Chore(deps-dev): Bump the build group across 1 directory with 16 updates by dependabot[bot] · Pull Request #1120 · DEFRA/forms-runner

dependabot · 2026-03-09T11:14:46Z

Bumps the build group with 15 updates in the / directory:

Package	From	To
@babel/cli	`7.28.3`	`7.28.6`
@babel/core	`7.28.5`	`7.29.0`
@babel/plugin-syntax-import-attributes	`7.27.1`	`7.28.6`
@babel/preset-env	`7.28.5`	`7.29.0`
autoprefixer	`10.4.23`	`10.4.27`
babel-loader	`10.0.0`	`10.1.0`
copy-webpack-plugin	`13.0.1`	`14.0.0`
core-js	`3.47.0`	`3.48.0`
cssnano	`7.1.2`	`7.1.3`
postcss	`8.5.6`	`8.5.8`
postcss-loader	`8.2.0`	`8.2.1`
sass-loader	`16.0.6`	`16.0.7`
terser-webpack-plugin	`5.3.16`	`5.3.17`
webpack	`5.104.1`	`5.105.4`
webpack-assets-manifest	`6.5.0`	`6.5.1`

Updates @babel/cli from 7.28.3 to 7.28.6

Release notes

Sourced from @babel/cli's releases.

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-plugin-transform-react-jsx

#17555 perf: Use lighter traversal for jsx __source,__self (@liuxingbaoyu)

Committers: 7

Babel Bot (@babel-bot)

Eliot Pontarelli (@kolvian)

Huáng Jùnliàng (@JLHwung)

Kadhirash Sivakumar (@kadhirash)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

coderaiser (@coderaiser)

v7.28.5 (2025-10-23)

Thank you @CO0Ki3, @Olexandr88, and @youthfulhps for your first PRs!

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

... (truncated)

Commits

d7f4008 v7.28.6
99dcba5 chore: enable some ts-eslint rules (#17592)
d9fa9c5 [Babel 8]: Bump glob to v12 (#17594)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
83964de [Babel 8] chore: bump glob to v11 (#17590)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/cli since your current version.

Updates @babel/core from 7.28.5 to 7.29.0

Release notes

Sourced from @babel/core's releases.

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types

#17750 [7.x backport] Add attributes import declaration builder (@JLHwung)

babel-standalone

#17663 [7.x backport] feat(standalone): export async transform (@JLHwung)

#17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser

#17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)

#17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)

babel-traverse

#17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)

babel-plugin-transform-block-scoping, babel-traverse

#17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3

#17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

@magic-akari

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

... (truncated)

Commits

aa8394e v7.29.0
ad0d03f [7.x backport] feat: Allow specifying startLine in code frame (#17739)
d7f4008 v7.28.6
e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
d725e39 Add BABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK (#17569)
c1b55f6 Use eslint.config.mts (#17573)
See full diff in compare view

Updates @babel/plugin-syntax-import-attributes from 7.27.1 to 7.28.6

Release notes

Sourced from @babel/plugin-syntax-import-attributes's releases.

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-plugin-transform-react-jsx

#17555 perf: Use lighter traversal for jsx __source,__self (@liuxingbaoyu)

Committers: 7

Babel Bot (@babel-bot)

Eliot Pontarelli (@kolvian)

Huáng Jùnliàng (@JLHwung)

Kadhirash Sivakumar (@kadhirash)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

coderaiser (@coderaiser)

v7.28.5 (2025-10-23)

Thank you @CO0Ki3, @Olexandr88, and @youthfulhps for your first PRs!

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

... (truncated)

Commits

d7f4008 v7.28.6
445b575 Allow Babel 8 in compatible Babel 7 plugins (#17580)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/plugin-syntax-import-attributes since your current version.

Updates @babel/preset-env from 7.28.5 to 7.29.0

Release notes

Sourced from @babel/preset-env's releases.

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types

#17750 [7.x backport] Add attributes import declaration builder (@JLHwung)

babel-standalone

#17663 [7.x backport] feat(standalone): export async transform (@JLHwung)

#17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser

#17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)

#17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)

babel-traverse

#17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)

babel-plugin-transform-block-scoping, babel-traverse

#17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3

#17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

@magic-akari

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

... (truncated)

Commits

aa8394e v7.29.0
0053db6 Update polyfill packages (#17727)
f3a2226 [babel 7] Delete Babel 8 fixtures (#17729)
d7f4008 v7.28.6
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
See full diff in compare view

Updates autoprefixer from 10.4.23 to 10.4.27

Release notes

Sourced from autoprefixer's releases.

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

Made Autoprefixer a little faster (by @Cherry).

Changelog

Sourced from autoprefixer's changelog.

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

Made Autoprefixer a little faster (by @Cherry).

Commits

360f2d9 Release 10.4.27 version
ab5260c Update clean-publish
09e9dd1 Release 10.4.26 version
ec75540 Ignore local patches
59601b8 Update c8 and clean-publish
06ea988 Release 10.4.25 version
47d8a5b Update dependencies and fix Node.js 25
51c596e Add Node.js 25 and 24 to CI
5239823 Fix CSS variables in gradients (#1515) (#1544)
36692c2 Release 10.4.24 version
Additional commits viewable in compare view

Updates babel-loader from 10.0.0 to 10.1.0

Release notes

Sourced from babel-loader's releases.

v10.1.0

What's Changed

refactor: use module.findPackageJSON API by @JLHwung in babel/babel-loader#1055

Enable type checking and support Babel 8 by @JLHwung in babel/babel-loader#1056

Bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in babel/babel-loader#1059

fix: mark webpack as optional peer dependency by @chenjiahan in babel/babel-loader#1061

Bump webpack from 5.101.0 to 5.104.1 by @dependabot[bot] in babel/babel-loader#1062

Bump glob from 10.4.5 to 10.5.0 by @dependabot[bot] in babel/babel-loader#1060

Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in babel/babel-loader#1063

Pin Node.js on CI by @nicolo-ribaudo in babel/babel-loader#1064

New Contributors

@chenjiahan made their first contribution in babel/babel-loader#1061

Full Changelog: babel/babel-loader@v10.0.0...v10.1.0

Commits

de09ee1 10.1.0
e34c360 Pin Node.js on CI (#1064)
3c1e180 Bump minimatch from 3.1.2 to 3.1.5 (#1063)
e0d4add Bump glob from 10.4.5 to 10.5.0 (#1060)
77e2a66 Bump webpack from 5.101.0 to 5.104.1 (#1062)
faa5dbb fix: mark webpack as optional peer dependency (#1061)
146dad2 Bump js-yaml from 4.1.0 to 4.1.1 (#1059)
2479ed2 Enable type checking and support Babel 8 (#1056)
242e7d2 refactor: use module.findPackageJSON API (#1055)
See full diff in compare view

Updates copy-webpack-plugin from 13.0.1 to 14.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

update serialize-javascript to fix security problems

Changelog

Sourced from copy-webpack-plugin's changelog.

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

update serialize-javascript to fix security problems

Commits

18eb9d9 chore(release): 14.0.0
2881203 refactor!: minimum supported Node.js version is 20.9.0 (#819)
9dc3d31 chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 (#815)
5cf5a1d chore(deps): update (#814)
3dd5b6e chore(deps): bump js-yaml (#813)
9ac38bb chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#812)
6a16bac Update link to contributing guidelines in README
a1625f9 chore: migrate from contrib (#810)
9f6f204 chore: update github actions/checkout from v4 to v5 (#809)
See full diff in compare view

Updates core-js from 3.47.0 to 3.48.0

Changelog

Sourced from core-js's changelog.

3.48.0 - 2026.01.21

Changes v3.47.0...v3.48.0 (126 commits)

Map upsert proposal:

Built-ins:

Map.prototype.getOrInsert

Map.prototype.getOrInsertComputed

WeakMap.prototype.getOrInsert

WeakMap.prototype.getOrInsertComputed

Moved to stable ES, January 2026 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespaces entries

Use CreateDataProperty / CreateDataPropertyOrThrow in some missed cases, #1497

Minor fix / optimization in the RegExp constructor (NCG and dotAll) polyfill

Added some more workarounds for a Safari < 13 bug with silent ignore of non-writable array .length

Added detection of a Webkit bug: Iterator.prototype.flatMap throws on iterator without return method

Added detection of a V8 ~ Chromium < 144 bug: Uint8Array.prototype.setFromHex throws an error on length-tracking views over ResizableArrayBuffer

Compat data improvements:

Map upsert proposal features marked as shipped in V8 ~ Chrome 145

Joint iteration proposal features marked as shipped in FF148

Iterator.concat marked as shipped in Bun 1.3.7

Added Rhino 1.9.0 compat data

Added Deno 2.6 compat data mapping

Added Opera Android 93 and 94 compat data mapping

Added Electron 41 compat data mapping

Iterator.prototype.flatMap marked as supported from Safari 26.2 and Bun 1.2.21 because of a bug: throws on iterator without return method

Uint8Array.prototype.setFromHex marked as supported from V8 ~ Chromium 144 because of a bug: throws an error on length-tracking views over ResizableArrayBuffer

Commits

5d657da v3.48.0
5644e73 Add bug detection for Uint8Array.prototype.setFromHex
804a10e Merge pull request #1501 from zloirock/flat-map-fix
45d7fe3 Add bug detection to Iterator flatMap method
efd9c2f move Map upsert proposal to stable ES
dcb938d update the year and normalize the copyright wording
5454a5d add some more workarounds for a Safari < 13 bug with silent ignore of non-wri...
73d4b6c add some more createProperty cases
9c89290 fix: spec compliance for Array.prototype.flat and flatMap
e3774ce fix: use createProperty in Array.prototype.filter
Additional commits viewable in compare view

Updates cssnano from 7.1.2 to 7.1.3

Release notes

Sourced from cssnano's releases.

v7.1.3

What's Changed

Optimize mergeRule selector merging with WeakMap caching by @Goodwine in cssnano/cssnano#1748

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.2...cssnano@7.1.3

Commits

b2e9903 Publish cssnano 7.1.3
a9f72ef chore: update development dependencies
5674f7a fix(postcss-svgo: update SVGO
c3e537a fix: update postcss-selector-parser
5b9af42 fix: update browserlist and autoprefixer
c0053c8 chore: add changeset
da88eca Optimize selector merging with WeakMap caching
cf4fc27 chore(deps-dev): bump diff from 8.0.2 to 8.0.3
a985c71 chore: update pnpm
4b2a74a chore: update to ESLint 10
Additional commits viewable in compare view

Updates cssnano-preset-default from 7.0.10 to 7.0.11

Commits

b2e9903 Publish cssnano 7.1.3
a9f72ef chore: update development dependencies
5674f7a fix(postcss-svgo: update SVGO
c3e537a fix: update postcss-selector-parser
5b9af42 fix: update browserlist and autoprefixer
c0053c8 chore: add changeset
da88eca Optimize selector merging with WeakMap caching
cf4fc27 chore(deps-dev): bump diff from 8.0.2 to 8.0.3
a985c71 chore: update pnpm
4b2a74a chore: update to ESLint 10
Additional commits viewable in compare view

Updates postcss from 8.5.6 to 8.5.8

Release notes

Sourced from postcss's releases.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

Changelog

Sourced from postcss's changelog.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

Commits

65de537 Release 8.5.8 version
b2c6d97 Run git hook register
0ae0a49 Update Processor#version
6ee9f14 Release 8.5.7 version
3fbc951 Fix uvu Node.js 25 support
52db53e Update dependencies
497daef Speed up source map annotation cleaning by moving from RegExp
41e739a Remove banner
1329142 chore: speed up space-only string check in lib/parser.js (#2064)
23beff9 Update dependencies
Additional commits viewable in compare view

Updates postcss-loader from 8.2.0 to 8.2.1

Release notes

Sourced from postcss-loader's releases.

v8.2.1

8.2.1 (2026-02-15)

Bug Fixes

update peer dependency for @rspack/core v2 (#717) (a3ed7e2)

Changelog

Sourced from postcss-loader's changelog.

8.2.1 (2026-02-15)

Bug Fixes

update peer dependency for @rspack/core v2 (#717) (a3ed7e2)

Commits

583677e chore(release): 8.2.1
a3ed7e2 fix: update peer dependency for @rspack/core v2 (#717)
c984ff4 test: fix (#715)
cc01d2b ci: fix
d4faa34 docs: update contributing
b1e4fa5 chore: correct link (#713)
d990168 chore: migration to main org and branch (#712)
See full diff in co...
Description has been truncated

Bumps the build group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `7.28.3` | `7.28.6` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.5` | `7.29.0` | | [@babel/plugin-syntax-import-attributes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-attributes) | `7.27.1` | `7.28.6` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.28.5` | `7.29.0` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.23` | `10.4.27` | | [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.0` | | [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) | `13.0.1` | `14.0.0` | | [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.47.0` | `3.48.0` | | [cssnano](https://github.com/cssnano/cssnano) | `7.1.2` | `7.1.3` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` | | [postcss-loader](https://github.com/webpack/postcss-loader) | `8.2.0` | `8.2.1` | | [sass-loader](https://github.com/webpack/sass-loader) | `16.0.6` | `16.0.7` | | [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin) | `5.3.16` | `5.3.17` | | [webpack](https://github.com/webpack/webpack) | `5.104.1` | `5.105.4` | | [webpack-assets-manifest](https://github.com/webdeveric/webpack-assets-manifest) | `6.5.0` | `6.5.1` | Updates `@babel/cli` from 7.28.3 to 7.28.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.6/packages/babel-cli) Updates `@babel/core` from 7.28.5 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-core) Updates `@babel/plugin-syntax-import-attributes` from 7.27.1 to 7.28.6 - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.28.6/packages/babel-plugin-syntax-import-attributes) Updates `@babel/preset-env` from 7.28.5 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-preset-env) Updates `autoprefixer` from 10.4.23 to 10.4.27 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.23...10.4.27) Updates `babel-loader` from 10.0.0 to 10.1.0 - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](babel/babel-loader@v10.0.0...v10.1.0) Updates `copy-webpack-plugin` from 13.0.1 to 14.0.0 - [Release notes](https://github.com/webpack/copy-webpack-plugin/releases) - [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/copy-webpack-plugin@v13.0.1...v14.0.0) Updates `core-js` from 3.47.0 to 3.48.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.48.0/packages/core-js) Updates `cssnano` from 7.1.2 to 7.1.3 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/cssnano@7.1.2...cssnano@7.1.3) Updates `cssnano-preset-default` from 7.0.10 to 7.0.11 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/cssnano-preset-default@7.0.10...cssnano-preset-default@7.0.11) Updates `postcss` from 8.5.6 to 8.5.8 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.8) Updates `postcss-loader` from 8.2.0 to 8.2.1 - [Release notes](https://github.com/webpack/postcss-loader/releases) - [Changelog](https://github.com/webpack/postcss-loader/blob/main/CHANGELOG.md) - [Commits](webpack/postcss-loader@v8.2.0...v8.2.1) Updates `sass-loader` from 16.0.6 to 16.0.7 - [Release notes](https://github.com/webpack/sass-loader/releases) - [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md) - [Commits](webpack/sass-loader@v16.0.6...v16.0.7) Updates `terser-webpack-plugin` from 5.3.16 to 5.3.17 - [Release notes](https://github.com/webpack/terser-webpack-plugin/releases) - [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.3.17) Updates `webpack` from 5.104.1 to 5.105.4 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.104.1...v5.105.4) Updates `webpack-assets-manifest` from 6.5.0 to 6.5.1 - [Release notes](https://github.com/webdeveric/webpack-assets-manifest/releases) - [Changelog](https://github.com/webdeveric/webpack-assets-manifest/blob/master/release.config.mjs) - [Commits](webdeveric/webpack-assets-manifest@v6.5.0...v6.5.1) --- updated-dependencies: - dependency-name: "@babel/cli" dependency-version: 7.28.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: "@babel/core" dependency-version: 7.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build - dependency-name: "@babel/plugin-syntax-import-attributes" dependency-version: 7.28.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build - dependency-name: "@babel/preset-env" dependency-version: 7.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build - dependency-name: autoprefixer dependency-version: 10.4.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: babel-loader dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build - dependency-name: copy-webpack-plugin dependency-version: 14.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: build - dependency-name: core-js dependency-version: 3.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build - dependency-name: cssnano dependency-version: 7.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: cssnano-preset-default dependency-version: 7.0.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: postcss dependency-version: 8.5.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: postcss-loader dependency-version: 8.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: sass-loader dependency-version: 16.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: terser-webpack-plugin dependency-version: 5.3.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: webpack dependency-version: 5.105.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: build - dependency-name: webpack-assets-manifest dependency-version: 6.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-03-09T11:17:49Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot · 2026-03-16T10:59:52Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 9, 2026

dependabot Bot closed this Mar 16, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/build-a5e70e4b04 branch March 16, 2026 10:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Chore(deps-dev): Bump the build group across 1 directory with 16 updates#1120

Chore(deps-dev): Bump the build group across 1 directory with 16 updates#1120
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/build-a5e70e4b04

dependabot Bot commented on behalf of github Mar 9, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Mar 9, 2026

Uh oh!

dependabot Bot commented on behalf of github Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 7

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 7

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

10.4.27

10.4.26

10.4.25

10.4.24

10.4.27

10.4.26

10.4.25

10.4.24

v10.1.0

What's Changed

New Contributors

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

Bug Fixes

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

Bug Fixes

3.48.0 - 2026.01.21

v7.1.3

What's Changed

8.5.8

8.5.7

8.5.8

8.5.7

v8.2.1

8.2.1 (2026-02-15)

Bug Fixes

8.2.1 (2026-02-15)

Bug Fixes

Uh oh!

sonarqubecloud Bot commented Mar 9, 2026

Quality Gate passed

Uh oh!

dependabot Bot commented on behalf of github Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

dependabot Bot commented on behalf of github Mar 9, 2026 •

edited

Loading