fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/core (source)	^7.28.0 -> ^7.28.3
@types/node (source)	^22.17.1 -> ^22.17.2
bumpp	^10.2.2 -> ^10.2.3
tsdown	^0.14.0 -> ^0.14.1
tsx (source)	^4.20.3 -> ^4.20.4
unplugin (source)	^2.3.5 -> ^2.3.6
vite (source)	^7.1.1 -> ^7.1.2

---

Release Notes

babel/babel (@​babel/core)

v7.28.3

Compare Source

👓 Spec Compliance

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
  • #​17443 [static blocks] Do not inject new static fields after static code (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-parser
  • #​17465 fix(parser/typescript): parse import("./a", {with:{},}) (@​easrng)
  • #​17478 fix(parser): stop subscript parsing on async arrow (@​JLHwung)

💅 Polish

• babel-plugin-transform-regenerator, babel-plugin-transform-runtime
  • #​17363 Do not save last yield in call in temp var (@​nicolo-ribaudo)

📝 Documentation

• #​17448 move eslint-{parser,plugin} docs to the website (@​JLHwung)

🏠 Internal

• #​17454 Enable type checking for scripts and babel-worker.cjs (@​JLHwung)

🔬 Output optimization

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
  • #​17444 Optimize do expression output (@​JLHwung)

antfu-collective/bumpp (bumpp)

v10.2.3

Compare Source

   🐞 Bug Fixes

• Add missing -a alias support for --all  -  by @​kingyue737 in https://github.com/antfu-collective/bumpp/issues/93 (7c0bb)

    View changes on GitHub

rolldown/tsdown (tsdown)

v0.14.1

Compare Source

   🐞 Bug Fixes

• Remove expandDirectories  -  by @​Debbl in https://github.com/rolldown/tsdown/issues/427 (fb2d1)

    View changes on GitHub

privatenumber/tsx (tsx)

v4.20.4

Compare Source

unjs/unplugin (unplugin)

v2.3.6

Compare Source

   🐞 Bug Fixes

• Exact optional property types  -  by @​iwoplaza in https://github.com/unjs/unplugin/issues/500 (97f20)

    View changes on GitHub

vitejs/vite (vite)

v7.1.2

Compare Source

Bug Fixes

• client: add [vite] prefixes to debug logs (#​20595) (7cdef61)
• config: make debugger work with bundle loader (#​20573) (c583927)
• deps: update all non-major dependencies (#​20587) (20d4817)
• don't consider ids with npm: prefix as a built-in module (#​20558) (ab33803)
• hmr: watch non-inlined assets referenced by CSS (#​20581) (b7d494b)
• module-runner: prevent crash when sourceMappingURL pattern appears in string literals (#​20554) (2770478)

Miscellaneous Chores

• deps: migrate to @jridgewell/remapping from @ampproject/remapping (#​20577) (0a6048a)
• deps: update rolldown-related dependencies (#​20586) (77632c5)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​babel/​core@​7.28.0 ⏵ 7.28.3
	@​types/​node@​22.17.1 ⏵ 22.17.2
	tsx@​4.20.3 ⏵ 4.20.4			+1
	bumpp@​10.2.2 ⏵ 10.2.3	+1			+3
	vite@​7.1.1 ⏵ 7.1.2
	unplugin@​2.3.5 ⏵ 2.3.6	-6
	tsdown@​0.14.0 ⏵ 0.14.1	-6		-1	+1

View full report