[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@babel/core (source)	8.0.9 → 8.1.0			devDependencies	minor
@ehuelsmann/jest-openapi (source)	0.19.1 → 0.19.2			devDependencies	patch
@redocly/cli	2.71.2 → 2.73.0			devDependencies	minor	2.76.0 (+2)
coveralls	2.2.5 → 2.2.6			orb	patch
eslint (source)	10.13.0 → 10.14.0			devDependencies	minor
eslint-plugin-package-json	1.12.0 → 1.14.0			devDependencies	minor
globals	17.13.0 → 17.14.0			devDependencies	minor
stylelint-order	8.1.2 → 8.1.3			devDependencies	patch
vue-i18n (source)	11.4.16 → 11.4.18			dependencies	patch

---

Release Notes

babel/babel (@​babel/core)

v8.1.0

Compare Source

🚀 New Feature

• babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • #​18316 Add transform support for filtered namespaces (@​nicolo-ribaudo)
• babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • #​18311 Add parsing&printing support for filtered namespaces (@​nicolo-ribaudo)
• Other
  • #​18009 Add babel/no-empty eslint rule (@​JLHwung)
  • #​17956 Add eslint-plugin configs (@​JLHwung)
• babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • #​17817 Add support for type: bytes and type: text imports (@​nicolo-ribaudo)
• babel-generator, babel-parser, babel-traverse, babel-types
  • #​17624 Add parse support for the "structs" proposal (only non-shared) (@​JLHwung)
• babel-generator, babel-parser, babel-types
  • #​17980 Parse Import Sync proposal (@​JLHwung)
• babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • #​18310 Add parsing&printing support for export defer (@​nicolo-ribaudo)
• babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • #​18006 Add experimental support for range mappings in source maps (@​nicolo-ribaudo)
• babel-core
  • #​18275 feat(core): export generate from babel-generator (@​JLHwung)
• babel-core, babel-plugin-transform-classes
  • #​18387 Add noUninitializedThis assumption (@​nicolo-ribaudo)
  • #​18386 Add noClassPrototypeAssign and noConstructorPrimitiveReturn (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-parser
  • #​18444 fix(parser): allow lone yield before in in an Annex B for-in init (@​JLHwung)
  • #​18443 fix(parser): respect unicode escape in isUnparsedContextual (@​JLHwung)
• babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining
  • #​18477 Fix optional call losing the receiver through a TS instantiation expression (@​Kjubikstronk)

🔬 Output optimization

• babel-helpers, babel-runtime-corejs3
  • #​18435 polish: shrink importDeferProxy size (@​JLHwung)

v8.0.10

Compare Source

🐛 Bug Fix

• babel-parser
  • #​18420 fix(parser): improve radix literal rounding (@​JLHwung)
  • #​18372 fix(parser): allow parenthesized assignment target in arrow initializer (@​JLHwung)
  • #​18410 fix(parser): do not record strict mode errors during lookahead (@​JLHwung)
  • #​18433 fix(parser): invalid expectOnePlugin usage (@​JLHwung)
  • #​18409 fix(parser): handle ASI after let followed by a reserved word on the next line (@​JLHwung)
  • #​18406 fix(parser): parser should not crash for import defer {} (@​JLHwung)
  • #​18407 fix(parser): record start location in startNodeAt (@​JLHwung)
• babel-plugin-transform-block-scoping
  • #​18371 fix: closures in for-loop test and update capture wrong binding (@​joellemd)
• babel-generator
  • #​18418 fix(generator): keep aliases of string-literal module specifiers (@​JLHwung)
  • #​18427 Fix missing parentheses around TypeScript assertion targets (@​dagemawinegash)
  • #​18324 fix: invalid minified: true output for new expression (@​JLHwung)
  • #​18437 fix(generator): preserve type modifier in TSImportEqualsDeclaration (@​saiyam-jain-dev)
  • #​18424 Keep parentheses around TSInstantiationExpression operand (@​yulman2207)
  • #​18417 fix(generator): do not disallow line break after import source (@​JLHwung)
• babel-plugin-transform-optional-chaining, babel-traverse
  • #​18422 fix: Scope#push should not push iife param after rest element (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​18224 fix: avoid removable fields as decorator evaluation hosts (@​nyan-left)
• babel-types
  • #​18411 Allow member expression values in ObjectPattern properties (@​JLHwung)
• babel-plugin-transform-classes
  • #​18384 Leave loose class prototype mutable with accessors (@​nicolo-ribaudo)

🏠 Internal

• babel-build-external-helpers, babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-regenerator, babel-runtime-corejs3, babel-runtime
  • #​18397 Mangle top level names in helpers (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-traverse
  • #​18413 perf(traverse): improve generateUid and push (@​JLHwung)

🔬 Output optimization

• babel-helpers, babel-runtime-corejs3
  • #​18325 Shrink jsx helper size (@​JLHwung)

ehuelsmann/OpenAPIValidators (@​ehuelsmann/jest-openapi)

v0.19.2

Compare Source

Redocly/redocly-cli (@​redocly/cli)

v2.73.0

Compare Source

Minor Changes

• Added usage telemetry and the onSettled hook to the generated Go, Python, and PHP clients.
  Renamed a schema named UsageTelemetry, UsageTelemetryOptions, UsageTelemetryEvent, NewUsageTelemetry, or FlushUsageTelemetry in every generated client, for example to UsageTelemetry_2, so that it does not clash with the usage telemetry code.
  If your code uses one of these generated types, update its name.

• Added the --report option to the generate-client command.
  It writes a JSON file with the operations of each API and the warnings of the run, each with a stable kind.
  A custom or ejected generator gets reportFinding in its run input, to add its own warnings to the report.

  Note: wrappableOperations from @redocly/client-generator/contracts/typescript takes reportFinding as its third argument.
  A custom or ejected swr or tanstack-query generator must pass the reportFinding that its run receives.

• Added the no-server-variables-empty-enum rule to the spec ruleset for OpenAPI 3.1 and 3.2 descriptions, where the specification requires a non-empty enum that holds the default value.

Patch Changes

• Fixed an issue where the generated PHP client threw TimeoutError for a refused connection instead of a transport error.

• Fixed an issue where the TypeScript usage telemetry counted 0 attempts for a call aborted before its first attempt, so an event had fewer attempts than calls.

• Fixed an issue where the generated PHP client retried a POST or PATCH without an Idempotency-Key, and retried a 501 or a 505 to 599.
  The default retry follows the same rule as the other generated clients.

  Note: To retry a POST or PATCH, pass an idempotencyKey to the call, or pass a retryOn callable in Config->retry.

• Updated @​redocly/client-generator to v0.9.0.

• Updated @​redocly/openapi-core to v2.73.0.

v2.72.1

Compare Source

Patch Changes

• Updated @​redocly/openapi-core to v2.72.1.

v2.72.0

Compare Source

Minor Changes

• Added a one-time announcement about the agent skills and the skills command, shown the first time you run Redocly CLI.
  To turn off announcements, set the REDOCLY_SUPPRESS_NOTIFICATIONS environment variable to true.
• Added the java generator to the generate-client command.
• Added an experimental diff command that compares two API descriptions, reports changes, and rates every change by the semver bump it requires (patch, minor, or major).
  --fail-on sets the impact that fails the run and --check-version verifies that info.version was bumped accordingly.

Patch Changes

• Fixed an issue where respect ignored the dataValue field of OpenAPI 3.2 examples when a step took its parameters or request body from the API description.
• Fixed an issue where respect ignored parameters defined on a path item when a step used operationId and took its request data from the API description.
• Updated the generate-spec, generate-arazzo, and recheck commands to print their execution time in milliseconds, the same as the lint and bundle commands.
• Updated @​redocly/client-generator to v0.8.0.
• Updated @​redocly/openapi-core to v2.72.0.
• Updated @​redocly/respect-core to v2.72.0.
• Updated @​redocly/reunite-integration to v2.72.0.

eslint/eslint (eslint)

v10.14.0

Compare Source

Features

• d23a7f9 feat: fix property descriptor handling in func-name-matching (#​21400) (xbinaryx)

Bug Fixes

• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#​21460) (lumir)
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#​21449) (xbinaryx)
• 161558a fix: handle LS, PS and empty hashbang comments (#​21419) (lumir)
• 6194939 fix: no-invalid-this crash on accessor fields without initializer (#​21442) (xbinaryx)
• 9155e14 fix: Update @​humanfs/node dependency version (#​21434) (Nicholas C. Zakas)
• cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#​21323) (dvd233)
• 5ee3915 fix: yoda invalid autofix at statement start (#​21424) (Daniel Pinto)

Documentation

• 0f94f47 docs: remove zh-hans from docs language switcher (#​21437) (lumir)
• dab466e docs: Update README (GitHub Actions Bot)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#​21452) (Pixel)
• 7697550 docs: Update README (GitHub Actions Bot)
• 0c699d5 docs: Remove Tidelift commercial support (#​21416) (Milos Djermanovic)
• 0880666 docs: update loadESLint() documentation for v10 (#​21374) (Minseon Kim)
• e06fe87 docs: Revise AI acknowledgment options in PR template (#​21414) (Nicholas C. Zakas)

Chores

• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#​21462) (Francesco Trotta)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#​21450) (renovate[bot])
• a031c40 chore: update ecosystem plugins (#​21445) (ESLint Bot)
• 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#​21429) (Milos Djermanovic)
• 276021d chore: update github/codeql-action action to v4.39.0 (#​21432) (renovate[bot])
• 449724e chore: update ecosystem plugins (#​21420) (ESLint Bot)
• 8ffeb8c chore: update dependency prettier to v3.9.10 (#​21417) (renovate[bot])

michaelfaith/eslint-plugin-package-json (eslint-plugin-package-json)

v1.14.0

Compare Source

🚀 Features

• add prefer-scoped-name rule (#​2415) (304ba67), closes #​1875

🩹 Bug Fixes

• specify-peers-locally: allow dependencies to satisfy local install if peer is optional (#​2427) (99f9b53)
• unique-dependencies: allow optional peers with a dependencies fallback (#​2426) (68c2168)

v1.13.0

Compare Source

🚀 Features

• add require-override-restrictions rule (#​2411) (27da213), closes #​1702

sindresorhus/globals (globals)

v17.14.0

Compare Source

• Update globals (2026-11-01) (#​355) 7abfb5d

---

intlify/vue-i18n (vue-i18n)

v11.4.18

Compare Source

escapeParameter: The sanitizer now also turns <script> in translations into text. A <script> does not run with v-html in the browser, but it runs when the translation is rendered on the server (SSR). (#​2757) See GHSA-jrxq-gc2q-9357.

What's Changed

🔒 Security Fixes

• fix(shared): neutralize script elements in sanitizeTranslatedHtml by @​kazupon in #​2757

Full Changelog: intlify/vue-i18n@v11.4.17...v11.4.18

v11.4.17

Compare Source

install is synchronous: app.use(i18n) now throws the errors in install. They were unhandled rejections, which left the app half-installed (and ended Node.js processes without a handler for them), so if app.use(i18n) throws after you update, the install was failing before, too. i18n.install() returns undefined instead of a Promise that never settled in development without the devtools. (#​2741)

Legacy API: A regular expression in silentTranslationWarn or silentFallbackWarn now suppresses the warnings for the keys that match it. As an option of createI18n, it suppressed all the warnings, and set to the property, it suppressed the warnings for the keys that did not match it. (#​2744)

escapeParameter: The sanitizer now also disables javascript: URLs in xlink:href, and turns <base>, <animate> and <set> in translations into text. SVG animations with <animate> or <set> in HTML messages no longer run while escapeParameter (escapeParameterHtml in the Legacy API) is enabled. (#​2756) See GHSA-473g-cvf6-mfxj.

What's Changed

🐛 Bug Fixes

• fix: make install synchronous like other Vue plugins, so that app.use() throws its errors by @​kazupon in #​2741
• fix: make a regular expression in silentTranslationWarn and silentFallbackWarn suppress the warnings for the keys that match it by @​kazupon in #​2744

🔒 Security Fixes

• fix(shared): neutralize xlink:href, base and SVG animations in sanitizeTranslatedHtml by @​kazupon in #​2756

📝️ Documentations

• docs: describe what missingWarn and fallbackWarn turn off, and how to warn only when no locale has the key by @​kazupon in #​2745

Full Changelog: intlify/vue-i18n@v11.4.16...v11.4.17

---

Configuration

📅 Schedule: (in timezone Etc/Greenwich)

• Branch creation
  • "after 11pm on friday,before 7am on saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

coverage: 57.579%. first build — renovate/master-all-minor-patch into master