fix(deps): update all non-major dependencies with stable versions (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/helpers@<7.26.10 (source)	>=7.28.4 → >=7.28.6
@babel/types (source)	^7.28.5 → ^7.28.6
@evilmartians/lefthook	^2.0.12 → ^2.0.15
@stylistic/stylelint-plugin	^4.0.0 → ^4.0.1
@types/node (source)	^24.10.4 → ^24.10.9
lodash-es (source)	^4.17.22 → ^4.17.23
postcss-html	^1.8.0 → ^1.8.1
sass	^1.94.3 → ^1.97.3
sass-embedded	^1.97.1 → ^1.97.3
vite (source)	^7.2.7 → ^7.3.1
vue (source)	^3.5.26 → ^3.5.27
vue-tsc (source)	^3.1.8 → ^3.2.3

---

Release Notes

babel/babel (@​babel/helpers@<7.26.10)

v7.28.6

Compare Source

v7.28.6 (2026-01-12)

Thanks @​kadhirash and @​kolvian for your first PRs!

🐛 Bug Fix

• babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
  • #​17589 Improve Unicode handling in code-frame tokenizer (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17556 fix: transform-regenerator correctly handles scope (@​liuxingbaoyu)
• babel-plugin-transform-react-jsx
  • #​17538 fix: Keep jsx comments (@​liuxingbaoyu)

💅 Polish

• babel-core, babel-standalone
  • #​17606 Polish(standalone): improve message on invalid preset/plugin (@​JLHwung)

🏠 Internal

• babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
  • #​17580 Allow Babel 8 in compatible Babel 7 plugins (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-react-jsx
  • #​17555 perf: Use lighter traversal for jsx __source,__self (@​liuxingbaoyu)

Committers: 7

• Babel Bot (@​babel-bot)
• Eliot Pontarelli (@​kolvian)
• Huáng Jùnliàng (@​JLHwung)
• Kadhirash Sivakumar (@​kadhirash)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• coderaiser (@​coderaiser)

evilmartians/lefthook (@​evilmartians/lefthook)

v2.0.15

Compare Source

• docs: clarify remote settings (#​1260) by @​mrexox
• feat: skip scripts if args given with empty file template (#​1277) by @​mrexox

v2.0.14

Compare Source

• fix: skip if any files template is empty (#​1275) by @​mrexox
• feat: add jsonc support (#​1274) by @​mrexox
• deps: switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#​1261) by @​scop
• fix: don't install custom hooks to hooks dir (#​1246) by @​scop
• deps: December 2025 (#​1209) by @​mrexox

v2.0.13

Compare Source

• fix: set extends to empty slice after loading remotes (#​1259) by @​mrexox
• fix: allow custom hooks in JSON schema by updating generator (#​1250) by @​jeonghoon11
• docs: remove duplicate config: false description (#​1245) by @​scop
• chore: add more tests (#​1244) by @​mrexox

stylelint-stylistic/stylelint-stylistic (@​stylistic/stylelint-plugin)

v4.0.1

Compare Source

Fixed

• Multiline pseudos are now aligned correctly with the @stylistic/indentation rule.

  Before:

  .foo:where(
  :not(
      .bar,
      .baz
  )
  ) {}

  Now:

  .foo:where(
    :not(
      .bar,
      .baz
    )
  ) {}

ota-meshi/postcss-html (postcss-html)

v1.8.1

Compare Source

What's Changed

• fix: crash in toJSON() due to document property. by @​ota-meshi in #​147

Full Changelog: ota-meshi/postcss-html@v1.8.0...v1.8.1

sass/dart-sass (sass)

v1.97.3

Compare Source

• Fix a bug where nesting an at-rule within multiple style rules in plain CSS
  could cause outer style rules to be omitted.

v1.97.2

Compare Source

• Additional fixes for implicit configuration when nested imports are involved.

sass/embedded-host-node (sass-embedded)

v1.97.3

Compare Source

• Fix a bug where nesting an at-rule within multiple style rules in plain CSS
  could cause outer style rules to be omitted.

v1.97.2

Compare Source

• Additional fixes for implicit configuration when nested imports are involved.

vitejs/vite (vite)

v7.3.1

Compare Source

Please refer to CHANGELOG.md for details.

vuejs/core (vue)

v3.5.27

Compare Source

Bug Fixes

• compile-sfc: correctly handle variable shadowing in for loop for defineProps destructuring. (#​14296) (6a1bb50), closes #​14294
• compiler-sfc: handle indexed access types in declare global blocks (#​14260) (e4091fe), closes #​14236
• compiler-sfc: use correct scope when resolving indexed access types from external files (#​14297) (f0f0a21), closes #​14292
• reactivity: collection iteration should inherit iterator instance methods (#​12644) (3c8b2fc), closes #​12615
• runtime-core: skip patching reserved props for custom elements (#​14275) (19cc7e2), closes #​14274
• server-renderer: use ssrRenderClass helper for className attribute (#​14327) (a4708f3)
• ssr: handle v-bind modifiers during render attrs (#​14263) (c2f5964), closes #​14262

vuejs/language-tools (vue-tsc)

v3.2.3

Compare Source

language-core

• feat: support configuration for language plugins (#​5678) - Thanks to @​KazariEX!
• fix: avoid defineModel breaking ast in lang="js" (#​5935) - Thanks to @​KazariEX!
• fix: infer object keys as string if it does not extend string (#​5933) - Thanks to @​serkodev!

typescript-plugin

• feat: correct rename behavior on same name shorthands in template (#​5907) - Thanks to @​KazariEX!
• fix: only forward quick info for original results without tags (#​5938) - Thanks to @​KazariEX!

vscode

• fix: correct indent for <style> and <script> tags (#​5925) - Thanks to @​serkodev!

v3.2.2

Compare Source

language-core

• fix: correct code features on v-bind shorthands of special attributes - Thanks to @​KazariEX!

language-plugin-pug

• feat: accurate Pug shorthand mapping (#​5906)
• fix: pre-map HTML to Pug offset attribute (#​5905)

language-service

• feat: strip ="" for boolean props completion edits (#​5888) - Thanks to @​KazariEX!
• fix: avoid duplicate directive modifiers in completion (#​5920) - Thanks to @​KazariEX!

typescript-plugin

• fix: only forward quick info and suggestion diagnostics for setup bindings (#​5892) - Thanks to @​KazariEX!

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone America/New_York, Automerge - Monday through Friday ( * * * * 1-5 ) in timezone America/New_York.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.