6.5...v5.6.8) Updates `httpxy` from 0.5.3 to 0.5.5 - [Release notes](https://github.com/unjs/httpxy/releases) - [Changelog](https://github.com/unjs/httpxy/blob/main/CHANGELOG.md) - [Commits](unjs/httpxy@v0.5.3...v0.5.5) Updates `jest-mock` from 30.4.1 to 30.5.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/jest-mock) Updates `less` from 4.5.1 to 4.9.1 - [Release notes](https://github.com/less/less.js/releases) - [Changelog](https://github.com/less/less.js/blob/master/CHANGELOG.md) - [Commits](less/less.js@v4.5.1...v4.9.1) Updates `less-loader` from 12.3.0 to 12.3.3 - [Release notes](https://github.com/webpack/less-loader/releases) - [Changelog](https://github.com/webpack/less-loader/blob/main/CHANGELOG.md) - [Commits](webpack/less-loader@v12.3.0...v12.3.3) Updates `memfs` from 4.57.1 to 4.74.0 - [Release notes](https://github.com/streamich/memfs/releases) - [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md) - [Commits](streamich/memfs@v4.57.1...v4.74.0) Updates `prettier` from 3.6.2 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.6.2...3.9.6) Updates `pretty-format` from 30.4.1 to 30.5.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/pretty-format) Updates `puppeteer` from 25.3.0 to 25.10.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md) - [Commits](puppeteer/puppeteer@puppeteer-v25.3.0...puppeteer-v25.10.0) Updates `tcp-port-used` from 1.0.2 to 1.0.3 - [Commits](https://github.com/stdarg/tcp-port-used/commits) Updates `typescript-eslint` from 8.59.3 to 8.70.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint) Updates `webpack` from 5.108.0 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.0...v5.110.3) Updates `webpack-cli` from 7.2.1 to 7.2.3 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.1...webpack-cli@7.2.3) --- updated-dependencies: - dependency-name: "@types/express-serve-static-core" dependency-version: 5.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: bonjour-service dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: http-proxy-middleware dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ipaddr.js dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: open dependency-version: 11.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: p-retry dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: schema-utils dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tinyglobby dependency-version: 0.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: webpack-dev-middleware dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ws dependency-version: 8.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@babel/cli" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@babel/core" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@babel/eslint-parser" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@babel/plugin-transform-object-assign" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@babel/preset-env" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@changesets/cli" dependency-version: 2.31.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@hono/node-server" dependency-version: 1.19.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 24.13.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/picomatch" dependency-version: 4.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: acorn dependency-version: 8.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: babel-loader dependency-version: 10.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: core-js dependency-version: 3.50.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: css-loader dependency-version: 7.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: eslint-plugin-n dependency-version: 17.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: expect dependency-version: 30.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: hono dependency-version: 4.13.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: html-webpack-plugin dependency-version: 5.6.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: httpxy dependency-version: 0.5.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: jest-mock dependency-version: 30.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: less dependency-version: 4.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: less-loader dependency-version: 12.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: memfs dependency-version: 4.74.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pretty-format dependency-version: 30.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: puppeteer dependency-version: 25.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tcp-port-used dependency-version: 1.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: typescript-eslint dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: webpack-cli dependency-version: 7.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-09-14T02:06:31Z

⚠️ No Changeset found

Latest commit: 639a6ca

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-09-14T02:06:58Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Quality	Maintenance
	@babel/plugin-transform-object-assign@7.27.1 ⏵ 7.29.7			^-1
	less@4.5.1 ⏵ 4.9.1		⁺¹⁶	⁺²
	expect@30.4.1 ⏵ 30.5.1
	@types/picomatch@4.0.2 ⏵ 4.0.3
	typescript-eslint@8.59.3 ⏵ 8.70.0		⁺¹	^-1
	@types/express-serve-static-core@5.1.1 ⏵ 5.1.3	⁺¹	⁺¹
	@babel/preset-env@7.29.2 ⏵ 7.29.7			^-2
	@babel/cli@7.28.6 ⏵ 7.29.7
	@babel/eslint-parser@7.28.6 ⏵ 7.29.7
	tinyglobby@0.2.15 ⏵ 0.2.17	⁺¹
	@babel/core@7.29.6 ⏵ 7.29.7			⁺⁵
	@types/node@24.10.1 ⏵ 24.13.4	⁺¹	⁺¹	⁺¹
	p-retry@8.0.0 ⏵ 8.0.1		⁺¹
	ipaddr.js@2.3.0 ⏵ 2.5.0	⁺¹	⁺¹	⁺³
	css-loader@7.1.2 ⏵ 7.1.5
	tcp-port-used@1.0.2 ⏵ 1.0.3			⁺⁵
	bonjour-service@1.3.0 ⏵ 1.4.4			^-6
	httpxy@0.5.3 ⏵ 0.5.5	⁺¹	⁺¹	^-6
	babel-loader@10.0.0 ⏵ 10.1.1
	core-js@3.47.0 ⏵ 3.50.0	⁺¹	⁺¹	^-3
	acorn@8.16.0 ⏵ 8.18.0	⁺¹	⁺¹
	open@11.0.0 ⏵ 11.0.2	⁺¹	⁺¹	^-2
	html-webpack-plugin@5.6.5 ⏵ 5.6.8	⁺¹		⁺²
	less-loader@12.3.0 ⏵ 12.3.3	⁺¹		⁺³
	ws@8.21.0 ⏵ 8.21.3
	http-proxy-middleware@4.1.1 ⏵ 4.2.0	⁺¹		^-2
	schema-utils@4.3.3 ⏵ 4.4.0	⁺¹
	eslint-plugin-n@17.23.1 ⏵ 17.24.0			^-3
	puppeteer@25.3.0 ⏵ 25.10.0	⁺¹	⁺¹
	jest-mock@30.4.1 ⏵ 30.5.1		⁺¹
	webpack@5.108.0 ⏵ 5.110.3	⁺¹¹	⁺¹	⁺¹
	memfs@4.57.1 ⏵ 4.74.0	⁺¹	⁺¹	⁺²
See 7 more rows in the dashboard

View full report

dependabot · 2026-09-15T02:05:19Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026

dependabot Bot closed this Sep 15, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-5fbde30759 branch September 15, 2026 02:05

Navigation Menu

Repository navigation

chore(deps): bump the dependencies group across 1 directory with 39 updates - #5737

chore(deps): bump the dependencies group across 1 directory with 39 updates#5737
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-5fbde30759

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Sep 14, 2026

Uh oh!

socket-security Bot commented Sep 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.4.4

What's Changed

New Contributors

1.4.3

1.4.2

What's Changed

1.4.1

What's Changed

1.4.0

What's Changed

New Contributors

v4.2.0

What's Changed

New Contributors

v4.2.0

2.5.0 - 2026-08-04

2.4.0 - 2026-05-03

v11.0.2

v11.0.1

v8.0.1

v4.4.0

Minor Changes

Patch Changes

4.3.3 (2025-10-02)

Bug Fixes

4.3.2 (2025-04-22)

Bug Fixes

4.3.1 (2025-04-22)

Bug Fixes

4.4.0

Minor Changes

Patch Changes

0.2.17

Changed

Fixed

0.2.16

Fixed

Changed

0.2.17

Changed

Fixed

0.2.16

Fixed

Changed

v8.3.0

Minor Changes

Patch Changes

v8.2.0

Minor Changes

v8.1.1

Patch Changes

v8.1.0

Minor Changes

v8.0.4

Patch Changes

8.3.0

Minor Changes

Patch Changes

8.2.0

Minor Changes

8.1.1

Patch Changes

8.1.0

Minor Changes

8.0.4

Patch Changes

8.21.3

Bug fixes

8.21.2

Bug fixes

8.21.1

Bug fixes

v7.29.7 (2026-05-25)

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading