Skip to content

fix(deps): update npm - - package.json #1252

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update npm - - package.json #1252

wants to merge 1 commit into from
+325 −310

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 20, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@babel/core (source) ^7.28.4 -> ^7.28.5 age confidence
@babel/preset-react (source) ^7.27.1 -> ^7.28.5 age confidence
@esbuild/darwin-arm64 ^0.25.11 -> ^0.27.0 age confidence
@esbuild/darwin-x64 ^0.25.11 -> ^0.27.0 age confidence
@esbuild/linux-x64 0.25.11 -> 0.27.0 age confidence
@esbuild/win32-x64 0.25.11 -> 0.27.0 age confidence
@eslint/compat (source) ^1.4.0 -> ^1.4.1 age confidence
@eslint/js (source) ^9.37.0 -> ^9.39.1 age confidence
@eslint/json ^0.13.2 -> ^0.14.0 age confidence
@primer/octicons-react (source) ^19.19.0 -> ^19.21.0 age confidence
@types/express (source) ^5.0.3 -> ^5.0.5 age confidence
@types/node (source) ^22.18.10 -> ^22.19.1 age confidence
@types/validator (source) ^13.15.3 -> ^13.15.9 age confidence
@types/yargs (source) ^17.0.33 -> ^17.0.35 age confidence
axios (source) ^1.12.2 -> ^1.13.2 age confidence
bcryptjs ^3.0.2 -> ^3.0.3 age confidence
cypress (source) ^15.4.0 -> ^15.6.0 age confidence
eslint (source) ^9.37.0 -> ^9.39.1 age confidence
express-rate-limit ^8.1.0 -> ^8.2.1 age confidence
globals ^16.4.0 -> ^16.5.0 age confidence
isomorphic-git (source) ^1.34.0 -> ^1.35.0 age confidence
lint-staged ^16.2.4 -> ^16.2.6 age confidence
react-router-dom (source) 6.30.1 -> 6.30.2 age confidence
simple-git (source) ^3.28.0 -> ^3.30.0 age confidence
typescript-eslint (source) ^8.46.1 -> ^8.46.4 age confidence
validator ^13.15.15 -> ^13.15.23 age confidence

Release Notes

babel/babel (@​babel/core)

v7.28.5

Compare Source

👓 Spec Compliance
🐛 Bug Fix
  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse
🏠 Internal
🏃‍♀️ Performance
evanw/esbuild (@​esbuild/darwin-arm64)

v0.27.0

Compare Source

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.26.0 or ~0.26.0. See npm's documentation about semver for more information.

  • Use Uint8Array.fromBase64 if available (#​4286)

    With this release, esbuild's binary loader will now use the new Uint8Array.fromBase64 function unless it's unavailable in the configured target environment. If it's unavailable, esbuild's previous code for this will be used as a fallback. Note that this means you may now need to specify target when using this feature with Node (for example --target=node22) unless you're using Node v25+.

  • Update the Go compiler from v1.23.12 to v1.25.4 (#​4208, #​4311)

    This raises the operating system requirements for running esbuild:

    • Linux: now requires a kernel version of 3.2 or later
    • macOS: now requires macOS 12 (Monterey) or later

v0.26.0

Compare Source

  • Enable trusted publishing (#​4281)

    GitHub and npm are recommending that maintainers for packages such as esbuild switch to trusted publishing. With this release, a VM on GitHub will now build and publish all of esbuild's packages to npm instead of me. In theory.

    Unfortunately there isn't really a way to test that this works other than to do it live. So this release is that live test. Hopefully this release is uneventful and is exactly the same as the previous one (well, except for the green provenance attestation checkmark on npm that happens with trusted publishing).

v0.25.12

Compare Source

  • Fix a minification regression with CSS media queries (#​4315)

    The previous release introduced support for parsing media queries which unintentionally introduced a regression with the removal of duplicate media rules during minification. Specifically the grammar for @media <media-type> and <media-condition-without-or> { ... } was missing an equality check for the <media-condition-without-or> part, so rules with different suffix clauses in this position would incorrectly compare equal and be deduplicated. This release fixes the regression.

  • Update the list of known JavaScript globals (#​4310)

    This release updates esbuild's internal list of known JavaScript globals. These are globals that are known to not have side-effects when the property is accessed. For example, accessing the global Array property is considered to be side-effect free but accessing the global scrollY property can trigger a layout, which is a side-effect. This is used by esbuild's tree-shaking to safely remove unused code that is known to be side-effect free. This update adds the following global properties:

    From ES2017:

    • Atomics
    • SharedArrayBuffer

    From ES2020:

    • BigInt64Array
    • BigUint64Array

    From ES2021:

    • FinalizationRegistry
    • WeakRef

    From ES2025:

    • Float16Array
    • Iterator

    Note that this does not indicate that constructing any of these objects is side-effect free, just that accessing the identifier is side-effect free. For example, this now allows esbuild to tree-shake classes that extend from Iterator:

    // This can now be tree-shaken by esbuild:
class ExampleIterator extends Iterator {}

  • Add support for the new @view-transition CSS rule (#​4313)

    With this release, esbuild now has improved support for pretty-printing and minifying the new @view-transition rule (which esbuild was previously unaware of):

    /* Original code */
@&#8203;view-transition {
  navigation: auto;
  types: check;
}

/* Old output */
@&#8203;view-transition { navigation: auto; types: check; }

/* New output */
@&#8203;view-transition {
  navigation: auto;
  types: check;
}

    The new view transition feature provides a mechanism for creating animated transitions between documents in a multi-page app. You can read more about view transition rules here.

    This change was contributed by @​yisibl.

  • Trim CSS rules that will never match

    The CSS minifier will now remove rules whose selectors contain :is() and :where() as those selectors will never match. These selectors can currently be automatically generated by esbuild when you give esbuild nonsensical input such as the following:

    /* Original code */
div:before {
  color: green;
  &.foo {
    color: red;
  }
}

/* Old output (with --supported:nesting=false --minify) */
div:before{color:green}:is().foo{color:red}

/* New output (with --supported:nesting=false --minify) */
div:before{color:green}

    This input is nonsensical because CSS nesting is (unfortunately) not supported inside of pseudo-elements such as :before. Currently esbuild generates a rule containing :is() in this case when you tell esbuild to transform nested CSS into non-nested CSS. I think it's reasonable to do that as it sort of helps explain what's going on (or at least indicates that something is wrong in the output). It shouldn't be present in minified code, however, so this release now strips it out.

eslint/rewrite (@​eslint/compat)

v1.4.1

Compare Source

Dependencies
  • The following workspace dependencies were updated
eslint/eslint (@​eslint/js)

v9.39.1

Compare Source

v9.39.0

Compare Source

v9.38.0

Compare Source

Features
  • ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
  • e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)
Bug Fixes
  • 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
  • a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)
Documentation
  • 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
  • c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
  • b39e71a docs: Update README (GitHub Actions Bot)
  • cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)
Chores
eslint/json (@​eslint/json)

v0.14.0

Compare Source

Features
  • add support for getLocFromIndex and getIndexFromLoc (#​109) (3292cc1)
Bug Fixes
primer/octicons (@​primer/octicons-react)

v19.21.0

Compare Source

Minor Changes
Patch Changes

v19.20.0

Compare Source

Minor Changes
axios/axios (axios)

v1.13.2

Compare Source

Bug Fixes
  • http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#​7206) (8d37233)
  • http: use default export for http2 module to support stubs; (#​7196) (0588880)
Performance Improvements
Contributors to this release

v1.13.1

Compare Source

Bug Fixes
  • http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#​7193) (bcd5581)
Contributors to this release

v1.13.0

Compare Source

Bug Fixes
Features
Contributors to this release

1.12.2 (2025-09-14)

Bug Fixes
  • fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)
Contributors to this release

1.12.1 (2025-09-12)

Bug Fixes
Contributors to this release
dcodeIO/bcrypt.js (bcryptjs)

v3.0.3

Compare Source

Bug fixes
  • Always yield to event loop before nextTick for async versions (#​164) (1211e9a)
cypress-io/cypress (cypress)

v15.6.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-6-0

v15.5.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-5-0

eslint/eslint (eslint)

v9.39.1

Compare Source

v9.39.0

Compare Source

v9.38.0

Compare Source

Features

  • ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
  • e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)

Bug Fixes

  • 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
  • a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)

Documentation

  • 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
  • c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
  • b39e71a docs: Update README (GitHub Actions Bot)
  • cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)

Chores

express-rate-limit/express-rate-limit (express-rate-limit)

v8.2.1

Compare Source

You can view the changelog here.

v8.2.0

Compare Source

You can view the changelog here.

sindresorhus/globals (globals)

v16.5.0

Compare Source

isomorphic-git/isomorphic-git (isomorphic-git)

v1.35.0

Compare Source

Bug Fixes
Features

v1.34.2

Compare Source

Bug Fixes

v1.34.1

Compare Source

Bug Fixes
lint-staged/lint-staged (lint-staged)

v16.2.6

Compare Source

Patch Changes

v16.2.5

Compare Source

Patch Changes
  • #​1687 9e02d9d Thanks @​iiroj! - Fix unhandled promise rejection when spawning tasks (instead of the tasks themselves failing). Previously when a task failed to spawn, lint-staged also failed and the backup stash might not have been automatically restored.
remix-run/react-router (react-router-dom)

v6.30.2

Compare Source

steveukx/git-js (simple-git)

v3.30.0

Compare Source

Minor Changes

  • bc77774: Correctly identify current branch name when using git.status in a cloned empty repo.

    Previously git.status would report the current branch name as No. Thank you to @​MaddyGuthridge for identifying this issue.

v3.29.0

Compare Source

Minor Changes

  • 240ec64: Support for absolute paths on Windows when using git.checkIngore, previously Windows would report
    paths with duplicate separators \\\\ between directories.

    Following this change all paths returned from git.checkIgnore will be normalized through node:path,
    this should have no impact on non-windows users where the git binary doesn't wrap absolute paths with
    quotes.

    Thanks to @​Maxim-Mazurok for reporting this issue.

  • 9872f84: Support the use of git.branch(['--show-current']) to limit the branch list to only the current branch.

    Thanks to @​peterbe for pointing out the use-case.

  • 5736bd8: Change to biome for lint and format

typescript-eslint/typescript-eslint (typescript-eslint)

v8.46.4

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.3

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.46.2

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

validatorjs/validator.js (validator)

v13.15.23

Compare Source

Fixes, New Locales and Enhancements

v13.15.22

Compare Source

Fixes, New Locales and Enhancements

v13.15.20

Compare Source

Fixes, New Locales and Enhancements

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@netlify
Copy link

netlify bot commented Oct 20, 2025 •
edited
Loading

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name Link
🔨 Latest commit b75a830
🔍 Latest deploy log https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/6917b2401f644a00085ba641

@github-actions
Copy link

github-actions bot commented Oct 20, 2025 •
edited
Loading

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 9 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.

View full job summary

@codecov
Copy link

codecov bot commented Oct 20, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.35%. Comparing base (a2008c6) to head (b75a830).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #1252   +/-   ##
=======================================
  Coverage   83.35%   83.35%           
=======================================
  Files          70       70           
  Lines        3004     3004           
  Branches      499      499           
=======================================
  Hits         2504     2504           
  Misses        397      397           
  Partials      103      103

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot force-pushed the renovate/manager branch 8 times, most recently from 85d64ff to 5da299f Compare October 26, 2025 05:34
@renovate renovate bot changed the title chore(deps): update npm - - package.json fix(deps): update npm - - package.json Oct 26, 2025
@github-actions github-actions bot added the fix label Oct 26, 2025
@renovate renovate bot force-pushed the renovate/manager branch 16 times, most recently from 08b88f2 to 9b827d4 Compare November 3, 2025 00:53
@renovate renovate bot force-pushed the renovate/manager branch 13 times, most recently from e2f0f87 to 7e9df09 Compare November 9, 2025 21:08
@renovate renovate bot force-pushed the renovate/manager branch 5 times, most recently from c4238db to ee9175b Compare November 14, 2025 14:31
@renovate renovate bot force-pushed the renovate/manager branch from ee9175b to b75a830 Compare November 14, 2025 22:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

fix maintenance

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant