build: update all non-major dependencies (main)

[angular-robot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/preset-env (source)	7.29.2 → 7.29.3
@typescript-eslint/eslint-plugin (source)	8.58.2 → 8.59.1
@typescript-eslint/parser (source)	8.58.2 → 8.59.1
@vitest/coverage-v8 (source)	4.1.4 → 4.1.5
ajv (source)	8.18.0 → 8.20.0
algoliasearch (source)	5.50.2 → 5.52.0
eslint (source)	10.2.1 → 10.3.0
globals	17.5.0 → 17.6.0
jsdom	29.0.2 → 29.1.1
ora	9.3.0 → 9.4.0
postcss (source)	8.5.10 → 8.5.13
puppeteer (source)	24.41.0 → 24.42.0
rolldown (source)	1.0.0-rc.16 → 1.0.0-rc.18
tar-stream	3.1.8 → 3.2.0
terser (source)	5.46.1 → 5.46.2
undici (source)	8.1.0 → 8.2.0
vitest (source)	4.1.4 → 4.1.5
zod (source)	4.3.6 → 4.4.2

---

• If you want to rebase/retry this PR, check this box

---

Release Notes

babel/babel (@​babel/preset-env)

v7.29.3

Compare Source

v7.29.3 (2026-04-30)

👓 Spec Compliance

• babel-parser
  • #​17923 Support flow extends bound (@​JLHwung)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
• babel-register
  • #​17915 Fix thread synchronization issues in @babel/register (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env
  • #​17788 Add bugfix plugin for Safari array rest destructuring bug (@​JLHwung)

💅 Polish

• babel-parser
  • #​17782 Improve trailing comma comment handling (@​JLHwung)

📝 Documentation

• #​17847 Replace npmjs.com links with npmx.dev (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-transform-json-modules
  • #​17818 Load async Wasm and JSON imports in parallel (@​nicolo-ribaudo)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.59.1

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] treat void as nullish in no-unnecessary-condition (#​12241)
• eslint-plugin: [no-unnecessary-type-arguments] handle instantiation expressions (#​12220)
• eslint-plugin: [no-unnecessary-type-assertion] avoid false positive in logical assignment assertions (#​12278)
• eslint-plugin: [no-unnecessary-type-assertion] preserve phantom type arguments in generic inference (#​12269)
• eslint-plugin: [no-unnecessary-type-assertion] preserve index signatures in undefined unions (#​12257)
• eslint-plugin: [no-unnecessary-type-assertion] fix crash "TypeError: checker.getTypeArguments is not a function" (#​12246)

❤️ Thank You

• anasm266 @​anasm266
• Anshika Jain @​Anshikakalpana
• Ulrich Stark
• yugo innami @​nami8824

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

🚀 Features

• eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#​11789)

❤️ Thank You

• Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.59.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.5

Compare Source

   🚀 Experimental Features

• coverage: Istanbul to support instrumenter option  -  by @​BartWaardenburg and @​AriPerkkio in #​10119 (0e0ff)

   🐞 Bug Fixes

• --project negation excludes browser instances  -  by @​felamaslen in #​10131 (9423d)
• Project color label on html reporter  -  by @​hi-ogawa in #​10142 (596f7)
• Fix vi.defineHelper called as object method  -  by @​hi-ogawa in #​10163 (122c2)
• Alias agent reporter to minimal  -  by @​sheremet-va in #​10157 (663b9)
• Respect diff config options in soft assertions  -  by @​Copilot, sheremet-va and @​sheremet-va in #​8696 (9787d)
• Respect diff config options in soft assertions "  -  by @​sheremet-va in #​8696 (7dc6d)
• ast-collect: Recognize _vi_import prefix in static test discovery  -  by @​Yejneshwar in #​10129 (32546)
• coverage: Descriptive error message when reports directory is removed during test run  -  by @​DaveT1991 and @​AriPerkkio in #​10117 (14133)
• snapshot: Increase default snapshot max output length  -  by @​hi-ogawa and Codex in #​10150 (21e66)
• ui: Fix jsx/tsx syntax highlight  -  by @​hi-ogawa in #​10152 (f1b1f)
• web-worker: Support MessagePort objects referenced inside postMessage data  -  by @​whitphx and Claude Opus 4.6 (1M context) in #​9927 and #​10124 (7ad7d)
• api: Make test-specification options writable  -  by @​sheremet-va in #​10154 (6abd5)

    View changes on GitHub

ajv-validator/ajv (ajv)

v8.20.0

Compare Source

What's Changed

• fix: add support for node 22/24, drop node 16/21 by @​jasoniangreen in #​2580
• fix: add ES2022.RegExp for RegExpIndicesArray by @​SignpostMarv in #​2604

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

algolia/algoliasearch-client-javascript (algoliasearch)

v5.52.0

Compare Source

• d275af4e18 feat(specs): add Algolia Index as a native connector in ingestion client (#​6290) by @​morganleroi
• 74e91c1cd3 fix(specs): compostion run payload example for external injected items (#​6291) by @​gavinwade12
• 7b4c9dfc5d fix(clients): push helper smooth traffic (#​6247) by @​shortcuts
• a98b7f7cd8 feat(specs): add feedsOrder to composition run params (#​6314) by @​gavinwade12

v5.51.0

Compare Source

BREAKING CHANGES: this minor version includes breaking changes in the Composition API. See below for more details.

• 00271b6ba0 feat(javascript): add transformationOptions and fix ingestion config leak (#​6252) by @​eric-zaharia
• 39ea2c5cb3 refactor(specs): split injection schema (#​6224) by @​ClaraMuller
• 544091a5f2 feat(specs): introduce recommend source in Comp API client (#​6227) by @​ClaraMuller
• f73d69aae4 fix(specs): clarify getIndexingTime (#​6276) by @​kai687
• 78ffb45894 fix(javascript): increase default retry max (#​6278) by @​eric-zaharia
• e48d5c4bbf feat(specs): query categorization (#​6258) by @​eric-zaharia

eslint/eslint (eslint)

v10.3.0

Compare Source

Features

• 379571a feat: add suggestions for no-unused-private-class-members (#​20773) (sethamus)

Bug Fixes

• b6ae5cf fix: handle unavailable require cache (#​20812) (Simon Podlipsky)
• 6fb3685 fix: rule suggestions cause continuation in class body (#​20787) (Milos Djermanovic)

Documentation

• 32cc7ab docs: fix typos in docs and comments (#​20809) (Tanuj Kanti)
• 7f47937 docs: Update README (GitHub Actions Bot)

Chores

• d32235e ci: use pnpm in eslint-flat-config-utils type integration test (#​20826) (Francesco Trotta)
• 3ffb14e chore: clean up typos in comments and JSDoc (#​20821) (Pixel998)
• 22eb58a chore: add missing continue-on-error to ecosystem-tests.yml (#​20818) (Josh Goldberg ✨)
• 88bf002 ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (#​20815) (dependabot[bot])
• 97c8c33 chore: update ilshidur/action-discord action to v0.4.0 (#​20811) (renovate[bot])
• 2f58136 chore: pin peter-evans/create-pull-request action to 5f6978f (#​20810) (renovate[bot])
• 77add7f chore: add initial ecosystem plugin tests workflow (#​19643) (Josh Goldberg ✨)
• 4023b55 test: Add unit tests for SuppressionsService.prune() (#​20797) (kuldeep kumar)
• 54080da test: add unit tests for ForkContext (#​20778) (kuldeep kumar)
• f0e2bcc test: add unit tests for SuppressionsService.suppress() method (#​20765) (kuldeep kumar)
• a7f0b94 chore: update dependency prettier to v3.8.3 (#​20782) (renovate[bot])
• 7bf93d9 chore: update TypeScript to v6 (#​20677) (sethamus)
• b42dd72 ci: bump pnpm/action-setup from 6.0.0 to 6.0.1 (#​20781) (dependabot[bot])
• 2b252be test: add unit tests for IdGenerator (#​20775) (kuldeep kumar)

sindresorhus/globals (globals)

v17.6.0

Compare Source

• Update globals (2026-05-01) (#​343) 00a4dd9

---

jsdom/jsdom (jsdom)

v29.1.1

Compare Source

• Fixed 'border-radius' computed style serialization. (@​asamuzaK)
• Fixed computed style computation when using 'background-origin' and 'background-clip' CSS properties. (@​asamuzaK)
• Significantly optimized initial calls to getComputedStyle(), before the cache warms up. (@​asamuzaK)

v29.1.0

Compare Source

• Added basic support for the ratio CSS type. (@​asamuzaK)
• Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@​asamuzaK)

sindresorhus/ora (ora)

v9.4.0

Compare Source

• Add successSymbol and failSymbol options to oraPromise 3d2e0a9

---

postcss/postcss (postcss)

v8.5.13

Compare Source

• Fixed postcss-scss commend regression.

v8.5.12

Compare Source

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

v8.5.11

Compare Source

• Fixed nested brackets parsing performance (by @​offset).

puppeteer/puppeteer (puppeteer)

v24.42.0

Compare Source

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 24.41.0 to 24.42.0

🎉 Features

• add metadata to extensions object (#​14870) (d3e190e)
• cdp: support autofilling address (#​14826) (c2acadc)
• implement URL blocklist to restrict access to unauthorized sites (#​14873) (8ad881c)

🛠️ Fixes

• remove PartitionAllocSchedulerLoopQuarantineTaskControlledPurge from disabled features (#​14872) (c9909a5)
• roll to Chrome 147.0.7727.57 (#​14869) (51c4305)

rolldown/rolldown (rolldown)

v1.0.0-rc.18

Compare Source

💥 BREAKING CHANGES

• optimization: default unspecified inlineConst.mode to smart (#​9248) by @​IWANABETHATGUY

🐛 Bug Fixes

• rolldown_plugin_vite_import_glob: return error instead of panicking when virtual module uses a relative glob (#​9241) by @​shulaoda
• binding: treat empty inlineConst object as omitted (#​9247) by @​IWANABETHATGUY
• rolldown: keep enum declaration for optional-chain access (#​9229) by @​Dunqing
• link_stage: restore inline let-else in exports-kind filter (#​9237) by @​IWANABETHATGUY
• dev/lazy: avoid module reinitialization in lazy compilation patches (#​9179) by @​h-a-n-a
• dev: visit identifier references for runtime rewrites in HMR finalizer (#​9191) by @​h-a-n-a
• chunk-optimizer: pick dominator for runtime placement to avoid cycles (#​9164) by @​IWANABETHATGUY
• make this.emitFile chunk path synchronous to avoid deadlock (#​9031) by @​lazarv
• use sentinel id for browser: false ignored modules (#​9192) by @​shulaoda
• prevent chunk optimizer from creating import cycles (#​9228) by @​IWANABETHATGUY

🚜 Refactor

• replace tokio::sync::Mutex with std::sync::Mutex for non-IO data (#​9176) by @​shulaoda
• rolldown_plugin_vite_import_glob: do not rewrite import path for absolute base (#​9195) by @​shulaoda
• runtime_helper: wrap DependedRuntimeHelperMap in a struct (#​9215) by @​IWANABETHATGUY
• drop redundant clear() in determine_safely_merge_cjs_ns (#​9206) by @​IWANABETHATGUY
• clean up generate_lazy_export (#​9208) by @​IWANABETHATGUY
• bitset: return bool from set_bit to fuse guard-and-set (#​9207) by @​IWANABETHATGUY
• link_stage: simplify exports-kind filter and clarify safety comments (#​9205) by @​IWANABETHATGUY

📚 Documentation

• determine_module_exports_kind (#​9252) by @​IWANABETHATGUY
• fix dead link to esbuild ESM/CJS interop tests (#​9230) by @​Copilot
• remove CSS bundling references (#​9234) by @​shulaoda
• correct IncrementalFullBuild row in BundleMode table (#​9214) by @​IWANABETHATGUY
• design: add bundler data lifecycle design doc (#​9212) by @​hyf0
• remove minifier alpha status notices (#​9202) by @​sapphi-red

⚙️ Miscellaneous Tasks

• upgrade oxc to 0.128.0 (#​9260) by @​shulaoda
• deps: bump rolldown-ariadne to 0.6.0 (#​9254) by @​IWANABETHATGUY
• deps: update github actions (#​9259) by @​renovate[bot]
• deps: update github actions (#​9258) by @​renovate[bot]
• remove renovate overrides (#​9257) by @​Boshen
• use ubuntu-latest for security workflow (#​9256) by @​Boshen
• notify Discord around release publish (#​9251) by @​Boshen
• add release environment to npm publish workflow (#​9250) by @​Boshen
• justfile: drop the -- separator before forwarded args in vp run (#​9246) by @​shulaoda
• deps: update test262 submodule for tests (#​9243) by @​sapphi-red
• add more tracing instrumentations (#​9220) by @​sapphi-red
• rolldown_plugin_vite_import_glob: remove outdated sourcemap doc comment (#​9213) by @​shulaoda
• update security workflow (#​9201) by @​Boshen

❤️ New Contributors

• @​lazarv made their first contribution in #​9031

v1.0.0-rc.17

Compare Source

🐛 Bug Fixes

• link: error on missing export between TS modules (#​9197) by @​IWANABETHATGUY
• rolldown_plugin_vite_import_glob: import path should not be affected by absolute base option (#​9145) by @​kermanx
• this.resolve() returns null for bare relative paths without importer (#​9142) by @​Copilot
• collect destructured bindings in HMR module exports (#​9146) by @​h-a-n-a
• esbuild-tests: handle 0.28.0 test cases (#​9149) by @​sapphi-red
• plugin/copy-module: honor external resolutions from other plugins (#​9139) by @​TheAlexLichter
• allow undefined in sourcesContent type (#​9136) by @​jurijzahn8019
• reduce false positives in chunk optimizer circular dependency detection (#​9049) by @​AlonMiz

🚜 Refactor

• chunk-optimizer: extract runtime-module placement into rehome_runtime_module (#​9163) by @​IWANABETHATGUY

📚 Documentation

• add design doc for sort_modules execution ordering (#​9169) by @​IWANABETHATGUY
• add document for RenderedModule (#​9147) by @​sapphi-red

⚡ Performance

• rolldown_plugin_vite_import_glob: skip self-import earlier using raw path comparison (#​9193) by @​shulaoda

🧪 Testing

• lazy: add playground/lazy-compilation (#​7974) by @​hyf0

⚙️ Miscellaneous Tasks

• use app token for release PR (#​9198) by @​Boshen
• upgrade oxc to 0.127.0 (#​9194) by @​Dunqing
• use oxc security action (#​9196) by @​Boshen
• esbuild-tests: remove some tests from ignored list as enum inline is now supported (#​9184) by @​sapphi-red
• deps: update dependency vite-plus to v0.1.19 (#​9183) by @​renovate[bot]
• use vp instead of pnpm in check-wasi-binding-deps (#​9182) by @​shulaoda
• verify wasm32-wasi binding deps match @​rolldown/browser before publish (#​9162) by @​shulaoda
• deps: update esbuild for tests to 0.28.0 (#​9172) by @​sapphi-red
• deps: update rollup submodule for tests to v4.60.2 (#​9173) by @​sapphi-red
• deps: update test262 submodule for tests (#​9174) by @​sapphi-red
• sort_modules: fix stale async-entry sort key comment (#​9170) by @​IWANABETHATGUY
• deps: update npm packages (#​9157) by @​renovate[bot]
• deps: update dependency diff to v9 (#​9158) by @​renovate[bot]
• deps: update rust crates (#​9156) by @​renovate[bot]
• run Windows CI on PRs labeled with ci: windows (#​9153) by @​hyf0
• update-test-dependencies: run setup-rust before file changes (#​9151) by @​sapphi-red
• deps: update dependency rust to v1.95.0 (#​9140) by @​renovate[bot]

❤️ New Contributors

• @​jurijzahn8019 made their first contribution in #​9136
• @​AlonMiz made their first contribution in #​9049

mafintosh/tar-stream (tar-stream)

v3.2.0

Compare Source

v3.1.9

Compare Source

terser/terser (terser)

v5.46.2

Compare Source

• unused option: delete computed keys of concise methods and getters/setters.
• Error.cause added to DOM properties list
• Don't consider foo.bar and foo["bar"] to be equivalent when property mangler is enabled with keep_quoted=strict option.

nodejs/undici (undici)

v8.2.0

Compare Source

What's Changed

• chore: use native addAbortListener by @​trivikr in #​5021
• fix: fix the logic for the UNDICI_NO_WASM_SIMD environment variable by @​ShenHongFei in #​5026
• fix(http2): send body for non-expectsPayload methods with content by @​mcollina in #​5030
• fix(fetch): correct 'navigator' typo to 'navigate' in fetchFinale by @​deepview-autofix in #​5044
• fix(webidl): correct signed integer bounds in ConvertToInt by @​deepview-autofix in #​5038
• fix(fetch): use || for CRLF check in multipart formdata-parser by @​deepview-autofix in #​5049
• fix(websocket): correct argument order in WebSocketStream UTF-8 failure by @​deepview-autofix in #​5050
• fix(pool): propagate useH2c to connector when connections > 1 by @​SAY-5 in #​5031
• fix(cache): return immutable staleAt in milliseconds by @​deepview-autofix in #​5048
• fix(socks5-proxy-agent): use per-origin pools to prevent cross-origin routing by @​deepview-autofix in #​5041
• fix(cache): evict oldest entries first in SqliteCacheStore prune by @​deepview-autofix in #​5039
• fix(socks5): correctly expand IPv6 '::' compressed notation by @​deepview-autofix in #​5046
• Remove unused func and unnecessary shim by @​tsctx in #​5053
• fix: reject malformed content-length request headers by @​trivikr in #​5060
• fix(request): reject NaN highWaterMark during option validation by @​trivikr in #​5062
• docs: fix broken links in docsify sidebar by @​maruthang in #​5065
• fix(fetch): prefer filename* over filename in multipart form-data by @​maruthang in #​5068
• fix(http2): reject websocket upgrades on non-200 responses by @​trivikr in #​5072
• feat: support username-only proxy authentication in ProxyAgent by @​rossilor95 in #​4935
• build(deps): bump uWebSockets.js from v20.58.0 to v20.64.0 in /benchmarks by @​dependabot[bot] in #​5083
• fix(client-h2): stop double-decrementing kOpenStreams on stream timeout by @​SAY-5 in #​5076
• fix(http2): reject upgrade streams closed before response headers by @​trivikr in #​5069
• fix(http2): allow GET and HEAD request bodies over h2 by @​trivikr in #​5058
• fix(cache): include query in cache key when opts.path is undefined by @​maruthang in #​5081
• fix: avoid premature cleanup of dispatcher in Agent by @​bienzaaron in #​5034
• fix(http2): record ping failures on the socket by @​trivikr in #​5075
• add undici security policy by @​mcollina in #​5056
• fix(mock): make filterCalls AND operator actually intersect results by @​deepview-autofix in #​5045
• fix(socks5): enforce authenticated state before CONNECT by @​trivikr in #​5097
• fix(cache): skip expired sqlite vary entries during lookup by @​trivikr in #​5095
• fix: enforce maxCachedSessions in TLS session cache by @​trivikr in #​5102
• fix(socks5): encode embedded IPv4 tails in IPv6 literals correctly by [@​trivikr](https://r

✂ Note

PR body was truncated to here.

[gemini-code-assist]

Code Review

This pull request updates several dependencies across the workspace, including Vitest, JSDOM, PostCSS, and Angular CLI. Feedback highlights that the algoliasearch update to version 5.51.0 contains breaking changes in the Composition API, which contradicts the objective of performing only non-breaking updates and poses a risk of runtime failures.

[gemini-code-assist]

The update of algoliasearch to version 5.51.0 includes breaking changes in the Composition API, as explicitly stated in the package's release notes. This contradicts the pull request's objective of performing only non-major (non-breaking) updates. If the project utilizes the Composition API, this change could lead to runtime failures.