build: update all non-major dependencies

[angular-robot]

This PR contains the following updates:

Package	Type	Update	Change
@babel/runtime (source)	dependencies	minor	7.27.6 -> 7.28.2
@eslint/js (source)	devDependencies	minor	9.31.0 -> 9.32.0
@modelcontextprotocol/sdk (source)	dependencies	minor	1.16.0 -> 1.17.0
algoliasearch (source)	dependencies	patch	5.34.0 -> 5.34.1
baseline-browser-mapping	devDependencies	patch	2.5.5 -> 2.5.6
eslint (source)	devDependencies	minor	9.31.0 -> 9.32.0
github/codeql-action	action	patch	v3.29.3 -> v3.29.4
rollup (source)	devDependencies	minor	4.45.1 -> 4.46.0
source-map	dependencies	patch	0.7.4 -> 0.7.6
verdaccio (source)	devDependencies	patch	6.1.5 -> 6.1.6
vite (source)	dependencies	patch	7.0.5 -> 7.0.6

---

Release Notes

babel/babel (@​babel/runtime)

v7.28.2

Compare Source

🐛 Bug Fix

• babel-types
  • #​17445 [babel 7] Make operator param in t.tsTypeOperator optional (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17441 fix: regeneratorDefine compatibility with es5 strict mode (@​liuxingbaoyu)

eslint/eslint (@​eslint/js)

v9.32.0

Compare Source

Features

• 1245000 feat: support explicit resource management in core rules (#​19828) (fnx)
• 0e957a7 feat: support typescript types in accessor rules (#​19882) (fnx)

Bug Fixes

• 960fd40 fix: Upgrade @​eslint/js (#​19971) (Nicholas C. Zakas)
• bbf23fa fix: Refactor reporting into FileReport (#​19877) (Nicholas C. Zakas)
• d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#​19965) (Milos Djermanovic)
• f46fc6c fix: report only global references in no-implied-eval (#​19932) (Nitin Kumar)
• 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#​19944) (ntnyq)
• 3173305 fix: update execScript message in no-implied-eval rule (#​19937) (TKDev7)

Documentation

• 86e7426 docs: Update README (GitHub Actions Bot)

Chores

• 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
• 74f01a3 ci: unpin jiti to version ^2.5.1 (#​19970) (루밀LuMir)
• 2ab1381 ci: pin jiti to version 2.4.2 (#​19964) (Francesco Trotta)
• b7f7545 test: switch to flat config mode in SourceCode tests (#​19953) (Milos Djermanovic)
• f5a35e3 test: switch to flat config mode in eslint-fuzzer (#​19960) (Milos Djermanovic)
• e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#​19949) (Francesco Trotta)
• e855717 chore: switch performance tests to hyperfine (#​19919) (Francesco Trotta)
• 2f73a23 test: switch to flat config mode in ast-utils tests (#​19948) (Milos Djermanovic)
• c565a53 chore: exclude further_reading_links.json from Prettier formatting (#​19943) (Milos Djermanovic)

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.17.0

Compare Source

What's Changed

• Add CODEOWNERS file for sdk by @​ihrpr in https://github.com/modelcontextprotocol/typescript-sdk/pull/781
• Add more robust base64 check by @​cliffhall in https://github.com/modelcontextprotocol/typescript-sdk/pull/786
• update codeowners by @​ihrpr in https://github.com/modelcontextprotocol/typescript-sdk/pull/803
• Fix indent by @​jiec-msft in https://github.com/modelcontextprotocol/typescript-sdk/pull/807
• fix: Explicitly declare accpet type to json when exchanging oauth token by @​JoJoJoJoJoJoJo in https://github.com/modelcontextprotocol/typescript-sdk/pull/801
• feat: support oidc discovery in client sdk by @​xiaoyijun in https://github.com/modelcontextprotocol/typescript-sdk/pull/652
• fix: remove extraneous code block in README.md by @​sd0ric4 in https://github.com/modelcontextprotocol/typescript-sdk/pull/791
• Bump form-data from 4.0.2 to 4.0.4 in the npm_and_yarn group across 1 directory by @​dependabot[bot] inhttps://github.com/modelcontextprotocol/typescript-sdk/pull/7988
• Bump version 1.17.0 by @​ihrpr in https://github.com/modelcontextprotocol/typescript-sdk/pull/810

New Contributors 🙏

• @​jiec-msft made their first contribution in https://github.com/modelcontextprotocol/typescript-sdk/pull/807
• @​sd0ric4 made their first contribution in https://github.com/modelcontextprotocol/typescript-sdk/pull/791

Full Changelog: modelcontextprotocol/typescript-sdk@1.16.0...1.17.0

algolia/algoliasearch-client-javascript (algoliasearch)

v5.34.1

Compare Source

• 84a1f4e422 refactor(specs): add interface to manipulate query parameter between composition API & Search API (#​5123) by @​ClaraMuller
• 995f185c07 chore(deps): dependencies 2025-07-21 (#​5129) by @​algolia-bot
• d1596a814e fix(specs): Add customSearchParameters to Variant schema, and add direction query param for GET abtests (#​5130) by @​leonardogavaudan
• f25e156dde fix(specs): value/price clarifications in the Insights API (#​5154) by @​kai687
• 3160f87f7b fix(clients): reduce chances of Push rate limiting (#​5153) by @​shortcuts

web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)

v2.5.6

Compare Source

github/codeql-action (github/codeql-action)

v3.29.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.4 - 23 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

rollup/rollup (rollup)

v4.46.0

Compare Source

2025-07-27

Features

• Optimize in checks on namespaces to keep them treeshake-able (#​6029)

Pull Requests

• #​5991: feat: update linux-loongarch64-gnu (@​wojiushixiaobai, @​lukastaegert)
• #​6029: feat: optimize in checks on namespaces to keep them treeshake-able (@​cyyynthia, @​lukastaegert)
• #​6033: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)

v4.45.3

Compare Source

2025-07-26

Bug Fixes

• Do not fail build if a const is reassigned but warn instead (#​6020)
• Fail with a helpful error message if an exported binding is not defined (#​6023)

Pull Requests

• #​6014: chore(deps): update dependency @​vue/language-server to v3 (@​renovate[bot])
• #​6015: chore(deps): update dependency vue-tsc to v3 (@​renovate[bot], @​lukastaegert)
• #​6016: fix(deps): update swc monorepo (major) (@​renovate[bot], @​lukastaegert)
• #​6017: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)
• #​6020: Make const reassignments only a warning (@​lukastaegert)
• #​6023: Throw descriptive error message for used export is not defined (@​TrickyPi)
• #​6027: feat: upgrade to NAPI-RS 3 stable (@​Brooooooklyn)
• #​6028: Update eslint-plugin-unicorn to resolve vulnerability (@​lukastaegert)
• #​6034: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

mozilla/source-map (source-map)

v0.7.6

Compare Source

Full Changelog: mozilla/source-map@0.7.5...0.7.6

v0.7.5

Compare Source

What's Changed

• Async by @​hildjj in https://github.com/mozilla/source-map/pull/341
• Add option to initialize mappings wasm via ArrayBuffer by @​rtsao in https://github.com/mozilla/source-map/pull/339
• Add expected arguments to assert.throws calls by @​Standard8 in https://github.com/mozilla/source-map/pull/347
• Update node version by @​gekim in https://github.com/mozilla/source-map/pull/352
• using top level context to determine node vs browser environment by @​sprockow in https://github.com/mozilla/source-map/pull/350
• Bump webpack-cli to v3.1 by @​redeyes2015 in https://github.com/mozilla/source-map/pull/361
• Pass through the implementation of more index map operations. by @​loganfsmyth in https://github.com/mozilla/source-map/pull/364
• Remove the bundled dist/ directory? by @​loganfsmyth in https://github.com/mozilla/source-map/pull/362
• Split up wasm loading based on compilation target. by @​loganfsmyth in https://github.com/mozilla/source-map/pull/363
• Use WHATWG's URL to implement all of source-map's URL operations. by @​loganfsmyth in https://github.com/mozilla/source-map/pull/371
• Fix typo by @​GianlucaGuarini in https://github.com/mozilla/source-map/pull/378
• Add Mozilla Code of Conduct in https://github.com/mozilla/source-map/pull/384
• Remove unused fromVLQSigned function by @​jridgewell in https://github.com/mozilla/source-map/pull/402
• Add lastGeneratedColumn to typing for MappingItem by @​samccone in https://github.com/mozilla/source-map/pull/374
• addMapping(): ensure that originalLine and originalColumn are null when original argument was undefined/null by @​GerHobbelt in https://github.com/mozilla/source-map/pull/395
• fix crash in url util function due to undefined root value by @​GerHobbelt in https://github.com/mozilla/source-map/pull/394
• minor binary-search code/comment fixes by @​GerHobbelt in https://github.com/mozilla/source-map/pull/393
• use Travis CI svg badge by @​fscherwi in https://github.com/mozilla/source-map/pull/407
• add prettier task for standardized code formatting => easier cross-branch/fork code comparison and merging by @​GerHobbelt in https://github.com/mozilla/source-map/pull/397
• Syntax highlight README HTML sample by @​brettz9 in https://github.com/mozilla/source-map/pull/415
• Add function to SourceMapConsumer TS interface by @​andersonvom in https://github.com/mozilla/source-map/pull/439
• Include types file extension in package.json by @​amcasey in https://github.com/mozilla/source-map/pull/448
• Require Node.js 12 or later & switch CI to GitHub Actions by @​eemeli in https://github.com/mozilla/source-map/pull/464
• Skip updating coveralls.io coverage by @​eemeli in https://github.com/mozilla/source-map/pull/466
• Update WASM binary and Land WASM rust sources in this repository by @​ochameau in https://github.com/mozilla/source-map/pull/465
• Update ESLint & Prettier to latest by @​eemeli in https://github.com/mozilla/source-map/pull/463
• Adopt & enforce the mozilla-central Prettier config by @​eemeli in https://github.com/mozilla/source-map/pull/467
• Simplify coverage tooling by @​eemeli in https://github.com/mozilla/source-map/pull/468
• Update to doctoc v2 & simplify call pattern by @​eemeli in https://github.com/mozilla/source-map/pull/469
• Filter out unnecessary rust tasks by @​eemeli in https://github.com/mozilla/source-map/pull/470
• Improve coverage by @​eemeli in https://github.com/mozilla/source-map/pull/471
• Include package-lock.json in repo by @​eemeli in https://github.com/mozilla/source-map/pull/472
• fix: convert result of allocate_mappings from signed to unsigned by @​nornagon in https://github.com/mozilla/source-map/pull/473
• Add support for the sourcemaps ignorelist by @​bomsy in https://github.com/mozilla/source-map/pull/481
• Remove .DS_Store by @​ledenis in https://github.com/mozilla/source-map/pull/485
• Fix reference to LICENSE file by @​AyanSinhaMahapatra in https://github.com/mozilla/source-map/pull/488
• Fix an off-by-1 error in section lookup by @​takikawa in https://github.com/mozilla/source-map/pull/507
• Add source map spec tests by @​takikawa in https://github.com/mozilla/source-map/pull/505
• Remove whatwg-url module by @​nchevobbe in https://github.com/mozilla/source-map/pull/517

New Contributors

• @​rtsao made their first contribution in https://github.com/mozilla/source-map/pull/339
• @​Standard8 made their first contribution in https://github.com/mozilla/source-map/pull/347
• @​gekim made their first contribution in https://github.com/mozilla/source-map/pull/352
• @​sprockow made their first contribution in https://github.com/mozilla/source-map/pull/350
• @​redeyes2015 made their first contribution in https://github.com/mozilla/source-map/pull/361
• @​GianlucaGuarini made their first contribution in https://github.com/mozilla/source-map/pull/378
• @​jridgewell made their first contribution in https://github.com/mozilla/source-map/pull/402
• @​GerHobbelt made their first contribution in https://github.com/mozilla/source-map/pull/395
• @​fscherwi made their first contribution in https://github.com/mozilla/source-map/pull/407
• @​brettz9 made their first contribution in https://github.com/mozilla/source-map/pull/415
• @​andersonvom made their first contribution in https://github.com/mozilla/source-map/pull/439
• @​amcasey made their first contribution in https://github.com/mozilla/source-map/pull/448
• @​eemeli made their first contribution in https://github.com/mozilla/source-map/pull/464
• @​nornagon made their first contribution in https://github.com/mozilla/source-map/pull/473
• @​bomsy made their first contribution in https://github.com/mozilla/source-map/pull/481
• @​ledenis made their first contribution in https://github.com/mozilla/source-map/pull/485
• @​AyanSinhaMahapatra made their first contribution in https://github.com/mozilla/source-map/pull/488
• @​takikawa made their first contribution in https://github.com/mozilla/source-map/pull/507
• @​nchevobbe made their first contribution in https://github.com/mozilla/source-map/pull/517

Full Changelog: mozilla/source-map@0.7.3...0.7.5

verdaccio/verdaccio (verdaccio)

v6.1.6

Compare Source

What's Changed

• fix(deps): update dependency @​cypress/request to v3.0.9 (6.x) by @​renovate[bot] inhttps://github.com/verdaccio/verdaccio/pull/53366
• fix(deps): update dependency compression to v1.8.1 (6.x) by @​renovate[bot] inhttps://github.com/verdaccio/verdaccio/pull/53377

Full Changelog: verdaccio/verdaccio@v6.1.5...v6.1.6

vitejs/vite (vite)

v7.0.6

Compare Source

Bug Fixes

• deps: update all non-major dependencies (#​20442) (e49f505)
• dev: incorrect sourcemap when optimized CJS is imported (#​20458) (ead2dec)
• module-runner: normalize file:// on windows (#​20449) (1c9cb49)
• respond with correct headers and status code for HEAD requests (#​20421) (23d04fc)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20441) (f689d61)
• remove some files from prettier ignore (#​20459) (8403f69)

Code Refactoring

• use environment transform request (#​20430) (24e6a0c)

---

Configuration

📅 Schedule: Branch creation - "after 10:00pm every weekday,before 5:00am every weekday,every weekend" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.