chore(deps): bump the minor-patch-dependencies group in /infra with 14 updates by dependabot[bot] · Pull Request #5 · 1xINTERNET/island.tax

dependabot · 2025-05-06T15:17:24Z

Bumps the minor-patch-dependencies group in /infra with 14 updates:

Package	From	To
@aws-sdk/client-ssm	`3.145.0`	`3.803.0`
@types/lodash	`4.14.160`	`4.17.16`
aws-sdk	`2.1544.0`	`2.1692.0`
glob	`10.3.3`	`10.4.5`
json-schema-to-zod	`2.4.1`	`2.6.1`
yaml	`2.6.0`	`2.7.1`
@babel/core	`7.23.9`	`7.27.1`
@babel/plugin-transform-modules-commonjs	`7.23.3`	`7.27.1`
@types/js-yaml	`3.12.5`	`3.12.10`
@types/node	`14.14.14`	`14.18.63`
esbuild	`0.14.39`	`0.25.4`
esbuild-register	`3.3.2`	`3.6.0`
jest	`27.2.4`	`27.5.1`
typescript	`4.6.4`	`4.9.5`

Updates @aws-sdk/client-ssm from 3.145.0 to 3.803.0

Release notes

Sourced from @aws-sdk/client-ssm's releases.

v3.803.0

3.803.0(2025-05-05)

Chores

codegen: Upgrade to Smithy 1.57.1 (#7049) (f9612248)

Documentation Changes

client-ecs: Add support to roll back an In_Progress ECS Service Deployment (28c0e82d)

New Features

clients: update client endpoints as of 2025-05-05 (ba7c2bf2)

client-device-farm: Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. (4c93f9a6)

client-ec2: This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. (0332513e)

client-datazone: This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. (c23b2fb7)

client-mediaconvert: This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. (c8dc7731)

Tests

signature-v4-multi-region: long-lived resources for cfkvs sigv4a e2e test (#7050) (b66091ba)

For list of updated packages, view updated-packages.md in assets-3.803.0.zip

v3.802.0

3.802.0(2025-05-02)

Chores

codegen:

upgrade to smithy-1.57.0 (#7047) (90b5ace4)

update smithy to 1.56.0 (#7045) (498fba2a)

Documentation Changes

client-directory-service: Doc only update - fixed typos. (b15810ac)

New Features

clients: update client endpoints as of 2025-05-02 (bdc8944d)

client-kinesis: Marking ResourceARN as required for Amazon Kinesis Data Streams APIs TagResource, UntagResource, and ListTagsForResource. (9edf14f4)

client-bedrock-data-automation: Added support for Custom output and blueprints for AUDIO data types. (2591cbd2)

... (truncated)

Changelog

Sourced from @aws-sdk/client-ssm's changelog.

3.803.0 (2025-05-05)

Note: Version bump only for package @aws-sdk/client-ssm

3.799.0 (2025-04-29)

Features

client-ssm: This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. (ac4a855)

3.798.0 (2025-04-28)

Note: Version bump only for package @aws-sdk/client-ssm

3.797.0 (2025-04-25)

Note: Version bump only for package @aws-sdk/client-ssm

3.796.0 (2025-04-24)

Note: Version bump only for package @aws-sdk/client-ssm

3.787.0 (2025-04-10)

Note: Version bump only for package @aws-sdk/client-ssm

... (truncated)

Commits

3e150ad Publish v3.803.0
f961224 chore(codegen): Upgrade to Smithy 1.57.1 (#7049)
2025aba Publish v3.799.0
ac4a855 feat(client-ssm): This release adds support for just-In-time node access in A...
093005b chore(clients): populate default values for auth scheme preference (#7038)
c2c5635 Publish v3.798.0
d01fbaa chore(deps): resolve auth schemes based on the preference list (#7036)
9c59040 Publish v3.797.0
ef85f2e chore(clients): add config authSchemePreference (#7026)
74b5392 Publish v3.796.0
Additional commits viewable in compare view

Updates @types/lodash from 4.14.160 to 4.17.16

Commits

See full diff in compare view

Updates aws-sdk from 2.1544.0 to 2.1692.0

Release notes

Sourced from aws-sdk's releases.

Release v2.1692.0

See changelog for more information.

Release v2.1691.0

See changelog for more information.

Release v2.1690.0

See changelog for more information.

Release v2.1689.0

See changelog for more information.

Release v2.1688.0

See changelog for more information.

Release v2.1687.0

See changelog for more information.

Release v2.1686.0

See changelog for more information.

Release v2.1685.0

See changelog for more information.

Release v2.1684.0

See changelog for more information.

Release v2.1683.0

See changelog for more information.

Release v2.1682.0

See changelog for more information.

Release v2.1681.0

See changelog for more information.

Release v2.1680.0

See changelog for more information.

Release v2.1679.0

See changelog for more information.

Release v2.1678.0

See changelog for more information.

Release v2.1677.0

See changelog for more information.

Release v2.1676.0

See changelog for more information.

... (truncated)

Commits

966fa6c Updates SDK to v2.1692.0
5d0e38a Delete EC2 launch configuration e2e tests (#4685)
b9ce346 chore: fix issue config (#4683)
c066681 Update issue template config and disable docs requests (#4682)
163a7cf Modified bug issue template to add checkbox to report potential regression. (...
67e92db chore(README): update maintenance message (#4681)
b0e37ed Update README with v2 maintenance mode (#4677)
01487e3 Updates SDK to v2.1691.0
3bd7993 Update maintenance mode message (#4676)
1d6dc92 Updates SDK to v2.1690.0
Additional commits viewable in compare view

Updates glob from 10.3.3 to 10.4.5

Changelog

Sourced from glob's changelog.

changeglob

11.0

Drop support for node before v20

10.4

Add includeChildMatches: false option

Export the Ignore class

10.3

Add --default -p flag to provide a default pattern

exclude symbolic links to directories when follow and nodir are both set

10.2

Add glob cli

10.1

Return '.' instead of the empty string '' when the current working directory is returned as a match.

Add posix: true option to return / delimited paths, even on Windows.

10.0.0

No default exports, only named exports

9.3.3

Upgraded minimatch to v8, adding support for any degree of nested extglob patterns.

9.3

Add aliases for methods. glob.sync, glob.stream, glob.stream.sync, etc.

9.2

Support using a custom fs object, which is passed to PathScurry

add maxDepth option

add stat option

add custom Ignore support

9.1

... (truncated)

Commits

1f0c1ca 10.4.5
eaf31dc whatever, just allow any engines
7827516 10.4.4
d06c8f8 restore support for node 14.latest and 16.latest
c14b787 10.4.3
8a69def node 14 no longer supported
eef7ea3 10.4.2
c76a7d2 use package-json-from-dist to look up package.json
3cb1ed7 10.4.1
7a6c2a2 changelog 10.4
Additional commits viewable in compare view

Updates json-schema-to-zod from 2.4.1 to 2.6.1

Commits

See full diff in compare view

Updates yaml from 2.6.0 to 2.7.1

Release notes

Sourced from yaml's releases.

v2.7.1

Do not allow seq with single-line collection value on same line with map key (#603)

Improve warning & avoid TypeError on bad YAML 1.1 nodes (#610)

v2.7.0

The library is now available on JSR as @eemeli/yaml and on deno.land/x as yaml. In addition to Node.js and browsers, it should work in Deno, Bun, and Cloudflare Workers.

Use .ts extension in all relative imports (#591)

Ignore newline after block seq indicator as space before value (#590)

Require Node.js 14.18 or later (was 14.6) (#598)

v2.6.1

Do not strip :00 seconds from !!timestamp values (#578, with thanks to @qraynaud)

Tighten regexp for JSON !!bool (#587, with thanks to @vra5107)

Default to literal block scalar if folded would overflow (#585)

Commits

a141bc0 2.7.1
a880b42 fix: Do not allow seq with single-line collection value on same line with map...
923d67b test: Add test for tab after indent spaces for flow-in-block (#604)
7cf843c test: Add descriptive names to tests with issue references
9cf06d2 fix: Improve warning & avoid TypeError on bad YAML 1.1 nodes (fixes #610)
50cf76b chore: Update docs-slate to skip its CI tests
3b2362a docs: Add install option deno add jsr:@eemeli/yaml
83cb780 chore: Update docs to use Slate 2.13.1
9b02456 chore: Fix JSR version
8f512b5 2.7.0
Additional commits viewable in compare view

Updates @babel/core from 7.23.9 to 7.27.1

Release notes

Sourced from @babel/core's releases.

v7.27.1 (2025-04-30)

Thanks @kermanx and @woaitsAryan for your first PRs!

👓 Spec Compliance

babel-parser

#17254 Allow using of as lexical declaration within for (@JLHwung)

#17230 Disallow get/set in TSPropertySignature (@JLHwung)

babel-parser, babel-types

#17193 Stricter TSImportType options parsing (@JLHwung)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse

#17137 fix: do expressions should allow early exit (@kermanx)

babel-helper-wrap-function, babel-plugin-transform-async-to-generator

#17251 Fix: propagate argument evaluation errors through async promise chain (@magic-akari)

babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator

#17231 fix apply()/call() annotated as pure (@Lacsw)

babel-helper-fixtures, babel-parser

#17233 Create ChainExpression within TSInstantiationExpression (@JLHwung)

babel-generator, babel-parser

#17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@JLHwung)

babel-parser

#17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@JLHwung)

#17080 Fix start of TSParameterProperty (@JLHwung)

babel-compat-data, babel-preset-env

#17228 Update firefox bugfix compat data (@JLHwung)

babel-traverse

#17156 fix: Objects and arrays with multiple references should not be evaluated (@liuxingbaoyu)

babel-generator

#17216 Fix: support const type parameter in generator (@JLHwung)

💅 Polish

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

#17221 Reduce generated names size for the 10th-11th (@nicolo-ribaudo)

🏠 Internal

babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17263 Remove unused regenerator-runtime dep in @babel/runtime (@nicolo-ribaudo)

babel-compat-data, babel-preset-env

#17256 Tune plugin compat data (@JLHwung)

babel-compat-data, babel-standalone

#17236 migrate babel-compat-data build script to mjs (@JLHwung)

babel-register

#16844 Migrate @babel/register to cts (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)

All packages

#17207 Enforce node protocol import (@JLHwung)

... (truncated)

Changelog

Sourced from @babel/core's changelog.

v7.27.1 (2025-04-30)

👓 Spec Compliance

babel-parser

#17254 Allow using of as lexical declaration within for (@JLHwung)

#17230 Disallow get/set in TSPropertySignature (@JLHwung)

babel-parser, babel-types

#17193 Stricter TSImportType options parsing (@JLHwung)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse

#17137 fix: do expressions should allow early exit (@kermanx)

babel-helper-wrap-function, babel-plugin-transform-async-to-generator

#17251 Fix: propagate argument evaluation errors through async promise chain (@magic-akari)

babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator

#17231 fix apply()/call() annotated as pure (@Lacsw)

babel-helper-fixtures, babel-parser

#17233 Create ChainExpression within TSInstantiationExpression (@JLHwung)

babel-generator, babel-parser

#17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@JLHwung)

babel-parser

#17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@JLHwung)

#17080 Fix start of TSParameterProperty (@JLHwung)

babel-compat-data, babel-preset-env

#17228 Update firefox bugfix compat data (@JLHwung)

babel-traverse

#17156 fix: Objects and arrays with multiple references should not be evaluated (@liuxingbaoyu)

babel-generator

#17216 Fix: support const type parameter in generator (@JLHwung)

💅 Polish

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

#17221 Reduce generated names size for the 10th-11th (@nicolo-ribaudo)

🏠 Internal

babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17263 Remove unused regenerator-runtime dep in @babel/runtime (@nicolo-ribaudo)

babel-compat-data, babel-preset-env

#17256 Tune plugin compat data (@JLHwung)

babel-compat-data, babel-standalone

#17236 migrate babel-compat-data build script to mjs (@JLHwung)

Other

#17232 Bump typescript-eslint to 8.29.1 (@JLHwung)

#17219 test: add basic typescript-eslint integration tests (@JLHwung)

#17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)

babel-register

#16844 Migrate @babel/register to cts (@liuxingbaoyu)

babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types

#17207 Enforce node protocol import (@JLHwung)

babel-plugin-transform-regenerator

... (truncated)

Commits

eebd3a0 v7.27.1
c19e00e [babel 8] Remove unnecessary CJS ESM wrapper (#17261)
65b1c1d Ignore browser-only files in coverage reports (#17262)
35e7907 Update error stack test (#17252)
afe6ae2 Update jest-light-runner to v0.7.0 (#17245)
317e332 Enforce node protocol import (#17207)
5e991bd add require-esm babel-register test (#17206)
fdc0fb5 [Babel 8] Bump nodejs requirements to ^20.19.0 || >= 22.12.0 (#17204)
5e1f1bc Fix failing Node.js 20 tests (#17191)
e1ce99d v7.26.10
Additional commits viewable in compare view

Updates @babel/plugin-transform-modules-commonjs from 7.23.3 to 7.27.1

Release notes

Sourced from @babel/plugin-transform-modules-commonjs's releases.

v7.27.1 (2025-04-30)

Thanks @kermanx and @woaitsAryan for your first PRs!

👓 Spec Compliance

babel-parser

#17254 Allow using of as lexical declaration within for (@JLHwung)

#17230 Disallow get/set in TSPropertySignature (@JLHwung)

babel-parser, babel-types

#17193 Stricter TSImportType options parsing (@JLHwung)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse

#17137 fix: do expressions should allow early exit (@kermanx)

babel-helper-wrap-function, babel-plugin-transform-async-to-generator

#17251 Fix: propagate argument evaluation errors through async promise chain (@magic-akari)

babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator

#17231 fix apply()/call() annotated as pure (@Lacsw)

babel-helper-fixtures, babel-parser

#17233 Create ChainExpression within TSInstantiationExpression (@JLHwung)

babel-generator, babel-parser

#17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@JLHwung)

babel-parser

#17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@JLHwung)

#17080 Fix start of TSParameterProperty (@JLHwung)

babel-compat-data, babel-preset-env

#17228 Update firefox bugfix compat data (@JLHwung)

babel-traverse

#17156 fix: Objects and arrays with multiple references should not be evaluated (@liuxingbaoyu)

babel-generator

#17216 Fix: support const type parameter in generator (@JLHwung)

💅 Polish

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

#17221 Reduce generated names size for the 10th-11th (@nicolo-ribaudo)

🏠 Internal

babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17263 Remove unused regenerator-runtime dep in @babel/runtime (@nicolo-ribaudo)

babel-compat-data, babel-preset-env

#17256 Tune plugin compat data (@JLHwung)

babel-compat-data, babel-standalone

#17236 migrate babel-compat-data build script to mjs (@JLHwung)

babel-register

#16844 Migrate @babel/register to cts (@liuxingbaoyu)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)

All packages

#17207 Enforce node protocol import (@JLHwung)

... (truncated)

Changelog

Sourced from @babel/plugin-transform-modules-commonjs's changelog.

v7.27.1 (2025-04-30)

👓 Spec Compliance

babel-parser

#17254 Allow using of as lexical declaration within for (@JLHwung)

#17230 Disallow get/set in TSPropertySignature (@JLHwung)

babel-parser, babel-types

#17193 Stricter TSImportType options parsing (@JLHwung)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse

#17137 fix: do expressions should allow early exit (@kermanx)

babel-helper-wrap-function, babel-plugin-transform-async-to-generator

#17251 Fix: propagate argument evaluation errors through async promise chain (@magic-akari)

babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator

#17231 fix apply()/call() annotated as pure (@Lacsw)

babel-helper-fixtures, babel-parser

#17233 Create ChainExpression within TSInstantiationExpression (@JLHwung)

babel-generator, babel-parser

#17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@JLHwung)

babel-parser

#17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@JLHwung)

#17080 Fix start of TSParameterProperty (@JLHwung)

babel-compat-data, babel-preset-env

#17228 Update firefox bugfix compat data (@JLHwung)

babel-traverse

#17156 fix: Objects and arrays with multiple references should not be evaluated (@liuxingbaoyu)

babel-generator

#17216 Fix: support const type parameter in generator (@JLHwung)

💅 Polish

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

#17221 Reduce generated names size for the 10th-11th (@nicolo-ribaudo)

🏠 Internal

babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17263 Remove unused regenerator-runtime dep in @babel/runtime (@nicolo-ribaudo)

babel-compat-data, babel-preset-env

#17256 Tune plugin compat data (@JLHwung)

babel-compat-data, babel-standalone

#17236 migrate babel-compat-data build script to mjs (@JLHwung)

Other

#17232 Bump typescript-eslint to 8.29.1 (@JLHwung)

#17219 test: add basic typescript-eslint integration tests (@JLHwung)

#17205 Inline regenerator in the relevant packages (@nicolo-ribaudo)

babel-register

#16844 Migrate @babel/register to cts (@liuxingbaoyu)

babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types

#17207 Enforce node protocol import (@JLHwung)

babel-plugin-transform-regenerator

... (truncated)

Commits

eebd3a0 v7.27.1
b1f9184 Reduce interopRequireWildcard size (#16538)
317e332 Enforce node protocol import (#17207)
fdc0fb5 [Babel 8] Bump nodejs requirements to ^20.19.0 || >= 22.12.0 (#17204)
cd24cc0 chore: Update TS 5.7 (#17053)
36ca8fa v7.26.3
38d26cd perf: Remove use of simplifyAccess (#16954)
422c6d0 perf: Improve module transforms (#16882)
b07957e v7.25.9
af91759 fix: Accidentally publishing useless files (#16917)
Additional commits viewable in compare view

Updates @types/js-yaml from 3.12.5 to 3.12.10

Commits

See full diff in compare view

Updates @types/node from 14.14.14 to 14.18.63

Commits

See full diff in compare view

Updates esbuild from 0.14.39 to 0.25.4

Release notes

Sourced from esbuild's releases.

v0.25.4
Add simple support for CORS to esbuild's development server (#4125)

Starting with version 0.25.0, esbuild's development server is no longer configured to serve cross-origin requests. This was a deliberate change to prevent any website you visit from accessing your running esbuild development server. However, this change prevented (by design) certain use cases such as "debugging in production" by having your production website load code from localhost where the esbuild development server is running.

To enable this use case, esbuild is adding a feature to allow Cross-Origin Resource Sharing (a.k.a. CORS) for simple requests. Specifically, passing your origin to the new cors option will now set the Access-Control-Allow-Origin response header when the request has a matching Origin header. Note that this currently only works for requests that don't send a preflight OPTIONS request, as esbuild's development server doesn't currently support OPTIONS requests.

Some examples:
CLI:
esbuild --servedir=. --cors-origin=https://example.com
JS:
const ctx = await esbuild.context({})
await ctx.serve({
  servedir: '.',
  cors: {
    origin: 'https://example.com',
  },
})
Go:
ctx, _ := api.Context(api.BuildOptions{})
ctx.Serve(api.ServeOptions{
  Servedir: ".",
  CORS: api.CORSOptions{
    Origin: []string{"https://example.com"},
  },
})
The special origin * can be used to allow any origin to access esbuild's development server. Note that this means any website you visit will be able to read everything served by esbuild.
Pass through invalid URLs in source maps unmodified (#4169)

This fixes a regression in version 0.25.0 where sources in source maps that form invalid URLs were not being passed through to the output. Version 0.25.0 changed the interpretation of sources from file paths to URLs, which means that URL parsing can now fail. Previously URLs that couldn't be parsed were replaced with the empty string. With this release, invalid URLs in sources should now be passed through unmodified.

Handle exports named __proto__ in ES modules (#4162, #4163)

In JavaScript, the special property name __proto__ sets the prototype when used inside an object literal. Previously esbuild's ESM-to-CommonJS conversion didn't special-case the property name of exports named __proto__ so the exported getter accidentally became the prototype of the object literal. It's unclear what this affects, if anything, but it's better practice to avoid this by using a computed property name in this case.

This fix was contributed by @magic-akari.

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2022

This changelog documents all esbuild versions published in the year 2022 (versions 0.14.11 through 0.16.12).

0.16.12
Loader defaults to js for extensionless files (#2776)

Certain packages contain files without an extension. For example, the yargs package contains the file yargs/yargs which has no extension. Node, Webpack, and Parcel can all understand code that imports yargs/yargs because they assume that the file is JavaScript. However, esbuild was previously unable to understand this code because it relies on the file extension to tell it how to interpret the file. With this release, esbuild will now assume files without an extension are JavaScript files. This can be customized by setting the loader for "" (the empty string, representing files without an extension) to another loader. For example, if you want files without an extension to be treated as CSS instead, you can do that like this:
CLI:
esbuild --bundle --loader:=css
JS:
esbuild.build({
  bundle: true,
  loader: { '': 'css' },
})
Go:
api.Build(api.BuildOptions{
  Bundle: true,
  Loader: map[string]api.Loader{"": api.LoaderCSS},
})
In addition, the "type" field in package.json files now only applies to files with an explicit .js, .jsx, .ts, or .tsx extension. Previously it was incorrectly applied by esbuild to all files that had an extension other than .mjs, .mts, .cjs, or .cts including extensionless files. So for example an extensionless file in a "type": "module" package is now treated as CommonJS instead of ESM.
0.16.11
Avoid a syntax error in the presence of direct eval (#2761)

The behavior of nested function declarations in JavaScript depends on whether the code is run in strict mode or not. It would be problematic if esbuild preserved nested function declarations in its output because then the behavior would depend on whether the output was run in strict mode or not instead of respecting the strict mode behavior of the original source code. To avoid this, esbuild transforms nested function declarations to preserve the intended behavior of the original source code regardless of whether the output is run in strict mode or not:
// Original code
if (true) {
  function foo() {}
  console.log(!!foo)
  foo = null
  console.log(!!foo)
}

... (truncated)

Commits

218d29e publish 0.25.4 to npm
e66cd0b dev server: simple support for CORS requests (#4171)
8bf3368 js api: validate some options as arrays of strings
1e7375a js api: simplify comma-separated array validation
5f5964d release notes for

dependabot · 2025-05-06T15:17:25Z

Labels

The following labels could not be found: automerge, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2025-05-06T15:17:26Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
island-tax	❌ Failed (Inspect)			May 7, 2025 10:23am

Bumps the minor-patch-dependencies group in /infra with 14 updates: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-ssm](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ssm) | `3.145.0` | `3.803.0` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.14.160` | `4.17.16` | | [aws-sdk](https://github.com/aws/aws-sdk-js) | `2.1544.0` | `2.1692.0` | | [glob](https://github.com/isaacs/node-glob) | `10.3.3` | `10.4.5` | | [json-schema-to-zod](https://github.com/StefanTerdell/json-schema-to-zod) | `2.4.1` | `2.6.1` | | [yaml](https://github.com/eemeli/yaml) | `2.6.0` | `2.7.1` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.23.9` | `7.27.1` | | [@babel/plugin-transform-modules-commonjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-commonjs) | `7.23.3` | `7.27.1` | | [@types/js-yaml](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/js-yaml) | `3.12.5` | `3.12.10` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `14.14.14` | `14.18.63` | | [esbuild](https://github.com/evanw/esbuild) | `0.14.39` | `0.25.4` | | esbuild-register | `3.3.2` | `3.6.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `27.2.4` | `27.5.1` | | [typescript](https://github.com/microsoft/TypeScript) | `4.6.4` | `4.9.5` | Updates `@aws-sdk/client-ssm` from 3.145.0 to 3.803.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ssm/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.803.0/clients/client-ssm) Updates `@types/lodash` from 4.14.160 to 4.17.16 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `aws-sdk` from 2.1544.0 to 2.1692.0 - [Release notes](https://github.com/aws/aws-sdk-js/releases) - [Commits](aws/aws-sdk-js@v2.1544.0...v2.1692.0) Updates `glob` from 10.3.3 to 10.4.5 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.3.3...v10.4.5) Updates `json-schema-to-zod` from 2.4.1 to 2.6.1 - [Commits](https://github.com/StefanTerdell/json-schema-to-zod/commits) Updates `yaml` from 2.6.0 to 2.7.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.6.0...v2.7.1) Updates `@babel/core` from 7.23.9 to 7.27.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.1/packages/babel-core) Updates `@babel/plugin-transform-modules-commonjs` from 7.23.3 to 7.27.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.1/packages/babel-plugin-transform-modules-commonjs) Updates `@types/js-yaml` from 3.12.5 to 3.12.10 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/js-yaml) Updates `@types/node` from 14.14.14 to 14.18.63 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `esbuild` from 0.14.39 to 0.25.4 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2022.md) - [Commits](evanw/esbuild@v0.14.39...v0.25.4) Updates `esbuild-register` from 3.3.2 to 3.6.0 Updates `jest` from 27.2.4 to 27.5.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v27.5.1/packages/jest) Updates `typescript` from 4.6.4 to 4.9.5 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v4.6.4...v4.9.5) --- updated-dependencies: - dependency-name: "@aws-sdk/client-ssm" dependency-version: 3.803.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: "@types/lodash" dependency-version: 4.17.16 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: aws-sdk dependency-version: 2.1692.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: glob dependency-version: 10.4.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: json-schema-to-zod dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: yaml dependency-version: 2.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: "@babel/core" dependency-version: 7.27.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: "@babel/plugin-transform-modules-commonjs" dependency-version: 7.27.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: "@types/js-yaml" dependency-version: 3.12.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch-dependencies - dependency-name: "@types/node" dependency-version: 14.18.63 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: esbuild dependency-version: 0.25.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: esbuild-register dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: jest dependency-version: 27.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch-dependencies - dependency-name: typescript dependency-version: 4.9.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-09-22T03:24:42Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

vercel bot had a problem deploying to Preview May 6, 2025 15:22 Failure

eucr force-pushed the main branch from a20fa66 to 200e9dd Compare May 7, 2025 10:01

dependabot bot force-pushed the dependabot/npm_and_yarn/infra/minor-patch-dependencies-23d4d29d5b branch from 6280ee7 to 0f97ca3 Compare May 7, 2025 10:10

vercel bot had a problem deploying to Preview May 7, 2025 10:23 Failure

dependabot bot force-pushed the dependabot/npm_and_yarn/infra/minor-patch-dependencies-23d4d29d5b branch from 0f97ca3 to 6515ebc Compare May 12, 2025 03:33

dependabot bot closed this Sep 22, 2025

dependabot bot deleted the dependabot/npm_and_yarn/infra/minor-patch-dependencies-23d4d29d5b branch September 22, 2025 03:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-patch-dependencies group in /infra with 14 updates#5

chore(deps): bump the minor-patch-dependencies group in /infra with 14 updates#5
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/infra/minor-patch-dependencies-23d4d29d5b

dependabot bot commented on behalf of github May 6, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github May 6, 2025

Uh oh!

vercel bot commented May 6, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 22, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github May 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.803.0

3.803.0(2025-05-05)

Chores

Documentation Changes

New Features

Tests

v3.802.0

3.802.0(2025-05-02)

Chores

Documentation Changes

New Features

3.803.0 (2025-05-05)

3.799.0 (2025-04-29)

Features

3.798.0 (2025-04-28)

3.797.0 (2025-04-25)

3.796.0 (2025-04-24)

3.787.0 (2025-04-10)

Release v2.1692.0

Release v2.1691.0

Release v2.1690.0

Release v2.1689.0

Release v2.1688.0

Release v2.1687.0

Release v2.1686.0

Release v2.1685.0

Release v2.1684.0

Release v2.1683.0

Release v2.1682.0

Release v2.1681.0

Release v2.1680.0

Release v2.1679.0

Release v2.1678.0

Release v2.1677.0

Release v2.1676.0

changeglob

11.0

10.4

10.3

10.2

10.1

10.0.0

9.3.3

9.3

9.2

9.1

v2.7.1

v2.7.0

v2.6.1

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

v0.25.4

Changelog: 2022

0.16.12

0.16.11

Uh oh!

dependabot bot commented on behalf of github May 6, 2025

Labels

Uh oh!

dependabot bot commented on behalf of github May 6, 2025 •

edited

Loading

vercel bot commented May 6, 2025 •

edited

Loading