Skip to content

fix(deps): update npm non-major dependencies#3975

Merged
olemartinorg merged 2 commits intomainfrom
renovate/npm-minor-patch
Feb 24, 2026
Merged

fix(deps): update npm non-major dependencies#3975
olemartinorg merged 2 commits intomainfrom
renovate/npm-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 29, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@babel/core (source) 7.28.57.29.0 age confidence
@babel/plugin-transform-runtime (source) 7.28.57.29.0 age confidence
@babel/preset-env (source) 7.28.57.29.0 age confidence
@babel/runtime (source) 7.28.47.28.6 age confidence
@babel/runtime-corejs3 (source) 7.28.47.29.0 age confidence
@eslint/compat (source) 2.0.12.0.2 age confidence
@faker-js/faker (source) 10.2.010.3.0 age confidence
@percy/cli (source) 1.31.71.31.8 age confidence
@tanstack/react-query (source) 5.90.165.90.21 age confidence
@tanstack/react-query-devtools (source) 5.91.25.91.3 age confidence
@testing-library/react 16.3.116.3.2 age confidence
@types/node (source) 24.10.724.10.13 age confidence
@types/react (source) 19.2.819.2.14 age confidence
caniuse-lite 1.0.300017641.0.30001770 age confidence
core-js (source) 3.47.03.48.0 age confidence
css-loader 7.1.27.1.4 age confidence
cypress (source) 15.8.215.10.0 age confidence
dotenv 17.2.317.3.1 age confidence
eslint-plugin-cypress 5.2.15.3.0 age confidence
eslint-plugin-prettier 5.5.45.5.5 age confidence
eslint-plugin-sonarjs (source) 3.0.53.0.7 age confidence
globals 17.0.017.3.0 age confidence
html-react-parser 5.2.115.2.17 age confidence
immer 11.1.311.1.4 age confidence
lru-cache 11.2.411.2.6 age confidence
marked (source) 17.0.117.0.3 age confidence
mini-css-extract-plugin 2.9.42.10.0 age confidence
prettier (source) 3.7.43.8.1 age confidence
react (source) 19.2.319.2.4 age confidence
react-content-loader 7.1.17.1.2 age confidence
react-day-picker (source) 9.13.09.13.2 age confidence
react-dom (source) 19.2.319.2.4 age confidence
react-dropzone 14.3.814.4.1 age confidence
typescript-eslint (source) 8.52.08.56.0 age confidence
webpack 5.104.15.105.2 age confidence
webpack-dev-server 5.2.25.2.3 age confidence
zod (source) 4.3.54.3.6 age confidence
zustand 5.0.105.0.11 age confidence

Release Notes

babel/babel (@​babel/core)

v7.29.0

Compare Source

v7.29.0 (2026-01-31)

Thanks @​simbahax for your first PR!

🚀 New Feature
🐛 Bug Fix
  • babel-parser
  • babel-traverse
    • #​17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@​simbahax)
  • babel-plugin-transform-block-scoping, babel-traverse
    • #​17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@​magic-akari)
🏃‍♀️ Performance
Committers: 6

v7.28.6

Compare Source

eslint/rewrite (@​eslint/compat)

v2.0.2

Compare Source

Bug Fixes
Dependencies
  • The following workspace dependencies were updated
faker-js/faker (@​faker-js/faker)

v10.3.0

Compare Source

New Locales
Features
Changed Locales
Bug Fixes
percy/cli (@​percy/cli)

v1.31.8

Compare Source

What's Changed

✨ Enhancements

New Contributors

Full Changelog: percy/cli@v1.31.7...v1.31.8

TanStack/query (@​tanstack/react-query)

v5.90.21

Compare Source

Patch Changes
  • refactor(react-query/useQueries): remove unreachable 'willFetch' branch in suspense promise collection (#​10082)

v5.90.20

Compare Source

Patch Changes

v5.90.19

Compare Source

Patch Changes

v5.90.18

Compare Source

Patch Changes

v5.90.17

Compare Source

Patch Changes
TanStack/query (@​tanstack/react-query-devtools)

v5.91.3

Compare Source

Patch Changes
testing-library/react-testing-library (@​testing-library/react)

v16.3.2

Compare Source

browserslist/caniuse-lite (caniuse-lite)

v1.0.30001770

Compare Source

v1.0.30001769

Compare Source

v1.0.30001768

Compare Source

v1.0.30001767

Compare Source

v1.0.30001766

Compare Source

v1.0.30001765

Compare Source

zloirock/core-js (core-js)

v3.48.0

Compare Source

  • Changes v3.47.0...v3.48.0 (126 commits)
  • Map upsert proposal:
    • Built-ins:
      • Map.prototype.getOrInsert
      • Map.prototype.getOrInsertComputed
      • WeakMap.prototype.getOrInsert
      • WeakMap.prototype.getOrInsertComputed
    • Moved to stable ES, January 2026 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespaces entries
  • Use CreateDataProperty / CreateDataPropertyOrThrow in some missed cases, #​1497
  • Minor fix / optimization in the RegExp constructor (NCG and dotAll) polyfill
  • Added some more workarounds for a Safari < 13 bug with silent ignore of non-writable array .length
  • Added detection of a Webkit bug: Iterator.prototype.flatMap throws on iterator without return method
  • Added detection of a V8 ~ Chromium < 144 bug: Uint8Array.prototype.setFromHex throws an error on length-tracking views over ResizableArrayBuffer
  • Compat data improvements:
webpack/css-loader (css-loader)

v7.1.4

Compare Source

v7.1.3

Compare Source

cypress-io/cypress (cypress)

v15.10.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-10-0

v15.9.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-9-0

motdotla/dotenv (dotenv)

v17.3.1

Compare Source

Changed
  • Fix as2 example command in README and update spanish README

v17.3.0

Compare Source

Added
  • Add a new README section on dotenv’s approach to the agentic future.
Changed
  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

v17.2.4

Compare Source

Changed
  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#​915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.
cypress-io/eslint-plugin-cypress (eslint-plugin-cypress)

v5.3.0

Compare Source

Features
prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.5.5

Compare Source

Patch Changes
SonarSource/SonarJS (eslint-plugin-sonarjs)

v3.0.7

Compare Source

v3.0.6

Compare Source

sindresorhus/globals (globals)

v17.3.0

Compare Source


v17.2.0

Compare Source

  • jasmine: Add throwUnless and throwUnlessAsync globals (#​335) 97f23a7

v17.1.0

Compare Source


remarkablemark/html-react-parser (html-react-parser)

v5.2.17

Compare Source

Bug Fixes

v5.2.16

Compare Source

Build System

v5.2.15

Compare Source

Bug Fixes
  • esm: set explicit file extension for ./lib/utilities (d8fd0c5)

v5.2.14

Compare Source

Reverts

v5.2.13

Compare Source

Build System

v5.2.12

Compare Source

Performance Improvements
immerjs/immer (immer)

v11.1.4

Compare Source

Bug Fixes
  • handle nested proxies after spreading and inserting into an array (90a7765)
isaacs/node-lru-cache (lru-cache)

v11.2.6

Compare Source

v11.2.5

Compare Source

markedjs/marked (marked)

v17.0.3

Compare Source

Bug Fixes

v17.0.2

Compare Source

webpack/mini-css-extract-plugin (mini-css-extract-plugin)

v2.10.0

Compare Source

Features
  • respect output.cssFilename and output.cssChunkFilename (#​1151) (54f775d)
Bug Fixes
  • prevent generation of a contentHash for a chunk when the set of css modules is of size 0 (#​1154) (4e4a95d)
2.9.4 (2025-08-11)
Bug Fixes
2.9.3 (2025-08-04)
Bug Fixes
  • should update initial chunks correctly with filename (dab023f)
2.9.2 (2024-11-01)
Bug Fixes
2.9.1 (2024-08-19)
Bug Fixes
  • add export default {} when CSS modules enabled and a file is empty for the defaultExport option (8f77e19)
prettier/prettier (prettier)

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

facebook/react (react)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components
danilowoz/react-content-loader (react-content-loader)

v7.1.2

Compare Source

Bug Fixes
gpbl/react-day-picker (react-day-picker)

v9.13.2

Compare Source

What's Changed

  • fix(build): add correct type declaration for style.css export by @​NotNestor in #​2897
  • fix(locale): correct Northern Sami (se) and Japanese Hiragana (ja-Hira) labels by @​gpbl in #​2898

New Contributors

Full Changelog: gpbl/react-day-picker@v9.13.1...v9.13.2

v9.13.1

Compare Source

Persian calendar improvements.

What's Changed
New Contributors

Full Changelog: gpbl/react-day-picker@v9.13.0...v9.13.1

react-dropzone/react-dropzone (react-dropzone)

v14.4.1

Compare Source

v14.4.0

Compare Source

Bug Fixes
  • accept files with empty type during drag events (eaa8ba5)
  • correct dragLeave filter logic and add dragend test (273aff4)
Features
  • add isDragGlobal state for document-level drag detection (f0874b0)
typescript-eslint/typescript-eslint (typescript-eslint)

v8.56.0

Compare Source

🚀 Features
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

webpack/webpack (webpack)

v5.105.2

Compare Source

Patch Changes

v5.105.1

Compare Source

Patch Changes
  • Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #​20424)

  • Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #​20433)

  • Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #​20433)

v5.105.0

Compare Source

Minor Changes
  • Allow resolving worker module by export condition name when using new Worker() (by @​hai-x in #​20353)

  • Detect conditional imports to avoid compile-time linking errors for non-existent exports. (by @​hai-x in #​20320)

  • Added the tsconfig option for the resolver options (replacement for tsconfig-paths-webpack-plugin). Can be false (disabled), true (use the default tsconfig.json file to search for it), a string path to tsconfig.json, or an object with configFile and references options. (by @​alexander-akait in #​20400)

  • Support import.defer() for context modules. (by @​ahabhgk in #​20399)

  • Added support for array values ​​to the devtool option. (by @​hai-x in #​20191)

  • Improve rendering node built-in modules for ECMA module output. (by @​hai-x in #​20255)

  • Unknown import.meta properties are now determined at runtime instead of being statically analyzed at compile time. (by @​xiaoxiaojx in #​20312)

Patch Changes
  • Fixed ESM default export handling for .mjs files in Module Federation (by @​y-okt in #​20189)

  • Optimized import.meta.env handling in destructuring assignments by using cached stringified environment definitions. (by @​xiaoxiaojx in #​20313)

  • Respect the stats.errorStack option in stats output. (by @​samarthsinh2660 in #​20258)

  • Fixed a bug where declaring a module variable in module scope would conflict with the default moduleArgument. (by @​xiaoxiaojx in #​20265)

  • Fix VirtualUrlPlugin to set resourceData.context for proper module resol


Configuration

📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added backport-ignore This PR is a new feature and should not be cherry-picked onto release branches kind/dependencies Pull requests that update a dependency file labels Jan 29, 2026
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Jan 29, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/npm-minor-patch branch 11 times, most recently from 8b25f40 to 7c5411f Compare February 5, 2026 07:06
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch 16 times, most recently from 40fb2b0 to d8cf558 Compare February 12, 2026 12:47
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch 15 times, most recently from 3647224 to b231ed8 Compare February 19, 2026 19:09
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch 7 times, most recently from 39c5e6e to 948e975 Compare February 24, 2026 12:39
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 5a535cf to 34dd344 Compare February 24, 2026 13:17
@sonarqubecloud
Copy link

@olemartinorg olemartinorg merged commit 9dfb6f0 into main Feb 24, 2026
15 checks passed
@olemartinorg olemartinorg deleted the renovate/npm-minor-patch branch February 24, 2026 13:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-ignore This PR is a new feature and should not be cherry-picked onto release branches kind/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants