⬆️(dependencies) update js dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/plugin-proposal-decorators (source)	7.27.1 → 8.0.2
@babel/plugin-proposal-export-default-from (source)	7.27.1 → 8.0.1
@babel/preset-typescript (source)	7.27.1 → 8.0.1
@changesets/cli (source)	2.29.2 → 3.0.0
@chromatic-com/storybook	3.2.6 → 5.3.0
@faker-js/faker (source)	9.7.0 → 10.5.0
@fontsource-variable/roboto-flex (source)	5.2.5 → 5.3.0
@fontsource/material-icons-outlined (source)	5.2.5 → 5.3.0
@hookform/resolvers (source)	5.0.1 → 5.7.1
@internationalized/date (source)	3.12.0 → 3.12.3
@react-aria/calendar	3.9.5 → 3.10.1
@react-aria/datepicker	3.16.1 → 3.17.1
@react-aria/i18n	3.12.16 → 3.13.1
@react-stately/calendar	3.9.3 → 3.10.1
@react-stately/datepicker	3.16.1 → 3.17.1
@storybook/addon-a11y (source)	8.6.12 → 10.5.7
@storybook/addon-actions (source)	8.6.12 → 9.0.8
@storybook/addon-essentials (source)	8.6.12 → 8.6.14
@storybook/addon-interactions (source)	8.6.12 → 8.6.14
@storybook/addon-links (source)	8.6.12 → 10.5.7
@storybook/react (source)	8.6.12 → 10.5.7
@storybook/react-vite (source)	8.6.12 → 10.5.7
@tanstack/react-table (source)	8.21.3 → 9.1.2
@testing-library/dom	10.4.0 → 10.4.1
@testing-library/jest-dom	6.6.3 → 7.0.1
@testing-library/react	16.3.0 → 16.3.2
@testing-library/user-event	14.6.1 → 14.6.4
@types/jest (source)	29.5.14 → 30.0.0
@types/node (source)	22.15.3 → 24.13.3
@types/react (source)	19.1.2 → 19.2.18
@types/react-dom (source)	19.1.3 → 19.2.4
@typescript-eslint/eslint-plugin (source)	8.31.1 → 8.67.0
@typescript-eslint/parser (source)	8.31.1 → 8.67.0
@vitejs/plugin-react (source)	4.4.1 → 6.0.5
@vitest/ui (source)	3.1.2 → 4.1.10
babel-loader	10.0.0 → 10.1.1
chromatic (source)	11.28.2 → 18.2.0
commander	13.1.0 → 15.0.0
cross-env	7.0.3 → 10.1.0
css-loader	7.1.2 → 7.1.4
downshift (source)	9.0.9 → 9.4.0
eslint-config-next (source)	15.3.1 → 16.3.0
eslint-config-prettier	10.1.2 → 10.1.8
eslint-import-resolver-typescript	4.3.4 → 4.4.5
eslint-import-resolver-webpack (source)	0.13.10 → 0.13.11
eslint-plugin-compat	6.0.2 → 7.0.2
eslint-plugin-formatjs	5.3.1 → 6.4.20
eslint-plugin-import	2.31.0 → 2.32.0
eslint-plugin-prettier	5.2.6 → 5.5.6
eslint-plugin-react-hooks (source)	5.2.0 → 7.1.1
figlet	1.8.1 → 1.11.4
glob	11.1.0 → 13.0.6
jest (source)	29.7.0 → 30.4.2
jsdom	26.1.0 → 30.0.1
nodemon (source)	3.1.10 → 3.1.14
prettier (source)	3.5.3 → 3.9.6
react (source)	19.1.0 → 19.2.8
react-aria	3.47.0 → 3.51.0
react-aria-components	1.16.0 → 1.20.0
react-dom (source)	19.1.0 → 19.2.8
react-hook-form (source)	7.56.2 → 7.85.0
react-stately	3.45.0 → 3.49.0
sass	1.87.0 → 1.102.0
sass-loader	16.0.5 → 17.0.0
ts-jest (source)	29.3.2 → 29.4.12
tsc-alias (source)	1.8.15 → 1.9.1
typescript (source)	5.8.3 → 7.0.2
vite-plugin-dts (source)	4.5.3 → 5.0.3
vite-tsconfig-paths	5.1.4 → 6.1.1
yup	1.6.1 → 1.7.1

---

Release Notes

babel/babel (@​babel/plugin-proposal-decorators)

v8.0.2

Compare Source

🐛 Bug Fix

• Other
  • #​18083 Use the @babel/core version when asserting version in @babel/standalone (@​nicolo-ribaudo)
• babel-helper-validator-identifier
  • #​18075 fix(identifier): avoid double escaping slash (@​JLHwung)

🏠 Internal

• babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env
  • #​18081 Update @babel/preset-modules and polyfill packages (@​nicolo-ribaudo)

v8.0.1

Compare Source

💥 Breaking Change

• babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone
  • #​18079 Actually remove preset-env's useBuiltIns (@​nicolo-ribaudo)

v8.0.0

Compare Source

👓 Spec Compliance

• babel-core
  • #​18039 perf: Only extract source map comments at the end of the file (@​liuxingbaoyu)

💥 Breaking Change

• babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • #​18069 Fallback to assuming ESM support with modules: auto (@​nicolo-ribaudo)
• babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • #​18036 Remove corejs exports for @babe/runtime-corejs3 (@​liuxingbaoyu)
• babel-parser
  • #​18034 Remove locations: "packed" (@​liuxingbaoyu)

🐛 Bug Fix

• babel-generator
  • #​18046 fix(generator): improve new callee parens check (@​JLHwung)
• babel-plugin-transform-modules-systemjs
  • #​18032 fix(systemjs): support proto as an export name (@​JLHwung)

📝 Documentation

• #​18070 Add EOL date for Babel 7 (end of June 2027) to SECURITY.md (@​nicolo-ribaudo)

🏠 Internal

• #​18018 ci: enforce yarn integrity (@​JLHwung)

🏃‍♀️ Performance

• babel-core
  • #​18039 perf: Only extract source map comments at the end of the file (@​liuxingbaoyu)

v7.29.7

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.0

Compare Source

v7.29.0 (2026-01-31)

Thanks @​simbahax for your first PR!

🚀 New Feature

• babel-types
  • #​17750 [7.x backport] Add attributes import declaration builder (@​JLHwung)
• babel-standalone
  • #​17663 [7.x backport] feat(standalone): export async transform (@​JLHwung)
  • #​17725 [7.x backport] feat: read standalone targets from data-targets (@​JLHwung)

🐛 Bug Fix

• babel-parser
  • #​17765 fix(parser): correctly parse type assertions in extends clause (@​nicolo-ribaudo)
  • #​17723 [7.x backport] fix(parser): improve super type argument parsing (@​JLHwung)
• babel-traverse
  • #​17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@​simbahax)
• babel-plugin-transform-block-scoping, babel-traverse
  • #​17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@​magic-akari)

🏃‍♀️ Performance

• babel-generator, babel-runtime-corejs3
  • #​17642 [Babel 7] Improve generator performance (@​liuxingbaoyu)

Committers: 6

• David (@​simbahax)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• @​magic-akari

v7.28.6

Compare Source

v7.28.6 (2026-01-12)

Thanks @​kadhirash and @​kolvian for your first PRs!

🐛 Bug Fix

• babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
  • #​17589 Improve Unicode handling in code-frame tokenizer (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17556 fix: transform-regenerator correctly handles scope (@​liuxingbaoyu)
• babel-plugin-transform-react-jsx
  • #​17538 fix: Keep jsx comments (@​liuxingbaoyu)

💅 Polish

• babel-core, babel-standalone
  • #​17606 Polish(standalone): improve message on invalid preset/plugin (@​JLHwung)

🏠 Internal

• babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
  • #​17580 Allow Babel 8 in compatible Babel 7 plugins (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-react-jsx
  • #​17555 perf: Use lighter traversal for jsx __source,__self (@​liuxingbaoyu)

Committers: 7

• Babel Bot (@​babel-bot)
• Eliot Pontarelli (@​kolvian)
• Huáng Jùnliàng (@​JLHwung)
• Kadhirash Sivakumar (@​kadhirash)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• coderaiser (@​coderaiser)

v7.28.0

Compare Source

🚀 New Feature

• babel-node
  • #​17147 Support top level await in node repl (@​liuxingbaoyu)
• babel-types
  • #​17258 feat(matchesPattern): support super/private/meta (@​JLHwung)
• babel-compat-data, babel-preset-env
  • #​17355 Add explicit resource management to preset-env (@​JLHwung)
• babel-core, babel-parser
  • #​17390 Support sourceType: "commonjs" (@​JLHwung)
• babel-generator, babel-parser
  • #​17346 Materialize explicitResourceManagement parser plugin (@​JLHwung)
• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  • #​17391 LVal coverage updates (Part 2) (@​JLHwung)
• babel-parser, babel-traverse, babel-types
  • #​17378 Accept bigints in t.bigIntLiteral factory (@​JLHwung)
• babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  • #​17277 Transform discard binding (@​JLHwung)
• babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
  • #​17163 Parse discard binding (@​JLHwung)

🐛 Bug Fix

• babel-helper-globals, babel-plugin-transform-classes, babel-traverse
  • #​17297 Create babel-helper-globals (@​JLHwung)
• babel-types
  • #​17009 feature: TSTypeOperator: keyof (#​16799) (@​coderaiser)

🏠 Internal

• babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • #​17403 Update babel-polyfill packages (@​nicolo-ribaudo)

changesets/changesets (@​changesets/cli)

v3.0.0

Compare Source

Major Changes

• #​2128 7113c01 Thanks @​Andarist! - Renamed the changeset tag command to changeset git-tag.

• #​2074 3599e47 Thanks @​bluwy! - Set supported package manager versions in "engines" field, including npm >=10.9.0, pnpm >=10.0.0, and yarn >=4.5.2.

• #​1860 92b1c1b Thanks @​mixelburg! - changeset version now exits with code 1 when there are no unreleased changesets, instead of silently exiting with code 0.

  This makes it easier to detect when a version step is a no-op — for example, to prevent accidentally publishing packages with incorrect version tags when using --snapshot mode.

• #​1482 df424a4 Thanks @​Andarist! - Bumped supported Node versions to ^22.11 || ^24 || >=26

• #​1994 062530b Thanks @​bluwy! - The prettier option in .changeset/config.json has been removed in favor of format. format supports "auto", "prettier", "oxfmt", "deno", and "dprint", and false disables formatting. If you previously used prettier: false, migrate to format: false or remove the option to use automatic formatter detection.

• #​2190 96b65ee Thanks @​bluwy! - Move versioned prerelease changesets to .changeset/pre/ folder instead of accumulating in the root and tracking the versioned changeset ids in the .changeset/pre.json file. Existing pre.json will auto-migrate to this new structure on the next run of changeset version or when calling changeset status.

  This change allows easier management of versioned prerelease changesets (for the final stable release) and current queued changesets (for the next prerelease). Changesets in .changeset/pre/ can be edited or deleted depending if it's still relevant for the final stable release of a package. There's no need to synchronize the changeset ids in pre.json if certain changesets are deleted.

• #​2145 f5887ff Thanks @​Andarist! - Removed Yarn Classic support

• #​2097 8c88f6a Thanks @​Andarist! - Packages with only prerelease versions published will now be published with the prerelease tag in the prerelease mode if the target registry doesn't auto-assign latest tag. npm registry itself does that and such packages will continue to be released with latest tag (and not with the configured prerelease tag).

• #​1879 c76b232 Thanks @​beeequeue! - Removed warning messages about using v1 configs. They will now be silently ignored.

• #​1655 db46911 Thanks @​bluwy! - Update @manypkg/get-packages which drops support for detecting packages in Bolt monorepos and adds support for npm monorepos

• #​1651 e1df862 Thanks @​bluwy! - Remove support for the --sinceMaster flag for changeset status. Use --since=master or --since=main instead.

• #​2117 813bbf3 Thanks @​bluwy! - Remove the pre.json initialVersions property and handling as it's unused internally

• #​1961 07278a7 Thanks @​beeequeue! - CommitFunctions can now be both sync and async, and the defaultCommitFunctions are now sync.

• #​1482 df424a4 Thanks @​Andarist! - From now on this package is going to be published as ES module.

• #​1652 a0b5326 Thanks @​bluwy! - Remove support for the deprecated ___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH.useCalculatedVersionForSnapshots config. The snapshot.useCalculatedVersion config should be used instead.

• #​2186 3910adf Thanks @​Andarist! - Private packages are no longer versioned by default. Set privatePackages to true to opt into versioning and tagging them, or set privatePackages.version to true to version them without tagging.

• #​1879 c76b232 Thanks @​beeequeue! - Migrated from enquirer + @inquirer/launch-editor to @clack/prompts + launch-editor.

  This means the CLI flows will have minor changes, but they are largely the same.

  This change also fixes various issues related to enquirer like cancelling prompts crashing the CLI.

• #​2090 3aae903 Thanks @​beeequeue! - Peer dependencies now bump packages that depend on them by patch instead of major.

  This means a peer dependency update is no longer assumed (forced) to be a breaking change.

  If the dependent package is not compatible with the peer's new release you should manually add a major changeset describing why and how to migrate.

Minor Changes

• #​1121 ce2095d Thanks @​Sh031224! - Added new --major, --minor, --patch flags to the add command.

• #​2135 fd7724a Thanks @​youdie006! - Allow comma-separated values in array-valued CLI flags: the --major, --minor, and --patch flags of the add command, and the --ignore flag of the version command. For example, --minor pkg-a,pkg-b is now equivalent to --minor pkg-a --minor pkg-b. Surrounding whitespace is trimmed and empty entries are ignored.

• #​2068 d03ffc1 Thanks @​bluwy! - Support {commit-short} placeholder for the snapshot.prereleaseTemplate config, which is a 7 character variant of {commit}

• #​2061 c2db1dd Thanks @​Andarist! - Added a changeset publish-plan command to inspect which packages would be published or tagged, with optional JSON output.

• #​2087 edc30c8 Thanks @​trueberryless! - Made the init command interactive. Running changeset init will now guide you through a set of intuitive prompts to configure your changelog generator, commit preferences, publish access, and base branch, rather than silently writing the default configuration file.

• #​1969 2c7c043 Thanks @​marcalexiei! - Add a named export that mirrors the current default export

  The default export is slated for removal in the next major release, so this ensures a smoother transition path.

• #​1879 c76b232 Thanks @​beeequeue! - Packages are now listed in alphabetical order when possible.

• #​2129 369eb0b Thanks @​Andarist! - Commands supporting --output (such as status and publish-plan) can now be invoked with `CHANGE

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 7am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​storybook/​addon-actions@​8.6.12 ⏵ 9.0.8	+1		-20
	eslint-config-next@​15.3.1 ⏵ 16.1.6	+1		+3
	jest@​29.7.0 ⏵ 30.2.0	+1		+1
	@​typescript-eslint/​parser@​8.19.1 ⏵ 8.56.1	+1
	@​storybook/​react-vite@​8.6.12 ⏵ 10.2.12	+1		+8	+1
	@​react-aria/​i18n@​3.12.8 ⏵ 3.12.15	+1		+1
	@​babel/​preset-typescript@​7.27.1 ⏵ 7.28.5
	@​react-stately/​calendar@​3.8.0 ⏵ 3.9.2	+1		+1
	@​babel/​plugin-proposal-decorators@​7.27.1 ⏵ 7.29.0				-1
	@​react-aria/​calendar@​3.8.0 ⏵ 3.9.4	+1		+1
	@​react-aria/​datepicker@​3.14.2 ⏵ 3.16.0
	eslint-plugin-formatjs@​5.3.1 ⏵ 6.2.0				+4
	@​types/​react-dom@​19.1.3 ⏵ 19.2.3			+1
	@​react-stately/​datepicker@​3.14.0 ⏵ 3.16.0			+1
	@​types/​jest@​29.5.14 ⏵ 30.0.0
	@​storybook/​addon-a11y@​8.6.12 ⏵ 10.2.12	+1		+4	+1
	@​fontsource/​material-icons-outlined@​5.2.5 ⏵ 5.2.6			-1	-1
	vitest@​3.1.2 ⏵ 4.0.18	+1			-1
	@​types/​react@​19.1.2 ⏵ 19.2.14
	@​babel/​core@​7.27.1 ⏵ 7.29.0
	@​typescript-eslint/​eslint-plugin@​8.19.1 ⏵ 8.56.1	+1		+1
	react-aria-components@​1.8.0 ⏵ 1.15.1	-1		+1
	@​types/​node@​22.15.3 ⏵ 24.10.13	+1		+1	+2
	cross-env@​7.0.3 ⏵ 10.1.0
	yup@​1.6.1 ⏵ 1.7.1
	@​vitest/​ui@​3.1.2 ⏵ 4.0.18	+1		+5	+1
	react-aria@​3.39.0 ⏵ 3.46.0	+1		+1
	vite@​6.4.1 ⏵ 7.3.1	+10
	tsc-alias@​1.8.15 ⏵ 1.8.16
	eslint-plugin-import@​2.31.0 ⏵ 2.32.0
	turbo@​2.5.2 ⏵ 2.8.11	+1		-1	+1
	vite-plugin-dts@​4.5.3 ⏵ 4.5.4	+1		+1
See 34 more rows in the dashboard

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report