Bump the frontend group with 6 updates #16843

dependabot · 2025-11-01T02:03:30Z

Bumps the frontend group with 6 updates:

Package	From	To
@babel/core	`7.28.4`	`7.28.5`
@babel/preset-env	`7.28.3`	`7.28.5`
@sentry/browser	`10.17.0`	`10.22.0`
caniuse-lite	`1.0.30001746`	`1.0.30001752`
sass-loader	`16.0.5`	`16.0.6`
webpack	`5.102.0`	`5.102.1`

Updates @babel/core from 7.28.4 to 7.28.5

Release notes

Sourced from @babel/core's releases.

v7.28.5 (2025-10-23)

Thank you @CO0Ki3, @Olexandr88, and @youthfulhps for your first PRs!

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

#17519 fix: rest correctly returns plain array (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types

#17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)

babel-traverse

#17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types

#17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core

#17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

Committers: 8

Babel Bot (@babel-bot)

Byeongho Yoo (@youthfulhps)

Huáng Jùnliàng (@JLHwung)

Hyeon Dokko (@CO0Ki3)

Nicolò Ribaudo (@nicolo-ribaudo)

@Olexandr88

@liuxingbaoyu

fisker Cheung (@fisker)

Changelog

Sourced from @babel/core's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

#17519 fix: rest correctly returns plain array (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types

#17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)

babel-traverse

#17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types

#17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core

#17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

Commits

61647ae v7.28.5
42cb285 Improve @babel/core types (#17404)
da0d1ad Faster finding of locations in buildCodeFrameError (#17490)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/core since your current version.

Updates @babel/preset-env from 7.28.3 to 7.28.5

Release notes

Sourced from @babel/preset-env's releases.

v7.28.5 (2025-10-23)

Thank you @CO0Ki3, @Olexandr88, and @youthfulhps for your first PRs!

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

#17519 fix: rest correctly returns plain array (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types

#17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)

babel-traverse

#17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types

#17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core

#17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

Committers: 8

Babel Bot (@babel-bot)

Byeongho Yoo (@youthfulhps)

Huáng Jùnliàng (@JLHwung)

Hyeon Dokko (@CO0Ki3)

Nicolò Ribaudo (@nicolo-ribaudo)

@Olexandr88

@liuxingbaoyu

fisker Cheung (@fisker)

v7.28.4 (2025-09-05)

Thanks @gwillen and @mrginglymus for your first PRs!

🏠 Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types

#17493 Update Jest to v30.1.1 (@JLHwung)

babel-plugin-transform-regenerator

#17455 chore: Clean up transform-regenerator (@liuxingbaoyu)

... (truncated)

Changelog

Sourced from @babel/preset-env's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

#17519 fix: rest correctly returns plain array (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types

#17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)

babel-traverse

#17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types

#17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core

#17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

v7.28.4 (2025-09-05)

🏠 Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types

#17493 Update Jest to v30.1.1 (@JLHwung)

babel-plugin-transform-regenerator

#17455 chore: Clean up transform-regenerator (@liuxingbaoyu)

babel-core

#17474 Switch to @jridgewell/remapping (@mrginglymus)

Commits

61647ae v7.28.5
42cb285 Improve @babel/core types (#17404)
ae363ae chore: Fix typo in variable name (#17535)
1edfcaa Update compat data (#17487)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/preset-env since your current version.

Updates @sentry/browser from 10.17.0 to 10.22.0

Release notes

Sourced from @sentry/browser's releases.

10.22.0

Important Changes
feat(node): Instrument cloud functions for firebase v2 (#17952)

We added instrumentation for Cloud Functions for Firebase v2, enabling automatic performance tracking and error monitoring. This will be added automatically if you have enabled tracing.
feat(core): Instrument LangChain AI (#17955)

Instrumentation was added for LangChain AI operations. You can configure what is recorded like this:
Sentry.init({
  integrations: [
    Sentry.langChainIntegration({
      recordInputs: true, // Record prompts/messages
      recordOutputs: true, // Record responses
    }),
  ],
});
Other Changes

feat(cloudflare,vercel-edge): Add support for LangChain instrumentation (#17986)

feat: Align sentry origin with documentation (#17998)

feat(core): Truncate request messages in AI integrations (#17921)

feat(nextjs): Support node runtime on proxy files (#17995)

feat(node): Pass requestHook and responseHook option to OTel (#17996)

fix(core): Fix wrong async types when instrumenting anthropic's stream api (#18007)

fix(nextjs): Remove usage of chalk to avoid runtime errors (#18010)

fix(node): Pino capture serialized err (#17999)

fix(node): Pino child loggers (#17934)

fix(react): Don't trim index route / when getting pathname (#17985)

fix(react): Patch spanEnd for potentially cancelled lazy-route transactions (#17962)

chore: Add required size_check for GH Actions (#18009)

chore: Upgrade madge to v8 (#17957)

test(hono): Fix hono e2e tests (#18000)

test(react-router): Fix getMetaTagTransformer tests for Vitest compatibility (#18013)

test(react): Add parameterized route tests for createHashRouter (#17789)

Bundle size 📦

| Path | Size |

... (truncated)

Changelog

Sourced from @sentry/browser's changelog.

10.22.0

Important Changes
feat(node): Instrument cloud functions for firebase v2 (#17952)

We added instrumentation for Cloud Functions for Firebase v2, enabling automatic performance tracking and error monitoring. This will be added automatically if you have enabled tracing.
feat(core): Instrument LangChain AI (#17955)

Instrumentation was added for LangChain AI operations. You can configure what is recorded like this:
Sentry.init({
  integrations: [
    Sentry.langChainIntegration({
      recordInputs: true, // Record prompts/messages
      recordOutputs: true, // Record responses
    }),
  ],
});
Other Changes

feat(cloudflare,vercel-edge): Add support for LangChain instrumentation (#17986)

feat: Align sentry origin with documentation (#17998)

feat(core): Truncate request messages in AI integrations (#17921)

feat(nextjs): Support node runtime on proxy files (#17995)

feat(node): Pass requestHook and responseHook option to OTel (#17996)

fix(core): Fix wrong async types when instrumenting anthropic's stream api (#18007)

fix(nextjs): Remove usage of chalk to avoid runtime errors (#18010)

fix(node): Pino capture serialized err (#17999)

fix(node): Pino child loggers (#17934)

fix(react): Don't trim index route / when getting pathname (#17985)

fix(react): Patch spanEnd for potentially cancelled lazy-route transactions (#17962)

chore: Add required size_check for GH Actions (#18009)

chore: Upgrade madge to v8 (#17957)

test(hono): Fix hono e2e tests (#18000)

test(react-router): Fix getMetaTagTransformer tests for Vitest compatibility (#18013)

test(react): Add parameterized route tests for createHashRouter (#17789)

10.21.0

... (truncated)

Commits

c6b99c0 release: 10.22.0
2bde42b Merge pull request #18017 from getsentry/prepare-release/10.22.0
8debb05 meta(changelog): Update changelog for 10.22.0
fd26569 fix(react): Patch spanEnd for potentially cancelled lazy-route transactions...
9c0397c test(react-router): Fix getMetaTagTransformer tests for Vitest compatibilit...
0bac0ea test(react): Add parameterized route tests for createHashRouter (#17789)
1513161 chore: Add required size_check for GH Actions (#18009)
7d050b5 fix(core): Fix wrong async types when instrumenting anthropic's stream api (#...
925a4ea feat(cloudflare,vercel-edge): Add support for LangChain instrumentation (#17986)
7968cd8 fix(react): Don't trim index route / when getting pathname (#17985)
Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001746 to 1.0.30001752

Commits

52fb80d Update caniuse-db 1.0.30001752
51d6f93 Update caniuse-db 1.0.30001751
b4c46c6 Update caniuse-db 1.0.30001750
9015873 Update caniuse-db 1.0.30001749
6979d46 Update caniuse-db 1.0.30001748
55878d5 Update caniuse-db 1.0.30001747
See full diff in compare view

Updates sass-loader from 16.0.5 to 16.0.6

Release notes

Sourced from sass-loader's releases.

v16.0.6

Bug Fixes

cache fs calls for modern API

Changelog

Sourced from sass-loader's changelog.

16.0.6 (2025-10-23)

Bug Fixes

cache fs calls for modern API

Commits

57c9282 chore(release): 16.0.6
fbc1af9 perf: cache fs calls for modern API (#1284)
900a5f8 chore: rewrite link to correct location (#1282)
4d54d53 chore: restore to old content
e9dab32 chore: revise readme information (#1280)
1acdbd0 chore: remove some redundant stuff (#1279)
9aed7a8 chore: update links (#1278)
aacb63d chore: update readme (#1277)
01a94cb chore: remove old issue/pr templates (#1276)
0b3dc43 chore: move from master to main branch (#1273) (#1274)
Additional commits viewable in compare view

Updates webpack from 5.102.0 to 5.102.1

Release notes

Sourced from webpack's releases.

v5.102.1

Fixes

Supported extends with env for browserslist

Supported JSONP fragment format for web workers.

Fixed dynamic import support in workers using browserslist.

Fixed default defer import mangling.

Fixed default import of commonjs externals for SystemJS format.

Fixed context modules to the same file with different import attributes.

Fixed typescript types.

Improved import.meta warning messages to be more clear when used directly.

[CSS] Fixed CC_UPPER_U parsing (E -> U) in tokenizer.

Commits

c7ebdbd chore(release): 5.102.1
b7530c2 fix(css): correct CC_UPPER_U typo (E -> U) (#19989)
f3ef142 fix: defer import mangling (#19988)
d32f171 fix: hash options types (#19987)
436fc7d chore(deps): bump CodSpeedHQ/action from 4.1.0 to 4.1.1 (#19986)
c7dd066 fix: context modules with import attributes (#19984)
85bacbd fix: default import of commonjs externals for SystemJS format
7634cd2 docs: update examples (#19982)
9f98d80 fix: javascript parser options types (#19980)
8804459 chore(deps): bump CodSpeedHQ/action from 4.0.1 to 4.1.0 (#19977)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the frontend group with 6 updates: | Package | From | To | | --- | --- | --- | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.4` | `7.28.5` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.28.3` | `7.28.5` | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.17.0` | `10.22.0` | | [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001746` | `1.0.30001752` | | [sass-loader](https://github.com/webpack/sass-loader) | `16.0.5` | `16.0.6` | | [webpack](https://github.com/webpack/webpack) | `5.102.0` | `5.102.1` | Updates `@babel/core` from 7.28.4 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-core) Updates `@babel/preset-env` from 7.28.3 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-env) Updates `@sentry/browser` from 10.17.0 to 10.22.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.17.0...10.22.0) Updates `caniuse-lite` from 1.0.30001746 to 1.0.30001752 - [Commits](browserslist/caniuse-lite@1.0.30001746...1.0.30001752) Updates `sass-loader` from 16.0.5 to 16.0.6 - [Release notes](https://github.com/webpack/sass-loader/releases) - [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md) - [Commits](webpack/sass-loader@v16.0.5...v16.0.6) Updates `webpack` from 5.102.0 to 5.102.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.102.0...v5.102.1) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.28.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@babel/preset-env" dependency-version: 7.28.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@sentry/browser" dependency-version: 10.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: caniuse-lite dependency-version: 1.0.30001752 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: sass-loader dependency-version: 16.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: webpack dependency-version: 5.102.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file Frontend HTML, CSS, JS... client side stuff labels Nov 1, 2025

dependabot bot requested a review from a team as a code owner November 1, 2025 02:03

dependabot bot added dependencies Pull requests that update a dependency file Frontend HTML, CSS, JS... client side stuff labels Nov 1, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/frontend-abf781340a branch from cf0e0fc to 234fa35 Compare November 5, 2025 22:32

dependabot bot force-pushed the dependabot/npm_and_yarn/frontend-abf781340a branch from 234fa35 to 8154f8a Compare November 5, 2025 22:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the frontend group with 6 updates #16843

Bump the frontend group with 6 updates #16843

Uh oh!

dependabot bot commented on behalf of github Nov 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the frontend group with 6 updates #16843

Are you sure you want to change the base?

Bump the frontend group with 6 updates #16843

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

🏠 Internal

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

v7.28.4 (2025-09-05)

🏠 Internal

10.22.0

Important Changes

Other Changes

Bundle size 📦

10.22.0

Important Changes

Other Changes

10.21.0

v16.0.6

Bug Fixes

16.0.6 (2025-10-23)

Bug Fixes

v5.102.1

Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Nov 1, 2025 •

edited

Loading