fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/core (source)	7.28.5 → 7.29.0
@netlify/api (source)	14.0.9 → 14.0.18
@octokit/graphql	9.0.2 → 9.0.3
@octokit/request-error	7.0.1 → 7.1.0
@octokit/rest	22.0.0 → 22.0.1
@types/lodash (source)	4.17.20 → 4.17.24
@types/node (source)	24.9.2 → 24.12.2
@zendeskgarden/eslint-config (source)	47.0.0 → 47.1.0
commander	14.0.2 → 14.0.3
comment-parser (source)	1.4.1 → 1.4.6
commit-and-tag-version	12.6.0 → 12.7.1
dotenv	17.2.3 → 17.4.1
eslint (source)	9.38.0 → 9.39.4
execa	9.6.0 → 9.6.1
figlet	1.9.3 → 1.11.0
fs-extra	11.3.2 → 11.3.4
markdownlint-cli	0.45.0 → 0.48.0
ora	9.0.0 → 9.3.0
prettier (source)	3.6.2 → 3.8.2
react-docgen-typescript	2.2.2 → 2.4.0

---

Release Notes

babel/babel (@​babel/core)

v7.29.0

Compare Source

v7.29.0 (2026-01-31)

Thanks @​simbahax for your first PR!

🚀 New Feature

• babel-types
  • #​17750 [7.x backport] Add attributes import declaration builder (@​JLHwung)
• babel-standalone
  • #​17663 [7.x backport] feat(standalone): export async transform (@​JLHwung)
  • #​17725 [7.x backport] feat: read standalone targets from data-targets (@​JLHwung)

🐛 Bug Fix

• babel-parser
  • #​17765 fix(parser): correctly parse type assertions in extends clause (@​nicolo-ribaudo)
  • #​17723 [7.x backport] fix(parser): improve super type argument parsing (@​JLHwung)
• babel-traverse
  • #​17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@​simbahax)
• babel-plugin-transform-block-scoping, babel-traverse
  • #​17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@​magic-akari)

🏃‍♀️ Performance

• babel-generator, babel-runtime-corejs3
  • #​17642 [Babel 7] Improve generator performance (@​liuxingbaoyu)

Committers: 6

• David (@​simbahax)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• @​magic-akari

v7.28.6

Compare Source

netlify/build (@​netlify/api)

v14.0.18

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.52.0 (#​6997) (d578f7c)

v14.0.17

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.50.0 (#​6962) (5ea93d8)

v14.0.16

Compare Source

Bug Fixes

• deps: update @​netlify/serverless-functions-api to v2.10.0 for identity support (#​6952) (15d00dd)

v14.0.15

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.49.1 (#​6937) (b20c6a8)
• deps: update dependency @​netlify/open-api to ^2.49.2 (#​6946) (10a2e08)

v14.0.14

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.47.0 (#​6914) (c664caf)

v14.0.13

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.46.0 (#​6879) (a171652)

v14.0.12

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.45.0 (#​6808) (3eb351b)

v14.0.11

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.44.0 (#​6795) (d752514)

v14.0.10

Compare Source

Bug Fixes

• deps: update dependency @​netlify/open-api to ^2.43.1 (#​6768) (1248ca6)

octokit/graphql.js (@​octokit/graphql)

v9.0.3

Compare Source

Bug Fixes

• deps: update dependency @​octokit/types to v16 (#​676) (d5acce5)

octokit/request-error.js (@​octokit/request-error)

v7.1.0

Compare Source

Features

• inherit options from base Error class to add support for the cause property (#​535/#​536) (2ea2780)

v7.0.2

Compare Source

Bug Fixes

• deps: update dependency @​octokit/types to v16 (#​533) (e5a75ef)

octokit/rest.js (@​octokit/rest)

v22.0.1

Compare Source

Bug Fixes

• deps: update octokit monorepo (major) (#​538) (ded2f17)

zendeskgarden/eslint-config (@​zendeskgarden/eslint-config)

v47.1.0

Compare Source

Features

• add automatic .gitignore pattern support via eslint-config-flat-gitignore (#​258) (8e3e196)

Bug Fixes

• deps: update all non-major dependencies (#​257) (4bff6f4)

tj/commander.js (commander)

v14.0.3

Compare Source

Added

• Release Policy document ([#​2462])

Changes

• old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date ([#​2462])
• clarify typing for deprecated callback parameter to .outputHelp() ([#​2427])
• simple readability improvements to README ([#​2465])

yavorskiy/comment-parser (comment-parser)

v1.4.6

Compare Source

Patch Changes

• 02d3c46: Support default values on non-optional names (e.g. @property {number} BITMASK_VALUE_A=16 - description)

v1.4.5

Compare Source

Patch Changes

• fix: skip empty lines in name tokenizer only when type is present

v1.4.4

Compare Source

Patch Changes

• fully exclude slash-containing strings like @​npm/package from tag detection @​brettz9

v1.4.3

Compare Source

Patch Changes

• Add prepare and prepublishOnly scripts to ensure build runs before publishing

v1.4.2

Compare Source

Patch Changes

• npm audit
• ensure type, name and description on subsequent lines are properly parsed. @​brettz9
• ensure type, name and description on subsequent lines are properly parsed. @​brettz9
• fix .prettierignore
• add source trasformation example

absolute-version/commit-and-tag-version (commit-and-tag-version)

v12.7.1

Compare Source

Bug Fixes

• 🐛 updating dependency fast-xml-parser (#​277) (dac372b)

v12.7.0

Compare Source

Features

• add --noBumpWhenEmptyChanges flag (#​274) (b60fb23)

Bug Fixes

• make prerelease-flag work with gradle files (#​273) (24e2f02)

v12.6.1

Compare Source

Bug Fixes

• bump: auto-increment prerelease when tag already exists (#​258) (75d69a6)
• use fast-xml-parser to parse and build XML. This substantially reduces the bundle size. (#​234) (6075f4b)

motdotla/dotenv (dotenv)

v17.4.1

Compare Source

Changed

• Change text injecting to injected (#​1005)

v17.4.0

Compare Source

Added

• Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

• Tighten up logs: ◇ injecting env (14) from .env (#​1003)

v17.3.1

Compare Source

Changed

• Fix as2 example command in README and update spanish README

v17.3.0

Compare Source

Added

• Add a new README section on dotenv’s approach to the agentic future.

Changed

• Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

v17.2.4

Compare Source

Changed

• Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#​915)

• Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

eslint/eslint (eslint)

v9.39.4

Compare Source

Bug Fixes

• f18f6c8 fix: update dependency minimatch to ^3.1.5 (#​20564) (Milos Djermanovic)
• a3c868f fix: update dependency @​eslint/eslintrc to ^3.3.4 (#​20554) (Milos Djermanovic)
• 234d005 fix: minimatch security vulnerability patch for v9.x (#​20549) (Andrej Beles)
• b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#​20538) (루밀LuMir)

Documentation

• 4675152 docs: add deprecation notice partial (#​20520) (Milos Djermanovic)

Chores

• b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#​20596) (Francesco Trotta)
• 71b2f6b chore: package.json update for @​eslint/js release (Jenkins)
• 1d16c2f ci: pin Node.js 25.6.1 (#​20563) (Milos Djermanovic)

v9.39.3

Compare Source

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#​20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#​20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#​20453) (Milos Djermanovic)

v9.39.2

Compare Source

v9.39.1

Compare Source

v9.39.0

Compare Source

sindresorhus/execa (execa)

v9.6.1

Compare Source

• Fix VerboseOption type not being properly exported (#​1215) 7891c39

---

patorjk/figlet.js (figlet)

v1.11.0

Compare Source

Added Future Thin and Future Smooth fonts.

v1.10.0

Compare Source

• Added the fonts: Classy, Coder Mini, and Font Font.
• Renamed "ANSI-Compact" to "ANSI Compact" (with backward compatibility).
• Fixed the "U" characters in the "Isometric 4" font.

v1.9.4

Compare Source

• Added the ANSI-Compact font
• Some adjustments for older versions of Node (#​146)

jprichardson/node-fs-extra (fs-extra)

v11.3.4

Compare Source

• Fix bug where calling ensureSymlink/ensureSymlinkSync with a relative srcPath would fail if the symlink already existed (#​1038, #​1064)

v11.3.3

Compare Source

• Fix copying symlink when destination is a symlink to the same target (#​1019, #​1060)

igorshubovych/markdownlint-cli (markdownlint-cli)

v0.48.0

Compare Source

• Update all dependencies via Dependabot

v0.47.0

Compare Source

• Add output and exit code support for warnings
• Update markdownlint dependency to 0.40.0
  • Improve MD011/MD013/MD051/MD060
• Update all dependencies via Dependabot

v0.46.0

Compare Source

• Replace glob dependency with tinyglobby (smaller and fewer dependencies)
• Update markdownlint dependency to 0.39.0
  • Add MD060/table-column-style
  • Improve MD001/MD007/MD009/MD010/MD029/MD033/MD037/MD059
• Update all dependencies via Dependabot

sindresorhus/ora (ora)

v9.3.0

Compare Source

• Reduce flicker in rendering 2ab4f76

---

v9.2.0

Compare Source

• Update stdin-discarder dependency (#​251) 020eaba

---

v9.1.0

Compare Source

• Support external writes to stream (console.log) while spinning d2b543a
• Replace strip-ansi dependency with native stripVTControlCharacters (#​249) 68d50e5

---

prettier/prettier (prettier)

v3.8.2

Compare Source

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)

// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

styleguidist/react-docgen-typescript (react-docgen-typescript)

v2.4.0: v.2.4.0

Compare Source

• feat: Improve subcomponent and components with "parts" exports - thanks to @​cgatian PR #​514
• feat: Set esModuleInterop as default config of parse - thanks to HUST-SE-LY PR #​511
• feat: Support extracting defaults from renamed destructuring - thanks to @​mrginglymus PR #​507
• perf improvements - thanks to @​adbutterfield PR #​504
• feat: Add option for sorting union members - thanks to @​pwolfert PR #​503
• Vulnerable dependencies updated

v2.3.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Monday every 9 weeks of the year starting on the 1st week"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.