fix(deps): update npm non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/preset-env (source)	7.29.0 → 7.29.2
@babel/runtime (source)	7.28.6 → 7.29.2
@babel/runtime-corejs3 (source)	7.29.0 → 7.29.2
@eslint/compat (source)	2.0.2 → 2.0.3
@navikt/aksel-icons (source)	8.6.0 → 8.7.0
@percy/cli (source)	1.31.8 → 1.31.10
@tanstack/react-query (source)	5.90.21 → 5.91.0
@types/node (source)	24.11.0 → 24.12.0
@typescript-eslint/eslint-plugin (source)	8.56.1 → 8.57.1
@typescript-eslint/parser (source)	8.56.1 → 8.57.1
babel-jest (source)	30.2.0 → 30.3.0
core-js (source)	3.48.0 → 3.49.0
cypress (source)	15.11.0 → 15.12.0
dompurify	3.3.2 → 3.3.3
eslint (source)	10.0.2 → 10.0.3
eslint-plugin-cypress	6.1.0 → 6.2.0
eslint-plugin-sonarjs (source)	4.0.0 → 4.0.2
globals	17.3.0 → 17.4.0
jest (source)	30.2.0 → 30.3.0
jest-environment-jsdom (source)	30.2.0 → 30.3.0
lint-staged	16.3.0 → 16.4.0
lru-cache	11.2.6 → 11.2.7
marked (source)	17.0.3 → 17.0.4
mini-css-extract-plugin	2.10.0 → 2.10.1
typescript-eslint (source)	8.56.1 → 8.57.1
webpack	5.105.3 → 5.105.4
zustand	5.0.11 → 5.0.12

---

Release Notes

babel/babel (@​babel/preset-env)

v7.29.2

Compare Source

babel/babel (@​babel/runtime)

v7.29.2

Compare Source

v7.29.2 (2026-03-16)

👓 Spec Compliance

• babel-parser
  • #​17840 [7.x backport] async x => {} must be in leading pos (@​JLHwung)

🐛 Bug Fix

• babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
  • #​17805 [7.x backport] fix: Properly handle await in finally (@​liuxingbaoyu)
• babel-preset-env
  • #​17789 [7.x backport] preset-env include/exclude should accept bugfix plugins (@​JLHwung)

🏠 Internal

• #​17813 chore: update eslint peer deps (@​JLHwung)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• @​liuxingbaoyu

eslint/rewrite (@​eslint/compat)

v2.0.3

Compare Source

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​eslint/core bumped from ^1.1.0 to ^1.1.1

navikt/aksel (@​navikt/aksel-icons)

v8.7.0

Compare Source

percy/cli (@​percy/cli)

v1.31.10

Compare Source

What's Changed

✨ Enhancements

• feat: Add responsive widths config endpoint and CORS iframe processing to core by @​bhokaremoin in #​2121
• Percy Doctor - enhanced diagnostics — auth, config, CI, env audit, quick mode, auto-doctor by @​akshayminocha5 in #​2153
• fix: correct fallback value in osVersionRollUp method by @​pankaj443 in #​2144
• Adding Percy Doctor command by @​rishigupta1599 in #​2118
  Added uri check for serialized iframes by @​aryanku-dev in #​2128

New Contributors

• @​aryanku-dev made their first contribution in #​2128
• @​akshayminocha5 made their first contribution in #​2153

Full Changelog: percy/cli@v1.31.9...v1.31.10

v1.31.9

Compare Source

What's Changed

✨ Enhancements

1. Expose deviceDetails in healthcheck endpoint for responsive capture by @​bhokaremoin in #​2112
2. Adds automatic domain validation and allow-listing by @​rishigupta1599 in #​2092
3. Display usage warning from API by @​ayushatstack in #​2102
4. Enhance retry logic to handle 409 conflict errors in requests by @​prklm10 in #​2103
5. Add projectId configuration with validation tests by @​prklm10 in #​2117

🐛 Bug Fixes

1. Add Trusted Types support for srcdoc in serializeFrames by @​prklm10 in #​2091
2. Add null check for cloneOwnerNode in serializeCSSOM by @​pranavz28 in #​2094

Full Changelog: percy/cli@v1.31.8...v1.31.9

TanStack/query (@​tanstack/react-query)

v5.91.0

Compare Source

Minor Changes

• feat: environmentManager (#​10199)

Patch Changes

• Updated dependencies [6fa901b]:
  • @​tanstack/query-core@​5.91.0

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.57.1

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#​12126)

❤️ Thank You

• Newton Yuan @​NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

🚀 Features

• eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#​12080)

🩹 Fixes

• eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#​12089)
• eslint-plugin: [prefer-promise-reject-errors] add allow TypeOrValueSpecifier to prefer-promise-reject-errors (#​12094)
• typescript-estree: if the template literal is tagged and the text has an invalid escape, cooked will be null (#​11355)
• eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#​12077)
• eslint-plugin: handle statically analyzable computed keys in prefer-readonly (#​12079)
• eslint-plugin: [strict-void-return] false positives with overloads (#​12055)

❤️ Thank You

• Brad Zacher @​bradzacher
• Brian Schlenker @​bschlenk
• Evyatar Daud @​StyleShit
• James Henry @​JamesHenry
• Josh Goldberg
• Kirk Waiblinger @​kirkwaiblinger
• Moses Odutusin @​thebolarin
• Newton Yuan @​NewtonYuan
• SungHyun627 @​SungHyun627
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.57.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

jestjs/jest (babel-jest)

v30.3.0

Compare Source

Features

• [jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#​15844)
• [jest-fake-timers] Add setTimerTickMode to configure how timers advance
• [*] Reduce token usage when run through LLMs (3f17932)

Fixes

• [jest-config] Keep CLI coverage output when using --json with --outputFile (#​15918)
• [jest-mock] Use Symbol from test environment (#​15858)
• [jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#​15864)
• [jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#​15842)
• [jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#​15851)
• [jest-util] Make sure process.features.require_module is false (#​15867)

Chore & Maintenance

• [*] Replace remaining micromatch uses with picomatch
• [deps] Update to sinon/fake-timers v15
• [docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#​15849)
• Updated Twitter icon to match the latest brand guidelines (#​15869)

zloirock/core-js (core-js)

v3.49.0

Compare Source

• Changes v3.48.0...v3.49.0 (373 commits)
• Iterator.range updated following the actual spec version
  • Throw a RangeError on NaN start / end / step
  • Allow null as optionOrStep
• Improved accuracy of Math.{ asinh, atanh } polyfills with big and small values
• Improved accuracy of Number.prototype.toExponential polyfills with big and small values
• Improved performance of atob, btoa, Uint8Array.fromHex, Uint8Array.prototype.setFromHex, and Uint8Array.prototype.toHex, #​1503, #​1464, #​1510, thanks @​johnzhou721
• Minor performance optimization polyfills of methods from Map upsert proposal
• Polyfills of methods from Map upsert proposal from the pure version made generic to make it work with polyfilled and native collections
• Wrap Symbol.for in Symbol.prototype.description polyfill for correct handling of empty string descriptions
• Fixed a modern Safari bug in Array.prototype.includes with sparse arrays and fromIndex
• Fixed one more case (Iterator.prototype.take) of a V8 ~ Chromium < 126 bug
• Forced replacement of Iterator.{ concat, zip, zipKeyed } in the pure version for ensuring proper wrapped Iterator instances as the result
• Fixed proxying .return() on exhausted iterator from some methods of iterator helpers polyfill to the underlying iterator
• Fixed double .return() calling in case of throwing error in this method in the internal iterate helper that affected some polyfills
• Fixed closing iterator on IteratorValue errors in the internal iterate helper that affected some polyfills
• Fixed iterator closing in Array.from polyfill on failure to create array property
• Fixed order of arguments validation in Array.fromAsync polyfill
• Fixed a lack of counter validation on MAX_SAFE_INTEGER in Array.fromAsync polyfill
• Fixed order of arguments validation in Array.prototype.flat polyfill
• Fixed handling strings as iterables in Iterator.{ zip, zipKeyed } polyfills
• Fixed some cases of iterators closing in Iterator.{ zip, zipKeyed } polyfills
• Fixed validation of iterators .next() results an objects in Iterator.{ zip, zipKeyed } polyfills
• Fixed a lack of early error in Iterator.concat polyfill on primitive as an iterator
• Fixed buffer mutation exposure in Iterator.prototype.windows polyfill
• Fixed iterator closing in Set.prototype.{ isDisjointFrom, isSupersetOf } polyfill
• Fixed (updated following the final spec) one more case Set.prototype.difference polyfill with updating this
• Fixed DataView.prototype.setFloat16 polyfill in (0, 1) range
• Fixed order of arguments validation in String.prototype.{ padStart, padEnd } polyfills
• Fixed order of arguments validation in String.prototype.{ startsWith, endsWith } polyfills
• Fixed some cases of Infinity handling in String.prototype.substr polyfill
• Fixed String.prototype.repeat polyfill with a counter exceeding 2 ** 32
• Fixed some cases of chars case in escape polyfill
• Fixed named backreferences in RegExp NCG polyfill
• Fixed some cases of RegExp NCG polyfill in combination with other types of groups
• Fixed some cases of RegExp NCG polyfill in combination with dotAll
• Fixed String.prototype.replace with sticky polyfill, #​810, #​1514
• Fixed RegExp sticky polyfill with alternation
• Fixed handling of some line terminators in case of multiline + sticky mode in RegExp polyfill
• Fixed .input slicing on result object with RegExp sticky mode polyfill
• Fixed handling of empty groups with global and unicode modes in polyfills
• Fixed URLSearchParam.prototype.delete polyfill with duplicate key-value pairs
• Fixed possible removal of unnecessary entries in URLSearchParam.prototype.delete polyfill with second argument
• Fixed an error in some cases of non-special URLs without a path in the URL polyfill
• Fixed some percent encode cases / character sets in the URL polyfill
• Fixed parsing of non-IPv4 hosts ends in a number in the URL polyfill
• Fixed some cases of '' and null host handling in the URL polyfill
• Fixed host parsing with hostname = host:port in the URL polyfill
• Fixed host inheritance in some cases of file scheme in the URL polyfill
• Fixed block of protocol change for file with empty host in the URL polyfill
• Fixed invalid code points handling in UTF-8 decode in the URLSearchParams polyfill
• Fixed some cases of serialization in URL polyfill (/. prefix for non-special URLs with null host and path starting with empty segment)
• Fixed URL polyfill .origin getter with blob scheme
• Fixed a lack of error in URLSearchParams.prototype.set polyfill on calling only with 1 argument
• Fixed handling invalid UTF-8 continuation bytes in URLSearchParams polyfill
• Fixed incomplete sequences with out-of-range continuation bytes handling in URLSearchParams polyfill
• Fixed allowing unexpected symbols in scheme in the URL polyfill
• Fixed repeated ToPropertyKey calling in Reflect.{ get, set, deleteProperty } polyfills
• Fixed Reflect.set polyfill with some descriptors cases
• Fixed Reflect.set polyfill with some non-extensible receiver cases
• Fixed the order of Reflect.construct polyfill arguments validation (observable only in the error message)
• Fixed a lack of error in Reflect.defineProperty polyfill with malformed descriptor
• Fixed a lack of error in JSON.parse polyfill on unterminated object and array literals
• Fixed a lack of error in JSON.parse polyfill on numbers with ., but without a fraction part
• Fixed a lack of error on \u{} in String.dedent polyfill
• Fixed some cases of hex escaping in the end of string in String.dedent polyfill
• Fixed %AsyncFromSyncIteratorPrototype% to make it a little stricter
• Fixed counter in some cases of some AsyncIterator methods
• Fixed order of async iterators closing
• Fixed iterator closing in AsyncIterator.prototype.flatMap polyfill
• Fixed iterator closing in AsyncIterator.prototype.map polyfill on error in underlying iterator .next()
• Fixed iterator closing in AsyncIterator.prototype.take polyfill with return: null
• Fixed validation .return() result as object in AsyncIterator.prototype.take polyfill
• Fixed a lack of error in structuredClone polyfill on attempt to transfer multiple objects, some of which are non-transferable
• Fixed resizable ArrayBuffer transferring where newByteLength exceeds the original maxByteLength
• Fixed possible loss of symbol enumerability in Object.defineProperty in Symbol polyfill
• Fixed return value of Object.defineProperty in Symbol polyfill in Android ~ 2
• Fixed order of %TypedArray%.from arguments validation
• Fixed a lack of error on passing an ArrayBuffer and a negative length to the %TypedArray% and DataView constructors polyfills
• Fixed some cases of @@​toStringTag on %TypedArray% polyfill
• Fixed some cases of ToUint8Clamp conversion
• Fixed NaN handling in Date.prototype.setYear polyfill
• Fixed false positive on a WeakMap validation in the pure version
• Fixed some minor { Map, Set }.prototype.forEach moments in the pure version
• Fixed possible error in Array.isTemplateObject polyfill on frozen array
• Fixed semantics of Observable.from with multiple subscriptions of the obsolete ECMAScript Observable proposal polyfill
• Fixed handling of ending zeroes in the fraction part in Number.fromString polyfill
• Fixed esmodules: intersect option of core-js-compat
• Fixed a lack of reactnative alias in core-js-compat types
• Fixed a minor logical bug in the debugging output of core-js-builder
• Fixed ignorance of the obsolete blacklist option of core-js-builder - it should be removed only in the next major release
• In case of bugs in String.prototype.{ match, matchAll, replace, split } in modern engines, add s, d and v flag support to polyfills of those methods
• Just in case, added an extra input string validation to the polyfill of obsolete Number.fromString proposals
• Simplified iOS detection
• Many minor stylistic fixes and optimizations
• Compat data improvements:
  • Math.sumPrecise marked as shipped in V8 ~ Chrome 147
  • Iterator.concat marked as shipped in V8 ~ Chrome 146
  • Iterator.concat marked as shipped in Safari 26.4
  • Because of a bug, Array.prototype.includes marked as not supported in modern Safari
  • Fixed compat data for parseInt and parseFloat
  • Added Deno 2.6.7, 2.7.0 and 2.7.2 compat data mapping
  • Added Electron 42 compat data mapping
  • Added Opera for Android 95 and 96 compat data mapping
  • Added Oculus Quest Browser 42 compat data mapping

cypress-io/cypress (cypress)

v15.12.0

Compare Source

cure53/DOMPurify (dompurify)

v3.3.3: DOMPurify 3.3.3

Compare Source

• Fixed an engine requirement for Node 20 which caused hiccups, thanks @​Rotzbua

eslint/eslint (eslint)

v10.0.3

Compare Source

cypress-io/eslint-plugin-cypress (eslint-plugin-cypress)

v6.2.0

Compare Source

Features

• require-data-selector uses consistent rules with assignments (#​302) (de98a5d)

SonarSource/SonarJS (eslint-plugin-sonarjs)

v4.0.2

Compare Source

v4.0.1

Compare Source

sindresorhus/globals (globals)

v17.4.0

Compare Source

lint-staged/lint-staged (lint-staged)

v16.4.0

Compare Source

Minor Changes

• #​1739 687fc90 Thanks @​hyperz111! - Replace micromatch with picomatch to reduce dependencies.

v16.3.4

Compare Source

Patch Changes

• #​1742 9d6e827 Thanks @​iiroj! - Update dependencies, including tinyexec@1.0.4 to make sure local node_modules/.bin are preferred to global locations (released in tinyexec@1.0.3).

v16.3.3

Compare Source

Patch Changes

• #​1740 0109e8d Thanks @​iiroj! - Make sure Git's warning about CRLF line-endings doesn't interfere with creating initial backup stash.

v16.3.2

Compare Source

Patch Changes

• #​1735 2adaf6c Thanks @​iiroj! - Hide the extra cmd window on Windows by spawning tasks without the detached option.

v16.3.1

Compare Source

Patch Changes

• #​1729 cd5d762 Thanks @​iiroj! - Remove nano-spawn as a dependency from package.json as it was replaced with tinyexec and is no longer used.

isaacs/node-lru-cache (lru-cache)

v11.2.7

Compare Source

markedjs/marked (marked)

v17.0.4

Compare Source

Bug Fixes

• prevent ReDoS in inline link regex title group (#​3902) (46fb9b8)

webpack/mini-css-extract-plugin (mini-css-extract-plugin)

v2.10.1

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.57.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

webpack/webpack (webpack)

v5.105.4

Compare Source

Patch Changes

• Add Module.getSourceBasicTypes to distinguish basic source types and clarify how modules with non-basic source types like remote still produce JavaScript output. (by @​xiaoxiaojx in #​20546)

• Handle createRequire in expressions. (by @​alexander-akait in #​20549)

• Fixed types for multi stats. (by @​alexander-akait in #​20556)

• Remove empty needless js output for normal css module. (by @​JSerFeng in #​20162)

• Update enhanced-resolve to support new features for tsconfig.json. (by @​alexander-akait in #​20555)

• Narrows export presence guard detection to explicit existence checks on namespace imports only, i.e. patterns like "x" in ns. (by @​hai-x in #​20561)

pmndrs/zustand (zustand)

v5.0.12

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud