chore(deps): update all npm dependencies by renovate[bot] · Pull Request #8630 · playcanvas/engine

renovate · 2026-04-22T10:05:18Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/standalone (source)	`7.29.1` → `7.29.2`
@playcanvas/pcui (source)	`5.5.0` → `5.8.0`
@rollup/plugin-commonjs (source)	`29.0.0` → `29.0.2`
@swc/core (source)	`1.15.11` → `1.15.30`
@types/node (source)	`24.10.13` → `24.12.2`
canvas	`3.2.1` → `3.2.3`
eslint (source)	`9.39.3` → `9.39.4`
fs-extra	`11.3.3` → `11.3.4`
globals	`17.3.0` → `17.5.0`
nise	`6.1.1` → `6.1.5`
publint (source)	`0.3.17` → `0.3.18`
puppeteer (source)	`24.37.5` → `24.42.0`
react (source)	`19.2.4` → `19.2.5`
react-dom (source)	`19.2.4` → `19.2.5`
react-router-dom (source)	`7.13.0` → `7.14.2`
rollup (source)	`4.59.0` → `4.60.2`
rollup-plugin-dts	`6.3.0` → `6.4.1`
rollup-plugin-visualizer	`6.0.8` → `6.0.11`
serve	`14.2.5` → `14.2.6`
sinon (source)	`21.0.1` → `21.1.2`
typedoc (source)	`0.28.17` → `0.28.19`
typedoc-plugin-missing-exports	`4.1.2` → `4.1.3`

Release Notes

babel/babel (@babel/standalone)

`v7.29.2`

Compare Source

v7.29.2 (2026-03-16)

👓 Spec Compliance

babel-parser
- #17840 [7.x backport] async x => {} must be in leading pos (@JLHwung)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-async-generator-functions, babel-preset-env, babel-runtime-corejs3
- #17805 [7.x backport] fix: Properly handle await in finally (@liuxingbaoyu)
babel-preset-env
- #17789 [7.x backport] preset-env include/exclude should accept bugfix plugins (@JLHwung)

🏠 Internal

#17813 chore: update eslint peer deps (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)
@liuxingbaoyu

playcanvas/pcui (@playcanvas/pcui)

`v5.8.0`

Compare Source

What's Changed

feat: add activate event to GridView on Enter key press by @willeastcott in #511

Full Changelog: playcanvas/pcui@v5.7.1...v5.8.0

`v5.7.1`

Compare Source

What's Changed

fix: allow TreeView ArrowUp/ArrowDown navigation when item is focused but not selected by @willeastcott in #510

Full Changelog: playcanvas/pcui@v5.7.0...v5.7.1

`v5.7.0`

Compare Source

What's Changed

feat: add arrow key navigation to GridView by @willeastcott in #509

Full Changelog: playcanvas/pcui@v5.6.0...v5.7.0

`v5.6.0`

Compare Source

What's Changed

chore(deps): update all npm dependencies by @renovate[bot] in #498
chore(deps): update all npm dependencies (major) by @renovate[bot] in #499
chore(deps): update all npm dependencies by @renovate[bot] in #501
docs: fix incorrect JSDoc for TreeViewItem sibling getters by @willeastcott in #503
feat: add expandAll() and collapseAll() methods to TreeView by @willeastcott in #504
fix: improve type safety for TreeView and TreeViewItem APIs by @willeastcott in #505
feat: add public traverse() method to TreeView by @willeastcott in #506
feat: expose content getter on TreeViewItem by @willeastcott in #507
chore(deps): update all npm dependencies by @renovate[bot] in #508

Full Changelog: playcanvas/pcui@v5.5.0...v5.6.0

rollup/plugins (@rollup/plugin-commonjs)

`v29.0.2`

2026-03-06

Bugfixes

commonjs: conditional exports (#1952)

`v29.0.1`

2026-03-05

Bugfixes

commonjs: correctly replaces shorthand "global" property in object (#1957)

swc-project/swc (@swc/core)

`v1.15.30`

Compare Source

Bug Fixes

(deploy) Fix musl binding test workflow (#11804) (c30a522)
(deploy) Build package ts before Linux GNU binding tests (#11806) (a3d3ef3)
(es/jsx) Preserve quoted JSX attribute newlines (#11796) (9fe56c8)
(es/minifier) Support full ES version parsing in minify (#11800) (af1f08f)
(es/module) Add opt-in symlink-preserving resolver (#11801) (6028240)
(es/parser) Allow return type annotation on Flow constructors (#11790) (d66b29c)
(es/parser) Support Flow anonymous keyof indexers (#11792) (452c4e5)
(es/parser) Add Flow strip RN and RNW regression corpus (#11799) (23a9109)

Documentation

Require PR template for pull requests (#11793) (3a1084a)

Features

(es/minify) Support extracting comments (#11798) (5986411)

Automattic/node-canvas (canvas)

`v3.2.3`

Compare Source

==================

Fixed

Fix building with gcc (#2559)

`v3.2.2`

Compare Source

==================

Fixed

Fix dangling env pointer in image MIME data cleanup (#2550)
Fix ctx.direction not affected by ctx.save and ctx.restore
Preserve rest of PDF pages when changing width and height (#2538)
Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.

eslint/eslint (eslint)

`v9.39.4`

Compare Source

Bug Fixes

f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
a3c868f fix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
71b2f6b chore: package.json update for @eslint/js release (Jenkins)
1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

jprichardson/node-fs-extra (fs-extra)

`v11.3.4`

Compare Source

Fix bug where calling ensureSymlink/ensureSymlinkSync with a relative srcPath would fail if the symlink already existed (#1038, #1064)

sindresorhus/globals (globals)

`v17.5.0`

Compare Source

`v17.4.0`

Compare Source

sinonjs/nise (nise)

`v6.1.5`

Compare Source

`v6.1.4`

Compare Source

`v6.1.3`

Compare Source

`v6.1.2`

Compare Source

publint/publint (publint)

`v0.3.18`

Compare Source

Patch Changes

Fix deprecated subpath mapping check crash and make getPkgPathValue from publint/utils return undefined if the path is invalid (ad2aa9c)

puppeteer/puppeteer (puppeteer)

`v24.42.0`

Compare Source

♻️ Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated
- dependencies
  - puppeteer-core bumped from 24.41.0 to 24.42.0

🎉 Features

add metadata to extensions object (#14870) (d3e190e)
cdp: support autofilling address (#14826) (c2acadc)
implement URL blocklist to restrict access to unauthorized sites (#14873) (8ad881c)

🛠️ Fixes

remove PartitionAllocSchedulerLoopQuarantineTaskControlledPurge from disabled features (#14872) (c9909a5)
roll to Chrome 147.0.7727.57 (#14869) (51c4305)

`v24.41.0`

Compare Source

🎉 Features

add support for Issues (#14845) (6e8dbe7)
adds extension realms api (#14824) (c14f4ae)
API to list installed browser extensions and trigger extension actions (#14821) (d6395ef)
implement console event on web workers (#14784) (fa6158a)
roll to Chrome 147.0.7727.24 (#14797) (ee81786)
roll to Firefox 149.0 (#14799) (9fd5ceb)
webmcp: add hook for tool invocation (#14835) (cf8169d)
webmcp: add hook for tool response (#14841) (6fb05bc)
webmcp: add initial API to inspect tool registrations (#14814) (655c996)
webmcp: add WebMCPTool execute support (#14851) (8f95117)
webmcp: expose WebMCPToolCall in WebMCPToolCallResult (#14848) (242ac0b)
webmcp: Switch from WebMCPInvocationStatus Success to Completed (#14859) (375e636)

Dependencies

The following workspace dependencies were updated
- dependencies
  - puppeteer-core bumped from 24.40.0 to 24.41.0

🛠️ Fixes

add missing onRelease to Mutex and add tests (#14818) (bf1e972)
make Target.asPage return the same Page instance (#14862) (e484a91)
remove RenderDocument from disabled Chrome features (#14745) (a48eba2)
roll to Chrome 147.0.7727.50 (#14819) (2be3002)
roll to Chrome 147.0.7727.56 (#14842) (fdb3c64)
roll to Firefox 149.0.2 (#14838) (55359a3)
without azimuthAngle the altitudeAngle should no be specified (#14781) (6f9d975)

📄 Documentation

update extension and realm docs (#14867) (080379b)
webmcp: Add JS example to WebMCP class (#14852) (c514dba)
webmcp: Add missing documentation (#14849) (76b08d2)
webmcp: tune tags and descriptions (#14844) (5782958)

`v24.40.0`

Compare Source

♻️ Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated
- dependencies
  - puppeteer-core bumped from 24.39.1 to 24.40.0

🎉 Features

support PUPPETEER_DANGEROUS_NO_SANDBOX environment variable (#14756) (2a8276e)

🛠️ Fixes

roll to Chrome 146.0.7680.153 (#14787) (443e87f)
roll to Chrome 146.0.7680.80 (#14778) (14685a0)

`v24.39.1`

Compare Source

♻️ Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated
- dependencies
  - puppeteer-core bumped from 24.39.0 to 24.39.1

🛠️ Fixes

roll to Chrome 146.0.7680.72 (#14764) (177e3ed)
roll to Chrome 146.0.7680.76 (#14777) (0751a83)
roll to Firefox 148.0.2 (#14763) (e658f4e)

`v24.39.0`

Compare Source

♻️ Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated
- dependencies
  - puppeteer-core bumped from 24.38.0 to 24.39.0

🎉 Features

expose Page.hasDevTools (#14758) (5ed7e77)

🛠️ Fixes

roll to Chrome 146.0.7680.66 (#14752) (60ace04)

`v24.38.0`

Compare Source

🎉 Features

roll to Chrome 146.0.7680.31 (#14729) (627eb5e)
roll to Firefox 148.0 (#14728) (09b655a)

Dependencies

The following workspace dependencies were updated
- dependencies
  - puppeteer-core bumped from 24.37.5 to 24.38.0

🛠️ Fixes

consider browsingContext.navigationCommitted to dispose an existing navigation (#14724) (b4e92c6)
disable PartitionAllocSchedulerLoopQuarantineTaskControlledPurge (#14744) (e6c7425)
roll to Chrome 145.0.7632.117 (#14719) (1d407e1)

facebook/react (react)

`v19.2.5`: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

remix-run/react-router (react-router-dom)

`v7.14.2`

Compare Source

Patch Changes

Updated dependencies:
- react-router@7.14.2

`v7.14.1`

Compare Source

Patch Changes

Updated dependencies:
- react-router@7.14.1

`v7.14.0`

Compare Source

Patch Changes

Updated dependencies:
- react-router@7.14.0

`v7.13.2`

Compare Source

Patch Changes

Updated dependencies:
- react-router@7.13.2

`v7.13.1`

Compare Source

Patch Changes

Updated dependencies:
- react-router@7.13.1

rollup/rollup (rollup)

`v4.60.2`

Compare Source

2026-04-18

Bug Fixes

Resolve a variable rendering bug when generating different formats from the same build (#6350)

Pull Requests

#6327: docs: fix various typos in source and documentation (@Abhi3975, @lukastaegert)
#6331: fix(deps): update minor/patch updates (@renovate[bot])
#6332: chore(deps): update codecov/codecov-action action to v6 (@renovate[bot])
#6333: chore(deps): update dependency eslint-plugin-unicorn to v64 (@renovate[bot])
#6334: fix(deps): update rust crate swc_compiler_base to v51 (@renovate[bot])
#6335: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)
#6346: fix(deps): update minor/patch updates (@renovate[bot])
#6347: chore(deps): update dependency lru-cache to v11 (@renovate[bot])
#6348: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)
#6349: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)
#6350: fix: reset variable render names between outputs in the same generate (@barry3406, @lukastaegert)
#6351: chore(deps): update minor/patch updates (@renovate[bot])
#6352: chore(deps): update cross-platform-actions/action action to v1 (@renovate[bot])
#6353: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)
#6354: chore(deps): lock file maintenance (@renovate[bot])
#6355: chore(deps): lock file maintenance (@renovate[bot])
#6356: chore(deps): lock file maintenance (@renovate[bot])
#6358: chore: remove cross-env from devDeps (@K-tecchan)

`v4.60.1`

Compare Source

2026-03-30

Bug Fixes

Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

#6286: fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274) (@littlegrayss, @TrickyPi)
#6317: chore(deps): pin dependencies (@renovate[bot], @lukastaegert)
#6318: chore(deps): update msys2/setup-msys2 digest to cafece8 (@renovate[bot], @lukastaegert)
#6319: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6320: chore(deps): pin dependency typescript to v5 (@renovate[bot], @lukastaegert)
#6321: chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (@renovate[bot], @lukastaegert)
#6322: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)
#6323: chore(deps): lock file maintenance (@renovate[bot])
#6324: chore(deps): lock file maintenance (@renovate[bot], @lukastaegert)

`v4.60.0`

Compare Source

2026-03-22

Features

Support source phase imports as long as they are external (#6279)

Pull Requests

#6279: feat: external only Source Phase imports support (@guybedford, @lukastaegert)

`v4.59.1`

Compare Source

2026-03-21

Bug Fixes

Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

#6281: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6282: chore(deps): update github artifact actions (major) (@renovate[bot], @lukastaegert)
#6283: chore(deps): update dependency nyc to v18 (@renovate[bot], @lukastaegert)
#6284: fix(deps): update swc monorepo (major) (@renovate[bot])
#6285: chore(deps): lock file maintenance (@renovate[bot])
#6290: chore(deps): update minor/patch updates (@renovate[bot], @lukastaegert)
#6291: chore(deps): update dependency @shikijs/vitepress-twoslash to v4 (@renovate[bot])
#6292: chore(deps): lock file maintenance (@renovate[bot])
#6297: chore(deps): update minor/patch updates (@renovate[bot])
#6298: chore(deps): lock file maintenance (@renovate[bot])
#6299: chore(deps): lock file maintenance (@renovate[bot])
#6300: docs: update packagephobia link (@bluwy)
#6301: chore(deps): update dependency lint-staged to ^16.3.3 (@renovate[bot])
#6306: fix: fix chunk assignment for deoptimized module with dynamic import (@JoaoBrlt, @lukastaegert)
#6307: chore(deps): update minor/patch updates (@renovate[bot])
#6308: chore(deps): update dependency lru-cache to v11 (@renovate[bot])
#6309: chore(deps): update dependency vite to v8 (@renovate[bot])
#6310: chore(deps): lock file maintenance (@renovate[bot])
#6311: chore(deps): lock file maintenance (@renovate[bot])
#6312: chore(deps): lock file maintenance (@renovate[bot])

Swatinem/rollup-plugin-dts (rollup-plugin-dts)

`v6.4.1`

Compare Source

Fixes:

Fixed regression related to new SourceMap handling

Thank you:

Features, fixes and improvements in this release have been contributed by:

@privatenumber

`v6.4.0`

Compare Source

Features:

Implement proper SourceMap support with goto-definition granularity
Support dotted namespace syntax

Fixes:

Better naming for declare module paths
Add compatibility with TS6

Thank you:

Features, fixes and improvements in this release have been contributed by:

btd/rollup-plugin-visualizer (rollup-plugin-visualizer)

`v6.0.11`

Compare Source

Identical to 6.0.5 to have latest v6 that is not deprecated

vercel/serve (serve)

`v14.2.6`

Compare Source

Patch Changes

7fcb924: Bump ajv to 8.18.0
b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities

sinonjs/sinon (sinon)

`v21.1.2`

Compare Source

53817f7d
Upgrade to ESLint 10 and new shared config (#2696) (Carl-Erik Kopseng)
- Upgrade to ESLint 10 and new shared config
- Update deps
d7a682e0
fix: move npm-run-all to devDeps (#2694) (Avi Vahl)

used only during dev, and caused a considerable dep count jump downstream
5b8720ec
use latest shared eslint-config (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-11.

`v21.1.1`

Compare Source

3c8b023b
Update deps (Carl-Erik Kopseng)
2eabf5da
fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693) (Carl-Erik Kopseng)
- fix(#2692): Remove ESM-only supports-color as it breaks CJS exports

Released by Carl-Erik Kopseng on 2026-04-10.

`v21.1.0`

Compare Source

0a5526c5
updated deps (Carl-Erik Kopseng)
5262204f
fix: build artifacts before running bundled tests (Carl-Erik Kopseng)
819bb64b
Migration to ECMAScript modules (ESM) (#2683) (Carl-Erik Kopseng)
This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating ./lib
- Modern ignores 😁
- test: add distribution harness
- test: verify packed cjs and esm entrypoints
- test: lock distribution api manifest
- test: smoke test built pkg artifacts
- docs: require contract tests for package migration
- test: guard esm migration regressions
- docs: require contract gate for esm migration
- build: generate cjs lib from esm source entries
- refactor: port root api surface to esm
- build: clean port of root api to esm
- docs: include implementation plans
- fix: align lint and smoke tests with esm migration
- refactor: complete esm port of all core components
- refactor: finalize esm migration with sandbox and naming fixes
- fix: finish esm migration stabilization
- chore: stop tracking generated lib output
- remove plans
- prettier
- linting
- fix: make distribution tests self-contained
- fix: build before coverage test bundle
- refactor: move simple unit tests to src
- refactor: flatten test and coverage script chains
- refactor: use parallel mocha for node tests
- test: restore fake timers cleanup
- refactor: remove node test runner script
- remove unneccessary clutter
- fix: make mocha watch use polling
- simplify
- Increase coverage
- Fix coverage by removing duplicated tests
These were covering the generated lib/ folder.
- Move shared util into esm dir
- fix package dep issues
- Adjust coverage
- Upgrade all dependencies
npx npm-check-updates -u
cd2bf5a3
Use newer endpoint (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-09.

`v21.0.3`

Compare Source

0494251b
fix(#2678): upgrade samsam to fix buffer comparisons (Carl-Erik Kopseng)

*Released by [Carl-Erik Kopseng](ht

Configuration

📅 Schedule: (UTC)

Branch creation
- "on monday at 10:00am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update all npm dependencies

b74926a

vercel Bot deployed to Preview – engine-api-docs April 22, 2026 10:05 View deployment

vercel Bot deployed to Preview – engine April 22, 2026 10:06 View deployment

willeastcott approved these changes Apr 22, 2026

View reviewed changes

willeastcott merged commit 683b433 into main Apr 22, 2026
8 checks passed

willeastcott deleted the renovate/all-npm-dependencies branch April 22, 2026 10:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all npm dependencies#8630

chore(deps): update all npm dependencies#8630
willeastcott merged 1 commit into
mainfrom
renovate/all-npm-dependencies

renovate Bot commented Apr 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Apr 22, 2026

Release Notes

v7.29.2 (2026-03-16)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 2

What's Changed

What's Changed

What's Changed

What's Changed

Bugfixes

Bugfixes

Bug Fixes

Documentation

Features

Fixed

Fixed

Bug Fixes

Documentation

Chores

Patch Changes

♻️ Chores

Dependencies

🎉 Features

🛠️ Fixes

🎉 Features

Dependencies

🛠️ Fixes

📄 Documentation

♻️ Chores

Dependencies

🎉 Features

🛠️ Fixes

♻️ Chores

Dependencies

🛠️ Fixes

♻️ Chores

Dependencies

🎉 Features

🛠️ Fixes

🎉 Features

Dependencies

🛠️ Fixes

v19.2.5: 19.2.5 (April 8th, 2026)

React Server Components

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Bug Fixes

Pull Requests

Bug Fixes

Pull Requests

Features

Pull Requests

Bug Fixes

Pull Requests

Patch Changes

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v19.2.5`: 19.2.5 (April 8th, 2026)