fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/parser (source)	^7.26.9 -> ^7.26.10
@babel/types (source)	^7.26.9 -> ^7.26.10
@vue-macros/reactivity-transform (source)	^3.0.0-beta.3 -> ^3.0.0-beta.4
bumpp	^10.0.3 -> ^10.1.0
pnpm (source)	10.6.1 -> 10.6.2
tsdown	^0.6.4 -> ^0.6.8

---

Release Notes

babel/babel (@​babel/parser)

v7.26.10

Compare Source

v7.26.10 (2025-03-11)

Thanks @​jordan-choi and @​mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

• babel-parser
  • #​17159 Disallow decorator in array pattern (@​JLHwung)

🐛 Bug Fix

• babel-parser, babel-template
  • #​17164 Fix: always initialize ExportDeclaration attributes (@​JLHwung)
• babel-core
  • #​17142 fix: "Map maximum size exceeded" in deepClone (@​liuxingbaoyu)
• babel-parser, babel-plugin-transform-typescript
  • #​17154 Update typescript parser tests (@​JLHwung)
• babel-traverse
  • #​17151 fix: Should not evaluate vars in child scope (@​liuxingbaoyu)
• babel-generator
  • #​17153 fix: Correctly generate abstract override (@​liuxingbaoyu)
• babel-parser
  • #​17107 Fix source type detection when parsing TypeScript (@​JLHwung)
• babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
  • #​17173 Fix processing of replacement pattern with named capture groups (@​mmmsssttt404)

💅 Polish

• babel-standalone
  • #​17158 Avoid warnings when re-bundling @​babel/standalone with webpack (@​liuxingbaoyu)

🏠 Internal

• babel-parser
  • #​17160 Left-value parsing cleanup (@​JLHwung)

Committers: 6

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Yunyoung Jordan Choi (@​jordan-choi)
• @​liuxingbaoyu
• @​mmmsssttt404

babel/babel (@​babel/types)

v7.26.10

Compare Source

👓 Spec Compliance

• babel-parser
  • #​17159 Disallow decorator in array pattern (@​JLHwung)

🐛 Bug Fix

• babel-parser, babel-template
  • #​17164 Fix: always initialize ExportDeclaration attributes (@​JLHwung)
• babel-core
  • #​17142 fix: "Map maximum size exceeded" in deepClone (@​liuxingbaoyu)
• babel-parser, babel-plugin-transform-typescript
  • #​17154 Update typescript parser tests (@​JLHwung)
• babel-traverse
  • #​17151 fix: Should not evaluate vars in child scope (@​liuxingbaoyu)
• babel-generator
  • #​17153 fix: Correctly generate abstract override (@​liuxingbaoyu)
• babel-parser
  • #​17107 Fix source type detection when parsing TypeScript (@​JLHwung)
• babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
  • #​17173 Fix processing of replacement pattern with named capture groups (@​mmmsssttt404)

💅 Polish

• babel-standalone
  • #​17158 Avoid warnings when re-bundling @​babel/standalone with webpack (@​liuxingbaoyu)

🏠 Internal

• babel-parser
  • #​17160 Left-value parsing cleanup (@​JLHwung)

vue-macros/vue-macros (@​vue-macros/reactivity-transform)

v3.0.0-beta.4

Compare Source

   🚀 Features

• jsx-directive:
  • Remove unref for dynamic argument  -  by @​zhiyuanzmj in https://github.com/vue-macros/vue-macros/issues/926 (aeb66)
  • Remove vapor support  -  by @​zhiyuanzmj in https://github.com/vue-macros/vue-macros/issues/927 (71683)

    View changes on GitHub

antfu-collective/bumpp (bumpp)

v10.1.0

Compare Source

   🚀 Features

• Replace picocolors with ansis  -  by @​webdiscus in https://github.com/antfu-collective/bumpp/issues/74 (6f836)
• Update deps  -  by @​antfu (7f208)

    View changes on GitHub

pnpm/pnpm (pnpm)

v10.6.2

Compare Source

Patch Changes

• pnpm self-update should always update the version in the packageManager field of package.json.
• Fix running pnpm CLI from pnpm CLI on Windows when the CLI is bundled to an executable #​8971.
• pnpm patch-commit will now use the same filesystem as the store directory to compare and create patch files.
• Don't show info output when --loglevel=error is used.
• peerDependencyRules should be set in pnpm-workspace.yaml to take effect.

sxzz/tsdown (tsdown)

v0.6.8

Compare Source

No significant changes

    View changes on GitHub

v0.6.7

Compare Source

   🚀 Features

• Support resolving specific id for bundle dts  -  by @​sxzz (16b9b)

    View changes on GitHub

v0.6.6

Compare Source

   🚀 Features

• Expose ResolveDtsPlugin  -  by @​sxzz (2a89c)

   🐞 Bug Fixes

• Add default compiler options for bundling dts  -  by @​sxzz (7c412)
• Disable resolve dts dependency by default  -  by @​sxzz (ab1cc)
• Use canary rolldown  -  by @​sxzz (59d87)

    View changes on GitHub

v0.6.5

Compare Source

   🚀 Features

• Resolve dts dependency  -  by @​sxzz (a5440)

   🐞 Bug Fixes

• Respect external for dts  -  by @​sxzz (3c370)
• deps: Update all non-major dependencies  -  in https://github.com/sxzz/tsdown/issues/73 (25f15)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/[email protected] ➜ 7.26.10	None	0	0 B
npm/@babel/[email protected] ➜ 7.26.10	None	+2	80.1 kB
npm/@vue-macros/[email protected] ➜ 3.0.0-beta.4	Transitive: environment, eval, filesystem, unsafe	+25	6.58 MB	sxzz
npm/[email protected] ➜ 10.1.0	environment Transitive: filesystem, shell	+32	3.69 MB	antfu
npm/[email protected] ➜ 0.6.8	Transitive: filesystem, shell, unsafe	+32	7.56 MB	sxzz

View full report↗︎