Update packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@babel/cli (source)	7.24.8 -> 7.26.4					devDependencies	minor
@babel/core (source)	7.25.2 -> 7.26.0					devDependencies	minor
@babel/eslint-parser (source)	7.25.1 -> 7.26.5					devDependencies	minor
@babel/node (source)	7.25.0 -> 7.26.0					devDependencies	minor
@babel/plugin-transform-modules-commonjs (source)	7.24.8 -> 7.26.3					devDependencies	minor
@babel/plugin-transform-runtime (source)	7.24.7 -> 7.25.9					devDependencies	minor
@babel/preset-env (source)	7.25.3 -> 7.26.0					devDependencies	minor
@babel/runtime (source)	7.25.0 -> 7.26.0					devDependencies	minor
@rollup/plugin-node-resolve (source)	15.2.3 -> 15.3.1					devDependencies	minor
babel-loader	9.1.3 -> 9.2.1					devDependencies	minor
cheerio (source)	1.0.0-rc.12 -> 1.0.0					dependencies	patch
codemirror	5.65.17 -> 5.65.18					devDependencies	patch
cookie	0.6.0 -> 0.7.2					dependencies	minor
cookie-parser	1.4.6 -> 1.4.7					dependencies	patch
crypto-browserify	3.12.0 -> 3.12.1					dependencies	patch
eslint (source)	8.57.0 -> 8.57.1					devDependencies	patch
express (source)	4.19.2 -> 4.21.2					dependencies	minor
golang	1.22 -> 1.23					final	minor
google-spreadsheet (source)	4.1.2 -> 4.1.4					dependencies	patch
highlight.js (source)	11.10.0 -> 11.11.1					devDependencies	minor
html-webpack-plugin	5.6.0 -> 5.6.3					devDependencies	patch
ioredis	5.4.1 -> 5.4.2					dependencies	patch
jasmine (source)	5.2.0 -> 5.5.0					devDependencies	minor
jest-puppeteer (source)	10.0.1 -> 10.1.4					devDependencies	minor
mini-css-extract-plugin	2.9.0 -> 2.9.2					devDependencies	patch
netlify-cli	17.33.5 -> 17.38.1					devDependencies	minor
npm-run-all2	6.2.2 -> 6.2.6					devDependencies	patch
postcss (source)	8.4.40 -> 8.5.1					dependencies	minor
prettier (source)	3.3.3 -> 3.4.2					devDependencies	minor
randomstring	1.3.0 -> 1.3.1					dependencies	patch
sass	1.77.8 -> 1.83.4					devDependencies	minor
svg-spritemap-webpack-plugin	4.5.1 -> 4.7.0					devDependencies	minor
webpack	5.93.0 -> 5.97.1					devDependencies	minor
webpack-dev-server	5.0.4 -> 5.2.0					devDependencies	minor

---

Release Notes

babel/babel (@​babel/cli)

v7.26.4

Compare Source

↩️ Revert

• babel-traverse
  • #​17005 Revert "perf: Improve scope information collection performance" (@​JLHwung)

v7.25.9

Compare Source

🐛 Bug Fix

• babel-parser, babel-template, babel-types
  • #​16905 fix: Keep type annotations in syntacticPlaceholders mode (@​liuxingbaoyu)
• babel-helper-compilation-targets, babel-preset-env
  • #​16907 fix: support BROWSERSLIST{,_CONFIG} env (@​JLHwung)
• Other
  • #​16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@​victorenator)

🏠 Internal

• babel-helper-transform-fixture-test-runner
  • #​16914 remove test options flaky (@​JLHwung)

🏃‍♀️ Performance

• babel-parser, babel-types
  • #​16918 perf: Make VISITOR_KEYS etc. faster to access (@​liuxingbaoyu)

v7.25.7

Compare Source

🐛 Bug Fix

• babel-helper-validator-identifier
  • #​16825 fix: update identifier to unicode 16 (@​JLHwung)
• babel-traverse
  • #​16814 fix: issue with node path keys updated on unrelated paths (@​DylanPiercey)
• babel-plugin-transform-classes
  • #​16797 Use an inclusion rather than exclusion list for super() check (@​nicolo-ribaudo)
• babel-generator
  • #​16788 Fix printing of TS infer in compact mode (@​nicolo-ribaudo)
  • #​16785 Print TS type annotations for destructuring in assignment pattern (@​nicolo-ribaudo)
  • #​16778 Respect [no LineTerminator here] after nodes (@​nicolo-ribaudo)

💅 Polish

• babel-types
  • #​16852 Add deprecated JSDOC for fields (@​liuxingbaoyu)

🏠 Internal

• babel-core
  • #​16820 Allow sync loading of ESM when --experimental-require-module (@​nicolo-ribaudo)
• babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • #​16858 Add browserslist config to external dependency (@​JLHwung)
• babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • #​16809 Archive syntax-import-reflection and syntax-decimal (@​nicolo-ribaudo)
• babel-generator
  • #​16779 Simplify logic for [no LineTerminator here] before nodes (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-typescript
  • #​16875 perf: Avoid extra cloning of namespaces (@​liuxingbaoyu)
• babel-types
  • #​16842 perf: Improve @​babel/types builders (@​liuxingbaoyu)
  • #​16828 Only access BABEL_TYPES_8_BREAKING at startup (@​nicolo-ribaudo)

v7.25.6

Compare Source

🐛 Bug Fix

• babel-generator
  • #​16783 Properly print inner comments in TS array types (@​nicolo-ribaudo)
  • #​16775 fix: jsx whitespace is not properly preserved when retainLines (@​liuxingbaoyu)
• babel-traverse
  • #​16727 fix: path.getAssignmentIdentifiers may be undefined (@​liuxingbaoyu)
• babel-parser
  • #​16761 fix: improve static canFollowModifier checks (@​JLHwung)
• babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3
  • #​16769 Only wrap functions in superPropertyGet helper (@​nicolo-ribaudo)

💅 Polish

• babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  • #​16780 Do not enforce printing space between ( and comments (@​nicolo-ribaudo)
• babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes
  • #​16781 Don't throw when enabling both syntax-import-{assertions,attributes} (@​nicolo-ribaudo)
• babel-generator
  • #​16782 TS union/intersection nested in union does not need parens (@​nicolo-ribaudo)

🏠 Internal

• babel-generator
  • #​16777 Remove unused parent params in the generator (@​nicolo-ribaudo)

babel/babel (@​babel/core)

v7.26.0

Compare Source

v7.25.9

Compare Source

🐛 Bug Fix

• babel-parser, babel-template, babel-types
  • #​16905 fix: Keep type annotations in syntacticPlaceholders mode (@​liuxingbaoyu)
• babel-helper-compilation-targets, babel-preset-env
  • #​16907 fix: support BROWSERSLIST{,_CONFIG} env (@​JLHwung)
• Other
  • #​16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@​victorenator)

🏠 Internal

• babel-helper-transform-fixture-test-runner
  • #​16914 remove test options flaky (@​JLHwung)

🏃‍♀️ Performance

• babel-parser, babel-types
  • #​16918 perf: Make VISITOR_KEYS etc. faster to access (@​liuxingbaoyu)

v7.25.8

Compare Source

🐛 Bug Fix

• babel-core
  • #​16888 Restore public API of resolvePlugin/resolvePreset (@​nicolo-ribaudo)

🏠 Internal

• babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env
  • #​16824 Inline one-line syntax plugins (@​nicolo-ribaudo)

v7.25.7

Compare Source

🐛 Bug Fix

• babel-helper-validator-identifier
  • #​16825 fix: update identifier to unicode 16 (@​JLHwung)
• babel-traverse
  • #​16814 fix: issue with node path keys updated on unrelated paths (@​DylanPiercey)
• babel-plugin-transform-classes
  • #​16797 Use an inclusion rather than exclusion list for super() check (@​nicolo-ribaudo)
• babel-generator
  • #​16788 Fix printing of TS infer in compact mode (@​nicolo-ribaudo)
  • #​16785 Print TS type annotations for destructuring in assignment pattern (@​nicolo-ribaudo)
  • #​16778 Respect [no LineTerminator here] after nodes (@​nicolo-ribaudo)

💅 Polish

• babel-types
  • #​16852 Add deprecated JSDOC for fields (@​liuxingbaoyu)

🏠 Internal

• babel-core
  • #​16820 Allow sync loading of ESM when --experimental-require-module (@​nicolo-ribaudo)
• babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • #​16858 Add browserslist config to external dependency (@​JLHwung)
• babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • #​16809 Archive syntax-import-reflection and syntax-decimal (@​nicolo-ribaudo)
• babel-generator
  • #​16779 Simplify logic for [no LineTerminator here] before nodes (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-typescript
  • #​16875 perf: Avoid extra cloning of namespaces (@​liuxingbaoyu)
• babel-types
  • #​16842 perf: Improve @​babel/types builders (@​liuxingbaoyu)
  • #​16828 Only access BABEL_TYPES_8_BREAKING at startup (@​nicolo-ribaudo)

rollup/plugins (@​rollup/plugin-node-resolve)

v15.3.1

2024-12-15

Updates

• refactor: replace test with includes (#​1787)

v15.3.0

2024-09-23

Features

• feat: allow preferBuiltins to be a function (#​1694)

v15.2.4

2024-09-22

Updates

• chore: remove is-builtin-module (#​1735)

babel/babel-loader (babel-loader)

v9.2.1

Compare Source

v9.2.0

Compare Source

cheeriojs/cheerio (cheerio)

v1.0.0

Compare Source

Cheerio 1.0 is here! 🎉

Announcement Blog Post

Breaking Changes

• The minimum NodeJS version is now 18.17 or higher https://github.com/cheeriojs/cheerio/pull/3959

• Import paths were simplified. For example, use cheerio/slim instead of
  cheerio/lib/slim. https://github.com/cheeriojs/cheerio/pull/3970

• The deprecated default Cheerio instance and static methods were removed. https://github.com/cheeriojs/cheerio/pull/3974

  Before, it was possible to write code like this:

  import cheerio, { html } from 'cheerio';
  
  html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS

  Make sure to always load documents first:

  import * as cheerio from 'cheerio';
  
  cheerio.load('<test></test>').html();

• Node types previously re-exported by Cheerio must now be imported directly
  from (domhandler)(https://github.com/fb55/domhandler). https://github.com/cheeriojs/cheerio/pull/3969

• htmlparser2 options now reside exclusively under the xml key (https://github.com/cheeriojs/cheerio/pull/2916):

  const $ = cheerio.load('<html>', {
    xml: {
      withStartIndices: true,
    },
  });

New Features

• Add functions to load buffers, streams & URLs in NodeJS by @​fb55 in https://github.com/cheeriojs/cheerio/pull/2857
• Add extract method by @​fb55 in https://github.com/cheeriojs/cheerio/pull/2750

Fixes

• Allow imports of cheerio/utils by @​blixt in https://github.com/cheeriojs/cheerio/pull/2601
• Allow empty string in data, and simplify by @​fb55 in https://github.com/cheeriojs/cheerio/pull/2818
• Make closest be able to start from text nodes by @​Qualtagh in https://github.com/cheeriojs/cheerio/pull/2811
• Fix potential github action smells by @​ceddy4395 in https://github.com/cheeriojs/cheerio/pull/3826

Other

• Cheerio has a new website, featuring updated API docs and guides! https://github.com/cheeriojs/cheerio/pull/2950

Full Changelog: cheeriojs/cheerio@v1.0.0-rc.12...v1.0.0

codemirror/basic-setup (codemirror)

v5.65.18

Compare Source

jshttp/cookie (cookie)

v0.7.2

Compare Source

Fixed

• Fix object assignment of hasOwnProperty (#​177) bc38ffd

v0.7.1: 0.7.1

Compare Source

Fixed

• Allow leading dot for domain (#​174)
  • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
• Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#​172)

v0.7.0: 0.7.0

Compare Source

• perf: parse cookies ~10% faster (#​144 by @​kurtextrem and #​170)
  • fix: narrow the validation of cookies to match RFC6265 (#​167 by @​bewinsnw)
  • fix: add main to package.json for rspack (#​166 by @​proudparrot2)

expressjs/cookie-parser (cookie-parser)

v1.4.7

Compare Source

==========

• deps: [email protected]
  • Fix object assignment of hasOwnProperty
• deps: [email protected]
  • Allow leading dot for domain
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing
• deps: [email protected]
  • perf: parse cookies ~10% faster
  • fix: narrow the validation of cookies to match RFC6265
  • fix: add main to package.json for rspack
• deps: [email protected]
  • Add partitioned option
• deps: [email protected]
  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
• deps: [email protected]
  • pref: read value only when assigning in parse
  • pref: remove unnecessary regexp in parse

browserify/crypto-browserify (crypto-browserify)

v3.12.1

Compare Source

eslint/eslint (eslint)

v8.57.1

Compare Source

expressjs/express (express)

v4.21.2

Compare Source

v4.21.1

Compare Source

What's Changed

• Backport a fix for CVE-2024-47764 to the 4.x branch by @​joshbuker in https://github.com/expressjs/express/pull/6029
• Release: 4.21.1 by @​UlisesGascon in https://github.com/expressjs/express/pull/6031

Full Changelog: expressjs/express@4.21.0...4.21.1

v4.21.0

Compare Source

What's Changed

• Deprecate "back" magic string in redirects by @​blakeembrey in https://github.com/expressjs/express/pull/5935
• [email protected] by @​wesleytodd in https://github.com/expressjs/express/pull/5954
• fix(deps): [email protected] by @​wesleytodd in https://github.com/expressjs/express/pull/5951
• Upgraded dependency qs to 6.13.0 to match qs in body-parser by @​agadzinski93 in https://github.com/expressjs/express/pull/5946

New Contributors

• @​agadzinski93 made their first contribution in https://github.com/expressjs/express/pull/5946

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

• deps: [email protected]
  • Remove link renderization in html while redirecting
• deps: [email protected]
  • Remove link renderization in html while redirecting
• deps: [email protected]
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
• Remove link renderization in html while using res.redirect
• deps: [email protected]
  • Adds support for named matching groups in the routes using a regex
  • Adds backtracking protection to parameters without regexes defined
• deps: encodeurl@~2.0.0
  • Removes encoding of \, |, and ^ to align better with URL spec
• Deprecate passing options.maxAge and options.expires to res.clearCookie
  • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

theoephraim/node-google-spreadsheet (google-spreadsheet)

v4.1.4

Compare Source

• fix(updateProperties): getFieldMask ignore gridProperties #674
• add dmno and remove/encrypt test-related secrets, swap jest for vitest 927e9e8

v4.1.3

Compare Source

• Read headers in batch on getRows() #693
• Fix type of sheetsById in docs #658
• Update authentication.md #699
• update axios, fix new google-auth-library issue, fixes #​701 #​700 #701
• fix setDataValidation docs 2bca048
• Update FUNDING.yml 5459a87
• use correct type in docs 6d210a2
• allow CI manual reruns e10cbb1

highlightjs/highlight.js (highlight.js)

v11.11.1

Compare Source

• Fixes regression with Rust grammar.

v11.11.0

Compare Source

CAVEATS / POTENTIALLY BREAKING CHANGES

• Nothing yet.

Core Grammars:

• fix(rust) - adds emoji support in single quote strings [joshgoebel][]
• fix(apache) - support line continuation via \ [Josh Goebel][]
• fix(makefile) - allow strings inside $() expressions [aneesh98][]
• enh(arcade) updated to ArcGIS Arcade version 1.29 [Kristian Ekenes][]
• enh(css) add all properties listed on MDN (96 additions including anchor-name, aspect-ratio, backdrop-filter, container, margin-trim, place-content, scroll-timeline, ...) [BaliBalo][]
• enh(excel) add built-in functions for Excel 365 release t

---

Configuration

📅 Schedule: Branch creation - "after 4am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.