Skip to content

build(deps): bump the major-deps-updates group across 1 directory with 7 updates - #441

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-deps-updates-a255899303
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-deps-updates-a255899303

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the major-deps-updates group with 7 updates in the / directory:

Package From To
eslint-plugin-unicorn 76.0.0 78.0.0
happy-dom 20.14.5 21.0.3
typescript 6.0.3 7.0.2
tsup 8.5.1 9.0.0
@babel/parser 7.29.9 8.0.7
@babel/traverse 7.29.8 8.0.7
@babel/types 7.29.8 8.0.6

Updates eslint-plugin-unicorn from 76.0.0 to 78.0.0

Release notes

Sourced from eslint-plugin-unicorn's releases.

v78.0.0

New rules

Improvements

  • Add SOML support, including a recommended-soml preset (#3870) 7419b835
  • Report code that contains comments instead of ignoring it (#3847) 003f0bdc
    • Many rules skipped code with comments. They now report it, and only withhold fixes that would remove comments. You may see new reports.
  • Fix cyclic resolution in type-aware checks (#3826) 5e77e19e
  • prefer-default-parameters: Add checkFallbackExpressions option (#3837) 71bbf59a
  • prefer-ternary: Add checkVaryingBase and checkComputedMemberAccess options (#3869) 1af3c2b2
  • consistent-boolean-name: Allow does prefix by default (#3853) cfad028d
  • consistent-boolean-name: Recognize promise-returning functions (#3879) 769e3b87
  • consistent-boolean-name: Fix cyclic type parameter resolution (#3821) 5c4808ba
  • no-asterisk-prefix-in-documentation-comments: Remove shared indentation (#3820) a92aee19
  • no-await-in-promise-methods: Clarify the message for nested await (#3867) 8f73d539
  • no-immediate-mutation: Combine a declaration with an assignment that follows it immediately (#3851) 811e4678
  • no-negated-condition: Support && and || chains of negated operands (#3834) 15bfade7
  • no-top-level-side-effects: Allow known pure imported helpers, like defineConfig() and React memo(), and check default-exported expressions (#3822) 3826236d
  • no-unnecessary-parameters: Fix false positive for recursive defaults (#3844) e2d8d0ff
  • no-unnecessary-parameters: Ignore parameters named by type predicates (#3859) f0c631ce
  • no-using-resource-escape: Check TypeScript instantiation expressions (#3833) 7a9f7df1
  • prefer-at: Fix false positives for DOM collections (#3842) ca78a7aa
  • prefer-combined-guards: Combine non-literal exits in TypeScript when type information is available (#3860) 2bcc7be6
  • prefer-default-parameters: Support static template literal fallbacks (#3835) 3d8b40a5
  • prefer-default-parameters: Support fallbacks to earlier bindings (#3840) d4bfc1cf
  • prefer-default-parameters: Handle nullable fallback types (#3858) d75786f7
  • prefer-early-return, prefer-continue: Suggest opposite relational comparisons (#3873) de2e6daa
  • prefer-logical-operator-over-ternary: Handle non-boolean conditions (#3843) 5c4d50cf
  • prefer-minimal-ternary: Ignore formatting differences in shared expressions (#3841) b0c21423
  • prefer-minimal-ternary: Prevent unsafe TypeScript object autofixes (#3846) 2f33c916
  • prefer-observer-apis: Check let and var listener functions, and ignore reassigned listeners (#3833) 7a9f7df1
  • prefer-private-class-fields: Do not autofix reassigned methods, and suggest private arrow functions for bound methods (#3823) 6f0f4bb8
  • prefer-scoped-selector: Ignore queries on more non-element roots, like ownerDocument and getRootNode() (#3833) 7a9f7df1
  • prefer-spread: Prevent unsafe TypeScript autofixes (#3882) 21e99ff8
  • prefer-ternary: Support destructuring assignments (#3852) e29d1eee
  • prefer-ternary: Support statements that differ in only one part, like call(test ? a : b) (#3869) 1af3c2b2
  • prefer-top-level-await: Allow cached promise assignments (#3819) 2fb8eb60
  • prefer-top-level-await: Avoid false positives on non-promise calls (#3883) 3f125f14
  • relative-url-style: Support complex Markdown labels, embedded HTML in Markdown, JSX, URL.canParse(), URL.parse(), and more HTML attributes (#3854) 2760ce46
  • require-module-specifiers: Allow bare export {} in declaration files (#3866) e7274810
  • template-indent: Ignore templates with content on the opening line (#3868) 921dd8c3

sindresorhus/eslint-plugin-unicorn@v77.0.0...v78.0.0

... (truncated)

Commits
  • 843495c 78.0.0
  • 1059f09 Add no-unnecessary-default-arguments rule (#3885)
  • 624887f consistent-boolean-name: Explain why do is excluded (#3884)
  • 3f125f1 prefer-top-level-await: Avoid false positives on non-promise calls (#3883)
  • 21e99ff prefer-spread: Prevent unsafe TypeScript autofixes (#3882)
  • 769e3b8 consistent-boolean-name: Recognize promise-returning functions (#3879)
  • 9eadb60 prefer-simple-condition-first: Clarify property access condition classifica...
  • de2e6da prefer-early-return, prefer-continue: Suggest opposite relational compari...
  • 7419b83 Add SOML support (#3870)
  • 1af3c2b prefer-ternary: Minimize matching branch expressions (#3869)
  • Additional commits viewable in compare view

Updates happy-dom from 20.14.5 to 21.0.3

Release notes

Sourced from happy-dom's releases.

v21.0.3

👷‍♂️ Patch fixes

  • Fixes security vulnerability where authorization header was forwarded when redirecting - By @​capricorn86

v21.0.2

👷‍♂️ Patch fixes

v21.0.1

👷‍♂️ Patch fixes

v21.0.0

💣 Breaking Changes

  • Disables CSS and IFrame loading by default to prevent server-side request forgery (SSRF) - By @​capricorn86
    • An attacker could embed <iframe> or <link rel="stylesheet"> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.
    • The settings property disableCSSFileLoading has been deprecated
    • Added the new settings properties enableCSSFileLoading and enableIframePageLoading

v20.14.6

👷‍♂️ Patch fixes

Commits
  • 875ef5c fix: Fixes security vulnerability where authorization header was forwarded wh...
  • 1f3ffdf fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...
  • f55c7e0 chore: Update security documentation (#2509)
  • 2b91e68 fix: Adds alias for enabling CSS and iframe loading in server-renderer (#2503)
  • 0a99c75 BREAKING CHANGE: Disables CSS and IFrame loading by default (#2502)
  • f21dbd7 fix: Fixes cookie scope forgery vulnerability (#2477)
  • See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates tsup from 8.5.1 to 9.0.0

Release notes

Sourced from tsup's releases.

v9.0.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 198479b chore: release v9.0.0
  • 3079ea3 feat(type): expose the Plugin type (#1264)
  • 13f68eb ci: enable npm stage publishing
  • 380e94e test: fix failing tests
  • b601adf chore: merge test lockfile into the root as a pnpm workspace
  • 00139a4 chore: cleanup lockfile
  • 6cec950 chore: build tsup with its own source via tsx
  • 6705d39 chore: upgrade deps, replace source-map with source-map-js
  • a2c0810 feat: upgrade esbuild & chokidar
  • 980525e fix: remove baseUrl in tsconfig (#1390)
  • Additional commits viewable in compare view

Updates @babel/parser from 7.29.9 to 8.0.7

Release notes

Sourced from @​babel/parser's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

v8.0.6 (2026-09-18)

Thanks @​robhogan for your first PR!

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @​babel/parser's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

v8.0.6 (2026-09-18)

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

... (truncated)

Commits

Updates @babel/traverse from 7.29.8 to 8.0.7

Release notes

Sourced from @​babel/traverse's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

v8.0.6 (2026-09-18)

Thanks @​robhogan for your first PR!

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

v8.0.6 (2026-09-18)

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

... (truncated)

Commits

Updates @babel/types from 7.29.8 to 8.0.6

Release notes

Sourced from @​babel/types's releases.

v8.0.6 (2026-09-18)

Thanks @​robhogan for your first PR!

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

🏃‍♀️ Performance

  • babel-helper-compilation-targets, babel-helper-transform-fixture-test-runner

Committers: 4

v8.0.5 (2026-09-10)

Thanks @​drubetti, @​jibin7jose, @​joelle-a-dev, @​journey-ad, @​Kjubikstronk, @​MatteoGabriele, and @​zhangli091011 for your first PRs!

👓 Spec Compliance

  • babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-destructuring
  • babel-plugin-transform-typescript

... (truncated)

Changelog

Sourced from @​babel/types's changelog.

v8.0.6 (2026-09-18)

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

🏃‍♀️ Performance

  • babel-helper-compilation-targets, babel-helper-transform-fixture-test-runner

v8.0.5 (2026-09-10)

👓 Spec Compliance

  • babel-parser

🐛 Bug Fix

…h 7 updates

Bumps the major-deps-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `76.0.0` | `78.0.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.14.5` | `21.0.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [tsup](https://github.com/egoist/tsup) | `8.5.1` | `9.0.0` |
| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.9` | `8.0.7` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.8` | `8.0.7` |
| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.8` | `8.0.6` |



Updates `eslint-plugin-unicorn` from 76.0.0 to 78.0.0
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](sindresorhus/eslint-plugin-unicorn@v76.0.0...v78.0.0)

Updates `happy-dom` from 20.14.5 to 21.0.3
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.14.5...v21.0.3)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `tsup` from 8.5.1 to 9.0.0
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v8.5.1...v9.0.0)

Updates `@babel/parser` from 7.29.9 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-parser)

Updates `@babel/traverse` from 7.29.8 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-traverse)

Updates `@babel/types` from 7.29.8 to 8.0.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.6/packages/babel-types)

---
updated-dependencies:
- dependency-name: eslint-plugin-unicorn
  dependency-version: 78.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: happy-dom
  dependency-version: 21.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: tsup
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: "@babel/parser"
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: "@babel/traverse"
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
- dependency-name: "@babel/types"
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-deps-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants