⬆️(dependencies) update js dependencies by renovate[bot] · Pull Request #371 · suitenumerique/cunningham

renovate · 2026-01-19T00:33:11Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/core (source)	`7.27.1` → `7.29.0`
@babel/plugin-proposal-decorators (source)	`7.27.1` → `7.29.0`
@babel/preset-typescript (source)	`7.27.1` → `7.28.5`
@changesets/cli (source)	`2.29.2` → `2.31.0`
@chromatic-com/storybook	`3.2.6` → `5.1.2`
@faker-js/faker (source)	`9.7.0` → `10.4.0`
@fontsource-variable/roboto-flex (source)	`5.2.5` → `5.2.8`
@fontsource/material-icons-outlined (source)	`5.2.5` → `5.2.6`
@hookform/resolvers (source)	`5.0.1` → `5.2.2`
@internationalized/date (source)	`3.12.0` → `3.12.1`
@react-aria/calendar	`3.9.5` → `3.10.0`
@react-aria/datepicker	`3.16.1` → `3.17.0`
@react-aria/i18n	`3.12.16` → `3.13.0`
@react-stately/calendar	`3.9.3` → `3.10.0`
@react-stately/datepicker	`3.16.1` → `3.17.0`
@storybook/addon-a11y (source)	`8.6.12` → `10.3.5`
@storybook/addon-actions (source)	`8.6.12` → `9.0.8`
@storybook/addon-essentials (source)	`8.6.12` → `8.6.14`
@storybook/addon-interactions (source)	`8.6.12` → `8.6.14`
@storybook/addon-links (source)	`8.6.12` → `10.3.5`
@storybook/react (source)	`8.6.12` → `10.3.5`
@storybook/react-vite (source)	`8.6.12` → `10.3.5`
@testing-library/dom	`10.4.0` → `10.4.1`
@testing-library/jest-dom	`6.6.3` → `6.9.1`
@testing-library/react	`16.3.0` → `16.3.2`
@types/jest (source)	`29.5.14` → `30.0.0`
@types/node (source)	`22.15.3` → `24.12.2`
@types/react (source)	`19.1.2` → `19.2.14`
@types/react-dom (source)	`19.1.3` → `19.2.3`
@typescript-eslint/eslint-plugin (source)	`8.31.1` → `8.59.0`
@typescript-eslint/parser (source)	`8.31.1` → `8.59.0`
@vitejs/plugin-react (source)	`4.4.1` → `6.0.1`
@vitest/ui (source)	`3.1.2` → `4.1.5`
babel-loader	`10.0.0` → `10.1.1`
chromatic (source)	`11.28.2` → `16.6.0`
commander	`13.1.0` → `14.0.3`
cross-env	`7.0.3` → `10.1.0`
css-loader	`7.1.2` → `7.1.4`
downshift (source)	`9.0.9` → `9.3.2`
eslint-config-next (source)	`15.3.1` → `16.2.4`
eslint-config-prettier	`10.1.2` → `10.1.8`
eslint-import-resolver-typescript	`4.3.4` → `4.4.4`
eslint-import-resolver-webpack (source)	`0.13.10` → `0.13.11`
eslint-plugin-compat	`6.0.2` → `7.0.1`
eslint-plugin-formatjs	`5.3.1` → `6.4.6`
eslint-plugin-import	`2.31.0` → `2.32.0`
eslint-plugin-prettier	`5.2.6` → `5.5.5`
eslint-plugin-react-hooks (source)	`5.2.0` → `7.1.1`
figlet	`1.8.1` → `1.11.0`
glob	`11.1.0` → `13.0.6`
jest (source)	`29.7.0` → `30.3.0`
jsdom	`26.1.0` → `29.0.2`
nodemon (source)	`3.1.10` → `3.1.14`
prettier (source)	`3.5.3` → `3.8.3`
react (source)	`19.1.0` → `19.2.5`
react-aria	`3.47.0` → `3.48.0`
react-aria-components	`1.16.0` → `1.17.0`
react-dom (source)	`19.1.0` → `19.2.5`
react-hook-form (source)	`7.56.2` → `7.74.0`
react-stately	`3.45.0` → `3.46.0`
sass	`1.87.0` → `1.99.0`
sass-loader	`16.0.5` → `16.0.7`
ts-jest (source)	`29.3.2` → `29.4.9`
tsc-alias (source)	`1.8.15` → `1.8.16`
turbo (source)	`2.5.2` → `2.9.6`
typescript (source)	`5.8.3` → `6.0.3`
vite-plugin-dts	`4.5.3` → `4.5.4`
vite-tsconfig-paths	`5.1.4` → `6.1.1`
vitest (source)	`3.1.2` → `4.1.5`
yup	`1.6.1` → `1.7.1`

Release Notes

babel/babel (@babel/core)

`v7.29.0`

Compare Source

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types
- #17750 [7.x backport] Add attributes import declaration builder (@JLHwung)
babel-standalone
- #17663 [7.x backport] feat(standalone): export async transform (@JLHwung)
- #17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser
- #17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)
- #17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)
babel-traverse
- #17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)
babel-plugin-transform-block-scoping, babel-traverse
- #17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3
- #17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

👓 Spec Compliance

babel-parser
- #17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)
babel-helper-validator-identifier
- #17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private
- #17534 Allow mixing private destructuring and rest (@CO0Ki3)
babel-parser
- #17521 Improve @babel/parser error typing (@JLHwung)
- #17491 fix: improve ts-only declaration parsing (@JLHwung)
babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
- #17519 fix: rest correctly returns plain array (@liuxingbaoyu)
babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
- #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)
babel-traverse
- #17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types
- #17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core
- #17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

`v7.28.4`

Compare Source

🏠 Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
- #17493 Update Jest to v30.1.1 (@JLHwung)
babel-plugin-transform-regenerator
- #17455 chore: Clean up transform-regenerator (@liuxingbaoyu)
babel-core
- #17474 Switch to @jridgewell/remapping (@mrginglymus)

`v7.28.3`

Compare Source

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
- #17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser
- #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)
- #17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime
- #17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
- #17444 Optimize do expression output (@JLHwung)

`v7.28.0`

Compare Source

🚀 New Feature

babel-node
- #17147 Support top level await in node repl (@liuxingbaoyu)
babel-types
- #17258 feat(matchesPattern): support super/private/meta (@JLHwung)
babel-compat-data, babel-preset-env
- #17355 Add explicit resource management to preset-env (@JLHwung)
babel-core, babel-parser
- #17390 Support sourceType: "commonjs" (@JLHwung)
babel-generator, babel-parser
- #17346 Materialize explicitResourceManagement parser plugin (@JLHwung)
babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
- #17391 LVal coverage updates (Part 2) (@JLHwung)
babel-parser, babel-traverse, babel-types
- #17378 Accept bigints in t.bigIntLiteral factory (@JLHwung)
babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
- #17277 Transform discard binding (@JLHwung)
babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
- #17163 Parse discard binding (@JLHwung)

🐛 Bug Fix

babel-helper-globals, babel-plugin-transform-classes, babel-traverse
- #17297 Create babel-helper-globals (@JLHwung)
babel-types
- #17009 feature: TSTypeOperator: keyof (#16799) (@coderaiser)

🏠 Internal

babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
- #17403 Update babel-polyfill packages (@nicolo-ribaudo)

`v7.27.7`

Compare Source

👓 Spec Compliance

babel-parser, babel-plugin-transform-classes
- #17203 Interepret parser allow* options as top level only (@JLHwung)
babel-parser
- #17371 fix: disable using in ambient context (@JLHwung)

🐛 Bug Fix

babel-core
- #17392 Improve TS babel config loading (@JLHwung)
babel-types
- #17376 fix: support negative bigint in valueToNode (@JLHwung)
babel-plugin-transform-parameters
- #17352 fix: Params of async function* should throw synchronously (@liuxingbaoyu)

🏠 Internal

babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread
- #17389 Use NodePath#splitExportDeclaration in destructuring transforms (@JLHwung)

`v7.27.4`

Compare Source

👓 Spec Compliance

babel-parser, babel-plugin-proposal-explicit-resource-management
- #17323 Disallow using in bare case statement (@JLHwung)

💅 Polish

babel-parser
- #17311 Improve parseExpression error messages (@JLHwung)

🔬 Output optimization

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #17287 Reduce regenerator size more (@liuxingbaoyu)
babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
- #17334 Use shorter method names for regenerator context (@nicolo-ribaudo)
- #17268 Reduce regenerator helper size (@liuxingbaoyu)
babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
- #17238 Split regeneratorRuntime into multiple helpers (@nicolo-ribaudo)

`v7.27.3`

Compare Source

🐛 Bug Fix

babel-generator
- #17324 Improve multiline comments handling in yield/await expression (@JLHwung)
babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
- #17328 Correctly set .displayName on GeneratorFunction (@nicolo-ribaudo)
babel-plugin-proposal-explicit-resource-management
- #17319 fix: handle shadowed binding in for using of body (@JLHwung)
- #17317 fix: support named evaluation for using declaration (@JLHwung)
babel-plugin-proposal-decorators, babel-types
- #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@magic-akari)
babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
- #17257 Preserve class id when transforming using declarations with exported class (@JLHwung)
babel-parser
- #17312 fix(parser): properly handle optional markers in generator class methods (@magic-akari)
- #17307 fix(parser): Terminate modifier parsing at newline (@magic-akari)
babel-generator, babel-parser
- #17308 Improve import phase parsing (@JLHwung)

babel/babel (@babel/preset-typescript)

`v7.28.5`

Compare Source

👓 Spec Compliance

babel-parser
- #17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)
babel-helper-validator-identifier
- #17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private
- #17534 Allow mixing private destructuring and rest (@CO0Ki3)
babel-parser
- #17521 Improve @babel/parser error typing (@JLHwung)
- #17491 fix: improve ts-only declaration parsing (@JLHwung)
babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
- #17519 fix: rest correctly returns plain array (@liuxingbaoyu)
babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
- #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)
babel-traverse
- #17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types
- #17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core
- #17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

changesets/changesets (@changesets/cli)

`v2.31.0`

Compare Source

Minor Changes

#1889 96ca062 Thanks @mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.
#1873 42943b7 Thanks @mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

d2121dc Thanks @Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.
#1888 036fdd4 Thanks @mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.
#1903 5c4731f Thanks @Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.
#1867 f61e716 Thanks @Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.
Updated dependencies [036fdd4, 036fdd4, 036fdd4]:
- @changesets/assemble-release-plan@6.0.10
- @changesets/get-dependents-graph@2.1.4
- @changesets/apply-release-plan@7.1.1
- @changesets/get-release-plan@4.0.16
- @changesets/config@3.1.4

`v2.30.0`

Compare Source

`v2.29.8`

Compare Source

`v2.29.7`

Compare Source

Patch Changes

Updated dependencies [957f24e]:
- @changesets/apply-release-plan@7.0.13

`v2.29.6`

Compare Source

Patch Changes

#1712 a3563b0 Thanks @benmccann! - Switch to maintained fork of external-editor

`v2.29.5`

Compare Source

Patch Changes

#1693 6352819 Thanks @Andarist! - Fixed an issue with workspace:^ and workspace:~ dependency ranges not being semantically treated as, respectively, ^CURRENT_VERSION and ~CURRENT_VERSION. This led to dependent packages being, at times, bumped too often when their dependencies with those ranges were bumped.
Updated dependencies [[6352819](https://r

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 7am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-01-19T00:33:46Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Quality	Maintenance
	@storybook/addon-actions@8.6.12 ⏵ 9.0.8	⁺¹	^-20
	eslint-config-next@15.3.1 ⏵ 16.1.6	⁺¹	⁺³
	jest@29.7.0 ⏵ 30.2.0	⁺¹	⁺¹
	@typescript-eslint/parser@8.19.1 ⏵ 8.56.1	⁺¹
	@storybook/react-vite@8.6.12 ⏵ 10.2.12	⁺¹	⁺⁸	⁺¹
	@react-aria/i18n@3.12.8 ⏵ 3.12.15	⁺¹	⁺¹
	@babel/preset-typescript@7.27.1 ⏵ 7.28.5
	@react-stately/calendar@3.8.0 ⏵ 3.9.2	⁺¹	⁺¹
	@babel/plugin-proposal-decorators@7.27.1 ⏵ 7.29.0			^-1
	@react-aria/calendar@3.8.0 ⏵ 3.9.4	⁺¹	⁺¹
	@react-aria/datepicker@3.14.2 ⏵ 3.16.0
	eslint-plugin-formatjs@5.3.1 ⏵ 6.2.0			⁺⁴
	@types/react-dom@19.1.3 ⏵ 19.2.3		⁺¹
	@react-stately/datepicker@3.14.0 ⏵ 3.16.0		⁺¹
	@types/jest@29.5.14 ⏵ 30.0.0
	@storybook/addon-a11y@8.6.12 ⏵ 10.2.12	⁺¹	⁺⁴	⁺¹
	@fontsource/material-icons-outlined@5.2.5 ⏵ 5.2.6		^-1	^-1
	vitest@3.1.2 ⏵ 4.0.18	⁺¹		^-1
	@types/react@19.1.2 ⏵ 19.2.14
	@babel/core@7.27.1 ⏵ 7.29.0
	@typescript-eslint/eslint-plugin@8.19.1 ⏵ 8.56.1	⁺¹	⁺¹
	react-aria-components@1.8.0 ⏵ 1.15.1	^-1	⁺¹
	@types/node@22.15.3 ⏵ 24.10.13	⁺¹	⁺¹	⁺²
	cross-env@7.0.3 ⏵ 10.1.0
	yup@1.6.1 ⏵ 1.7.1
	@vitest/ui@3.1.2 ⏵ 4.0.18	⁺¹	⁺⁵	⁺¹
	react-aria@3.39.0 ⏵ 3.46.0	⁺¹	⁺¹
	vite@6.4.1 ⏵ 7.3.1	⁺¹⁰
	tsc-alias@1.8.15 ⏵ 1.8.16
	eslint-plugin-import@2.31.0 ⏵ 2.32.0
	turbo@2.5.2 ⏵ 2.8.11	⁺¹	^-1	⁺¹
	vite-plugin-dts@4.5.3 ⏵ 4.5.4	⁺¹	⁺¹
See 34 more rows in the dashboard

View full report

socket-security · 2026-01-21T22:09:38Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

renovate Bot added the dependencies label Jan 19, 2026

renovate Bot force-pushed the renovate/js-dependencies branch 6 times, most recently from d3085ad to f406553 Compare January 21, 2026 22:09

renovate Bot force-pushed the renovate/js-dependencies branch 11 times, most recently from b46685d to 236ef7f Compare January 28, 2026 19:08

renovate Bot force-pushed the renovate/js-dependencies branch 10 times, most recently from c03678c to 323db46 Compare February 2, 2026 23:13

renovate Bot force-pushed the renovate/js-dependencies branch 15 times, most recently from 93c0eaf to eae6abe Compare February 15, 2026 04:35

renovate Bot force-pushed the renovate/js-dependencies branch 8 times, most recently from 67ad087 to 82dbd21 Compare February 21, 2026 00:32

renovate Bot force-pushed the renovate/js-dependencies branch 6 times, most recently from faaa603 to 65bbdb2 Compare March 1, 2026 10:02

⬆️(dependencies) update js dependencies

10d0c30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

⬆️(dependencies) update js dependencies#371

⬆️(dependencies) update js dependencies#371
renovate[bot] wants to merge 1 commit intomainfrom
renovate/js-dependencies

renovate Bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jan 19, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jan 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🏠 Internal

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

🚀 New Feature

🐛 Bug Fix

🏠 Internal

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

👓 Spec Compliance

💅 Polish

🔬 Output optimization

🐛 Bug Fix

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Configuration

Uh oh!

socket-security Bot commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jan 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jan 19, 2026 •

edited

Loading

socket-security Bot commented Jan 19, 2026 •

edited

Loading

socket-security Bot commented Jan 21, 2026 •

edited

Loading