Skip to content

Bump the major-deps-updates group across 1 directory with 7 updates - #441

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-deps-updates-a255899303
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-deps-updates-a255899303

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the major-deps-updates group with 7 updates in the / directory:

Package From To
eslint-plugin-unicorn 76.0.0 79.0.0
happy-dom 20.14.5 21.0.4
typescript 6.0.3 7.0.2
tsup 8.5.1 9.0.0
@babel/parser 7.29.9 8.0.10
@babel/traverse 7.29.8 8.0.10
@babel/types 7.29.8 8.0.10

Updates eslint-plugin-unicorn from 76.0.0 to 79.0.0

Release notes

Sourced from eslint-plugin-unicorn's releases.

v79.0.0

Breaking

  • no-top-level-side-effects: Focus on mutations of globals, and remove it from the unopinionated preset (#3915) 24abac48
    • Unknown calls are no longer reported by default. Enable the new checkUnknownCalls option for stricter checking.
    • Mutations of globals, like document.title = 'x' and Object.assign(globalThis, …), are now reported, also in declarations and default exports. You may see new reports.

Improvements

  • Infer types from JSDoc @type, @param, and @returns annotations in rules that use type information (#3941) 2b4bfab0
  • Handle template literals without expressions like strings in more rules (#3943) 8bd8c063
  • Autofix more code that contains comments, while keeping the comments (#3939) 87baf82f
  • Fix autofixes in many rules that could produce broken code or wrong parentheses (#3917) fed7eac2
  • Make autofixes safer in many rules
    • Fixes that can change behavior in rare cases are now suggestions, for example in prefer-spread, prefer-math-min-max, prefer-modern-dom-apis, and prefer-switch.
  • Improve performance 175efaf1 3dd8fd28
  • comment-content: Add ignore option (#3950) 3fe046e6
  • consistent-function-scoping: Ignore functions in Vitest hoisted factories (#3905) 98912a91
  • custom-error-definition: Ignore abstract TypeScript classes (#3934) ee3501fb
  • no-non-function-verb-prefix: Ignore shorthand destructuring (#3926) 76e5760b
  • no-top-level-side-effects: Recognize more config helpers (#3916) d459c511
  • no-useless-coercion: Preserve boolean return types in TypeScript (#3904) bef15714
  • prefer-array-some: Check .find() results used as booleans (#3913) c957bf3d
  • prefer-default-parameters: Skip unsafe logical OR fallbacks (#3951) bcec97a4
  • prefer-includes: Skip incompatible TypeScript search values (#3927) d66441aa
  • prefer-includes-over-repeated-comparisons: Report negated and typed loose comparisons (#3935) 6e21cb1b
  • prefer-includes-over-repeated-comparisons: Preserve TypeScript union narrowing (#3910) b5c479d8
  • prefer-literal-ascii: Preserve escaped trailing spaces in templates (#3911) 360094bb
  • prefer-minimal-ternary: Skip minimizations that break types (#3892) f022d6d1
  • prefer-modern-math-apis: Use suggestions for changes that can affect numeric results (#3914) 8af7c172
  • prefer-simple-condition-first: Improve typeof comparisons and guards (#3948) ee3edf06
  • prefer-simplified-conditions: Handle equivalent logical expressions (#3938) a0b2788b
  • prefer-simplified-conditions: Factor common terms in longer chains and static templates (#3942) 0d8c8bcb
  • prefer-smaller-scope: Check TypeScript type aliases (#3928) 290d922c
  • prefer-string-raw: Preserve TypeScript literal types in autofixes (#3912) 06115464
  • prefer-ternary: Preserve consecutive early-return guards (#3945) 3fa840fe
  • require-post-message-target-origin: Skip incompatible typed methods (#3925) 387194bd
  • throw-new-error: Ignore calls that return functions (#3894) 5e35def7

sindresorhus/eslint-plugin-unicorn@v78.0.0...v79.0.0

v78.0.0

New rules

Improvements

... (truncated)

Commits
  • d078ad9 79.0.0
  • 3fe046e comment-content: Add ignore option (#3950)
  • bcec97a prefer-default-parameters: Skip unsafe logical OR fallbacks (#3951)
  • ee3edf0 prefer-simple-condition-first: Improve typeof comparisons and guards (#3948)
  • 2b4c08c comment-content: Document ignored backtick text (#3946)
  • 3fa840f prefer-ternary: Preserve consecutive early-return guards (#3945)
  • 8bd8c06 Improve handling of template literals (#3943)
  • 0d8c8bc prefer-simplified-conditions: Factor common terms in longer chains and stat...
  • 2b4bfab Support JSDoc type annotations to infer types in multiple rules (#3941)
  • 87baf82 Fix comment handling in many rules (#3939)
  • Additional commits viewable in compare view

Updates happy-dom from 20.14.5 to 21.0.4

Release notes

Sourced from happy-dom's releases.

v21.0.4

👷‍♂️ Patch fixes

  • Fixed a code injection vulnerability in the ESM compiler - By @​capricorn86
  • Fixed cross-origin isolation so opaque-origin data: iframes cannot access their parent or top window - By @​capricorn86

v21.0.3

👷‍♂️ Patch fixes

  • Fixes security vulnerability where authorization header was forwarded when redirecting - By @​capricorn86

v21.0.2

👷‍♂️ Patch fixes

v21.0.1

👷‍♂️ Patch fixes

v21.0.0

💣 Breaking Changes

  • Disables CSS and IFrame loading by default to prevent server-side request forgery (SSRF) - By @​capricorn86
    • An attacker could embed <iframe> or <link rel="stylesheet"> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.
    • The settings property disableCSSFileLoading has been deprecated
    • Added the new settings properties enableCSSFileLoading and enableIframePageLoading
    • If you don't believe that you are at risk, you can keep the same behavior as in <=v20.14.6 by sending in { enableCSSFileLoading: true, enableIframePageLoading: true } as broswer settings (e.g. new Window({ settings }));

v20.14.6

👷‍♂️ Patch fixes

Commits
  • fd16352 fix: Fixed a code injection vulnerability in the ESM compiler (#2537)
  • 75ab0fb fix: Fixed cross-origin isolation so opaque-origin data: iframes cannot acces...
  • 875ef5c fix: Fixes security vulnerability where authorization header was forwarded wh...
  • 1f3ffdf fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...
  • f55c7e0 chore: Update security documentation (#2509)
  • 2b91e68 fix: Adds alias for enabling CSS and iframe loading in server-renderer (#2503)
  • 0a99c75 BREAKING CHANGE: Disables CSS and IFrame loading by default (#2502)
  • f21dbd7 fix: Fixes cookie scope forgery vulnerability (#2477)
  • See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates tsup from 8.5.1 to 9.0.0

Release notes

Sourced from tsup's releases.

v9.0.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 198479b chore: release v9.0.0
  • 3079ea3 feat(type): expose the Plugin type (#1264)
  • 13f68eb ci: enable npm stage publishing
  • 380e94e test: fix failing tests
  • b601adf chore: merge test lockfile into the root as a pnpm workspace
  • 00139a4 chore: cleanup lockfile
  • 6cec950 chore: build tsup with its own source via tsx
  • 6705d39 chore: upgrade deps, replace source-map with source-map-js
  • a2c0810 feat: upgrade esbuild & chokidar
  • 980525e fix: remove baseUrl in tsconfig (#1390)
  • Additional commits viewable in compare view

Updates @babel/parser from 7.29.9 to 8.0.10

Release notes

Sourced from @​babel/parser's releases.

v8.0.10 (2026-10-29)

Thanks @​dagemawinegash, @​nyan-left, @​saiyam-jain-dev, and @​yulman2207 for your first PRs!

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping
  • babel-generator
  • babel-plugin-transform-optional-chaining, babel-traverse
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-types
  • babel-plugin-transform-classes

🏠 Internal

  • babel-build-external-helpers, babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-regenerator, babel-runtime-corejs3, babel-runtime

🏃‍♀️ Performance

🔬 Output optimization

Committers: 8

... (truncated)

Changelog

Sourced from @​babel/parser's changelog.

v8.0.10 (2026-10-29)

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping
  • babel-generator
  • babel-plugin-transform-optional-chaining, babel-traverse
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-types
  • babel-plugin-transform-classes

🏠 Internal

  • babel-build-external-helpers, babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-regenerator, babel-runtime-corejs3, babel-runtime

🏃‍♀️ Performance

🔬 Output optimization

v8.0.8 (2026-10-23)

👓 Spec Compliance

  • babel-parser

... (truncated)

Commits
  • a4f3b3e v8.0.10
  • 0553104 fix(parser): improve radix literal rounding (#18420)
  • 4dd004a fix(parser): allow parenthesized assignment target in arrow initializer (#18372)
  • 2060a76 fix(parser): do not record strict mode errors during lookahead (#18410)
  • 6acec29 fix(parser): invalid expectOnePlugin usage (#18433)
  • b8a65cf fix(parser): handle ASI after let followed by a reserved word on the next lin...
  • df3d4af fix(parser): parser should not crash for import defer {} (#18406)
  • 368821f fix(parser): record start location in startNodeAt (#18407)
  • 2208401 v8.0.8
  • 44e867b fix(parser): set phase: null for eafer imports (#18392)
  • Additional commits viewable in compare view

Updates @babel/traverse from 7.29.8 to 8.0.10

Release notes

Sourced from @​babel/traverse's releases.

v8.0.10 (2026-10-29)

Thanks @​dagemawinegash, @​nyan-left, @​saiyam-jain-dev, and @​yulman2207 for your first PRs!

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping
  • babel-generator
  • babel-plugin-transform-optional-chaining, babel-traverse
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-types
  • babel-plugin-transform-classes

🏠 Internal

  • babel-build-external-helpers, babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-regenerator, babel-runtime-corejs3, babel-runtime

🏃‍♀️ Performance

🔬 Output optimization

Committers: 8

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v8.0.10 (2026-10-29)

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping
  • babel-generator
  • babel-plugin-transform-optional-chaining, babel-traverse
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-types
  • babel-plugin-transform-classes

🏠 Internal

  • babel-build-external-helpers, babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-regenerator, babel-runtime-corejs3, babel-runtime

🏃‍♀️ Performance

🔬 Output optimization

v8.0.8 (2026-10-23)

👓 Spec Compliance

  • babel-parser

... (truncated)

Commits

Updates @babel/types from 7.29.8 to 8.0.10

Release notes

Sourced from @​babel/types's releases.

v8.0.10 (2026-10-29)

Thanks @​dagemawinegash, @​nyan-left, @​saiyam-jain-dev, and @​yulman2207 for your first PRs!

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping
  • babel-generator
  • babel-plugin-transform-optional-chaining, babel-traverse
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-types
  • babel-plugin-transform-classes

🏠 Internal

  • babel-build-external-helpers, babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-regenerator, babel-runtime-corejs3, babel-runtime

🏃‍♀️ Performance

🔬 Output optimization

Committers: 8

... (truncated)

Changelog

Sourced from @​babel/types's changelog.

v8.0.10 (2026-10-29)

🐛 Bug Fix

  • babel-parser
    • #18420 fix(parser): improve radix literal rounding (@​JLHwung)
    • #18372 fix(parser): allow parenthesized assignment target in arrow initializer (@​JLHwung)
    • #18410 fix(parser): do not record strict mode errors during lookahead (@​JLHwung)
    • #18433 fix(parser): invalid expectOnePlugin usage (@​JLHwung)
    • #18409 fix(parser): handle ASI after let followed by a reserved word on the next line (@​JLHwung)
    • #18406 fix(parser): parser should not crash for import defer {} (@​JLHwung)
    • #18407 fix(parser): record start location in startNodeAt (

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@dependabot dependabot Bot changed the title build(deps): bump the major-deps-updates group across 1 directory with 7 updates chore(deps): bump the major-deps-updates group across 1 directory with 7 updates Oct 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/major-deps-updates-a255899303 branch 3 times, most recently from 9d4700e to 1c1f93e Compare October 27, 2026 20:09
@dependabot dependabot Bot changed the title chore(deps): bump the major-deps-updates group across 1 directory with 7 updates Bump the major-deps-updates group across 1 directory with 7 updates Nov 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/major-deps-updates-a255899303 branch 2 times, most recently from 3df954d to ad6af09 Compare November 2, 2026 10:17
Bumps the major-deps-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `76.0.0` | `79.0.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.14.5` | `21.0.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [tsup](https://github.com/egoist/tsup) | `8.5.1` | `9.0.0` |
| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.9` | `8.0.10` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.8` | `8.0.10` |
| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.8` | `8.0.10` |



Updates `eslint-plugin-unicorn` from 76.0.0 to 79.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v76.0.0...v79.0.0)

Updates `happy-dom` from 20.14.5 to 21.0.4
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.14.5...v21.0.4)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `tsup` from 8.5.1 to 9.0.0
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.5.1...v9.0.0)

Updates `@babel/parser` from 7.29.9 to 8.0.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.10/packages/babel-parser)

Updates `@babel/traverse` from 7.29.8 to 8.0.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.10/packages/babel-traverse)

Updates `@babel/types` from 7.29.8 to 8.0.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.10/packages/babel-types)

---
updated-dependencies:
- dependency-name: "@babel/parser"
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: "@babel/traverse"
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: "@babel/types"
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: eslint-plugin-unicorn
  dependency-version: 78.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: happy-dom
  dependency-version: 21.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: tsup
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/major-deps-updates-a255899303 branch from ad6af09 to f5163de Compare November 3, 2026 11:13

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants