Update all non-major dependencies #307

renovate · 2025-06-07T12:57:57Z

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/cli (source)	`^7.27.2` -> `^7.28.0`
@babel/core (source)	`^7.27.3` -> `^7.28.0`
@babel/preset-env (source)	`^7.27.2` -> `^7.28.0`
@types/lodash (source)	`^4.17.17` -> `^4.17.20`
compression	`^1.8.0` -> `^1.8.1`
concurrently	`^9.1.2` -> `^9.2.0`
dotenv	`^16.5.0` -> `^16.6.1`
dotenv	`16.5.0` -> `16.6.1`
express-rate-limit	`^7.5.0` -> `^7.5.1`
express-session	`^1.18.1` -> `^1.18.2`
globals	`^16.2.0` -> `^16.3.0`
less (source)	`^4.3.0` -> `^4.4.0`
morgan	`^1.10.0` -> `^1.10.1`
prettier (source)	`^3.5.3` -> `^3.6.2`
webpack	`^5.99.9` -> `^5.100.2`
webpack-dev-server	`^5.2.1` -> `^5.2.2`

Release Notes

babel/babel (@babel/cli)

`v7.28.0`

Compare Source

🚀 New Feature

babel-node
- #17147 Support top level await in node repl (@liuxingbaoyu)
babel-types
- #17258 feat(matchesPattern): support super/private/meta (@JLHwung)
babel-compat-data, babel-preset-env
- #17355 Add explicit resource management to preset-env (@JLHwung)
babel-core, babel-parser
- #17390 Support sourceType: "commonjs" (@JLHwung)
babel-generator, babel-parser
- #17346 Materialize explicitResourceManagement parser plugin (@JLHwung)
babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
- #17391 LVal coverage updates (Part 2) (@JLHwung)
babel-parser, babel-traverse, babel-types
- #17378 Accept bigints in t.bigIntLiteral factory (@JLHwung)
babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
- #17277 Transform discard binding (@JLHwung)
babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
- #17163 Parse discard binding (@JLHwung)

🐛 Bug Fix

babel-helper-globals, babel-plugin-transform-classes, babel-traverse
- #17297 Create babel-helper-globals (@JLHwung)
babel-types
- #17009 feature: TSTypeOperator: keyof (#16799) (@coderaiser)

🏠 Internal

babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
- #17403 Update babel-polyfill packages (@nicolo-ribaudo)

expressjs/compression (compression)

`v1.8.1`

Compare Source

==========

deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

open-cli-tools/concurrently (concurrently)

motdotla/dotenv (dotenv)

`v16.6.1`

Compare Source

Changed

Default quiet to true – hiding the runtime log message (#874)
NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

`v16.6.0`

Compare Source

Added

Default log helpful message [[email protected]] injecting env (1) from .env (#870)
Use { quiet: true } to suppress
Aligns dotenv more closely with dotenvx.

express-rate-limit/express-rate-limit (express-rate-limit)

`v7.5.1`

Compare Source

Changed

Narrowed type of standardHeaders from string to just the supported values via a TypeScript const assertion (#506)

You can view the full changelog here.

expressjs/session (express-session)

`v1.18.2`

Compare Source

==========

deps: [email protected]
deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

sindresorhus/globals (globals)

`v16.3.0`

Compare Source

Update globals (#304) 8c029d9

less/less.js (less)

`v4.4.0`

Compare Source

#4337 Add support for layer at-rule (@puckowski)
#4340 Add support for import at-rule layer functionality (@puckowski)
#4346 Fix #4343 add color operands (@puckowski)

expressjs/morgan (morgan)

`v1.10.1`

Compare Source

===================

deps: on-headers@~1.1.0
- Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

prettier/prettier (prettier)

`v3.6.2`

Compare Source

diff

Markdown: Add missing blank line around code block (#17675 by @fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

<!-- Prettier 3.6.1 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```
   1. Another
   2. List

<!-- Prettier 3.6.2 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

`v3.6.1`

Compare Source

diff

TypeScript: Allow const without initializer (#17650, #17654 by @fisker)

// Input
export const version: string;

// Prettier 3.6.0 (--parser=babel-ts)
SyntaxError: Unexpected token (1:21)
> 1 | export const version: string;
    |                     ^

// Prettier 3.6.0 (--parser=oxc-ts)
SyntaxError: Missing initializer in const declaration (1:14)
> 1 | export const version: string;
    |              ^^^^^^^^^^^^^^^

// Prettier 3.6.1
export const version: string;

Miscellaneous: Avoid closing files multiple times (#17665 by @43081j)

When reading a file to infer the interpreter from a shebang, we use the
n-readlines library to read the first line in order to get the shebang.

This library closes files when it reaches EOF, and we later try close the same
files again. We now close files only if n-readlines did not already close
them.

`v3.6.0`

Compare Source

diff

🔗 Release Notes

webpack/webpack (webpack)

`v5.100.2`

Compare Source

`v5.100.1`

Compare Source

`v5.100.0`

Compare Source

Fixes

Fixed the case where an ES modules entry chunk depends on the runtime chunk hash
Handle function exports in webpack module wrapper
Ensure dependent chunks are imported before startup & fix duplicate export of 'default'
Generate lose closing brace when exports are unprovided
CleanPlugin doesn't unlink same file twice
Fixed unexpected error codes from fs.unlink on Windows
Typescript types

Features

HMR support for ES modules output
ES module output mode now fully supports splitChunks when external variables and runtimeChunk are not set.
Added support using keyword
Implemented tc39 Defer Module Evaluation (experiment)
Support dynamic template literals expressions for new URL(...)
Enable ES modules worker chunk loading for Node.js targets
Improved support for destructing in DefinePlugin
Added VirtualUrlPlugin to support virtual: modules

Performance Improvements

Remove useless startup entrypoint runtime for ES modules output
Cache new URL(...) evaluate expression

webpack/webpack-dev-server (webpack-dev-server)

`v5.2.2`

Compare Source

Configuration

📅 Schedule: Branch creation - "after 8am and before 8pm on saturday" in timezone America/Indiana/Indianapolis, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 86c4714 to 5f4455d Compare June 26, 2025 04:12

renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 5686eb8 to 5b8cc7c Compare July 4, 2025 20:08

renovate bot force-pushed the renovate/all-minor-patch branch from 5b8cc7c to c5cc626 Compare July 5, 2025 13:31

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 67655bf to 5d2056c Compare July 18, 2025 20:01

renovate bot force-pushed the renovate/all-minor-patch branch from 5d2056c to 9f4a85f Compare July 19, 2025 17:59

Update all non-major dependencies

13d4758

renovate bot force-pushed the renovate/all-minor-patch branch from 9f4a85f to 13d4758 Compare July 20, 2025 18:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update all non-major dependencies #307

Update all non-major dependencies #307

renovate bot commented Jun 7, 2025 •

edited

Loading

Uh oh!

Uh oh!

Update all non-major dependencies #307

Are you sure you want to change the base?

Update all non-major dependencies #307

Conversation

renovate bot commented Jun 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🚀 New Feature

🐛 Bug Fix

🏠 Internal

What's Changed

New Contributors

Changed

Added

Changed

Markdown: Add missing blank line around code block (#​17675 by @​fisker)

TypeScript: Allow const without initializer (#​17650, #​17654 by @​fisker)

Miscellaneous: Avoid closing files multiple times (#​17665 by @​43081j)

Fixes

Features

Performance Improvements

Configuration

Uh oh!

Uh oh!

renovate bot commented Jun 7, 2025 •

edited

Loading

Markdown: Add missing blank line around code block (#17675 by @fisker)

TypeScript: Allow const without initializer (#17650, #17654 by @fisker)

Miscellaneous: Avoid closing files multiple times (#17665 by @43081j)