Bump the build group with 6 updates #1545

dependabot · 2025-08-26T08:31:23Z

Bumps the build group with 6 updates:

Package	From	To
@babel/core	`7.28.0`	`7.28.3`
@babel/preset-env	`7.28.0`	`7.28.3`
cssnano	`7.1.0`	`7.1.1`
sass-embedded	`1.90.0`	`1.91.0`
rollup	`4.46.2`	`4.48.1`
caniuse-lite	`1.0.30001734`	`1.0.30001737`

Updates @babel/core from 7.28.0 to 7.28.3

Release notes

Sourced from @babel/core's releases.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jam Balaya (@JamBalaya56562)

Nicolò Ribaudo (@nicolo-ribaudo)

easrng (@easrng)

v7.28.2 (2025-07-24)

Thanks @souhailaS for your first PR!

🐛 Bug Fix

babel-types

#17445 [babel 7] Make operator param in t.tsTypeOperator optional (@nicolo-ribaudo)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17441 fix: regeneratorDefine compatibility with es5 strict mode (@liuxingbaoyu)

Committers: 4

Babel Bot (@babel-bot)

Nicolò Ribaudo (@nicolo-ribaudo)

SOUHAILA SERBOUT (@souhailaS)

@liuxingbaoyu

v7.28.1 (2025-07-12)

... (truncated)

Changelog

Sourced from @babel/core's changelog.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

v7.28.2 (2025-07-24)

🐛 Bug Fix

babel-types

#17445 [babel 7] Make operator param in t.tsTypeOperator optional (@nicolo-ribaudo)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17441 fix: regeneratorDefine compatibility with es5 strict mode (@liuxingbaoyu)

v7.28.1 (2025-07-12)

🐛 Bug Fix

babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

#17426 fix: regenerator correctly handles throw outside of try (@liuxingbaoyu)

📝 Documentation

babel-types

#17422 Add missing FunctionParameter docs (@JLHwung)

↩️ Revert

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-types

#17432 Do not mark OptionalMemberExpresion as LVal (@JLHwung)

Commits

ef155f5 v7.28.3
98d18aa Misc: Cleanup Babel 8 tasks (#17429)
64ec61e export PartialConfig and NormalizedOptions (#17470)
fb57f26 chore: update browser compat libs (#17469)
See full diff in compare view

Updates @babel/preset-env from 7.28.0 to 7.28.3

Release notes

Sourced from @babel/preset-env's releases.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jam Balaya (@JamBalaya56562)

Nicolò Ribaudo (@nicolo-ribaudo)

easrng (@easrng)

v7.28.2 (2025-07-24)

Thanks @souhailaS for your first PR!

🐛 Bug Fix

babel-types

#17445 [babel 7] Make operator param in t.tsTypeOperator optional (@nicolo-ribaudo)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17441 fix: regeneratorDefine compatibility with es5 strict mode (@liuxingbaoyu)

Committers: 4

Babel Bot (@babel-bot)

Nicolò Ribaudo (@nicolo-ribaudo)

SOUHAILA SERBOUT (@souhailaS)

@liuxingbaoyu

v7.28.1 (2025-07-12)

... (truncated)

Changelog

Sourced from @babel/preset-env's changelog.

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

📝 Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

🏠 Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

🔬 Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

v7.28.2 (2025-07-24)

🐛 Bug Fix

babel-types

#17445 [babel 7] Make operator param in t.tsTypeOperator optional (@nicolo-ribaudo)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17441 fix: regeneratorDefine compatibility with es5 strict mode (@liuxingbaoyu)

v7.28.1 (2025-07-12)

🐛 Bug Fix

babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

#17426 fix: regenerator correctly handles throw outside of try (@liuxingbaoyu)

📝 Documentation

babel-types

#17422 Add missing FunctionParameter docs (@JLHwung)

↩️ Revert

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-types

#17432 Do not mark OptionalMemberExpresion as LVal (@JLHwung)

Commits

ef155f5 v7.28.3
98d18aa Misc: Cleanup Babel 8 tasks (#17429)
fb57f26 chore: update browser compat libs (#17469)
f4a9616 [static blocks] Do not inject new static fields after static code (#17443)
f743094 fix: regeneratorDefine compatibility with es5 strict mode (#17441)
See full diff in compare view

Updates cssnano from 7.1.0 to 7.1.1

Release notes

Sourced from cssnano's releases.

v71.1.1

Bug Fixes

fix(convert-values): exclude linear() from stripping % from value 0 by @cernymatej in cssnano/cssnano#1720

Full Changelog: https://github.com/cssnano/cssnano/compare/[email protected]@7.1.1

Commits

de6f10b Publish cssnano 7.1.1
6fc622d fix(convert-values): exclude linear() from stripping % from value 0 (#1720)
73189b8 chore: update dev dependencies
8049e6d chore: update TypeScript to 5.9.2
a0bb064 docs: update website (#1715)
See full diff in compare view

Updates sass-embedded from 1.90.0 to 1.91.0

Changelog

Sourced from sass-embedded's changelog.

1.91.0

Potentially breaking change: meta.inspect() (as well as other systems that use it such as @debug and certain error messages) now emits numbers with as high precision as is available instead of rounding to the nearest 1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of meta.inspect(), which is to provide full information about the structure of a Sass value.

Passing a rest argument ($arg...) before a positional or named argument when calling a function or mixin is now deprecated. This was always outside the specified syntax, but it was historically treated the same as passing the rest argument at the end of the argument list whether or not that matched the visual order of the arguments.

Commits

9618534 Update Dart Sass version and release
See full diff in compare view

Updates rollup from 4.46.2 to 4.48.1

Release notes

Sourced from rollup's releases.

v4.48.1

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

v4.48.0

4.48.0

2025-08-23

Features

If configured, also keep unparseable import attributes of external dynamic imports in the output(#6071)

Bug Fixes

Ensure variables referenced in non-removed import attributes are included (#6071)

Pull Requests

#6071: Keep attributes for external dynamic imports (@TrickyPi)

#6079: fix(deps): update swc monorepo (major) (@renovate[bot])

#6080: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

v4.47.1

4.47.1

2025-08-21

Bug Fixes

Revert build process changes to investigate issues (#6077)

Pull Requests

#6077: Revert "build: aggressively optimize wasm build, improve pipeline (#6053)" (@lukastaegert)

v4.47.0

4.47.0

2025-08-21

... (truncated)

Changelog

Sourced from rollup's changelog.

4.48.1

2025-08-25

Bug Fixes

Correctly ignore white-space in JSX strings around line-breaks (#6051)

Pull Requests

#6051: fix: handle whitespace according to JSX common practice (@cyyynthia)

#6078: build: optimize pipeline take two (@cyyynthia)

4.48.0

2025-08-23

Features

If configured, also keep unparseable import attributes of external dynamic imports in the output(#6071)

Bug Fixes

Ensure variables referenced in non-removed import attributes are included (#6071)

Pull Requests

#6071: Keep attributes for external dynamic imports (@TrickyPi)

#6079: fix(deps): update swc monorepo (major) (@renovate[bot])

#6080: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

4.47.1

2025-08-21

Bug Fixes

Revert build process changes to investigate issues (#6077)

Pull Requests

#6077: Revert "build: aggressively optimize wasm build, improve pipeline (#6053)" (@lukastaegert)

4.47.0

2025-08-21

Features

Aggressively reduce WASM build size (#6053)

... (truncated)

Commits

8b6b06b 4.48.1
8cf554a build: optimize pipeline take two (#6078)
c9e96c2 fix: handle whitespace according to JSX common practice (#6051)
77bb1ae 4.48.0
94c96fa Keep attributes for external dynamic imports (#6071)
e8e9f83 fix(deps): update swc monorepo (major) (#6079)
d1540fa fix(deps): lock file maintenance minor/patch updates (#6080)
21d5c5b 4.47.1
82a8f15 Revert "build: aggressively optimize wasm build, improve pipeline (#6053)" (#...
4a5d2da 4.47.0
Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001734 to 1.0.30001737

Commits

c200a6b Update caniuse-db 1.0.30001737
fbe2f0f Update caniuse-db 1.0.30001736
a53867d Update caniuse-db 1.0.30001735
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the build group with 6 updates: | Package | From | To | | --- | --- | --- | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.0` | `7.28.3` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.28.0` | `7.28.3` | | [cssnano](https://github.com/cssnano/cssnano) | `7.1.0` | `7.1.1` | | [sass-embedded](https://github.com/sass/embedded-host-node) | `1.90.0` | `1.91.0` | | [rollup](https://github.com/rollup/rollup) | `4.46.2` | `4.48.1` | | [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001734` | `1.0.30001737` | Updates `@babel/core` from 7.28.0 to 7.28.3 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.3/packages/babel-core) Updates `@babel/preset-env` from 7.28.0 to 7.28.3 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.3/packages/babel-preset-env) Updates `cssnano` from 7.1.0 to 7.1.1 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/[email protected]@7.1.1) Updates `sass-embedded` from 1.90.0 to 1.91.0 - [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md) - [Commits](sass/embedded-host-node@1.90.0...1.91.0) Updates `rollup` from 4.46.2 to 4.48.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.46.2...v4.48.1) Updates `caniuse-lite` from 1.0.30001734 to 1.0.30001737 - [Commits](browserslist/caniuse-lite@1.0.30001734...1.0.30001737) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.28.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: "@babel/preset-env" dependency-version: 7.28.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: build - dependency-name: cssnano dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: build - dependency-name: sass-embedded dependency-version: 1.91.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build - dependency-name: rollup dependency-version: 4.48.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: build - dependency-name: caniuse-lite dependency-version: 1.0.30001737 dependency-type: indirect update-type: version-update:semver-patch dependency-group: build ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2025-08-26T10:56:51Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 26, 2025

colinrotherham temporarily deployed to nhsuk-frontend-pr-1545 August 26, 2025 08:31 Inactive

colinrotherham temporarily deployed to nhsuk-frontend-pr-1545 August 26, 2025 08:48 Inactive

colinrotherham added 2 commits August 26, 2025 10:01

Resolve Sass deprecated misplaced-rest warnings

d4230ab

Throw error on Sass deprecated misplaced-rest

0f9552b

colinrotherham force-pushed the dependabot/npm_and_yarn/build-ea47a8fa3a branch from 91f329d to 0f9552b Compare August 26, 2025 09:01

colinrotherham temporarily deployed to nhsuk-frontend-pr-1545 August 26, 2025 09:01 Inactive

Remove secrets: inherit from Sass workflow

834d910

colinrotherham temporarily deployed to nhsuk-frontend-pr-1545 August 26, 2025 10:12 Inactive

Add unit tests for nhsuk-media-query()

051b9ea

colinrotherham temporarily deployed to nhsuk-frontend-pr-1545 August 26, 2025 10:42 Inactive

Add consistent Sass test names and outdent usage

d0c6424

frankieroberto approved these changes Aug 26, 2025

View reviewed changes

colinrotherham temporarily deployed to nhsuk-frontend-pr-1545 August 26, 2025 10:53 Inactive

colinrotherham self-requested a review August 26, 2025 10:54

colinrotherham merged commit 112517c into main Aug 26, 2025
25 of 26 checks passed

colinrotherham deleted the dependabot/npm_and_yarn/build-ea47a8fa3a branch August 26, 2025 11:17

paulrobertlloyd approved these changes Aug 26, 2025

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the build group with 6 updates #1545

Bump the build group with 6 updates #1545

Uh oh!

dependabot bot commented on behalf of github Aug 26, 2025

Uh oh!

sonarqubecloud bot commented Aug 26, 2025

Uh oh!

Uh oh!

Uh oh!

Bump the build group with 6 updates #1545

Bump the build group with 6 updates #1545

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 26, 2025

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 5

v7.28.2 (2025-07-24)

🐛 Bug Fix

Committers: 4

v7.28.1 (2025-07-12)

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

v7.28.2 (2025-07-24)

🐛 Bug Fix

v7.28.1 (2025-07-12)

🐛 Bug Fix

📝 Documentation

↩️ Revert

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 5

v7.28.2 (2025-07-24)

🐛 Bug Fix

Committers: 4

v7.28.1 (2025-07-12)

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

v7.28.2 (2025-07-24)

🐛 Bug Fix

v7.28.1 (2025-07-12)

🐛 Bug Fix

📝 Documentation

↩️ Revert

v71.1.1

Bug Fixes

1.91.0

v4.48.1

4.48.1

Bug Fixes

Pull Requests

v4.48.0

4.48.0

Features

Bug Fixes

Pull Requests

v4.47.1

4.47.1

Bug Fixes

Pull Requests

v4.47.0

4.47.0

4.48.1

Bug Fixes

Pull Requests

4.48.0

Features

Bug Fixes

Pull Requests