fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@babel/core (source)	7.26.8 -> 7.27.1					devDependencies	minor
@babel/plugin-transform-modules-commonjs (source)	7.26.3 -> 7.27.1					devDependencies	minor
@babel/preset-env (source)	7.26.8 -> 7.27.1					devDependencies	minor
@babel/preset-typescript (source)	7.26.0 -> 7.27.1					devDependencies	minor
@babel/register (source)	7.25.9 -> 7.27.1					devDependencies	minor
@changesets/changelog-github (source)	0.5.0 -> 0.5.1					devDependencies	patch
@changesets/cli (source)	2.27.12 -> 2.29.2					devDependencies	minor
@grpc/grpc-js (source)	~1.9.0 -> ~1.13.0					dependencies	minor
@rollup/plugin-node-resolve (source)	16.0.0 -> 16.0.1					devDependencies	patch
@rushstack/ts-command-line (source)	4.23.3 -> 4.23.7					dependencies	patch
@types/node (source)	18.19.83 -> 18.19.87					dependencies	patch
@types/node (source)	18.19.83 -> 18.19.87					devDependencies	patch
firebase (source, changelog)	11.3.0 -> 11.6.1					dependencies	minor
firebase-tools	13.30.0 -> 13.35.1					devDependencies	minor
json-stable-stringify	1.2.1 -> 1.3.0					devDependencies	minor
node	22.10.0 -> 22.15.0					uses-with	minor
playwright (source)	1.51.1 -> 1.52.0					devDependencies	minor
protobufjs (source)	7.4.0 -> 7.5.0					devDependencies	minor
rollup-plugin-license	3.5.3 -> 3.6.0					devDependencies	minor
selenium-webdriver (source)	4.30.0 -> 4.32.0					devDependencies	minor
sinon.js (source)	4.1.3 -> 4.5.0						minor
terser (source)	5.37.0 -> 5.39.0					devDependencies	minor
terser (source)	5.38.1 -> 5.39.0					devDependencies	minor
webpack	5.98.0 -> 5.99.7					devDependencies	minor
webpack-dev-server	5.2.0 -> 5.2.1					devDependencies	patch

---

Release Notes

babel/babel (@​babel/core)

v7.27.1

Compare Source

👓 Spec Compliance

• babel-parser
  • #​17254 Allow using of as lexical declaration within for (@​JLHwung)
  • #​17230 Disallow get/set in TSPropertySignature (@​JLHwung)
• babel-parser, babel-types
  • #​17193 Stricter TSImportType options parsing (@​JLHwung)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • #​17137 fix: do expressions should allow early exit (@​kermanx)
• babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • #​17251 Fix: propagate argument evaluation errors through async promise chain (@​magic-akari)
• babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • #​17231 fix apply()/call() annotated as pure (@​Lacsw)
• babel-helper-fixtures, babel-parser
  • #​17233 Create ChainExpression within TSInstantiationExpression (@​JLHwung)
• babel-generator, babel-parser
  • #​17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
• babel-parser
  • #​17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
  • #​17080 Fix start of TSParameterProperty (@​JLHwung)
• babel-compat-data, babel-preset-env
  • #​17228 Update firefox bugfix compat data (@​JLHwung)
• babel-traverse
  • #​17156 fix: Objects and arrays with multiple references should not be evaluated (@​liuxingbaoyu)
• babel-generator
  • #​17216 Fix: support const type parameter in generator (@​JLHwung)

💅 Polish

• babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
  • #​17221 Reduce generated names size for the 10th-11th (@​nicolo-ribaudo)

🏠 Internal

• babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​17263 Remove unused regenerator-runtime dep in @babel/runtime (@​nicolo-ribaudo)
• babel-compat-data, babel-preset-env
  • #​17256 Tune plugin compat data (@​JLHwung)
• babel-compat-data, babel-standalone
  • #​17236 migrate babel-compat-data build script to mjs (@​JLHwung)
• Other
  • #​17232 Bump typescript-eslint to 8.29.1 (@​JLHwung)
  • #​17219 test: add basic typescript-eslint integration tests (@​JLHwung)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-register
  • #​16844 Migrate @babel/register to cts (@​liuxingbaoyu)
• babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types
  • #​17207 Enforce node protocol import (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-regenerator
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)
• babel-helpers
  • #​17205 Inline regenerator in the relevant packages (@​nicolo-ribaudo)

🔬 Output optimization

• babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  • #​16538 Reduce interopRequireWildcard size (@​liuxingbaoyu)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #​17213 Reduce regeneratorRuntime size (@​liuxingbaoyu)

v7.26.10

Compare Source

👓 Spec Compliance

• babel-parser
  • #​17159 Disallow decorator in array pattern (@​JLHwung)

🐛 Bug Fix

• babel-parser, babel-template
  • #​17164 Fix: always initialize ExportDeclaration attributes (@​JLHwung)
• babel-core
  • #​17142 fix: "Map maximum size exceeded" in deepClone (@​liuxingbaoyu)
• babel-parser, babel-plugin-transform-typescript
  • #​17154 Update typescript parser tests (@​JLHwung)
• babel-traverse
  • #​17151 fix: Should not evaluate vars in child scope (@​liuxingbaoyu)
• babel-generator
  • #​17153 fix: Correctly generate abstract override (@​liuxingbaoyu)
• babel-parser
  • #​17107 Fix source type detection when parsing TypeScript (@​JLHwung)
• babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
  • #​17173 Fix processing of replacement pattern with named capture groups (@​mmmsssttt404)

💅 Polish

• babel-standalone
  • #​17158 Avoid warnings when re-bundling @​babel/standalone with webpack (@​liuxingbaoyu)

🏠 Internal

• babel-parser
  • #​17160 Left-value parsing cleanup (@​JLHwung)

v7.26.9

Compare Source

🐛 Bug Fix

• babel-types
  • #​17103 fix: Definition for TSPropertySignature.kind (@​liuxingbaoyu)
• babel-generator, babel-types
  • #​17062 Print TypeScript optional/definite in ClassPrivateProperty (@​jamiebuilds-signal)

🏠 Internal

• babel-types
  • #​17130 Use .ts files with explicit reexports to solve name conflicts (@​nicolo-ribaudo)
• babel-core
  • #​17127 Do not depend on @types/gensync in Babel 7 (@​nicolo-ribaudo)

changesets/changesets (@​changesets/changelog-github)

v0.5.1

Compare Source

Patch Changes

• Updated dependencies [84a4a1b]:
  • @​changesets/types@​6.1.0

grpc/grpc-node (@​grpc/grpc-js)

v1.13.3: @​grpc/grpc-js 1.13.3

Compare Source

• Disable Nagle's algorithm (#​2936)
• Avoid calling http2.getDefaultSettings (#​2937)

v1.13.2: @​grpc/grpc-js 1.13.2

Compare Source

• Fix a bug that caused clients to be unable to connect through local proxies (#​2933)

v1.13.1: @​grpc/grpc-js 1.13.1

Compare Source

• Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#​2926)
• Fix a bug that caused the client to never send retries if any retryThrottling config was set (#​2927)
• Fix a bug that caused clients to incorrectly send retries if the feature was disabled by a channel option and a retry config was provided (#​2927)

v1.13.0: @​grpc/grpc-js 1.13.0

Compare Source

Changelog

• Add support for channel option grpc-node.flow_control_window to control HTTP/2 flow control window size (#​2864 contributed by @​rickihastings)
• Show meaningful error messages more consistently when requests fail (#​2868)
• Add support for CIDR blocks in no_proxyenvironment variable (#​2876 contributed by @​melkouri)
• Fix a bug that caused server interceptor sendMetadata methods to not be called if the server interceptor did not explicitly send metadata (#​2897)
• Fix IPv6-mapped IPv4 address parsing in channelz, and represent them as IPv4 addresses (#​2909)

Experimental API changes

Added:

• SecureConnector
• SecureConnectResult
• SUBCHANNEL_ARGS_EXCLUDE_KEY_PREFIX
• Server#experimentalRegisterListenerToChannelz protected method
• ServerexperimentalUnregisterListenerFromChannelz protected method
• Server#experimentalCreateConnectionInjectorWithChannelzRef protected method

Modified:

• LoadBalancer: Removed the ChannelCredentials constructor argument
• LoadBalancer: Removed the ChannelOptions constructor argument
• LoadBalancer#updateAddressList: Replaced the attributes argument with one of type ChannelOptions.
• ChannelControlHelper#createSubchannel: Removed the ChannelCredentials argument
• LeafLoadBalancer: Removed the ChannelCredentials constructor argument

v1.12.6

Compare Source

• Allow garbage collection of IDLE channels (#​2896)

v1.12.5: @​grpc/grpc-js 1.12.5

Compare Source

• Prioritize HTTP status errors over message decoding errors (#​2873)

v1.12.4: @​grpc/grpc-js 1.12.4

Compare Source

• Prioritize reporting UNAVAILABLE status when handing connection drops (#​2862)

v1.12.3: @​grpc/grpc-js 1.12.3

Compare Source

• Report UNAVAILABLE if possible when handling connection drops (#​2861)

v1.12.2: @​grpc/grpc-js 1.12.2

Compare Source

• Use util.promisify instead of fs/promises for Node 12 compatibility (#​2838)

v1.12.1: @​grpc/grpc-js 1.12.1

Compare Source

• Port bugfixes from 1.11.x into 1.12.x (#​2836)

v1.12.0: @​grpc/grpc-js 1.12.0

Compare Source

Changelog

• Provide the method_name for the CallCredentials callback generateMetadata (#​2814 contributed by @​becoded)
• Add an optional rejectUnauthorized field to the VerifyOptions interface, which can be passed as an argument to credentials.createSsl and createFromSecureContext (#​2812 contributed by @​vinothsa4891)

Experimental API changes

Added:

• CaCertificateUpdate
• CaCertificateUpdateListener
• IdentityCertificateUpdate
• IdentityCertificateUpdateListener
• CertificateProvider
• FileWatcherCertificateProvider
• FileWatcherCertificateProviderConfig
• createCertificateProviderChannelCredentials
• createCertificateProviderServerCredentials

Modified:

• LoadBalancer: The constructor now takes an additional argument of type ChannelCredentials.
• ChannelControlHelper#createSubchannel: Now takes an additional argument of type ChannelCredentials | null. This should be passed along if overriding this function.
• LeafLoadBalancer: The constructor now takes an additional argument of type ChannelCredentials.

v1.11.3: @​grpc/grpc-js 1.11.3

Compare Source

• Ensure the client queries the name resolver again after connections drop while using the round_robin load balancing policy (#​2825)

v1.11.2: @​grpc/grpc-js 1.11.2

Compare Source

• Fix client crash on receiving a custom error code (#​2801 contributed by @​hastom)
• Report connection errors more consistently (#​2808)
• Avoid computing the channel constructor trace log when that tracer is not enabled (#​2817 contributed by @​ygalbel)

v1.11.1: @​grpc/grpc-js 1.11.1

Compare Source

• Revert a change that used APIs that were not available in early minor versions of Node 14 (#​2799 contributed by @​xqin)

v1.11.0: @​grpc/grpc-js 1.11.0

Compare Source

Changelog

• Add Server connection injection API as described in gRFC L114 (#​2675)
• Implement support for an alternate DNS resolver that supports custom authorities (#​2776 contributed by @​gkampitakis)
• Add a channel option to configure retry attempt limits (#​2795)
• Add a getHost method to server call objects (#​2783, #​2793)
• Fix typos and omissions in service config validation errors (#​2782 contributed by @​matthewbinshtok)

Experimental API changes

Added:

• splitHostPort
• HostPort
• createServerCredentialsWithInterceptors

v1.10.11: @​grpc/grpc-js 1.10.11

Compare Source

• Fix a bug that caused clients to reconnect unnecessarily while no requests are pending. (#​2784)
• Fix a bug that caused clients to fail to re-establish existing connections while waiting for DNS results (#​2784)
• Fix a bug that caused servers to sometimes not close idle connections depending on timing (#​2790)
• Fix a bug that caused calls to be pending indefinitely while unable to start after a channel is closed (#​2791)

v1.10.10: @​grpc/grpc-js 1.10.10

Compare Source

• Various improvements to handling of keepalive timers (#​2760 by @​davidfiala)
• Fix a bug causing unary response client requests to hang when unexpectedly receiving multiple messages (#​2772)
• Fix a bug causing some requests to fail when making requests through a local proxy (#​2746 contributed by @​mjameswh, backported in #​2777)
• Fix handling of URL-encoded user credentials in proxy configuration (#​2761 contributed by @​brendan-myers, backported in #​2777)
• Fix missing client-side handling of the grpc.max_send_message_length channel option (#​2779)

v1.10.9: @​grpc/grpc-js 1.10.9

Compare Source

• Avoid buffering significantly more than grpc.max_receive_message_size per received message.

v1.10.8: @​grpc/grpc-js 1.10.8

Compare Source

• Fix a bug that caused channels with unix: targets to not reconnect after the channel goes idle (#​2750)

v1.10.7: @​grpc/grpc-js 1.10.7

Compare Source

• Improve reporting of HTTP error codes (#​2723)
• Update dependency on @grpc/proto-loader to the latest version (#​2732)

v1.10.6: @​grpc/grpc-js 1.10.6

Compare Source

• Fix a bug that could cause a server to sometimes send the status early (#​2708)

v1.10.5: @​grpc/grpc-js 1.10.5

Compare Source

• Resolve exception when Error.stackTraceLimit is undefined (#​2701 contributed by @​davidfiala)
• Call configured checkServerIdentity when grpc.ssl_target_name_override is set (#​2704)
• Add more information to DEADLINE_EXCEEDED error details strings (#​2692)

v1.10.4: @​grpc/grpc-js 1.10.4

Compare Source

• Fix a bug that caused server interceptors to crash when using partially-populated ResponderBuilder and ListenerBuilder objects (#​2696)
• Avoid sending RST_STREAM from the client when the server has already finished its side of the stream (#​2695)

v1.10.3: @​grpc/grpc-js 1.10.3

Compare Source

• Revert client reconnection changes in #​2680 (#​2691)

v1.10.2: @​grpc/grpc-js 1.10.2

Compare Source

• Implement server connection idle timeouts and improve channelz performance (#​2677 contributed by @​AVVS)
• Fix a bug that caused clients to automatically reconnect even when there were no active requests (#​2680)
• Modify order of server call events to more closely match pre-1.10.x behavior (#​2683)

v1.10.1: @​grpc/grpc-js 1.10.1

Compare Source

• Fix a bug causing channels using the round_robin LB policy to fail to reconnect after a connection drops (#​2667)

v1.10.0: @​grpc/grpc-js 1.10.0

Compare Source

Changelog

• Add server interceptors support (#​2650) (details in gRFC L112)
• Deprecate Server#start (#​2597) (details in gRFC L107)
• Add Server#unbind (#​2612) (details in gRFC L109)
• Add Server#drain (#​2616) (details in gRFC L111)
• Export type VerifyOptions (#​2637 contributed by @​chakhsu)

Experimental API Changes

• Added:
  • Endpoint
  • endpointToString
  • endpointHasAddress
  • LeafLoadBalancer
  • HealthListener
  • SubchannelInterface#isHealthy
  • SubchannelInterface#addHealthStateWatcher
  • SubchannelInterface#removeHealthStateWatcher
  • SubchannelWrapper#setHealthy
  • selectLbConfigFromList
  • parseLoadBalancingConfig
  • OutlierDetectionRawConfig
  • EndpointMap
• Moved out of the experimental namespace:
  • ServiceConfig
  • MethodConfig
  • LoadBalancingConfig (now a simple raw object type)
  • RetryPolicy
• Removed:
  • getFirstUsableConfig
  • validateLoadBalancingConfig
  • OutlierDetectionLoadBalancingConfig
• Modified:
  • LoadBalancer#updateAddressList: The first argument now has type Endpoint[] instead of SubchannelAddress[]
  • ResolverListener#onSuccessfulResolution: The first argument now has type Endpoint[] instead of SubchannelAddress[]
  • registerLoadBalancerType: The second argument, a LoadBalancerConstructor now takes a second argument options: ChannelOptions
  • ConfigSelector: Now accepts an additional argument channelId: number
  • QueuePicker: The constructor now accepts an additional optional argument childPicker: Picker, which the QueuePicker instance will delegate to if provided.

rollup/plugins (@​rollup/plugin-node-resolve)

v16.0.1

2025-03-11

Bugfixes

• fix: add ignoreSideEffectsForRoot to exported interface (#​1841)

microsoft/rushstack (@​rushstack/ts-command-line)

v4.23.7

Compare Source

Tue, 25 Mar 2025 15:11:15 GMT

Version update only

v4.23.6

Compare Source

Tue, 11 Mar 2025 02:12:33 GMT

Version update only

v4.23.5

Compare Source

Wed, 12 Feb 2025 01:10:52 GMT

Version update only

v4.23.4

Compare Source

Thu, 30 Jan 2025 01:11:42 GMT

Version update only

firebase/firebase-js-sdk (firebase)

v11.6.1

Compare Source

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/app@​0.11.5

Patch Changes

• Update SDK_VERSION.

@​firebase/app-compat@​0.2.54

Patch Changes

• Updated dependencies []:
• @​firebase/app@​0.11.5

@​firebase/auth@​1.10.1

Patch Changes

• 1363ecc #​8912 - Fixed: ActionCodeURL not populating languageCode from the url.

@​firebase/auth-compat@​0.5.21

Patch Changes

• Updated dependencies [1363ecc]:
• @​firebase/auth@​1.10.1

@​firebase/data-connect@​0.3.4

Patch Changes

• 1df3d26 #​8898 - Fix DataConnectOperationError.

[email protected]

Patch Changes

• [ed0803a](https://redirect.github.c

---

Configuration

📅 Schedule: Branch creation - "before 3am on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 83d398b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[google-oss-bot]

Size Report ¹

Affected Products

No changes between base commit (080a90d) and merge commit (948e477).

Test Logs

• Base (080a90d): https://github.com/firebase/firebase-js-sdk/actions/runs/14793281371
• Merge (948e477): https://github.com/firebase/firebase-js-sdk/actions/runs/14803939662

1. https://storage.googleapis.com/firebase-sdk-metric-reports/ypoue8ZrFR.html

[google-oss-bot]

Size Analysis Report ¹

Affected Products

No changes between base commit (080a90d) and merge commit (948e477).

Test Logs

• Base (080a90d): https://github.com/firebase/firebase-js-sdk/actions/runs/14793279181
• Merge (948e477): https://github.com/firebase/firebase-js-sdk/actions/runs/14803939662

1. https://storage.googleapis.com/firebase-sdk-metric-reports/FC0r8Gg3qp.html

[github-actions]

Vertex AI Mock Responses Check ⚠️

A newer major version of the mock responses for Vertex AI unit tests is available. update_vertexai_responses.sh should be updated to clone the latest version of the responses: v11.0