chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 2 directories with 4 updates

[dependabot]

Bumps the dev-minor-and-patch-dependencies group with 3 updates in the / directory: @babel/helpers, bun and eslint-plugin-n.
Bumps the dev-minor-and-patch-dependencies group with 1 update in the /docs directory: typedoc.

Updates @babel/helpers from 7.28.4 to 7.28.6

Release notes

Sourced from @​babel/helpers's releases.

v7.28.6 (2026-01-12)

Thanks @​kadhirash and @​kolvian for your first PRs!

🐛 Bug Fix

• babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
  • #17589 Improve Unicode handling in code-frame tokenizer (@​JLHwung)
• babel-plugin-transform-regenerator
  • #17556 fix: transform-regenerator correctly handles scope (@​liuxingbaoyu)
• babel-plugin-transform-react-jsx
  • #17538 fix: Keep jsx comments (@​liuxingbaoyu)

💅 Polish

• babel-core, babel-standalone
  • #17606 Polish(standalone): improve message on invalid preset/plugin (@​JLHwung)

🏠 Internal

• babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
  • #17580 Allow Babel 8 in compatible Babel 7 plugins (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-react-jsx
  • #17555 perf: Use lighter traversal for jsx __source,__self (@​liuxingbaoyu)

Committers: 7

• Babel Bot (@​babel-bot)
• Eliot Pontarelli (@​kolvian)
• Huáng Jùnliàng (@​JLHwung)
• Kadhirash Sivakumar (@​kadhirash)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• coderaiser (@​coderaiser)

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 (@​fisker)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest (@​CO0Ki3)
• babel-parser
  • #17521 Improve @babel/parser error typing (@​JLHwung)
  • #17491 fix: improve ts-only declaration parsing (@​JLHwung)
• babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

... (truncated)

Changelog

Sourced from @​babel/helpers's changelog.

Changelog

Tags:

• 💥 [Breaking Change]
• 👓 [Spec Compliance]
• 🚀 [New Feature]
• 🐛 [Bug Fix]
• 📝 [Documentation]
• 🏠 [Internal]
• 💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v7.15.0.

• See CHANGELOG - v7.0.0 to v7.14.9 for v7.0.0 to v7.14.9 changes.
• See CHANGELOG - v7 prereleases for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.
• See CHANGELOG - v4, CHANGELOG - v5, and CHANGELOG - v6 for v4.x-v6.x changes.
• See CHANGELOG - 6to5 for the pre-4.0.0 version changelog.
• See Babylon's CHANGELOG for the Babylon pre-7.0.0-beta.29 version changelog.
• See babel-eslint's releases for the changelog before @babel/eslint-parser 7.8.0.
• See eslint-plugin-babel's releases for the changelog before @babel/eslint-plugin 7.8.0.

v7.28.5 (2025-10-23)

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 (@​fisker)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest (@​CO0Ki3)
• babel-parser
  • #17521 Improve @babel/parser error typing (@​JLHwung)
  • #17491 fix: improve ts-only declaration parsing (@​JLHwung)
• babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • #17519 fix: rest correctly returns plain array (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@​JLHwung)
• babel-traverse
  • #17504 fix: ensure scope.push register in anonymous fn (@​JLHwung)

🏠 Internal

• babel-types
  • #17494 Type checking babel-types scripts (@​JLHwung)

... (truncated)

Commits

• d7f4008 v7.28.6
• 99dcba5 chore: enable some ts-eslint rules (#17592)
• c1b55f6 Use eslint.config.mts (#17573)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/helpers since your current version.

Updates bun from 1.3.5 to 1.3.6

Release notes

Sourced from bun's releases.

Bun v1.3.6

To install Bun v1.3.6

curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.6:

bun upgrade

Read Bun v1.3.6's release notes on Bun's blog

Thanks to 23 contributors!

• @​alii
• @​billywhizz
• @​bmwalters
• @​cirospaciari
• @​d4mr
• @​darwin808
• @​dylan-conway
• @​emwadde
• @​franklinfollis
• @​jackkleeman
• @​jarred-sumner
• @​kjanat
• @​makuko
• @​mattermoran
• @​nektro
• @​nfreya
• @​nicocevallos
• @​rekram1-node
• @​remorses
• @​robobun
• @​sosukesuzuki
• @​sqdshguy
• @​veggiesaurus

Commits

• d530ed9 fix(css): restore handler context after minifying nested rules (#25997)
• 959169d feat(archive): change API to constructor-based with S3 support (#25940)
• 461ad88 fix(http): fix Strong reference leak in server response streaming (#25965)
• b6abbd5 fix(Bun.SQL): handle binary columns in MySQL correctly (#26011)
• beccd01 fix(FileSink): add Promise\<number> to FileSink.write() return type (#25962)
• 35eb539 deps: update sqlite to 3.51.200 (#25957)
• ebf39e9 fix(install): prevent use-after-free when retrying failed HTTP requests (#25949)
• b610e80 fix(http): properly handle pipelined data in CONNECT requests (#25938)
• 7076a49 feat(archive): add TypeScript types, docs, and files() benchmark (#25922)
• d4a966f fix(install): prevent symlink path traversal in tarball extraction (#25584)
• Additional commits viewable in compare view

Updates eslint-plugin-n from 17.23.1 to 17.23.2

Release notes

Sourced from eslint-plugin-n's releases.

v17.23.2

17.23.2 (2026-01-13)

🩹 Fixes

• avoid any type for no-top-level-await listener node (build issue) (#498) (f071703)
• file-extension-in-import: handle directory index imports (#499) (754a1a6)
• file-extension-in-import: handle files with dots in basename (#506) (600f3f2)
• no-sync: resolve full typed names for ignores (#501) (047301a)

📚 Documentation

• safely disable no-unpublished-bin npm v10+ (#487) (8af9c86)

🧹 Chores

• no-missing-import: align fixture message with latest resolver output (#500) (a3719d2)

Changelog

Sourced from eslint-plugin-n's changelog.

17.23.2 (2026-01-13)

🩹 Fixes

• avoid any type for no-top-level-await listener node (build issue) (#498) (f071703)
• file-extension-in-import: handle directory index imports (#499) (754a1a6)
• file-extension-in-import: handle files with dots in basename (#506) (600f3f2)
• no-sync: resolve full typed names for ignores (#501) (047301a)

📚 Documentation

• safely disable no-unpublished-bin npm v10+ (#487) (8af9c86)

🧹 Chores

• no-missing-import: align fixture message with latest resolver output (#500) (a3719d2)

Commits

• 7541d64 chore(master): release 17.23.2 (#488)
• 600f3f2 fix(file-extension-in-import): handle files with dots in basename (#506)
• 754a1a6 fix(file-extension-in-import): handle directory index imports (#499)
• 047301a fix(no-sync): resolve full typed names for ignores (#501)
• f071703 fix: avoid any type for no-top-level-await listener node (build issue) (#498)
• a3719d2 test(no-missing-import): align fixture message with latest resolver output (#...
• d27b585 ci: trusted publishing (#492)
• 8af9c86 docs: safely disable no-unpublished-bin npm v10+ (#487)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-plugin-n since your current version.

Updates typedoc from 0.28.15 to 0.28.16

Release notes

Sourced from typedoc's releases.

v0.28.16

Bug Fixes

• Fixed an issue causing TypeDoc to fail to generate documentation when implementing interfaces, #3052.
• Fixed an issue preventing automatic entry point discovery on Windows, #3057.
• Improved vertical positioning of text icons, #3056.
• TypeDoc no longer includes source location information for type literal reflections. This could sometimes cause TypeDoc to infer the wrong path when resolving base paths for display.
• Adjusted markdown rendering to allow markdownItLoader to override more rendering #3055.

Features

• Added support for regions for @include in .tsx, .cjs, and .mjs file references #3048.
• Comments for TS-in-JS @typedef tags may now specify modifier tags with the inline tag syntax {@mod}. This makes it possible to add modifier tags to these members, which previously was not possible as TypeScript's parsing stops for these members at the next non-braced tag, #2916 and #3050.
• A typedoc-config.schema.json is now included in the root of the package with a JSON schema for TypeDoc's configuration file. The schema for the latest version is also published at https://typedoc.org/schema.json and will automatically be picked up when writing typedoc.json files if you are using VSCode, #3054.

Thanks!

• @​a10nik
• @​kozi
• @​Lakuna

Changelog

Sourced from typedoc's changelog.

v0.28.16 (2026-01-12)

Bug Fixes

• Fixed an issue causing TypeDoc to fail to generate documentation when implementing interfaces, #3052.
• Fixed an issue preventing automatic entry point discovery on Windows, #3057.
• Improved vertical positioning of text icons, #3056.
• TypeDoc no longer includes source location information for type literal reflections. This could sometimes cause TypeDoc to infer the wrong path when resolving base paths for display.
• Adjusted markdown rendering to allow markdownItLoader to override more rendering #3055.

Features

• Added support for regions for @include in .tsx, .cjs, and .mjs file references #3048.
• Comments for TS-in-JS @typedef tags may now specify modifier tags with the inline tag syntax {@mod}. This makes it possible to add modifier tags to these members, which previously was not possible as TypeScript's parsing stops for these members at the next non-braced tag, #2916 and #3050.
• A typedoc-config.schema.json is now included in the root of the package with a JSON schema for TypeDoc's configuration file. The schema for the latest version is also published at https://typedoc.org/schema.json and will automatically be picked up when writing typedoc.json files if you are using VSCode, #3054.

Thanks!

• @​a10nik
• @​kozi
• @​Lakuna

Commits

• 442ec0f Update changelog for release
• a0e3a3a Bump version to 0.28.16
• dab0bea Attempt to set up OIDC publishing
• cd498d9 Make markdownItLoader work with TypeDoc-overriden rules
• 0aff3ba Publish options schema
• 4e7a709 Fix crash due to invalid implementationOf reference
• 6aa031b Fix CI
• b2f0149 Improved vertical positioning for svg text icons (#3056)
• acc2f4d Fix TypeStrong/typedoc#3057.
• 0489adc Permit fs-fixture-builder to build
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for typedoc since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Overall package size

Self size: 4.42 MB
Deduped: 5.24 MB
No deduping: 5.24 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 2.0.0 | 68.46 kB | 797.03 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

[pr-commenter]

Benchmarks

Benchmark execution time: 2026-01-21 15:10:49

Comparing candidate commit fc05f74 in PR branch dependabot/npm_and_yarn/dev-minor-and-patch-dependencies-50ec499ebf with baseline commit fa08e42 in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 230 metrics, 30 unstable metrics.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.12%. Comparing base (fa08e42) to head (fc05f74).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #7288   +/-   ##
=======================================
  Coverage   86.12%   86.12%           
=======================================
  Files         513      513           
  Lines       22106    22106           
=======================================
  Hits        19039    19039           
  Misses       3067     3067           

Flag	Coverage Δ
aiguard-macos	99.09% <ø> (ø)
aiguard-ubuntu	99.09% <ø> (ø)
aiguard-windows	99.09% <ø> (ø)
apm-capabilities-tracing-macos	58.01% <ø> (ø)
apm-capabilities-tracing-ubuntu	58.01% <ø> (ø)
apm-capabilities-tracing-windows	57.63% <ø> (ø)
apm-integrations-child-process	99.19% <ø> (ø)
apm-integrations-couchbase-18	100.00% <ø> (ø)
apm-integrations-couchbase-eol	100.00% <ø> (ø)
appsec-express	62.46% <ø> (ø)
appsec-fastify	58.48% <ø> (ø)
appsec-graphql	53.41% <ø> (ø)
appsec-kafka	43.98% <ø> (ø)
appsec-ldapjs	46.04% <ø> (ø)
appsec-lodash	47.29% <ø> (ø)
appsec-macos	93.74% <ø> (ø)
appsec-mongodb-core	51.82% <ø> (ø)
appsec-mongoose	50.73% <ø> (ø)
appsec-mysql	54.20% <ø> (ø)
appsec-node-serialize	43.92% <ø> (ø)
appsec-passport	48.10% <ø> (ø)
appsec-postgres	54.55% <ø> (ø)
appsec-sourcing	33.80% <ø> (ø)
appsec-template	43.92% <ø> (ø)
appsec-ubuntu	93.74% <ø> (ø)
appsec-windows	93.74% <ø> (ø)
llmobs-ai	55.32% <ø> (ø)
llmobs-anthropic	45.46% <ø> (ø)
llmobs-bedrock	42.83% <ø> (ø)
llmobs-google-genai	48.73% <ø> (ø)
llmobs-langchain	52.31% <ø> (ø)
llmobs-openai	55.50% <ø> (ø)
llmobs-vertex-ai	47.46% <ø> (ø)
platform-core	87.23% <ø> (ø)
platform-instrumentations-misc	73.68% <ø> (ø)
platform-shimmer	98.82% <ø> (ø)
platform-unit-guardrails	89.47% <ø> (ø)
profiling-macos	70.74% <ø> (ø)
profiling-ubuntu	70.74% <ø> (ø)
profiling-windows	75.17% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.