Skip to content

Update npm non-major dependencies#32843

Merged
t3chguy merged 6 commits intodevelopfrom
renovate/npm-minor-patch
Mar 20, 2026
Merged

Update npm non-major dependencies#32843
t3chguy merged 6 commits intodevelopfrom
renovate/npm-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 17, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@babel/preset-env (source) 7.29.0 → 7.29.2 age confidence
@babel/runtime (source) 7.28.6 → 7.29.2 age confidence
@formatjs/intl-segmenter 12.1.1 → 12.1.2 age confidence
@jest/globals (source) 30.2.0 → 30.3.0 age confidence
@nx/jest (source) 22.5.3 → 22.5.4 age confidence
@sentry/browser (source) 10.40.0 → 10.43.0 age confidence
@stylistic/eslint-plugin (source) 5.9.0 → 5.10.0 age confidence
@types/node (source) 22.19.13 → 22.19.15 age confidence
@types/sanitize-html (source) 2.16.0 → 2.16.1 age confidence
@typescript-eslint/eslint-plugin (source) 8.56.1 → 8.57.1 age confidence
@typescript-eslint/parser (source) 8.56.1 → 8.57.1 age confidence
babel-loader 10.0.0 → 10.1.1 age confidence
css-tree 3.1.0 → 3.2.1 age confidence
katex (source) 0.16.33 → 0.16.38 age confidence
knip (source) 5.85.0 → 5.87.0 age confidence
lint-staged 16.3.0 → 16.4.0 age confidence
maplibre-gl (source) 5.19.0 → 5.20.1 age confidence
nx (source) 22.5.3 → 22.5.4 age confidence
oidc-client-ts 3.4.1 → 3.5.0 age confidence
posthog-js (source) 1.356.1 → 1.360.2 age confidence
react-virtuoso (source) 4.18.1 → 4.18.3 age confidence
serialize-javascript 7.0.3 → 7.0.4 age confidence
storybook-addon-vis (source) 3.1.2 → 3.1.3 age confidence
temporal-polyfill 0.3.0 → 0.3.2 age confidence
terser-webpack-plugin 5.3.16 → 5.4.0 age confidence
testcontainers 11.12.0 → 11.13.0 age confidence
webpack 5.105.3 → 5.105.4 age confidence

Release Notes

babel/babel (@​babel/preset-env)

v7.29.2

Compare Source

babel/babel (@​babel/runtime)

v7.29.2

Compare Source

formatjs/formatjs (@​formatjs/intl-segmenter)

v12.1.2

Compare Source

jestjs/jest (@​jest/globals)

v30.3.0

Compare Source

Features
  • [jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#​15844)
  • [jest-fake-timers] Add setTimerTickMode to configure how timers advance
  • [*] Reduce token usage when run through LLMs (3f17932)
Fixes
  • [jest-config] Keep CLI coverage output when using --json with --outputFile (#​15918)
  • [jest-mock] Use Symbol from test environment (#​15858)
  • [jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#​15864)
  • [jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#​15842)
  • [jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#​15851)
  • [jest-util] Make sure process.features.require_module is false (#​15867)
Chore & Maintenance
  • [*] Replace remaining micromatch uses with picomatch
  • [deps] Update to sinon/fake-timers v15
  • [docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#​15849)
  • Updated Twitter icon to match the latest brand guidelines (#​15869)
nrwl/nx (@​nx/jest)

v22.5.4

Compare Source

22.5.4 (2026-03-04)

🚀 Features
  • core: add .nx/polygraph to gitignore in migration and caia (#​34659)
🩹 Fixes
  • angular-rspack: use relative path for postcss-cli-resources output (#​34681, #​34092)
  • core: support canonical SSH URLs when extracting GitHub user/repo slug during nx release (#​31684, #​31682)
  • core: update sourceRespository description of nx import (#​34606)
  • core: update minimatch to 10.2.4 (#​34660)
  • core: skip writing deps cache if already up-to-date (#​34582)
  • core: resolve false positive loop detection when running with Bun (#​34640, #​0, #​1, #​2, #​3, #​4, #​5, #​6, #​33997)
  • core: fall back to invoking PM in detection (#​34691)
  • core: restore CNW user flow to match v22.1.3 (#​34671)
  • gradle: tee batch runner output to stderr for terminal display (#​34630)
  • maven: synchronize batch runner invoke() to prevent concurrent access (#​34600)
  • misc: boost CLI command reference search ranking (#​34625)
  • misc: fix broken nx.dev redirects and remove legacy redirect-rules files (#​34673)
  • misc: use pathToFileURL for cross-platform path handling in postcss-cli-resources (#​34676, #​33052)
  • misc: exclude .netlify paths from Framer proxy edge function (1ce5e91f5e)
  • repo: reset package.json files after local release (#​34648)
  • repo: remove redundant inputs override for build-base target (#​34649)
  • vitest: respect reporters from target options in vitest executor (#​34663, #​34495)
❤️ Thank You
getsentry/sentry-javascript (@​sentry/browser)

v10.43.0

Compare Source

Important Changes

  • feat(nextjs): Add Turbopack support for React component name annotation (#​19604)

    We added experimental support for React component name annotation in Turbopack builds. When enabled, JSX elements
    are annotated with data-sentry-component, data-sentry-element, and data-sentry-source-file attributes at build
    time. This enables searching Replays by component name, seeing component names in breadcrumbs, and performance
    monitoring — previously only available with webpack builds.

    This feature requires Next.js 16+ and is currently behind an experimental flag:

    // next.config.ts
import { withSentryConfig } from '@​sentry/nextjs';

export default withSentryConfig(nextConfig, {
  _experimental: {
    turbopackReactComponentAnnotation: {
      enabled: true,
      ignoredComponents: ['Header', 'Footer'], // optional
    },
  },
});

  • feat(hono): Instrument middlewares app.use() (#​19611)

    Hono middleware registered via app.use() is now automatically instrumented, creating spans for each middleware invocation.

Other Changes
  • feat(node-core,node): Add tracePropagation option to http and fetch integrations (#​19712)
  • feat(hono): Use parametrized names for errors (#​19577)
  • fix(browser): Fix missing traces for user feedback (#​19660)
  • fix(cloudflare): Use correct Proxy receiver in instrumentDurableObjectStorage (#​19662)
  • fix(core): Standardize Vercel AI span descriptions to align with GenAI semantic conventions (#​19624)
  • fix(deps): Bump hono to 4.12.5 to fix multiple vulnerabilities (#​19653)
  • fix(deps): Bump svgo to 4.0.1 to fix DoS via entity expansion (#​19651)
  • fix(deps): Bump tar to 7.5.10 to fix hardlink path traversal (#​19650)
  • fix(nextjs): Align Turbopack module metadata injection with webpack behavior (#​19645)
  • fix(node): Prevent duplicate LangChain spans from double module patching (#​19684)
  • fix(node-core,vercel-edge): Use HEROKU_BUILD_COMMIT env var for default release (#​19617)
  • fix(sveltekit): Fix file system race condition in source map cleaning (#​19714)
  • fix(tanstackstart-react): Add workerd and worker export conditions (#​19461)
  • fix(vercel-ai): Prevent tool call span map memory leak (#​19328)
  • feat(deps): Bump @​sentry/rollup-plugin from 5.1.0 to 5.1.1 (#​19658)
Internal Changes
  • chore: Migrate to oxlint (#​19134)
  • chore(aws-serverless): Don't build layer in build:dev command (#​19586)
  • chore(ci): Allow triage action to run on issues from external users (#​19701)
  • chore(deps): Bump immutable from 4.0.0 to 4.3.8 (#​19637)
  • chore(e2e): Expand microservices E2E application with auto-tracing tests (#​19652)
  • chore(hono): Prepare readme and add craft entry (#​19583)
  • chore(sourcemaps): Make sourcemaps e2e test more generic (#​19678)
  • chore(tanstackstart-react): Add link to docs in README (#​19697)
  • feat(deps): Bump @​hono/node-server from 1.19.4 to 1.19.10 (#​19634)
  • feat(deps): Bump underscore from 1.12.1 to 1.13.8 (#​19616)
  • test(angular): Fix failing canary test (#​19639)
  • test(nextjs): Add sourcemaps test for nextjs turbopack (#​19647)
  • tests(e2e): Add microservices e2e for nestjs (#​19642)
  • tests(e2e): Add websockets e2e for nestjs (#​19630)

Work in this release was contributed by @​dmmulroy, @​lithdew, and @​smorimoto. Thank you for your contributions!

v10.42.0

Compare Source

  • feat(consola): Enhance Consola integration to extract first-param object as searchable attributes (#​19534)
  • fix(astro): Do not inject withSentry into Cloudflare Pages (#​19558)
  • fix(core): Do not remove promiseBuffer entirely (#​19592)
  • fix(deps): Bump fast-xml-parser to 4.5.4 for CVE-2026-25896 (#​19588)
  • fix(react-router): Set correct transaction name when navigating with object argument (#​19590)
  • ref(nuxt): Use addVitePlugin instead of deprecated vite:extendConfig (#​19464)
Internal Changes

Bundle size 📦

Path Size
@​sentry/browser 25.02 KB
@​sentry/browser - with treeshaking flags 23.57 KB
@​sentry/browser (incl. Tracing) 41.44 KB
@​sentry/browser (incl. Tracing, Profiling) 45.99 KB
@​sentry/browser (incl. Tracing, Replay) 79.35 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 69.21 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 83.93 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 95.91 KB
@​sentry/browser (incl. Feedback) 41.44 KB
@​sentry/browser (incl. sendFeedback) 29.58 KB
@​sentry/browser (incl. FeedbackAsync) 34.52 KB
@​sentry/browser (incl. Metrics) 26.17 KB
@​sentry/browser (incl. Logs) 26.31 KB
@​sentry/browser (incl. Metrics & Logs) 26.96 KB
@​sentry/react 26.74 KB
@​sentry/react (incl. Tracing) 43.72 KB
@​sentry/vue 29.37 KB
@​sentry/vue (incl. Tracing) 43.26 KB
@​sentry/svelte 25.05 KB
CDN Bundle 27.51 KB
CDN Bundle (incl. Tracing) 42.25 KB
CDN Bundle (incl. Logs, Metrics) 28.33 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 43.07 KB
CDN Bundle (incl. Replay, Logs, Metrics) 66.49 KB
CDN Bundle (incl. Tracing, Replay) 78.26 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 79.1 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 83.65 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 84.5 KB
CDN Bundle - uncompressed 80.42 KB
CDN Bundle (incl. Tracing) - uncompressed 125.07 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 83.19 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 127.83 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 203.96 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 239.21 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 241.96 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 251.82 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 254.56 KB
@​sentry/nextjs (client) 46.08 KB
@​sentry/sveltekit (client) 41.89 KB
@​sentry/node-core 51.01 KB
@​sentry/node 170.6 KB
@​sentry/node - without tracing 95.09 KB
@​sentry/aws-serverless 110.53 KB

v10.41.0

Compare Source

eslint-stylistic/eslint-stylistic (@​stylistic/eslint-plugin)

v5.10.0

Compare Source

Features
  • list-style: allow 'off' in overrides (#​1144) (c43bd4b)
  • padding-line-between-statements: introduce lineMode for selector matcher (#​1143) (1ebd6d8)
Build Related
Performance
typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.57.1

Compare Source

🩹 Fixes
  • eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#​12126)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

🚀 Features
  • eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#​12080)
🩹 Fixes
  • eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#​12089)
  • eslint-plugin: [prefer-promise-reject-errors] add allow TypeOrValueSpecifier to prefer-promise-reject-errors (#​12094)
  • typescript-estree: if the template literal is tagged and the text has an invalid escape, cooked will be null (#​11355)
  • eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#​12077)
  • eslint-plugin: handle statically analyzable computed keys in prefer-readonly (#​12079)
  • eslint-plugin: [strict-void-return] false positives with overloads (#​12055)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.57.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

babel/babel-loader (babel-loader)

v10.1.1

Compare Source

v10.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v10.0.0...v10.1.0

csstree/csstree (css-tree)

v3.2.1

Compare Source

  • Fixed parsing of nested function in a group in definition syntax (#​358)

v3.2.0

Compare Source

  • Added "sideEffects": false in package.json
  • Added list option to the parse() method to specify whether the parser should produce a List (by default, list: true) or an array (list: false) for node's children (e.g., SelectorList, Block, etc.)
  • Added support for Functional Notation in definition syntax (for now by wrapping function arguments into an implicit group when necessary, see #​292)
  • Added support for stacked multipliers {A}? and {A,B}? according to spec in definition syntax parsing (#​346)
  • Added math functions support in syntax matching (e.g., min(), max(), etc.) (#​344)
  • Added onToken option to the parse() method, which can be either an array or a function:
    • When the value is an array, it is populated with objects { type, start, end } (token type, and its start and end offsets).
    • When the value is a function, it accepts type, start, end, and index parameters, and is invoked with a token API as this, enabling advanced token handling (see onToken). For example, the following demonstrates checking if all block tokens have matching pairs: 
      parse(css, {
    onToken(type, start, end, index) {
        if (this.isBlockOpenerTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No closing pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        } else if (this.isBlockCloserTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No opening pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        }
    }
});
  • Extended TokenStream with the following methods:
    • getTokenEnd(tokenIndex) – returns the token's end offset by index, complementing getTokenStart(tokenIndex)
    • getTokenType(tokenIndex) – returns the token's type by index
    • isBlockOpenerTokenType(tokenType) – returns true for <function-token>, <(-token>, <[-token>, and <{-token>
    • isBlockCloserTokenType(tokenType) – returns true for <)-token>, <]-token>, and <}-token>
    • getBlockTokenPairIndex(tokenIndex) – returns the index of the pair token for a block, or -1 if no pair exists
  • Changed generate() to not auto insert whitespaces between tokens for raw values (#​356)
  • Fixed fork() to extend node definitions instead of overriding them. For example, fork({ node: { Dimension: { generate() { /* ... */ } } } }) will now update only the generate() method on the Dimension node, while inheriting all other properties from the previous syntax definition.
  • Bumped mdn/data to 2.27.1 and various fixes in syntaxes
KaTeX/KaTeX (katex)

v0.16.38

Compare Source

Bug Fixes

v0.16.37

Compare Source

Bug Fixes

v0.16.36

Compare Source

Bug Fixes

v0.16.35

Compare Source

Bug Fixes

v0.16.34

Compare Source

Bug Fixes
webpro-nl/knip (knip)

v5.87.0

Compare Source

v5.86.0: Release 5.86.0

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added Dependencies Pull requests that update a dependency file T-Task Tasks for the team like planning labels Mar 17, 2026
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 4bcedfc to 3ae3da6 Compare March 18, 2026 01:39
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 3ae3da6 to 3f1d495 Compare March 19, 2026 05:28
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 3f1d495 to 7681c9d Compare March 19, 2026 12:02
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 7681c9d to 9fcc8a2 Compare March 19, 2026 17:34
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 9fcc8a2 to f6b7268 Compare March 20, 2026 09:21
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from f6b7268 to 2c6cd46 Compare March 20, 2026 09:27
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 2c6cd46 to 7b7fafb Compare March 20, 2026 09:56
t3chguy added 2 commits March 20, 2026 10:47
@t3chguy
Update knip patch
4bb17fb 
Signed-off-by: Michael Telatynski <7t3chguy@gmail.com>
@t3chguy
Make knip happy
a106804 
Signed-off-by: Michael Telatynski <7t3chguy@gmail.com>
@renovate
Copy link
Contributor Author

renovate bot commented Mar 20, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@t3chguy
Merge branch 'develop' of ssh://github.com/element-hq/element-web int…
a5e811b 
…o renovate/npm-minor-patch

Signed-off-by: Michael Telatynski <7t3chguy@gmail.com>

# Conflicts:
#	pnpm-lock.yaml
@t3chguy t3chguy force-pushed the renovate/npm-minor-patch branch from bf0e36e to a5e811b Compare March 20, 2026 15:14
@t3chguy t3chguy marked this pull request as ready for review March 20, 2026 15:29
@t3chguy t3chguy requested review from a team as code owners March 20, 2026 15:29
@t3chguy t3chguy added this pull request to the merge queue Mar 20, 2026
@t3chguy t3chguy removed this pull request from the merge queue due to a manual request Mar 20, 2026
@t3chguy
Merge branch 'develop' of ssh://github.com/element-hq/element-web int…
25b806b 
…o renovate/npm-minor-patch

# Conflicts:
#	pnpm-lock.yaml
@t3chguy t3chguy added this pull request to the merge queue Mar 20, 2026
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to a conflict with the base branch Mar 20, 2026
@t3chguy
Merge branch 'develop' of ssh://github.com/element-hq/element-web int…
27f9b7c 
…o renovate/npm-minor-patch

# Conflicts:
#	pnpm-lock.yaml
@t3chguy t3chguy added this pull request to the merge queue Mar 20, 2026
Merged via the queue into develop with commit 3c23fd2 Mar 20, 2026
44 checks passed
@t3chguy t3chguy deleted the renovate/npm-minor-patch branch March 20, 2026 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@t3chguy t3chguy t3chguy approved these changes

@MidhunSureshR MidhunSureshR Awaiting requested review from MidhunSureshR MidhunSureshR is a code owner automatically assigned from element-hq/element-web-team

@Half-Shot Half-Shot Awaiting requested review from Half-Shot Half-Shot is a code owner automatically assigned from element-hq/element-web-reviewers

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file T-Task Tasks for the team like planning

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@t3chguy