chore(deps): bump the npm_and_yarn group across 6 directories with 18 updates

[dependabot]

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package	From	To
turbo	1.13.4	2.10.10
@babel/core	7.28.4	7.29.6
ws	6.2.3	6.2.6
brace-expansion	1.1.12	1.1.18
body-parser	1.20.3	1.20.6
fast-uri	3.1.0	3.1.5
ip-address	10.0.1	10.5.0
launch-editor	2.11.1	2.14.1

Bumps the npm_and_yarn group with 4 updates in the /airborne-react-native/ExampleOldArch directory: @babel/core, ws, brace-expansion and shell-quote.
Bumps the npm_and_yarn group with 5 updates in the /airborne-react-native/ExampleSplitBundle directory:

Package	From	To
@babel/core	7.28.0	7.29.6
ws	6.2.3	6.2.6
ws	7.5.10	7.5.13
brace-expansion	1.1.12	1.1.18
brace-expansion	2.0.2	2.1.4
body-parser	1.20.3	1.20.6
launch-editor	2.10.0	2.14.1

Bumps the npm_and_yarn group with 6 updates in the /airborne_dashboard directory:

Package	From	To
js-yaml	4.2.0	4.3.1
brace-expansion	1.1.15	1.1.18
fast-uri	3.1.2	3.1.5
next	15.5.18	15.5.23
postcss	8.5.15	8.5.23
tar	7.5.16	7.5.22

Bumps the npm_and_yarn group with 8 updates in the /airborne_docs directory:

Package	From	To
brace-expansion	1.1.15	1.1.18
body-parser	1.20.5	1.20.6
fast-uri	3.1.2	3.1.5
postcss	8.5.15	8.5.26
dompurify	3.4.11	3.4.13
mermaid	11.16.0	11.16.1
svgo	3.3.3	3.3.4
webpack-dev-server	5.2.5	5.2.6

Bumps the npm_and_yarn group with 1 update in the /airborne_server/cf_host directory: body-parser.

Updates turbo from 1.13.4 to 2.10.10

Release notes

Sourced from turbo's releases.

Turborepo v2.10.10

What's Changed

Changelog

• chore: Release Turborepo 2.10.9 by @​github-actions[bot] in vercel/turborepo#13696
• docs: Update Geistdocs to 1.19.6 by @​molebox in vercel/turborepo#13701
• feat: Support nub.lock files by @​akshat-OwO in vercel/turborepo#13699
• chore: Release Turborepo 2.10.10-canary.1 by @​github-actions[bot] in vercel/turborepo#13703
• perf: Walk the repository once when pruning by @​anthonyshew in vercel/turborepo#13705
• fix(deps): Upgrade js-yaml to 4.3.1 (GHSA-5p4m-2wfm-xmqj) by @​anthonyshew in vercel/turborepo#13704
• chore: Move pnpm overrides to pnpm-workspace.yaml by @​anthonyshew in vercel/turborepo#13706
• chore: Release Turborepo 2.10.10-canary.2 by @​github-actions[bot] in vercel/turborepo#13707
• fix: Enable Eve examples pull requests by @​anthonyshew in vercel/turborepo#13708
• feat: Add Eve operator dashboard by @​anthonyshew in vercel/turborepo#13710
• fix: Remove unsupported sandbox network policy by @​anthonyshew in vercel/turborepo#13712
• feat: Rotate Eve example maintenance daily by @​anthonyshew in vercel/turborepo#13715
• fix: Resolve agent lint errors by @​anthonyshew in vercel/turborepo#13716
• chore: Upgrade TypeScript to 7.0.2 by @​anthonyshew in vercel/turborepo#13713
• fix(cli): Move EXPERIMENTAL label from ls command to --output flag by @​okxint in vercel/turborepo#13709
• fix: Apply nested parent gitignore patterns in manual hashing by @​alexey-yunoshev-1 in vercel/turborepo#13690
• feat: Add pytest task discovery by @​anthonyshew in vercel/turborepo#13720
• chore: Release Turborepo 2.10.10-canary.3 by @​github-actions[bot] in vercel/turborepo#13721
• chore: Validate updated examples with turbo by @​anthonyshew in vercel/turborepo#13723
• chore: Update with-rollup example by @​vercel-gh-bot-3[bot] in vercel/turborepo#13718
• feat: Notify Slack when agents open PRs by @​anthonyshew in vercel/turborepo#13722
• chore: Enforce draft pull requests by @​anthonyshew in vercel/turborepo#13726
• fix: Expose Slack delivery diagnostics by @​anthonyshew in vercel/turborepo#13733
• chore: Update non-monorepo example by @​vercel-gh-bot-2[bot] in vercel/turborepo#13727
• chore: Update with-rsbuild example by @​vercel-gh-bot-3[bot] in vercel/turborepo#13730
• feat: Add daily performance agent by @​anthonyshew in vercel/turborepo#13729
• feat: Support cross-toolchain repository affectedness by @​anthonyshew in vercel/turborepo#13737
• fix: Scope musl library dependency installation by @​anthonyshew in vercel/turborepo#13738
• chore: Release Turbo repository packages 0.0.1-canary.24 by @​github-actions[bot] in vercel/turborepo#13739
• fix(bun): Preserve overrides objects, trustedDependencies, workspace bins and git integrity through prune; accept lockfileVersion 3 by @​Jarred-Sumner in vercel/turborepo#13740

New Contributors

• @​akshat-OwO made their first contribution in vercel/turborepo#13699
• @​okxint made their first contribution in vercel/turborepo#13709
• @​alexey-yunoshev-1 made their first contribution in vercel/turborepo#13690
• @​vercel-gh-bot-3[bot] made their first contribution in vercel/turborepo#13718
• @​vercel-gh-bot-2[bot] made their first contribution in vercel/turborepo#13727
• @​Jarred-Sumner made their first contribution in vercel/turborepo#13740

Full Changelog: vercel/turborepo@v2.10.9...v2.10.10

Turborepo v2.10.10-canary.3

What's Changed

... (truncated)

Changelog

Sourced from turbo's changelog.

Release Documentation

Quick Start

Automated Canary Releases

Canary releases run on an hourly schedule via the [Release workflow][1]:

1. Runs every hour via cron, skipping if no relevant files in crates/ or packages/ changed since the last canary tag
2. Skips if the latest commit is a release PR merge (to avoid releasing the version bump itself)
3. Publishes to npm with the canary tag
4. Opens and merges a PR to return the version bump to main after required checks pass

No manual intervention required for canary releases.

Manual Releases (Stable/Custom)

1. Create a release by triggering the [Turborepo Release][1] workflow

   • For stable releases, use patch, minor, or major
   • For custom pre-releases, use prepatch, preminor, or premajor
   • Check the "Dry Run" box to test the workflow without publishing

2. A PR is automatically opened and merged into main after its required workflows are approved and pass.

Release @turbo/repository

1. Run [bump-version.sh][4] to update the versions of the packages. Merge in the changes to main.

2. Create a release by triggering the [Turborepo Library Release][5] workflow.

   • Check the "Dry Run" box to run the full release workflow without publishing any packages.
   • The release PR is automatically merged after its required workflows are approved and pass.

Notes

• GitHub Release Notes are published automatically using the config from [turborepo-release.yml][2], triggered by the [turbo-orchestrator][3] bot.

---

Turborepo CLI Release Process - In-Depth Guide

This section provides comprehensive documentation on how the Turborepo CLI is released, including the architecture, workflows, and detailed step-by-step processes.

Table of Contents

1. Architecture Overview
2. Automated Canary Releases
3. Version Management
4. Release Workflow Stages
5. Packages Released

... (truncated)

Commits

• d009da0 publish 2.10.10 to registry
• ea08fac fix(bun): Preserve overrides objects, trustedDependencies, workspace bins and...
• 65aa565 chore: Release Turbo repository packages 0.0.1-canary.24 (#13739)
• 1da105f fix: Scope musl library dependency installation (#13738)
• 31b0c4f feat: Support cross-toolchain repository affectedness (#13737)
• c4ac03b feat: Add daily performance agent (#13729)
• e0aee94 chore: Update with-rsbuild example (#13730)
• 0bfd752 chore: Update non-monorepo example (#13727)
• caddaa9 fix: Expose Slack delivery diagnostics (#13733)
• 6a46551 chore: Enforce draft pull requests (#13726)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for turbo since your current version.

Updates @babel/core from 7.28.4 to 7.29.6

Release notes

Sourced from @​babel/core's releases.

v7.29.6 (2026-05-25)

🐛 Bug Fix

• babel-generator
  • #18014 Catchup source map position in preserveFormat (@​nicolo-ribaudo)
• babel-core
  • #18001 [7.x packport]Improve input source map handling (@​JLHwung)
• babel-core, babel-generator
  • #17998 Preserve original identifier names from input sourcemaps (#17992) (@​Andarist)

Committers: 3

• Huáng Jùnliàng (@​JLHwung)
• Mateusz Burzyński (@​Andarist)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

• babel-preset-env
  • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

• babel-plugin-transform-modules-systemjs
  • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

• Huáng Jùnliàng (@​JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

• babel-parser
  • #17923 Support flow extends bound (@​JLHwung)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
• babel-register
  • #17915 Fix thread synchronization issues in @babel/register (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env
  • #17788 Add bugfix plugin for Safari array rest destructuring bug (@​JLHwung)

💅 Polish

• babel-parser
  • #17782 Improve trailing comma comment handling (@​JLHwung)

📝 Documentation

• #17847 Replace npmjs.com links with npmx.dev (@​nicolo-ribaudo)

... (truncated)

Commits

• 04ea6b2 v7.29.6
• 99f498a [7.x packport]Improve input source map handling (#18001)
• feba0a3 Preserve original identifier names from input sourcemaps (#17992) (#17998)
• aa8394e v7.29.0
• ad0d03f [7.x backport] feat: Allow specifying startLine in code frame (#17739)
• d7f4008 v7.28.6
• e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
• 99dcba5 chore: enable some ts-eslint rules (#17592)
• c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
• d725e39 Add BABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK (#17569)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/core since your current version.

Updates ws from 6.2.3 to 6.2.6

Release notes

Sourced from ws's releases.

6.2.6

Bug fixes

• Fixed a bug introduced in version 6.2.5 that prevented the fragment counter from resetting (899bf9e5).

6.2.5

Bug fixes

• Backported a2f4e7c0 and f197ac65 to the v6.x release line (58ddc8c3, 4f19c0cd).

6.2.4

Bug fixes

• Backported 2b2abd45 to the 6.x release line (a76e2111).

Commits

• dd3ae14 [dist] 6.2.6
• 899bf9e [fix] Reset the fragment counter when the message is complete
• 1a0afaf [dist] 6.2.5
• 4f19c0c [fix] Lower default values of maxBufferedChunks and maxFragments
• 58ddc8c [fix] Count empty fragments toward the limit (#2329)
• 86d3e8a [dist] 6.2.4
• a76e211 [security] Limit retained message parts
• See full diff in compare view

Updates brace-expansion from 1.1.12 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

• Backport v5.0.6 change to v1 (#111) 0b09384

---

juliangruber/brace-expansion@v1.1.14...v1.1.15

Commits

• 758fcd6 1.1.18
• 27fbeed Merge commit from fork
• 5c57cc2 1.1.17
• d757f1d npm ignore .claude
• cb4b9e4 fix: backport GHSA-mh99-v99m-4gvg (#129)
• 447763a 1.1.16
• d74e630 fix: v1 backport for CVE-2026-13149 (#122)
• 2203f4f 1.1.15
• 0b09384 Backport v5.0.6 change to v1 (#111)
• 10c05fc 1.1.14
• Additional commits viewable in compare view

Updates body-parser from 1.20.3 to 1.20.6

Release notes

Sourced from body-parser's releases.

1.20.6

Important: Security

• Security fix for CVE-2026-12590 (GHSA-v422-hmwv-36x6)

What's Changed

• fix: improve limit option validation by @​Phillip9587 in expressjs/body-parser#741

Full Changelog: expressjs/body-parser@1.20.5...1.20.6

v1.20.5

What's Changed

The reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (> 100) on qs@6.14.2+. (expressjs/body-parser#716)

• refactor(json): simplify strict mode error string construction by @​jonchurch in expressjs/body-parser#692
• fix: correct off-by-one error in parameterCount by @​abhu85 in expressjs/body-parser#716
• deps(qs): bump qs to 6.15.1 by @​jonchurch in expressjs/body-parser#722
• Release: 1.20.5 by @​jonchurch in expressjs/body-parser#721

New Contributors

• @​abhu85 made their first contribution in expressjs/body-parser#716

Special thanks to triager @​krzysdz for keeping this on our radar and effectively triaging the specific issue!

Full Changelog: expressjs/body-parser@1.20.4...1.20.5

1.20.4

What's Changed

• Remove redundant depth check by @​blakeembrey in expressjs/body-parser#538
• ci: add support for Node.js v23 by @​Phillip9587 in expressjs/body-parser#553
• ci: restore CI for 1.x branch by @​bjohansebas in expressjs/body-parser#665
• deps: qs@^6.14.0 by @​bjohansebas in expressjs/body-parser#664
• deps: use tilde notation and update certain dependencies by @​Phillip9587 in expressjs/body-parser#668
• chore: remove SECURITY.md by @​Phillip9587 in expressjs/body-parser#669
• ci: add CodeQL (SAST) by @​Phillip9587 in expressjs/body-parser#670
• Release: 1.20.4 by @​UlisesGascon in expressjs/body-parser#672

Full Changelog: expressjs/body-parser@1.20.3...1.20.4

Changelog

Sourced from body-parser's changelog.

1.20.6 / 2026-07-09

• Security fix for GHSA-v422-hmwv-36x6
• fix: improve limit option validation (#698)
  • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
  • null and undefined fall back to the default 100kb limit

1.20.5 / 2026-04-24

• refactor(json): simplify strict mode error string construction
• fix: extended urlencoded parsing of arrays with >100 elements (#716)
• deps: qs@~6.15.1

1.20.4 / 2025-12-01

• deps: qs@~6.14.0
• deps: use tilde notation for dependencies
• deps: http-errors@~2.0.1
• deps: raw-body@~2.5.3

Commits

• 5cc4fb8 1.20.6 (#746)
• 3492672 fix: improve limit option validation (#741)
• 0defdbe release(patch): 1.20.5
• cd0e7a0 deps(qs): bump qs to 6.15.1
• 6f24d7e fix: correct off-by-one error in parameterCount (#716)
• b849bd5 deps: qs@~6.14.1 (#690)
• 2c55e2f refactor(json): simplify strict mode error string construction (#692)
• 7db202c 1.20.4 (#672)
• d8f8adb ci: add CodeQL (SAST) (#670)
• 6d133c1 chore: remove SECURITY.md (#669)
• Additional commits viewable in compare view

Updates fast-uri from 3.1.0 to 3.1.5

Release notes

Sourced from fast-uri's releases.

v3.1.5

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: fastify/fast-uri@v3.1.4...v3.1.5

v3.1.4

⚠️ Security Release

Fix for GHSA-v2hh-gcrm-f6hx

Full Changelog: fastify/fast-uri@v3.1.3...v3.1.4

v3.1.3

⚠️ Security Release

• Fixes: GHSA-4c8g-83qw-93j6

Full Changelog: fastify/fast-uri@v3.1.2...v3.1.3

v3.1.2

⚠️ Security Release

• Fix for GHSA-v39h-62p7-jpjc

What's Changed

• Handle malformed fragment decoding as a parse error by @​mcollina in fastify/fast-uri#171

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

• Fix for GHSA-q3j6-qgpj-74h6

What's Changed

• build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @​dependabot[bot] in fastify/fast-uri#148
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in fastify/fast-uri#149
• chore(.npmrc): ignore scripts by @​Fdawgs in fastify/fast-uri#150
• build(deps-dev): remove @​fastify/pre-commit by @​Fdawgs in fastify/fast-uri#151
• build(deps): bump actions/setup-node from 4 to 5 by @​dependabot[bot] in fastify/fast-uri#152
• ci(ci): add concurrency config by @​Fdawgs in fastify/fast-uri#153
• build(deps): bump actions/setup-node from 5 to 6 by @​dependabot[bot] in fastify/fast-uri#154
• build(deps): bump actions/checkout from 5 to 6 by @​dependabot[bot] in fastify/fast-uri#156
• chore(license): standardise license notice by @​Fdawgs in fastify/fast-uri#159
• style: remove trailing whitespace by @​Fdawgs in fastify/fast-uri#161
• ci: remove unused github files by @​Tony133 in fastify/fast-uri#162
• chore: update readme by @​Tony133 in fastify/fast-uri#164

... (truncated)

Commits

• 5e179cb Bumped v3.1.5
• 2cad02d Merge commit from fork
• 6aeece6 Bumped v3.1.4
• 2d50fba fix: reject literal backslash in URI authority
• 0549fe3 Bumped v3.1.3
• 2a6d357 Merge commit from fork
• 919dd8e Bumped v3.1.2
• c65ba57 fixup: linting
• 6c86c17 Merge commit from fork
• a95158a Handle malformed fragment decoding without throwing (#171)
• Additional commits viewable in compare view

Updates ip-address from 10.0.1 to 10.5.0

Release notes

Sourced from ip-address's releases.

v10.5.0

What's Changed

• Honor the fromURL graceful-failure contract for non-IPv6 hosts by @​beaugunderson in beaugunderson/ip-address#218
• Correct the documentation where it disagreed with the library by @​beaugunderson in beaugunderson/ip-address#219

Full Changelog: beaugunderson/ip-address@v10.4.0...v10.5.0

v10.4.0

What's Changed

• Add GitHub Actions CI by @​beaugunderson in beaugunderson/ip-address#213
• Keep the package loadable on node 12, and enforce it by @​beaugunderson in beaugunderson/ip-address#216
• Validate the byte arrays Address6 is given by @​beaugunderson in beaugunderson/ip-address#217

Full Changelog: beaugunderson/ip-address@v10.3.1...v10.4.0

v10.3.1

Full Changelog: beaugunderson/ip-address@v10.3.0...v10.3.1

v10.3.0

Full Changelog: beaugunderson/ip-address@v10.2.2...v10.3.0

v10.2.2

Full Changelog: beaugunderson/ip-address@v10.2.1...v10.2.2

v10.2.1

Full Changelog: beaugunderson/ip-address@v10.2.0...v10.2.1

Commits

• ef98e0a 10.5.0
• 9fd1110 Correct the documentation where it disagreed with the library (#219)
• d478737 Honor the fromURL graceful-failure contract for non-IPv6 hosts (#218)
• fbb8db2 10.4.0
• 45a2b11 Validate the byte arrays Address6 is given (#217)
• bac8810 Keep the package loadable on node 12, and enforce it (#216)
• 9b3d848 Add a security policy and a README section on security posture
• e84a7b3 Order the README API reference Address4, Address6, AddressError
• 015160b Collapse each class in the README API reference
• 34061a8 Pin checkout and setup-node to commits in the release job
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ip-address since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates launch-editor from 2.11.1 to 2.14.1

Commits

• 3f97c64 v2.14.1
• 0cc9550 fix: reject UNC paths (#138)
• afd1ab9 ci: run tests on mac and windows (#136)
• 0bfa328 test: add some tests for launch-editor package (#135)
• 1b006ae chore: add README (#134)
• 383ef26 v2.14.0
• 6277209 ci: harden publish settings
• 520b2f7 fix(deps): update all non-major dependencies (#129)
• 475ac66 chore(deps): update dependency lint-staged to v17 (#130)
• 247bf1d chore(deps): update dependency yorkie to v2 (#131)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for launch-editor since your current version.

Updates shell-quote from 1.8.3 to 1.10.0

Changelog

Sourced from shell-quote's changelog.

v1.10.0 - 2026-07-10

Merged

• [New] parse: add opt-in splitUnquoted option for shell field-splitting of unquoted expansions [#1](https://github.com/ljharb/shell-quote/issues/1)

Commits

• [Fix] parse: match nested ${...} braces so nested parameter expansion is consumed as one substitution c0842c8
• [Tests] parse: pin single-quote literalness and unmatched-quote handling a0d03e3
• [readme] remove the space in js code fences so evalmd evaluates them 2116fa3
• [Tests] quote: pin conservative escaping of =, @, ^, ,, :, ! (#11) 1c36f3f
• [readme] document that quote outputs POSIX quoting, not cmd.exe/PowerShell 100e96e
• [readme] document parse's supported parameter-expansion subset e1c75cd
• [Fix] parse: a backslash inside single quotes must not escape the closing quote 5d460a3
• [readme] fix stale example outputs 2de86f5
• [Tests] quote: pin that a backslash with whitespace is not doubled in single quotes (#14) 190e236
• [readme] quote: use output verbatim; do not re-quote it (#11) 1b36468
• [Refactor] parse: fix swapped SINGLE_QUOTE/DOUBLE_QUOTE variable names 801af5c
• [types] fix an error TS v6 ignores but v7 fails on 59bbf8b
• [Dev Deps] update @arethetypeswrong/cli, evalmd a04d475
• [Dev Deps] update @arethetypeswrong/ci, eslint d390f9a
• [Tests] quote: the tilde test escapes every ~, not just a leading one (#9) 617d119

v1.9.0 - 2026-06-24

Commits

• [New] add types dca6e21
• [Dev Deps] update eslint 9aa9e8f
• [Fix] parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488
• [actions] update workflows 75e8497
• [actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10@types/esrecurse 3fb739d
• [actions] retry npm install on Windows to survive npm 2/3 staging-rename flake abe0163
• [actions] Windows + node 5/7: install deps with a modern node b4bafa2
• [Fix] quote: escape leading ~ to prevent shell tilde-expansion 7a76c1a
• [Dev Deps] update auto-changelog, tape 7184b44
• [Dev Deps] apparently jackspeak is no longer in the graph 9ba368a

v1.8.4 - 2026-05-22

Commits

• [Fix] quote: validate object-token shapes 4378a6e
• [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, npmignore 22ebec0
• [Tests] increase coverage 9f3caa3
• [readme] replace runkit CI badge with shields.io check-runs badge 3344a04
• [Dev Deps] update @ljharb/eslint-config 699c511

Commits

• 64988d9 v1.10.0
• 617d119 [Tests] quote: the tilde test escapes every ~, not just a leading one (#9)
• 59bbf8b [types] fix an error TS v6 ignores but v7 fails on
• 190e236 [Tests] quote: pin that a backslash with whitespace is not doubled in singl...
• a04d475 [Dev Deps] update @arethetypeswrong/cli, evalmd
• b9545b3 [New] parse: add opt-in splitUnquoted option for shell field-splitting of...
• 1b36468 [readme] quote: use output verbatim; do not re-quote it (#11)
• 1c36f3f [Tests] quote: pin conservative escaping of =, @, ^, ,, :, ! (#11)
• e1c75cd [readme] document parse's supported parameter-expansion subset
• c0842c8 [Fix] parse: match nested ${...} braces so nested parameter expansion is ...
• Additional commits viewable in compare view

Updates @babel/core from 7.28.4 to 7.29.6

Release notes

Sourced from @​babel/core's releases.

v7.29.6 (2026-05-25)

🐛 Bug Fix

• babel-generator
  • #18014 Catchup source map position in preserveFormat (@​nicolo-ribaudo)
• babel-core
  • #18001 [7.x packport]Improve input source map handling (@​JLHwung)
• babel-core, babel-generator
  • #17998 Preserve original identifier names from input sourcemaps (#17992) (@​Andarist)

Committers: 3

• Huáng Jùnliàng (@​JLHwung)
• Mateusz Burzyński (@​Andarist)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

• babel-preset-env
  • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

• babel-plugin-transform-modules-systemjs
  • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

• Huáng Jùnliàng (@​JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

• babel-parser
  • #17923 Support flow extends bound (@​JLHwung)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  ...

  Description has been truncated

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
airborne_docs/package-lock.json	71% smaller
airborne-react-native/example/package.json	63% smaller
airborne-react-native/package.json	62% smaller
airborne-react-native/ExampleSplitBundle/package-lock.json	58% smaller
airborne_dashboard/package-lock.json	52% smaller
airborne-react-native/ExampleOldArch/package-lock.json	50% smaller
airborne_server/cf_host/package-lock.json	46% smaller
package-lock.json	39% smaller
airborne_dashboard/package.json	37% smaller
airborne-react-native/ExampleOldArch/package.json	30% smaller
airborne-react-native/ExampleSplitBundle/package.json	0% smaller