build(deps): bump the npm group across 1 directory with 5 updates

[dependabot]

Bumps the npm group with 5 updates in the / directory:

Package	From	To
preact	10.29.0	10.29.1
baseline-browser-mapping	2.10.8	2.10.15
cssnano	7.1.3	7.1.4
cssnano-preset-advanced	7.0.11	7.0.12
esbuild	0.27.4	0.28.0

Updates preact from 10.29.0 to 10.29.1

Release notes

Sourced from preact's releases.

10.29.1

Fixes

• Create a unique event-clock for each Preact instance on a page. (#5068, thanks @​JoviDeCroock)
• Fix incorrect DOM order with conditional ContextProvider and inner keys (#5067, thanks @​JoviDeCroock)

Maintenance

• fix: Remove postinstall script for playwright setup (#5063, thanks @​rschristian)
• chore: speed up tests by using playwright instead of webdriverio (#5060, thanks @​marvinhagemeister)
• chore: migrate remaining .js -> .jsx files (#5059, thanks @​marvinhagemeister)
• chore: rename .test.js -> .test.jsx when JSX is used (#5058, thanks @​marvinhagemeister)
• Migrate from biome to oxfmt (#5033, thanks @​JoviDeCroock)

Commits

• 4dc9b50 10.29.1 (#5071)
• 0560f9a Create a unique event-clock for each Preact instance on a page. (#5068)
• cda06de Fix incorrect DOM order with conditional ContextProvider and inner keys (#506...
• c859700 fix: Remove postinstall script for playwright setup (#5063)
• 110966a Merge pull request #5060 from preactjs/playwright
• 20a9be1 chore: speed up tests by using playwright instead of webdriverio
• dacefd5 Merge pull request #5059 from preactjs/jsx-migrate2
• 2a61642 chore: migrate remaining .js -> .jsx files
• 71ecde6 Merge pull request #5058 from preactjs/jsx-tests
• cd1c4af chore: rename *.js -> *.jsx when JSX is used
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates baseline-browser-mapping from 2.10.8 to 2.10.15

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.3 - remove process.loadEnvFile()

What's Changed

• Remove process.loadEnfFile() from main script by @​tonypconway in web-platform-dx/baseline-browser-mapping#112

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

Commits

• 9168fd0 Patch to 2.10.15 because browser or feature data changed
• 8560cd2 Browser or feature data changed
• 7c07035 Updating static site
• 7058e24 Patch to 2.10.14 because browser or feature data changed
• 406bd81 Browser or feature data changed
• 34613b9 Bump serialize-javascript from 7.0.4 to 7.0.5 (#130)
• fdb0665 Bump picomatch (#129)
• 7bbeaa0 Bump flatted from 3.3.3 to 3.4.2 (#128)
• 10a3d63 Updating static site
• 10fcf19 Patch to 2.10.13 because browser or feature data changed
• Additional commits viewable in compare view

Updates cssnano from 7.1.3 to 7.1.4

Release notes

Sourced from cssnano's releases.

v7.1.4

Bug Fixes

Update color conversion library to @​colordx/core to fix rounding errors in color conversions #1755

Commits

• c4ec231 Publish cssnano 7.1.4
• 5f64972 fix(colormin,minify-gradients): replace colord with @​colordx/core, fix lossy ...
• 4542108 chore: update GitHub actions
• 6ff813f chore: update pnpm
• c9fa6f1 chore: update development deps
• 610a813 fix: swith module resolution to nodenext
• 4c21ff7 chore: update TypeScript to 6.0.2
• ddbb071 docs: update website for release
• See full diff in compare view

Updates cssnano-preset-advanced from 7.0.11 to 7.0.12

Commits

• c4ec231 Publish cssnano 7.1.4
• 5f64972 fix(colormin,minify-gradients): replace colord with @​colordx/core, fix lossy ...
• 4542108 chore: update GitHub actions
• 6ff813f chore: update pnpm
• c9fa6f1 chore: update development deps
• 610a813 fix: swith module resolution to nodenext
• 4c21ff7 chore: update TypeScript to 6.0.2
• ddbb071 docs: update website for release
• See full diff in compare view

Updates esbuild from 0.27.4 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0

• Add support for with { type: 'text' } imports (#4435)

  The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

  import string from './example.txt' with { type: 'text' }
  console.log(string)

• Add integrity checks to fallback download path (#4343)

  Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

  This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

• Update the Go compiler from 1.25.7 to 1.26.1

  This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

  • It now uses the new garbage collector that comes with Go 1.26.
  • The Go compiler is now more aggressive with allocating memory on the stack.
  • The executable format that the Go linker uses has undergone several changes.
  • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

  You can read the Go 1.26 release notes for more information.

v0.27.7

• Fix lowering of define semantics for TypeScript parameter properties (#4421)

  The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

  // Original code
  class Foo {
    constructor(public x = 1) {}
    y = 2
  }
  // Old output (with --loader=ts --target=es2021)
  class Foo {
  constructor(x = 1) {
  this.x = x;
  __publicField(this, "y", 2);
  }
  x;
  }
  // New output (with --loader=ts --target=es2021)
  class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.0

• Add support for with { type: 'text' } imports (#4435)

  The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

  import string from './example.txt' with { type: 'text' }
  console.log(string)

• Add integrity checks to fallback download path (#4343)

  Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

  This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

• Update the Go compiler from 1.25.7 to 1.26.1

  This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

  • It now uses the new garbage collector that comes with Go 1.26.
  • The Go compiler is now more aggressive with allocating memory on the stack.
  • The executable format that the Go linker uses has undergone several changes.
  • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

  You can read the Go 1.26 release notes for more information.

0.27.7

• Fix lowering of define semantics for TypeScript parameter properties (#4421)

  The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

  // Original code
  class Foo {
    constructor(public x = 1) {}
    y = 2
  }
  // Old output (with --loader=ts --target=es2021)
  class Foo {
  constructor(x = 1) {
  this.x = x;
  __publicField(this, "y", 2);
  }
  x;
  }

... (truncated)

Commits

• 6a794df publish 0.28.0 to npm
• 64ee0ea fix #4435: support with { type: text } imports
• ef65aee fix sort order in snapshots_packagejson.txt
• 1a26a8e try to fix test-old-ts, also shuffle CI tasks
• 556ce6c use '' instead of null to omit build hashes
• 8e675a8 ci: allow missing binary hashes for tests
• 7067763 Reapply "update go 1.25.7 => 1.26.1"
• 39473a9 fix #4343: integrity check for binary download
• 2025c9f publish 0.27.7 to npm
• c6b586e fix typo in Makefile for @esbuild/win32-x64
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions