fix(deps): update all dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@babel/core (source)	7.25.2 → 7.25.9					dependencies	patch
@babel/preset-env (source)	7.25.3 → 7.25.9					dependencies	patch
@types/express (source)	4.17.21 → 4.17.25					devDependencies	patch
@types/express-serve-static-core (source)	4.19.6 → 4.19.8					devDependencies	patch
@types/lodash (source)	4.17.9 → 4.17.24					devDependencies	patch
@types/node (source)	24.10.1 → 24.10.15					devDependencies	patch
@types/node (source)	20.14.14 → 20.14.15					devDependencies	patch
@types/react (source)	16.14.62 → 16.14.69					devDependencies	patch
@types/unzipper (source)	0.10.10 → 0.10.11					devDependencies	patch
actions/checkout	v6.0.0 → v6.0.2					action	patch
actions/upload-artifact	v7.0.0 → v7.0.1					action	patch
chokidar	4.0.1 → 4.0.3					dependencies	patch
cors	2.8.5 → 2.8.6					dependencies	patch
ignore	7.0.0 → 7.0.5					dependencies	patch
material-icons (source)	1.13.12 → 1.13.14					devDependencies	patch
rollup (source)	4.59.0 → 4.59.1					dependencies	patch
rxjs (source)	7.8.1 → 7.8.2					dependencies	patch
tar	7.5.11 → 7.5.13					dependencies	patch
typescript (source)	5.6.2 → 5.6.3					devDependencies	patch

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

babel/babel (@​babel/core)

v7.25.9

Compare Source

🐛 Bug Fix

• babel-parser, babel-template, babel-types
  • #​16905 fix: Keep type annotations in syntacticPlaceholders mode (@​liuxingbaoyu)
• babel-helper-compilation-targets, babel-preset-env
  • #​16907 fix: support BROWSERSLIST{,_CONFIG} env (@​JLHwung)
• Other
  • #​16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@​victorenator)

🏠 Internal

• babel-helper-transform-fixture-test-runner
  • #​16914 remove test options flaky (@​JLHwung)

🏃‍♀️ Performance

• babel-parser, babel-types
  • #​16918 perf: Make VISITOR_KEYS etc. faster to access (@​liuxingbaoyu)

v7.25.8

Compare Source

🐛 Bug Fix

• babel-core
  • #​16888 Restore public API of resolvePlugin/resolvePreset (@​nicolo-ribaudo)

🏠 Internal

• babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env
  • #​16824 Inline one-line syntax plugins (@​nicolo-ribaudo)

v7.25.7

Compare Source

🐛 Bug Fix

• babel-helper-validator-identifier
  • #​16825 fix: update identifier to unicode 16 (@​JLHwung)
• babel-traverse
  • #​16814 fix: issue with node path keys updated on unrelated paths (@​DylanPiercey)
• babel-plugin-transform-classes
  • #​16797 Use an inclusion rather than exclusion list for super() check (@​nicolo-ribaudo)
• babel-generator
  • #​16788 Fix printing of TS infer in compact mode (@​nicolo-ribaudo)
  • #​16785 Print TS type annotations for destructuring in assignment pattern (@​nicolo-ribaudo)
  • #​16778 Respect [no LineTerminator here] after nodes (@​nicolo-ribaudo)

💅 Polish

• babel-types
  • #​16852 Add deprecated JSDOC for fields (@​liuxingbaoyu)

🏠 Internal

• babel-core
  • #​16820 Allow sync loading of ESM when --experimental-require-module (@​nicolo-ribaudo)
• babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • #​16858 Add browserslist config to external dependency (@​JLHwung)
• babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • #​16809 Archive syntax-import-reflection and syntax-decimal (@​nicolo-ribaudo)
• babel-generator
  • #​16779 Simplify logic for [no LineTerminator here] before nodes (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-typescript
  • #​16875 perf: Avoid extra cloning of namespaces (@​liuxingbaoyu)
• babel-types
  • #​16842 perf: Improve @​babel/types builders (@​liuxingbaoyu)
  • #​16828 Only access BABEL_TYPES_8_BREAKING at startup (@​nicolo-ribaudo)

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

• Update the readme with direct upload details by @​danwkennedy in #​795
• Readme: bump all the example versions to v7 by @​danwkennedy in #​796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in #​797

Full Changelog: actions/upload-artifact@v7...v7.0.1

paulmillr/chokidar (chokidar)

v4.0.3

Compare Source

What's Changed

• Fix typescript type of emitted args by @​43081j in #​1397

Full Changelog: paulmillr/chokidar@4.0.2...4.0.3

v4.0.2

Compare Source

What's Changed

• Fix test "should detect safe-edit" on FreeBSD by @​tagattie in #​1375
• Remove references to .map files by @​bluwy in #​1383
• feat: strongly type event emitter methods by @​43081j in #​1381

New Contributors

• @​bxt made their first contribution in #​1365
• @​tagattie made their first contribution in #​1375
• @​bluwy made their first contribution in #​1383

Full Changelog: paulmillr/chokidar@4.0.1...4.0.2

expressjs/cors (cors)

v2.8.6

Compare Source

==================

• Improve documentation (API, context, examples...)
• Remove additional markdown files from tarball

kaelzhang/node-ignore (ignore)

v7.0.5

Compare Source

v7.0.4

Compare Source

• PATCH Allows files named .{3,}, such as ... for Linux / macOS (#​68)

ig.ignores('...')
ig.ignores('....')
// It will throw a RangeError in versions prior to 7.0.4, but it is ok if >= 7.0.4

An upgrade is recommended for all dependents

v7.0.3

Compare Source

v7.0.2

Compare Source

v7.0.1

Compare Source

marella/material-icons (material-icons)

v1.13.14

Compare Source

v1.13.13

Compare Source

rollup/rollup (rollup)

v4.59.1

Compare Source

2026-03-21

Bug Fixes

• Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#​6306)

Pull Requests

• #​6281: fix(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6282: chore(deps): update github artifact actions (major) (@​renovate[bot], @​lukastaegert)
• #​6283: chore(deps): update dependency nyc to v18 (@​renovate[bot], @​lukastaegert)
• #​6284: fix(deps): update swc monorepo (major) (@​renovate[bot])
• #​6285: chore(deps): lock file maintenance (@​renovate[bot])
• #​6290: chore(deps): update minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6291: chore(deps): update dependency @​shikijs/vitepress-twoslash to v4 (@​renovate[bot])
• #​6292: chore(deps): lock file maintenance (@​renovate[bot])
• #​6297: chore(deps): update minor/patch updates (@​renovate[bot])
• #​6298: chore(deps): lock file maintenance (@​renovate[bot])
• #​6299: chore(deps): lock file maintenance (@​renovate[bot])
• #​6300: docs: update packagephobia link (@​bluwy)
• #​6301: chore(deps): update dependency lint-staged to ^16.3.3 (@​renovate[bot])
• #​6306: fix: fix chunk assignment for deoptimized module with dynamic import (@​JoaoBrlt, @​lukastaegert)
• #​6307: chore(deps): update minor/patch updates (@​renovate[bot])
• #​6308: chore(deps): update dependency lru-cache to v11 (@​renovate[bot])
• #​6309: chore(deps): update dependency vite to v8 (@​renovate[bot])
• #​6310: chore(deps): lock file maintenance (@​renovate[bot])
• #​6311: chore(deps): lock file maintenance (@​renovate[bot])
• #​6312: chore(deps): lock file maintenance (@​renovate[bot])

reactivex/rxjs (rxjs)

v7.8.2

Compare Source

isaacs/node-tar (tar)

v7.5.13

Compare Source

v7.5.12

Compare Source

microsoft/TypeScript (typescript)

v5.6.3: TypeScript 5.6.3

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.6.0 (Beta).
• fixed issues query for Typescript 5.6.1 (RC).
• fixed issues query for Typescript 5.6.2 (Stable).
• fixed issues query for Typescript 5.6.3 (Stable).

Downloads are available on:

• npm
• NuGet package

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.