fix(deps): update all non-major dependencies - #112
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
December 10, 2025 02:11
08595de to
5f212ef
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
December 16, 2025 09:45
b6fb25b to
f55440d
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
December 19, 2025 21:38
f55440d to
1fa3af4
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
December 28, 2025 17:29
1fa3af4 to
b8f91f3
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
January 12, 2026 21:42
a781695 to
8d9a52e
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
January 19, 2026 19:38
f4df708 to
1a0994d
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
January 22, 2026 01:52
7a70566 to
46f7b6a
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
February 6, 2026 01:54
2450b8f to
b68778a
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
February 14, 2026 04:36
977e633 to
9c088c2
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
March 3, 2026 01:07
9c088c2 to
6004f0d
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
March 11, 2026 03:13
6004f0d to
cc9b7a3
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
April 1, 2026 21:13
d7aae4d to
713bbdb
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
May 9, 2026 04:48
42118e7 to
e54b0d7
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
May 19, 2026 11:05
434d3c5 to
756a11e
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
May 28, 2026 17:00
3a66083 to
2d901cd
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
June 5, 2026 10:28
a8af4a1 to
393c9a4
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
June 13, 2026 19:53
2b32893 to
0fe4047
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
June 18, 2026 19:48
0fe4047 to
45f9452
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
June 30, 2026 02:55
5df622d to
6bb81c7
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
July 16, 2026 18:04
0385ec4 to
85f65b7
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.28.5→7.29.7v5.1.1→v5.1.25.5.4→5.5.610.5.1→10.10.04.17.21→4.18.18.4.*→8.5.*8.5.6→8.5.263.6.2→3.9.61.94.1→1.103.116.0.6→16.0.83.13.5→3.13.616.25.0→16.26.16.12.1→6.14.05.0.1→5.1.010.2.0→10.4.13.2.0→3.4.1Release Notes
babel/babel (@babel/eslint-parser)
v7.29.7Compare Source
v7.29.7 (2026-05-25)
Re-release all packages with npm provenance attestations
v7.28.6Compare Source
v7.28.6 (2026-01-12)
Thanks @kadhirash and @kolvian for your first PRs!
🐛 Bug Fix
babel-cli,babel-code-frame,babel-core,babel-helper-check-duplicate-nodes,babel-helper-fixtures,babel-helper-plugin-utils,babel-node,babel-plugin-transform-flow-comments,babel-plugin-transform-modules-commonjs,babel-plugin-transform-property-mutators,babel-preset-env,babel-traverse,babel-typesbabel-plugin-transform-regeneratortransform-regeneratorcorrectly handles scope (@liuxingbaoyu)babel-plugin-transform-react-jsx💅 Polish
babel-core,babel-standalone🏠 Internal
babel-plugin-bugfix-v8-static-class-fields-redefine-readonly,babel-plugin-proposal-decorators,babel-plugin-proposal-import-attributes-to-assertions,babel-plugin-proposal-import-wasm-source,babel-plugin-syntax-async-do-expressions,babel-plugin-syntax-decorators,babel-plugin-syntax-destructuring-private,babel-plugin-syntax-do-expressions,babel-plugin-syntax-explicit-resource-management,babel-plugin-syntax-export-default-from,babel-plugin-syntax-flow,babel-plugin-syntax-function-bind,babel-plugin-syntax-function-sent,babel-plugin-syntax-import-assertions,babel-plugin-syntax-import-attributes,babel-plugin-syntax-import-defer,babel-plugin-syntax-import-source,babel-plugin-syntax-jsx,babel-plugin-syntax-module-blocks,babel-plugin-syntax-optional-chaining-assign,babel-plugin-syntax-partial-application,babel-plugin-syntax-pipeline-operator,babel-plugin-syntax-throw-expressions,babel-plugin-syntax-typescript,babel-plugin-transform-async-generator-functions,babel-plugin-transform-async-to-generator,babel-plugin-transform-class-properties,babel-plugin-transform-class-static-block,babel-plugin-transform-dotall-regex,babel-plugin-transform-duplicate-named-capturing-groups-regex,babel-plugin-transform-explicit-resource-management,babel-plugin-transform-exponentiation-operator,babel-plugin-transform-json-strings,babel-plugin-transform-logical-assignment-operators,babel-plugin-transform-nullish-coalescing-operator,babel-plugin-transform-numeric-separator,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-catch-binding,babel-plugin-transform-optional-chaining,babel-plugin-transform-private-methods,babel-plugin-transform-private-property-in-object,babel-plugin-transform-regexp-modifiers,babel-plugin-transform-unicode-property-regex,babel-plugin-transform-unicode-sets-regex🏃♀️ Performance
babel-plugin-transform-react-jsx__source,__self(@liuxingbaoyu)Committers: 7
easingthemes/ssh-deploy (easingthemes/ssh-deploy)
v5.1.2Compare Source
prettier/eslint-plugin-prettier (eslint-plugin-prettier)
v5.5.6Compare Source
Patch Changes
b5c96a3Thanks @JounQin! - chore: bump all (dev)Dependenciesv5.5.5Compare Source
Patch Changes
#772
7264ed0Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1#776
77651a3Thanks @aswils! - fix: bump synckit for yarn PnP ESM issuevuejs/eslint-plugin-vue (eslint-plugin-vue)
v10.10.0Compare Source
v10.9.2Compare Source
Patch Changes
vue/custom-event-name-casingto check segments of colon-separated event names likeupdate:foo-bar(#3079)vue/one-component-per-fileto not report functions not imported from Vue (#3063)vue/prefer-import-from-vueto not report imports/exports of names that are not re-exported byvue(#3081)vue/return-in-computed-propertyandvue/require-render-returnto not report exhaustive switch statements when TypeScript type information is available (#3067)v10.9.1Compare Source
Patch Changes
vue-eslint-parserto fix parsing errors in Vue SFCs (#3075)v10.9.0Compare Source
Minor Changes
"inject"togroupsoption invue/no-unused-propertiesrule (#3052)ignoresoption tovue/no-literals-in-templaterule (#3072):single-line/:multi-linepseudo-classes invue/padding-line-between-tags(#3025)vue/prefer-v-modelrule (#3062)vue/prefer-single-event-payloadrule (#3058)Patch Changes
vue/no-irregular-whitespace(#3065)vue/max-len(#3066)vue/no-child-contentrule (#3068)AttrsandAllowedAttrstype definitions (#3059)geolocationHTML element andClassValueandInputAutoCompleteAttributeVue 3 export (#3040)v10.8.0Compare Source
Minor Changes
eslint-parser-vuev10.3.0) (#2962)Promisefunctions tovue/no-async-in-computed-properties(#3020)ignoreVBindObjectoption tovue/attributes-order(#3012)allowEmptyAliasoption tovue/valid-v-for(#3011)destructure: "only-when-assigned"option tovue/define-props-destructuringand changed default value fromdestructure: "always"todestructure: "only-when-assigned"(#3009)Patch Changes
vue/no-unused-varsto detect components passed as slot props (#3008)v10.7.0Compare Source
Minor Changes
-errorconfig variants, with all rules' severity set toerror:strongly-recommended-error,recommended-error,vue2-strongly-recommended-error,vue2-recommended-error(along with their flat config equivalents) (#2796)vue/no-literals-in-templaterule (#3000)vue/no-undef-directivesrule (#2990)ignoreEOLCommentsoption tovue/no-multi-spacesrule (#2989)vue/no-negated-v-if-conditionsuggestion to autofix (#2984)Patch Changes
vue/define-props-destructuringrule when imported types are passed todefineProps(#2995)DirectiveModifiers(#2996)nodeOpsandpatchProp(#2986)v10.6.2Compare Source
Patch Changes
vue/no-duplicate-class-namesand correctly detect duplicates in combining expressions (#2980)TSImportTypeinvue/script-indentrule (#2969)vue/prefer-use-template-ref(#2982)v10.6.1Compare Source
Patch Changes
<template>invue/no-multiple-template-rootrule (#2964)v10.6.0Compare Source
Minor Changes
vue/no-import-compiler-macrosto clarify that macros are not allowed outside<script setup>(#2938)vue/no-duplicate-class-namesrule (#2934)Patch Changes
vue/no-v-htmlrule to allow ignoring call expressions (#2950)vue/define-macros-ordererror messages to distinguish between macro placement and ordering issues (#2953)lodash/lodash (lodash)
v4.18.1Compare Source
Bugs
Fixes a
ReferenceErrorissue inlodashlodash-eslodash-amdandlodash.templatewhen using thetemplateandfromPairsfunctions from the modular builds. See #6167 (comment)These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.
There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:
lodash: lodash/lodash@4.18.0-npm...4.18.1-npmlodash-es: lodash/lodash@4.18.0-es...4.18.1-eslodash-amd: lodash/lodash@4.18.0-amd...4.18.1-amdlodash.templatelodash/lodash@4.18.0-npm-packages...4.18.1-npm-packagesv4.18.0Compare Source
v4.18.0
Full Changelog: lodash/lodash@4.17.23...4.18.0
Security
_.unset/_.omit: Fixed prototype pollution viaconstructor/prototypepath traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Nowconstructorandprototypeare blocked unconditionally as non-terminal path keys, matchingbaseSet. Calls that previously returnedtrueand deleted the property now returnfalseand leave the target untouched._.template: Fixed code injection viaimportskeys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. Thevariableoption was validated againstreForbiddenIdentifierCharsbutimportsKeyswas left unguarded, allowing code injection via the sameFunction()constructor sink.importskeys containing forbidden identifier characters now throw"Invalid imports option passed into _.template".Docs
_.templatein threat model and API docs (#6099)lower > upperbehavior in_.random(#6115)_.compactjsdoc (#6090)lodash.*modular packagesDiff
We have also regenerated and published a select number of the
lodash.*modular packages.These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:
v4.17.23Compare Source
containerbase/php-prebuild (php)
v8.5.10Compare Source
Bug Fixes
v8.5.9Compare Source
Bug Fixes
v8.5.8Compare Source
Bug Fixes
v8.5.7Compare Source
Bug Fixes
v8.5.6Compare Source
Bug Fixes
v8.5.5Compare Source
Bug Fixes
v8.5.4Compare Source
Bug Fixes
v8.5.3Compare Source
Bug Fixes
v8.5.2Compare Source
Bug Fixes
v8.5.1Compare Source
Bug Fixes
v8.5.0Compare Source
Bug Fixes
postcss/postcss (postcss)
v8.5.26Compare Source
list.split()regression (by @lazerg).v8.5.25Compare Source
list.split()for non-string values (by @amir-rezaei).v8.5.24Compare Source
v8.5.23Compare Source
opts.fromfor security reasons.v8.5.22Compare Source
v8.5.21Compare Source
v8.5.20Compare Source
AtRule#paramsis set after (by @sarathfrancis90).v8.5.19Compare Source
beforefor new nodes inserted toRoot(by @MahinAnowar).v8.5.18Compare Source
opts.fromfolder for security reasons (useunsafeMap: trueto disable the check).v8.5.17Compare Source
Maximum call stack size exceedederror.postcss.fromJSON().Input#origin()for unmapped end position (by @chatman-media).v8.5.16Compare Source
Input#origin()position (by @mizdra).rawsafter rehydrating a JSON AST (by @sarathfrancis90).nodesof new node (by @MahinAnowar).offsetinpositionBy()(by @greymoth-jp).rangeBy()onindex: 0(by @sarathfrancis90).v8.5.15Compare Source
v8.5.14Compare Source
v8.5.13Compare Source
postcss-scsscommend regression.v8.5.12Compare Source
opts.unsafeMapto disable checks.v8.5.11Compare Source
v8.5.10Compare Source
</style>in non-bundler cases (by @TharVid).v8.5.9Compare Source
v8.5.8Compare Source
Processor#version.v8.5.7Compare Source
prettier/prettier (prettier)
v3.9.6Compare Source
v3.9.5Compare Source
diff
Markdown: Cap ordered list mark at 999,999,999 (#19351 by @tats-u)
CommonMark parsers only support ordered list item numbers up to 999,999,999.
With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:
Markdown: Avoid corrupting empty link with title (#19487 by @andersk)
Do not remove
<>from an inline link or image with an empty URL and a title, as this removal would change its interpretation.Less: Remove extra spaces after
[in map lookups (#19503 by @kovsu)CSS: Prevent addition space in
type()with+(#19516 by @bigandy)This fixes the addition space before
+in CSStype()declaration. For exampletype(<number>+)was being converted intotype(<number> +)which is invalid CSS and does not work.Less: Remove spaces between merge markers and colons (#19517 by @kovsu)
Markdown: Preserve wiki links with aliases (#19527 by @kovsu)
TypeScript: Fix comments being dropped on shorthand
typeimport/export specifiers (#19565 by @kirkwaiblinger)Miscellaneous: Preserving comments'
placementproperty (#19567 by @Janther)Prettier@3.9.0 deleted an undocumented property on comments, which was already used by plugins,
comment.placementis now available again after comment attach.Flow: Stop enforcing empty module declaration to break (#19568 by @fisker)
Angular: Support expression for exhaustive typechecking (#19571 by @fisker)
TypeScript: Ignore comments inside mapped type when checking type parameter comments (#19572 by @fisker)
Less: Fix adjacent block comments being corrupted (#19574 by @kovsu)
JavaScript: Handle dangling comments in
SwitchStatement(#19581 by @fisker)TypeScript: Remove space in comment-only object type (#19583 by @fisker)
v3.9.4Compare Source
v3.9.3Compare Source
v3.9.2Compare Source
v3.9.1Compare Source
v3.9.0Compare Source
diff
🔗 Release Notes
v3.8.5Compare Source
v3.8.4Compare Source
diff
Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @byplayer)
Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.
v3.8.3Compare Source
diff
SCSS: Prevent trailing comma in
if()function (#18471 by @kovsu)v3.8.2Compare Source
diff
Angular: Support Angular v21.2 (#18722, #19034 by @fisker)
Exhaustive typechecking with
@default never;arrow functionandinstanceofexpressions.v3.8.1Compare Source
diff
Include available
printersin plugin type declarations (#18706 by @porada)v3.8.0Compare Source
diff
🔗 Release Notes
v3.7.4Compare Source
diff
LWC: Avoid quote around interpolations (#18383 by @kovsu)
TypeScript: Fix comment inside union type gets duplicated (#18393 by @fisker)
TypeScript: Fix unstable comment print in union type comments (#18395 by @fisker)
v3.7.3Compare Source
diff
API: Fix
prettier.getFileInfo()change that breaks VSCode extension (#18375 by @fisker)An internal refactor accidentally broke the VSCode extension plugin loading.
v3.7.2Compare Source
diff
JavaScript: Fix string print when switching quotes (#18351 by @fisker)
JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @kovsu)
TypeScript: Fix comment in empty type literal (#18364 by @fisker)
v3.7.1Compare Source
diff
API: Fix performance regression in doc printer (#18342 by @fisker)
Prettier 3.7.0 can be very slow when formatting big files, the regression has been fixed.
v3.7.0Compare Source
diff
🔗 Release Notes
sass/dart-sass (sass)
v1.103.1Compare Source
v1.103.0Compare Source
sets" of missing channels during conversions, per the CSS spec. For example,
color.to-space(lch(50% none none), lab)now returnslab(50% none none)instead of
lab(50% 0 0).v1.102.0Compare Source
draft of CSS Color 4.
v1.101.7Compare Source
v1.101.6Compare Source
v1.101.5Compare Source
v1.101.4Compare Source
rgb()orrgba()functions with non-percent decimalchann
Configuration
📅 Schedule: (UTC)
* 0-3 1 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.