fix(deps): update all dependencies by renovate[bot] · Pull Request #380 · JounQin/react-hackernews

renovate · 2025-04-01T01:48:09Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@1stg/app-config (source)	`^10.0.1` → `^15.0.0`	devDependencies	major
@babel/node (source)	`^7.23.9` → `^8.0.0`	devDependencies	major
@commitlint/cli (source)	`^18.6.1` → `^21.0.0`	devDependencies	major
@types/webpack (source)	`^4.41.38` → `^5.0.0`	devDependencies	major
actions/checkout	`v4` → `v7`	action	major
actions/setup-node	`v4` → `v6`	action	major
babel-loader	`^8.3.0` → `^10.0.0`	devDependencies	major
cross-env	`^7.0.3` → `^10.0.0`	dependencies	major
css-loader	`^5.2.7` → `^7.0.0`	devDependencies	major
eslint (source)	`^8.56.0` → `^10.0.0`	devDependencies	major
eslint-import-resolver-typescript	`^3.6.1` → `^4.0.0`	devDependencies	major
github/codeql-action	`v3` → `v4`	action	major
history	`^4.10.1` → `^5.0.0`	dependencies	major
koa-cash	`^4.1.1` → `^5.0.0`	dependencies	major
koa-logger	`^3.2.1` → `^4.0.0`	dependencies	major
lint-staged	`^15.2.2` → `^17.0.0`	devDependencies	major
lru-cache	`^10.1.0` → `^11.0.0`	dependencies	major
mini-css-extract-plugin	`^1.6.2` → `^2.0.0`	devDependencies	major
node (source)	`16.20.2` → `24.18.0`		major
npm-run-all2	`^6.1.2` → `^9.0.0`	devDependencies	major
postcss-loader	`^4.3.0` → `^8.0.0`	devDependencies	major
react (source)	`^18.2.0` → `^19.0.0`	dependencies	major
react-dom (source)	`^18.2.0` → `^19.0.0`	dependencies	major
react-router (source)	`^5.3.4` → `^8.0.0`	dependencies	major
react-router-dom (source)	`^5.3.4` → `^7.0.0`	dependencies	major
rimraf	`^5.0.5` → `^6.0.0`	devDependencies	major
sass-loader	`^10.5.2` → `^17.0.0`	devDependencies	major
stylelint (source)	`^16.1.0` → `^17.0.0`	devDependencies	major
webpack	`^4.47.0` → `^5.0.0`	devDependencies	major
webpack-cli (source)	`^4.10.0` → `^7.0.0`	devDependencies	major
webpack-merge	`^5.10.0` → `^6.0.0`	devDependencies	major
yarn (source)	`3.8.5` → `4.17.1`	packageManager	major

Release Notes

1stG/configs (@1stg/app-config)

`v15.0.0`

Compare Source

Major Changes

#393 3f70b26 Thanks @JounQin! - chore: bump commitlint
#393 3f70b26 Thanks @JounQin! - chore: bump typescript v6

Patch Changes

Updated dependencies [3f70b26, 3f70b26, 3f70b26]:
- @1stg/prettier-config@5.4.0
- @1stg/eslint-config@10.3.0
- @1stg/remark-preset@3.2.0
- @1stg/babel-preset@4.2.0
- @1stg/commitlint-config@6.0.0
- @1stg/tsconfig@4.0.0
- @1stg/nano-staged@0.3.1

`v14.3.0`

Compare Source

Minor Changes

#388 5343736 Thanks @JounQin! - fix: clarify correct engines field due to 1stg/prettier-config

Patch Changes

Updated dependencies [97cedcc, 5343736, 97cedcc]:
- @1stg/nano-staged@0.3.0
- @1stg/prettier-config@5.3.1

`v14.2.0`

Compare Source

Minor Changes

#385 a7ee3ee Thanks @JounQin! - chore(deps): bump related config packages

Patch Changes

Updated dependencies [4c2cbd7, 4c2cbd7, a7ee3ee]:
- @1stg/eslint-config@10.2.0
- @1stg/prettier-config@5.3.0
- @1stg/nano-staged@0.2.1

`v14.1.0`

Compare Source

Minor Changes

#377 ed8b7e5 Thanks @JounQin! - feat: enable eslint-plugin-node-dependencies conditionally

Patch Changes

Updated dependencies [ed8b7e5, ed8b7e5, ed8b7e5]:
- @1stg/babel-preset@4.1.0
- @1stg/commitlint-config@5.1.0
- @1stg/nano-staged@0.2.0
- @1stg/simple-git-hooks@2.1.0
- @1stg/eslint-config@10.1.0
- @1stg/markuplint-config@4.0.7
- @1stg/prettier-config@5.2.1
- @1stg/remark-preset@3.1.2

`v14.0.0`

Compare Source

Major Changes

#371 3cbd4b7 Thanks @JounQin! - feat!: migrate eslint-plugin-unicorn to eslint-plugin-unicorn-x
#372 f6e2755 Thanks @JounQin! - feat!: use n.convertPath setting for hashbang rule

Patch Changes

Updated dependencies [3cbd4b7, f6e2755]:
- @1stg/eslint-config@10.0.0

`v13.1.0`

Compare Source

Minor Changes

#367 94685f7 Thanks @JounQin! - chore(eslint): bump eslint-plugin-unicorn to v59.0.1

Major Changes

#341 8527c5f Thanks @JounQin! - feat(eslint-config)!: mark all framework plugins as optional peer
#342 3945e4f Thanks @JounQin! - feat!: migrate from lint-staged to nano-staged

Patch Changes

Updated dependencies [8527c5f, fb92907, 4a1925b, 3945e4f]:
- @1stg/eslint-config@9.0.0
- @1stg/remark-preset@3.1.0
- @1stg/prettier-config@5.1.0
- @1stg/simple-git-hooks@2.0.0
- @1stg/nano-staged@0.1.0

`v12.0.1`

Compare Source

Patch Changes

#336 fa39ecf Thanks @JounQin! - chore: bump all (dev) deps
Updated dependencies [fa39ecf]:
- @1stg/browserslist-config@2.1.3
- @1stg/common-config@12.0.1
- @1stg/postcss-config@6.0.5

`v12.0.0`

Compare Source

Major Changes

#329 c08b298 Thanks @JounQin! - chore: bump prettier-plugin-pkg with different orders for types related entries

Patch Changes

Updated dependencies [c08b298, c08b298]:
- @1stg/common-config@12.0.0
- @1stg/stylelint-config@6.0.4

`v11.1.2`

Compare Source

Patch Changes

#325 cf9c358 Thanks @JounQin! - fix(eslint-config): enable curly correctly due to config-prettier
Updated dependencies [cf9c358]:
- @1stg/browserslist-config@2.1.2
- @1stg/common-config@11.1.2
- @1stg/postcss-config@6.0.4

`v11.1.1`

Compare Source

Patch Changes

#322 8fc446d Thanks @JounQin! - chore(prettier-config): bump sh plugin
Updated dependencies [8fc446d]:
- @1stg/common-config@11.1.1

`v11.1.0`

Compare Source

Minor Changes

692226d Thanks @JounQin! - chore(eslint-config): bump mdx/prettier/unicorn plugins

Patch Changes

Updated dependencies [692226d]:
- @1stg/common-config@11.1.0

`v11.0.3`

Compare Source

Patch Changes

#309 5dbb419 Thanks @JounQin! - chore(eslint-config): enable destructuring: all for prefer-const

chore: bump all deps
Updated dependencies [5dbb419]:
- @1stg/browserslist-config@2.1.1
- @1stg/common-config@11.0.5
- @1stg/postcss-config@6.0.2
- @1stg/stylelint-config@6.0.2

`v11.0.2`

Compare Source

Patch Changes

3227ee5 Thanks @JounQin! - chore(eslint-config): drop outdated eslint-formatter-friendly
Updated dependencies [3227ee5]:
- @1stg/common-config@11.0.4

`v11.0.1`

Compare Source

Patch Changes

#296 2cc92e1 Thanks @JounQin! - chore(remark-preset): bump major version
Updated dependencies [2cc92e1]:
- @1stg/common-config@11.0.3

`v11.0.0`

Compare Source

Major Changes

#284 db3b78b Thanks @JounQin! - chore: bump all (dev) deps

Patch Changes

Updated dependencies [db3b78b]:
- @1stg/browserslist-config@2.0.1
- @1stg/common-config@11.0.0
- @1stg/stylelint-config@6.0.1

babel/babel (@babel/node)

`v8.0.1`

Compare Source

💥 Breaking Change

babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone
- #18079 Actually remove preset-env's useBuiltIns (@nicolo-ribaudo)

`v8.0.0`

Compare Source

👓 Spec Compliance

babel-core
- #18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

💥 Breaking Change

babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
- #18069 Fallback to assuming ESM support with modules: auto (@nicolo-ribaudo)
babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
- #18036 Remove corejs exports for @babe/runtime-corejs3 (@liuxingbaoyu)
babel-parser
- #18034 Remove locations: "packed" (@liuxingbaoyu)

🐛 Bug Fix

babel-generator
- #18046 fix(generator): improve new callee parens check (@JLHwung)
babel-plugin-transform-modules-systemjs
- #18032 fix(systemjs): support proto as an export name (@JLHwung)

📝 Documentation

#18070 Add EOL date for Babel 7 (end of June 2027) to SECURITY.md (@nicolo-ribaudo)

🏠 Internal

#18018 ci: enforce yarn integrity (@JLHwung)

🏃‍♀️ Performance

babel-core
- #18039 perf: Only extract source map comments at the end of the file (@liuxingbaoyu)

`v7.29.7`

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

`v7.29.0`

Compare Source

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types
- #17750 [7.x backport] Add attributes import declaration builder (@JLHwung)
babel-standalone
- #17663 [7.x backport] feat(standalone): export async transform (@JLHwung)
- #17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser
- #17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)
- #17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)
babel-traverse
- #17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)
babel-plugin-transform-block-scoping, babel-traverse
- #17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3
- #17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)
Huáng Jùnliàng (@JLHwung)
Nicolò Ribaudo (@nicolo-ribaudo)
@liuxingbaoyu
@magic-akari

`v7.28.6`

Compare Source

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
- #17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)
babel-plugin-transform-regenerator
- #17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)
babel-plugin-transform-react-jsx
- #17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone
- #17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
- #17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-plugin-transform-react-jsx
- #17555 perf: Use lighter traversal for jsx __source,__self (@liuxingbaoyu)

Committers: 7

Babel Bot (@babel-bot)
Eliot Pontarelli (@kolvian)
Huáng Jùnliàng (@JLHwung)
Kadhirash Sivakumar (@kadhirash)
Nicolò Ribaudo (@nicolo-ribaudo)
@liuxingbaoyu
coderaiser (@coderaiser)

`v7.28.0`

Compare Source

🚀 New Feature

babel-node
- #17147 Support top level await in node repl (@liuxingbaoyu)
babel-types
- #17258 feat(matchesPattern): support super/private/meta (@JLHwung)
babel-compat-data, babel-preset-env
- #17355 Add explicit resource management to preset-env (@JLHwung)
babel-core, babel-parser
- #17390 Support sourceType: "commonjs" (@JLHwung)
babel-generator, babel-parser
- #17346 Materialize explicitResourceManagement parser plugin (@JLHwung)
babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
- #17391 LVal coverage updates (Part 2) (@JLHwung)
babel-parser, babel-traverse, babel-types
- #17378 Accept bigints in t.bigIntLiteral factory (@JLHwung)
babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
- #17277 Transform discard binding (@JLHwung)
babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
- #17163 Parse discard binding (@JLHwung)

🐛 Bug Fix

babel-helper-globals, babel-plugin-transform-classes, babel-traverse
- #17297 Create babel-helper-globals (@JLHwung)
babel-types
- #17009 feature: TSTypeOperator: keyof (#16799) (@coderaiser)

🏠 Internal

babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
- #17403 Update babel-polyfill packages (@nicolo-ribaudo)

`v7.27.1`

Compare Source

👓 Spec Compliance

babel-parser
- #17254 Allow using of as lexical declaration within for (@JLHwung)
- #17230 Disallow get/set in TSPropertySignature (@JLHwung)
babel-parser, babel-types
- #17193 Stricter TSImportType options parsing (@JLHwung)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
- #17137 fix: do expressions should allow early exit (@kermanx)
babel-helper-wrap-function, babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (@magic-akari)
babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
- #17231 fix apply()/call() annotated as pure (@Lacsw)
babel-helper-fixtures, babel-parser
- #17233 Create ChainExpression within TSInstantiationExpression (@JLHwung)
babel-generator, babel-parser
- #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@JLHwung)
babel-parser
- #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@JLHwung)
- #17080 Fix start of TSParameterProperty (@JLHwung)
babel-compat-data, babel-preset-env
- #17228 Update firefox bugfix compat data (@JLHwung)
babel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (@liuxingbaoyu)
babel-generator
- #17216 Fix: support const type parameter in generator (@JLHwung)

💅 Polish

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
- #17221 Reduce generated names size for the 10th-11th (@nicolo-ribaudo)

🏠 Internal

babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #17263 Remove unused regenerator-runtime dep in @babel/runtime (@nicolo-ribaudo)
babel-compat-data, babel-preset-env
- #17256 Tune plugin compat data (@JLHwung)
babel-compat-data, babel-standalone
- #17236 migrate babel-compat-data build script to mjs (@JLHwung)
Other
- #17232 Bump typescript-eslint to 8.29.1 (@JLHwung)
- #17219 test: add basic typescript-eslint integration tests (@JLHwung)
- #17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)
babel-register
- #16844 Migrate @babel/register to cts (@liuxingbaoyu)
babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types
- #17207 Enforce node protocol import (@JLHwung)
babel-plugin-transform-regenerator
- #17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)
- #17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)
babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)
babel-helpers, babel-plugin-transform-regenerator
- #17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)
- #17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)
babel-helpers
- #17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)

🔬 Output optimization

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
- #16538 Reduce interopRequireWildcard size (@liuxingbaoyu)
babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
- #17213 Reduce regeneratorRuntime size (@liuxingbaoyu)

`v7.26.0`

Compare Source

🚀 New Feature

babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
- #16850 Enable import attributes parsing by default (@nicolo-ribaudo)
babel-core
- #16862 feat: support async plugin's pre/post (@timofei-iatsenko)
babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
- #16692 Add transform-regexp-modifiers to preset-env (@JLHwung)
babel-parser
- #16849 feat: add startIndex parser option (@DylanPiercey)
babel-generator, babel-parser, babel-plugin-syntax-flow
- #16841 Always enable parsing of Flow enums (@nicolo-ribaudo)
babel-helpers, babel-preset-typescript, babel-runtime-corejs3
- #16794 Support import() in rewriteImportExtensions (@liuxingbaoyu)
babel-generator, babel-parser
- #16708 Add experimental format-preserving mode to @babel/generator (@nicolo-ribaudo)

🐛 Bug Fix

babel-core
- #16928 Workaround Node.js bug for parallel loading of TLA modules (@nicolo-ribaudo)
- #16926 Fix loading of modules with TLA in Node.js 23 (@nicolo-ribaudo)

💅 Polish

babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone
- #16924 Rename proposal-json-modules to transform-json-modules ([@nicolo-riba

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2025-04-01T01:48:14Z

⚠️ No Changeset found

Latest commit: 7033c50

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2025-04-01T01:48:15Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
react-hackernews	Error			Oct 23, 2025 5:03pm

coderabbitai · 2025-04-01T01:48:17Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🔍 Trigger a full review

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

socket-security · 2025-04-06T09:22:31Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `chrono-node` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `npm/@1stg/app-config@15.0.0` → `npm/chrono-node@2.9.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/chrono-node@2.9.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `css-tree` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `npm/@1stg/app-config@15.0.0` → `npm/stylelint@17.14.0` → `npm/css-tree@3.2.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/css-tree@3.2.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `eslint-plugin-jsdoc` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `npm/@1stg/app-config@15.0.0` → `npm/eslint-plugin-jsdoc@63.0.12` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/eslint-plugin-jsdoc@63.0.12`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `jiti` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `npm/eslint@10.6.0` → `npm/@commitlint/cli@21.2.1` → `npm/jiti@2.6.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/jiti@2.6.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `webpack` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → `npm/webpack@5.108.4` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/webpack@5.108.4`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

socket-security · 2026-03-27T19:16:56Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@1stg/app-config@10.0.1 ⏵ 15.0.0	⁺⁵	⁺⁵	⁺⁴
@types/webpack@4.41.38 ⏵ 5.28.5		^-18
react-router-dom@5.3.4 ⏵ 7.18.1	⁺¹	^-18
lru-cache@7.18.3 ⏵ 11.5.2	^-27	^-1	^-3
@commitlint/cli@18.4.4 ⏵ 21.2.1		^-1	^-1
react-router@5.3.4 ⏵ 8.2.0	^-23	^-5	^-1
koa-cash@4.1.1 ⏵ 5.0.2	⁺¹		⁺⁴
@babel/node@7.23.9 ⏵ 8.0.1	⁺¹	⁺¹	^-1
history@4.10.1 ⏵ 5.3.0	⁺²
webpack-merge@5.10.0 ⏵ 6.0.1	⁺¹
cross-env@7.0.3 ⏵ 10.1.0
webpack@4.47.0 ⏵ 5.108.4	^-4	^-7	⁺¹
rimraf@3.0.2 ⏵ 6.1.3		⁺¹	⁺³³
react@18.2.0 ⏵ 19.2.7	⁺¹
css-loader@5.2.7 ⏵ 7.1.4	⁺¹
babel-loader@8.3.0 ⏵ 10.1.1	⁺¹
mini-css-extract-plugin@1.6.2 ⏵ 2.10.2	⁺¹
koa-logger@3.2.1 ⏵ 4.0.0		^-1	⁺¹
postcss-loader@4.3.0 ⏵ 8.2.1	⁺¹
eslint-import-resolver-typescript@3.6.1 ⏵ 4.4.5	⁺¹
npm-run-all2@6.1.2 ⏵ 9.0.2	⁺¹	⁺²	⁺¹
sass-loader@10.5.2 ⏵ 17.0.0	⁺¹
react-dom@18.2.0 ⏵ 19.2.7	⁺¹	⁺¹
webpack-cli@4.10.0 ⏵ 7.2.1			⁺²
eslint@8.56.0 ⏵ 10.6.0	⁺²		⁺⁴⁵
lint-staged@15.2.1 ⏵ 17.0.8	⁺¹	⁺¹	^-1
stylelint@16.1.0 ⏵ 17.14.0	⁺¹

View full report

renovate Bot force-pushed the renovate/all branch from 354db17 to b4dee46 Compare April 6, 2025 09:22

vercel Bot had a problem deploying to Preview April 6, 2025 09:22 Failure

renovate Bot force-pushed the renovate/all branch from b4dee46 to 256b130 Compare April 7, 2025 11:08

vercel Bot had a problem deploying to Preview April 7, 2025 11:08 Failure

renovate Bot force-pushed the renovate/all branch from 256b130 to cc0e219 Compare April 8, 2025 02:16

vercel Bot had a problem deploying to Preview April 8, 2025 02:16 Failure

renovate Bot force-pushed the renovate/all branch from cc0e219 to 98dca34 Compare April 9, 2025 19:01

vercel Bot had a problem deploying to Preview April 9, 2025 19:02 Failure

renovate Bot force-pushed the renovate/all branch from 98dca34 to 7b1a1e2 Compare April 14, 2025 07:04

vercel Bot had a problem deploying to Preview April 14, 2025 07:04 Failure

renovate Bot force-pushed the renovate/all branch from 7b1a1e2 to c824e73 Compare April 14, 2025 11:42

vercel Bot had a problem deploying to Preview April 14, 2025 11:42 Failure

renovate Bot force-pushed the renovate/all branch from c824e73 to 8e2c201 Compare April 23, 2025 12:04

vercel Bot had a problem deploying to Preview April 23, 2025 12:04 Failure

renovate Bot force-pushed the renovate/all branch from 8e2c201 to 574d4b6 Compare April 23, 2025 15:53

vercel Bot had a problem deploying to Preview April 23, 2025 15:53 Failure

renovate Bot force-pushed the renovate/all branch from 574d4b6 to 38ecf67 Compare May 2, 2025 09:51

vercel Bot had a problem deploying to Preview May 2, 2025 09:51 Failure

renovate Bot force-pushed the renovate/all branch from 38ecf67 to 3ab2bbd Compare May 2, 2025 19:23

vercel Bot had a problem deploying to Preview May 2, 2025 19:23 Failure

renovate Bot force-pushed the renovate/all branch from 3ab2bbd to d35b238 Compare May 10, 2025 17:51

vercel Bot had a problem deploying to Preview May 10, 2025 17:51 Failure

renovate Bot force-pushed the renovate/all branch from d35b238 to 0c84720 Compare May 14, 2025 23:20

vercel Bot had a problem deploying to Preview May 14, 2025 23:20 Failure

renovate Bot force-pushed the renovate/all branch from 0c84720 to 44e794a Compare May 16, 2025 10:48

vercel Bot had a problem deploying to Preview May 16, 2025 10:48 Failure

renovate Bot force-pushed the renovate/all branch from c03aead to 46b2089 Compare June 30, 2025 13:30

vercel Bot had a problem deploying to Preview June 30, 2025 13:30 Failure

renovate Bot force-pushed the renovate/all branch from 46b2089 to 224d732 Compare July 15, 2025 23:32

vercel Bot had a problem deploying to Preview July 15, 2025 23:32 Failure

renovate Bot force-pushed the renovate/all branch from 224d732 to 5f8493d Compare July 21, 2025 15:57

vercel Bot had a problem deploying to Preview July 21, 2025 15:57 Failure

renovate Bot force-pushed the renovate/all branch from 5f8493d to 242338f Compare July 23, 2025 13:41

vercel Bot had a problem deploying to Preview July 23, 2025 13:41 Failure

renovate Bot force-pushed the renovate/all branch from 242338f to dc60c4c Compare July 24, 2025 22:54

vercel Bot had a problem deploying to Preview July 24, 2025 22:55 Failure

renovate Bot force-pushed the renovate/all branch from dc60c4c to ee62fc1 Compare July 25, 2025 15:28

vercel Bot had a problem deploying to Preview July 25, 2025 15:28 Failure

renovate Bot force-pushed the renovate/all branch from ee62fc1 to dffd34f Compare July 25, 2025 22:33

vercel Bot had a problem deploying to Preview July 25, 2025 22:33 Failure

renovate Bot force-pushed the renovate/all branch from dffd34f to aa0b41a Compare July 28, 2025 17:06

vercel Bot had a problem deploying to Preview July 28, 2025 17:06 Failure

renovate Bot force-pushed the renovate/all branch from aa0b41a to f95269d Compare August 7, 2025 11:34

vercel Bot had a problem deploying to Preview August 7, 2025 11:34 Failure

renovate Bot force-pushed the renovate/all branch from f95269d to bc303eb Compare August 7, 2025 18:14

vercel Bot had a problem deploying to Preview August 7, 2025 18:14 Failure

renovate Bot force-pushed the renovate/all branch from bc303eb to d06a908 Compare August 7, 2025 21:16

vercel Bot had a problem deploying to Preview August 7, 2025 21:16 Failure

renovate Bot force-pushed the renovate/all branch from d06a908 to ebe09c0 Compare August 8, 2025 12:25

vercel Bot had a problem deploying to Preview August 8, 2025 12:25 Failure

renovate Bot force-pushed the renovate/all branch from ebe09c0 to 25a67ed Compare August 8, 2025 17:23

vercel Bot had a problem deploying to Preview August 8, 2025 17:24 Failure

renovate Bot force-pushed the renovate/all branch from 25a67ed to 9c48d0d Compare August 8, 2025 21:45

vercel Bot had a problem deploying to Preview August 8, 2025 21:45 Failure

fix(deps): update all dependencies

7033c50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all dependencies#380

fix(deps): update all dependencies#380
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

renovate Bot commented Apr 1, 2025 •

edited

Loading

Uh oh!

changeset-bot Bot commented Apr 1, 2025 •

edited

Loading

Uh oh!

vercel Bot commented Apr 1, 2025 •

edited

Loading

Uh oh!

coderabbitai Bot commented Apr 1, 2025 •

edited

Loading

Review skipped

Uh oh!

socket-security Bot commented Apr 6, 2025 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Major Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Major Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Major Changes

Patch Changes

Patch Changes

Major Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Major Changes

Patch Changes

💥 Breaking Change

👓 Spec Compliance

💥 Breaking Change

🐛 Bug Fix

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

v7.29.7 (2026-05-25)

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 7

🚀 New Feature

🐛 Bug Fix

🏠 Internal

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

🚀 New Feature

🐛 Bug Fix

💅 Polish

Configuration

Uh oh!

changeset-bot Bot commented Apr 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

vercel Bot commented Apr 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot commented Apr 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

socket-security Bot commented Apr 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented Apr 1, 2025 •

edited

Loading

changeset-bot Bot commented Apr 1, 2025 •

edited

Loading

vercel Bot commented Apr 1, 2025 •

edited

Loading

coderabbitai Bot commented Apr 1, 2025 •

edited

Loading

socket-security Bot commented Apr 6, 2025 •

edited

Loading

socket-security Bot commented Mar 27, 2026 •

edited

Loading