fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@apollo/server (source)	^4.11.0 -> ^4.11.2
@babel/cli (source)	^7.25.7 -> ^7.26.4
@babel/code-frame (source)	^8.0.0-alpha.12 -> ^8.0.0-alpha.14
@babel/core (source)	^7.25.8 -> ^7.26.0
@babel/eslint-parser (source)	^7.25.8 -> ^7.25.9
@babel/plugin-transform-runtime (source)	^7.25.7 -> ^7.25.9
@babel/preset-env (source)	^7.25.8 -> ^7.26.0
@babel/preset-react (source)	^7.25.7 -> ^7.26.3
@babel/preset-typescript (source)	^7.25.7 -> ^7.26.0
@babel/register (source)	^7.25.7 -> ^7.25.9
@babel/runtime (source)	^7.25.7 -> ^7.26.0
@chakra-ui/react (source)	^2.10.2 -> ^2.10.4
@changesets/cli (source)	^2.27.9 -> ^2.27.10
@dnd-kit/core (source)	^6.1.0 -> ^6.3.1
@emotion/react (source)	^11.13.3 -> ^11.13.5
@emotion/styled (source)	^11.13.0 -> ^11.13.5
@eslint/compat	^1.2.0 -> ^1.2.4
@reduxjs/toolkit (source)	^2.2.8 -> ^2.4.0
@rjsf/core	^5.21.2 -> ^5.23.1
@rjsf/utils	^5.21.2 -> ^5.23.1
@rjsf/validator-ajv8	^5.21.2 -> ^5.23.1
@storybook/addon-essentials (source)	^8.3.5 -> ^8.4.7
@storybook/addon-interactions (source)	^8.3.5 -> ^8.4.7
@storybook/addon-links (source)	^8.3.5 -> ^8.4.7
@storybook/addon-onboarding (source)	^8.3.5 -> ^8.4.7
@storybook/blocks (source)	^8.3.5 -> ^8.4.7
@storybook/react (source)	^8.3.5 -> ^8.4.7
@storybook/react-webpack5 (source)	^8.3.5 -> ^8.4.7
@storybook/test (source)	^8.3.5 -> ^8.4.7
@testing-library/jest-dom	^6.5.0 -> ^6.6.3
@testing-library/react	^16.0.1 -> ^16.1.0
@types/chrome (source)	^0.0.278 -> ^0.0.287
@types/jest (source)	^29.5.13 -> ^29.5.14
@types/lodash (source)	^4.17.10 -> ^4.17.13
@types/node (source)	^20.16.11 -> ^20.17.9
@types/react (source)	^18.3.11 -> ^18.3.14
@types/react-dom (source)	^18.3.1 -> ^18.3.2
@types/react-test-renderer (source)	^18.3.0 -> ^18.3.1
@typescript-eslint/eslint-plugin (source)	^8.9.0 -> ^8.17.0
@typescript-eslint/parser (source)	^8.9.0 -> ^8.17.0
electron	^31.7.0 -> ^31.7.6
eslint-plugin-jest	^28.8.3 -> ^28.9.0
eslint-plugin-react	^7.37.1 -> ^7.37.2
express (source)	^4.21.1 -> ^4.21.2
framer-motion	^11.11.8 -> ^11.13.1
globals	^15.11.0 -> ^15.13.0
html-webpack-plugin	^5.6.0 -> ^5.6.3
nanoid	^5.0.7 -> ^5.0.9
pnpm (source)	9.12.1 -> 9.15.0
prettier (source)	3.3.3 -> 3.4.2
react-bootstrap (source)	^2.10.5 -> ^2.10.6
react-icons	^5.3.0 -> ^5.4.0
react-router-dom (source)	^6.27.0 -> ^6.28.0
react-select (source)	^5.8.1 -> ^5.8.3
selenium-webdriver (source)	^4.25.0 -> ^4.27.0
socketcluster-client (source)	^19.2.2 -> ^19.2.3
socketcluster-server	^19.1.0 -> ^19.1.1
storybook (source)	^8.3.5 -> ^8.4.7
stylelint (source)	^16.10.0 -> ^16.11.0
typescript-eslint (source)	^8.9.0 -> ^8.17.0
webpack	^5.95.0 -> ^5.97.1

---

Release Notes

apollographql/apollo-server (@​apollo/server)

v4.11.2

Compare Source

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

v4.11.1

Compare Source

Patch Changes

• #​7952 bb81b2c Thanks @​glasser! - Upgrade dependencies so that automated scans don't detect a vulnerability.

  @apollo/server depends on express which depends on cookie. Versions of express older than v4.21.1 depend on a version of cookie vulnerable to CVE-2024-47764. Users of older express versions who call res.cookie() or res.clearCookie() may be vulnerable to this issue.

  However, Apollo Server does not call this function directly, and it does not expose any object to user code that allows TypeScript users to call this function without an unsafe cast.

  The only way that this direct dependency can cause a vulnerability for users of Apollo Server is if you call startStandaloneServer with a context function that calls Express-specific methods such as res.cookie() or res.clearCookies() on the response object, which is a violation of the TypeScript types provided by startStandaloneServer (which only promise that the response object is a core Node.js http.ServerResponse rather than the Express-specific subclass). So this vulnerability can only affect Apollo Server users who use unsafe JavaScript or unsafe as typecasts in TypeScript.

  However, this upgrade will at least prevent vulnerability scanners from alerting you to this dependency, and we encourage all Express users to upgrade their project's own express dependency to v4.21.1 or newer.

babel/babel (@​babel/cli)

v7.26.4

Compare Source

↩️ Revert

• babel-traverse
  • #​17005 Revert "perf: Improve scope information collection performance" (@​JLHwung)

v7.25.9

Compare Source

🐛 Bug Fix

• babel-parser, babel-template, babel-types
  • #​16905 fix: Keep type annotations in syntacticPlaceholders mode (@​liuxingbaoyu)
• babel-helper-compilation-targets, babel-preset-env
  • #​16907 fix: support BROWSERSLIST{,_CONFIG} env (@​JLHwung)
• Other
  • #​16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@​victorenator)

🏠 Internal

• babel-helper-transform-fixture-test-runner
  • #​16914 remove test options flaky (@​JLHwung)

🏃‍♀️ Performance

• babel-parser, babel-types
  • #​16918 perf: Make VISITOR_KEYS etc. faster to access (@​liuxingbaoyu)

babel/babel (@​babel/code-frame)

v8.0.0-alpha.14

Compare Source

v8.0.0-alpha.13

Compare Source

v8.0.0-alpha.13 (2024-10-25)

In addition to the changelog below, this release includes changes from v7.25.1 to v7.26.0

💥 Breaking Change

• babel-generator, babel-parser, babel-plugin-transform-typescript, babel-traverse, babel-types
  • #​16731 Add TSClassImplements|TSInterfaceHeritage and rename TsExpressionWithTypeArguments in Babel 8 (@​liuxingbaoyu)
• babel-generator, babel-parser, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-pipeline-operator, babel-standalone
  • #​16801 [Babel 8] Remove minimal,smart option of Pipeline Operator (@​liuxingbaoyu)
• babel-parser
  • #​16813 [Flow] Drop support for annotations inside array patterns (@​nicolo-ribaudo)
• babel-plugin-transform-class-static-block, babel-plugin-transform-destructuring, babel-plugin-transform-spread, babel-traverse
  • #​16705 [Babel 8] Remove some Scope methods (@​liuxingbaoyu)
• babel-generator, babel-parser, babel-plugin-proposal-import-wasm-source, babel-template, babel-types
  • #​16770 Remove importAssertions parser plugin (@​nicolo-ribaudo)
• babel-generator, babel-parser, babel-standalone
  • #​16808 Remove importReflection parser plugin (@​nicolo-ribaudo)
• babel-generator, babel-traverse, babel-types
  • #​16807 [Babel 8] Remove DecimalLiteral AST (@​liuxingbaoyu)
• `babe

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6a32cb5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.