Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: auth0/lock
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v14.2.4
Choose a base ref
...
head repository: auth0/lock
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v14.2.5
Choose a head ref
  • 10 commits
  • 8 files changed
  • 2 contributors

Commits on Feb 13, 2026

  1. chore(deps): Bump lodash from 4.17.21 to 4.17.23 (#2725)

    Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to
    4.17.23.
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/lodash/lodash/commit/dec55b7a3b382da075e2eac90089b4cd00a26cbb"><code>dec55b7</code></a>
    Bump main to v4.17.23 (<a
    href="https://redirect.github.com/lodash/lodash/issues/6088">#6088</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/19c9251b3631d7cf220b43bc757eb33f1084f117"><code>19c9251</code></a>
    fix: setCacheHas JSDoc return type should be boolean (<a
    href="https://redirect.github.com/lodash/lodash/issues/6071">#6071</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/b5e672995ae26929d111a6e94589f8d03fb8e578"><code>b5e6729</code></a>
    jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (<a
    href="https://redirect.github.com/lodash/lodash/issues/6062">#6062</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/edadd452146f7e4bad4ea684e955708931d84d81"><code>edadd45</code></a>
    Prevent prototype pollution on baseUnset function</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/4879a7a7d0a4494b0e83c7fa21bcc9fc6e7f1a6d"><code>4879a7a</code></a>
    doc: fix autoLink function, conversion of source links (<a
    href="https://redirect.github.com/lodash/lodash/issues/6056">#6056</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/9648f692b0fc7c2f6a7a763d754377200126c2e8"><code>9648f69</code></a>
    chore: remove <code>yarn.lock</code> file (<a
    href="https://redirect.github.com/lodash/lodash/issues/6053">#6053</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/dfa407db0bf5b200f2c7a9e4f06830ceaf074be9"><code>dfa407d</code></a>
    ci: remove legacy configuration files (<a
    href="https://redirect.github.com/lodash/lodash/issues/6052">#6052</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/156e1965ae78b121a88f81178ab81632304e8d64"><code>156e196</code></a>
    feat: add renovate setup (<a
    href="https://redirect.github.com/lodash/lodash/issues/6039">#6039</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/933e1061b8c344d3fc742cdc400175d5ffc99bce"><code>933e106</code></a>
    ci: add pipeline for Bun (<a
    href="https://redirect.github.com/lodash/lodash/issues/6023">#6023</a>)</li>
    <li><a
    href="https://github.com/lodash/lodash/commit/072a807ff7ad8ffc7c1d2c3097266e815d138e20"><code>072a807</code></a>
    docs: update links related to Open JS Foundation (<a
    href="https://redirect.github.com/lodash/lodash/issues/5968">#5968</a>)</li>
    <li>Additional commits viewable in <a
    href="https://github.com/lodash/lodash/compare/4.17.21...4.17.23">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lodash&package-manager=npm_and_yarn&previous-version=4.17.21&new-version=4.17.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/auth0/lock/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 13, 2026
    Configuration menu
    Copy the full SHA
    110702e View commit details
    Browse the repository at this point in the history
  2. chore(deps): Bump auth0-js from 9.29.0 to 9.30.0 (#2724)

    Bumps [auth0-js](https://github.com/auth0/auth0.js) from 9.29.0 to
    9.30.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/auth0/auth0.js/releases">auth0-js's
    releases</a>.</em></p>
    <blockquote>
    <h2>v9.30.0</h2>
    <p><strong>Added</strong></p>
    <ul>
    <li>feat: Improve error handling when login fails after signup <a
    href="https://redirect.github.com/auth0/auth0.js/pull/1552">#1552</a>
    (<a href="https://github.com/amitsingh05667">amitsingh05667</a>)</li>
    <li>fix: convert mock files to ES module exports <a
    href="https://redirect.github.com/auth0/auth0.js/pull/1563">#1563</a>
    (<a href="https://github.com/amitsingh05667">amitsingh05667</a>)</li>
    </ul>
    <h2>v9.29.1</h2>
    <p><strong>Added</strong></p>
    <ul>
    <li>fix: add null check for challenge in captcha rendering <a
    href="https://redirect.github.com/auth0/auth0.js/pull/1541">#1541</a>
    (<a href="https://github.com/amitsingh05667">amitsingh05667</a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/auth0/auth0.js/blob/master/CHANGELOG.md">auth0-js's
    changelog</a>.</em></p>
    <blockquote>
    <h2><a href="https://github.com/auth0/auth0.js/tree/v9.30.0">v9.30.0</a>
    (2026-01-09)</h2>
    <p><a
    href="https://github.com/auth0/auth0.js/compare/v9.29.1...v9.30.0">Full
    Changelog</a></p>
    <p><strong>Added</strong></p>
    <ul>
    <li>feat: Improve error handling when login fails after signup <a
    href="https://redirect.github.com/auth0/auth0.js/pull/1552">#1552</a>
    (<a href="https://github.com/amitsingh05667">amitsingh05667</a>)</li>
    <li>fix: convert mock files to ES module exports <a
    href="https://redirect.github.com/auth0/auth0.js/pull/1563">#1563</a>
    (<a href="https://github.com/amitsingh05667">amitsingh05667</a>)</li>
    </ul>
    <h2><a href="https://github.com/auth0/auth0.js/tree/v9.29.1">v9.29.1</a>
    (2025-12-17)</h2>
    <p><a
    href="https://github.com/auth0/auth0.js/compare/v9.29.0...v9.29.1">Full
    Changelog</a></p>
    <p><strong>Added</strong></p>
    <ul>
    <li>fix: add null check for challenge in captcha rendering <a
    href="https://redirect.github.com/auth0/auth0.js/pull/1541">#1541</a>
    (<a href="https://github.com/amitsingh05667">amitsingh05667</a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/63d0b67098402778b1fd4ceaa0150bf678d94344"><code>63d0b67</code></a>
    Release v9.30.0 (<a
    href="https://redirect.github.com/auth0/auth0.js/issues/1574">#1574</a>)</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/382df0ca54456fb500f66c7126fcca1d0fca10b2"><code>382df0c</code></a>
    Release v9.30.0</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/aa5e4e59ba3eda8606f41e7ac61269590754422b"><code>aa5e4e5</code></a>
    fix: update postbump script to use jsdocs.mjs instead of js (<a
    href="https://redirect.github.com/auth0/auth0.js/issues/1573">#1573</a>)</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/b5c549929b4f8e7c1b31899e31e982e689264a92"><code>b5c5499</code></a>
    fix: update postbump script to use jsdocs.mjs instead of js</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/e9c5a9d34f71c5609c0075355f007c46fe91f3dc"><code>e9c5a9d</code></a>
    feat: Improve error handling when login fails after signup (<a
    href="https://redirect.github.com/auth0/auth0.js/issues/1552">#1552</a>)</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/a428b44ad2459f66e7b1f6e84b5c84275ce86ed2"><code>a428b44</code></a>
    fix: update error handling to use errorInfo instead of cause for login
    errors</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/f3164737e4b86ee4dcbb58fed2292d6ea90c3471"><code>f316473</code></a>
    ix: update error messages for login failures across hosted pages, popup,
    and ...</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/711292a16eaeaeaba11434b6bc128b3cb586eec6"><code>711292a</code></a>
    Merge branch 'master' of <a
    href="https://github.com/auth0/auth0.js">https://github.com/auth0/auth0.js</a>
    into SDK_7272</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/3cc1075107628827544d6d273c210b503a218d5c"><code>3cc1075</code></a>
    chore(deps): bump superagent from 10.2.3 to 10.3.0 (<a
    href="https://redirect.github.com/auth0/auth0.js/issues/1570">#1570</a>)</li>
    <li><a
    href="https://github.com/auth0/auth0.js/commit/eca71109ff978ce10532e1f7263dba84d6786abb"><code>eca7110</code></a>
    chore(deps): bump superagent from 10.2.3 to 10.3.0</li>
    <li>Additional commits viewable in <a
    href="https://github.com/auth0/auth0.js/compare/v9.29.0...v9.30.0">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by [GitHub Actions](<a
    href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
    Actions), a new releaser for auth0-js since your current version.</p>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=auth0-js&package-manager=npm_and_yarn&previous-version=9.29.0&new-version=9.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 13, 2026
    Configuration menu
    Copy the full SHA
    dd978d0 View commit details
    Browse the repository at this point in the history
  3. chore(deps): Bump qs, body-parser and express (#2728)

    Bumps [qs](https://github.com/ljharb/qs) to 6.14.2 and updates ancestor
    dependencies [qs](https://github.com/ljharb/qs),
    [body-parser](https://github.com/expressjs/body-parser) and
    [express](https://github.com/expressjs/express). These dependencies need
    to be updated together.
    
    Updates `qs` from 6.14.1 to 6.14.2
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's
    changelog</a>.</em></p>
    <blockquote>
    <h2><strong>6.14.2</strong></h2>
    <ul>
    <li>[Fix] <code>parse</code>: mark overflow objects for indexed notation
    exceeding <code>arrayLimit</code> (<a
    href="https://redirect.github.com/ljharb/qs/issues/546">#546</a>)</li>
    <li>[Fix] <code>arrayLimit</code> means max count, not max index, in
    <code>combine</code>/<code>merge</code>/<code>parseArrayValue</code></li>
    <li>[Fix] <code>parse</code>: throw on <code>arrayLimit</code> exceeded
    with indexed notation when <code>throwOnLimitExceeded</code> is true (<a
    href="https://redirect.github.com/ljharb/qs/issues/529">#529</a>)</li>
    <li>[Fix] <code>parse</code>: enforce <code>arrayLimit</code> on
    <code>comma</code>-parsed values</li>
    <li>[Fix] <code>parse</code>: fix error message to reflect arrayLimit as
    max index; remove extraneous comments (<a
    href="https://redirect.github.com/ljharb/qs/issues/545">#545</a>)</li>
    <li>[Robustness] avoid <code>.push</code>, use <code>void</code></li>
    <li>[readme] document that <code>addQueryPrefix</code> does not add
    <code>?</code> to empty output (<a
    href="https://redirect.github.com/ljharb/qs/issues/418">#418</a>)</li>
    <li>[readme] clarify <code>parseArrays</code> and
    <code>arrayLimit</code> documentation (<a
    href="https://redirect.github.com/ljharb/qs/issues/543">#543</a>)</li>
    <li>[readme] replace runkit CI badge with shields.io check-runs
    badge</li>
    <li>[meta] fix changelog typo (<code>arrayLength</code> →
    <code>arrayLimit</code>)</li>
    <li>[actions] fix rebase workflow permissions</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/ljharb/qs/commit/bdcf0c7f82387c18ac8fabfccd2f440645cef47b"><code>bdcf0c7</code></a>
    v6.14.2</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/294db90c812ddbe7d7a35d5687c505fd21a2d6a2"><code>294db90</code></a>
    [readme] document that <code>addQueryPrefix</code> does not add
    <code>?</code> to empty output</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/5c308e5516c270a78caa6f278465914090f91ec6"><code>5c308e5</code></a>
    [readme] clarify <code>parseArrays</code> and <code>arrayLimit</code>
    documentation</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/6addf8cf738d529c54d91f6f3ffb6c1be91bbfdc"><code>6addf8c</code></a>
    [Fix] <code>parse</code>: mark overflow objects for indexed notation
    exceeding <code>arrayLimit</code></li>
    <li><a
    href="https://github.com/ljharb/qs/commit/cfc108f662326d6ab540f3545ef0b832baf83cdf"><code>cfc108f</code></a>
    [Fix] <code>arrayLimit</code> means max count, not max index, in
    <code>combine</code>/<code>merge</code>/`pars...</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/febb64442a80e49200211fa38d3c96b58024ac77"><code>febb644</code></a>
    [Fix] <code>parse</code>: throw on <code>arrayLimit</code> exceeded with
    indexed notation when `thr...</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/f6a7abff1f13d644db9b05fe4f2c98ada6bf8482"><code>f6a7abf</code></a>
    [Fix] <code>parse</code>: enforce <code>arrayLimit</code> on
    <code>comma</code>-parsed values</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/fbc5206c25b4d1851cea683f02c10756c521d15a"><code>fbc5206</code></a>
    [Fix] <code>parse</code>: fix error message to reflect arrayLimit as max
    index; remove e...</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/1b9a8b4e78c6aff4c22fa559107227f02fd0216a"><code>1b9a8b4</code></a>
    [actions] fix rebase workflow permissions</li>
    <li><a
    href="https://github.com/ljharb/qs/commit/2a35775614e0fb46ac8a3060201a32a7c23a7fda"><code>2a35775</code></a>
    [meta] fix changelog typo (<code>arrayLength</code> →
    <code>arrayLimit</code>)</li>
    <li>Additional commits viewable in <a
    href="https://github.com/ljharb/qs/compare/v6.14.1...v6.14.2">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `body-parser` from 1.20.3 to 1.20.4
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/body-parser/releases">body-parser's
    releases</a>.</em></p>
    <blockquote>
    <h2>1.20.4</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>Remove redundant depth check by <a
    href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in
    <a
    href="https://redirect.github.com/expressjs/body-parser/pull/538">expressjs/body-parser#538</a></li>
    <li>ci: add support for Node.js v23 by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/body-parser/pull/553">expressjs/body-parser#553</a></li>
    <li>ci: restore CI for 1.x branch by <a
    href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
    <a
    href="https://redirect.github.com/expressjs/body-parser/pull/665">expressjs/body-parser#665</a></li>
    <li>deps: qs@^6.14.0 by <a
    href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
    <a
    href="https://redirect.github.com/expressjs/body-parser/pull/664">expressjs/body-parser#664</a></li>
    <li>deps: use tilde notation and update certain dependencies by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/body-parser/pull/668">expressjs/body-parser#668</a></li>
    <li>chore: remove SECURITY.md by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/body-parser/pull/669">expressjs/body-parser#669</a></li>
    <li>ci: add CodeQL (SAST) by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/body-parser/pull/670">expressjs/body-parser#670</a></li>
    <li>Release: 1.20.4 by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/body-parser/pull/672">expressjs/body-parser#672</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4">https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's
    changelog</a>.</em></p>
    <blockquote>
    <h1>1.20.4 / 2025-12-01</h1>
    <ul>
    <li>deps: qs@~6.14.0</li>
    <li>deps: use tilde notation for dependencies</li>
    <li>deps: http-errors@~2.0.1</li>
    <li>deps: raw-body@~2.5.3</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/7db202cac84a001e6566c2dc6516b44db98beff3"><code>7db202c</code></a>
    1.20.4 (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/672">#672</a>)</li>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/d8f8adb898676dfdf997b4455e5f9b689b53e989"><code>d8f8adb</code></a>
    ci: add CodeQL (SAST) (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/670">#670</a>)</li>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/6d133c19b3e7c0bb8301959ca1dba283d23d23c3"><code>6d133c1</code></a>
    chore: remove SECURITY.md (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/669">#669</a>)</li>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/fcd15355041ada6f37288dd13858d50429016b66"><code>fcd1535</code></a>
    deps: use tilde notation and update certain dependencies (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/668">#668</a>)</li>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/ec5fa290d25d85e0049757e240249072331eaee6"><code>ec5fa29</code></a>
    deps: qs@~6.14.0 (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/664">#664</a>)</li>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/ffb95c12c7785ec6d3852ce46b8711ac74009252"><code>ffb95c1</code></a>
    ci: restore CI for 1.x branch (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/665">#665</a>)</li>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/48a5f074a4db07066087ed8b6ff641825c9c03cf"><code>48a5f07</code></a>
    ci: add support for Node.js v23 (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/553">#553</a>)</li>
    <li><a
    href="https://github.com/expressjs/body-parser/commit/f20f6adc7118cbf973e927d34bc0bbf2ff177459"><code>f20f6ad</code></a>
    Remove redundant depth check (<a
    href="https://redirect.github.com/expressjs/body-parser/issues/538">#538</a>)</li>
    <li>See full diff in <a
    href="https://github.com/expressjs/body-parser/compare/1.20.3...1.20.4">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `express` from 4.21.2 to 4.22.1
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/express/releases">express's
    releases</a>.</em></p>
    <blockquote>
    <h2>v4.22.1</h2>
    <h2>What's Changed</h2>
    <blockquote>
    <p>[!IMPORTANT]<br />
    The prior release (4.22.0) included an erroneous breaking change related
    to the extended query parser. There is no actual security vulnerability
    associated with this behavior (CVE-2024-51999 has been rejected). The
    change has been fully reverted in this release.</p>
    </blockquote>
    <ul>
    <li>Release: 4.22.1 by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/express/pull/6934">expressjs/express#6934</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/expressjs/express/compare/4.22.0...v4.22.1">https://github.com/expressjs/express/compare/4.22.0...v4.22.1</a></p>
    <h2>4.22.0</h2>
    <h2>Important: Security</h2>
    <ul>
    <li>Security fix for <a
    href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a>
    (<a
    href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li>
    </ul>
    <h2>What's Changed</h2>
    <ul>
    <li>Refactor: improve readability by <a
    href="https://github.com/sazk07"><code>@​sazk07</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/6190">expressjs/express#6190</a></li>
    <li>ci: add support for Node.js@23.0 by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/express/pull/6080">expressjs/express#6080</a></li>
    <li>Method functions with no path should error by <a
    href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5957">expressjs/express#5957</a></li>
    <li>ci: updated github actions ci workflow by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/6323">expressjs/express#6323</a></li>
    <li>ci: reorder <code>npm i</code> steps to fix ci for older node
    versions by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/6336">expressjs/express#6336</a></li>
    <li>Backport: ci: add node.js 24 to test matrix by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/6506">expressjs/express#6506</a></li>
    <li>chore(4.x): wider range for query test skip by <a
    href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/6513">expressjs/express#6513</a></li>
    <li>use tilde notation for certain dependencies by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/express/pull/6905">expressjs/express#6905</a></li>
    <li>deps: qs@6.14.0 by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/express/pull/6909">expressjs/express#6909</a></li>
    <li>deps: use tilde notation for <code>qs</code> by <a
    href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/6919">expressjs/express#6919</a></li>
    <li>Release: 4.22.0 by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/express/pull/6921">expressjs/express#6921</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/expressjs/express/compare/4.21.2...4.22.0">https://github.com/expressjs/express/compare/4.21.2...4.22.0</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/express/blob/v4.22.1/History.md">express's
    changelog</a>.</em></p>
    <blockquote>
    <h1>4.22.1 / 2025-12-01</h1>
    <ul>
    <li>Revert security fix for <a
    href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a>
    (<a
    href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li>
    </ul>
    <h1>4.22.0 / 2025-12-01</h1>
    <ul>
    <li>Security fix for <a
    href="https://www.cve.org/CVERecord?id=CVE-2024-51999">CVE-2024-51999</a>
    (<a
    href="https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6">GHSA-pj86-cfqh-vqx6</a>)</li>
    <li>deps: use tilde notation for dependencies</li>
    <li>deps: qs@6.14.0</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/expressjs/express/commit/12fae14531a78f19a2caaa5d4f58d9b01eaf3194"><code>12fae14</code></a>
    4.22.1</li>
    <li><a
    href="https://github.com/expressjs/express/commit/5ddf311af32e772a77fd48b6266ce2f1ba330e1a"><code>5ddf311</code></a>
    Revert &quot;sec: security patch for CVE-2024-51999&quot;</li>
    <li><a
    href="https://github.com/expressjs/express/commit/49744abd1120484fe64d7bde1cd3197c32523b6e"><code>49744ab</code></a>
    4.22.0 (<a
    href="https://redirect.github.com/expressjs/express/issues/6921">#6921</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/6e97452f600a3b01719fbc5517d833c7646b0bb7"><code>6e97452</code></a>
    sec: security patch for CVE-2024-51999</li>
    <li><a
    href="https://github.com/expressjs/express/commit/6a23d34d652b9e69a4486d2a2a0dea54b9685fa5"><code>6a23d34</code></a>
    deps: use tilde notation for <code>qs</code> (<a
    href="https://redirect.github.com/expressjs/express/issues/6919">#6919</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/8c12cdf93b89a4628b59179e3cc0722fc517d6b3"><code>8c12cdf</code></a>
    deps: qs@6.14.0 (<a
    href="https://redirect.github.com/expressjs/express/issues/6909">#6909</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/7fea74fcf02764580f38f2a7f1932dfa54cddd90"><code>7fea74f</code></a>
    deps: use tilde notation for certain dependencies (<a
    href="https://redirect.github.com/expressjs/express/issues/6905">#6905</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/dac7a0475a99e9dfc57b3b8e6d5bdf52813f1944"><code>dac7a04</code></a>
    chore: wider range for query test skip (<a
    href="https://redirect.github.com/expressjs/express/issues/6513">#6513</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/997919b48879bbd53171c3b4e5dd1b04ad139241"><code>997919b</code></a>
    ci: add node.js 24 to test matrix (<a
    href="https://redirect.github.com/expressjs/express/issues/6506">#6506</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/36fb59c6c7d9dfca0b08dfeafb5b6e4a249234a1"><code>36fb59c</code></a>
    fix(ci): reorder <code>npm i</code> steps to fix ci for older node
    versions (<a
    href="https://redirect.github.com/expressjs/express/issues/6336">#6336</a>)</li>
    <li>Additional commits viewable in <a
    href="https://github.com/expressjs/express/compare/4.21.2...v4.22.1">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/auth0/lock/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 13, 2026
    Configuration menu
    Copy the full SHA
    94bb708 View commit details
    Browse the repository at this point in the history
  4. chore(deps-dev): Bump webpack from 5.99.8 to 5.105.0 (#2727)

    Bumps [webpack](https://github.com/webpack/webpack) from 5.99.8 to
    5.105.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/webpack/webpack/releases">webpack's
    releases</a>.</em></p>
    <blockquote>
    <h2>v5.105.0</h2>
    <h3>Minor Changes</h3>
    <ul>
    <li>
    <p>Allow resolving worker module by export condition name when using
    <code>new Worker()</code> (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20353">#20353</a>)</p>
    </li>
    <li>
    <p>Detect conditional imports to avoid compile-time linking errors for
    non-existent exports. (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20320">#20320</a>)</p>
    </li>
    <li>
    <p>Added the <code>tsconfig</code> option for the <code>resolver</code>
    options (replacement for <code>tsconfig-paths-webpack-plugin</code>).
    Can be <code>false</code> (disabled), <code>true</code> (use the default
    <code>tsconfig.json</code> file to search for it), a string path to
    <code>tsconfig.json</code>, or an object with <code>configFile</code>
    and <code>references</code> options. (by <a
    href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20400">#20400</a>)</p>
    </li>
    <li>
    <p>Support <code>import.defer()</code> for context modules. (by <a
    href="https://github.com/ahabhgk"><code>@​ahabhgk</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20399">#20399</a>)</p>
    </li>
    <li>
    <p>Added support for array values ​​to the <code>devtool</code> option.
    (by <a href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20191">#20191</a>)</p>
    </li>
    <li>
    <p>Improve rendering node built-in modules for ECMA module output. (by
    <a href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20255">#20255</a>)</p>
    </li>
    <li>
    <p>Unknown import.meta properties are now determined at runtime instead
    of being statically analyzed at compile time. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20312">#20312</a>)</p>
    </li>
    </ul>
    <h3>Patch Changes</h3>
    <ul>
    <li>
    <p>Fixed ESM default export handling for <code>.mjs</code> files in
    Module Federation (by <a
    href="https://github.com/y-okt"><code>@​y-okt</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20189">#20189</a>)</p>
    </li>
    <li>
    <p>Optimized <code>import.meta.env</code> handling in destructuring
    assignments by using cached stringified environment definitions. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20313">#20313</a>)</p>
    </li>
    <li>
    <p>Respect the <code>stats.errorStack</code> option in stats output. (by
    <a
    href="https://github.com/samarthsinh2660"><code>@​samarthsinh2660</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20258">#20258</a>)</p>
    </li>
    <li>
    <p>Fixed a bug where declaring a <code>module</code> variable in module
    scope would conflict with the default <code>moduleArgument</code>. (by
    <a href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in
    <a
    href="https://redirect.github.com/webpack/webpack/pull/20265">#20265</a>)</p>
    </li>
    <li>
    <p>Fix VirtualUrlPlugin to set resourceData.context for proper module
    resolution. Previously, when context was not set, it would fallback to
    the virtual scheme path (e.g., <code>virtual:routes</code>), which is
    not a valid filesystem path, causing subsequent resolve operations to
    fail. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20390">#20390</a>)</p>
    </li>
    <li>
    <p>Fixed Worker self-import handling to support various URL patterns
    (e.g., <code>import.meta.url</code>, <code>new
    URL(import.meta.url)</code>, <code>new URL(import.meta.url,
    import.meta.url)</code>, <code>new URL(&quot;./index.js&quot;,
    import.meta.url)</code>). Workers that resolve to the same module are
    now properly deduplicated, regardless of the URL syntax used. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20381">#20381</a>)</p>
    </li>
    <li>
    <p>Reuse the same async entrypoint for the same Worker URL within a
    module to avoid circular dependency warnings when multiple Workers
    reference the same resource. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20345">#20345</a>)</p>
    </li>
    <li>
    <p>Fixed a bug where a self-referencing dependency would have an unused
    export name when imported inside a web worker. (by <a
    href="https://github.com/samarthsinh2660"><code>@​samarthsinh2660</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20251">#20251</a>)</p>
    </li>
    <li>
    <p>Fix missing export generation when concatenated modules in different
    chunks share the same runtime in module library bundles. (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20346">#20346</a>)</p>
    </li>
    <li>
    <p>Fixed <code>import.meta.env.xxx</code> behavior: when accessing a
    non-existent property, it now returns empty object instead of full
    object at runtime. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20289">#20289</a>)</p>
    </li>
    <li>
    <p>Improved parsing error reporting by adding a link to the loader
    documentation. (by <a
    href="https://github.com/gaurav10gg"><code>@​gaurav10gg</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20244">#20244</a>)</p>
    </li>
    <li>
    <p>Fix typescript types. (by <a
    href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20305">#20305</a>)</p>
    </li>
    <li>
    <p>Add declaration for unused harmony import specifier. (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20286">#20286</a>)</p>
    </li>
    <li>
    <p>Fix compressibility of modules while retaining portability. (by <a
    href="https://github.com/dmichon-msft"><code>@​dmichon-msft</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20287">#20287</a>)</p>
    </li>
    <li>
    <p>Optimize source map generation: only include <code>ignoreList</code>
    property when it has content, avoiding empty arrays in source maps. (by
    <a href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in
    <a
    href="https://redirect.github.com/webpack/webpack/pull/20319">#20319</a>)</p>
    </li>
    <li>
    <p>Preserve star exports for dependencies in ECMA module output. (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20293">#20293</a>)</p>
    </li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/webpack/webpack/blob/main/CHANGELOG.md">webpack's
    changelog</a>.</em></p>
    <blockquote>
    <h2>5.105.0</h2>
    <h3>Minor Changes</h3>
    <ul>
    <li>
    <p>Allow resolving worker module by export condition name when using
    <code>new Worker()</code> (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20353">#20353</a>)</p>
    </li>
    <li>
    <p>Detect conditional imports to avoid compile-time linking errors for
    non-existent exports. (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20320">#20320</a>)</p>
    </li>
    <li>
    <p>Added the <code>tsconfig</code> option for the <code>resolver</code>
    options (replacement for <code>tsconfig-paths-webpack-plugin</code>).
    Can be <code>false</code> (disabled), <code>true</code> (use the default
    <code>tsconfig.json</code> file to search for it), a string path to
    <code>tsconfig.json</code>, or an object with <code>configFile</code>
    and <code>references</code> options. (by <a
    href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20400">#20400</a>)</p>
    </li>
    <li>
    <p>Support <code>import.defer()</code> for context modules. (by <a
    href="https://github.com/ahabhgk"><code>@​ahabhgk</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20399">#20399</a>)</p>
    </li>
    <li>
    <p>Added support for array values ​​to the <code>devtool</code> option.
    (by <a href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20191">#20191</a>)</p>
    </li>
    <li>
    <p>Improve rendering node built-in modules for ECMA module output. (by
    <a href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20255">#20255</a>)</p>
    </li>
    <li>
    <p>Unknown import.meta properties are now determined at runtime instead
    of being statically analyzed at compile time. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20312">#20312</a>)</p>
    </li>
    </ul>
    <h3>Patch Changes</h3>
    <ul>
    <li>
    <p>Fixed ESM default export handling for <code>.mjs</code> files in
    Module Federation (by <a
    href="https://github.com/y-okt"><code>@​y-okt</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20189">#20189</a>)</p>
    </li>
    <li>
    <p>Optimized <code>import.meta.env</code> handling in destructuring
    assignments by using cached stringified environment definitions. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20313">#20313</a>)</p>
    </li>
    <li>
    <p>Respect the <code>stats.errorStack</code> option in stats output. (by
    <a
    href="https://github.com/samarthsinh2660"><code>@​samarthsinh2660</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20258">#20258</a>)</p>
    </li>
    <li>
    <p>Fixed a bug where declaring a <code>module</code> variable in module
    scope would conflict with the default <code>moduleArgument</code>. (by
    <a href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in
    <a
    href="https://redirect.github.com/webpack/webpack/pull/20265">#20265</a>)</p>
    </li>
    <li>
    <p>Fix VirtualUrlPlugin to set resourceData.context for proper module
    resolution. Previously, when context was not set, it would fallback to
    the virtual scheme path (e.g., <code>virtual:routes</code>), which is
    not a valid filesystem path, causing subsequent resolve operations to
    fail. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20390">#20390</a>)</p>
    </li>
    <li>
    <p>Fixed Worker self-import handling to support various URL patterns
    (e.g., <code>import.meta.url</code>, <code>new
    URL(import.meta.url)</code>, <code>new URL(import.meta.url,
    import.meta.url)</code>, <code>new URL(&quot;./index.js&quot;,
    import.meta.url)</code>). Workers that resolve to the same module are
    now properly deduplicated, regardless of the URL syntax used. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20381">#20381</a>)</p>
    </li>
    <li>
    <p>Reuse the same async entrypoint for the same Worker URL within a
    module to avoid circular dependency warnings when multiple Workers
    reference the same resource. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20345">#20345</a>)</p>
    </li>
    <li>
    <p>Fixed a bug where a self-referencing dependency would have an unused
    export name when imported inside a web worker. (by <a
    href="https://github.com/samarthsinh2660"><code>@​samarthsinh2660</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20251">#20251</a>)</p>
    </li>
    <li>
    <p>Fix missing export generation when concatenated modules in different
    chunks share the same runtime in module library bundles. (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20346">#20346</a>)</p>
    </li>
    <li>
    <p>Fixed <code>import.meta.env.xxx</code> behavior: when accessing a
    non-existent property, it now returns empty object instead of full
    object at runtime. (by <a
    href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20289">#20289</a>)</p>
    </li>
    <li>
    <p>Improved parsing error reporting by adding a link to the loader
    documentation. (by <a
    href="https://github.com/gaurav10gg"><code>@​gaurav10gg</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20244">#20244</a>)</p>
    </li>
    <li>
    <p>Fix typescript types. (by <a
    href="https://github.com/alexander-akait"><code>@​alexander-akait</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20305">#20305</a>)</p>
    </li>
    <li>
    <p>Add declaration for unused harmony import specifier. (by <a
    href="https://github.com/hai-x"><code>@​hai-x</code></a> in <a
    href="https://redirect.github.com/webpack/webpack/pull/20286">#20286</a>)</p>
    </li>
    <li>
    <p>Fix compressibility of modules while retaining portability. (by <a
    href="https://github.com/dmichon-msft"><code>@​dmichon-msft</code></a>
    in <a
    href="https://redirect.github.com/webpack/webpack/pull/20287">#20287</a>)</p>
    </li>
    <li>
    <p>Optimize source map generation: only include <code>ignoreList</code>
    property when it has content, avoiding empty arrays in source maps. (by
    <a href="https://github.com/xiaoxiaojx"><code>@​xiaoxiaojx</code></a> in
    <a
    href="https://redirect.github.com/webpack/webpack/pull/20319">#20319</a>)</p>
    </li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/webpack/webpack/commit/1486f9aacca11d79dbb7ddbceed29b7e6df7a7ab"><code>1486f9a</code></a>
    chore(release): new release</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/1a517f665aae7b4d3d29c8b408d09488a21fbf94"><code>1a517f6</code></a>
    feat: added the <code>tsconfig</code> option for the
    <code>resolver</code> options (<a
    href="https://redirect.github.com/webpack/webpack/issues/20400">#20400</a>)</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/7b3b0f795df377a9d0073822a2d60c1390d03109"><code>7b3b0f7</code></a>
    feat: support <code>import.defer()</code> for context modules</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/c4a6a922de4af37a92d05c0ddc975b5348cfa9a1"><code>c4a6a92</code></a>
    refactor: more types and increase types coverage</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/5ecc58d722da7715ede7de59b97108dd715d1bfa"><code>5ecc58d</code></a>
    feat: consider asset module as side-effect-free (<a
    href="https://redirect.github.com/webpack/webpack/issues/20352">#20352</a>)</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/cce0f6989888771ec279777ab8f8dce8e39198a0"><code>cce0f69</code></a>
    test: avoid comma operator in BinaryMiddleware test (<a
    href="https://redirect.github.com/webpack/webpack/issues/20398">#20398</a>)</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/cd4793d50e8e1e519ecd07b76d9e5dc06357341e"><code>cd4793d</code></a>
    feat: support import specifier guard (<a
    href="https://redirect.github.com/webpack/webpack/issues/20320">#20320</a>)</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/fe486552d060f6d2815a39a6bd0fb351d348658c"><code>fe48655</code></a>
    docs: update examples (<a
    href="https://redirect.github.com/webpack/webpack/issues/20397">#20397</a>)</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/de107f8767a2a11759f8261ed1ac49bcddec34b6"><code>de107f8</code></a>
    fix(VirtualUrlPlugin): set resourceData.context to avoid invalid
    fallback (<a
    href="https://redirect.github.com/webpack/webpack/issues/2">#2</a>...</li>
    <li><a
    href="https://github.com/webpack/webpack/commit/a656ab1fd1064ef8dd3eef1a2f3071fc176b948f"><code>a656ab1</code></a>
    test: add self-import test case for dynamic import (<a
    href="https://redirect.github.com/webpack/webpack/issues/20389">#20389</a>)</li>
    <li>Additional commits viewable in <a
    href="https://github.com/webpack/webpack/compare/v5.99.8...v5.105.0">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by [GitHub Actions](<a
    href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
    Actions), a new releaser for webpack since your current version.</p>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.99.8&new-version=5.105.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/auth0/lock/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 13, 2026
    Configuration menu
    Copy the full SHA
    3a66f50 View commit details
    Browse the repository at this point in the history
  5. chore(deps-dev): Bump the babel group with 6 updates (#2722)

    Bumps the babel group with 6 updates:
    
    | Package | From | To |
    | --- | --- | --- |
    |
    [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core)
    | `7.28.5` | `7.28.6` |
    |
    [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser)
    | `7.28.5` | `7.28.6` |
    |
    [@babel/plugin-proposal-decorators](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-decorators)
    | `7.28.0` | `7.28.6` |
    |
    [@babel/plugin-proposal-do-expressions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-do-expressions)
    | `7.28.3` | `7.28.6` |
    |
    [@babel/plugin-proposal-pipeline-operator](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-pipeline-operator)
    | `7.27.1` | `7.28.6` |
    |
    [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env)
    | `7.28.5` | `7.28.6` |
    
    Updates `@babel/core` from 7.28.5 to 7.28.6
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/releases"><code>@​babel/core</code>'s
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.28.6 (2026-01-12)</h2>
    <p>Thanks <a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a> and <a
    href="https://github.com/kolvian"><code>@​kolvian</code></a> for your
    first PRs!</p>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-cli</code>, <code>babel-code-frame</code>,
    <code>babel-core</code>,
    <code>babel-helper-check-duplicate-nodes</code>,
    <code>babel-helper-fixtures</code>,
    <code>babel-helper-plugin-utils</code>, <code>babel-node</code>,
    <code>babel-plugin-transform-flow-comments</code>,
    <code>babel-plugin-transform-modules-commonjs</code>,
    <code>babel-plugin-transform-property-mutators</code>,
    <code>babel-preset-env</code>, <code>babel-traverse</code>,
    <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17589">#17589</a>
    Improve Unicode handling in code-frame tokenizer (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-regenerator</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17556">#17556</a>
    fix: <code>transform-regenerator</code> correctly handles scope (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17538">#17538</a>
    fix: Keep jsx comments (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:nail_care: Polish</h4>
    <ul>
    <li><code>babel-core</code>, <code>babel-standalone</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17606">#17606</a>
    Polish(standalone): improve message on invalid preset/plugin (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    
    <li><code>babel-plugin-bugfix-v8-static-class-fields-redefine-readonly</code>,
    <code>babel-plugin-proposal-decorators</code>,
    <code>babel-plugin-proposal-import-attributes-to-assertions</code>,
    <code>babel-plugin-proposal-import-wasm-source</code>,
    <code>babel-plugin-syntax-async-do-expressions</code>,
    <code>babel-plugin-syntax-decorators</code>,
    <code>babel-plugin-syntax-destructuring-private</code>,
    <code>babel-plugin-syntax-do-expressions</code>,
    <code>babel-plugin-syntax-explicit-resource-management</code>,
    <code>babel-plugin-syntax-export-default-from</code>,
    <code>babel-plugin-syntax-flow</code>,
    <code>babel-plugin-syntax-function-bind</code>,
    <code>babel-plugin-syntax-function-sent</code>,
    <code>babel-plugin-syntax-import-assertions</code>,
    <code>babel-plugin-syntax-import-attributes</code>,
    <code>babel-plugin-syntax-import-defer</code>,
    <code>babel-plugin-syntax-import-source</code>,
    <code>babel-plugin-syntax-jsx</code>,
    <code>babel-plugin-syntax-module-blocks</code>,
    <code>babel-plugin-syntax-optional-chaining-assign</code>,
    <code>babel-plugin-syntax-partial-application</code>,
    <code>babel-plugin-syntax-pipeline-operator</code>,
    <code>babel-plugin-syntax-throw-expressions</code>,
    <code>babel-plugin-syntax-typescript</code>,
    <code>babel-plugin-transform-async-generator-functions</code>,
    <code>babel-plugin-transform-async-to-generator</code>,
    <code>babel-plugin-transform-class-properties</code>,
    <code>babel-plugin-transform-class-static-block</code>,
    <code>babel-plugin-transform-dotall-regex</code>,
    <code>babel-plugin-transform-duplicate-named-capturing-groups-regex</code>,
    <code>babel-plugin-transform-explicit-resource-management</code>,
    <code>babel-plugin-transform-exponentiation-operator</code>,
    <code>babel-plugin-transform-json-strings</code>,
    <code>babel-plugin-transform-logical-assignment-operators</code>,
    <code>babel-plugin-transform-nullish-coalescing-operator</code>,
    <code>babel-plugin-transform-numeric-separator</code>,
    <code>babel-plugin-transform-object-rest-spread</code>,
    <code>babel-plugin-transform-optional-catch-binding</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-plugin-transform-private-methods</code>,
    <code>babel-plugin-transform-private-property-in-object</code>,
    <code>babel-plugin-transform-regexp-modifiers</code>,
    <code>babel-plugin-transform-unicode-property-regex</code>,
    <code>babel-plugin-transform-unicode-sets-regex</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17580">#17580</a>
    Allow Babel 8 in compatible Babel 7 plugins (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:running_woman: Performance</h4>
    <ul>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17555">#17555</a>
    perf: Use lighter traversal for jsx <code>__source,__self</code> (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>Committers: 7</h4>
    <ul>
    <li>Babel Bot (<a
    href="https://github.com/babel-bot"><code>@​babel-bot</code></a>)</li>
    <li>Eliot Pontarelli (<a
    href="https://github.com/kolvian"><code>@​kolvian</code></a>)</li>
    <li>Huáng Jùnliàng (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li>Kadhirash Sivakumar (<a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a>)</li>
    <li>Nicolò Ribaudo (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    <li><a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a></li>
    <li>coderaiser (<a
    href="https://github.com/coderaiser"><code>@​coderaiser</code></a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>@​babel/core</code>'s
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <blockquote>
    <p><strong>Tags:</strong></p>
    <ul>
    <li>:boom: [Breaking Change]</li>
    <li>:eyeglasses: [Spec Compliance]</li>
    <li>:rocket: [New Feature]</li>
    <li>:bug: [Bug Fix]</li>
    <li>:memo: [Documentation]</li>
    <li>:house: [Internal]</li>
    <li>:nail_care: [Polish]</li>
    </ul>
    </blockquote>
    <p><em>Note: Gaps between patch versions are faulty, broken or test
    releases.</em></p>
    <p>This file contains the changelog starting from v7.15.0.</p>
    <ul>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7.0.0-v7.14.9.md">CHANGELOG
    - v7.0.0 to v7.14.9</a> for v7.0.0 to v7.14.9 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7-prereleases.md">CHANGELOG
    - v7 prereleases</a> for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v4.md">CHANGELOG
    - v4</a>, <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v5.md">CHANGELOG
    - v5</a>, and <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v6.md">CHANGELOG
    - v6</a> for v4.x-v6.x changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-6to5.md">CHANGELOG
    - 6to5</a> for the pre-4.0.0 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/packages/babel-parser/CHANGELOG.md">Babylon's
    CHANGELOG</a> for the Babylon pre-7.0.0-beta.29 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel-eslint/releases"><code>babel-eslint</code>'s
    releases</a> for the changelog before <code>@babel/eslint-parser</code>
    7.8.0.</li>
    <li>See <a
    href="https://github.com/babel/eslint-plugin-babel/releases"><code>eslint-plugin-babel</code>'s
    releases</a> for the changelog before <code>@babel/eslint-plugin</code>
    7.8.0.</li>
    </ul>
    <!-- raw HTML omitted -->
    <!-- raw HTML omitted -->
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17"><code>d7f4008</code></a>
    v7.28.6</li>
    <li><a
    href="https://github.com/babel/babel/commit/e130225028e93e106135586f344cfa44c4aac847"><code>e130225</code></a>
    Polish(standalone): improve message on invalid preset/plugin (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17606">#17606</a>)</li>
    <li><a
    href="https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177"><code>99dcba5</code></a>
    chore: enable some ts-eslint rules (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17592">#17592</a>)</li>
    <li><a
    href="https://github.com/babel/babel/commit/c92c4919771105140015167f25f7bacac77c90d9"><code>c92c491</code></a>
    Improve Unicode handling in code-frame tokenizer (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17589">#17589</a>)</li>
    <li><a
    href="https://github.com/babel/babel/commit/d725e399fd6a4da463cff4918cf71aa03b8beb14"><code>d725e39</code></a>
    Add <code>BABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK</code> (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17569">#17569</a>)</li>
    <li><a
    href="https://github.com/babel/babel/commit/c1b55f6ad56523ccc96fa68721de0bed2f2cdb23"><code>c1b55f6</code></a>
    Use <code>eslint.config.mts</code> (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17573">#17573</a>)</li>
    <li>See full diff in <a
    href="https://github.com/babel/babel/commits/v7.28.6/packages/babel-core">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `@babel/eslint-parser` from 7.28.5 to 7.28.6
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/releases"><code>@​babel/eslint-parser</code>'s
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.28.6 (2026-01-12)</h2>
    <p>Thanks <a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a> and <a
    href="https://github.com/kolvian"><code>@​kolvian</code></a> for your
    first PRs!</p>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-cli</code>, <code>babel-code-frame</code>,
    <code>babel-core</code>,
    <code>babel-helper-check-duplicate-nodes</code>,
    <code>babel-helper-fixtures</code>,
    <code>babel-helper-plugin-utils</code>, <code>babel-node</code>,
    <code>babel-plugin-transform-flow-comments</code>,
    <code>babel-plugin-transform-modules-commonjs</code>,
    <code>babel-plugin-transform-property-mutators</code>,
    <code>babel-preset-env</code>, <code>babel-traverse</code>,
    <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17589">#17589</a>
    Improve Unicode handling in code-frame tokenizer (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-regenerator</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17556">#17556</a>
    fix: <code>transform-regenerator</code> correctly handles scope (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17538">#17538</a>
    fix: Keep jsx comments (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:nail_care: Polish</h4>
    <ul>
    <li><code>babel-core</code>, <code>babel-standalone</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17606">#17606</a>
    Polish(standalone): improve message on invalid preset/plugin (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    
    <li><code>babel-plugin-bugfix-v8-static-class-fields-redefine-readonly</code>,
    <code>babel-plugin-proposal-decorators</code>,
    <code>babel-plugin-proposal-import-attributes-to-assertions</code>,
    <code>babel-plugin-proposal-import-wasm-source</code>,
    <code>babel-plugin-syntax-async-do-expressions</code>,
    <code>babel-plugin-syntax-decorators</code>,
    <code>babel-plugin-syntax-destructuring-private</code>,
    <code>babel-plugin-syntax-do-expressions</code>,
    <code>babel-plugin-syntax-explicit-resource-management</code>,
    <code>babel-plugin-syntax-export-default-from</code>,
    <code>babel-plugin-syntax-flow</code>,
    <code>babel-plugin-syntax-function-bind</code>,
    <code>babel-plugin-syntax-function-sent</code>,
    <code>babel-plugin-syntax-import-assertions</code>,
    <code>babel-plugin-syntax-import-attributes</code>,
    <code>babel-plugin-syntax-import-defer</code>,
    <code>babel-plugin-syntax-import-source</code>,
    <code>babel-plugin-syntax-jsx</code>,
    <code>babel-plugin-syntax-module-blocks</code>,
    <code>babel-plugin-syntax-optional-chaining-assign</code>,
    <code>babel-plugin-syntax-partial-application</code>,
    <code>babel-plugin-syntax-pipeline-operator</code>,
    <code>babel-plugin-syntax-throw-expressions</code>,
    <code>babel-plugin-syntax-typescript</code>,
    <code>babel-plugin-transform-async-generator-functions</code>,
    <code>babel-plugin-transform-async-to-generator</code>,
    <code>babel-plugin-transform-class-properties</code>,
    <code>babel-plugin-transform-class-static-block</code>,
    <code>babel-plugin-transform-dotall-regex</code>,
    <code>babel-plugin-transform-duplicate-named-capturing-groups-regex</code>,
    <code>babel-plugin-transform-explicit-resource-management</code>,
    <code>babel-plugin-transform-exponentiation-operator</code>,
    <code>babel-plugin-transform-json-strings</code>,
    <code>babel-plugin-transform-logical-assignment-operators</code>,
    <code>babel-plugin-transform-nullish-coalescing-operator</code>,
    <code>babel-plugin-transform-numeric-separator</code>,
    <code>babel-plugin-transform-object-rest-spread</code>,
    <code>babel-plugin-transform-optional-catch-binding</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-plugin-transform-private-methods</code>,
    <code>babel-plugin-transform-private-property-in-object</code>,
    <code>babel-plugin-transform-regexp-modifiers</code>,
    <code>babel-plugin-transform-unicode-property-regex</code>,
    <code>babel-plugin-transform-unicode-sets-regex</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17580">#17580</a>
    Allow Babel 8 in compatible Babel 7 plugins (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:running_woman: Performance</h4>
    <ul>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17555">#17555</a>
    perf: Use lighter traversal for jsx <code>__source,__self</code> (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>Committers: 7</h4>
    <ul>
    <li>Babel Bot (<a
    href="https://github.com/babel-bot"><code>@​babel-bot</code></a>)</li>
    <li>Eliot Pontarelli (<a
    href="https://github.com/kolvian"><code>@​kolvian</code></a>)</li>
    <li>Huáng Jùnliàng (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li>Kadhirash Sivakumar (<a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a>)</li>
    <li>Nicolò Ribaudo (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    <li><a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a></li>
    <li>coderaiser (<a
    href="https://github.com/coderaiser"><code>@​coderaiser</code></a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>@​babel/eslint-parser</code>'s
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <blockquote>
    <p><strong>Tags:</strong></p>
    <ul>
    <li>:boom: [Breaking Change]</li>
    <li>:eyeglasses: [Spec Compliance]</li>
    <li>:rocket: [New Feature]</li>
    <li>:bug: [Bug Fix]</li>
    <li>:memo: [Documentation]</li>
    <li>:house: [Internal]</li>
    <li>:nail_care: [Polish]</li>
    </ul>
    </blockquote>
    <p><em>Note: Gaps between patch versions are faulty, broken or test
    releases.</em></p>
    <p>This file contains the changelog starting from v7.15.0.</p>
    <ul>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7.0.0-v7.14.9.md">CHANGELOG
    - v7.0.0 to v7.14.9</a> for v7.0.0 to v7.14.9 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7-prereleases.md">CHANGELOG
    - v7 prereleases</a> for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v4.md">CHANGELOG
    - v4</a>, <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v5.md">CHANGELOG
    - v5</a>, and <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v6.md">CHANGELOG
    - v6</a> for v4.x-v6.x changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-6to5.md">CHANGELOG
    - 6to5</a> for the pre-4.0.0 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/packages/babel-parser/CHANGELOG.md">Babylon's
    CHANGELOG</a> for the Babylon pre-7.0.0-beta.29 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel-eslint/releases"><code>babel-eslint</code>'s
    releases</a> for the changelog before <code>@babel/eslint-parser</code>
    7.8.0.</li>
    <li>See <a
    href="https://github.com/babel/eslint-plugin-babel/releases"><code>eslint-plugin-babel</code>'s
    releases</a> for the changelog before <code>@babel/eslint-plugin</code>
    7.8.0.</li>
    </ul>
    <!-- raw HTML omitted -->
    <!-- raw HTML omitted -->
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17"><code>d7f4008</code></a>
    v7.28.6</li>
    <li><a
    href="https://github.com/babel/babel/commit/beea88c2bddd158a52e3c08739f47cbca970beea"><code>beea88c</code></a>
    [babel 8] Rename <code>TSImportType.argument</code> to
    <code>.source</code> (<a
    href="https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser/issues/17610">#17610</a>)</li>
    <li>See full diff in <a
    href="https://github.com/babel/babel/commits/v7.28.6/eslint/babel-eslint-parser">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `@babel/plugin-proposal-decorators` from 7.28.0 to 7.28.6
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/releases"><code>@​babel/plugin-proposal-decorators</code>'s
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.28.6 (2026-01-12)</h2>
    <p>Thanks <a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a> and <a
    href="https://github.com/kolvian"><code>@​kolvian</code></a> for your
    first PRs!</p>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-cli</code>, <code>babel-code-frame</code>,
    <code>babel-core</code>,
    <code>babel-helper-check-duplicate-nodes</code>,
    <code>babel-helper-fixtures</code>,
    <code>babel-helper-plugin-utils</code>, <code>babel-node</code>,
    <code>babel-plugin-transform-flow-comments</code>,
    <code>babel-plugin-transform-modules-commonjs</code>,
    <code>babel-plugin-transform-property-mutators</code>,
    <code>babel-preset-env</code>, <code>babel-traverse</code>,
    <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17589">#17589</a>
    Improve Unicode handling in code-frame tokenizer (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-regenerator</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17556">#17556</a>
    fix: <code>transform-regenerator</code> correctly handles scope (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17538">#17538</a>
    fix: Keep jsx comments (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:nail_care: Polish</h4>
    <ul>
    <li><code>babel-core</code>, <code>babel-standalone</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17606">#17606</a>
    Polish(standalone): improve message on invalid preset/plugin (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    
    <li><code>babel-plugin-bugfix-v8-static-class-fields-redefine-readonly</code>,
    <code>babel-plugin-proposal-decorators</code>,
    <code>babel-plugin-proposal-import-attributes-to-assertions</code>,
    <code>babel-plugin-proposal-import-wasm-source</code>,
    <code>babel-plugin-syntax-async-do-expressions</code>,
    <code>babel-plugin-syntax-decorators</code>,
    <code>babel-plugin-syntax-destructuring-private</code>,
    <code>babel-plugin-syntax-do-expressions</code>,
    <code>babel-plugin-syntax-explicit-resource-management</code>,
    <code>babel-plugin-syntax-export-default-from</code>,
    <code>babel-plugin-syntax-flow</code>,
    <code>babel-plugin-syntax-function-bind</code>,
    <code>babel-plugin-syntax-function-sent</code>,
    <code>babel-plugin-syntax-import-assertions</code>,
    <code>babel-plugin-syntax-import-attributes</code>,
    <code>babel-plugin-syntax-import-defer</code>,
    <code>babel-plugin-syntax-import-source</code>,
    <code>babel-plugin-syntax-jsx</code>,
    <code>babel-plugin-syntax-module-blocks</code>,
    <code>babel-plugin-syntax-optional-chaining-assign</code>,
    <code>babel-plugin-syntax-partial-application</code>,
    <code>babel-plugin-syntax-pipeline-operator</code>,
    <code>babel-plugin-syntax-throw-expressions</code>,
    <code>babel-plugin-syntax-typescript</code>,
    <code>babel-plugin-transform-async-generator-functions</code>,
    <code>babel-plugin-transform-async-to-generator</code>,
    <code>babel-plugin-transform-class-properties</code>,
    <code>babel-plugin-transform-class-static-block</code>,
    <code>babel-plugin-transform-dotall-regex</code>,
    <code>babel-plugin-transform-duplicate-named-capturing-groups-regex</code>,
    <code>babel-plugin-transform-explicit-resource-management</code>,
    <code>babel-plugin-transform-exponentiation-operator</code>,
    <code>babel-plugin-transform-json-strings</code>,
    <code>babel-plugin-transform-logical-assignment-operators</code>,
    <code>babel-plugin-transform-nullish-coalescing-operator</code>,
    <code>babel-plugin-transform-numeric-separator</code>,
    <code>babel-plugin-transform-object-rest-spread</code>,
    <code>babel-plugin-transform-optional-catch-binding</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-plugin-transform-private-methods</code>,
    <code>babel-plugin-transform-private-property-in-object</code>,
    <code>babel-plugin-transform-regexp-modifiers</code>,
    <code>babel-plugin-transform-unicode-property-regex</code>,
    <code>babel-plugin-transform-unicode-sets-regex</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17580">#17580</a>
    Allow Babel 8 in compatible Babel 7 plugins (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:running_woman: Performance</h4>
    <ul>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17555">#17555</a>
    perf: Use lighter traversal for jsx <code>__source,__self</code> (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>Committers: 7</h4>
    <ul>
    <li>Babel Bot (<a
    href="https://github.com/babel-bot"><code>@​babel-bot</code></a>)</li>
    <li>Eliot Pontarelli (<a
    href="https://github.com/kolvian"><code>@​kolvian</code></a>)</li>
    <li>Huáng Jùnliàng (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li>Kadhirash Sivakumar (<a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a>)</li>
    <li>Nicolò Ribaudo (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    <li><a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a></li>
    <li>coderaiser (<a
    href="https://github.com/coderaiser"><code>@​coderaiser</code></a>)</li>
    </ul>
    <h2>v7.28.5 (2025-10-23)</h2>
    <p>Thank you <a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>, <a
    href="https://github.com/Olexandr88"><code>@​Olexandr88</code></a>, and
    <a href="https://github.com/youthfulhps"><code>@​youthfulhps</code></a>
    for your first PRs!</p>
    <h4>:eyeglasses: Spec Compliance</h4>
    <ul>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17446">#17446</a>
    Allow <code>Runtime Errors for Function Call Assignment Targets</code>
    (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-validator-identifier</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17501">#17501</a>
    fix: update identifier to unicode 17 (<a
    href="https://github.com/fisker"><code>@​fisker</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-plugin-proposal-destructuring-private</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17534">#17534</a>
    Allow mixing private destructuring and rest (<a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17521">#17521</a>
    Improve <code>@babel/parser</code> error typing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17491">#17491</a>
    fix: improve ts-only declaration parsing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-proposal-discard-binding</code>,
    <code>babel-plugin-transform-destructuring</code></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>@​babel/plugin-proposal-decorators</code>'s
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <blockquote>
    <p><strong>Tags:</strong></p>
    <ul>
    <li>:boom: [Breaking Change]</li>
    <li>:eyeglasses: [Spec Compliance]</li>
    <li>:rocket: [New Feature]</li>
    <li>:bug: [Bug Fix]</li>
    <li>:memo: [Documentation]</li>
    <li>:house: [Internal]</li>
    <li>:nail_care: [Polish]</li>
    </ul>
    </blockquote>
    <p><em>Note: Gaps between patch versions are faulty, broken or test
    releases.</em></p>
    <p>This file contains the changelog starting from v7.15.0.</p>
    <ul>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7.0.0-v7.14.9.md">CHANGELOG
    - v7.0.0 to v7.14.9</a> for v7.0.0 to v7.14.9 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7-prereleases.md">CHANGELOG
    - v7 prereleases</a> for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v4.md">CHANGELOG
    - v4</a>, <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v5.md">CHANGELOG
    - v5</a>, and <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v6.md">CHANGELOG
    - v6</a> for v4.x-v6.x changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-6to5.md">CHANGELOG
    - 6to5</a> for the pre-4.0.0 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/packages/babel-parser/CHANGELOG.md">Babylon's
    CHANGELOG</a> for the Babylon pre-7.0.0-beta.29 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel-eslint/releases"><code>babel-eslint</code>'s
    releases</a> for the changelog before <code>@babel/eslint-parser</code>
    7.8.0.</li>
    <li>See <a
    href="https://github.com/babel/eslint-plugin-babel/releases"><code>eslint-plugin-babel</code>'s
    releases</a> for the changelog before <code>@babel/eslint-plugin</code>
    7.8.0.</li>
    </ul>
    <!-- raw HTML omitted -->
    <!-- raw HTML omitted -->
    <h2>v7.28.5 (2025-10-23)</h2>
    <h4>:eyeglasses: Spec Compliance</h4>
    <ul>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17446">#17446</a>
    Allow <code>Runtime Errors for Function Call Assignment Targets</code>
    (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-validator-identifier</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17501">#17501</a>
    fix: update identifier to unicode 17 (<a
    href="https://github.com/fisker"><code>@​fisker</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-plugin-proposal-destructuring-private</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17534">#17534</a>
    Allow mixing private destructuring and rest (<a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17521">#17521</a>
    Improve <code>@babel/parser</code> error typing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17491">#17491</a>
    fix: improve ts-only declaration parsing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-proposal-discard-binding</code>,
    <code>babel-plugin-transform-destructuring</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17519">#17519</a>
    fix: <code>rest</code> correctly returns plain array (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-create-class-features-plugin</code>,
    <code>babel-helper-member-expression-to-functions</code>,
    <code>babel-plugin-transform-block-scoping</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-traverse</code>, <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17503">#17503</a> Fix
    <code>JSXIdentifier</code> handling in
    <code>isReferencedIdentifier</code> (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-traverse</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17504">#17504</a>
    fix: ensure scope.push register in anonymous fn (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    <li><code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17494">#17494</a>
    Type checking babel-types scripts (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17"><code>d7f4008</code></a>
    v7.28.6</li>
    <li><a
    href="https://github.com/babel/babel/commit/65c4a6b3ee0e1d32801529e841572bb22534e1f3"><code>65c4a6b</code></a>
    [Babel 8] fix: Improve <code>traverse</code> types (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-decorators/issues/17574">#17574</a>)</li>
    <li><a
    href="https://github.com/babel/babel/commit/445b575653acfac3cba502afc769fc46c706870b"><code>445b575</code></a>
    Allow Babel 8 in compatible Babel 7 plugins (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-decorators/issues/17580">#17580</a>)</li>
    <li><a
    href="https://github.com/babel/babel/commit/f4a96162033b23b33285af63b13aa0632ebb943b"><code>f4a9616</code></a>
    [static blocks] Do not inject new static fields after static code (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-decorators/issues/17443">#17443</a>)</li>
    <li>See full diff in <a
    href="https://github.com/babel/babel/commits/v7.28.6/packages/babel-plugin-proposal-decorators">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by [GitHub Actions](<a
    href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
    Actions), a new releaser for
    <code>@​babel/plugin-proposal-decorators</code> since your current
    version.</p>
    </details>
    <br />
    
    Updates `@babel/plugin-proposal-do-expressions` from 7.28.3 to 7.28.6
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/releases"><code>@​babel/plugin-proposal-do-expressions</code>'s
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.28.6 (2026-01-12)</h2>
    <p>Thanks <a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a> and <a
    href="https://github.com/kolvian"><code>@​kolvian</code></a> for your
    first PRs!</p>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-cli</code>, <code>babel-code-frame</code>,
    <code>babel-core</code>,
    <code>babel-helper-check-duplicate-nodes</code>,
    <code>babel-helper-fixtures</code>,
    <code>babel-helper-plugin-utils</code>, <code>babel-node</code>,
    <code>babel-plugin-transform-flow-comments</code>,
    <code>babel-plugin-transform-modules-commonjs</code>,
    <code>babel-plugin-transform-property-mutators</code>,
    <code>babel-preset-env</code>, <code>babel-traverse</code>,
    <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17589">#17589</a>
    Improve Unicode handling in code-frame tokenizer (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-regenerator</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17556">#17556</a>
    fix: <code>transform-regenerator</code> correctly handles scope (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17538">#17538</a>
    fix: Keep jsx comments (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:nail_care: Polish</h4>
    <ul>
    <li><code>babel-core</code>, <code>babel-standalone</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17606">#17606</a>
    Polish(standalone): improve message on invalid preset/plugin (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    
    <li><code>babel-plugin-bugfix-v8-static-class-fields-redefine-readonly</code>,
    <code>babel-plugin-proposal-decorators</code>,
    <code>babel-plugin-proposal-import-attributes-to-assertions</code>,
    <code>babel-plugin-proposal-import-wasm-source</code>,
    <code>babel-plugin-syntax-async-do-expressions</code>,
    <code>babel-plugin-syntax-decorators</code>,
    <code>babel-plugin-syntax-destructuring-private</code>,
    <code>babel-plugin-syntax-do-expressions</code>,
    <code>babel-plugin-syntax-explicit-resource-management</code>,
    <code>babel-plugin-syntax-export-default-from</code>,
    <code>babel-plugin-syntax-flow</code>,
    <code>babel-plugin-syntax-function-bind</code>,
    <code>babel-plugin-syntax-function-sent</code>,
    <code>babel-plugin-syntax-import-assertions</code>,
    <code>babel-plugin-syntax-import-attributes</code>,
    <code>babel-plugin-syntax-import-defer</code>,
    <code>babel-plugin-syntax-import-source</code>,
    <code>babel-plugin-syntax-jsx</code>,
    <code>babel-plugin-syntax-module-blocks</code>,
    <code>babel-plugin-syntax-optional-chaining-assign</code>,
    <code>babel-plugin-syntax-partial-application</code>,
    <code>babel-plugin-syntax-pipeline-operator</code>,
    <code>babel-plugin-syntax-throw-expressions</code>,
    <code>babel-plugin-syntax-typescript</code>,
    <code>babel-plugin-transform-async-generator-functions</code>,
    <code>babel-plugin-transform-async-to-generator</code>,
    <code>babel-plugin-transform-class-properties</code>,
    <code>babel-plugin-transform-class-static-block</code>,
    <code>babel-plugin-transform-dotall-regex</code>,
    <code>babel-plugin-transform-duplicate-named-capturing-groups-regex</code>,
    <code>babel-plugin-transform-explicit-resource-management</code>,
    <code>babel-plugin-transform-exponentiation-operator</code>,
    <code>babel-plugin-transform-json-strings</code>,
    <code>babel-plugin-transform-logical-assignment-operators</code>,
    <code>babel-plugin-transform-nullish-coalescing-operator</code>,
    <code>babel-plugin-transform-numeric-separator</code>,
    <code>babel-plugin-transform-object-rest-spread</code>,
    <code>babel-plugin-transform-optional-catch-binding</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-plugin-transform-private-methods</code>,
    <code>babel-plugin-transform-private-property-in-object</code>,
    <code>babel-plugin-transform-regexp-modifiers</code>,
    <code>babel-plugin-transform-unicode-property-regex</code>,
    <code>babel-plugin-transform-unicode-sets-regex</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17580">#17580</a>
    Allow Babel 8 in compatible Babel 7 plugins (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:running_woman: Performance</h4>
    <ul>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17555">#17555</a>
    perf: Use lighter traversal for jsx <code>__source,__self</code> (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>Committers: 7</h4>
    <ul>
    <li>Babel Bot (<a
    href="https://github.com/babel-bot"><code>@​babel-bot</code></a>)</li>
    <li>Eliot Pontarelli (<a
    href="https://github.com/kolvian"><code>@​kolvian</code></a>)</li>
    <li>Huáng Jùnliàng (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li>Kadhirash Sivakumar (<a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a>)</li>
    <li>Nicolò Ribaudo (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    <li><a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a></li>
    <li>coderaiser (<a
    href="https://github.com/coderaiser"><code>@​coderaiser</code></a>)</li>
    </ul>
    <h2>v7.28.5 (2025-10-23)</h2>
    <p>Thank you <a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>, <a
    href="https://github.com/Olexandr88"><code>@​Olexandr88</code></a>, and
    <a href="https://github.com/youthfulhps"><code>@​youthfulhps</code></a>
    for your first PRs!</p>
    <h4>:eyeglasses: Spec Compliance</h4>
    <ul>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17446">#17446</a>
    Allow <code>Runtime Errors for Function Call Assignment Targets</code>
    (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-validator-identifier</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17501">#17501</a>
    fix: update identifier to unicode 17 (<a
    href="https://github.com/fisker"><code>@​fisker</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-plugin-proposal-destructuring-private</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17534">#17534</a>
    Allow mixing private destructuring and rest (<a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17521">#17521</a>
    Improve <code>@babel/parser</code> error typing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17491">#17491</a>
    fix: improve ts-only declaration parsing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-proposal-discard-binding</code>,
    <code>babel-plugin-transform-destructuring</code></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>@​babel/plugin-proposal-do-expressions</code>'s
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <blockquote>
    <p><strong>Tags:</strong></p>
    <ul>
    <li>:boom: [Breaking Change]</li>
    <li>:eyeglasses: [Spec Compliance]</li>
    <li>:rocket: [New Feature]</li>
    <li>:bug: [Bug Fix]</li>
    <li>:memo: [Documentation]</li>
    <li>:house: [Internal]</li>
    <li>:nail_care: [Polish]</li>
    </ul>
    </blockquote>
    <p><em>Note: Gaps between patch versions are faulty, broken or test
    releases.</em></p>
    <p>This file contains the changelog starting from v7.15.0.</p>
    <ul>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7.0.0-v7.14.9.md">CHANGELOG
    - v7.0.0 to v7.14.9</a> for v7.0.0 to v7.14.9 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7-prereleases.md">CHANGELOG
    - v7 prereleases</a> for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v4.md">CHANGELOG
    - v4</a>, <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v5.md">CHANGELOG
    - v5</a>, and <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v6.md">CHANGELOG
    - v6</a> for v4.x-v6.x changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-6to5.md">CHANGELOG
    - 6to5</a> for the pre-4.0.0 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/packages/babel-parser/CHANGELOG.md">Babylon's
    CHANGELOG</a> for the Babylon pre-7.0.0-beta.29 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel-eslint/releases"><code>babel-eslint</code>'s
    releases</a> for the changelog before <code>@babel/eslint-parser</code>
    7.8.0.</li>
    <li>See <a
    href="https://github.com/babel/eslint-plugin-babel/releases"><code>eslint-plugin-babel</code>'s
    releases</a> for the changelog before <code>@babel/eslint-plugin</code>
    7.8.0.</li>
    </ul>
    <!-- raw HTML omitted -->
    <!-- raw HTML omitted -->
    <h2>v7.28.5 (2025-10-23)</h2>
    <h4>:eyeglasses: Spec Compliance</h4>
    <ul>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17446">#17446</a>
    Allow <code>Runtime Errors for Function Call Assignment Targets</code>
    (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-validator-identifier</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17501">#17501</a>
    fix: update identifier to unicode 17 (<a
    href="https://github.com/fisker"><code>@​fisker</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-plugin-proposal-destructuring-private</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17534">#17534</a>
    Allow mixing private destructuring and rest (<a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17521">#17521</a>
    Improve <code>@babel/parser</code> error typing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17491">#17491</a>
    fix: improve ts-only declaration parsing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-proposal-discard-binding</code>,
    <code>babel-plugin-transform-destructuring</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17519">#17519</a>
    fix: <code>rest</code> correctly returns plain array (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-create-class-features-plugin</code>,
    <code>babel-helper-member-expression-to-functions</code>,
    <code>babel-plugin-transform-block-scoping</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-traverse</code>, <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17503">#17503</a> Fix
    <code>JSXIdentifier</code> handling in
    <code>isReferencedIdentifier</code> (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-traverse</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17504">#17504</a>
    fix: ensure scope.push register in anonymous fn (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    <li><code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17494">#17494</a>
    Type checking babel-types scripts (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17"><code>d7f4008</code></a>
    v7.28.6</li>
    <li><a
    href="https://github.com/babel/babel/commit/99dcba5e71de3bd81ce14077cfa5b6df58e9b177"><code>99dcba5</code></a>
    chore: enable some ts-eslint rules (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-do-expressions/issues/17592">#17592</a>)</li>
    <li>See full diff in <a
    href="https://github.com/babel/babel/commits/v7.28.6/packages/babel-plugin-proposal-do-expressions">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by [GitHub Actions](<a
    href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
    Actions), a new releaser for
    <code>@​babel/plugin-proposal-do-expressions</code> since your current
    version.</p>
    </details>
    <br />
    
    Updates `@babel/plugin-proposal-pipeline-operator` from 7.27.1 to 7.28.6
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/releases"><code>@​babel/plugin-proposal-pipeline-operator</code>'s
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.28.6 (2026-01-12)</h2>
    <p>Thanks <a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a> and <a
    href="https://github.com/kolvian"><code>@​kolvian</code></a> for your
    first PRs!</p>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-cli</code>, <code>babel-code-frame</code>,
    <code>babel-core</code>,
    <code>babel-helper-check-duplicate-nodes</code>,
    <code>babel-helper-fixtures</code>,
    <code>babel-helper-plugin-utils</code>, <code>babel-node</code>,
    <code>babel-plugin-transform-flow-comments</code>,
    <code>babel-plugin-transform-modules-commonjs</code>,
    <code>babel-plugin-transform-property-mutators</code>,
    <code>babel-preset-env</code>, <code>babel-traverse</code>,
    <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17589">#17589</a>
    Improve Unicode handling in code-frame tokenizer (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-regenerator</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17556">#17556</a>
    fix: <code>transform-regenerator</code> correctly handles scope (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17538">#17538</a>
    fix: Keep jsx comments (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:nail_care: Polish</h4>
    <ul>
    <li><code>babel-core</code>, <code>babel-standalone</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17606">#17606</a>
    Polish(standalone): improve message on invalid preset/plugin (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    
    <li><code>babel-plugin-bugfix-v8-static-class-fields-redefine-readonly</code>,
    <code>babel-plugin-proposal-decorators</code>,
    <code>babel-plugin-proposal-import-attributes-to-assertions</code>,
    <code>babel-plugin-proposal-import-wasm-source</code>,
    <code>babel-plugin-syntax-async-do-expressions</code>,
    <code>babel-plugin-syntax-decorators</code>,
    <code>babel-plugin-syntax-destructuring-private</code>,
    <code>babel-plugin-syntax-do-expressions</code>,
    <code>babel-plugin-syntax-explicit-resource-management</code>,
    <code>babel-plugin-syntax-export-default-from</code>,
    <code>babel-plugin-syntax-flow</code>,
    <code>babel-plugin-syntax-function-bind</code>,
    <code>babel-plugin-syntax-function-sent</code>,
    <code>babel-plugin-syntax-import-assertions</code>,
    <code>babel-plugin-syntax-import-attributes</code>,
    <code>babel-plugin-syntax-import-defer</code>,
    <code>babel-plugin-syntax-import-source</code>,
    <code>babel-plugin-syntax-jsx</code>,
    <code>babel-plugin-syntax-module-blocks</code>,
    <code>babel-plugin-syntax-optional-chaining-assign</code>,
    <code>babel-plugin-syntax-partial-application</code>,
    <code>babel-plugin-syntax-pipeline-operator</code>,
    <code>babel-plugin-syntax-throw-expressions</code>,
    <code>babel-plugin-syntax-typescript</code>,
    <code>babel-plugin-transform-async-generator-functions</code>,
    <code>babel-plugin-transform-async-to-generator</code>,
    <code>babel-plugin-transform-class-properties</code>,
    <code>babel-plugin-transform-class-static-block</code>,
    <code>babel-plugin-transform-dotall-regex</code>,
    <code>babel-plugin-transform-duplicate-named-capturing-groups-regex</code>,
    <code>babel-plugin-transform-explicit-resource-management</code>,
    <code>babel-plugin-transform-exponentiation-operator</code>,
    <code>babel-plugin-transform-json-strings</code>,
    <code>babel-plugin-transform-logical-assignment-operators</code>,
    <code>babel-plugin-transform-nullish-coalescing-operator</code>,
    <code>babel-plugin-transform-numeric-separator</code>,
    <code>babel-plugin-transform-object-rest-spread</code>,
    <code>babel-plugin-transform-optional-catch-binding</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-plugin-transform-private-methods</code>,
    <code>babel-plugin-transform-private-property-in-object</code>,
    <code>babel-plugin-transform-regexp-modifiers</code>,
    <code>babel-plugin-transform-unicode-property-regex</code>,
    <code>babel-plugin-transform-unicode-sets-regex</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17580">#17580</a>
    Allow Babel 8 in compatible Babel 7 plugins (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:running_woman: Performance</h4>
    <ul>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17555">#17555</a>
    perf: Use lighter traversal for jsx <code>__source,__self</code> (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>Committers: 7</h4>
    <ul>
    <li>Babel Bot (<a
    href="https://github.com/babel-bot"><code>@​babel-bot</code></a>)</li>
    <li>Eliot Pontarelli (<a
    href="https://github.com/kolvian"><code>@​kolvian</code></a>)</li>
    <li>Huáng Jùnliàng (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li>Kadhirash Sivakumar (<a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a>)</li>
    <li>Nicolò Ribaudo (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    <li><a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a></li>
    <li>coderaiser (<a
    href="https://github.com/coderaiser"><code>@​coderaiser</code></a>)</li>
    </ul>
    <h2>v7.28.5 (2025-10-23)</h2>
    <p>Thank you <a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>, <a
    href="https://github.com/Olexandr88"><code>@​Olexandr88</code></a>, and
    <a href="https://github.com/youthfulhps"><code>@​youthfulhps</code></a>
    for your first PRs!</p>
    <h4>:eyeglasses: Spec Compliance</h4>
    <ul>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17446">#17446</a>
    Allow <code>Runtime Errors for Function Call Assignment Targets</code>
    (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-validator-identifier</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17501">#17501</a>
    fix: update identifier to unicode 17 (<a
    href="https://github.com/fisker"><code>@​fisker</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-plugin-proposal-destructuring-private</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17534">#17534</a>
    Allow mixing private destructuring and rest (<a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17521">#17521</a>
    Improve <code>@babel/parser</code> error typing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17491">#17491</a>
    fix: improve ts-only declaration parsing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-proposal-discard-binding</code>,
    <code>babel-plugin-transform-destructuring</code></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>@​babel/plugin-proposal-pipeline-operator</code>'s
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <blockquote>
    <p><strong>Tags:</strong></p>
    <ul>
    <li>:boom: [Breaking Change]</li>
    <li>:eyeglasses: [Spec Compliance]</li>
    <li>:rocket: [New Feature]</li>
    <li>:bug: [Bug Fix]</li>
    <li>:memo: [Documentation]</li>
    <li>:house: [Internal]</li>
    <li>:nail_care: [Polish]</li>
    </ul>
    </blockquote>
    <p><em>Note: Gaps between patch versions are faulty, broken or test
    releases.</em></p>
    <p>This file contains the changelog starting from v7.15.0.</p>
    <ul>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7.0.0-v7.14.9.md">CHANGELOG
    - v7.0.0 to v7.14.9</a> for v7.0.0 to v7.14.9 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v7-prereleases.md">CHANGELOG
    - v7 prereleases</a> for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v4.md">CHANGELOG
    - v4</a>, <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v5.md">CHANGELOG
    - v5</a>, and <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-v6.md">CHANGELOG
    - v6</a> for v4.x-v6.x changes.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/.github/CHANGELOG-6to5.md">CHANGELOG
    - 6to5</a> for the pre-4.0.0 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel/blob/main/packages/babel-parser/CHANGELOG.md">Babylon's
    CHANGELOG</a> for the Babylon pre-7.0.0-beta.29 version changelog.</li>
    <li>See <a
    href="https://github.com/babel/babel-eslint/releases"><code>babel-eslint</code>'s
    releases</a> for the changelog before <code>@babel/eslint-parser</code>
    7.8.0.</li>
    <li>See <a
    href="https://github.com/babel/eslint-plugin-babel/releases"><code>eslint-plugin-babel</code>'s
    releases</a> for the changelog before <code>@babel/eslint-plugin</code>
    7.8.0.</li>
    </ul>
    <!-- raw HTML omitted -->
    <!-- raw HTML omitted -->
    <h2>v7.28.5 (2025-10-23)</h2>
    <h4>:eyeglasses: Spec Compliance</h4>
    <ul>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17446">#17446</a>
    Allow <code>Runtime Errors for Function Call Assignment Targets</code>
    (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-validator-identifier</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17501">#17501</a>
    fix: update identifier to unicode 17 (<a
    href="https://github.com/fisker"><code>@​fisker</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-plugin-proposal-destructuring-private</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17534">#17534</a>
    Allow mixing private destructuring and rest (<a
    href="https://github.com/CO0Ki3"><code>@​CO0Ki3</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-parser</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17521">#17521</a>
    Improve <code>@babel/parser</code> error typing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17491">#17491</a>
    fix: improve ts-only declaration parsing (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-proposal-discard-binding</code>,
    <code>babel-plugin-transform-destructuring</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17519">#17519</a>
    fix: <code>rest</code> correctly returns plain array (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-helper-create-class-features-plugin</code>,
    <code>babel-helper-member-expression-to-functions</code>,
    <code>babel-plugin-transform-block-scoping</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-traverse</code>, <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17503">#17503</a> Fix
    <code>JSXIdentifier</code> handling in
    <code>isReferencedIdentifier</code> (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-traverse</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17504">#17504</a>
    fix: ensure scope.push register in anonymous fn (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    <li><code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17494">#17494</a>
    Type checking babel-types scripts (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/babel/babel/commit/d7f400889567ae18ef9ac41b024b5120f6060e17"><code>d7f4008</code></a>
    v7.28.6</li>
    <li><a
    href="https://github.com/babel/babel/commit/dfce3d60dd43f5190fc105e6dc857fafdcb6c801"><code>dfce3d6</code></a>
    Fully remove Records and Tuples support (<a
    href="https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-proposal-pipeline-operator/issues/17528">#17528</a>)</li>
    <li>See full diff in <a
    href="https://github.com/babel/babel/commits/v7.28.6/packages/babel-plugin-proposal-pipeline-operator">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by [GitHub Actions](<a
    href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
    Actions), a new releaser for
    <code>@​babel/plugin-proposal-pipeline-operator</code> since your
    current version.</p>
    </details>
    <br />
    
    Updates `@babel/preset-env` from 7.28.5 to 7.28.6
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/babel/babel/releases"><code>@​babel/preset-env</code>'s
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.28.6 (2026-01-12)</h2>
    <p>Thanks <a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a> and <a
    href="https://github.com/kolvian"><code>@​kolvian</code></a> for your
    first PRs!</p>
    <h4>:bug: Bug Fix</h4>
    <ul>
    <li><code>babel-cli</code>, <code>babel-code-frame</code>,
    <code>babel-core</code>,
    <code>babel-helper-check-duplicate-nodes</code>,
    <code>babel-helper-fixtures</code>,
    <code>babel-helper-plugin-utils</code>, <code>babel-node</code>,
    <code>babel-plugin-transform-flow-comments</code>,
    <code>babel-plugin-transform-modules-commonjs</code>,
    <code>babel-plugin-transform-property-mutators</code>,
    <code>babel-preset-env</code>, <code>babel-traverse</code>,
    <code>babel-types</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17589">#17589</a>
    Improve Unicode handling in code-frame tokenizer (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-regenerator</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17556">#17556</a>
    fix: <code>transform-regenerator</code> correctly handles scope (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17538">#17538</a>
    fix: Keep jsx comments (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:nail_care: Polish</h4>
    <ul>
    <li><code>babel-core</code>, <code>babel-standalone</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17606">#17606</a>
    Polish(standalone): improve message on invalid preset/plugin (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:house: Internal</h4>
    <ul>
    
    <li><code>babel-plugin-bugfix-v8-static-class-fields-redefine-readonly</code>,
    <code>babel-plugin-proposal-decorators</code>,
    <code>babel-plugin-proposal-import-attributes-to-assertions</code>,
    <code>babel-plugin-proposal-import-wasm-source</code>,
    <code>babel-plugin-syntax-async-do-expressions</code>,
    <code>babel-plugin-syntax-decorators</code>,
    <code>babel-plugin-syntax-destructuring-private</code>,
    <code>babel-plugin-syntax-do-expressions</code>,
    <code>babel-plugin-syntax-explicit-resource-management</code>,
    <code>babel-plugin-syntax-export-default-from</code>,
    <code>babel-plugin-syntax-flow</code>,
    <code>babel-plugin-syntax-function-bind</code>,
    <code>babel-plugin-syntax-function-sent</code>,
    <code>babel-plugin-syntax-import-assertions</code>,
    <code>babel-plugin-syntax-import-attributes</code>,
    <code>babel-plugin-syntax-import-defer</code>,
    <code>babel-plugin-syntax-import-source</code>,
    <code>babel-plugin-syntax-jsx</code>,
    <code>babel-plugin-syntax-module-blocks</code>,
    <code>babel-plugin-syntax-optional-chaining-assign</code>,
    <code>babel-plugin-syntax-partial-application</code>,
    <code>babel-plugin-syntax-pipeline-operator</code>,
    <code>babel-plugin-syntax-throw-expressions</code>,
    <code>babel-plugin-syntax-typescript</code>,
    <code>babel-plugin-transform-async-generator-functions</code>,
    <code>babel-plugin-transform-async-to-generator</code>,
    <code>babel-plugin-transform-class-properties</code>,
    <code>babel-plugin-transform-class-static-block</code>,
    <code>babel-plugin-transform-dotall-regex</code>,
    <code>babel-plugin-transform-duplicate-named-capturing-groups-regex</code>,
    <code>babel-plugin-transform-explicit-resource-management</code>,
    <code>babel-plugin-transform-exponentiation-operator</code>,
    <code>babel-plugin-transform-json-strings</code>,
    <code>babel-plugin-transform-logical-assignment-operators</code>,
    <code>babel-plugin-transform-nullish-coalescing-operator</code>,
    <code>babel-plugin-transform-numeric-separator</code>,
    <code>babel-plugin-transform-object-rest-spread</code>,
    <code>babel-plugin-transform-optional-catch-binding</code>,
    <code>babel-plugin-transform-optional-chaining</code>,
    <code>babel-plugin-transform-private-methods</code>,
    <code>babel-plugin-transform-private-property-in-object</code>,
    <code>babel-plugin-transform-regexp-modifiers</code>,
    <code>babel-plugin-transform-unicode-property-regex</code>,
    <code>babel-plugin-transform-unicode-sets-regex</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17580">#17580</a>
    Allow Babel 8 in compatible Babel 7 plugins (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>:running_woman: Performance</h4>
    <ul>
    <li><code>babel-plugin-transform-react-jsx</code>
    <ul>
    <li><a
    href="https://redirect.github.com/babel/babel/pull/17555">#17555</a>
    perf: Use lighter traversal for jsx <code>__source,__self</code> (<a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a>)</li>
    </ul>
    </li>
    </ul>
    <h4>Committers: 7</h4>
    <ul>
    <li>Babel Bot (<a
    href="https://github.com/babel-bot"><code>@​babel-bot</code></a>)</li>
    <li>Eliot Pontarelli (<a
    href="https://github.com/kolvian"><code>@​kolvian</code></a>)</li>
    <li>Huáng Jùnliàng (<a
    href="https://github.com/JLHwung"><code>@​JLHwung</code></a>)</li>
    <li>Kadhirash Sivakumar (<a
    href="https://github.com/kadhirash"><code>@​kadhirash</code></a>)</li>
    <li>Nicolò Ribaudo (<a
    href="https://github.com/nicolo-ribaudo"><code>@​nicolo-ribaudo</code></a>)</li>
    <li><a
    href="https://github.com/liuxingbaoyu"><code>@​liuxingbaoyu</code></a></li>
    <li>coderaiser (<a
    href="https://github.com/coderaiser"><code>@​coderaiser</code></a>)</…
    dependabot[bot] authored Feb 13, 2026
    Configuration menu
    Copy the full SHA
    4589a4e View commit details
    Browse the repository at this point in the history

Commits on Mar 10, 2026

  1. chore(deps): Bump immutable from 3.8.2 to 3.8.3 (#2735)

    Bumps [immutable](https://github.com/immutable-js/immutable-js) from
    3.8.2 to 3.8.3.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/immutable-js/immutable-js/releases">immutable's
    releases</a>.</em></p>
    <blockquote>
    <h2>v3.8.3</h2>
    <p>Fix Improperly Controlled Modification of Object Prototype Attributes
    ('Prototype Pollution') in immutable</p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md">immutable's
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <p>All notable changes to this project will be documented in this
    file.</p>
    <p>The format is based on <a
    href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>,
    and this project adheres to <a
    href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.
    Dates are formatted as YYYY-MM-DD.</p>
    <h2>Unreleased</h2>
    <h2>5.1.5</h2>
    <ul>
    <li>Fix Improperly Controlled Modification of Object Prototype
    Attributes ('Prototype Pollution') in immutable</li>
    </ul>
    <h2>5.1.4</h2>
    <ul>
    <li>Migrate some files to TS by <a
    href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2125">immutable-js/immutable-js#2125</a>
    <ul>
    <li>Iterator.ts</li>
    <li>PairSorting.ts</li>
    <li>toJS.ts</li>
    <li>Math.ts</li>
    <li>Hash.ts</li>
    </ul>
    </li>
    <li>Extract CollectionHelperMethods and convert to TS by <a
    href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2131">immutable-js/immutable-js#2131</a></li>
    <li>Use npm <a href="https://docs.npmjs.com/trusted-publishers">trusted
    publishing only</a> to avoid token stealing.</li>
    </ul>
    <h3>Documentation</h3>
    <ul>
    <li>Fix/a11y issues by <a
    href="https://github.com/lyannel"><code>@​lyannel</code></a> in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2136">immutable-js/immutable-js#2136</a></li>
    <li>Doc add Map.get signature update by <a
    href="https://github.com/borracciaBlu"><code>@​borracciaBlu</code></a>
    in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2138">immutable-js/immutable-js#2138</a></li>
    <li>fix(doc):minor-issues#2132 by <a
    href="https://github.com/JayMeDotDot"><code>@​JayMeDotDot</code></a> in
    <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2133">immutable-js/immutable-js#2133</a></li>
    <li>Fix algolia search by <a
    href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2135">immutable-js/immutable-js#2135</a></li>
    <li>Typo in OrderedMap by <a
    href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2144">immutable-js/immutable-js#2144</a></li>
    </ul>
    <h3>Internal</h3>
    <ul>
    <li>chore: Sort all imports and activate eslint import rule by <a
    href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2119">immutable-js/immutable-js#2119</a></li>
    </ul>
    <h2>5.1.3</h2>
    <h3>TypeScript</h3>
    <ul>
    <li>fix: allow readonly map entry constructor by <a
    href="https://github.com/septs"><code>@​septs</code></a> in <a
    href="https://redirect.github.com/immutable-js/immutable-js/pull/2123">immutable-js/immutable-js#2123</a></li>
    </ul>
    <h3>Documentation</h3>
    <p>There has been a huge amount of changes in the documentation, mainly
    migrate from an autogenerated documentation from .d.ts file, to a proper
    documentation in markdown.
    The playground has been included on nearly all method examples.
    We added a page about browser extensions too: <a
    href="https://immutable-js.com/browser-extension/">https://immutable-js.com/browser-extension/</a></p>
    <h3>Internal</h3>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/immutable-js/immutable-js/commit/c4074256bf48ab372fdad2b3d47db89306a5211e"><code>c407425</code></a>
    bump v3.8.3</li>
    <li><a
    href="https://github.com/immutable-js/immutable-js/commit/c6ff68a47f1120ef5448179035c79fe9f5836f2a"><code>c6ff68a</code></a>
    release script on 3.x branch</li>
    <li><a
    href="https://github.com/immutable-js/immutable-js/commit/a675a6656416a7c73178b77de4eb198d4342dcd9"><code>a675a66</code></a>
    Merge pull request <a
    href="https://redirect.github.com/immutable-js/immutable-js/issues/2179">#2179</a>
    from immutable-js/port-patch-for-cve-2026-29063</li>
    <li><a
    href="https://github.com/immutable-js/immutable-js/commit/6e2cf1cfe6137e72dfa48fc2cfa8f4d399d113f9"><code>6e2cf1c</code></a>
    Port patch for CVE 2026-29063 onto branch 3.x</li>
    <li>See full diff in <a
    href="https://github.com/immutable-js/immutable-js/compare/v3.8.2...v3.8.3">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by [GitHub Actions](<a
    href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
    Actions), a new releaser for immutable since your current version.</p>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=immutable&package-manager=npm_and_yarn&previous-version=3.8.2&new-version=3.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/auth0/lock/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 10, 2026
    Configuration menu
    Copy the full SHA
    da1ca17 View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2026

  1. chore(deps): Bump dompurify from 3.3.1 to 3.3.2 (#2737)

    Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.1 to
    3.3.2.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/cure53/DOMPurify/releases">dompurify's
    releases</a>.</em></p>
    <blockquote>
    <h2>DOMPurify 3.3.2</h2>
    <ul>
    <li>Fixed a possible bypass caused by jsdom's faulty raw-text tag
    parsing, thanks multiple reporters</li>
    <li>Fixed a prototype pollution issue when working with custom elements,
    thanks <a
    href="https://github.com/christos-eth"><code>@​christos-eth</code></a></li>
    <li>Fixed a lenient config parsing in <code>_isValidAttribute</code>,
    thanks <a
    href="https://github.com/christos-eth"><code>@​christos-eth</code></a></li>
    <li>Bumped and removed several dependencies, thanks <a
    href="https://github.com/Rotzbua"><code>@​Rotzbua</code></a></li>
    <li>Fixed the test suite after bumping dependencies, thanks <a
    href="https://github.com/Rotzbua"><code>@​Rotzbua</code></a></li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/cure53/DOMPurify/commit/5e56114cb24079ce52dbc51f76e494b77afa5153"><code>5e56114</code></a>
    Getting 3.x branch ready for 3.3.2 release (<a
    href="https://redirect.github.com/cure53/DOMPurify/issues/1208">#1208</a>)</li>
    <li><a
    href="https://github.com/cure53/DOMPurify/commit/e8c95f4a27aa8b041f92b59ab7685a94f7be6208"><code>e8c95f4</code></a>
    fix: Fixed the broken package-lock.json</li>
    <li><a
    href="https://github.com/cure53/DOMPurify/commit/9636037c145b769dad0b52da8313301cbf867f46"><code>9636037</code></a>
    Update package-lock.json</li>
    <li><a
    href="https://github.com/cure53/DOMPurify/commit/5cad4cecf2e647ac66eed25bc02a2415f00dbc8b"><code>5cad4ce</code></a>
    Getting 3.x branch ready for 3.3.2 releas (<a
    href="https://redirect.github.com/cure53/DOMPurify/issues/1205">#1205</a>)</li>
    <li>See full diff in <a
    href="https://github.com/cure53/DOMPurify/compare/3.3.1...3.3.2">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dompurify&package-manager=npm_and_yarn&previous-version=3.3.1&new-version=3.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/auth0/lock/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 11, 2026
    Configuration menu
    Copy the full SHA
    53c85de View commit details
    Browse the repository at this point in the history

Commits on Mar 17, 2026

  1. Fix: TypeError in matchConnection for enterprise connections with no …

    …domains (#2736)
    
    ### Changes
    
    Added `List()` as a default fallback to `x.get('domains')`
    
      `return x.get('domains', List()).contains(target);`
    
    This returns an empty Immutable List when `domains` is absent, making
    `.contains()` return `false` safely instead of throwing.
    
    ### References
    
    Closes #2733 
    
    ### Testing
    
    Manually ran a unit test (`matchConnection.test.js`) against the fix to
    verify the exact regression scenario:
    - Mocked `core/index.connections` to return a samlp enterprise
    connection with no domains field - replicating what the tenant API
    returns when no domains are configured on the connection
    - Called matchConnection with a valid email and asserted it does not
    throw
    
    We wrote a test to reproduce the issue. Without the fix applied, the
    test throws _TypeError: Cannot read properties of undefined (reading
    ‘contains’)_. With the fix, it passes cleanly.
    
    ### Checklist
    
    * [x] I have read the [Auth0 general contribution
    guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md)
    * [x] I have read the [Auth0 Code of
    Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md)
    * [x] All code quality tools/guidelines have been run/followed
    * [x] All relevant assets have been compiled
    ankita10119 authored Mar 17, 2026
    Configuration menu
    Copy the full SHA
    a78660f View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2026

  1. Fix: TypeError when CordovaAuth0Plugin is not a constructor (auth0-js…

    … 9.30.1+) (#2742)
    
    ### Changes
    
    #### Problem
    Users installing `auth0-lock` get the following error on Lock
    initialization, preventing the widget from rendering entirely:
    
    _**Uncaught TypeError: CordovaAuth0Plugin is not a constructor at
    Auth0APIClient (p2_api.js)**_
    
    This affects any fresh install of` auth0-lock` since `auth0-js ^9.29.0`
    resolves to `9.30.1+` on npm.
    
     #### Root Cause
    
    `auth0-js 9.30.0` introduced a Rollup build tooling change (**via
    #1563**) that changed how `cordova-auth0-plugin.min.js` bundles its
    exports. As a result, when webpack's ESM interop resolves the module,
    the default export is an empty object {} instead of the constructor
    function - breaking new `CordovaAuth0Plugin()` in `p2_api.js`
    
    
    | auth0-js version | cordova-auth0-plugin.min.js export |
    |--------|--------|
    | <= 9.29.0 | function (valid constructor) ✅ |
    | >= 9.30.1  | {} (empty object) ❌  | 
    
      #### Fix
    
    Guard the instantiation with a typeof check - if `CordovaAuth0Plugin` is
    not a valid constructor, fall back to an empty plugins array:
    
      // Before
      `plugins: opts.plugins || [new CordovaAuth0Plugin()],`
    
      // After
    `plugins: opts.plugins || (typeof CordovaAuth0Plugin === 'function' ?
    [new CordovaAuth0Plugin()] : []),`
    
    This is safe because plugins is optional in **auth0-js's** WebAuth - the
    Cordova plugin only applies in Cordova environments. Web-based auth
    flows are unaffected.
    
     
    ### References
    
    **SDK-8308**
    
    ### Testing
    
    - Reproduced the error by installing `auth0-lock@14.2.4` with
    `auth0-js@9.31.0` in a React app, Lock failed to initialize with the
    TypeError
    - Applied the fix via local build, Lock initializes correctly, widget
    renders, login flow works end to end
    - Confirmed `auth0-js <= 9.29.0` (where the plugin exports a function)
    continues to work correctly since `typeof function === 'function'` is
    true
    
    * [ ] This change adds unit test coverage
    * [ ] This change adds integration test coverage
    * [ ] This change has been tested on the latest version of the
    platform/language
    
    ### Checklist
    
    * [ ] I have read the [Auth0 general contribution
    guidelines](https://github.com/auth0/open-source-template/blob/master/GENERAL-CONTRIBUTING.md)
    * [ ] I have read the [Auth0 Code of
    Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md)
    * [ ] All code quality tools/guidelines have been run/followed
    * [ ] All relevant assets have been compiled
    ankita10119 authored Mar 18, 2026
    Configuration menu
    Copy the full SHA
    bfa031b View commit details
    Browse the repository at this point in the history

Commits on Mar 19, 2026

  1. Release v14.2.5 (#2745)

    **Fixed**
    - Fix: TypeError when CordovaAuth0Plugin is not a constructor (auth0-js
    9.30.1+) [\#2742](#2742)
    ([ankita10119](https://github.com/ankita10119))
    - Fix: TypeError in matchConnection for enterprise connections with no
    domains [\#2736](#2736)
    ([ankita10119](https://github.com/ankita10119))
    ankita10119 authored Mar 19, 2026
    Configuration menu
    Copy the full SHA
    53dff56 View commit details
    Browse the repository at this point in the history
Loading