Update packages #6836

renovate · 2024-08-11T08:24:35Z

This PR contains the following updates:

Package	Change	Type	Update
@babel/cli (source)	`7.24.8` -> `7.25.9`	devDependencies	minor
@babel/core (source)	`7.25.2` -> `7.26.0`	devDependencies	minor
@babel/eslint-parser (source)	`7.25.1` -> `7.25.9`	devDependencies	patch
@babel/node (source)	`7.25.0` -> `7.26.0`	devDependencies	minor
@babel/plugin-transform-modules-commonjs (source)	`7.24.8` -> `7.25.9`	devDependencies	minor
@babel/plugin-transform-runtime (source)	`7.24.7` -> `7.25.9`	devDependencies	minor
@babel/preset-env (source)	`7.25.3` -> `7.26.0`	devDependencies	minor
@babel/runtime (source)	`7.25.0` -> `7.26.0`	devDependencies	minor
@rollup/plugin-node-resolve (source)	`15.2.3` -> `15.3.0`	devDependencies	minor
babel-loader	`9.1.3` -> `9.2.1`	devDependencies	minor
cheerio (source)	`1.0.0-rc.12` -> `1.0.0`	dependencies	patch
codemirror	`5.65.17` -> `5.65.18`	devDependencies	patch
cookie	`0.6.0` -> `0.7.2`	dependencies	minor
cookie-parser	`1.4.6` -> `1.4.7`	dependencies	patch
crypto-browserify	`3.12.0` -> `3.12.1`	dependencies	patch
eslint (source)	`8.57.0` -> `8.57.1`	devDependencies	patch
express (source)	`4.19.2` -> `4.21.1`	dependencies	minor
golang	`1.22` -> `1.23`	final	minor
google-spreadsheet (source)	`4.1.2` -> `4.1.4`	dependencies	patch
html-webpack-plugin	`5.6.0` -> `5.6.3`	devDependencies	patch
jasmine (source)	`5.2.0` -> `5.4.0`	devDependencies	minor
jest-puppeteer (source)	`10.0.1` -> `10.1.4`	devDependencies	minor
mini-css-extract-plugin	`2.9.0` -> `2.9.2`	devDependencies	patch
netlify-cli	`17.33.5` -> `17.37.2`	devDependencies	minor
npm-run-all2	`6.2.2` -> `6.2.6`	devDependencies	patch
postcss (source)	`8.4.40` -> `8.4.49`	dependencies	patch
sass	`1.77.8` -> `1.81.0`	devDependencies	minor
svg-spritemap-webpack-plugin	`4.5.1` -> `4.7.0`	devDependencies	minor
webpack	`5.93.0` -> `5.96.1`	devDependencies	minor
webpack-dev-server	`5.0.4` -> `5.1.0`	devDependencies	minor

Release Notes

babel/babel (@babel/cli)

`v7.25.9`

Compare Source

🐛 Bug Fix

babel-parser, babel-template, babel-types
- #16905 fix: Keep type annotations in syntacticPlaceholders mode (@liuxingbaoyu)
babel-helper-compilation-targets, babel-preset-env
- #16907 fix: support BROWSERSLIST{,_CONFIG} env (@JLHwung)
Other
- #16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@victorenator)

🏠 Internal

babel-helper-transform-fixture-test-runner
- #16914 remove test options flaky (@JLHwung)

🏃‍♀️ Performance

babel-parser, babel-types
- #16918 perf: Make VISITOR_KEYS etc. faster to access (@liuxingbaoyu)

`v7.25.7`

Compare Source

🐛 Bug Fix

babel-helper-validator-identifier
- #16825 fix: update identifier to unicode 16 (@JLHwung)
babel-traverse
- #16814 fix: issue with node path keys updated on unrelated paths (@DylanPiercey)
babel-plugin-transform-classes
- #16797 Use an inclusion rather than exclusion list for super() check (@nicolo-ribaudo)
babel-generator
- #16788 Fix printing of TS infer in compact mode (@nicolo-ribaudo)
- #16785 Print TS type annotations for destructuring in assignment pattern (@nicolo-ribaudo)
- #16778 Respect [no LineTerminator here] after nodes (@nicolo-ribaudo)

💅 Polish

babel-types
- #16852 Add deprecated JSDOC for fields (@liuxingbaoyu)

🏠 Internal

babel-core
- #16820 Allow sync loading of ESM when --experimental-require-module (@nicolo-ribaudo)
babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
- #16858 Add browserslist config to external dependency (@JLHwung)
babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
- #16809 Archive syntax-import-reflection and syntax-decimal (@nicolo-ribaudo)
babel-generator
- #16779 Simplify logic for [no LineTerminator here] before nodes (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-plugin-transform-typescript
- #16875 perf: Avoid extra cloning of namespaces (@liuxingbaoyu)
babel-types
- #16842 perf: Improve @babel/types builders (@liuxingbaoyu)
- #16828 Only access BABEL_TYPES_8_BREAKING at startup (@nicolo-ribaudo)

`v7.25.6`

Compare Source

🐛 Bug Fix

babel-generator
- #16783 Properly print inner comments in TS array types (@nicolo-ribaudo)
- #16775 fix: jsx whitespace is not properly preserved when retainLines (@liuxingbaoyu)
babel-traverse
- #16727 fix: path.getAssignmentIdentifiers may be undefined (@liuxingbaoyu)
babel-parser
- #16761 fix: improve static canFollowModifier checks (@JLHwung)
babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3
- #16769 Only wrap functions in superPropertyGet helper (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
- #16780 Do not enforce printing space between ( and comments (@nicolo-ribaudo)
babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes
- #16781 Don't throw when enabling both syntax-import-{assertions,attributes} (@nicolo-ribaudo)
babel-generator
- #16782 TS union/intersection nested in union does not need parens (@nicolo-ribaudo)

🏠 Internal

babel-generator
- #16777 Remove unused parent params in the generator (@nicolo-ribaudo)

babel/babel (@babel/core)

`v7.26.0`

Compare Source

`v7.25.9`

Compare Source

🐛 Bug Fix

babel-parser, babel-template, babel-types
- #16905 fix: Keep type annotations in syntacticPlaceholders mode (@liuxingbaoyu)
babel-helper-compilation-targets, babel-preset-env
- #16907 fix: support BROWSERSLIST{,_CONFIG} env (@JLHwung)
Other
- #16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@victorenator)

🏠 Internal

babel-helper-transform-fixture-test-runner
- #16914 remove test options flaky (@JLHwung)

🏃‍♀️ Performance

babel-parser, babel-types
- #16918 perf: Make VISITOR_KEYS etc. faster to access (@liuxingbaoyu)

`v7.25.8`

Compare Source

🐛 Bug Fix

babel-core
- #16888 Restore public API of resolvePlugin/resolvePreset (@nicolo-ribaudo)

🏠 Internal

babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env
- #16824 Inline one-line syntax plugins (@nicolo-ribaudo)

`v7.25.7`

Compare Source

🐛 Bug Fix

babel-helper-validator-identifier
- #16825 fix: update identifier to unicode 16 (@JLHwung)
babel-traverse
- #16814 fix: issue with node path keys updated on unrelated paths (@DylanPiercey)
babel-plugin-transform-classes
- #16797 Use an inclusion rather than exclusion list for super() check (@nicolo-ribaudo)
babel-generator
- #16788 Fix printing of TS infer in compact mode (@nicolo-ribaudo)
- #16785 Print TS type annotations for destructuring in assignment pattern (@nicolo-ribaudo)
- #16778 Respect [no LineTerminator here] after nodes (@nicolo-ribaudo)

💅 Polish

babel-types
- #16852 Add deprecated JSDOC for fields (@liuxingbaoyu)

🏠 Internal

babel-core
- #16820 Allow sync loading of ESM when --experimental-require-module (@nicolo-ribaudo)
babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
- #16858 Add browserslist config to external dependency (@JLHwung)
babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
- #16809 Archive syntax-import-reflection and syntax-decimal (@nicolo-ribaudo)
babel-generator
- #16779 Simplify logic for [no LineTerminator here] before nodes (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-plugin-transform-typescript
- #16875 perf: Avoid extra cloning of namespaces (@liuxingbaoyu)
babel-types
- #16842 perf: Improve @babel/types builders (@liuxingbaoyu)
- #16828 Only access BABEL_TYPES_8_BREAKING at startup (@nicolo-ribaudo)

rollup/plugins (@rollup/plugin-node-resolve)

`v15.3.0`

2024-09-23

Features

feat: allow preferBuiltins to be a function (#1694)

`v15.2.4`

2024-09-22

Updates

chore: remove is-builtin-module (#1735)

babel/babel-loader (babel-loader)

`v9.2.1`

Compare Source

`v9.2.0`

Compare Source

cheeriojs/cheerio (cheerio)

`v1.0.0`

Compare Source

Cheerio 1.0 is here! 🎉

Announcement Blog Post

Breaking Changes

The minimum NodeJS version is now 18.17 or higher https://github.com/cheeriojs/cheerio/pull/3959
Import paths were simplified. For example, use cheerio/slim instead of
cheerio/lib/slim. https://github.com/cheeriojs/cheerio/pull/3970
The deprecated default Cheerio instance and static methods were removed. https://github.com/cheeriojs/cheerio/pull/3974

Before, it was possible to write code like this:
```
import cheerio, { html } from 'cheerio';

html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS
```
Make sure to always load documents first:
```
import * as cheerio from 'cheerio';

cheerio.load('<test></test>').html();
```
Node types previously re-exported by Cheerio must now be imported directly
from (domhandler)(https://github.com/fb55/domhandler). https://github.com/cheeriojs/cheerio/pull/3969
htmlparser2 options now reside exclusively under the xml key (https://github.com/cheeriojs/cheerio/pull/2916):
```
const $ = cheerio.load('<html>', {
  xml: {
    withStartIndices: true,
  },
});
```

codemirror/basic-setup (codemirror)

`v5.65.18`

Compare Source

jshttp/cookie (cookie)

`v0.7.2`

Compare Source

Fixed

Fix object assignment of hasOwnProperty (#177) bc38ffd

`v0.7.1`: 0.7.1

Compare Source

Fixed

Allow leading dot for domain (#174)
- Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

`v0.7.0`: 0.7.0

Compare Source

perf: parse cookies ~10% faster (#144 by @kurtextrem and #170)
- fix: narrow the validation of cookies to match RFC6265 (#167 by @bewinsnw)
- fix: add main to package.json for rspack (#166 by @proudparrot2)

expressjs/cookie-parser (cookie-parser)

`v1.4.7`

Compare Source

==========

deps: [email protected]
- Fix object assignment of hasOwnProperty
deps: [email protected]
- Allow leading dot for domain
  - Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
- Add fast path for serialize without options, use obj.hasOwnProperty when parsing
deps: [email protected]
- perf: parse cookies ~10% faster
- fix: narrow the validation of cookies to match RFC6265
- fix: add main to package.json for rspack
deps: [email protected]
- Add partitioned option
deps: [email protected]
- Add priority option
- Fix expires option to reject invalid dates
- pref: improve default decode speed
- pref: remove slow string split in parse
deps: [email protected]
- pref: read value only when assigning in parse
- pref: remove unnecessary regexp in parse

browserify/crypto-browserify (crypto-browserify)

`v3.12.1`

Compare Source

eslint/eslint (eslint)

`v8.57.1`

Compare Source

expressjs/express (express)

`v4.21.1`

Compare Source

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in https://github.com/expressjs/express/pull/6029
Release: 4.21.1 by @UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

`v4.21.0`

Compare Source

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in https://github.com/expressjs/express/pull/5935
[email protected] by @wesleytodd in https://github.com/expressjs/express/pull/5954
fix(deps): [email protected] by @wesleytodd in https://github.com/expressjs/express/pull/5951
Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in https://github.com/expressjs/express/pull/5946

New Contributors

@agadzinski93 made their first contribution in https://github.com/expressjs/express/pull/5946

Full Changelog: expressjs/express@4.20.0...4.21.0

`v4.20.0`

Compare Source

==========

deps: [email protected]
- Remove link renderization in html while redirecting
deps: [email protected]
- Remove link renderization in html while redirecting
deps: [email protected]
- add depth option to customize the depth level in the parser
- IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
Remove link renderization in html while using res.redirect
deps: [email protected]
- Adds support for named matching groups in the routes using a regex
- Adds backtracking protection to parameters without regexes defined
deps: encodeurl@~2.0.0
- Removes encoding of \, |, and ^ to align better with URL spec
Deprecate passing options.maxAge and options.expires to res.clearCookie
- Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

theoephraim/node-google-spreadsheet (google-spreadsheet)

`v4.1.4`

Compare Source

fix(updateProperties): getFieldMask ignore gridProperties #674
add dmno and remove/encrypt test-related secrets, swap jest for vitest 927e9e8

`v4.1.3`

Compare Source

Read headers in batch on getRows() #693
Fix type of sheetsById in docs #658
Update authentication.md #699
update axios, fix new google-auth-library issue, fixes #701 #700 #701
fix setDataValidation docs 2bca048
Update FUNDING.yml 5459a87
use correct type in docs 6d210a2
allow CI manual reruns e10cbb1

jantimon/html-webpack-plugin (html-webpack-plugin)

`v5.6.3`

Compare Source

`v5.6.2`

Compare Source

`v5.6.1`

Compare Source

jasmine/jasmine-npm (jasmine)

`v5.4.0`

Compare Source

Please see the release notes.

`v5.3.1`

Compare Source

Please see the release notes.

`v5.3.0`

Compare Source

Please see the release notes.

argos-ci/jest-puppeteer (jest-puppeteer)