👷 Update all non-major dependencies #4031

renovate · 2025-12-13T01:00:07Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@eslint/js (source)	`9.39.1` -> `9.39.2`	devDependencies	patch
@mantine/core (source)	`8.3.9` -> `8.3.10`	dependencies	patch
@mantine/hooks (source)	`8.3.9` -> `8.3.10`	dependencies	patch
@swc/core (source)	`1.15.3` -> `1.15.7`	devDependencies	patch
@tabler/icons-react (source)	`3.35.0` -> `3.36.0`	dependencies	minor
@types/chrome (source)	`0.1.31` -> `0.1.32`	devDependencies	patch
@types/express (source)	`5.0.5` -> `5.0.6`	devDependencies	patch
@types/node (source)	`24.10.1` -> `24.10.4`	devDependencies	patch
@types/react (source)	`18.3.12` -> `18.3.27`	devDependencies	patch
@types/react (source)	`18.3.26` -> `18.3.27`	devDependencies	patch
@types/react-dom (source)	`18.3.1` -> `18.3.7`	devDependencies	patch
@vitejs/plugin-react (source)	`4.3.3` -> `4.7.0`	devDependencies	minor
actions/checkout	`v6.0.0` -> `v6.0.1`	action	patch
actions/setup-node	`v6.0.0` -> `v6.1.0`	action	minor
actions/stale	`v10.1.0` -> `v10.1.1`	action	patch
eslint (source)	`9.39.1` -> `9.39.2`	devDependencies	patch
eslint-plugin-jsdoc	`61.4.1` -> `61.5.0`	devDependencies	minor
express (source)	`5.1.0` -> `5.2.1`	devDependencies	minor
github/codeql-action	`v4.31.6` -> `v4.31.9`	action	patch
node (source)	`24.11.1` -> `24.12.0`	volta	minor
node	`24.11.1-bookworm-slim` -> `24.12.0-bookworm-slim`	stage	minor
node-forge	`1.3.2` -> `1.3.3`	devDependencies	patch
prettier (source)	`3.7.3` -> `3.7.4`	devDependencies	patch
puppeteer (source)	`24.31.0` -> `24.33.1`	devDependencies	minor	`24.34.0`
react (source)	`19.2.0` -> `19.2.3`	dependencies	patch
react (source)	`19.2.0` -> `19.2.3`	devDependencies	patch
react-dom (source)	`19.2.0` -> `19.2.3`	dependencies	patch
react-dom (source)	`19.2.0` -> `19.2.3`	devDependencies	patch
react-router (source)	`7.9.6` -> `7.11.0`	devDependencies	minor
react-router-dom (source)	`6.20.0` -> `6.30.2`	dependencies	minor
react-router-dom (source)	`6.30.1` -> `6.30.2`	dependencies	patch
react-router-dom (source)	`7.9.6` -> `7.11.0`	devDependencies	minor
terser-webpack-plugin	`5.3.14` -> `5.3.16`	devDependencies	patch
typescript-eslint (source)	`8.48.0` -> `8.50.0`	devDependencies	minor	`8.50.1`
webpack	`5.103.0` -> `5.104.1`	devDependencies	minor
wxt (source)	`0.20.11` -> `0.20.13`	dependencies	patch

Release Notes

eslint/eslint (@eslint/js)

`v9.39.2`

Compare Source

mantinedev/mantine (@mantine/core)

`v8.3.10`

Compare Source

What's Changed

[@mantine/hooks] use-focus-within: Fix event handlers not being cleaned up properly (#8507)
[@mantine/core] Menu: Fix focus not being returned to the target element when the dropdown is closed (#8517)
[@mantine/core] List: Fix incorrect marker gap with icon prop (#8519)
[@mantine/core] Fix some global styles not being applied to shadow DOM :host (#8504)
[@mantine/core] Fix SSR-related errors in Tooltip and Popover.Target when the children are defined with React.lazy (#8522)
[@mantine/tiptap] Fix missing z-index on the toolbar
[@mantine/form] Add FormArrayElement type export (#8486)
[@mantine/dates] Fix children override not working in MonthsList/YearsList getYearProps/getMonthProps functions (#8488)
[@mantine/emotion] Improve CSSObject type in createStyles (#8500)
[@mantine/core] Input: Fix description having incorrect cursor styles (#8503)
[@mantine/hooks] use-in-viewport: Fix incorrect entry cheching in some cases (#8509)
[@mantine/core] Popover: Fix incorrect dropdown position when the target element is not initially within the viewport (#8411)
[@mantine/core] Fix incorrectly inherited pointer prop type from base input in some components

New Contributors

@spalt08 made their first contribution in #8509
@radui1398 made their first contribution in #8503
@MehdiAlipooor made their first contribution in #8488

Full Changelog: mantinedev/mantine@8.3.9...8.3.10

swc-project/swc (@swc/core)

`v1.15.7`

Compare Source

Bug Fixes

(es/minifier) Prevent unsafe sequence merging in super() calls (#11381) (eb02780)
(es/transformer) Fix variable declaration for nullish coalescing in else-if branches (#11384) (6746002)
(es/transforms) Update _ts_rewrite_relative_import_extension helper code (#11382) (1ec444e)

Features

(es/transformer) Merge private_properties_in_object (#11378) (769c9d2)

Performance

(es/minifier) Optimize data structures of ProgramData (#11374) (3639523)

Refactor

(es/transformer) Port var injector (#11383) (cfff553)

`v1.15.6`

Compare Source

`v1.15.5`

Compare Source

Bug Fixes

(es/parser) Fix bump length (#11372) (ec5c1bc)
(es/transforms) Adjust import rewriter pass before inject helpers pass (#11371) (8516991)

`v1.15.4`

Compare Source

Bug Fixes

(es/compat) Preserve return value for single-property object destructuring (#11334) (847ad22)
(es/compat) Fix generator transform for compound assignments, for-in, and labeled break (#11339) (9b6bedd)
(es/compat) Destructuring evaluation order (#11337) (49d04c7)
(es/compat) Fix parameter default value evaluation order with object rest (#11352) (2ebb261)
(es/fixer) Preserve parens around IFFE in binary expressions within sequences (#11324) (a4c84ea)
(es/helpers) Avoid extra trap calls on excluded keys in object rest spread (#11338) (4662caf)
(es/minifier) Fix debug cargo feature (#11325) (be86fad)
(es/minifier) Fix optimization pass for merge_imports (#11331) (ca2f7ed)
(es/parser) Don't call bump_bytes in the continue_if of byte_search! (#11328) (583619d)
(es/parser) Support type-only string literal in import specifiers (#11333) (07762f1)
(es/parser) Handle TypeScript expressions in destructuring patterns (#11353) (160ec34)
(es/transformer) Complete replace_this_in_expr implementation (#11361) (58c4067)
(es/transformer) Fix pass order (#11370) (373048a)

Features

(es/minifier) Optimize typeof x == "undefined" to typeof x > "u" (#11367) (a5e144b)
(es/parser) Support no_paren parser option (#11359) (5b9d77c)
(es/parser) Revert no_paren parser option (#11362) (57a8731)
(es/transfomer) Add modules to prepare porting (#11347) (68d740c)
(es/transform) Add common fields (#11346) (1a8759f)
(es/transformer) Merge async-to-generator (#11355) (c388e87)
(es/transformer) Merge async_to_generator (#11358) (25f3a47)
(es/transformer) Merge object_rest_spread (#11357) (752188e)
(es/transformer) Merge nullish_coalescing (#11365) (5fb686a)
(es/transformer) Merge logical_assignment_operators (#11369) (94946fa)

Performance

(es/compat) Merge exponentation_operator (#11310) (0ef3637)
(es/compat) Merge optional_catch_binding (#11313) (468d20c)
(es/compat) Use merged transformer (#11366) (c4a5e79)
(es/parser) Optimize byte_search! (#11323) (67f67c1)
(es/parser) Small optimization after byte-based lexer (#11340) (c92ea4e)
(es/parser) Use slice rather than matching keywords (#11341) (b6ad2cb)
(parser) Make all parsers work by byte instead of char (#11318) (725efd1)

tabler/tabler-icons (@tabler/icons-react)

`v3.36.0`: Release 3.36.0

Compare Source

18 new icons:

outline/alphabet-polish
outline/alphabet-runes
outline/blind
outline/brand-tabnine
outline/circle-asterisk
outline/deaf
outline/hexagon-asterisk
outline/ripple-down
outline/ripple-up
outline/rosette-asterisk
outline/settings-ai
outline/sparkles-2
outline/square-rotated-asterisk
outline/subtitles-ai
outline/subtitles-edit
outline/subtitles-off
outline/subtitles
outline/whisk

Fixed icons

Fixed over 2000 icons with improved category formatting, consistent newline usage, and enhanced accessibility tags.

New features

Svelte 5 (Runes) support: Added new @tabler/icons-svelte-runes package for Svelte 5 with Runes syntax
GitHub Actions workflow: Added automated workflow to sync icons to CDN
Enhanced accessibility: All outline icons now have proper categories and tags for improved accessibility

Performance improvements

Optimized build process: Refactored build-outline.mjs with:
- Increased concurrency from 32 to 64 for faster processing
- Parallel file processing and copying
- Improved cache handling and error management
- Better progress tracking and logging
Removed Python dependency: Replaced fix-outline.py with JavaScript implementation (fix-outline.mjs)

Other changes

Fixed ref types in icons-react package
Improved TypeScript configuration for better type checking

vitejs/vite-plugin-react (@vitejs/plugin-react)

`v4.7.0`

Compare Source

Add HMR support for compound components (#518)

HMR now works for compound components like this:

const Root = () => <div>Accordion Root</div>
const Item = () => <div>Accordion Item</div>

export const Accordion = { Root, Item }

Return `Plugin[]` instead of `PluginOption[]` (#537)

The return type has changed from react(): PluginOption[] to more specialized type react(): Plugin[]. This allows for type-safe manipulation of plugins, for example:

// previously this causes type errors
react({ babel: { plugins: ['babel-plugin-react-compiler'] } })
  .map(p => ({ ...p, applyToEnvironment: e => e.name === 'client' }))

`v4.6.0`

Compare Source

Add raw Rolldown support

This plugin only worked with Vite. But now it can also be used with raw Rolldown. The main purpose for using this plugin with Rolldown is to use react compiler.

`v4.5.2`

Compare Source

Suggest `@vitejs/plugin-react-oxc` if rolldown-vite is detected #491

Emit a log which recommends @vitejs/plugin-react-oxc when rolldown-vite is detected to improve performance and use Oxc under the hood. The warning can be disabled by setting disableOxcRecommendation: true in the plugin options.

Use `optimizeDeps.rollupOptions` instead of `optimizeDeps.esbuildOptions` for rolldown-vite #489

This suppresses the warning about optimizeDeps.esbuildOptions being deprecated in rolldown-vite.

Add Vite 7-beta to peerDependencies range #497

React plugins are compatible with Vite 7, this removes the warning when testing the beta.

`v4.5.1`

Compare Source

Add explicit semicolon in preambleCode #485

This fixes an edge case when using HTML minifiers that strips line breaks aggressively.

`v4.5.0`

Compare Source

Add `filter` for rolldown-vite #470

Added filter so that it is more performant when running this plugin with rolldown-powered version of Vite.

Skip HMR for JSX files with hooks #480

This removes the HMR warning for hooks with JSX.

`v4.4.1`

Compare Source

Fix type issue when using moduleResolution: "node" in tsconfig #462

`v4.4.0`

Compare Source

Make compatible with rolldown-vite

This plugin is now compatible with rolldown-powered version of Vite.
Note that currently the __source property value position might be incorrect. This will be fixed in the near future.

`v4.3.4`

Compare Source

Add Vite 6 to peerDependencies range

Vite 6 is highly backward compatible, not much to add!

Force Babel to output spec compliant import attributes #386

The default was an old spec (with type: "json"). We now enforce spec compliant (with { type: "json" })

actions/checkout (actions/checkout)

`v6.0.1`

Compare Source

actions/setup-node (actions/setup-node)

`v6.1.0`

Compare Source

What's Changed

Enhancement:

Remove always-auth configuration handling by @priyagupta108 in #1436

Dependency updates:

Upgrade @actions/cache from 4.0.3 to 4.1.0 by @dependabot[bot] in #1384
Upgrade actions/checkout from 5 to 6 by @dependabot[bot] in #1439
Upgrade js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in #1435

Documentation update:

Add example for restore-only cache in documentation by @aparnajyothi-y in #1419

Full Changelog: actions/setup-node@v6...v6.1.0

actions/stale (actions/stale)

`v10.1.1`

Compare Source

What's Changed

Bug Fix

Add Missing Input Reading for only-issue-types by @Bibo-Joshi in #1298

Improvement

Improves error handling when rate limiting is disabled on GHES. by @chiranjib-swain in #1300

Dependency Upgrades

Upgrade eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot in #1276
Upgrade @types/node from 20.10.3 to 24.2.0 and document breaking changes in v10 by @dependabot in #1280
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #1291
Upgrade actions/checkout from 4 to 6 by @dependabot in #1306

New Contributors

@chiranjib-swain made their first contribution in #1300

Full Changelog: actions/stale@v10...v10.1.1

eslint/eslint (eslint)

`v9.39.2`

Compare Source

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

`v61.5.0`

Compare Source

Features

check-tag-names, require-template, check-template-names: make typeParam a non-preferred alias for template (3cd7cbd)

`v61.4.2`

Compare Source

Bug Fixes

require-rejects: reflect proper tag name in error message (44b2631)

expressjs/express (express)

`v5.2.1`

Compare Source

=======================

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

`v5.2.0`

Compare Source

========================

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)
deps: body-parser@^2.2.1
A deprecation warning was added when using res.redirect with undefined arguments, Express now emits a warning to help detect calls that pass undefined as the status or URL and make them easier to fix.

github/codeql-action (github/codeql-action)

`v4.31.9`

Compare Source

`v4.31.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

`v4.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

nodejs/node (node)

`v24.12.0`: 2025-12-10, Version 24.12.0 'Krypton' (LTS), @targos

Compare Source

Notable Changes

[1a00b5f68a] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #59778
[ff5754077d] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #59982
[8987159234] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #60600
[92c484ebf4] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #59953
[b11bc5984e] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #60217
[e7da5b4b7d] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #60178
[a7f7d10c06] - (SEMVER-MINOR) src: add an option to make compile cache portable (Aditi) #58797
[92ea669240] - (SEMVER-MINOR) src,permission: add --allow-inspector ability (Rafael Gonzaga) #59711
[05d7509bd2] - (SEMVER-MINOR) v8: add cpu profile (theanarkh) #59807

Commits

[e4a23a35ac] - benchmark: focus on import.meta intialization in import-meta benchmark (Joyee Cheung) #60603
[b6114ae5c9] - benchmark: add per-suite setup option (Joyee Cheung) #60574
[ac8e90af7c] - buffer: speed up concat via TypedArray#set (Gürgün Dayıoğlu) #60399
[acbc8ca13e] - build: upgrade Python linter ruff, add rules ASYNC,PERF (Christian Clauss) #59984
[f97a609a07] - console: optimize single-string logging (Gürgün Dayıoğlu) #60422
[6cd9bdc580] - crypto: ensure documented RSA-PSS saltLength default is used (Filip Skokan) #60662
[0fafe24d9b] - crypto: fix argument validation in crypto.timingSafeEqual fast path (Joyee Cheung) #60538
[54421e0419] - debugger: fix event listener leak in the run command (Joyee Cheung) #60464
[c361a628b4] - deps: V8: cherry-pick 72b0e27 (pthier) #60732
[c70f4588dd] - deps: V8: cherry-pick 6bb32bd (Erik Corry) #60732
[881fe784c5] - deps: V8: cherry-pick 0dd2318 (Erik Corry) #60732
[457c33efcc] - deps: V8: cherry-pick df20105 (Erik Corry) [#&#8203

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cit-pr-commenter · 2025-12-13T01:02:32Z

Bundles Sizes Evolution

📦 Bundle Name	Base Size	Local Size	𝚫	𝚫%	Status
Rum	164.37 KiB	164.36 KiB	-9 B	-0.01%	✅
Rum Profiler	4.32 KiB	4.32 KiB	0 B	0.00%	✅
Rum Recorder	20.01 KiB	20.01 KiB	0 B	0.00%	✅
Logs	56.14 KiB	56.14 KiB	0 B	0.00%	✅
Flagging	944 B	944 B	0 B	0.00%	✅
Rum Slim	121.64 KiB	121.64 KiB	0 B	0.00%	✅
Worker	23.63 KiB	23.63 KiB	0 B	0.00%	✅

🚀 CPU Performance

Action Name	Base CPU Time (ms)	Local CPU Time (ms)	𝚫%
RUM - add global context	0.0041	0.0055	+34.15%
RUM - add action	0.0115	0.0128	+11.30%
RUM - add error	0.0108	0.0117	+8.33%
RUM - add timing	0.0026	0.0028	+7.69%
RUM - start view	0.0031	0.0033	+6.45%
RUM - start/stop session replay recording	0.0006	0.0007	+16.67%
Logs - log message	0.0127	0.0135	+6.30%

🧠 Memory Performance

Action Name	Base Memory Consumption	Local Memory Consumption	𝚫
RUM - add global context	25.63 KiB	25.97 KiB	+345 B
RUM - add action	48.73 KiB	47.64 KiB	-1.09 KiB
RUM - add timing	24.90 KiB	25.16 KiB	+264 B
RUM - add error	51.79 KiB	51.94 KiB	+152 B
RUM - start/stop session replay recording	25.30 KiB	24.18 KiB	-1.11 KiB
RUM - start view	421.88 KiB	422.35 KiB	+481 B
Logs - log message	43.15 KiB	45.69 KiB	+2.54 KiB

🔗 RealWorld

datadog-datadog-prod-us1 · 2025-12-13T01:03:25Z

✅ Tests

🎉 All green!

❄️ No new flaky tests detected
🧪 All tests passed

🎯 Code Coverage
• Patch Coverage: 100.00%
• Overall Coverage: 77.25% (+0.00%)

View detailed report

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: c5ce3a9 | Docs | Datadog PR Page | Was this helpful? Give us feedback!}

renovate bot added the dependencies Pull requests that update a dependency file label Dec 13, 2025

renovate bot requested a review from a team as a code owner December 13, 2025 01:00

renovate bot force-pushed the renovate/all-minor-patch branch 17 times, most recently from 98453cf to 4dff8ff Compare December 20, 2025 09:42

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from b14c3a9 to 87f3066 Compare December 23, 2025 17:53

renovate bot requested a review from a team as a code owner December 23, 2025 17:53

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from de7c1a9 to d5b9c43 Compare December 24, 2025 16:31

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 74938d7 to 423d597 Compare December 25, 2025 13:45

👷 Update all non-major dependencies

c5ce3a9

renovate bot force-pushed the renovate/all-minor-patch branch from 423d597 to c5ce3a9 Compare December 25, 2025 16:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

👷 Update all non-major dependencies #4031

👷 Update all non-major dependencies #4031

Uh oh!

renovate bot commented Dec 13, 2025 •

edited

Loading

Uh oh!

cit-pr-commenter bot commented Dec 13, 2025 •

edited

Loading

Uh oh!

datadog-datadog-prod-us1 bot commented Dec 13, 2025 •

edited by datadog-official bot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

👷 Update all non-major dependencies #4031

Are you sure you want to change the base?

👷 Update all non-major dependencies #4031

Uh oh!

Conversation

renovate bot commented Dec 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

Bug Fixes

Features

Performance

Refactor

Bug Fixes

Bug Fixes

Features

Performance

v3.36.0: Release 3.36.0

18 new icons:

Fixed icons

New features

Performance improvements

Other changes

Add HMR support for compound components (#​518)

Return Plugin[] instead of PluginOption[] (#​537)

Add raw Rolldown support

Suggest @vitejs/plugin-react-oxc if rolldown-vite is detected #​491

Use optimizeDeps.rollupOptions instead of optimizeDeps.esbuildOptions for rolldown-vite #​489

Add Vite 7-beta to peerDependencies range #​497

Add explicit semicolon in preambleCode #​485

Add filter for rolldown-vite #​470

Skip HMR for JSX files with hooks #​480

Make compatible with rolldown-vite

Add Vite 6 to peerDependencies range

Force Babel to output spec compliant import attributes #​386

What's Changed

Enhancement:

Dependency updates:

Documentation update:

What's Changed

Bug Fix

Improvement

Dependency Upgrades

New Contributors

Features

Bug Fixes

CodeQL Action Changelog

4.31.8 - 11 Dec 2025

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

v24.12.0: 2025-12-10, Version 24.12.0 'Krypton' (LTS), @​targos

Notable Changes

Commits

Configuration

Uh oh!

cit-pr-commenter bot commented Dec 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bundles Sizes Evolution

Uh oh!

datadog-datadog-prod-us1 bot commented Dec 13, 2025 • edited by datadog-official bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Dec 13, 2025 •

edited

Loading

`v3.36.0`: Release 3.36.0

Add HMR support for compound components (#518)

Return `Plugin[]` instead of `PluginOption[]` (#537)

Suggest `@vitejs/plugin-react-oxc` if rolldown-vite is detected #491

Use `optimizeDeps.rollupOptions` instead of `optimizeDeps.esbuildOptions` for rolldown-vite #489

Add Vite 7-beta to peerDependencies range #497

Add explicit semicolon in preambleCode #485

Add `filter` for rolldown-vite #470

Skip HMR for JSX files with hooks #480

Force Babel to output spec compliant import attributes #386

`v24.12.0`: 2025-12-10, Version 24.12.0 'Krypton' (LTS), @targos

cit-pr-commenter bot commented Dec 13, 2025 •

edited

Loading

datadog-datadog-prod-us1 bot commented Dec 13, 2025 •

edited by datadog-official bot

Loading