Bump code-infra:devDependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
babel-plugin-istanbul	7.0.0 → 7.0.1
chai (source)	6.2.1 → 6.2.2
concurrently	9.2.0 → 9.2.1
danger	13.0.4 → 13.0.5
html-webpack-plugin	5.6.3 → 5.6.5
markdownlint-cli2	0.18.1 → 0.20.0
react-window (source)	2.2.3 → 2.2.4
serve	14.2.4 → 14.2.5
sinon (source)	21.0.0 → 21.0.1
styled-components (source)	6.1.19 → 6.2.0
stylelint (source)	16.23.1 → 16.26.1
stylis	4.2.0 → 4.3.6
tsx (source)	4.20.4 → 4.21.0
webpack	5.101.3 → 5.104.1

---

Release Notes

istanbuljs/babel-plugin-istanbul (babel-plugin-istanbul)

v7.0.1

Compare Source

⚠ BREAKING CHANGES

• deps: update to latest version of test-exclude (#​301)

Features

• deps: update to latest version of test-exclude (#​301) (fb1d78c)

7.0.1 (2025-09-05)

Bug Fixes

• Add support for Babel 8 (#​304) (f298957)

chaijs/chai (chai)

v6.2.2

Compare Source

What's Changed

• build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​1745
• chore(deps): update dependency eslint-plugin-jsdoc to v61.2.1 by @​renovate[bot] in #​1746
• build(deps): bump glob from 10.4.5 to 10.5.0 by @​dependabot[bot] in #​1747
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​1749
• fix: avoid BigInt literal in closeTo for runtime compat by @​bheemreddy-samsara in #​1748
• chore(deps): update dependency eslint-plugin-jsdoc to v61.4.1 by @​renovate[bot] in #​1751
• chore(deps): update dependency prettier to v3.7.3 by @​renovate[bot] in #​1754
• chore(deps): update dependencies by @​renovate[bot] in #​1755
• chore(deps): update dependencies to v9.39.2 by @​renovate[bot] in #​1757
• chore: add --legal-comments=none option by @​hyperz111 in #​1756
• chore(deps): update dependency esbuild to v0.27.2 by @​renovate[bot] in #​1759

New Contributors

• @​bheemreddy-samsara made their first contribution in #​1748
• @​hyperz111 made their first contribution in #​1756

Full Changelog: chaijs/chai@v6.2.1...v6.2.2

open-cli-tools/concurrently (concurrently)

v9.2.1

Compare Source

What's Changed

• chore: update eslint-plugin-simple-import-sort from v10 to v12 by @​noritaka1166 in #​551
• chore: update eslint-config-prettier from v9 to v10 by @​noritaka1166 in #​552
• Remove lodash by @​gustavohenke in #​555
• chore: update coveralls-next from v4 to v5 by @​noritaka1166 in #​557
• Replace jest with vitest by @​gustavohenke in #​554
• Upgrade to pnpm v10 by @​paescuj in #​558
• chore: remove unused eslint-plugin-jest by @​noritaka1166 in #​559
• Minor dependency updates by @​paescuj in #​560
• Migrate to ESLint v9 by @​paescuj in #​561
• Update shell-quote to 1.8.3 by @​paescuj in #​562
• Full coverage by @​paescuj in #​563
• Update GH actions/workflows, enable NPM provenance by @​paescuj in #​564

Full Changelog: open-cli-tools/concurrently@v9.2.0...v9.2.1

danger/danger-js (danger)

v13.0.5

Compare Source

jantimon/html-webpack-plugin (html-webpack-plugin)

v5.6.5

Compare Source

v5.6.4

Compare Source

DavidAnson/markdownlint-cli2 (markdownlint-cli2)

v0.20.0

Compare Source

• Update dependencies

v0.19.1

Compare Source

• Update --format to avoid trailing newline
• Update dependencies

v0.19.0

Compare Source

• Add --format parameter for editor integration
• Update output formatters for severity warning
• Explicitly version Docker containers for pre-commit
• Update dependencies (including markdownlint)

bvaughn/react-window (react-window)

v2.2.4

Compare Source

• Update README docs

vercel/serve (serve)

v14.2.5

Compare Source

Patch Changes

• f4b6fbd: Update compression to v1.8.1

sinonjs/sinon (sinon)

v21.0.1

Compare Source

• 456a65c2
  Update dependencies - except @​sinonjs/samsam (#​2669) (Carl-Erik Kopseng)
• f04f3eb1
  Fix issue 2618 - Remove browserify in favor of esbuild (#​2661) (Artur Parkhisenko)
• 48b69df2
  fix(docs): remove assert.failException from documentation (#​2666) (Steffen Schroeder)
• 13b27ccc
  Fix sandbox restore not handling stubbed functions (#​2667) (thamion)
• ae9e09ac
  Update compatibility target to ES2023 (Carl-Erik Kopseng)

  Updated compatibility target from ES2017 to ES2023 and clarified the note on breaking changes.

• 26055043
  Improve error message for immutable descriptors (#​2664) (Stuart Dotson)
• 80fa9a5b
  Also mirror the calledOnceWith assertion (#​2660) (Benedikt Meurer)

Released by Carl-Erik Kopseng on 2025-12-19.

styled-components/styled-components (styled-components)

v6.2.0

Compare Source

stylelint/stylelint (stylelint)

v16.26.1

Compare Source

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

• Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#​8850) (@​romainmenke).
• Fixed: at-rule-no-unknown false positives for @function (#​8851) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#​8853) (@​jeddy3).
• Fixed: function-url-quotes false positives when URLs require quoting (#​8804) (@​taearls).
• Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#​8856) (@​Mouvedia).

v16.26.0

Compare Source

It adds 1 feature and fixes 2 bugs.

• Added: support for customSyntax with function export (#​8834) (@​silverwind).
• Fixed: custom-property-no-missing-var-function false positives for style query in if() function (#​8813) (@​sajdakabir).
• Fixed: media-feature-range-notation false positives for multiple queries and except: exact-value (#​8832) (@​jeddy3).

v16.25.0

Compare Source

It adds 3 new features, including experimental support for bulk suppressions. It's also our first immutable release, with the package published to npm using trusted publishing and our dependencies updated on a cool down for improved supply chain security.

• Added: support for bulk suppressions (#​8564) (@​ryo-manba).
• Added: ignoreAtRules: [] to no-invalid-position-declaration (#​8781) (@​jrmlt).
• Added: rule name to custom messages (#​8774) (@​jhae-de).

v16.24.0

Compare Source

It adds 1 new rule, adds 1 option to a rule and fixes 2 bugs.

• Added: rule-nesting-at-rule-required-list rule (#​8680) (@​sw1tch3roo).
• Added: ignoreAtRules: [] to nesting-selector-no-missing-scoping-root (#​8743) (@​karlhorky).
• Fixed: function-no-unknown false positives for contrast-color() and sibling-*() (#​8729) (@​Mouvedia).
• Fixed: selector-pseudo-class-no-unknown false positives for :heading (#​8749) (@​Mouvedia).

thysultan/stylis.js (stylis)

v4.3.6

Compare Source

v4.3.5

Compare Source

v4.3.4

Compare Source

v4.3.3

Compare Source

v4.3.2

Compare Source

v4.3.1

Compare Source

v4.3.0

Compare Source

privatenumber/tsx (tsx)

v4.21.0

Compare Source

v4.20.6

Compare Source

Bug Fixes

• properly hide relaySignal from process.listeners() (#​741) (710a424)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.20.5

Compare Source

Bug Fixes

• handle ambiguous packages (796053a)

---

This release is also available on:

• npm package (@​latest dist-tag)

webpack/webpack (webpack)

v5.104.1

Compare Source

Patch Changes

• 2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.
• c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

v5.104.0

Compare Source

Minor Changes

• d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
• d3dd841: Enhance import.meta.env to support object access.
• 4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
• 04cd530: Handle more at-rules for CSS modules.
• cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
• d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
• 5983843: Provide a stable runtime function variable __webpack_global__.
• d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

• 22c48fb: Added module existence check for informative error message in development mode.
• 50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
• d3dd841: Support universal lazy compilation.
• d3dd841: Fixed module library export definitions when multiple runtimes.
• d3dd841: Fixed CSS nesting and CSS custom properties parsing.
• d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.
• aab1da9: Fixed bugs for css/global type.
• d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.
• d3dd841: Handle nested __webpack_require__.
• 728ddb7: The speed of identifier parsing has been improved.
• 0f8b31b: Improve types.
• d3dd841: Don't corrupt debugId injection when hidden-source-map is used.
• 2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.
• d3dd841: Serialize HookWebpackError.
• d3dd841: Added ability to use built-in properties in dotenv and define plugin.
• 3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.
• d3dd841: Reduce collision for local indent name in CSS.
• d3dd841: Remove CSS link tags when CSS imports are removed.

v5.103.0

Compare Source

Features

• Added DotenvPlugin and top level dotenv option to enable this plugin
• Added WebpackManifestPlugin
• Added support the ignoreList option in devtool plugins
• Allow to use custom javascript parse function
• Added import.meta.env support for environment variables
• Added support for import.meta.dirname and import.meta.filename
• Added support import.defer() for statistical path
• Handle import.meta.main
• Added suport to setup named exports for JSON modules and disable usage named export for import file from "./file.json" with { type: "json" }
• Added support __dirname/__filename/import.meta.dirname/import.meta.filename for universal target
• [CSS] Added the exportType option with link (by default), "text" and css-style-sheet values
• [CSS] Added support for composes properties

Fixes

• The dependOn chunk must be loaded before the common chunk
• Return to namespace import when the external request includes a specific export
• No runtime extra runtime code for module libraries
• Delay HMR accept dependencies to preserve import attributes
• Properly handle external presets for universal target
• Fixed incorrect identifier of import binding for module externals
• Fixed when defer import and dynamic default export mixed
• Reduce generated output when globalThis supported
• Fixed loading async modules in defer import
• Reexport module for default import when no used exports for systemjs library
• Rename HarmonyExportDependencyParserPlugin exported id to CompatibilityPlugin tagged id
• Handle __dirname and __filename for ES modules
• Rename single nested __webpack_export__ and __webpack_require__ in already bundled code
• [Types] webpack function type
• [Types] NormalModule type
• [Types] Multi compiler configuration type
• [Types] Fixed regression in custom hashDigest type
• [CSS] No extra runtime for initial chunk
• [CSS] Fixed a lot of CSS modules bugs

v5.102.1

Compare Source

Fixes

• Supported extends with env for browserslist
• Supported JSONP fragment format for web workers.
• Fixed dynamic import support in workers using browserslist.
• Fixed default defer import mangling.
• Fixed default import of commonjs externals for SystemJS format.
• Fixed context modules to the same file with different import attributes.
• Fixed typescript types.
• Improved import.meta warning messages to be more clear when used directly.
• [CSS] Fixed CC_UPPER_U parsing (E -> U) in tokenizer.

v5.102.0

Compare Source

Features

• Added static analyze for dynamic imports
• Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at example)
• Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at example)
• Added the snapshot.contextModule to configure snapshots options for context modules
• Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at example)
• The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)
• The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)
• Added function matcher support in rule options

Fixes

• Fixed conflicts caused by multiple concatenate modules
• Ignore import failure during HMR update with ES modules output
• Keep render module order consistent
• Prevent inlining modules that have this exports
• Removed unused timeout attribute of script tag
• Supported UMD chunk format to work in web workers
• Improved CommonJs bundle to ES module library
• Use es-lexer for mjs files for build dependencies
• Fixed support __non_webpack_require__ for ES modules
• Properly handle external modules for CSS
• AssetsByChunkName included assets from chunk.auxiliaryFiles
• Use createRequire only when output is ES module and target is node
• Typescript types

Performance Improvements

• Avoid extra calls for snapshot
• A avoid extra jobs for build dependencies
• Move import attributes to own dependencies

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 04:59 AM, only on Sunday ( * 0-4 * * 7 ) in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mui-bot]

Netlify deploy preview

https://deploy-preview-46873--material-ui.netlify.app/

Bundle size report

Bundle	Parsed size	Gzip size
@mui/material	0B(0.00%)	0B(0.00%)
@mui/lab	0B(0.00%)	0B(0.00%)
@mui/system	0B(0.00%)	0B(0.00%)
@mui/utils	0B(0.00%)	0B(0.00%)

Details of bundle changes

Generated by 🚫 dangerJS against 7367888