Bump the npm-dependencies group across 1 directory with 13 updates by dependabot[bot] · Pull Request #4133 · plotly/dash

dependabot · 2026-11-09T16:45:24Z

Bumps the npm-dependencies group with 13 updates in the /dash/dash-renderer directory:

Package	From	To
webpack	`5.111.1`	`5.112.2`
@babel/helper-create-regexp-features-plugin	`7.29.7`	`7.29.10`
@babel/helper-string-parser	`7.29.7`	`7.29.13`
@babel/helpers	`7.29.7`	`7.29.13`
@babel/parser	`7.29.9`	`7.29.13`
@babel/plugin-transform-block-scoping	`7.29.7`	`7.29.13`
@babel/plugin-transform-classes	`7.29.7`	`7.29.11`
@babel/plugin-transform-spread	`7.29.8`	`7.29.11`
@babel/runtime	`7.29.7`	`7.29.13`
@babel/traverse	`7.29.8`	`7.29.10`
@babel/types	`7.29.8`	`7.29.11`
@types/lodash	`4.17.25`	`4.17.27`
@types/node	`26.6.3`	`26.6.6`

Updates webpack from 5.111.1 to 5.112.2

Release notes

Sourced from webpack's releases.

v5.112.2

Patch Changes

Reduce repeated scans when concatenating imported modules. (by @xiaoxiaojx in #22865)

Avoid allocating CSS module sets for single-group chunks. (by @xiaoxiaojx in #22866)

Return the value of every module type loaded with importModule(). (by @alexander-akait in #22869)

v5.112.1

Patch Changes

Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @aryanraj45 in #22699)

Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @aryanraj45 in #22749)

Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @alexander-akait in #22791)

Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @lazerg in #22833)

Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @codeXsidd in #22846)

Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @alexander-akait in #22794)

Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @alexander-akait in #22804)

Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @dependabot in #22811)

Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @alexander-akait in #22733)

Await asynchronous modules that ProvidePlugin injects into ES modules. (by @alexander-akait in #22728)

Keep a resolve that ends after the compiler closed from throwing. (by @alexander-akait in #22795)

Preserve string names passed to SharedWorker constructors. (by @bjohansebas in #22770)

Preserve string contents when extracting source map comments. (by @bjohansebas in #22768)

Scope strict-mode, async and generator block function declarations to their block. (by @alexander-akait in #22800)

Preserve raw dotenv values when reusing cached environment files. (by @Eshiv-Pandey in #22787)

Preserve assigned or patched built-ins, conversions and pattern targets. (by @aryanraj45 in #22761)

Keep globals a globalThis write replaces, and slice on a patched array. (by @alexander-akait in #22862)

Skip HTML script tags for shared chunks that emit no JavaScript. (by @bjohansebas in #22779)

Keep the digits Firefox lays out a minified CSS percentage with. (by @alexander-akait in #22718)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.2

Patch Changes

Reduce repeated scans when concatenating imported modules. (by @xiaoxiaojx in #22865)

Avoid allocating CSS module sets for single-group chunks. (by @xiaoxiaojx in #22866)

Return the value of every module type loaded with importModule(). (by @alexander-akait in #22869)

5.112.1

Patch Changes

Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @aryanraj45 in #22699)

Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @aryanraj45 in #22749)

Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @alexander-akait in #22791)

Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @lazerg in #22833)

Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @codeXsidd in #22846)

Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @alexander-akait in #22794)

Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @alexander-akait in #22804)

Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @dependabot in #22811)

Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @alexander-akait in #22733)

Await asynchronous modules that ProvidePlugin injects into ES modules. (by @alexander-akait in #22728)

Keep a resolve that ends after the compiler closed from throwing. (by @alexander-akait in #22795)

Preserve string names passed to SharedWorker constructors. (by @bjohansebas in #22770)

Preserve string contents when extracting source map comments. (by @bjohansebas in #22768)

Scope strict-mode, async and generator block function declarations to their block. (by @alexander-akait in #22800)

Preserve raw dotenv values when reusing cached environment files. (by @Eshiv-Pandey in #22787)

Preserve assigned or patched built-ins, conversions and pattern targets. (by @aryanraj45 in #22761)

Keep globals a globalThis write replaces, and slice on a patched array. (by @alexander-akait in #22862)

Skip HTML script tags for shared chunks that emit no JavaScript. (by @bjohansebas in #22779)

... (truncated)

Commits

e95a7f2 chore(release): new release (#22867)
6e43fc2 fix: return the value of every module type from importModule() (#22869)
4ffac8d ci: rename the parser job to spec and run CSS, HTML and XML in one leg (#22870)
0c02242 test: split the syntax unit tests into tokenizer, parser and printer (#22825)
660608c perf(css): cut CPU and allocation in the CSS minifier (#22868)
8c3cbd3 perf: avoid allocating unused CSS module sets (#22866)
a1e5f6a perf: avoid duplicate scans in module concatenation (#22865)
759b539 chore(release): new release (#22720)
539f8de fix(minify): keep globals a globalThis write replaces, and slice on a pat...
9668155 ci: run the deep-imports check in the lint job (#22859)
Additional commits viewable in compare view

Updates @babel/helper-create-regexp-features-plugin from 7.29.7 to 7.29.10

Release notes

Sourced from @babel/helper-create-regexp-features-plugin's releases.

v7.29.10 (2026-10-07)

🐛 Bug Fix

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

#18287 Guard @@toPrimitive usage in toPrimitive helper (@babel-bot)

babel-traverse

#18281 fix(traverse): do not evaluate destructured bindings in path.evaluate (@babel-bot)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18279 Simplify interopRequireWildcard helper (@babel-bot)

Committers: 2

Babel Bot (@babel-bot)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.9 (2026-09-18)

🐛 Bug Fix

babel-plugin-transform-typescript

#18247 [ts] Allow merging enum into a namespace (@nicolo-ribaudo)

babel-parser

#18241 Fix parsing of arrow function params inside ternaries with Flow (@robhogan)

🏠 Internal

babel-parser

#18245 test: test with ts-eslint 8.70.0 (@JLHwung)

Committers: 4

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joelle-a-dev)

Nicolò Ribaudo (@nicolo-ribaudo)

Rob Hogan (@robhogan)

v7.29.8 (2026-07-31)

👓 Spec Compliance

babel-generator, babel-parser, babel-plugin-transform-spread, babel-traverse, babel-types

#17871 Disallow super call after new (@JLHwung)

🐛 Bug Fix

babel-generator

#18046 fix(generator): improve new callee parens check (@JLHwung)

babel-node, babel-plugin-transform-modules-systemjs

#18044 fix(systemjs): support __proto__ as an export name (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

Commits

7fb1b97 v7.29.10
60c4f79 Bump regexpu-core to 6.5.3 (#18304)
See full diff in compare view

Updates @babel/helper-string-parser from 7.29.7 to 7.29.13

Release notes

Sourced from @babel/helper-string-parser's releases.

v7.29.13 (2026-11-04)

🐛 Bug Fix

babel-generator, babel-parser

#18522 fix(parser): start decorated object members at their first decorator (@babel-bot)

babel-parser

#18520 fix(parser): allow TS imports to define exports declared before them (@babel-bot)

#18485 fix(parser): allow lone yield before in in an Annex B for-in init (@babel-bot)

#18483 fix(parser): respect unicode escape in isUnparsedContextual (@babel-bot)

#18452 fix(parser): remove non-decimal prefix from bigint (@babel-bot)

#18449 fix(parser): allow await as a function expression name inside async arrow (@babel-bot)

#18453 Disallow new import prop access (@babel-bot)

#18450 Improve F# pipeline direct body check (@babel-bot)

#18446 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@babel-bot)

#18448 Fix TypeScript parser failing on async calls in ternary consequent (@babel-bot)

babel-generator

#18521 fix(generator): print override modifier of TSParameterProperty (@babel-bot)

#18509 fix(generator): do not apply jsesc number radix to non-integer literals (@babel-bot)

#18500 fix(generator): escape of binding of a using declaration in for-of head (@babel-bot)

#18461 fix: invalid minified: true output for new expression (@babel-bot)

#18476 fix: preserve trailing comma in optional call args (@babel-bot)

#18456 fix(generator): keep parens for ?. chain in tag (@babel-bot)

#18454 fix(generator): preserve type modifier in TSImportEqualsDeclaration (@babel-bot)

babel-plugin-transform-block-scoping

#18518 Fix initialization of nested for loop head declarations (@babel-bot)

#18465 fix: improve for loop closure environment check (@babel-bot)

#18464 fix: assign closure body after handling return (@babel-bot)

babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

#18499 fix: commonjs namespace re-export with a string export name (@babel-bot)

babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

#18482 Fix optional call losing the receiver through a TS instantiation expression (@babel-bot)

babel-plugin-proposal-partial-application

#18479 fix(partial-app): support super method call (@babel-bot)

babel-register

#18481 fix(register): skip hook for ignored files (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18462 Return false for #x in on static private fields before initialization (@babel-bot)

babel-traverse

#18480 fix(babel-traverse): check variable shadowing for global object callees (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#18478 Fix decorators interaction with abstract/declare fields (@babel-bot)

babel-core

#18463 fix(core): createConfigItem allows cb as 2nd arg (@babel-bot)

babel-plugin-bugfix-safari-rest-destructuring-rhs-array

#18457 fix(bugfix): bound check before array access (@babel-bot)

Other

#18459 Fix eslint-parser AST definition of AccessorProperty (@babel-bot)

babel-plugin-transform-destructuring

#18460 fix: only collapse the empty-object check when it targets the declared binding (@babel-bot)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

... (truncated)

Commits

69f7ed7 v7.29.13
998de9c fix: polish error message for invalid binary 0b19 (#18447)
d4e8b0f v7.29.11
4ab6046 Disallow numeric separator in exponent part (#18376)
See full diff in compare view

Updates @babel/helpers from 7.29.7 to 7.29.13

Release notes

Sourced from @babel/helpers's releases.

v7.29.13 (2026-11-04)

🐛 Bug Fix

babel-generator, babel-parser

#18522 fix(parser): start decorated object members at their first decorator (@babel-bot)

babel-parser

#18520 fix(parser): allow TS imports to define exports declared before them (@babel-bot)

#18485 fix(parser): allow lone yield before in in an Annex B for-in init (@babel-bot)

#18483 fix(parser): respect unicode escape in isUnparsedContextual (@babel-bot)

#18452 fix(parser): remove non-decimal prefix from bigint (@babel-bot)

#18449 fix(parser): allow await as a function expression name inside async arrow (@babel-bot)

#18453 Disallow new import prop access (@babel-bot)

#18450 Improve F# pipeline direct body check (@babel-bot)

#18446 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@babel-bot)

#18448 Fix TypeScript parser failing on async calls in ternary consequent (@babel-bot)

babel-generator

#18521 fix(generator): print override modifier of TSParameterProperty (@babel-bot)

#18509 fix(generator): do not apply jsesc number radix to non-integer literals (@babel-bot)

#18500 fix(generator): escape of binding of a using declaration in for-of head (@babel-bot)

#18461 fix: invalid minified: true output for new expression (@babel-bot)

#18476 fix: preserve trailing comma in optional call args (@babel-bot)

#18456 fix(generator): keep parens for ?. chain in tag (@babel-bot)

#18454 fix(generator): preserve type modifier in TSImportEqualsDeclaration (@babel-bot)

babel-plugin-transform-block-scoping

#18518 Fix initialization of nested for loop head declarations (@babel-bot)

#18465 fix: improve for loop closure environment check (@babel-bot)

#18464 fix: assign closure body after handling return (@babel-bot)

babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

#18499 fix: commonjs namespace re-export with a string export name (@babel-bot)

babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

#18482 Fix optional call losing the receiver through a TS instantiation expression (@babel-bot)

babel-plugin-proposal-partial-application

#18479 fix(partial-app): support super method call (@babel-bot)

babel-register

#18481 fix(register): skip hook for ignored files (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18462 Return false for #x in on static private fields before initialization (@babel-bot)

babel-traverse

#18480 fix(babel-traverse): check variable shadowing for global object callees (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#18478 Fix decorators interaction with abstract/declare fields (@babel-bot)

babel-core

#18463 fix(core): createConfigItem allows cb as 2nd arg (@babel-bot)

babel-plugin-bugfix-safari-rest-destructuring-rhs-array

#18457 fix(bugfix): bound check before array access (@babel-bot)

Other

#18459 Fix eslint-parser AST definition of AccessorProperty (@babel-bot)

babel-plugin-transform-destructuring

#18460 fix: only collapse the empty-object check when it targets the declared binding (@babel-bot)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

... (truncated)

Commits

69f7ed7 v7.29.13
5e9b8d0 Fix asyncIterator helper forwarding .throw() to .return() (#18458)
7fb1b97 v7.29.10
dd34d87 Guard @@toPrimitive usage in toPrimitive helper (#18287)
e2e4fa9 Simplify interopRequireWildcard helper (#18279)
See full diff in compare view

Updates @babel/parser from 7.29.9 to 7.29.13

Release notes

Sourced from @babel/parser's releases.

v7.29.13 (2026-11-04)

🐛 Bug Fix

babel-generator, babel-parser

#18522 fix(parser): start decorated object members at their first decorator (@babel-bot)

babel-parser

#18520 fix(parser): allow TS imports to define exports declared before them (@babel-bot)

#18485 fix(parser): allow lone yield before in in an Annex B for-in init (@babel-bot)

#18483 fix(parser): respect unicode escape in isUnparsedContextual (@babel-bot)

#18452 fix(parser): remove non-decimal prefix from bigint (@babel-bot)

#18449 fix(parser): allow await as a function expression name inside async arrow (@babel-bot)

#18453 Disallow new import prop access (@babel-bot)

#18450 Improve F# pipeline direct body check (@babel-bot)

#18446 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@babel-bot)

#18448 Fix TypeScript parser failing on async calls in ternary consequent (@babel-bot)

babel-generator

#18521 fix(generator): print override modifier of TSParameterProperty (@babel-bot)

#18509 fix(generator): do not apply jsesc number radix to non-integer literals (@babel-bot)

#18500 fix(generator): escape of binding of a using declaration in for-of head (@babel-bot)

#18461 fix: invalid minified: true output for new expression (@babel-bot)

#18476 fix: preserve trailing comma in optional call args (@babel-bot)

#18456 fix(generator): keep parens for ?. chain in tag (@babel-bot)

#18454 fix(generator): preserve type modifier in TSImportEqualsDeclaration (@babel-bot)

babel-plugin-transform-block-scoping

#18518 Fix initialization of nested for loop head declarations (@babel-bot)

#18465 fix: improve for loop closure environment check (@babel-bot)

#18464 fix: assign closure body after handling return (@babel-bot)

babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

#18499 fix: commonjs namespace re-export with a string export name (@babel-bot)

babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

#18482 Fix optional call losing the receiver through a TS instantiation expression (@babel-bot)

babel-plugin-proposal-partial-application

#18479 fix(partial-app): support super method call (@babel-bot)

babel-register

#18481 fix(register): skip hook for ignored files (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18462 Return false for #x in on static private fields before initialization (@babel-bot)

babel-traverse

#18480 fix(babel-traverse): check variable shadowing for global object callees (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#18478 Fix decorators interaction with abstract/declare fields (@babel-bot)

babel-core

#18463 fix(core): createConfigItem allows cb as 2nd arg (@babel-bot)

babel-plugin-bugfix-safari-rest-destructuring-rhs-array

#18457 fix(bugfix): bound check before array access (@babel-bot)

Other

#18459 Fix eslint-parser AST definition of AccessorProperty (@babel-bot)

babel-plugin-transform-destructuring

#18460 fix: only collapse the empty-object check when it targets the declared binding (@babel-bot)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

... (truncated)

Commits

69f7ed7 v7.29.13
da51615 fix(parser): start decorated object members at their first decorator (#18522)
66a36e6 fix(parser): allow TS imports to define exports declared before them (#18520)
9c05358 fix(parser): allow lone yield before in in an Annex B for-in init (#18485)
fdd5a1b fix(parser): respect unicode escape in isUnparsedContextual (#18483)
6fd0b0e fix(parser): remove non-decimal prefix from bigint (#18452)
96341fe fix(parser): allow await as a function expression name inside async arrow (#1...
644aafb Disallow new import prop access (#18453)
08e4d16 Improve F# pipeline direct body check (#18450)
4742f63 fix(parser): set phase: null for non-deferred imports with deferredImportEval...
Additional commits viewable in compare view

Updates @babel/plugin-transform-block-scoping from 7.29.7 to 7.29.13

Release notes

Sourced from @babel/plugin-transform-block-scoping's releases.

v7.29.13 (2026-11-04)

🐛 Bug Fix

babel-generator, babel-parser

#18522 fix(parser): start decorated object members at their first decorator (@babel-bot)

babel-parser

#18520 fix(parser): allow TS imports to define exports declared before them (@babel-bot)

#18485 fix(parser): allow lone yield before in in an Annex B for-in init (@babel-bot)

#18483 fix(parser): respect unicode escape in isUnparsedContextual (@babel-bot)

#18452 fix(parser): remove non-decimal prefix from bigint (@babel-bot)

#18449 fix(parser): allow await as a function expression name inside async arrow (@babel-bot)

#18453 Disallow new import prop access (@babel-bot)

#18450 Improve F# pipeline direct body check (@babel-bot)

#18446 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@babel-bot)

#18448 Fix TypeScript parser failing on async calls in ternary consequent (@babel-bot)

babel-generator

#18521 fix(generator): print override modifier of TSParameterProperty (@babel-bot)

#18509 fix(generator): do not apply jsesc number radix to non-integer literals (@babel-bot)

#18500 fix(generator): escape of binding of a using declaration in for-of head (@babel-bot)

#18461 fix: invalid minified: true output for new expression (@babel-bot)

#18476 fix: preserve trailing comma in optional call args (@babel-bot)

#18456 fix(generator): keep parens for ?. chain in tag (@babel-bot)

#18454 fix(generator): preserve type modifier in TSImportEqualsDeclaration (@babel-bot)

babel-plugin-transform-block-scoping

#18518 Fix initialization of nested for loop head declarations (@babel-bot)

#18465 fix: improve for loop closure environment check (@babel-bot)

#18464 fix: assign closure body after handling return (@babel-bot)

babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

#18499 fix: commonjs namespace re-export with a string export name (@babel-bot)

babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

#18482 Fix optional call losing the receiver through a TS instantiation expression (@babel-bot)

babel-plugin-proposal-partial-application

#18479 fix(partial-app): support super method call (@babel-bot)

babel-register

#18481 fix(register): skip hook for ignored files (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18462 Return false for #x in on static private fields before initialization (@babel-bot)

babel-traverse

#18480 fix(babel-traverse): check variable shadowing for global object callees (@babel-bot)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#18478 Fix decorators interaction with abstract/declare fields (@babel-bot)

babel-core

#18463 fix(core): createConfigItem allows cb as 2nd arg (@babel-bot)

babel-plugin-bugfix-safari-rest-destructuring-rhs-array

#18457 fix(bugfix): bound check before array access (@babel-bot)

Other

#18459 Fix eslint-parser AST definition of AccessorProperty (@babel-bot)

babel-plugin-transform-destructuring

#18460 fix: only collapse the empty-object check when it targets the declared binding (@babel-bot)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

... (truncated)

Commits

69f7ed7 v7.29.13
8fa8d85 Fix initialization of nested for loop head declarations (#18518)
ce032fd fix: improve for loop closure environment check (#18465)
42f6c0e fix: assign closure body after handling return (#18464)
b3e65f9 v7.29.12
8460b8a fix: closures in for-loop test and update capture wrong binding (#18441)
d4e8b0f v7.29.11
80c34e8 fix: wrap enclosing loop when a nested for head closure captures its bindings...
3c1e0c2 fix: closures in for-loop init capture wrong binding (#18364)
See full diff in compare view

Updates @babel/plugin-transform-classes from 7.29.7 to 7.29.11

Release notes

Sourced from @babel/plugin-transform-classes's releases.

v7.29.11 (2026-10-23)

👓 Spec Compliance

babel-parser

#18405 Disallow eval and arguments as class names (@babel-bot)

#18404 fix(parser): disallow const x followed by linebreak and of (@babel-bot)

#18400 fix(parser): disallow named specifiers after * as ns (@babel-bot)

#18374 fix(parser): reject delete (x) when createParenthesizedExpressions: true (@babel-bot)

#18373 Disallow call expressions as arrow function parameters in sloppy mode (@babel-bot)

🐛 Bug Fix

babel-parser

#18403 fix(parser): ASI between arrow body and /= regex (@babel-bot)

#18402 Allow ASI after export default from without exportDefaultFrom (@babel-bot)

#18401 fix(parser): allow arguments as a label in class (@babel-bot)

#18378 Skip HTML-like comments in the parser's character lookahead (@babel-bot)

#18375 fix(parser): register function id in labeled function declaration (@babel-bot)

#18377 fix(parser): allow ASI between property init and escaped in (@babel-bot)

babel-plugin-transform-classes

#18408 Leave loose class prototype mutable with accessors (@babel-bot)

babel-plugin-transform-typescript, babel-types

#18391 fix(types): vi...
Description has been truncated

github-actions · 2026-11-09T16:49:31Z

Dash performance benchmarks

❌ perf regression

	scenario	metric	p90 (ms)	median	growth	baseline p90	note
❌	full_children_replace	replace_ms	9474.5	2258.0	30.54x	4697.1	p90 9474.5ms > warn 6000ms; 2.3x baseline (norm)
✅	callback_chain	chain_ms	525.5	509.4	0.95x	499.1
✅	callback_chain	graph_ms	2.7	2.7	1.0x	2.4
✅	callback_fanout	fanout_ms	84.1	78.9	0.92x	92.5
✅	deep_nesting	render_ms	58.2	54.8	1.0x	56.8
✅	initial_render_large	render_ms	564.4	536.4	1.6x	694.4
✅	initial_render_small	render_ms	97.2	85.0	0.92x	104.0
✅	patch_append_nested	append_ms	127.9	96.7	2.42x	192.3
✅	patch_append_toplevel	append_ms	118.6	97.7	2.41x	140.2
✅	patch_scalar_update_large	update_ms	150.9	138.4	1.0x	202.9
✅	wildcard_all_resolve	wildcard_ms	292.3	284.8	0.95x	313.6
✅	wildcard_all_resolve	graph_ms	1.2	1.2	1.0x	1.3

growth = late-third / early-third per-op time; ~1 is flat, a large value means the per-op cost scales with accumulated state.

machine scale vs baseline: 0.88x - divided out of the baseline ratios so they compare like for like (the absolute warn/fail ceilings are left un-scaled); calibrated on initial_render_small.

Bumps the npm-dependencies group with 13 updates in the /dash/dash-renderer directory: | Package | From | To | | --- | --- | --- | | [webpack](https://github.com/webpack/webpack) | `5.111.1` | `5.112.2` | | [@babel/helper-create-regexp-features-plugin](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-create-regexp-features-plugin) | `7.29.7` | `7.29.10` | | [@babel/helper-string-parser](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-string-parser) | `7.29.7` | `7.29.13` | | [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.29.7` | `7.29.13` | | [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.29.9` | `7.29.13` | | [@babel/plugin-transform-block-scoping](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-block-scoping) | `7.29.7` | `7.29.13` | | [@babel/plugin-transform-classes](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-classes) | `7.29.7` | `7.29.11` | | [@babel/plugin-transform-spread](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-spread) | `7.29.8` | `7.29.11` | | [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.29.7` | `7.29.13` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.29.8` | `7.29.10` | | [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.29.8` | `7.29.11` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.25` | `4.17.27` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.6` | Updates `webpack` from 5.111.1 to 5.112.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.111.1...v5.112.2) Updates `@babel/helper-create-regexp-features-plugin` from 7.29.7 to 7.29.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.10/packages/babel-helper-create-regexp-features-plugin) Updates `@babel/helper-string-parser` from 7.29.7 to 7.29.13 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.13/packages/babel-helper-string-parser) Updates `@babel/helpers` from 7.29.7 to 7.29.13 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.13/packages/babel-helpers) Updates `@babel/parser` from 7.29.9 to 7.29.13 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.13/packages/babel-parser) Updates `@babel/plugin-transform-block-scoping` from 7.29.7 to 7.29.13 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.13/packages/babel-plugin-transform-block-scoping) Updates `@babel/plugin-transform-classes` from 7.29.7 to 7.29.11 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.11/packages/babel-plugin-transform-classes) Updates `@babel/plugin-transform-spread` from 7.29.8 to 7.29.11 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.11/packages/babel-plugin-transform-spread) Updates `@babel/runtime` from 7.29.7 to 7.29.13 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.13/packages/babel-runtime) Updates `@babel/traverse` from 7.29.8 to 7.29.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.10/packages/babel-traverse) Updates `@babel/types` from 7.29.8 to 7.29.11 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.11/packages/babel-types) Updates `@types/lodash` from 4.17.25 to 4.17.27 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `@types/node` from 26.6.3 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@babel/helper-create-regexp-features-plugin" dependency-version: 7.29.10 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/helper-string-parser" dependency-version: 7.29.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/helpers" dependency-version: 7.29.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/parser" dependency-version: 7.29.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/plugin-transform-block-scoping" dependency-version: 7.29.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/plugin-transform-classes" dependency-version: 7.29.11 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/plugin-transform-spread" dependency-version: 7.29.11 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/runtime" dependency-version: 7.29.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/traverse" dependency-version: 7.29.10 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@babel/types" dependency-version: 7.29.11 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/lodash" dependency-version: 4.17.27 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: webpack dependency-version: 5.112.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-11-10T14:25:16Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-9e10ef6981 branch from 1f59f2d to df20c7e Compare November 10, 2026 14:24

T4rk1n mentioned this pull request Nov 10, 2026

Group safe dependabot updates #4142

Merged

T4rk1n merged commit 6df101f into dev Nov 10, 2026
57 of 60 checks passed

Navigation Menu

Repository navigation

Bump the npm-dependencies group across 1 directory with 13 updates - #4133

Bump the npm-dependencies group across 1 directory with 13 updates#4133
T4rk1n merged 1 commit into
devfrom
dependabot/npm_and_yarn/dash/dash-renderer/npm-dependencies-9e10ef6981

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 9, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Nov 10, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.112.2

Patch Changes

v5.112.1

Patch Changes

5.112.2

Patch Changes

5.112.1

Patch Changes

v7.29.10 (2026-10-07)

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.29.9 (2026-09-18)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.29.8 (2026-07-31)

👓 Spec Compliance

🐛 Bug Fix

Committers: 2

v7.29.13 (2026-11-04)

🐛 Bug Fix

v7.29.13 (2026-11-04)

🐛 Bug Fix

v7.29.13 (2026-11-04)

🐛 Bug Fix

v7.29.13 (2026-11-04)

🐛 Bug Fix

v7.29.11 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

Uh oh!

github-actions Bot commented Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dash performance benchmarks

Uh oh!

sonarqubecloud Bot commented Nov 10, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading

github-actions Bot commented Nov 9, 2026 •

edited

Loading