Skip to content

chore(deps): bump the dependencies group across 1 directory with 35 updates - #5722

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-eb9239432f
Open

chore(deps): bump the dependencies group across 1 directory with 35 updates#5722
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-eb9239432f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 34 updates in the / directory:

Package From To
@types/express-serve-static-core 5.1.1 5.1.3
bonjour-service 1.3.0 1.4.4
http-proxy-middleware 4.1.1 4.2.0
ipaddr.js 2.3.0 2.5.0
open 11.0.0 11.0.1
tinyglobby 0.2.15 0.2.17
webpack-dev-middleware 8.0.3 8.1.1
ws 8.21.0 8.21.3
@babel/cli 7.28.6 7.29.7
@babel/core 7.29.0 7.29.7
@babel/eslint-parser 7.28.6 7.29.7
@babel/plugin-transform-object-assign 7.27.1 7.29.7
@babel/preset-env 7.29.2 7.29.7
@changesets/cli 2.31.0 2.31.1
@hono/node-server 1.19.14 1.19.17
@types/node 24.10.1 24.13.3
@types/picomatch 4.0.2 4.0.3
acorn 8.16.0 8.18.0
babel-loader 10.0.0 10.1.1
core-js 3.47.0 3.50.0
css-loader 7.1.2 7.1.4
eslint 9.39.1 9.39.5
eslint-plugin-n 17.23.1 17.24.0
hono 4.12.14 4.13.2
html-webpack-plugin 5.6.5 5.6.8
less 4.4.2 4.9.0
less-loader 12.3.0 12.3.3
memfs 4.57.1 4.68.1
prettier 3.6.2 3.9.6
puppeteer 25.3.0 25.7.0
tcp-port-used 1.0.2 1.0.3
typescript-eslint 8.59.3 8.67.0
webpack 5.108.0 5.109.2
webpack-cli 7.2.1 7.2.2

Updates @types/express-serve-static-core from 5.1.1 to 5.1.3

Commits

Updates bonjour-service from 1.3.0 to 1.4.4

Release notes

Sourced from bonjour-service's releases.

1.4.4

What's Changed

New Contributors

Full Changelog: onlxltd/bonjour-service@1.4.3...1.4.4

1.4.3

Full Changelog: onlxltd/bonjour-service@1.4.2...1.4.3

Update for index.ts to fix imports #79 Thanks to @​andersk & @​Nerivec for their work identifying this issue.

1.4.2

What's Changed

Full Changelog: onlxltd/bonjour-service@1.4.1...1.4.2

1.4.1

What's Changed

Full Changelog: onlxltd/bonjour-service@1.4.0...1.4.1

1.4.0

What's Changed

New Contributors

Full Changelog: onlxltd/bonjour-service@1.3.0...1.4.0

Commits
  • e72ca10 Update yarn.lock
  • 693311c Merge branch 'dependabot/npm_and_yarn/js-yaml-4.3.0'
  • 2f0b012 Merge branch 'dependabot/npm_and_yarn/tar-7.5.22'
  • f870315 Bump js-yaml from 4.2.0 to 4.3.0
  • a17fe30 Bump tar from 7.5.16 to 7.5.22
  • 38fadf7 Export classes as types too, not just values
  • ee3a3c0 Update for imports
  • 1eda77d Update .npmignore
  • d7746b1 Update yarn.lock
  • 6fe0a0d Bump js-yaml from 4.1.1 to 4.2.0
  • Additional commits viewable in compare view

Updates http-proxy-middleware from 4.1.1 to 4.2.0

Release notes

Sourced from http-proxy-middleware's releases.

v4.2.0

What's Changed

New Contributors

Full Changelog: chimurai/http-proxy-middleware@v4.1.1...v4.2.0

Changelog

Sourced from http-proxy-middleware's changelog.

v4.2.0

  • feat(types): export OnProxyEvent type
  • feat(debug-proxy-errors-plugin): diagnostic message for POST + bodyParser + ECONNRESET error
  • chore(package.json): update to httpxy v0.5.4
Commits
  • 4abb1ba chore(package.json): v4.2.0 (#1276)
  • d40ae3e chore(package.json): update dependencies (#1275)
  • 89a78d0 chore(debug-proxy-errors-plugin): fix BODY_PARSER_ERROR_MESSAGE formatting (#...
  • 7ba87a9 feat(debug-proxy-errors-plugin): debug message for bodyParser + ECONNRESET er...
  • 006f1a4 test(e2e): assert invalid multipart error log (#1272)
  • 22281bf test(e2e): add HttpAgent keepAlive test (#472) (#1267)
  • 5b37301 chore(package.json): bump dev deps (#1265)
  • 3695b93 refactor(errors): use HttpProxyMiddlewareError class (#1264)
  • b9242af feat(types): export OnProxyEvent type (#1263)
  • See full diff in compare view

Updates ipaddr.js from 2.3.0 to 2.5.0

Changelog

Sourced from ipaddr.js's changelog.

2.5.0 - 2026-08-04

  • remove ipaddr.min.js, end users must provide own minification/bundling
  • fix: compress the leftmost zero run in toString (RFC 5952, 4.2.3)
  • fix: strict IPv6 validation — reject :: with zero compression and hextets >4 hex digits
  • fix: reject non-numeric prefix length in subnetMaskFromPrefixLength
  • fix: compress trailing zero run in toString when a zoneIndex is present
  • fix: throw a descriptive error for malformed input in IPv6.parse

2.4.0 - 2026-05-03

  • remove Bower support
  • add RFC9637, RFC9602, RFC8215, RFC3879 reserved address ranges
Commits

Updates open from 11.0.0 to 11.0.1

Release notes

Sourced from open's releases.

v11.0.1

  • Fix WSL failure when the working directory is unreachable from Windows 6ac3fe4

sindresorhus/open@v11.0.0...v11.0.1

Commits

Updates tinyglobby from 0.2.15 to 0.2.17

Release notes

Sourced from tinyglobby's releases.

0.2.17

Changed

  • Enabled staged publishing for stronger supply-chain security

Fixed

  • Defaults when undefined is passed to any of the options by @​chloeelim
  • Drive-relative paths on Windows by @​Andrej730
  • FileSystemAdapter is now exported again

Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem

0.2.16

Fixed

Changed

  • Overhauled and optimized most internals by @​Torathion
  • Ignore patterns are no longer compiled twice by @​webpro

Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem

Changelog

Sourced from tinyglobby's changelog.

0.2.17

Changed

  • Enabled staged publishing for stronger supply-chain security

Fixed

  • Defaults when undefined is passed to any of the options by chloeelim
  • Drive-relative paths on Windows by Andrej730
  • FileSystemAdapter is now exported again

0.2.16

Fixed

Changed

  • Overhauled and optimized most internals by Torathion
  • Ignore patterns are no longer compiled twice by webpro
Commits

Updates webpack-dev-middleware from 8.0.3 to 8.1.1

Release notes

Sourced from webpack-dev-middleware's releases.

v8.1.1

Patch Changes

  • Fixed a crash when calling close() in plugin mode (isPlugin = true). Since the host (webpack-cli, webpack-dev-server, etc.) owns compiler.watch(), the middleware has no watching of its own to close, so close() now just calls the callback instead of throwing. (by @​bjohansebas in #2347)

v8.1.0

Minor Changes

  • Reuse an already active MultiCompiler watching session instead of starting a duplicate one (requires webpack >= 5.109). (by @​bjohansebas in #2371)

v8.0.4

Patch Changes

  • Replace the on-finished dependency with Node.js built-in stream.finished. (by @​bjohansebas in #2346)
Changelog

Sourced from webpack-dev-middleware's changelog.

8.1.1

Patch Changes

  • Fixed a crash when calling close() in plugin mode (isPlugin = true). Since the host (webpack-cli, webpack-dev-server, etc.) owns compiler.watch(), the middleware has no watching of its own to close, so close() now just calls the callback instead of throwing. (by @​bjohansebas in #2347)

8.1.0

Minor Changes

  • Reuse an already active MultiCompiler watching session instead of starting a duplicate one (requires webpack >= 5.109). (by @​bjohansebas in #2371)

8.0.4

Patch Changes

  • Replace the on-finished dependency with Node.js built-in stream.finished. (by @​bjohansebas in #2346)
Commits
  • be5fb38 chore(release): new release (#2377)
  • ac84095 feat(plugin): implement close method for plugin mode handling (#2347)
  • fa7b110 chore(release): new release (#2372)
  • 78a393b chore(deps-dev): bump find-my-way from 9.5.0 to 9.7.0 (#2373)
  • 517723f feat: reuse an already active MultiWatching (#2371)
  • 2677607 chore(release): new release (#2355)
  • ba9b083 chore(deps-dev): bump @​hono/node-server from 2.0.6 to 2.0.10 (#2365)
  • d13cb1a chore(deps): bump fast-uri from 3.1.2 to 3.1.4 (#2366)
  • 8841f50 chore(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 (#2367)
  • 2849ccb chore(deps): bump actions/checkout in the dependencies group (#2363)
  • Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

  • Empty fragments are now counted toward the limit (a2f4e7c0).
  • The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).
Commits
  • c791e70 [dist] 8.21.3
  • e97a20e [fix] Reject offers with client_max_window_bits below config
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • ae1de54 [dist] 8.21.1
  • 8e9511b [ci] Trust Coveralls Homebrew tap
  • f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
  • 8df8265 [ci] Update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates @babel/cli from 7.28.6 to 7.29.7

Release notes

Sourced from @​babel/cli's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @babel/core from 7.29.0 to 7.29.7

Release notes

Sourced from @​babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @babel/eslint-parser from 7.28.6 to 7.29.7

Release notes

Sourced from @​babel/eslint-parser's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @babel/plugin-transform-object-assign from 7.27.1 to 7.29.7

Release notes

Sourced from @​babel/plugin-transform-object-assign's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/plugin-transform-object-assign since your current version.


Updates @babel/preset-env from 7.29.2 to 7.29.7

Release notes

Sourced from @​babel/preset-env's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Changelog

Sourced from @​changesets/cli's changelog.

2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Commits

Updates @hono/node-server from 1.19.14 to 1.19.17

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


Updates @types/node from 24.10.1 to 24.13.3

Commits

Updates @types/picomatch from 4.0.2 to 4.0.3

Commits

Updates acorn from 8.16.0 to 8.18.0

Commits
  • d788421 Mark version 8.18.0
  • b61cb9a Add startLocation option
  • c8d515c Don't compute curLine when locations are off
  • a7bd3cd Reject an unparenthesized arrow function as the left operand of **
  • b7c31b6 Fix mistake in previous patch
  • 5c4af50 Avoid scanning from start of document in loose parser's resetTo
  • 5b9d16c Mark version 8.17.0
  • 449f9fa Make linter happy
  • 9e1bced Add a strict option to turn on strict mode for scripts
  • 8a47812 Convert stack overflow errors to SyntaxError instances
  • Additional commits viewable in compare view

Updates babel-loader from 10.0.0 to 10.1.1

Release notes

Sourced from babel-loader's releases.

v10.1.1

What's Changed

Full Changelog: babel/babel-loader@v10.1.0...v10.1.1

v10.1.0

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v10.0.0...v10.1.0

Commits

@dependabot
chore(deps): bump the dependencies group across 1 directory with 35 u…
2c4fce6 
…pdates

Bumps the dependencies group with 34 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/express-serve-static-core](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-serve-static-core) | `5.1.1` | `5.1.3` |
| [bonjour-service](https://github.com/onlxltd/bonjour-service) | `1.3.0` | `1.4.4` |
| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `4.1.1` | `4.2.0` |
| [ipaddr.js](https://github.com/whitequark/ipaddr.js) | `2.3.0` | `2.5.0` |
| [open](https://github.com/sindresorhus/open) | `11.0.0` | `11.0.1` |
| [tinyglobby](https://github.com/SuperchupuDev/tinyglobby) | `0.2.15` | `0.2.17` |
| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `8.0.3` | `8.1.1` |
| [ws](https://github.com/websockets/ws) | `8.21.0` | `8.21.3` |
| [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `7.28.6` | `7.29.7` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |
| [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.28.6` | `7.29.7` |
| [@babel/plugin-transform-object-assign](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-object-assign) | `7.27.1` | `7.29.7` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.2` | `7.29.7` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `2.31.0` | `2.31.1` |
| [@hono/node-server](https://github.com/honojs/node-server) | `1.19.14` | `1.19.17` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `24.13.3` |
| [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch) | `4.0.2` | `4.0.3` |
| [acorn](https://github.com/acornjs/acorn) | `8.16.0` | `8.18.0` |
| [babel-loader](https://github.com/babel/babel-loader) | `10.0.0` | `10.1.1` |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.47.0` | `3.50.0` |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [eslint](https://github.com/eslint/eslint) | `9.39.1` | `9.39.5` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `17.23.1` | `17.24.0` |
| [hono](https://github.com/honojs/hono) | `4.12.14` | `4.13.2` |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.5` | `5.6.8` |
| [less](https://github.com/less/less.js) | `4.4.2` | `4.9.0` |
| [less-loader](https://github.com/webpack/less-loader) | `12.3.0` | `12.3.3` |
| [memfs](https://github.com/streamich/memfs) | `4.57.1` | `4.68.1` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.9.6` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `25.3.0` | `25.7.0` |
| [tcp-port-used](https://github.com/stdarg/tcp-port-used) | `1.0.2` | `1.0.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.3` | `8.67.0` |
| [webpack](https://github.com/webpack/webpack) | `5.108.0` | `5.109.2` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.1` | `7.2.2` |



Updates `@types/express-serve-static-core` from 5.1.1 to 5.1.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express-serve-static-core)

Updates `bonjour-service` from 1.3.0 to 1.4.4
- [Release notes](https://github.com/onlxltd/bonjour-service/releases)
- [Commits](onlxltd/bonjour-service@1.3.0...1.4.4)

Updates `http-proxy-middleware` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v4.1.1...v4.2.0)

Updates `ipaddr.js` from 2.3.0 to 2.5.0
- [Changelog](https://github.com/whitequark/ipaddr.js/blob/main/Changes.md)
- [Commits](https://github.com/whitequark/ipaddr.js/commits)

Updates `open` from 11.0.0 to 11.0.1
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](sindresorhus/open@v11.0.0...v11.0.1)

Updates `tinyglobby` from 0.2.15 to 0.2.17
- [Release notes](https://github.com/SuperchupuDev/tinyglobby/releases)
- [Changelog](https://github.com/SuperchupuDev/tinyglobby/blob/main/CHANGELOG.md)
- [Commits](SuperchupuDev/tinyglobby@0.2.15...0.2.17)

Updates `webpack-dev-middleware` from 8.0.3 to 8.1.1
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v8.0.3...v8.1.1)

Updates `ws` from 8.21.0 to 8.21.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.3)

Updates `@babel/cli` from 7.28.6 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-cli)

Updates `@babel/core` from 7.29.0 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core)

Updates `@babel/eslint-parser` from 7.28.6 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/eslint/babel-eslint-parser)

Updates `@babel/plugin-transform-object-assign` from 7.27.1 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-object-assign)

Updates `@babel/preset-env` from 7.29.2 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-env)

Updates `@changesets/cli` from 2.31.0 to 2.31.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/@changesets/cli@2.31.1/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.31.1/packages/cli)

Updates `@hono/node-server` from 1.19.14 to 1.19.17
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.14...v1.19.17)

Updates `@types/node` from 24.10.1 to 24.13.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/picomatch` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch)

Updates `acorn` from 8.16.0 to 8.18.0
- [Commits](acornjs/acorn@8.16.0...8.18.0)

Updates `babel-loader` from 10.0.0 to 10.1.1
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](babel/babel-loader@v10.0.0...v10.1.1)

Updates `core-js` from 3.47.0 to 3.50.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.50.0/packages/core-js)

Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v7.1.2...v7.1.4)

Updates `eslint` from 9.39.1 to 9.39.5
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.1...v9.39.5)

Updates `eslint-plugin-n` from 17.23.1 to 17.24.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v17.23.1...v17.24.0)

Updates `hono` from 4.12.14 to 4.13.2
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.14...v4.13.2)

Updates `html-webpack-plugin` from 5.6.5 to 5.6.8
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](jantimon/html-webpack-plugin@v5.6.5...v5.6.8)

Updates `httpxy` from 0.5.3 to 0.5.5
- [Release notes](https://github.com/unjs/httpxy/releases)
- [Changelog](https://github.com/unjs/httpxy/blob/main/CHANGELOG.md)
- [Commits](unjs/httpxy@v0.5.3...v0.5.5)

Updates `less` from 4.4.2 to 4.9.0
- [Release notes](https://github.com/less/less.js/releases)
- [Changelog](https://github.com/less/less.js/blob/master/CHANGELOG.md)
- [Commits](less/less.js@v4.4.2...v4.9.0)

Updates `less-loader` from 12.3.0 to 12.3.3
- [Release notes](https://github.com/webpack/less-loader/releases)
- [Changelog](https://github.com/webpack/less-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/less-loader@v12.3.0...v12.3.3)

Updates `memfs` from 4.57.1 to 4.68.1
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.57.1...v4.68.1)

Updates `prettier` from 3.6.2 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.9.6)

Updates `puppeteer` from 25.3.0 to 25.7.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v25.3.0...puppeteer-v25.7.0)

Updates `tcp-port-used` from 1.0.2 to 1.0.3
- [Commits](https://github.com/stdarg/tcp-port-used/commits)

Updates `typescript-eslint` from 8.59.3 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/typescript-eslint)

Updates `webpack` from 5.108.0 to 5.109.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.108.0...v5.109.2)

Updates `webpack-cli` from 7.2.1 to 7.2.2
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.1...webpack-cli@7.2.2)

---
updated-dependencies:
- dependency-name: "@types/express-serve-static-core"
  dependency-version: 5.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: bonjour-service
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: http-proxy-middleware
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ipaddr.js
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: open
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tinyglobby
  dependency-version: 0.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: webpack-dev-middleware
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ws
  dependency-version: 8.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@babel/cli"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@babel/core"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@babel/eslint-parser"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@babel/plugin-transform-object-assign"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@babel/preset-env"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 24.13.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/picomatch"
  dependency-version: 4.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: acorn
  dependency-version: 8.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: babel-loader
  dependency-version: 10.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: core-js
  dependency-version: 3.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: css-loader
  dependency-version: 7.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 9.39.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint-plugin-n
  dependency-version: 17.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: hono
  dependency-version: 4.13.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: html-webpack-plugin
  dependency-version: 5.6.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: httpxy
  dependency-version: 0.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: less
  dependency-version: 4.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: less-loader
  dependency-version: 12.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: memfs
  dependency-version: 4.68.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: puppeteer
  dependency-version: 25.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tcp-port-used
  dependency-version: 1.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: webpack
  dependency-version: 5.109.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: webpack-cli
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026
@changeset-bot

changeset-bot Bot commented Aug 17, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 2c4fce6

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Aug 17, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​babel/​plugin-transform-object-assign@​7.27.1 ⏵ 7.29.71001006589 -1100
Updatedless@​4.4.2 ⏵ 4.9.06610096 +1796 -1100
Updated@​types/​picomatch@​4.0.2 ⏵ 4.0.31001007381100
Updatedtypescript-eslint@​8.59.3 ⏵ 8.67.010010074 +198100
Updated@​types/​express-serve-static-core@​5.1.1 ⏵ 5.1.310010075 +189100
Updated@​babel/​preset-env@​7.29.2 ⏵ 7.29.7971007693 -3100
Updated@​babel/​cli@​7.28.6 ⏵ 7.29.7991007695100
Updated@​babel/​eslint-parser@​7.28.6 ⏵ 7.29.71001007792100
Updatedtinyglobby@​0.2.15 ⏵ 0.2.17100 +11007782100
Updated@​babel/​core@​7.29.0 ⏵ 7.29.797100 +179 +191100
Updatedopen@​11.0.0 ⏵ 11.0.199100100 +181 -6100
Updated@​types/​node@​24.10.1 ⏵ 24.13.3100 +110081 +195100
Updatedwebpack@​5.108.0 ⏵ 5.109.28210093 +199 +2100
Updatedcss-loader@​7.1.2 ⏵ 7.1.499 +110010084100
Updatedtcp-port-used@​1.0.2 ⏵ 1.0.310010010085 +3100
Updatedbabel-loader@​10.0.0 ⏵ 10.1.110010010085100
Updatedipaddr.js@​2.3.0 ⏵ 2.5.0100 +1100100 +186 +5100
Updatedacorn@​8.16.0 ⏵ 8.18.0100 +1100100 +189100
Updatedcore-js@​3.47.0 ⏵ 3.50.094 +110099 +189100
Updatedhttpxy@​0.5.3 ⏵ 0.5.5100 +1100100 +190 -1100
Updatedless-loader@​12.3.0 ⏵ 12.3.399 +110010090 +3100
Updatedhttp-proxy-middleware@​4.1.1 ⏵ 4.2.099 +110010091 -2100
Updatedbonjour-service@​1.3.0 ⏵ 1.4.410010010091100
Updatedpuppeteer@​25.3.0 ⏵ 25.7.0921009397 +1100
Updatedhtml-webpack-plugin@​5.6.5 ⏵ 5.6.89910010092 +6100
Updatedmemfs@​4.57.1 ⏵ 4.68.198 +110093 +196 +2100
Updatedws@​8.21.0 ⏵ 8.21.39910010093100
Updatedeslint-plugin-n@​17.23.1 ⏵ 17.24.09810010094 -1100
Updated@​hono/​node-server@​1.19.14 ⏵ 1.19.17100100 +210095 -1100
Updatedwebpack-cli@​7.2.1 ⏵ 7.2.29710010096 +2100
Updatedhono@​4.12.14 ⏵ 4.13.2100 +1100 +5097 +196100
Updatedeslint@​9.39.1 ⏵ 9.39.597 +110010096 +1100
See 3 more rows in the dashboard

View full report

@socket-security

socket-security Bot commented Aug 17, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm webpack is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/webpack@5.109.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/webpack@5.109.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants