Update all non-major dependencies by renovate[bot] · Pull Request #307 · stanlemon/javascript

renovate · 2025-06-07T12:57:57Z

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/cli (source)	`^7.27.2` -> `^7.28.0`
@babel/core (source)	`^7.27.3` -> `^7.28.0`
@babel/preset-env (source)	`^7.27.2` -> `^7.28.0`
@fortawesome/react-fontawesome	`^0.2.2` -> `^0.2.3`
@types/lodash (source)	`^4.17.17` -> `^4.17.20`
compression	`^1.8.0` -> `^1.8.1`
concurrently	`^9.1.2` -> `^9.2.0`
dotenv	`^16.5.0` -> `^16.6.1`
dotenv	`16.5.0` -> `16.6.1`
express-rate-limit	`^7.5.0` -> `^7.5.1`
express-session	`^1.18.1` -> `^1.18.2`
globals	`^16.2.0` -> `^16.3.0`
less (source)	`^4.3.0` -> `^4.4.0`
morgan	`^1.10.0` -> `^1.10.1`
prettier (source)	`^3.5.3` -> `^3.6.2`
supertest	`^7.1.1` -> `^7.1.4`
webpack	`^5.99.9` -> `^5.100.2`
webpack-dev-server	`^5.2.1` -> `^5.2.2`

Release Notes

babel/babel (@babel/cli)

`v7.28.0`

Compare Source

🚀 New Feature

babel-node
- #17147 Support top level await in node repl (@liuxingbaoyu)
babel-types
- #17258 feat(matchesPattern): support super/private/meta (@JLHwung)
babel-compat-data, babel-preset-env
- #17355 Add explicit resource management to preset-env (@JLHwung)
babel-core, babel-parser
- #17390 Support sourceType: "commonjs" (@JLHwung)
babel-generator, babel-parser
- #17346 Materialize explicitResourceManagement parser plugin (@JLHwung)
babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
- #17391 LVal coverage updates (Part 2) (@JLHwung)
babel-parser, babel-traverse, babel-types
- #17378 Accept bigints in t.bigIntLiteral factory (@JLHwung)
babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
- #17277 Transform discard binding (@JLHwung)
babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
- #17163 Parse discard binding (@JLHwung)

🐛 Bug Fix

babel-helper-globals, babel-plugin-transform-classes, babel-traverse
- #17297 Create babel-helper-globals (@JLHwung)
babel-types
- #17009 feature: TSTypeOperator: keyof (#16799) (@coderaiser)

🏠 Internal

babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
- #17403 Update babel-polyfill packages (@nicolo-ribaudo)

FortAwesome/react-fontawesome (@fortawesome/react-fontawesome)

`v0.2.3`

Compare Source

Changed

Font Awesome Pro+ icons are now available with an active Pro+ subscription.
Removed example directory and files
Deprecated fa-fw prop

Added

Added widthAuto prop
Added rotateBy prop

expressjs/compression (compression)

`v1.8.1`

Compare Source

==========

deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

open-cli-tools/concurrently (concurrently)

motdotla/dotenv (dotenv)

`v16.6.1`

Compare Source

Changed

Default quiet to true – hiding the runtime log message (#874)
NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

`v16.6.0`

Compare Source

Added

Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#870)
Use { quiet: true } to suppress
Aligns dotenv more closely with dotenvx.

express-rate-limit/express-rate-limit (express-rate-limit)

`v7.5.1`

Compare Source

Changed

Narrowed type of standardHeaders from string to just the supported values via a TypeScript const assertion (#506)

You can view the full changelog here.

expressjs/session (express-session)

`v1.18.2`

Compare Source

==========

deps: mocha@10.8.2
deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

sindresorhus/globals (globals)

`v16.3.0`

Compare Source

Update globals (#304) 8c029d9

less/less.js (less)

`v4.4.0`

Compare Source

#4337 Add support for layer at-rule (@puckowski)
#4340 Add support for import at-rule layer functionality (@puckowski)
#4346 Fix #4343 add color operands (@puckowski)

expressjs/morgan (morgan)

`v1.10.1`

Compare Source

===================

deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

prettier/prettier (prettier)

`v3.6.2`

Compare Source

diff

Markdown: Add missing blank line around code block (#17675 by @fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

<!-- Prettier 3.6.1 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```
   1. Another
   2. List

<!-- Prettier 3.6.2 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

`v3.6.1`

Compare Source

diff

TypeScript: Allow const without initializer (#17650, #17654 by @fisker)

// Input
export const version: string;

// Prettier 3.6.0 (--parser=babel-ts)
SyntaxError: Unexpected token (1:21)
> 1 | export const version: string;
    |                     ^

// Prettier 3.6.0 (--parser=oxc-ts)
SyntaxError: Missing initializer in const declaration (1:14)
> 1 | export const version: string;
    |              ^^^^^^^^^^^^^^^

// Prettier 3.6.1
export const version: string;

Miscellaneous: Avoid closing files multiple times (#17665 by @43081j)

When reading a file to infer the interpreter from a shebang, we use the
n-readlines library to read the first line in order to get the shebang.

This library closes files when it reaches EOF, and we later try close the same
files again. We now close files only if n-readlines did not already close
them.

`v3.6.0`

Compare Source

diff

🔗 Release Notes

ladjs/supertest (supertest)

`v7.1.4`

Compare Source

`v7.1.3`

Compare Source

`v7.1.2`

Compare Source

webpack/webpack (webpack)

`v5.100.2`

Compare Source

`v5.100.1`

Compare Source

`v5.100.0`

Compare Source

Fixes

Fixed the case where an ES modules entry chunk depends on the runtime chunk hash
Handle function exports in webpack module wrapper
Ensure dependent chunks are imported before startup & fix duplicate export of 'default'
Generate lose closing brace when exports are unprovided
CleanPlugin doesn't unlink same file twice
Fixed unexpected error codes from fs.unlink on Windows
Typescript types

Features

HMR support for ES modules output
ES module output mode now fully supports splitChunks when external variables and runtimeChunk are not set.
Added support using keyword
Implemented tc39 Defer Module Evaluation (experiment)
Support dynamic template literals expressions for new URL(...)
Enable ES modules worker chunk loading for Node.js targets
Improved support for destructing in DefinePlugin
Added VirtualUrlPlugin to support virtual: modules

Performance Improvements

Remove useless startup entrypoint runtime for ES modules output
Cache new URL(...) evaluate expression

webpack/webpack-dev-server (webpack-dev-server)

`v5.2.2`

Compare Source

Configuration

📅 Schedule: Branch creation - "after 8am and before 8pm on saturday" in timezone America/Indiana/Indianapolis, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-07-28T00:01:33Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 86c4714 to 5f4455d Compare June 26, 2025 04:12

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 5686eb8 to 5b8cc7c Compare July 4, 2025 20:08

renovate bot force-pushed the renovate/all-minor-patch branch from 5b8cc7c to c5cc626 Compare July 5, 2025 13:31

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 67655bf to 5d2056c Compare July 18, 2025 20:01

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 13d4758 to 516a005 Compare July 26, 2025 02:06

Update all non-major dependencies

7bca169

renovate bot force-pushed the renovate/all-minor-patch branch from 516a005 to 7bca169 Compare July 26, 2025 18:12

Fix dependency issues

d231e80

stanlemon added 3 commits July 27, 2025 20:02

Update branch name

c1c65b7

Bump couchdb version

0ab453d

Adjust workflow for couchdb tests

0a56938

stanlemon merged commit 9e1d947 into main Jul 28, 2025
3 checks passed

stanlemon deleted the renovate/all-minor-patch branch July 28, 2025 00:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all non-major dependencies#307

Update all non-major dependencies#307
stanlemon merged 5 commits intomainfrom
renovate/all-minor-patch

renovate bot commented Jun 7, 2025 •

edited

Loading

Uh oh!

renovate bot commented Jul 28, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Jun 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🚀 New Feature

🐛 Bug Fix

🏠 Internal

Changed

Added

What's Changed

New Contributors

Changed

Added

Changed

Markdown: Add missing blank line around code block (#​17675 by @​fisker)

TypeScript: Allow const without initializer (#​17650, #​17654 by @​fisker)

Miscellaneous: Avoid closing files multiple times (#​17665 by @​43081j)

Fixes

Features

Performance Improvements

Configuration

Uh oh!

renovate bot commented Jul 28, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Jun 7, 2025 •

edited

Loading

Markdown: Add missing blank line around code block (#17675 by @fisker)

TypeScript: Allow const without initializer (#17650, #17654 by @fisker)

Miscellaneous: Avoid closing files multiple times (#17665 by @43081j)