chore(deps): bump the bo-new-theme-npm group across 1 directory with 27 updates by dependabot[bot] · Pull Request #136 · gRoussac/GregoShop

dependabot · 2026-10-26T15:52:24Z

Bumps the bo-new-theme-npm group with 27 updates in the /admin-dev/themes/new-theme directory:

Package	From	To
@zxcvbn-ts/core	`3.0.4`	`4.2.0`
@zxcvbn-ts/language-common	`3.0.4`	`4.1.3`
@zxcvbn-ts/language-en	`3.0.2`	`4.1.1`
dropzone	`5.9.3`	`6.3.5`
photoswipe	`4.1.3`	`5.4.4`
@types/photoswipe	`4.1.6`	`5.2.5`
postcss	`8.5.30`	`8.5.31`
vue-i18n	`10.0.8`	`11.4.16`
vue-router	`4.6.4`	`5.4.0`
@babel/core	`7.29.7`	`8.0.9`
@babel/eslint-parser	`7.29.9`	`8.0.7`
@types/jquery	`3.5.34`	`4.0.1`
@types/lodash	`4.17.26`	`4.17.27`
@types/photoswipe	`4.1.6`	`5.2.5`
@types/vue-i18n	`6.1.3`	`7.0.0`
@typescript-eslint/eslint-plugin	`8.71.2`	`8.72.0`
@typescript-eslint/parser	`8.71.2`	`8.72.0`
@vue/eslint-config-typescript	`13.0.0`	`14.9.0`
bootstrap	`4.6.2`	`5.3.8`
core-js	`3.50.0`	`3.51.0`
esbuild-loader	`2.21.0`	`4.5.0`
sass-embedded	`1.105.2`	`1.106.1`
stylelint	`14.16.1`	`17.16.0`
typescript	`5.8.3`	`7.0.2`
vue-eslint-parser	`9.4.3`	`10.4.1`
webpack	`5.112.0`	`5.112.2`
webpack-dev-server	`6.0.0`	`6.1.0`
@fontsource/ibm-plex-sans	`5.1.0`	`5.3.0`

Updates @zxcvbn-ts/core from 3.0.4 to 4.2.0

Commits

642ef8f Publish
25f7aec feat: improve language packages
ac0ef46 feat: Improve language packages (#341)
6771284 fix: remove shared reference from feedback (#340)
557b595 fix: escape user input regex (#339)
58809a2 Feat: add Russian language support (#333)
7e78d64 fix(package): set correct repository url (#336)
59333b6 feat: improve performance (#335)
ac667c6 feat: Add runtime checks (#334)
a57dbee feat(tests): add more tests
Additional commits viewable in compare view

Updates @zxcvbn-ts/language-common from 3.0.4 to 4.1.3

Commits

c938c0b Publish
7d4712c fix(common): resolve broken adjacency graph import (#330)
1a9da30 feat(i18n): add Korean (ko) translation (#328)
dcca1e3 fix: message for l33t suggestion in translation (#325)
2199f62 Publish
281ead6 fix(dictionary): resolve cjs issues with compression import (#324)
2148b0e chore(repo): fix badge
f8a12a6 Publish
5449f15 chore: Test to prevent build type issues (#321)
acf40cc fix(common): resolve issue with wrong type generation again (#320)
Additional commits viewable in compare view

Updates @zxcvbn-ts/language-en from 3.0.2 to 4.1.1

Commits

2199f62 Publish
281ead6 fix(dictionary): resolve cjs issues with compression import (#324)
2148b0e chore(repo): fix badge
f8a12a6 Publish
5449f15 chore: Test to prevent build type issues (#321)
acf40cc fix(common): resolve issue with wrong type generation again (#320)
c6fc8a5 Publish
0288760 chore: remove broken changelog
809b7a3 Publish
c381ea3 feat: use wordSequences correctly as dictionary
Additional commits viewable in compare view

Updates dropzone from 5.9.3 to 6.3.5

Release notes

Sourced from dropzone's releases.

dropzone@6.3.5

Patch Changes

#2380 88901b7 - Fix binaryBody uploads sending the original file instead of the transformed one. resizeWidth, resizeHeight and any custom transformFile were silently ignored, so an unresized image went to the server. Chunked and form-data uploads were unaffected.

#2379 eae9121 - Fix cancelling an upload while transformFile is still running. The file had no xhr yet, so it was grouped with every other file that had not started and the whole queue was cancelled with it — and the file itself was still sent once the transform finished.

dropzone@6.3.4

Patch Changes

#2377 0b302ee - Stop destroy() removing a different instance. Dropzone.instances.splice(indexOf(this), 1) dropped the last entry whenever indexOf returned -1 — calling destroy() twice was enough — evicting an unrelated live Dropzone from the registry.

#2377 dc5d7bf - Set enctype="multipart/form-data" on a form again. init() compared tagName against lower-case "form", which never matches, so the attribute was never set. Only affects forms that are also submitted natively; the XHR upload is unchanged.

dropzone@6.3.3

Patch Changes

#2375 6a03691 - Fix the declared type of clickable and hiddenInputContainer.

Both options are derived from their default values, so clickable: true was inferred as boolean and hiddenInputContainer: "body" as string. That contradicted what each one documents and what both have always accepted at runtime, and TypeScript rejected the documented forms.

clickable is now boolean | string | HTMLElement | (string | HTMLElement)[] and hiddenInputContainer is string | HTMLElement. Nothing changes at runtime.

dropzone@6.3.2

Patch Changes

#2371 536d94a - Fix cancelUpload leaving parallel chunks uploading.

file.xhr only holds the request that started last, so cancelling a chunked upload running with parallelChunkUploads aborted that one request and left every other in-flight chunk streaming to the server — burning the user's bandwidth and writing orphaned chunks for a file the UI already showed as canceled.

Every chunk keeps its own request, so cancelUpload now aborts all of the ones still running. Uploads that are not chunked are unaffected.

#2372 a1a67df - Fix emit skipping a listener when another one removes itself.

emit walked the live callback array, so a listener that called off for itself — the usual shape of a one-shot listener, and of teardown code — spliced the array out from under the loop and the listener registered right after it never ran. emit now iterates over a snapshot.

One consequence worth knowing about: a listener registered from inside another listener no longer runs during that same emit, it runs from the next one. That is what Node's EventEmitter does, and it is the only way to keep the removal case correct.

#2370 0e3625d - Fix the thumbnail queue deadlocking when a file cannot be read.

createThumbnail only listened for FileReader's load event. A file that had been moved, locked by another process, or was otherwise unreadable since it was dropped fires error instead, so the callback was never invoked and _processThumbnailQueue kept its lock forever: no file added afterwards got a thumbnail, and with resizeWidth/resizeHeight or a transformFile that uses createThumbnail, the upload never started either.

The read error now reaches the callback the same way an undecodable image already did, so the file gets dictThumbnailError and the queue moves on.

DropzoneThumbnailCallback says what it has always done, too: its first argument is string | Event, the error event standing in for the data URL when no thumbnail could be produced. That also fixes displayExistingFile, which used to emit that event as a thumbnail when the image URL failed to load, leaving the preview with img.src set to "[object Event]".

dropzone@6.3.1

Patch Changes

#2362 07d3876 - Drop the sass dependency. The stylesheets are plain CSS now, and dist/dropzone.css and dist/basic.css are unchanged in what they do: the output was compared declaration by declaration, and every difference is a value-level equivalence the minifier applies, such as padding: 20px 20px collapsing to padding: 20px.

... (truncated)

Changelog

Sourced from dropzone's changelog.

6.3.5

Patch Changes

#2380 88901b7 - Fix binaryBody uploads sending the original file instead of the transformed one. resizeWidth, resizeHeight and any custom transformFile were silently ignored, so an unresized image went to the server. Chunked and form-data uploads were unaffected.

#2379 eae9121 - Fix cancelling an upload while transformFile is still running. The file had no xhr yet, so it was grouped with every other file that had not started and the whole queue was cancelled with it — and the file itself was still sent once the transform finished.

6.3.4

Patch Changes

#2377 0b302ee - Stop destroy() removing a different instance. Dropzone.instances.splice(indexOf(this), 1) dropped the last entry whenever indexOf returned -1 — calling destroy() twice was enough — evicting an unrelated live Dropzone from the registry.

#2377 dc5d7bf - Set enctype="multipart/form-data" on a form again. init() compared tagName against lower-case "form", which never matches, so the attribute was never set. Only affects forms that are also submitted natively; the XHR upload is unchanged.

6.3.3

Patch Changes

#2375 6a03691 - Fix the declared type of clickable and hiddenInputContainer.

Both options are derived from their default values, so clickable: true was inferred as boolean and hiddenInputContainer: "body" as string. That contradicted what each one documents and what both have always accepted at runtime, and TypeScript rejected the documented forms.

clickable is now boolean | string | HTMLElement | (string | HTMLElement)[] and hiddenInputContainer is string | HTMLElement. Nothing changes at runtime.

6.3.2

Patch Changes

#2371 536d94a - Fix cancelUpload leaving parallel chunks uploading.

file.xhr only holds the request that started last, so cancelling a chunked upload running with parallelChunkUploads aborted that one request and left every other in-flight chunk streaming to the server — burning the user's bandwidth and writing orphaned chunks for a file the UI already showed as canceled.

Every chunk keeps its own request, so cancelUpload now aborts all of the ones still running. Uploads that are not chunked are unaffected.

#2372 a1a67df - Fix emit skipping a listener when another one removes itself.

emit walked the live callback array, so a listener that called off for itself — the usual shape of a one-shot listener, and of teardown code — spliced the array out from under the loop and the listener registered right after it never ran. emit now iterates over a snapshot.

One consequence worth knowing about: a listener registered from inside another listener no longer runs during that same emit, it runs from the next one. That is what Node's EventEmitter does, and it is the only way to keep the removal case correct.

#2370 0e3625d - Fix the thumbnail queue deadlocking when a file cannot be read.

createThumbnail only listened for FileReader's load event. A file that had been moved, locked by another process, or was otherwise unreadable since it was dropped fires error instead, so the callback was never invoked and _processThumbnailQueue kept its lock forever: no file added afterwards got a thumbnail, and with resizeWidth/resizeHeight or a transformFile that uses createThumbnail, the upload never started either.

The read error now reaches the callback the same way an undecodable image already did, so the file gets dictThumbnailError and the queue moves on.

DropzoneThumbnailCallback says what it has always done, too: its first argument is string | Event, the error event standing in for the data URL when no thumbnail could be produced. That also fixes displayExistingFile, which used to emit that event as a thumbnail when the image URL failed to load, leaving the preview with img.src set to "[object Event]".

... (truncated)

Commits

1b43b2e Version packages
ae4fce3 Merge pull request #2380 from enyo/binarybody-transformed
88901b7 Send the transformed file on binaryBody uploads
eae9121 Don't take the queue down when cancelling a transforming file
552cce2 Version packages
dc5d7bf Compare tagName against FORM, not form
0b302ee Don't let a second destroy() evict another instance
bb1235e Version packages
c8da432 Check the public types as part of typecheck
6a03691 Type clickable and hiddenInputContainer as what they accept
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for dropzone since your current version.

Updates photoswipe from 4.1.3 to 5.4.4

Release notes

Sourced from photoswipe's releases.

v5.4.4

Bugfix: an empty slide may appear if there are 3 slides in total and the user swiped through 4 slides rapidly dimsemenov/PhotoSwipe#2103

Remove restriction of typesVersion to 4.7 dimsemenov/PhotoSwipe#2078

Full Changelog: dimsemenov/PhotoSwipe@v5.4.2...v5.4.4

v5.4.2

dataSource param is now optional for PhotoSwipeLightbox.loadAndOpen method, the first gallery is chosen if it's not provided.

@BeeMargarida made their first contribution in dimsemenov/PhotoSwipe#2069

v5.4.1

Added trapFocus option (by default PhotoSwipe traps tab focus within the dialog, this option allows disabling the functionality) https://photoswipe.com/options/#trapfocus

Added preventPointerEvent filter (by default PhotoSwipe calls e.preventDefault() during pointer-move events, this filter allows you to disable it over certain elements) https://photoswipe.com/filters/#preventpointerevent

v5.4.0

Fix: lower version browsers do not support nullish-coalescing syntax dimsemenov/PhotoSwipe@28baa3d

v5.3.9

What's Changed

fix: lower version browsers do not support optional chain syntax by @zt123123 in dimsemenov/PhotoSwipe#2058

New Contributors

@JPustkuchen made their first contribution in dimsemenov/PhotoSwipe#2053

@hzpeng57 made their first contribution in dimsemenov/PhotoSwipe#2055

@zt123123 made their first contribution in dimsemenov/PhotoSwipe#2058

Full Changelog: dimsemenov/PhotoSwipe@v5.3.8...v5.3.9

v5.3.8

Removed navigator.onLine check so the gallery can be used while offline

Added custom contentRemove handler to <picture> example by @solemone in dimsemenov/PhotoSwipe#2031

Full Changelog: dimsemenov/PhotoSwipe@v5.3.7...v5.3.8

v5.3.7

Typescript fix: add missing type parameter constraints by @Rugvip in dimsemenov/PhotoSwipe#2028

Docs update: webp example, update custom-content.md by @thomasnavarro in dimsemenov/PhotoSwipe#2024

New Contributors

@Rugvip made their first contribution in dimsemenov/PhotoSwipe#2028

@thomasnavarro made their first contribution in dimsemenov/PhotoSwipe#2024

Full Changelog: dimsemenov/PhotoSwipe@v5.3.6...v5.3.7

v5.3.6

Fixed an issue that caused lazy-loading of the full image (from src) rather than srcset. This problem was caused by the prev release (5.3.5).

Use classList.toggle where possible by @hirasso in dimsemenov/PhotoSwipe#2008

... (truncated)

Commits

fd85184 5.4.4 build
6079bd0 5.4.4
44b065a docs upd
a0298e3 Bugfix: empty slide if there are 3 slides in total and user swiped through 4 ...
1938a36 Revert "docs upd: Correct 404 markdown links (#2079)" (#2081)
ac7eaf6 docs upd: Correct 404 markdown links (#2079)
13f1ddc 5.4.3 build
38977a9 5.4.3
79f8159 Remove restriction of typesVersion to 4.7 (#2078)
2d23b36 5.4.2 build
Additional commits viewable in compare view

Updates @types/photoswipe from 4.1.6 to 5.2.5

Commits

See full diff in compare view

Updates postcss from 8.5.30 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

Fix better source map on </style> escaping (by @firefoxic).

Changelog

Sourced from postcss's changelog.

8.5.31

Fix better source map on </style> escaping (by @firefoxic).

Commits

d190857 Release 8.5.31 version
4ef6d8c Update dependencies
6abd674 Call the builder with every node when the output is escaped (#2175)
See full diff in compare view

Updates vue-i18n from 10.0.8 to 11.4.16

Release notes

Sourced from vue-i18n's releases.

v11.4.16

What's Changed

🐛 Bug Fixes

fix: read VUE_PROD_DEVTOOLS only when it is defined in the bundler builds, so that Node.js can run them in production by @kazupon in intlify/vue-i18n#2735

Full Changelog: intlify/vue-i18n@v11.4.15...v11.4.16

v11.4.15

What's Changed

🐛 Bug Fixes

fix: read only own properties in locale, key and plural rule lookups by @kazupon in intlify/vue-i18n#2687

fix: return a message that cannot be compiled as is, in development and production by @kazupon in intlify/vue-i18n#2698

fix: copy the i18n option of components instead of writing internal values into it by @kazupon in intlify/vue-i18n#2700

fix: name datetime and number formats in the warning when a format is not found by @kazupon in intlify/vue-i18n#2703

fix: make te() and tm() look up messages in the same way as t() by @kazupon in intlify/vue-i18n#2705

fix: read only own properties in the key-value message resolver by @kazupon in intlify/vue-i18n#2707

fix: do not read Object.prototype properties as named values, and ignore unknown linked modifiers by @kazupon in intlify/vue-i18n#2711

fix: do not write count and n into the named values of a plural call by @kazupon in intlify/vue-i18n#2713

fix: do not drop a flat key under a message AST with flatJson by @kazupon in intlify/vue-i18n#2719

fix: keep a flat key that ends with cacheKey under a message AST by @kazupon in intlify/vue-i18n#2721

fix: let Node.js ESM load the Node.js builds, so that SSR works in production by @kazupon in intlify/vue-i18n#2729

fix: keep a flat key that goes through a prop key or cacheKey of a message AST by @kazupon in intlify/vue-i18n#2731

📝️ Documentations

docs: explain that locales should be BCP 47 language tags by @kazupon in intlify/vue-i18n#2696

docs: describe the fallback of te(), and list te and $te as not included in petite-vue-i18n by @kazupon in intlify/vue-i18n#2709

Full Changelog: intlify/vue-i18n@v11.4.14...v11.4.15

v11.4.14

What's Changed

🔒 Security Fixes

fix(shared): neutralize srcdoc attribute in sanitizeTranslatedHtml by @kazupon in intlify/vue-i18n#2679

fix(core-base): escape both list and named values with escapeParameter by @kazupon in intlify/vue-i18n#2680

fix: ignore locales named after Object.prototype properties by @kazupon in intlify/vue-i18n#2681

👕 Refactoring

refactor(core-base): extract the resolved message format check by @kazupon in intlify/vue-i18n#2674

refactor(vue-i18n-core): remove dead branches in getCoreContext() by @kazupon in intlify/vue-i18n#2675

refactor(vue-i18n-core): share the fallbackContext handling in the composer by @kazupon in intlify/vue-i18n#2676

refactor(vue-i18n-core): simplify flat JSON handling in setLocaleMessage / mergeLocaleMessage by @kazupon in intlify/vue-i18n#2677

refactor(core-base): give the compile cache a proper type by @kazupon in intlify/vue-i18n#2678

... (truncated)

Changelog

Sourced from vue-i18n's changelog.

v11.4.16 (2026-10-18T07:43:18.954Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

fix: read VUE_PROD_DEVTOOLS only when it is defined in the bundler builds, so that Node.js can run them in production by @kazupon in intlify/vue-i18n#2735

Full Changelog: intlify/vue-i18n@v11.4.15...v11.4.16

v11.4.15 (2026-10-17T15:12:11.060Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

fix: read only own properties in locale, key and plural rule lookups by @kazupon in intlify/vue-i18n#2687

fix: return a message that cannot be compiled as is, in development and production by @kazupon in intlify/vue-i18n#2698

fix: copy the i18n option of components instead of writing internal values into it by @kazupon in intlify/vue-i18n#2700

fix: name datetime and number formats in the warning when a format is not found by @kazupon in intlify/vue-i18n#2703

fix: make te() and tm() look up messages in the same way as t() by @kazupon in intlify/vue-i18n#2705

fix: read only own properties in the key-value message resolver by @kazupon in intlify/vue-i18n#2707

fix: do not read Object.prototype properties as named values, and ignore unknown linked modifiers by @kazupon in intlify/vue-i18n#2711

fix: do not write count and n into the named values of a plural call by @kazupon in intlify/vue-i18n#2713

fix: do not drop a flat key under a message AST with flatJson by @kazupon in intlify/vue-i18n#2719

fix: keep a flat key that ends with cacheKey under a message AST by @kazupon in intlify/vue-i18n#2721

fix: let Node.js ESM load the Node.js builds, so that SSR works in production by @kazupon in intlify/vue-i18n#2729

fix: keep a flat key that goes through a prop key or cacheKey of a message AST by @kazupon in intlify/vue-i18n#2731

📝️ Documentations

docs: explain that locales should be BCP 47 language tags by @kazupon in intlify/vue-i18n#2696

docs: describe the fallback of te(), and list te and $te as not included in petite-vue-i18n by @kazupon in intlify/vue-i18n#2709

Full Changelog: intlify/vue-i18n@v11.4.14...v11.4.15

v11.4.14 (2026-10-10T11:06:13.502Z)

This changelog is generated by GitHub Releases

... (truncated)

Commits

ffe5249 release: v11.4.16
04defcb release: v11.4.15
3d8774f fix: let Node.js ESM load the Node.js builds, so that SSR works in production...
6bb9ebd release: v11.4.14
f6b3e75 release: v11.4.13
87f3745 release: v11.4.12
87510e2 release: v11.4.10
5128bf0 release: v11.4.9
de2393b release: v11.4.8
ceb0548 release: v11.4.7
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vue-i18n since your current version.

Updates vue-router from 4.6.4 to 5.4.0

Release notes

Sourced from vue-router's releases.

v5.4.0

   🚨 Breaking Changes

experimental: Normalize query values to arrays - by @posva in vuejs/router#2824 (f1fbc)

   🚀 Features

Accept a prebuilt matcher in createRouter - by @danielroe in vuejs/router#2804 (9de96)

UseScrollRestoration and onRouteRendered - by @posva in vuejs/router#2805 (e3dde)

Diagnose experimental beforeEnter migration - by @posva (b695c)

experimental:

Warn about legacy optional param removal - by @posva in vuejs/router#2818 (c2f92)

Extract hash params with definePage - by @posva (dbf2d)

Configure required and default hash params - by @posva (cef5c)

Never decode the hash, protect-only encoding - by @posva in vuejs/router#2760 (aca2c)

Allow custom regexp for path params in definePage - by @posva in vuejs/router#2822 (3a192)

router:

Restore hashes and top by default - by @posva (7c385)

   🐞 Bug Fixes

Resolve experimental guard redirects against target on history navigation - by @posva (2c5fb)

experimental:

Keep declared case of static prefix in MatcherPatternPathStar.build() - by @contactjawad in vuejs/router#2798 (4dc6b)

Make hash params optional and nullable - by @posva (d9a4c)

Exclude defaults from required hash params - by @posva (346e2)

Align hash parameter parsing with queries - by @posva (cf251)

Keep last hash param instead of throwing - by @posva (d1e8a)

Disallow required with a default for query params - by @posva (f60e9)

Make query params with a default optional on push - by @posva (fb604)

Do not inherit params, query, or hash on redirects - by @posva (02a92)

history:

Invalidate obsolete scroll positions - by @posva and @liuly0322 in vuejs/router#2814 (071f1)

unplugin:

Sanitize named view in definePage import - by @giaBaoJS in vuejs/router#2809 (0711d)

Keep hex character codes in param segments regexp - by @kwy404 in vuejs/router#2811 (07663)

   🏎 Performance

unplugin: Cache merged route overrides - by @posva in vuejs/router#2821 (732b7)

    View changes on GitHub

v5.3.1

   🐞 Bug Fixes

experimental: Handle non-string params for isActive - by @posva (92cfd)

    View changes on GitHub

... (truncated)

Commits

596d481 release: vue-router@5.4.0
2970e8e chore: fix back extends
16a62f8 chore(deps): upgrade dependencies (#2828)
b810a7e chore: remove unused types
a0efbde docs: adapt
2c5fbd6 fix: resolve experimental guard redirects against target on history navigation
6ef3163 refactor: allow undefined on optional param
8e89a60 chore: comment
72ceb99 refactor: absolute position
57dd1d6 refactor: allow guards to return relative location
Additional commits viewable in compare view

Updates @babel/core from 7.29.7 to 8.0.9

Release notes

Sourced from @babel/core's releases.

v8.0.9 (2026-10-23)

This release contains no changes. It is needed only to update the repo (which is based on @babel/core's last release) in Node.js's CITGM.

v8.0.8 (2026-10-23)

Thanks @bhushan4work and @webdevelopersrinu for your first PRs!

👓 Spec Compliance

babel-parser

#18366 fix(parser): disallow named specifiers after * as ns (@JLHwung)

#18336 fix(parser): disallow const x followed by linebreak and of (@JLHwung)

#18343 fix(parser): reject delete (x) when createParenthesizedExpressions: true (@JLHwung)

#18276 fix: report expression errors in object literals used as member base (@JLHwung)

#18286 Disallow arrow functions as new callee and await operand (@JLHwung)

#18309 Disallow call expressions as arrow function parameters in sloppy mode (@JLHwung)

#18315 Disallow eval and arguments as class names (@JLHwung)

🐛 Bug Fix

babel-parser

#18392 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@bhushan4work)

#18344 fix(parser): ASI between arrow body and /= regex (@JLHwung)

#18342 fix(parser): allow arguments as a label in class (@JLHwung)

#18365 fix(parser): allow ASI between property init and escaped in (@JLHwung)

#18327 fix(parser): register function id in labeled function declaration (@JLHwung)

#18323 Skip HTML-like comments in the parser's character lookahead (@JLHwung)

#18322 Allow ASI after export default from without exportDefaultFrom (@JLHwung)

babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime

#18186 Fix _arrayWithHoles bypassing custom Symbol.iterator on array-backed Proxies (@webdevelopersrinu)

babel-plugin-transform-typescript, babel-types

#18380 fix(types): visit decorators of TSParameterProperty (@JLHwung)

babel-plugin-transform-block-scoping

#18331 fix: wrap enclosing loop when a nested for head closure captures its bindings (@joellemd)

🏠 Internal

babel-plugin-transform-classes

#18383 Remove internal usage of loose in class transform (@nicolo-ribaudo)

🔬 Output optimization

babel-plugin-transform-spread

#18318 Avoid arrayLikeToArray for spreading literals (@nicolo-ribaudo)

Committers: 7

Babel Bot (@babel-bot)

Bhushan Agrawal (@bhushan4work)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joellemd)

Nicolò Ribaudo (@nicolo-ribaudo)

Srinu desetti (@webdevelopersrinu)

@liuxingbaoyu

... (truncated)

Changelog

Sourced from @babel/core's changelog.

Changelog

Tags:

💥 [Breaking Change]

👓 [Spec Compliance]

🚀 [New Feature]

🐛 [Bug Fix]

📝 [Documentation]

🏠 [Internal]

💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v8.0.0-alpha.0.

See CHANGELOG - v7.15.0 to v7.28.5 for v7.15.0 to v7.28.5 changes (the last common release...
Description has been truncated

…27 updates Bumps the bo-new-theme-npm group with 27 updates in the /admin-dev/themes/new-theme directory: | Package | From | To | | --- | --- | --- | | [@zxcvbn-ts/core](https://github.com/zxcvbn-ts/zxcvbn) | `3.0.4` | `4.2.0` | | [@zxcvbn-ts/language-common](https://github.com/zxcvbn-ts/zxcvbn) | `3.0.4` | `4.1.3` | | [@zxcvbn-ts/language-en](https://github.com/zxcvbn-ts/zxcvbn) | `3.0.2` | `4.1.1` | | [dropzone](https://github.com/enyo/dropzone/tree/HEAD/packages/dropzone) | `5.9.3` | `6.3.5` | | [photoswipe](https://github.com/dimsemenov/Photoswipe) | `4.1.3` | `5.4.4` | | [@types/photoswipe](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/photoswipe) | `4.1.6` | `5.2.5` | | [postcss](https://github.com/postcss/postcss) | `8.5.30` | `8.5.31` | | [vue-i18n](https://github.com/intlify/vue-i18n/tree/HEAD/packages/vue-i18n) | `10.0.8` | `11.4.16` | | [vue-router](https://github.com/vuejs/router) | `4.6.4` | `5.4.0` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.7` | `8.0.9` | | [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.29.9` | `8.0.7` | | [@types/jquery](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jquery) | `3.5.34` | `4.0.1` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.26` | `4.17.27` | | [@types/photoswipe](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/photoswipe) | `4.1.6` | `5.2.5` | | [@types/vue-i18n](https://github.com/kazupon/vue-i18n) | `6.1.3` | `7.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.71.2` | `8.72.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.71.2` | `8.72.0` | | [@vue/eslint-config-typescript](https://github.com/vuejs/eslint-config-typescript) | `13.0.0` | `14.9.0` | | [bootstrap](https://github.com/twbs/bootstrap) | `4.6.2` | `5.3.8` | | [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.50.0` | `3.51.0` | | [esbuild-loader](https://github.com/privatenumber/esbuild-loader) | `2.21.0` | `4.5.0` | | [sass-embedded](https://github.com/sass/embedded-host-node) | `1.105.2` | `1.106.1` | | [stylelint](https://github.com/stylelint/stylelint) | `14.16.1` | `17.16.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `7.0.2` | | [vue-eslint-parser](https://github.com/vuejs/vue-eslint-parser) | `9.4.3` | `10.4.1` | | [webpack](https://github.com/webpack/webpack) | `5.112.0` | `5.112.2` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `6.0.0` | `6.1.0` | | [@fontsource/ibm-plex-sans](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/ibm-plex-sans) | `5.1.0` | `5.3.0` | Updates `@zxcvbn-ts/core` from 3.0.4 to 4.2.0 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/core@3.0.4...@zxcvbn-ts/core@4.2.0) Updates `@zxcvbn-ts/language-common` from 3.0.4 to 4.1.3 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/language-common@3.0.4...@zxcvbn-ts/language-common@4.1.3) Updates `@zxcvbn-ts/language-en` from 3.0.2 to 4.1.1 - [Changelog](https://github.com/zxcvbn-ts/zxcvbn/blob/master/CHANGELOG.md) - [Commits](https://github.com/zxcvbn-ts/zxcvbn/compare/@zxcvbn-ts/language-en@3.0.2...@zxcvbn-ts/language-en@4.1.1) Updates `dropzone` from 5.9.3 to 6.3.5 - [Release notes](https://github.com/enyo/dropzone/releases) - [Changelog](https://github.com/enyo/dropzone/blob/main/packages/dropzone/CHANGELOG.md) - [Commits](https://github.com/enyo/dropzone/commits/dropzone@6.3.5/packages/dropzone) Updates `photoswipe` from 4.1.3 to 5.4.4 - [Release notes](https://github.com/dimsemenov/Photoswipe/releases) - [Commits](dimsemenov/PhotoSwipe@v4.1.3...v5.4.4) Updates `@types/photoswipe` from 4.1.6 to 5.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/photoswipe) Updates `postcss` from 8.5.30 to 8.5.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.30...8.5.31) Updates `vue-i18n` from 10.0.8 to 11.4.16 - [Release notes](https://github.com/intlify/vue-i18n/releases) - [Changelog](https://github.com/intlify/vue-i18n/blob/v11.4.16/CHANGELOG.md) - [Commits](https://github.com/intlify/vue-i18n/commits/v11.4.16/packages/vue-i18n) Updates `vue-router` from 4.6.4 to 5.4.0 - [Release notes](https://github.com/vuejs/router/releases) - [Commits](vuejs/router@v4.6.4...v5.4.0) Updates `@babel/core` from 7.29.7 to 8.0.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.9/packages/babel-core) Updates `@babel/eslint-parser` from 7.29.9 to 8.0.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.7/eslint/babel-eslint-parser) Updates `@types/jquery` from 3.5.34 to 4.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jquery) Updates `@types/lodash` from 4.17.26 to 4.17.27 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `@types/photoswipe` from 4.1.6 to 5.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/photoswipe) Updates `@types/vue-i18n` from 6.1.3 to 7.0.0 - [Release notes](https://github.com/kazupon/vue-i18n/releases) - [Changelog](https://github.com/kazupon/vue-i18n/blob/v8.x/CHANGELOG.md) - [Commits](kazupon/vue-i18n@v6.1.3...v7.0.0) Updates `@typescript-eslint/eslint-plugin` from 8.71.2 to 8.72.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.71.2 to 8.72.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/parser) Updates `@vue/eslint-config-typescript` from 13.0.0 to 14.9.0 - [Release notes](https://github.com/vuejs/eslint-config-typescript/releases) - [Commits](vuejs/eslint-config-typescript@v13.0.0...v14.9.0) Updates `bootstrap` from 4.6.2 to 5.3.8 - [Release notes](https://github.com/twbs/bootstrap/releases) - [Commits](twbs/bootstrap@v4.6.2...v5.3.8) Updates `core-js` from 3.50.0 to 3.51.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.51.0/packages/core-js) Updates `esbuild-loader` from 2.21.0 to 4.5.0 - [Release notes](https://github.com/privatenumber/esbuild-loader/releases) - [Commits](privatenumber/esbuild-loader@v2.21.0...v4.5.0) Updates `sass-embedded` from 1.105.2 to 1.106.1 - [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md) - [Commits](sass/embedded-host-node@1.105.2...1.106.1) Updates `stylelint` from 14.16.1 to 17.16.0 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@14.16.1...17.16.0) Updates `typescript` from 5.8.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.8.3...v7.0.2) Updates `vue-eslint-parser` from 9.4.3 to 10.4.1 - [Release notes](https://github.com/vuejs/vue-eslint-parser/releases) - [Commits](vuejs/vue-eslint-parser@v9.4.3...v10.4.1) Updates `webpack` from 5.112.0 to 5.112.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.112.0...v5.112.2) Updates `webpack-dev-server` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v6.0.0...v6.1.0) Updates `@fontsource/ibm-plex-sans` from 5.1.0 to 5.3.0 - [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md) - [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/ibm-plex-sans) --- updated-dependencies: - dependency-name: "@zxcvbn-ts/core" dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@zxcvbn-ts/language-common" dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@zxcvbn-ts/language-en" dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: dropzone dependency-version: 6.3.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: photoswipe dependency-version: 5.4.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@types/photoswipe" dependency-version: 5.2.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: postcss dependency-version: 8.5.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bo-new-theme-npm - dependency-name: vue-i18n dependency-version: 11.4.16 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: vue-router dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@babel/core" dependency-version: 8.0.9 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@babel/eslint-parser" dependency-version: 8.0.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@types/jquery" dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@types/lodash" dependency-version: 4.17.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bo-new-theme-npm - dependency-name: "@types/photoswipe" dependency-version: 5.2.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@types/vue-i18n" dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bo-new-theme-npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bo-new-theme-npm - dependency-name: "@vue/eslint-config-typescript" dependency-version: 14.9.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: bootstrap dependency-version: 5.3.8 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: core-js dependency-version: 3.51.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bo-new-theme-npm - dependency-name: esbuild-loader dependency-version: 4.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: sass-embedded dependency-version: 1.106.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bo-new-theme-npm - dependency-name: stylelint dependency-version: 17.16.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: vue-eslint-parser dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: bo-new-theme-npm - dependency-name: webpack dependency-version: 5.112.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bo-new-theme-npm - dependency-name: webpack-dev-server dependency-version: 6.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bo-new-theme-npm - dependency-name: "@fontsource/ibm-plex-sans" dependency-version: 5.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bo-new-theme-npm ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 26, 2026

Navigation Menu

Repository navigation

chore(deps): bump the bo-new-theme-npm group across 1 directory with 27 updates - #136

chore(deps): bump the bo-new-theme-npm group across 1 directory with 27 updates#136
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/admin-dev/themes/new-theme/dev/bo-new-theme-npm-48e00bbd3b

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

dropzone@6.3.5

Patch Changes

dropzone@6.3.4

Patch Changes

dropzone@6.3.3

Patch Changes

dropzone@6.3.2

Patch Changes

dropzone@6.3.1

Patch Changes

6.3.5

Patch Changes

6.3.4

Patch Changes

6.3.3

Patch Changes

6.3.2

Patch Changes

v5.4.4

v5.4.2

v5.4.1

v5.4.0

v5.3.9

What's Changed

New Contributors

v5.3.8

v5.3.7

New Contributors

v5.3.6

8.5.31

8.5.31

v11.4.16

What's Changed

🐛 Bug Fixes

v11.4.15

What's Changed

🐛 Bug Fixes

📝️ Documentations

v11.4.14

What's Changed

🔒 Security Fixes

👕 Refactoring

v11.4.16 (2026-10-18T07:43:18.954Z)

What's Changed

🐛 Bug Fixes

v11.4.15 (2026-10-17T15:12:11.060Z)

What's Changed

🐛 Bug Fixes

📝️ Documentations

v11.4.14 (2026-10-10T11:06:13.502Z)

v5.4.0

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v5.3.1

🐞 Bug Fixes

View changes on GitHub

v8.0.9 (2026-10-23)

v8.0.8 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 7

Changelog

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants