Skip to content

chore(deps): bump the all-dependencies group with 7 updates - #31

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-9c526b03e0
Oct 17, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-9c526b03e0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 7 updates:

Package From To
zod 4.6.5 4.6.7
@babel/core 8.0.6 8.0.7
@babel/eslint-parser 8.0.6 8.0.7
@babel/preset-typescript 8.0.1 8.0.7
@types/node 26.6.4 26.6.5
@vitest/coverage-v8 5.0.3 5.0.4
vitest 5.0.3 5.0.4

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

  • b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

  • 0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini
  • 9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales
  • 34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note
  • 74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)
  • b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors
  • 8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze
  • bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles
  • c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)
  • a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)
  • a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)
  • 529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6
  • 9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why
Commits
  • b500a2e 4.6.7
  • 9c21983 ci: stage at verbose so a failed OIDC token exchange says why
  • 529f78d 4.6.6
  • a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
  • a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
  • c42596b release: hold the run on the release-approval environment until the staged ve...
  • bacad51 docs: square the Code for Japan logo to match the other bronze tiles
  • 8fb2faf docs: crop the Code for Japan logo and list it first in bronze
  • b2ef983 docs: add Code for Japan to bronze sponsors
  • 74304ce release: stage npm versions instead of publishing them (#6622)
  • Additional commits viewable in compare view

Updates @babel/core from 8.0.6 to 8.0.7

Release notes

Sourced from @​babel/core's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

Changelog

Sourced from @​babel/core's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
Commits

Updates @babel/eslint-parser from 8.0.6 to 8.0.7

Release notes

Sourced from @​babel/eslint-parser's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

Changelog

Sourced from @​babel/eslint-parser's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
Commits

Updates @babel/preset-typescript from 8.0.1 to 8.0.7

Release notes

Sourced from @​babel/preset-typescript's releases.

v8.0.7 (2026-10-07)

Thanks @​brunoborta, @​CINC0S, @​hoobnn, and @​jpradelle for your first PRs!

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

Committers: 11

v8.0.6 (2026-09-18)

Thanks @​robhogan for your first PR!

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @​babel/preset-typescript's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

  • babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • babel-plugin-transform-for-of
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • babel-parser
    • #18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
  • babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • babel-plugin-transform-block-scoping
  • babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
    • #18265 Return false for #x in on static private fields before initialization (@​hoobnn)
  • babel-traverse
    • #18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
    • #18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
  • Other
  • babel-core

🏠 Internal

  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

v8.0.6 (2026-09-18)

👓 Spec Compliance

  • babel-helper-validator-identifier, babel-parser

🐛 Bug Fix

  • babel-parser
  • babel-helper-string-parser, babel-parser

🏠 Internal

  • babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types
  • babel-parser
  • babel-core
  • babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

... (truncated)

Commits

Updates @types/node from 26.6.4 to 26.6.5

Commits

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.4

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates vitest from 5.0.3 to 5.0.4

Release notes

Sourced from vitest's releases.

v5.0.4

   🚀 Features

   🐞 Bug Fixes

Bumps the all-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.6` | `8.0.7` |
| [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `8.0.6` | `8.0.7` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `8.0.1` | `8.0.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.4` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.4` |


Updates `zod` from 4.6.5 to 4.6.7
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.5...v4.6.7)

Updates `@babel/core` from 8.0.6 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-core)

Updates `@babel/eslint-parser` from 8.0.6 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/eslint/babel-eslint-parser)

Updates `@babel/preset-typescript` from 8.0.1 to 8.0.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-preset-typescript)

Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8)

Updates `vitest` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@babel/core"
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@babel/eslint-parser"
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@babel/preset-typescript"
  dependency-version: 8.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: vitest
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026
@github-actions
github-actions Bot merged commit d9c14bd into main Oct 17, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/all-dependencies-9c526b03e0 branch October 17, 2026 01:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants