Skip to content

Build(deps): bump the npm-weekly group in /web with 15 updates - #1295

Merged
GrahamTheCoder merged 1 commit into
masterfrom
dependabot/npm_and_yarn/web/npm-weekly-451af8af60
Oct 30, 2026
Merged

Build(deps): bump the npm-weekly group in /web with 15 updates#1295
GrahamTheCoder merged 1 commit into
masterfrom
dependabot/npm_and_yarn/web/npm-weekly-451af8af60

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-weekly group in /web with 15 updates:

Package From To
vite 6.4.4 6.4.5
@babel/helper-string-parser 7.29.7 7.29.11
@babel/parser 7.29.9 7.29.12
@babel/types 7.29.8 7.29.11
baseline-browser-mapping 2.11.30 2.11.34
browserslist 4.29.4 4.29.5
caniuse-lite 1.0.30001816 1.0.30001819
electron-to-chromium 1.5.459 1.5.464
follow-redirects 1.16.1 1.16.2
magic-string 1.4.3 1.4.5
node-releases 2.0.59 2.0.60
rollup 4.64.10 4.66.0
set-cookie-parser 2.7.2 2.7.3
tldts 7.4.18 7.4.19
tldts-core 7.4.18 7.4.19

Updates vite from 6.4.4 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

Commits

Updates @babel/helper-string-parser from 7.29.7 to 7.29.11

Release notes

Sourced from @​babel/helper-string-parser's releases.

v7.29.11 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

  • babel-plugin-transform-classes

🔬 Output optimization

  • babel-plugin-transform-spread

Committers: 1

v7.29.10 (2026-10-07)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-traverse

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 2

... (truncated)

Commits

Updates @babel/parser from 7.29.9 to 7.29.12

Release notes

Sourced from @​babel/parser's releases.

v7.29.12 (2026-10-29)

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping
  • babel-generator
  • babel-plugin-transform-optional-chaining, babel-traverse
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #18225 [7.x backport] fix: avoid removable fields as decorator evaluation hosts (@​nyan-left)

Committers: 2

v7.29.11 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

... (truncated)

Commits
  • b3e65f9 v7.29.12
  • 3cfe35e fix(parser): improve radix literal rounding (#18445)
  • 941a136 fix: allow parenthesized assignment target in arrow initializer (#18442)
  • f15f9ec fix(parser): do not record strict mode errors during lookahead (#18440)
  • 5c752bb fix(parser): invalid expectOnePlugin usage (#18434)
  • b719c32 fix(parser): parser should not crash for import defer {} (#18431)
  • 6b35e5f fix(parser): handle ASI after let followed by a reserved word on the next lin...
  • d4e8b0f v7.29.11
  • f094e8e fix(parser): ASI between arrow body and /= regex (#18403)
  • 93b69a0 Disallow eval and arguments as class names (#18405)
  • Additional commits viewable in compare view

Updates @babel/types from 7.29.8 to 7.29.11

Release notes

Sourced from @​babel/types's releases.

v7.29.11 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

  • babel-plugin-transform-classes

🔬 Output optimization

  • babel-plugin-transform-spread

Committers: 1

v7.29.10 (2026-10-07)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-traverse

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 2

... (truncated)

Commits

Updates baseline-browser-mapping from 2.11.30 to 2.11.34

Commits
  • 4a311c7 Patch to 2.11.34 because browser or feature data changed
  • cadd64d Browser or feature data changed
  • 7439261 Updating static site
  • 47dde6e Patch to 2.11.33 because browser or feature data changed
  • 7d23626 Browser or feature data changed
  • 107852a Updating static site
  • b010b39 Patch to 2.11.32 because browser or feature data changed
  • b41f5fb Browser or feature data changed
  • b1b7b47 Updating static site
  • 22ea69a Patch to 2.11.31 because browser or feature data changed
  • Additional commits viewable in compare view

Updates browserslist from 4.29.4 to 4.29.5

Release notes

Sourced from browserslist's releases.

4.29.5

Changelog

Sourced from browserslist's changelog.

4.29.5

Commits
  • 2e4b904 Release 4.29.5 version
  • 11a13ec Update dependencies
  • e80fabc Merge pull request #957 from nk-batman21/fix-coverage-custom-stats-versions
  • cac8029 Normalize custom statistics versions in coverage
  • See full diff in compare view

Updates caniuse-lite from 1.0.30001816 to 1.0.30001819

Commits

Updates electron-to-chromium from 1.5.459 to 1.5.464

Commits

Updates follow-redirects from 1.16.1 to 1.16.2

Commits

Updates magic-string from 1.4.3 to 1.4.5

Release notes

Sourced from magic-string's releases.

v1.4.5

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v1.4.4

   🐞 Bug Fixes

    View changes on GitHub
Changelog

Sourced from magic-string's changelog.

1.4.5 (2026-10-27)

Bug Fixes

  • bundle: stop addSource mutating the caller's source description (#375) (c14d303)
  • keep the stored name when an overwritten range was split (#374) (729cbb2)
  • reject non-integer and out-of-range indices consistently (#373) (02dfc82)
  • respect indent exclusions on moved edits and CRLF bundle intros (#377) (280bc3e)
  • shift replacesUntil and replacedFrom in Bundle#toMagicString (#369) (ab6e912), closes Bundle#toMagicString

Performance Improvements

  • cut allocations and quadratic lookups on the sourcemap and bundle paths (#379) (d081246)
  • find the slice start chunk without scanning the list (#378) (6ab6b04)

1.4.4 (2026-10-26)

Bug Fixes

  • don't treat chunks emptied by an overwrite as removed in replace (#367) (aed5675)
  • keep the content when update throws across a split point (#364) (f815ec4)
  • respect the offset in snip (#363) (bb5c6c2)
  • skip empty matches at a chunk boundary inside removed content (#366) (5aab3bd)
Commits
  • 5dcd2bc chore: release v1.4.5
  • b77c7ea refactor: share the mappings walk and sync the docs with the code (#382)
  • 6ab6b04 perf: find the slice start chunk without scanning the list (#378)
  • d081246 perf: cut allocations and quadratic lookups on the sourcemap and bundle paths...
  • 0c6698f test: check random edit sequences against a reference edit model (#381)
  • 60382a8 chore: port the benchmark to vitest bench and cover the sourcemap hot paths (...
  • 280bc3e fix: respect indent exclusions on moved edits and CRLF bundle intros (#377)
  • c14d303 fix(bundle): stop addSource mutating the caller's source description (#375)
  • 98b6f12 test: drop the duplicated out-of-bounds move test (#376)
  • f1576fa chore: remove the unused DEBUG timing instrumentation (#372)
  • Additional commits viewable in compare view

Updates node-releases from 2.0.59 to 2.0.60

Commits

Updates rollup from 4.64.10 to 4.66.0

Release notes

Sourced from rollup's releases.

v4.66.0

4.66.0

2026-10-28

Features

  • Support null sources in plugin-generated sourcemaps (#6600)
  • Support plugin-generated "index" sourcemaps (#6601)

Bug Fixes

  • Preserve rendering errors when the rendereError hook fails (#6602)

Pull Requests

v4.65.1

4.65.1

2026-10-26

Bug Fixes

  • Ensure tree-shaking also respect Symbol.dispose for async disposal (#6556)

Pull Requests

v4.65.0

4.65.0

2026-10-22

Features

  • Support synthetic named exports in namespaces when preserving modules (#6589)

Bug Fixes

  • Fix a situation where unaligned sourcemaps resulted in a wrong segment (#6591)
  • Forward startup errors on native module load when starting rollup (#6592)

... (truncated)

Changelog

Sourced from rollup's changelog.

4.66.0

2026-10-28

Features

  • Support null sources in plugin-generated sourcemaps (#6600)
  • Support plugin-generated "index" sourcemaps (#6601)

Bug Fixes

  • Preserve rendering errors when the rendereError hook fails (#6602)

Pull Requests

4.65.1

2026-10-26

Bug Fixes

  • Ensure tree-shaking also respect Symbol.dispose for async disposal (#6556)

Pull Requests

4.65.0

2026-10-22

Features

  • Support synthetic named exports in namespaces when preserving modules (#6589)

Bug Fixes

  • Fix a situation where unaligned sourcemaps resulted in a wrong segment (#6591)
  • Forward startup errors on native module load when starting rollup (#6592)

Pull Requests

... (truncated)

Commits

Updates set-cookie-parser from 2.7.2 to 2.7.3

Changelog

Sourced from set-cookie-parser's changelog.

v2.7.3 - 2026-10-23

Security:

  • Drop attributes named name or value because they would otherwise overwrite the existing name/value on the output cookie object. (Backport from v3.2.0)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for set-cookie-parser since your current version.


Updates tldts from 7.4.18 to 7.4.19

Release notes

Sourced from tldts's releases.

v7.4.19

📜 Update Public Suffix List

  • tldts-experimental, tldts

🔩 Dependencies

Authors: 2

Changelog

Sourced from tldts's changelog.

v7.4.19 (Tue Oct 20 2026)

📜 Update Public Suffix List

  • tldts-experimental, tldts

🔩 Dependencies

Authors: 2

v7.4.17 (Wed Oct 07 2026)

📜 Update Public Suffix List

  • tldts-experimental, tldts-icann, tldts

🔩 Dependencies

Authors: 2

v7.4.16 (Sun Sep 27 2026)

... (truncated)

Commits

Updates tldts-core from 7.4.18 to 7.4.19

Release notes

Sourced from tldts-core's releases.

v7.4.19

📜 Update Public Suffix List

  • tldts-experimental, tldts

🔩 Dependencies

Authors: 2

Changelog

Sourced from tldts-core's changelog.

v7.4.19 (Tue Oct 20 2026)

📜 Update Public Suffix List

  • tldts-experimental, tldts

🔩 Dependencies

Authors: 2

v7.4.17 (Wed Oct 07 2026)

📜 Update Public Suffix List

@dependabot
Build(deps): bump the npm-weekly group in /web with 15 updates
e552300 
Bumps the npm-weekly group in /web with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.4` | `6.4.5` |
| [@babel/helper-string-parser](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-string-parser) | `7.29.7` | `7.29.11` |
| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.9` | `7.29.12` |
| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.8` | `7.29.11` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.30` | `2.11.34` |
| [browserslist](https://github.com/browserslist/browserslist) | `4.29.4` | `4.29.5` |
| [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001816` | `1.0.30001819` |
| [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) | `1.5.459` | `1.5.464` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.1` | `1.16.2` |
| [magic-string](https://github.com/Rich-Harris/magic-string) | `1.4.3` | `1.4.5` |
| [node-releases](https://github.com/chicoxyzzy/node-releases) | `2.0.59` | `2.0.60` |
| [rollup](https://github.com/rollup/rollup) | `4.64.10` | `4.66.0` |
| [set-cookie-parser](https://github.com/nfriedly/set-cookie-parser) | `2.7.2` | `2.7.3` |
| [tldts](https://github.com/remusao/tldts) | `7.4.18` | `7.4.19` |
| [tldts-core](https://github.com/remusao/tldts) | `7.4.18` | `7.4.19` |


Updates `vite` from 6.4.4 to 6.4.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite)

Updates `@babel/helper-string-parser` from 7.29.7 to 7.29.11
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.11/packages/babel-helper-string-parser)

Updates `@babel/parser` from 7.29.9 to 7.29.12
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.12/packages/babel-parser)

Updates `@babel/types` from 7.29.8 to 7.29.11
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.11/packages/babel-types)

Updates `baseline-browser-mapping` from 2.11.30 to 2.11.34
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.11.30...v2.11.34)

Updates `browserslist` from 4.29.4 to 4.29.5
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.29.4...4.29.5)

Updates `caniuse-lite` from 1.0.30001816 to 1.0.30001819
- [Commits](browserslist/caniuse-lite@1.0.30001816...1.0.30001819)

Updates `electron-to-chromium` from 1.5.459 to 1.5.464
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.459...v1.5.464)

Updates `follow-redirects` from 1.16.1 to 1.16.2
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.16.1...v1.16.2)

Updates `magic-string` from 1.4.3 to 1.4.5
- [Release notes](https://github.com/Rich-Harris/magic-string/releases)
- [Changelog](https://github.com/Rich-Harris/magic-string/blob/master/CHANGELOG.md)
- [Commits](Rich-Harris/magic-string@v1.4.3...v1.4.5)

Updates `node-releases` from 2.0.59 to 2.0.60
- [Commits](chicoxyzzy/node-releases@v2.0.59...v2.0.60)

Updates `rollup` from 4.64.10 to 4.66.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.64.10...v4.66.0)

Updates `set-cookie-parser` from 2.7.2 to 2.7.3
- [Changelog](https://github.com/nfriedly/set-cookie-parser/blob/master/CHANGELOG.md)
- [Commits](nfriedly/set-cookie-parser@v2.7.2...v2.7.3)

Updates `tldts` from 7.4.18 to 7.4.19
- [Release notes](https://github.com/remusao/tldts/releases)
- [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md)
- [Commits](remusao/tldts@v7.4.18...v7.4.19)

Updates `tldts-core` from 7.4.18 to 7.4.19
- [Release notes](https://github.com/remusao/tldts/releases)
- [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md)
- [Commits](remusao/tldts@v7.4.18...v7.4.19)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: "@babel/helper-string-parser"
  dependency-version: 7.29.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: "@babel/parser"
  dependency-version: 7.29.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: "@babel/types"
  dependency-version: 7.29.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: baseline-browser-mapping
  dependency-version: 2.11.34
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: browserslist
  dependency-version: 4.29.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001819
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: electron-to-chromium
  dependency-version: 1.5.464
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: follow-redirects
  dependency-version: 1.16.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: magic-string
  dependency-version: 1.4.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: node-releases
  dependency-version: 2.0.60
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: rollup
  dependency-version: 4.66.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-weekly
- dependency-name: set-cookie-parser
  dependency-version: 2.7.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: tldts
  dependency-version: 7.4.19
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
- dependency-name: tldts-core
  dependency-version: 7.4.19
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-weekly
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 29, 2026
@GrahamTheCoder
GrahamTheCoder merged commit a166046 into master Oct 30, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@GrahamTheCoder