fix(deps): update all non-major dependencies

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@babel/core (source)	7.26.8 -> 7.28.4			devDependencies	minor
@babel/plugin-transform-modules-commonjs (source)	7.26.3 -> 7.27.1			devDependencies	minor
@babel/preset-env (source)	7.26.8 -> 7.28.3			devDependencies	minor
@babel/preset-typescript (source)	7.26.0 -> 7.27.1			devDependencies	minor
@babel/register (source)	7.25.9 -> 7.28.3			devDependencies	minor
@changesets/changelog-github (source)	0.5.0 -> 0.5.1			devDependencies	patch
@changesets/cli (source)	2.27.12 -> 2.29.7			devDependencies	minor
@grpc/grpc-js (source)	~1.9.0 -> ~1.14.0			dependencies	minor
@grpc/proto-loader (source)	^0.7.8 -> ^0.8.0			dependencies	minor
@rollup/plugin-node-resolve (source)	16.0.0 -> 16.0.2			dependencies	patch
@rollup/plugin-node-resolve (source)	16.0.0 -> 16.0.2			devDependencies	patch
@rushstack/ts-command-line (source)	4.23.3 -> 4.23.7			dependencies	patch
@types/express (source)	4.17.21 -> 4.17.23			devDependencies	patch
@types/inquirer (source)	8.2.10 -> 8.2.12			devDependencies	patch
@types/mz (source)	2.7.8 -> 2.7.9			devDependencies	patch
@types/node (source)	18.19.83 -> 18.19.129			dependencies	patch
@types/node (source)	18.19.83 -> 18.19.129			devDependencies	patch
@types/request (source)	2.48.12 -> 2.48.13			devDependencies	patch
eslint-plugin-import	2.31.0 -> 2.32.0			devDependencies	minor
firebase (source, changelog)	11.8.1 -> 11.10.0			dependencies	minor
firebase-tools	13.30.0 -> 13.35.1			devDependencies	minor
inquirer (source)	8.2.6 -> 8.2.7			devDependencies	patch
json-stable-stringify	1.2.1 -> 1.3.0			devDependencies	minor
mocha-chai-jest-snapshot	1.1.6 -> 1.1.7			devDependencies	patch
node	22.10.0 -> 22.20.0			uses-with	minor
playwright (source)	1.51.1 -> 1.55.1			devDependencies	minor
protobufjs (source)	7.4.0 -> 7.5.4			devDependencies	minor
rollup-plugin-license	3.5.3 -> 3.6.0			devDependencies	minor
selenium-webdriver (source)	4.30.0 -> 4.36.0			devDependencies	minor
semver	7.7.1 -> 7.7.2			devDependencies	patch
simple-git (source)	3.27.0 -> 3.28.0			devDependencies	minor
sinon.js (source)	4.1.3 -> 4.5.0				minor
terser (source)	5.37.0 -> 5.44.0			dependencies	minor
terser (source)	5.38.1 -> 5.44.0			devDependencies	minor
ts-essentials	10.0.4 -> 10.1.1			devDependencies	minor
ts-loader	9.5.2 -> 9.5.4			devDependencies	patch
tsec	0.2.8 -> 0.2.9			devDependencies	patch
webpack	5.98.0 -> 5.102.0			dependencies	minor
webpack	5.98.0 -> 5.102.0			devDependencies	minor

---

Release Notes

babel/babel (@​babel/core)

v7.28.4

Compare Source

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #​17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)
• babel-core
  • #​17474 Switch to @​jridgewell/remapping (@​mrginglymus)

v7.28.3

Compare Source

👓 Spec Compliance

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
  • #​17443 [static blocks] Do not inject new static fields after static code (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-parser
  • #​17465 fix(parser/typescript): parse import("./a", {with:{},}) (@​easrng)
  • #​17478 fix(parser): stop subscript parsing on async arrow (@​JLHwung)

💅 Polish

• babel-plugin-transform-regenerator, babel-plugin-transform-runtime
  • #​17363 Do not save last yield in call in temp var (@​nicolo-ribaudo)

📝 Documentation

• #​17448 move eslint-{parser,plugin} docs to the website (@​JLHwung)

🏠 Internal

• #​17454 Enable type checking for scripts and babel-worker.cjs (@​JLHwung)

🔬 Output optimization

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
  • #​17444 Optimize do expression output (@​JLHwung)

v7.28.0

Compare Source

🚀 New Feature

• babel-node
  • #​17147 Support top level await in node repl (@​liuxingbaoyu)
• babel-types
  • #​17258 feat(matchesPattern): support super/private/meta (@​JLHwung)
• babel-compat-data, babel-preset-env
  • #​17355 Add explicit resource management to preset-env (@​JLHwung)
• babel-core, babel-parser
  • #​17390 Support sourceType: "commonjs" (@​JLHwung)
• babel-generator, babel-parser
  • #​17346 Materialize explicitResourceManagement parser plugin (@​JLHwung)
• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  • #​17391 LVal coverage updates (Part 2) (@​JLHwung)
• babel-parser, babel-traverse, babel-types
  • #​17378 Accept bigints in t.bigIntLiteral factory (@​JLHwung)
• babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  • #​17277 Transform discard binding (@​JLHwung)
• babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
  • #​17163 Parse discard binding (@​JLHwung)

🐛 Bug Fix

• babel-helper-globals, babel-plugin-transform-classes, babel-traverse
  • #​17297 Create babel-helper-globals (@​JLHwung)
• babel-types
  • #​17009 feature: TSTypeOperator: keyof (#​16799) (@​coderaiser)

🏠 Internal

• babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • #​17403 Update babel-polyfill packages (@​nicolo-ribaudo)

v7.27.7

Compare Source

👓 Spec Compliance

• babel-parser, babel-plugin-transform-classes
  • #​17203 Interepret parser allow* options as top level only (@​JLHwung)
• babel-parser
  • #​17371 fix: disable using in ambient context (@​JLHwung)

🐛 Bug Fix

• babel-core
  • #​17392 Improve TS babel config loading (@​JLHwung)
• babel-types
  • #​17376 fix: support negative bigint in valueToNode (@​JLHwung)
• babel-plugin-transform-parameters
  • #​17352 fix: Params of async function* should throw synchronously (@​liuxingbaoyu)

🏠 Internal

• babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread
  • #​17389 Use NodePath#splitExportDeclaration in destructuring transforms (@​JLHwung)

v7.27.4

Compare Source

👓 Spec Compliance

• babel-parser, babel-plugin-proposal-explicit-resource-management
  • #​17323 Disallow using in bare case statement (@​JLHwung)

💅 Polish

• babel-parser
  • #​17311 Improve parseExpression error messages (@​JLHwung)

🔬 Output optimization

• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​17287 Reduce regenerator size more (@​liuxingbaoyu)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • #​17334 Use shorter method names for regenerator context (@​nicolo-ribaudo)
  • #​17268 Reduce regenerator helper size (@​liuxingbaoyu)
• babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  • #​17238 Split regeneratorRuntime into multiple helpers (@​nicolo-ribaudo)

v7.27.3

Compare Source

🐛 Bug Fix

• babel-generator
  • #​17324 Improve multiline comments handling in yield/await expression (@​JLHwung)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17328 Correctly set .displayName on GeneratorFunction (@​nicolo-ribaudo)
• babel-plugin-proposal-explicit-resource-management
  • #​17319 fix: handle shadowed binding in for using of body (@​JLHwung)
  • #​17317 fix: support named evaluation for using declaration (@​JLHwung)
• babel-plugin-proposal-decorators, babel-types
  • #​17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
• babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  • #​17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
• babel-parser
  • #​17312 fix(parser): properly handle optional markers in generator class methods (@​magic-akari)
  • #​17307 fix(parser): Terminate modifier parsing at newline (@​magic-akari)
• babel-generator, babel-parser
  • #​17308 Improve import phase parsing (@​JLHwung)

v7.27.1

Compare Source

👓 Spec Compliance

• babel-parser
  • #​17254 Allow using of as lexical declaration within for (@​JLHwung)
  • #​17230 Disallow get/set in TSPropertySignature (@​JLHwung)
• babel-parser, babel-types
  • #​17193 Stricter TSImportType options parsing (@​JLHwung)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • #​17137 fix: do expressions should allow early exit (@​kermanx)
• babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • #​17251 Fix: propagate argument evaluation errors through async promise chain (@​magic-akari)
• babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • #​17231 fix apply()/call() annotated as pure (@​Lacsw)
• babel-helper-fixtures, babel-parser
  • #​17233 Create ChainExpression within TSInstantiationExpression (@​JLHwung)
• babel-generator, babel-parser
  • #​17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
• babel-parser
  • #​17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
  • #​17080 Fix start of TSParameterProperty (@​JLHwung)
• babel-compat-data, babel-preset-env
  • #​17228 Update firefox bugfix compat data (@​JLHwung)
• babel-traverse
  • #​17156 fix: Objects and arrays with multiple references should not be evaluated (@​liuxingbaoyu)
• babel-generator
  • #​17216 Fix: support const type parameter in generator (@​JLHwung)

💅 Polish

• babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
  • #​17221 Reduce generated names size for the 10th-11th (@​nicolo-ribaudo)

🏠 Internal

• babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​17263 Remove unused regenerator-runtime dep in @babel/runtime (@​nicolo-ribaudo)
• babel-compat-data, babel-preset-env
  • #​17256 Tune plugin compat data (@​JLHwung)
• babel-compat-data, babel-standalone
  • #​17236 migrate babel-compat-data build script to mjs (@​JLHwung)
• Other
  • #​17232 Bump typescript-eslint to 8.29.1 (@​JLHwung)
  • #​17219 test: add basic typescript-eslint integration tests (@​JLHwung)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-register
  • #​16844 Migrate @babel/register to cts (@​liuxingbaoyu)
• babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types
  • #​17207 Enforce node protocol import (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-regenerator
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)

🔬 Output optimization

• babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  • #​16538 Reduce interopRequireWildcard size (@​liuxingbaoyu)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17213 Reduce regeneratorRuntime size (@​liuxingbaoyu)

v7.26.10

Compare Source

👓 Spec Compliance

• babel-parser
  • #​17159 Disallow decorator in array pattern (@​JLHwung)

🐛 Bug Fix

• babel-parser, babel-template
  • #​17164 Fix: always initialize ExportDeclaration attributes (@​JLHwung)
• babel-core
  • #​17142 fix: "Map maximum size exceeded" in deepClone (@​liuxingbaoyu)
• babel-parser, babel-plugin-transform-typescript
  • #​17154 Update typescript parser tests (@​JLHwung)
• babel-traverse
  • #​17151 fix: Should not evaluate vars in child scope (@​liuxingbaoyu)
• babel-generator
  • #​17153 fix: Correctly generate abstract override (@​liuxingbaoyu)
• babel-parser
  • #​17107 Fix source type detection when parsing TypeScript (@​JLHwung)
• babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
  • #​17173 Fix processing of replacement pattern with named capture groups (@​mmmsssttt404)

💅 Polish

• babel-standalone
  • #​17158 Avoid warnings when re-bundling @​babel/standalone with webpack (@​liuxingbaoyu)

🏠 Internal

• babel-parser
  • #​17160 Left-value parsing cleanup (@​JLHwung)

v7.26.9

Compare Source

🐛 Bug Fix

• babel-types
  • #​17103 fix: Definition for TSPropertySignature.kind (@​liuxingbaoyu)
• babel-generator, babel-types
  • #​17062 Print TypeScript optional/definite in ClassPrivateProperty (@​jamiebuilds-signal)

🏠 Internal

• babel-types
  • #​17130 Use .ts files with explicit reexports to solve name conflicts (@​nicolo-ribaudo)
• babel-core
  • #​17127 Do not depend on @types/gensync in Babel 7 (@​nicolo-ribaudo)

changesets/changesets (@​changesets/changelog-github)

v0.5.1

Compare Source

Patch Changes

• Updated dependencies [84a4a1b]:
  • @​changesets/types@​6.1.0

grpc/grpc-node (@​grpc/grpc-js)

v1.14.0: @​grpc/grpc-js 1.14.0

Compare Source

Changelog

• Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#​2920)
• Implement custom backend metrics support (gRFC A51) (#​2978, #​2983, #​2985, #​2986, #​2999)
• Add getConnectionInfo method to the ServerInterceptingCall class (#​2922)
• Implement the weighted_round_robin load balancing policy (#​2998)
• Fix jitter behavior for client retries (#​2960 contributed by @​ekscentrysytet)
• Start connecting from a random index in the round_robin LB policy (#​2979)
• Send connection-level WINDOW_UPDATE at session start (#​2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

• CHANNEL_ARGS_CONFIG_SELECTOR_KEY
• StatusOr<T>
• CallStream
• statusOrFromValue
• statusOrFromError

Modified:

• ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
• LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

v1.13.4: @​grpc/grpc-js 1.13.4

Compare Source

• Fix ability to set SNI with ssl_target_name_override option (#​2956)

v1.13.3: @​grpc/grpc-js 1.13.3

Compare Source

• Disable Nagle's algorithm (#​2936)
• Avoid calling http2.getDefaultSettings (#​2937)

v1.13.2: @​grpc/grpc-js 1.13.2

Compare Source

• Fix a bug that caused clients to be unable to connect through local proxies (#​2933)

v1.13.1: @​grpc/grpc-js 1.13.1

Compare Source

• Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#​2926)
• Fix a bug that caused the client to never send retries if any retryThrottling config was set (#​2927)
• Fix a bug that caused clients to incorrectly send retries if the feature was disabled by a channel option and a retry config was provided (#​2927)

v1.13.0: @​grpc/grpc-js 1.13.0

Compare Source

Changelog

• Add support for channel option grpc-node.flow_control_window to control HTTP/2 flow control window size (#​2864 contributed by @​rickihastings)
• Show meaningful error messages more consistently when requests fail (#​2868)
• Add support for CIDR blocks in no_proxyenvironment variable (#​2876 contributed by @​melkouri)
• Fix a bug that caused server interceptor sendMetadata methods to not be called if the server interceptor did not explicitly send metadata (#​2897)
• Fix IPv6-mapped IPv4 address parsing in channelz, and represent them as IPv4 addresses (#​2909)

Experimental API changes

Added:

• SecureConnector
• SecureConnectResult
• SUBCHANNEL_ARGS_EXCLUDE_KEY_PREFIX
• Server#experimentalRegisterListenerToChannelz protected method
• ServerexperimentalUnregisterListenerFromChannelz protected method
• Server#experimentalCreateConnectionInjectorWithChannelzRef protected method

Modified:

• LoadBalancer: Removed the ChannelCredentials constructor argument
• LoadBalancer: Removed the ChannelOptions constructor argument
• LoadBalancer#updateAddressList: Replaced the attributes argument with one of type ChannelOptions.
• ChannelControlHelper#createSubchannel: Removed the ChannelCredentials argument
• LeafLoadBalancer: Removed the ChannelCredentials constructor argument

v1.12.6

Compare Source

• Allow garbage collection of IDLE channels (#​2896)

v1.12.5: @​grpc/grpc-js 1.12.5

Compare Source

• Prioritize HTTP status errors over message decoding errors (#​2873)

v1.12.4: @​grpc/grpc-js 1.12.4

Compare Source

• Prioritize reporting UNAVAILABLE status when handing connection drops (#​2862)

v1.12.3: grpc-tools 1.12.3

Compare Source

• Target an older Mac version when building Mac artifacts (for real this time) (#​2292)

v1.12.2: @​grpc/grpc-js-xds 1.12.2

Compare Source

• fix LrsCallState statsTimer memory leak (#​2891 contributed by @​gfrancz) (backported in #​2898)

v1.12.1: @​grpc/grpc-js-xds 1.12.1

Compare Source

• Fix a bug that could cause the client to not receive some resource updates (#​2880)

v1.12.0: @​grpc/grpc-js 1.12.0

Compare Source

Changelog

• Provide the method_name for the CallCredentials callback generateMetadata (#​2814 contributed by [@​becoded](https://redirect.github.com/beco

---

Configuration

📅 Schedule: Branch creation - "before 3am on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 64325f9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[google-oss-bot]

Size Report ¹

Affected Products

No changes between base commit (6a02778) and merge commit (0747f3e).

Test Logs

• Base (6a02778): https://github.com/firebase/firebase-js-sdk/actions/runs/14845251891
• Merge (0747f3e): https://github.com/firebase/firebase-js-sdk/actions/runs/14847277598

1. https://storage.googleapis.com/firebase-sdk-metric-reports/SRl2gtWhq1.html

[google-oss-bot]

Size Analysis Report ¹

Affected Products

No changes between base commit (6a02778) and merge commit (0747f3e).

Test Logs

• Base (6a02778): https://github.com/firebase/firebase-js-sdk/actions/runs/14845251891
• Merge (0747f3e): https://github.com/firebase/firebase-js-sdk/actions/runs/14847277598

1. https://storage.googleapis.com/firebase-sdk-metric-reports/f6gT6LNxO9.html