fix(deps): vuln minor upgrades — 13 packages (minor: 7 · patch: 6) [rum-react-navigation] by gh-worker-campaigns-3e9aa4[bot] · Pull Request #73 · DataDog/dd-sdk-reactnative-examples

gh-worker-campaigns-3e9aa4 · 2026-04-23T09:15:27Z

Summary: Security update — 13 packages upgraded (MINOR changes included)

Manifests changed:

rum-react-navigation (yarn)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
@babel/runtime	7.20.13	7.29.2	minor	Direct	2 MODERATE
@babel/core	7.20.12	7.29.0	minor	Direct	-
@babel/preset-env	7.20.2	7.29.2	minor	Direct	-
@datadog/datadog-ci	2.5.1	2.48.0	minor	Direct	-
eslint	8.33.0	8.57.1	minor	Direct	-
react-test-renderer	18.2.0	18.3.1	minor	Direct	-
typescript	4.8.4	4.9.5	minor	Direct	-
@types/jest	29.4.0	29.4.4	patch	Direct	-
@types/react	18.0.27	18.0.38	patch	Direct	-
babel-jest	29.4.1	29.4.3	patch	Direct	-
jest	29.4.1	29.4.3	patch	Direct	-
prettier	2.8.3	2.8.8	patch	Direct	-
zustand	4.3.3	4.3.9	patch	Direct	-

Packages marked with "-" are updated due to dependency constraints.

Security Details

ℹ️ Other Vulnerabilities (2)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
@babel/runtime	GHSA-968p-4wvh-cqc8	MODERATE	Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups	7.20.13	7.26.10
@babel/runtime	CVE-2025-27789	MODERATE	Inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups	7.20.13	-

Review Checklist

Standard review:

Review changes for compatibility with your code
Check for breaking changes in release notes
Run tests locally or wait for CI
Approve and merge this PR

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

campaigner-prod · 2026-04-23T09:16:15Z

Release Notes

@babel/runtime (7.20.13 → 7.29.2) — GitHub Release

v7.29.2

v7.29.2 (2026-03-16)

👓 Spec Compliance

babel-parser
- https://github.com/babel/babel/issues/17840 [7.x backport] async x => {} must be in leading pos (@JLHwung)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
- https://github.com/babel/babel/issues/17805 [7.x backport] fix: Properly handle await in finally (@liuxingbaoyu)
babel-preset-env
- https://github.com/babel/babel/issues/17789 [7.x backport] preset-env include/exclude should accept bugfix plugins (@JLHwung)

🏠 Internal

https://github.com/babel/babel/issues/17813 chore: update eslint peer deps (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)
@liuxingbaoyu

v7.29.1

v7.29.1 (2026-02-04)

🐛 Bug Fix

babel-standalone
- https://github.com/babel/babel/issues/17771 [7.x backport] fix: ensure targets.esmodules is validated (@JLHwung)
babel-generator
- https://github.com/babel/babel/issues/17776 [7.x backport] Fix undefined when 64 indents (@liuxingbaoyu)

Committers: 2

Huáng Jùnliàng (@JLHwung)
@liuxingbaoyu

v7.29.0

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types
- https://github.com/babel/babel/issues/17750 [7.x backport] Add attributes import declaration builder (@JLHwung)
babel-standalone
- https://github.com/babel/babel/issues/17663 [7.x backport] feat(standalone): export async transform (@JLHwung)
- https://github.com/babel/babel/issues/17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser
- https://github.com/babel/babel/issues/17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)
- https://github.com/babel/babel/issues/17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)
babel-traverse
- https://github.com/babel/babel/issues/17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)
babel-plugin-transform-block-scoping, babel-traverse
- https://github.com/babel/babel/issues/17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3
- https://github.com/babel/babel/issues/17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)
Huáng Jùnliàng (@JLHwung)
Nicolò Ribaudo (@nicolo-ribaudo)
@liuxingbaoyu
@magic-akari

v7.28.6

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

(truncated — see source for full notes)

@babel/core (7.20.12 → 7.29.0) — GitHub Release

v7.29.0

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types
- https://github.com/babel/babel/issues/17750 [7.x backport] Add attributes import declaration builder (@JLHwung)
babel-standalone
- https://github.com/babel/babel/issues/17663 [7.x backport] feat(standalone): export async transform (@JLHwung)
- https://github.com/babel/babel/issues/17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser
- https://github.com/babel/babel/issues/17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)
- https://github.com/babel/babel/issues/17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)
babel-traverse
- https://github.com/babel/babel/issues/17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)
babel-plugin-transform-block-scoping, babel-traverse
- https://github.com/babel/babel/issues/17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3
- https://github.com/babel/babel/issues/17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)
Huáng Jùnliàng (@JLHwung)
Nicolò Ribaudo (@nicolo-ribaudo)
@liuxingbaoyu
@magic-akari

v7.28.6

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
- https://github.com/babel/babel/issues/17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)
babel-plugin-transform-regenerator
- https://github.com/babel/babel/issues/17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)
babel-plugin-transform-react-jsx
- https://github.com/babel/babel/issues/17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone
- https://github.com/babel/babel/issues/17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, `babel-plugin-syntax

(truncated)

v7.28.5

v7.28.5 (2025-10-23)

Thank you @CO0Ki3, @Olexandr88, and @youthfulhps for your first PRs!

(truncated — see source for full notes)

@babel/preset-env (7.20.2 → 7.29.2) — GitHub Release

v7.29.2

v7.29.2 (2026-03-16)

👓 Spec Compliance

babel-parser
- https://github.com/babel/babel/issues/17840 [7.x backport] async x => {} must be in leading pos (@JLHwung)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
- https://github.com/babel/babel/issues/17805 [7.x backport] fix: Properly handle await in finally (@liuxingbaoyu)
babel-preset-env
- https://github.com/babel/babel/issues/17789 [7.x backport] preset-env include/exclude should accept bugfix plugins (@JLHwung)

🏠 Internal

https://github.com/babel/babel/issues/17813 chore: update eslint peer deps (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)
@liuxingbaoyu

v7.29.1

v7.29.1 (2026-02-04)

🐛 Bug Fix

babel-standalone
- https://github.com/babel/babel/issues/17771 [7.x backport] fix: ensure targets.esmodules is validated (@JLHwung)
babel-generator
- https://github.com/babel/babel/issues/17776 [7.x backport] Fix undefined when 64 indents (@liuxingbaoyu)

Committers: 2

Huáng Jùnliàng (@JLHwung)
@liuxingbaoyu

v7.29.0

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types
- https://github.com/babel/babel/issues/17750 [7.x backport] Add attributes import declaration builder (@JLHwung)
babel-standalone
- https://github.com/babel/babel/issues/17663 [7.x backport] feat(standalone): export async transform (@JLHwung)
- https://github.com/babel/babel/issues/17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser
- https://github.com/babel/babel/issues/17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)
- https://github.com/babel/babel/issues/17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)
babel-traverse
- https://github.com/babel/babel/issues/17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)
babel-plugin-transform-block-scoping, babel-traverse
- https://github.com/babel/babel/issues/17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3
- https://github.com/babel/babel/issues/17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)
Huáng Jùnliàng (@JLHwung)
Nicolò Ribaudo (@nicolo-ribaudo)
@liuxingbaoyu
@magic-akari

v7.28.6

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

(truncated — see source for full notes)

@datadog/datadog-ci (2.5.1 → 2.48.0) — GitHub Release

v2.48.0

What's Changed

Documentation

[docs] More info about testSearchQuery by @Drarig29 in [docs] More info about testSearchQuery datadog-ci#1522

Static Analysis

SBOM: update licenses and filter invalid purl by @juli1 in SBOM: update licenses and filter invalid purl datadog-ci#1526
Update code ownership by @juli1 in Update code ownership datadog-ci#1527

Full Changelog: DataDog/datadog-ci@v2.47.0...v2.48.0

v2.47.0

What's Changed

v2.46.2

What's Changed

Static Analysis

Improve mandatory git field checks by @dastrong in Improve mandatory git field checks datadog-ci#1506

Chores

[chores] Adjustments in release process by @Drarig29 in [chores] Adjustments in release process datadog-ci#1509

Full Changelog: DataDog/datadog-ci@v2.46.1...v2.46.2

v2.46.1

What's Changed

Serverless

Allow for legacy lambda step function steps by @avangelillo in Allow for legacy lambda step function steps datadog-ci#1504

Static Analysis

[K9VULN-2445] fix(sbom): don't iterate over an undefined object by @amaanq in [K9VULN-2445] fix(sbom): don't iterate over an undefined object datadog-ci#1507

New Contributors

@avangelillo made their first contribution in Allow for legacy lambda step function steps datadog-ci#1504
@amaanq made their first contribution in [K9VULN-2445] fix(sbom): don't iterate over an undefined object datadog-ci#1507

Full Changelog: DataDog/datadog-ci@v2.46.0...v2.46.1

v2.46.0

What's Changed

Dependencies

Bump path-to-regexp from 0.1.11 to 0.1.12 by @dependabot in Bump path-to-regexp from 0.1.11 to 0.1.12 datadog-ci#1500

datadog-ci

add a fips option to all existing commands by @etnbrd in add a fips option to all existing commands datadog-ci#1501

Static Analysis

[K9VULN-1175] Validate purl by @juli1 in [K9VULN-1175] Validate purl datadog-ci#1499

Synthetics

[SYNTH-16911] Trigger batch with LTDs by @Drarig29 in [SYNTH-16911] Trigger batch with LTDs datadog-ci#1494

Full Changelog: DataDog/datadog-ci@v2.45.1...v2.46.0

v2.45.1

What's Changed

Dependencies

Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot in Bump cross-spawn from 7.0.3 to 7.0.6 datadog-ci#1495

Static Analysis

Remove git checks in SBOM payload generation by @tanishq-dubey in Remove git checks in SBOM payload generation datadog-ci#1487

Synthetics

[SYNTH-17149] Fix selective rerun org-wide default setting not used by @Drarig29 in [SYNTH-17149] Fix selective rerun org-wide default setting not used datadog-ci#1491
[SYNTH-17150] Update selective rerun spelling by @Drarig29 in [SYNTH-17150] Update selective rerun spelling datadog-ci#1492

New Contributors

@tanishq-dubey made their first contribution in Remove git checks in SBOM payload generation datadog-ci#1487

Full Changelog: DataDog/datadog-ci@v2.45.0...v2.45.1

v2.45.0

What's Changed

Static Analysis

[STAL-3155] Specify which git tags are missing by @dastrong in [STAL-3155] Specify which git tags are missing datadog-ci#1489

Full Changelog: DataDog/datadog-ci@v2.44.0...v2.45.0

v2.44.0

(truncated — see source for full notes)

eslint (8.33.0 → 8.57.1) — GitHub Release

v8.57.1

Bug Fixes

a19072f fix: add logic to handle fixTypes in the lintText() method (fix: add logic to handle fixTypes in the lintText() method eslint/eslint#18900) (Francesco Trotta)
04c7188 fix: Don't lint same file multiple times (fix: Don't lint same file multiple times eslint/eslint#18899) (Francesco Trotta)
87ec3c4 fix: do not throw when defining a global named __defineSetter__ (fix: do not throw when defining a global named __defineSetter__ eslint/eslint#18898) (Francesco Trotta)
60a1267 fix: Provide helpful error message for nullish configs (fix: Provide helpful error message for nullish configs eslint/eslint#18889) (Milos Djermanovic)
a0dea8e fix: allow name in global ignores, fix --no-ignore for non-global (fix: allow name in global ignores, fix --no-ignore for non-global eslint/eslint#18875) (Milos Djermanovic)
3836bb4 fix: do not crash on error in fs.walk filter (fix: do not crash on error in fs.walk filter eslint/eslint#18886) (Milos Djermanovic)
2dec349 fix: skip processor code blocks that match only universal patterns (fix: skip processor code blocks that match only universal patterns eslint/eslint#18880) (Milos Djermanovic)

Documentation

6a5add4 docs: v8.x Add EOL banner (docs: v8.x Add EOL banner eslint/eslint#18744) (Amaresh S M)
b034575 docs: v8.x add version support page to the dropdown (docs: v8.x add version support page to the dropdown eslint/eslint#18731) (Amaresh S M)
760ef7d docs: v8.x add version support page in the side navbar (docs: v8.x add version support page in the side navbar eslint/eslint#18740) (Amaresh S M)
428b7ea docs: Add Powered by Algolia label to the search (docs: Add Powered by Algolia label to the search eslint/eslint#18658) (Amaresh S M)
[c68c07f](https://github.c

(truncated)

v8.57.0

Features

1120b9b feat: Add loadESLint() API method for v8 (feat: Add loadESLint() API method for v8 eslint/eslint#18098) (Nicholas C. Zakas)
dca7d0f feat: Enable eslint.config.mjs and eslint.config.cjs (feat: Enable eslint.config.mjs and eslint.config.cjs eslint/eslint#18066) (Nitin Kumar)

Bug Fixes

2196d97 fix: handle absolute file paths in FlatRuleTester (fix: handle absolute file paths in FlatRuleTester eslint/eslint#18064) (Nitin Kumar)
69dd1d1 fix: Ensure config keys are printed for config errors (fix: Ensure config keys are printed for config errors eslint/eslint#18067) (Nitin Kumar)
9852a31 fix: deep merge behavior in flat config (fix: deep merge behavior in flat config eslint/eslint#18065) (Nitin Kumar)
4c7e9b0 fix: allow circular references in config (fix: allow circular references in config eslint/eslint#18056) (Milos Djermanovic)

Documentation

84922d0 docs: Show prerelease version in dropdown (docs: Show prerelease version in dropdown eslint/eslint#18139) (Nicholas C. Zakas)
5b8c363 docs: Switch to Ethical Ads (docs: Switch to Ethical Ads eslint/eslint#18117) (Milos Djermanovic)
77dbfd9 docs: show NEXT in version selectors (docs: show NEXT in version selectors eslint/eslint#18052) (Milos Djermanovic)

Chores

1813aec chore: upgrade @eslint/js@8.57.0 (chore: upgrade @eslint/js@8.57.0 eslint/eslint#18143) (Milos Djermanovic)

(truncated — see source for full notes)

react-test-renderer (18.2.0 → 18.3.1) — GitHub Release

v18.3.1

Export act from react f1338f

v18.3.0

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

Allow writing to this.refs to support string ref codemod 909071
Warn for deprecated findDOMNode outside StrictMode c3b283
Warn for deprecated test-utils methods d4ea75
Warn for deprecated Legacy Context outside StrictMode 415ee0
Warn for deprecated string refs outside StrictMode https://github.com/facebook/react/issues/25383
Warn for deprecated defaultProps for function components https://github.com/facebook/react/issues/25699
Warn when spreading key https://github.com/facebook/react/issues/25697
Warn when using act from test-utils d4ea75

React DOM

Warn for deprecated unmountComponentAtNode 8a015b
Warn for deprecated renderToStaticNodeStream https://github.com/facebook/react/issues/28874

typescript (4.8.4 → 4.9.5) — GitHub Release

v4.9.5

For release notes, check out the release announcement.

Downloads are available on:

Changes:

69e88ef5513a81acf69ec78f4af1f927da0d0584 Port ignore deprecations to 4.9 (Port ignore deprecations to 4.9 microsoft/TypeScript#52419)
daf4e817a18def96b70ac34703b158ff0e6d58df Port timestamp fix to 4.9 (Port timestamp fix to 4.9 microsoft/TypeScript#52426)

v4.9.4

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

fixed issues query for Typescript v4.9.4.

Downloads are available on:

Changes:

e2868216f637e875a74c675845625eb15dcfe9a2 Bump version to 4.9.4 and LKG.
eb5419fc8d980859b98553586dfb5f40d811a745 Cherry-pick Unconditionally call checkExpression from checkSatisfiesExpression microsoft/TypeScript#51704 to release 4.9 (Cherry-pick #51704 to release 4.9 microsoft/TypeScript#51712)
b4d382b9b12460adf2da4cc0d1429cf19f8dc8be Cherry-pick changes for narrowing to tagged literal types.
e7a02f43fce47e1a39259ada5460bcc33c8e98b5 Port of When there is no change in file text for program, no need to update program microsoft/TypeScript#51626 and Handle empty string when getting file version microsoft/TypeScript#51689 to release-4.9 (Port of #51626 and #51689 to release-4.9 microsoft/TypeScript#51627)
1727912f0437a7f367d90040fc4b0b4f3efd017a Cherry-pick fix around visitEachChild to release-4.9. (Cherry-pick fix around visitEachChild to release-4.9. microsoft/TypeScript#51544)

This list of changes was auto generated.

v4.9.3

For release notes, check out the release announcement.

Downloads are available on:

Changes:

93bd577458d55cd720b2677705feab5c91eb12ce Bump version to 4.9.3 and LKG.
107f832b80df2dc97748021cb00af2b6813db75b Update LKG.
31bee5682df130a14ffdd5742f994dbe7313dd0e Cherry-pick PR Set impliedNodeFormat on sourceFile we get from host to ensure the field is set correctly microsoft/TypeScript#50977 into release-4.9 (🤖 Pick PR #50977 (Set impliedNodeFormat on sourceFile...) into release-4.9 microsoft/TypeScript#51363) [ https://github.com/Incorrect tsc --build compilation that is dependent on project references (using NPM workspaces) microsoft/TypeScript#50872 ]
1e2fa7ae15f8530910fef8b916ec8a4ed0b59c45 Update version to 4.9.2-rc and LKG.
7ab89e5c6e401d161f31f28a6c555a3ba530910e Merge remote-tracking branch 'origin/main' into release-4.9
e5cd686defb1a4cbdb36bd012357ba5bed28f371 Update package-lock.json
8d40dc15d1b9945837e7860320fdccfe27c40cad Update package-lock.json
5cfb3a2fe344a5350734305193e6cc99516285ca Only call return() for an abrupt completion in user code (In for-await-of, only call return() for an abrupt completion in user code microsoft/TypeScript#51297)
a7a9d158e817fcb0e94dc1c24e0a401b21be0cc9 Fix for broken baseline in yieldInForInInDownlevelGenerator (Fix for broken baseline in yieldInForInInDownlevelGenerator microsoft/TypeScript#51345)
7f8426f4df0d0a7dd8b72079dafc3e60164a23b1 fix for-in enumeration containing yield in generator (fix for-in enumeration containing yield in generator microsoft/TypeScript#51295)

See More

3d2b4017eb6b9a2b94bc673291e56ae95e8beddd Fix assertion functions accessed via wildcard imports (Fix assertion functions accessed via wildcard imports microsoft/TypeScript#51324)
64d0d5ae140b7b26a09e75114517b418d6bcaa9f fix(51301): Fixing an unused import at the end of a line removes the newline (fix(51301): Fixing an unused import at the end of a line removes the newline microsoft/TypeScript#51320)
754eeb2986bde30d5926e0fa99c87dda9266d01b Update CodeQL workflow and configuration, fix found bugs (Update CodeQL workflow and configuration, fix found bugs microsoft/TypeScript#51263)
d8aad262006ad2d2c91aa7a0e4449b4b83c57f7b Update package-lock.json
d4f26c840b1db76c0b25a405c8e73830a2b45cbc fix(51245): Class with parameter decorator in arrow function causes "convert to default export" refactoring failure (fix(51245): Class with parameter decorator in arrow function causes "convert to default export" refactoring failure microsoft/TypeScript#51256)
16faf45682173ea437a50330feb4785578923d7f Update package-lock.json
8b1ecdb701e2a2e19e9f8bcdd6b2beac087eabee fix(50654): "Move to a new file" breaks the declaration of refer

(truncated)

v4.9-rc

(truncated — see source for full notes)

babel-jest (29.4.1 → 29.4.3) — GitHub Release

v29.4.3

Features

[expect] Update toThrow() to be able to use error causes (https://github.com/jestjs/jest/issues/13606)
[jest-core] allow to use workerIdleMemoryLimit with only 1 worker or runInBand option (https://github.com/jestjs/jest/issues/13846)
[jest-message-util] Add support for error causes (https://github.com/jestjs/jest/issues/13868 & https://github.com/jestjs/jest/issues/13912)
[jest-runtime] Revert import assertions for JSON modules as it's been relegated to Stage 2 (https://github.com/jestjs/jest/issues/13911)

Fixes

[@jest/expect-utils] subsetEquality should consider also an object's inherited string keys (https://github.com/jestjs/jest/issues/13824)
[jest-mock] Clear mock state when jest.restoreAllMocks() is called (https://github.com/jestjs/jest/issues/13867)
[jest-mock] Prevent mockImplementationOnce and mockReturnValueOnce bleeding into withImplementation (https://github.com/jestjs/jest/issues/13888)
[jest-mock] Do not restore mocks when jest.resetAllMocks() is called (https://github.com/jestjs/jest/issues/13866)

New Contributors

@brodo made their first contribution in feat(jest-message-util): add support for error causes jestjs/jest#13868
@DannyNemer made their first contribution in docs: Fix typos in documentation for custom equality testers jestjs/jest#13878
@ghusse made their first contribution in feat: allow to use workerIdleMemoryLimit with only 1 worker or runInBand option jestjs/jest#13846
@broofa made their first contribution in Revert import assertions jestjs/jest#13911

Full Changelog: jestjs/jest@v29.4.2...v29.4.3

v29.4.2

Features

[@jest/core] Instrument significant lifecycle events with performance.mark() (https://github.com/jestjs/jest/issues/13859)

Fixes

[expect, @jest/expect] Provide type of actual as a generic argument to Matchers to allow better-typed extensions (https://github.com/jestjs/jest/issues/13848)
[jest-circus] Added explicit mention of test failing because done() is not being called in error message (https://github.com/jestjs/jest/issues/13847)
[jest-runtime] Handle CJS re-exports of node core modules from ESM (https://github.com/jestjs/jest/issues/13856)
[jest-transform] Downgrade write-file-atomic to v4 (https://github.com/jestjs/jest/issues/13853)
[jest-worker] Ignore IPC messages not intended for Jest (https://github.com/jestjs/jest/issues/13543)

Chore & Maintenance

[*] make sure to exclude .eslintcache from published module (https://github.com/jestjs/jest/issues/13832)
[docs] Cleanup incorrect links in CHANGELOG.md (https://github.com/jestjs/jest/issues/13857)

New Contributors

@benjaminjkraft made their first contribution in feat(@jest/expect): Expose type of actual to Matchers jestjs/jest#13848
@LinusU made their first contribution in fix: ignore all unrelated messages from child process jestjs/jest#13543
@SuperSodaSea made their first contribution in chore: Cleanup incorrect links in CHANGELOG.md jestjs/jest#13857
@kowalski made their first contribution in fix: correctly handle CJS re-exports in ESM modules jestjs/jest#13856

Full Changelog: jestjs/jest@v29.4.1...v29.4.2

jest (29.4.1 → 29.4.3) — GitHub Release

v29.4.3

Features

[expect] Update toThrow() to be able to use error causes (https://github.com/jestjs/jest/issues/13606)
[jest-core] allow to use workerIdleMemoryLimit with only 1 worker or runInBand option (https://github.com/jestjs/jest/issues/13846)
[jest-message-util] Add support for error causes (https://github.com/jestjs/jest/issues/13868 & https://github.com/jestjs/jest/issues/13912)
[jest-runtime] Revert import assertions for JSON modules as it's been relegated to Stage 2 (https://github.com/jestjs/jest/issues/13911)

Fixes

[@jest/expect-utils] subsetEquality should consider also an object's inherited string keys (https://github.com/jestjs/jest/issues/13824)
[jest-mock] Clear mock state when jest.restoreAllMocks() is called (https://github.com/jestjs/jest/issues/13867)
[jest-mock] Prevent mockImplementationOnce and mockReturnValueOnce bleeding into withImplementation (https://github.com/jestjs/jest/issues/13888)
[jest-mock] Do not restore mocks when jest.resetAllMocks() is called (https://github.com/jestjs/jest/issues/13866)

New Contributors

@brodo made their first contribution in feat(jest-message-util): add support for error causes jestjs/jest#13868
@DannyNemer made their first contribution in docs: Fix typos in documentation for custom equality testers jestjs/jest#13878
@ghusse made their first contribution in feat: allow to use workerIdleMemoryLimit with only 1 worker or runInBand option jestjs/jest#13846
@broofa made their first contribution in Revert import assertions jestjs/jest#13911

Full Changelog: jestjs/jest@v29.4.2...v29.4.3

v29.4.2

Features

[@jest/core] Instrument significant lifecycle events with performance.mark() (https://github.com/jestjs/jest/issues/13859)

Fixes

[expect, @jest/expect] Provide type of actual as a generic argument to Matchers to allow better-typed extensions (https://github.com/jestjs/jest/issues/13848)
[jest-circus] Added explicit mention of test failing because done() is not being called in error message (https://github.com/jestjs/jest/issues/13847)
[jest-runtime] Handle CJS re-exports of node core modules from ESM (https://github.com/jestjs/jest/issues/13856)
[jest-transform] Downgrade write-file-atomic to v4 (https://github.com/jestjs/jest/issues/13853)
[jest-worker] Ignore IPC messages not intended for Jest (https://github.com/jestjs/jest/issues/13543)

Chore & Maintenance

[*] make sure to exclude .eslintcache from published module (https://github.com/jestjs/jest/issues/13832)
[docs] Cleanup incorrect links in CHANGELOG.md (https://github.com/jestjs/jest/issues/13857)

New Contributors

@benjaminjkraft made their first contribution in feat(@jest/expect): Expose type of actual to Matchers jestjs/jest#13848
@LinusU made their first contribution in fix: ignore all unrelated messages from child process jestjs/jest#13543
@SuperSodaSea made their first contribution in chore: Cleanup incorrect links in CHANGELOG.md jestjs/jest#13857
@kowalski made their first contribution in fix: correctly handle CJS re-exports in ESM modules jestjs/jest#13856

Full Changelog: jestjs/jest@v29.4.1...v29.4.2

prettier (2.8.3 → 2.8.8) — GitHub Release

2.8.8

This version is a republished version of v2.8.7.
A bad version was accidentally published and it can't be unpublished, apologies for the churn.

2.8.7

Allow multiple decorators on same getter/setter

🔗 Changelog

2.8.6

Allow decorators on private members and class expressions

🔗 Changelog

2.8.5

Support TypeScript 5.0

🔗 Changelog

2.8.4

🔗 Changelog

zustand (4.3.3 → 4.3.9) — GitHub Release

v4.3.9

This includes a small improvement for production build mostly for Vite users. Docs have been improved too!

What's Changed

fix(build): mode env for "import" condition" by @dai-shi in fix(build): mode env for "import" condition" pmndrs/zustand#1845

New Contributors

@Debbl made their first contribution in docs(recipes): fix description of devtools store naming pmndrs/zustand#1792
@Nipodemos made their first contribution in Add section for usage of persist middleware with NextJS pmndrs/zustand#1782
@vadimshvetsov made their first contribution in Fix saving state in URL hash example demo pmndrs/zustand#1800
@bobylito made their first contribution in docs: fixes typo on variable name pmndrs/zustand#1810
@celineling made their first contribution in docs: persist and connect state with url pmndrs/zustand#1804
@valerii15298 made their first contribution in Update readme.md: add pnpm as install option pmndrs/zustand#1819
@Hecmatyar made their first contribution in Update third-party-libraries.md pmndrs/zustand#1816
@203x made their first contribution in docs(guides): fix "useHydration hook" pmndrs/zustand#1826
@Ciensprog made their first contribution in docs(readme): fix import of "produce" function pmndrs/zustand#1844
@Romainlg29 made their first contribution in docs: added a new third party lib pmndrs/zustand#1843
@dcorb made their first contribution in [Documentation] Import shallow from right package pmndrs/zustand#1847
@ivoilic made their first contribution in Added zustand-ards to the third-party libraries list pmndrs/zustand#1856
@Kiku-CN made their first contribution in docs: correct import alias syntax pmndrs/zustand#1889
@LartyHD made their first contribution in Update comment //store.ts to //store.tsx in zustand-v3-create-context.md pmndrs/zustand#1893
@ChoiHyunjin made their first contribution in docs(readme): modify usage of Redux devtools pmndrs/zustand#1903
@thesuryavivek made their first contribution in docs: fix typo 'with be' to 'will be' pmndrs/zustand#1906
@thedipankarroy made their first contribution in 📝 Fixed some grammar and punctuation pmndrs/zustand#1913

Full Changelog: pmndrs/zustand@v4.3.8...v4.3.9

v4.3.8

For persist middleware, a new option for createJSONStorage in introduced to support more cases. Note that createJSONStorage isn't a required function (and it's not very recommended as it's not type safe), and one should create a custom storage for more use cases.

What's Changed

chore: add extension in imports by @dai-shi in chore: add extension in imports pmndrs/zustand#1678
feat(middleware/persist): improve createJSONStorage for Maps by @lauhon in feat(middleware/persist): improve createJSONStorage for Maps pmndrs/zustand#1763
chore(tests): migrate to vitest by @arjunvegda in chore(tests): migrate to vitest pmndrs/zustand#1753

New Contributors

@JacobWeisenburger made their first contribution in fix(docs): fixes ExtractState in TypeScript guide pmndrs/zustand#1737
@spacemeowx2 made their first contribution in fix(docs): broken testing doc link pmndrs/zustand#1742
@arjunvegda made their first contribution in chore: prevent merging eslint configs pmndrs/zustand#1754
@zc627788 made their first contribution in Fix document details pmndrs/zustand#1752
@arvinxx made their first contribution in docs: fix document error of persist with hydration pmndrs/zustand#1758
@SilentFlute made their first contribution in fix: sample startup failure issue fix pmndrs/zustand#1762
@dannobytes made their first contribution in docs(typescript): fix bounded use store example pmndrs/zustand#1779
@BLooDBRothER made their first contribution in Add code heading in comparison with Zustand and Redux pmndrs/zustand#1777
@lauhon made their first contribution in feat(middleware/persist): improve createJSONStorage for Maps pmndrs/zustand#1763

Full Changelog: pmndrs/zustand@v4.3.7...v4.3.8

v4.3.7

This includes a couple of improvements in persist middleware.

What's Changed

feat(middleware/persist): add skip hydration option Add ability to delete, or choose not to rehydrate the store in onRehydrateStorage pmndrs/zustand#405 by @gmanninglive in feat(middleware/persist): add skip hydration option #405 pmndrs/zustand#1647
fix(middleware/persist): ensure persist does not drop updates in onRehydrateStorage when using a synchronous storage API by @coffeebeats in fix(middleware/persist): ensure persist does not drop updates in onRehydrateStorage when using a synchronous storage API pmndrs/zustand#1689
fix(middleware/persist): ensure argument for onRehydrateStorage and onHydrate is defined on first hydration by @coffeebeats in fix(middleware/persist): ensure argument for onRehydrateStorage and onHydrate is defined on first hydration pmndrs/zustand#1692

New Contributors

@hi-otto made their first contribution in fix(doc): update state-with-url-hash demo pmndrs/zustand#1687
@pastelmind made their first contribution in Don't recommend memoizing selectors pmndrs/zustand#1707
@gmanninglive made their first contribution in feat(middleware/persist): add skip hydration option #405 pmndrs/zustand#1647
@coffeebeats made their first contribution in fix(middleware/persist): ensure persist does not drop updates in onRehydrateStorage when using a synchronous storage API pmndrs/zustand#1689

Full Changelog: pmndrs/zustand@v4.3.6...v4.3.7

v4.3.6

This has a little improvement for library authors.

(truncated — see source for full notes)

Generated by ADMS Sources: 11 GitHub Releases, 2 not available.

seberm-6 · 2026-04-23T11:01:17Z

Hey, sorry for the noise. This was caused by a bug in our automated dependency update system that incorrectly included upstream changelog content in PR comments, triggering notifications to external contributors. The feature flag has been turned off and we're working on a fix. Sorry about that again.

Executing automated changes

e77f1e8

gh-worker-campaigns-3e9aa4 Bot added campaigner-automated-change adms-medium-severity adms-minor-update adms-mode-all-updates adms-npm adms-dependency-update labels Apr 23, 2026

campaigner-prod Bot closed this Apr 23, 2026

Conversation

gh-worker-campaigns-3e9aa4 Bot commented Apr 23, 2026

Updates

Security Details

Review Checklist

Uh oh!

campaigner-prod Bot commented Apr 23, 2026 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.29.2

v7.29.2 (2026-03-16)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.29.1

v7.29.1 (2026-02-04)

🐛 Bug Fix

Committers: 2

v7.29.0

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6

v7.28.6 (2026-01-12)

🐛 Bug Fix

v7.29.0

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.28.5

v7.28.5 (2025-10-23)

v7.29.2

v7.29.2 (2026-03-16)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.29.1

v7.29.1 (2026-02-04)

🐛 Bug Fix

Committers: 2

v7.29.0

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6

v7.28.6 (2026-01-12)

🐛 Bug Fix

v2.48.0

What's Changed

Documentation

Static Analysis

v2.47.0

What's Changed

Static Analysis

Synthetics

Chores

v2.46.2

What's Changed

Static Analysis

Chores

v2.46.1

What's Changed

Serverless

Static Analysis

New Contributors

v2.46.0

What's Changed

campaigner-prod Bot commented Apr 23, 2026 •

edited by atlassian Bot

Loading