chore(deps): bump the minor-versions group across 5 directories with 42 updates

[dependabot]

Bumps the minor-versions group with 23 updates in the / directory:

Package	From	To
@heroicons/react	2.1.1	2.2.0
@mapbox/mapbox-sdk	0.13.7	0.16.2
autoprefixer	10.4.20	10.4.23
axios	1.8.3	1.13.2
dayjs	1.11.8	1.11.19
mapbox-gl	3.16.0	3.17.0
qs	6.11.2	6.14.1
react-google-recaptcha-v3	1.10.1	1.11.0
@babel/core	7.21.4	7.28.6
@babel/preset-env	7.25.7	7.28.6
@csstools/postcss-global-data	3.0.0	3.1.0
@cypress/code-coverage	3.14.4	3.14.7
@testing-library/dom	10.4.0	10.4.1
@testing-library/jest-dom	6.6.3	6.9.1
@testing-library/react	16.2.0	16.3.1
@types/react	19.2.7	19.2.8
postcss	8.5.3	8.5.6
sass	1.93.3	1.97.2
ts-loader	9.5.2	9.5.4
webpack	5.98.0	5.104.1
swr	2.2.5	2.3.8
@types/mapbox__mapbox-sdk	0.13.11	0.16.3
@google-cloud/translate	9.2.0	9.3.0

Bumps the minor-versions group with 24 updates in the /api directory:

Package	From	To
ts-jest	29.1.1	29.4.6
ts-node	10.9.1	10.9.2
typescript	5.1.6	5.9.3
axios	1.8.3	1.13.2
dayjs	1.11.9	1.11.19
qs	6.11.2	6.14.1
ts-loader	9.5.2	9.5.4
webpack	5.98.0	5.104.1
@google-cloud/translate	9.2.0	9.3.0
@aws-sdk/client-s3	3.758.0	3.966.0
@aws-sdk/lib-storage	3.758.0	3.966.0
@aws-sdk/s3-request-presigner	3.750.0	3.966.0
@google-cloud/recaptcha-enterprise	6.3.0	6.3.1
casbin	5.27.1	5.48.0
class-validator	0.14.0	0.14.3
compression	1.7.4	1.8.1
@types/compression	1.7.5	1.8.1
cookie-parser	1.4.6	1.4.7
jsonwebtoken	9.0.2	9.0.3
passport	0.6.0	0.7.0
reflect-metadata	0.1.13	0.2.2
rxjs	7.8.1	7.8.2
swagger-axios-codegen	0.15.12	0.17.4
@types/exceljs	1.3.0	1.3.2

Bumps the minor-versions group with 1 update in the /shared-helpers directory: @testing-library/react.
Bumps the minor-versions group with 2 updates in the /sites/partners directory: @mapbox/mapbox-sdk and @types/mapbox__mapbox-sdk.
Bumps the minor-versions group with 1 update in the /sites/public directory: @mapbox/mapbox-sdk.

Updates @heroicons/react from 2.1.1 to 2.2.0

Release notes

Sourced from @​heroicons/react's releases.

v2.2.0

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

v2.1.5

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

v2.1.4

Fixed

• Improve tree-shakability of React package (#1192)

v2.1.3

• Improve project READMEs (#1152)

v2.1.2

• Include license file with published packages (#1151)

Changelog

Sourced from @​heroicons/react's changelog.

[2.2.0] - 2024-11-18

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

[2.1.5] - 2024-07-10

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

[2.1.4] - 2024-06-17

Fixed

• Improve tree-shakability of React package (#1192)

[2.1.3] - 2024-03-22

• Improve project READMEs (#1152)

[2.1.2] - 2024-03-22

• Include license file with published packages (#1151)

Commits

• 0435d4c 2.2.0
• f327cbe Add React 19 support (#1247)
• 56c073c Update changelog
• 64e2368 Remove clip-path from 20/arrow-left-circle (#1211)
• ad0ad1f 2.1.5
• 58d511e Add new icons (#1204)
• c1b192b 2.1.4
• e2e487f Make sure calls to forwardRef are marked as pure (#1192)
• cafc7d6 use size-* instead of w-* h-* (#1182)
• 9a17872 Update README.md (#1167)
• Additional commits viewable in compare view

Updates @mapbox/mapbox-sdk from 0.13.7 to 0.16.2

Release notes

Sourced from @​mapbox/mapbox-sdk's releases.

v0.16.2

0.16.2

• Addressed security issues CVE-2025-7783 and CVE-2022-25881

v0.16.1

0.16.1

• Add: Add session_token as optional parameter in the geocoding services

v0.15.16

0.15.6

• Add: Add secondary_address to list of accepted types for Geocoding v6

v0.15.4

No release notes provided.

Changelog

Sourced from @​mapbox/mapbox-sdk's changelog.

Changelog

0.16.1

• Add: Add session_token as optional parameter in the geocoding services

0.16.0

• Add: Add depart_at as optional parameter in the isochrone service

0.15.6

• Fix: Add secondary_address to list of accepted types for Geocoding v6

0.15.5

• Fix: Rename directions api annotation option max_speed to maxspeed #480

0.15.4

• Fix: Set body = '' for POST, PUT, PATCH, and DELETE requests that do not have a body #479

0.15.3

• Fix: Maximum Optimization V1 request size limits should not be enforced client-side

0.15.2

• Add: Add depart_at and arrive_by as optional parameters in the directions service

0.15.1

• Add: Add driving-traffic as a profile option in the isochrone service

0.15.0

• Add: Geocoding v6 service

0.14.0

• Add: Config for Tokens#createToken and Tokens#updateToken can now include the allowedApplications property.

Commits

• 8b8dc60 Merge pull request #502 from mapbox/max/CVE-2025-7783
• f897e42 [CVE-2025-7783] Upgrade form-data
• 12f5a42 Merge pull request #493 from mapbox/geocoding-sessionid
• 0e19cc9 docs, bump package version
• ae00cc5 change to token
• 19b012d add sessionId param to geocoding services
• 41c7da5 0.16.0
• d5a34be prepare v0.16.0
• eb8e804 Merge pull request #473 from mapbox/add-depart-at
• 1b5c24b Merge pull request #483 from mapbox/geocoding-v6-secondary-address
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by mbx-npm-07-production, a new releaser for @​mapbox/mapbox-sdk since your current version.

Updates autoprefixer from 10.4.20 to 10.4.23

Release notes

Sourced from autoprefixer's releases.

10.4.23

• Reduced dependencies (by @​hyperz111).

10.4.22

• Fixed stretch prefixes on new Can I Use database.
• Updated fraction.js.

10.4.21

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

Changelog

Sourced from autoprefixer's changelog.

10.4.23

• Reduced dependencies (by @​hyperz111).

10.4.22

• Fixed stretch prefixes on new Can I Use database.
• Updated fraction.js.

10.4.21

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

Commits

• 212ba3c Release 10.4.23 version
• 7f62fb6 Update dependencies
• c455bb1 chore: inline and simplify normalize-range (#1539)
• 73dc62c Release 10.4.22 version
• 9973c59 Lock CI action versions
• 4b4feca Fix Node.js 10 on CI
• 15c21d3 Fix old Node.js CI
• 27523c1 Update fraction.js
• 88a0d3e Update dependencies and fix stretch and update example
• 541295c Release 10.4.21 version
• Additional commits viewable in compare view

Updates axios from 1.8.3 to 1.13.2

Release notes

Sourced from axios's releases.

Release v1.13.2

Release notes:

Bug Fixes

• http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#7206) (8d37233)
• http: use default export for http2 module to support stubs; (#7196) (0588880)

Performance Improvements

• http: fix early loop exit; (#7202) (12c314b)

Contributors to this release

• Dmitriy Mozgovoy
• Kasper Isager Dalsgarð

Release v1.13.1

Release notes:

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

Release v1.13.0

Release notes:

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
• resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

• http: add HTTP2 support; (#7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge
• Anchal Singh
• Rahul Kumar
• Amit Verma

... (truncated)

Changelog

Sourced from axios's changelog.

1.13.2 (2025-11-04)

Bug Fixes

• http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#7206) (8d37233)
• http: use default export for http2 module to support stubs; (#7196) (0588880)

Performance Improvements

• http: fix early loop exit; (#7202) (12c314b)

Contributors to this release

• Dmitriy Mozgovoy
• Kasper Isager Dalsgarð

1.13.1 (2025-10-28)

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

1.13.0 (2025-10-27)

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
• resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

• http: add HTTP2 support; (#7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge

... (truncated)

Commits

• 08b84b5 chore(release): v1.13.2 (#7207)
• 8d37233 fix(http): fix 'socket hang up' bug for keep-alive requests when using timeou...
• 12c314b perf(http): fix early loop exit; (#7202)
• f6d79e7 chore(sponsor): update sponsor block (#7203)
• 0588880 fix(http): use default export for http2 module to support stubs; (#7196)
• 1ef8e72 chore(release): v1.13.1 (#7194)
• bcd5581 fix(http): fixed a regression that caused the data stream to be interrupted f...
• c9b3371 chore: enhance styling and responsiveness in client.html (#7173)
• 9ead04d [Release] v1.13.0 (#7189)
• d000fbf fix(http2): fix possible race condition when handling http2 stream on almost ...
• Additional commits viewable in compare view

Updates dayjs from 1.11.8 to 1.11.19

Release notes

Sourced from dayjs's releases.

v1.11.19

1.11.19 (2025-10-31)

Bug Fixes

• added usage warnings for diff + updated unit tests (#2948) (269a7a9)
• dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
• replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
• Updated Belarusian locale with relative time (#2656) (1d8746c)

v1.11.18

1.11.18 (2025-08-30)

Bug Fixes

• error semantic-release dependency (8cfb313)

v1.11.17

1.11.17 (2025-08-29)

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

v1.11.16

1.11.16 (2025-08-29)

Bug Fixes

• test release workflow (no code changes) (c38c428)

v1.11.15

1.11.15 (2025-08-28)

Bug Fixes

• Fix misspellings in Irish or Irish Gaelic [ga] (#2861) (9c14a42)

v1.11.14

1.11.14 (2025-08-27)

Bug Fixes

• .utcOffset(0, true) result and its clone are different bug (#2505) (fefdcd4)

... (truncated)

Changelog

Sourced from dayjs's changelog.

1.11.19 (2025-10-31)

Bug Fixes

• added usage warnings for diff + updated unit tests (#2948) (269a7a9)
• dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
• replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
• Updated Belarusian locale with relative time (#2656) (1d8746c)

1.11.18 (2025-08-30)

Bug Fixes

• error semantic-release dependency (8cfb313)

1.11.17 (2025-08-29)

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

1.11.16 (2025-08-29)

Bug Fixes

• test release workflow (no code changes) (c38c428)

1.11.15 (2025-08-28)

Bug Fixes

• Fix misspellings in Irish or Irish Gaelic [ga] (#2861) (9c14a42)

1.11.14 (2025-08-27)

Bug Fixes

• .utcOffset(0, true) result and its clone are different bug (#2505) (fefdcd4)

1.11.13 (2024-08-20)

Bug Fixes

... (truncated)

Commits

• 02b7a5c chore(release): 1.11.19 [skip ci]
• 37193be Merge pull request #2950 from iamkun/dev
• 2db920b chore: update doc
• 4f72974 chore: update doc
• 0b36a07 chore: update doc
• 269a7a9 fix: added usage warnings for diff + updated unit tests (#2948)
• 9e3132e chore: update doc
• 84201e6 chore: update doc
• 80401e3 chore: update readme
• 88ad3fd test: Add unit test for Belarusian locale (#2934)
• Additional commits viewable in compare view

Updates mapbox-gl from 3.16.0 to 3.17.0

Release notes

Sourced from mapbox-gl's releases.

v3.17.0

Features and improvements ✨

• Add experimental ESM support.
• Make line-emissive-strength data-driven.
• Remove experimental flag from the extra_bounds property of raster and vector sources.
• Remove experimental flag from model layer.
• Remove experimental flag from building layer.
• Improve vector icons rasterization performance.
• Improve shadow rendering performance.
• Improve building layer performance.
• Improve shader initialization performance.

Bug fixes 🐞

• Fix polygon rendering for dynamic GeoJSON sources.
• Fix raster-array layers not working on iOS < 18.4.
• Fix a performance issue for symbol layers with zero fade duration and static camera.
• Fix occasional WebGL texture warnings when rendering terrain.
• Fix features not being localized in dynamic filters when a worldview is set.
• Fix an issue with clipping models on Standard.
• Fix an issue with models flashing on setData.
• Fix an issue with incorrect scoping of models added during runtime.
• Fix line patterns not elevating properly on HD roads.
• Sanitize attributions in AttributionControl.
• Correctly support filtered features in appearances.
• Fix an issue occuring when expressions are used in appearances.
• Fix appearance optimization that resulted in wrong appearances being rendered.
• Fix appearance icons not changing when feature state changed multiple times.
• Improve TypeScript types.

v3.17.0-beta.2

Features and improvements ✨

• Make line-emissive-strength data-driven.
• Remove experimental flag from the extra_bounds property of raster and vector sources.
• Various performance improvements.

Bug fixes 🐞

• Fix features not being localized in dynamic filters when a worldview is set.
• Correctly support filtered features in appearances.
• Fix an issue occuring when expressions are used in appearances.

v3.17.0-beta.1

Features and improvements ✨

• Experimental ESM support.
• Remove experimental flag from model layer.
• Conflate building parts together as a whole building.

... (truncated)

Changelog

Sourced from mapbox-gl's changelog.

3.17.0

Features and improvements ✨

• Add experimental ESM support.
• Make line-emissive-strength data-driven.
• Remove experimental flag from the extra_bounds property of raster and vector sources.
• Remove experimental flag from model layer.
• Remove experimental flag from building layer.
• Improve vector icons rasterization performance.
• Improve shadow rendering performance.
• Improve building layer performance.
• Improve shader initialization performance.

Bug fixes 🐞

• Fix polygon rendering for dynamic GeoJSON sources.
• Fix raster-array layers not working on iOS < 18.4.
• Fix a performance issue for symbol layers with zero fade duration and static camera.
• Fix occasional WebGL texture warnings when rendering terrain.
• Fix features not being localized in dynamic filters when a worldview is set.
• Fix an issue with clipping models on Standard.
• Fix an issue with models flashing on setData.
• Fix an issue with incorrect scoping of models added during runtime.
• Fix line patterns not elevating properly on HD roads.
• Sanitize attributions in AttributionControl.
• Correctly support filtered features in appearances.
• Fix an issue occuring when expressions are used in appearances.
• Fix appearance optimization that resulted in wrong appearances being rendered.
• Fix appearance icons not changing when feature state changed multiple times.
• Improve TypeScript types.

Commits

• 9fa8566 v3.17.0
• 243bc6f Fix polygon rendering for dynamic GeoJSON sources
• 987ded3 Fix raster array not working on iOS < 18.4
• 10ed84a Update test tiles for HD road data to match up-to-date elevation IDs on routes
• 8d4637b Procedural building improvements and optimisations (internal-8406)
• d8c8424 Fix continuous label placement for static camera (internal-8335)
• 84786a4 Add render test for icon-size applied to an icon with a small stretch area
• 562041f Add render test to check that appearance without icon-size falls back to icon...
• d89d0d8 Add render tests to test appearances in combination with zero icon-size.
• d35d6bb Add render test for icon-size dependent on coalesce images expression.
• Additional commits viewable in compare view

Updates qs from 6.11.2 to 6.14.1

Changelog

Sourced from qs's changelog.

6.14.1

• [Fix] ensure arrayLength applies to [] notation as well
• [Fix] parse: when a custom decoder returns null for a key, ignore that key
• [Refactor] parse: extract key segment splitting helper
• [meta] add threat model
• [actions] add workflow permissions
• [Tests] stringify: increase coverage
• [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect

6.14.0

• [New] parse: add throwOnParameterLimitExceeded option (#517)
• [Refactor] parse: use utils.combine more
• [patch] parse: add explicit throwOnLimitExceeded default
• [actions] use shared action; re-add finishers
• [meta] Fix changelog formatting bug
• [Deps] update side-channel
• [Dev Deps] update es-value-fixtures, has-bigints, has-proto, has-symbols
• [Tests] increase coverage

6.13.1

• [Fix] stringify: avoid a crash when a filter key is null
• [Fix] utils.merge: functions should not be stringified into keys
• [Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset
• [Fix] stringify: ensure a non-string filter does not crash
• [Refactor] use __proto__ syntax instead of Object.create for null objects
• [Refactor] misc cleanup
• [Tests] utils.merge: add some coverage
• [Tests] fix a test case
• [actions] split out node 10-20, and 20+
• [Dev Deps] update es-value-fixtures, mock-property, object-inspect, tape

6.13.0

• [New] parse: add strictDepth option (#511)
• [Tests] use npm audit instead of aud

6.12.3

• [Fix] parse: properly account for strictNullHandling when allowEmptyArrays
• [meta] fix changelog indentation

6.12.2

• [Fix] parse: parse encoded square brackets (#506)
• [readme] add CII best practices badge

6.12.1

• [Fix] parse: Disable decodeDotInKeys by default to restore previous behavior (#501)
• [Performance] utils: Optimize performance under large data volumes, reduce memory usage, and speed up processing (#502)
• [Refactor] utils: use +=
• [Tests] increase coverage

6.12.0

... (truncated)

Commits

• 3fa11a5 v6.14.1
• a626704 [Dev Deps] update npmignore
• 3086902 [Fix] ensure arrayLength applies to [] notation as well
• fc7930e [Dev Deps] update eslint, @ljharb/eslint-config
• 0b06aac [Dev Deps] update @ljharb/eslint-config
• 64951f6 [Refactor] parse: extract key segment splitting helper
• e1bd259 [Dev Deps] update @ljharb/eslint-config
• f4b3d39 [eslint] add eslint 9 optional peer dep
• 6e94d95 [Dev Deps] update eslint, @ljharb/eslint-config, npmignore
• 973dc3c [actions] add workflow permissions
• Additional commits viewable in compare view

Updates react-google-recaptcha-v3 from 1.10.1 to 1.11.0

Commits

• See full diff in compare view

Updates @babel/core from 7.21.4 to 7.28.6

Release notes

Sourced from @​babel/core's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 (@​fisker)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest (@​CO0Ki3)
• babel-parser
  • #17521 Improve @babel/parser error typing (@​JLHwung)
  • #17491 fix: improve ts-only declaration parsing (@​JLHwung)
• babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • #17519 fix: rest correctly returns plain array (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@​JLHwung)
• babel-traverse
  • #17504 fix: ensure scope.push register in anonymous fn (@​JLHwung)

🏠 Internal

• babel-types
  • #17494 Type checking babel-types scripts (@​JLHwung)

🏃‍♀️ Performance

• babel-core
  • #17490 Faster finding of locations in buildCodeFrameError (@​liuxingbaoyu)

Committers: 8

• Babel Bot (@​babel-bot)
• Byeongho Yoo (@​youthfulhps)
• Huáng Jùnliàng (@​JLHwung)
• Hyeon Dokko (@​CO0Ki3)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​Olexandr88
• @​liuxingbaoyu
• fisker Cheung (@​fisker)

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

Changelog

Tags:

• 💥 [Breaking Change]
• 👓 [Spec Compliance]
• 🚀 [New Feature]
• 🐛 [Bug Fix]
• 📝 [Documentation]
• 🏠 [Internal]
• 💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v7.15.0.

• See CHANGELOG - v7.0.0 to v7.14.9 for v7.0.0 to v7.14.9 changes.
• See CHANGELOG - v7 prereleases for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.
• See CHANGELOG - v4, CHANGELOG - v5, and CHANGELOG - v6 for v4.x-v6.x changes.
• See CHANGELOG - 6to5 for the pre-4.0.0 version changelog.
• See Babylon's CHANGELOG for the Babylon pre-7.0.0-beta.29 version changelog.
• See babel-eslint's releases for the changelog before @babel/eslint-parser 7.8.0.
• See eslint-plugin-babel's releases for the changelog before @babel/eslint-plugin 7.8.0.

v7.28.5 (2025-10-23)

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 (@​fisker)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest (@​CO0Ki3)
• babel-parser
  • #17521 Improve @babel/parser error typing (@​JLHwung)
  • #17491 fix: improve ts-only declaration parsing (@​JLHwung)
• babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • #17519 fix: rest correctly returns plain array (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@​JLHwung)
• babel-traverse
  • #17504 fix: ensure scope.push register in anonymous fn (@​JLHwung)

🏠 Internal

• babel-types
  • #17494 Type checking babel-types scripts (@​JLHwung)

... (truncated)

Commits

• d7f4008 v7.28.6
• e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
• 99dcba5 chore: enable some ts-eslint rules (#17592)
• c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
• d725e39 Add BABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK (#17569)
• c1b55f6 Use eslint.config.mts (#17573)
• 61647ae v7.28.5
• 42cb285 Improve @babel/core types (#17404)
• da0d1ad Faster finding of locations in buildCodeFrameError (#17490)
• 35055e3 v7.28.4
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/core since your current version.

Updates @babel/preset-env from 7.25.7 to 7.28.6

Release notes

Sourced from @​babel/preset-env's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.