chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/core (source)	7.28.4 -> 7.28.5
@babel/preset-env (source)	7.28.3 -> 7.28.5
@types/express (source)	5.0.3 -> 5.0.4
@types/micromatch (source)	4.0.9 -> 4.0.10
bun (source)	1.3.0 -> 1.3.1
estree-util-value-to-estree	3.4.1 -> 3.5.0
graphql-sse	2.5.4 -> 2.6.0
lint-staged	16.2.5 -> 16.2.6
puppeteer (source)	24.26.0 -> 24.26.1
svelte (source)	5.41.1 -> 5.41.3
wrangler (source)	4.44.0 -> 4.45.0

---

Release Notes

babel/babel (@​babel/core)

v7.28.5

Compare Source

👓 Spec Compliance

• babel-parser
  • #​17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel-helper-validator-identifier
  • #​17501 fix: update identifier to unicode 17 (@​fisker)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #​17534 Allow mixing private destructuring and rest (@​CO0Ki3)
• babel-parser
  • #​17521 Improve @babel/parser error typing (@​JLHwung)
  • #​17491 fix: improve ts-only declaration parsing (@​JLHwung)
• babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • #​17519 fix: rest correctly returns plain array (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • #​17503 Fix JSXIdentifier handling in isReferencedIdentifier (@​JLHwung)
• babel-traverse
  • #​17504 fix: ensure scope.push register in anonymous fn (@​JLHwung)

🏠 Internal

• babel-types
  • #​17494 Type checking babel-types scripts (@​JLHwung)

🏃‍♀️ Performance

• babel-core
  • #​17490 Faster finding of locations in buildCodeFrameError (@​liuxingbaoyu)

oven-sh/bun (bun)

v1.3.1

Compare Source

remcohaszing/estree-util-value-to-estree (estree-util-value-to-estree)

v3.5.0

Compare Source

• af5a2bd Add support for serializing custom values in #​6
• ec6da00 Allow passing undefined as any option

Full Changelog: remcohaszing/estree-util-value-to-estree@v3.4.1...v3.5.0

enisdenjo/graphql-sse (graphql-sse)

v2.6.0

Compare Source

Features

• client: Support dynamic URLs and headers per request for distinct connection mode (#​124) (7be7251), closes #​110 #​113

2.5.4 (2025-01-10)

Bug Fixes

• client: Conversion to async iterable from Response.body (#​114) (f2adc92)

2.5.3 (2024-03-27)

Bug Fixes

• use/fastify: Include middleware headers (134c1b0), closes #​91

2.5.2 (2023-12-20)

Bug Fixes

• remove package.json workspaces entry in release (c6dc093)

2.5.1 (2023-12-14)

Bug Fixes

• use/koa: Use parsed body from request (#​87) (b290b90)

lint-staged/lint-staged (lint-staged)

v16.2.6

Compare Source

Patch Changes

• #​1693 33d4502 Thanks @​Adrian-Baran-GY! - Fix problems with --continue-on-error option, where tasks might have still been killed (SIGINT) when one of them failed.

puppeteer/puppeteer (puppeteer)

v24.26.1

Compare Source

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 24.26.0 to 24.26.1

🛠️ Fixes

• a11y: expose the url property for links (#​14357) (93d098b)
• roll to Chrome 141.0.7390.122 (#​14360) (f2fef81)

sveltejs/svelte (svelte)

v5.41.3

Compare Source

Patch Changes

• chore: exclude vite optimized deps from stack traces (#​17008)

• perf: skip repeatedly traversing the same derived (#​17016)

v5.41.2

Compare Source

Patch Changes

• fix: keep batches alive until all async work is complete (#​16971)

• fix: don't preserve reactivity context across function boundaries (#​17002)

• fix: make $inspect logs come from the callsite (#​17001)

• fix: ensure guards (eg. if, each, key) run before their contents (#​16930)

cloudflare/workers-sdk (wrangler)

v4.45.0

Compare Source

Minor Changes

• #​11030 1a8088a Thanks @​penalosa! - Enable automatic resource provisioning by default in Wrangler. This is still an experimental feature, but we're turning on the flag by default to make it easier for people to test it and try it out. You can disable the feature using the --no-x-provision flag. It currently works for R2, D1, and KV bindings.

  To use this feature, add a binding to your config file without a resource ID:

  {
  	"kv_namespaces": [{ "binding": "MY_KV" }],
  	"d1_databases": [{ "binding": "MY_DB" }],
  	"r2_buckets": [{ "binding": "MY_R2" }],
  }

  wrangler dev will automatically create these resources for you locally, and when you next run wrangler deploy Wrangler will call the Cloudflare API to create the requested resources and link them to your Worker. They'll stay linked across deploys, and you don't need to add the resource IDs to the config file for future deploys to work. This is especially good for shared templates, which now no longer need to include account-specific resource ID when adding a binding.

Patch Changes

• #​11037 4bd4c29 Thanks @​danielrs! - Better Wrangler subdomain defaults warning.

  Improves the warnings that we show users when either worker_dev or preview_urls are missing.

• #​10927 31e1330 Thanks @​dom96! - Implements python_modules.excludes wrangler config field

  [python_modules]
  excludes = ["**/*.pyc", "**/__pycache__"]

• #​10741 2f57345 Thanks @​penalosa! - Remove obsolete --x-remote-bindings flag

• Updated dependencies [ca6c010]:

  • miniflare@​4.20251011.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: b155a7f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

💻 Website Preview

The latest changes are available as preview in: https://pr-7616.graphql-tools.pages.dev