Bump the build group with 6 updates

Open

Number: #325
Type: Pull Request
State: Open

Author:

dependabot[bot]
Association: Unknown
Comments: 1

Created: January 23, 2026 at 01:43 PM UTC
(5 months ago)

Updated: January 23, 2026 at 01:44 PM UTC
(5 months ago)

Labels:
dependencies javascript

Description:

Bumps the build group with 6 updates:

Package	From	To
@babel/core	`7.28.5`	`7.28.6`
@babel/preset-env	`7.28.5`	`7.28.6`
@types/react	`19.2.7`	`19.2.8`
rollup	`4.54.0`	`4.55.1`
baseline-browser-mapping	`2.9.11`	`2.9.17`
caniuse-lite	`1.0.30001762`	`1.0.30001766`

Updates @babel/core from 7.28.5 to 7.28.6

Release notes

Sourced from @babel/core's releases.

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

:bug: Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

:nail_care: Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

:house: Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

:running_woman: Performance

babel-plugin-transform-react-jsx

#17555 perf: Use lighter traversal for jsx __source,__self (@liuxingbaoyu)

Committers: 7

Babel Bot (@babel-bot)

Eliot Pontarelli (@kolvian)

Huáng Jùnliàng (@JLHwung)

Kadhirash Sivakumar (@kadhirash)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

coderaiser (@coderaiser)

Changelog

Sourced from @babel/core's changelog.

Changelog

Tags:

:boom: [Breaking Change]

:eyeglasses: [Spec Compliance]

:rocket: [New Feature]

:bug: [Bug Fix]

:memo: [Documentation]

:house: [Internal]

:nail_care: [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v7.15.0.

See CHANGELOG - v7.0.0 to v7.14.9 for v7.0.0 to v7.14.9 changes.

See CHANGELOG - v7 prereleases for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.

See CHANGELOG - v4, CHANGELOG - v5, and CHANGELOG - v6 for v4.x-v6.x changes.

See CHANGELOG - 6to5 for the pre-4.0.0 version changelog.

See Babylon's CHANGELOG for the Babylon pre-7.0.0-beta.29 version changelog.

See babel-eslint's releases for the changelog before @babel/eslint-parser 7.8.0.

See eslint-plugin-babel's releases for the changelog before @babel/eslint-plugin 7.8.0.

Commits

d7f4008 v7.28.6
e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
d725e39 Add BABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK (#17569)
c1b55f6 Use eslint.config.mts (#17573)
See full diff in compare view

Updates @babel/preset-env from 7.28.5 to 7.28.6

Release notes

Sourced from @babel/preset-env's releases.

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

:bug: Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

:nail_care: Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

:house: Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

:running_woman: Performance

babel-plugin-transform-react-jsx

#17555 perf: Use lighter traversal for jsx __source,__self (@liuxingbaoyu)

Committers: 7

Babel Bot (@babel-bot)

Eliot Pontarelli (@kolvian)

Huáng Jùnliàng (@JLHwung)

Kadhirash Sivakumar (@kadhirash)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

coderaiser (@coderaiser)

Changelog

Sourced from @babel/preset-env's changelog.

Changelog

Tags:

:boom: [Breaking Change]

:eyeglasses: [Spec Compliance]

:rocket: [New Feature]

:bug: [Bug Fix]

:memo: [Documentation]

:house: [Internal]

:nail_care: [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v7.15.0.

See CHANGELOG - v7.0.0 to v7.14.9 for v7.0.0 to v7.14.9 changes.

See CHANGELOG - v7 prereleases for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.

See CHANGELOG - v4, CHANGELOG - v5, and CHANGELOG - v6 for v4.x-v6.x changes.

See CHANGELOG - 6to5 for the pre-4.0.0 version changelog.

See Babylon's CHANGELOG for the Babylon pre-7.0.0-beta.29 version changelog.

See babel-eslint's releases for the changelog before @babel/eslint-parser 7.8.0.

See eslint-plugin-babel's releases for the changelog before @babel/eslint-plugin 7.8.0.

Commits

d7f4008 v7.28.6
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.8

Commits

See full diff in compare view

Updates rollup from 4.54.0 to 4.55.1

Release notes

Sourced from rollup's releases.

v4.55.1

4.55.1

2026-01-05

Bug Fixes

Fix artifact reference for OpenBSD (#6231)

Pull Requests

#6231: Fix OpenBSD artifacts and ensure OIDC is working (@lukastaegert)

Changelog

Sourced from rollup's changelog.

4.55.1

2026-01-05

Bug Fixes

Fix artifact reference for OpenBSD (#6231)

Pull Requests

#6231: Fix OpenBSD artifacts and ensure OIDC is working (@lukastaegert)

4.55.0

2026-01-05

Features

Natively support ppc64 Linux Musl targets (#5997)

Natively support loong64 Linux Musl targets (#5997)

Natively support OpenBSD targets (#6224)

Bug Fixes

Prevent some cycles when using top-level-await (#6221)

Warn when generating cycling manual chunks (#6225)

Pull Requests

#5997: Add support for ppc64 & loong64 musl linux (@fossdd)

#6218: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)

#6219: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6220: chore(deps): lock file maintenance (@renovate[bot])

#6221: Handle TLA dynamic import cycles in chunkAssignment (@TrickyPi)

#6222: Apply to adjust the description of the command-line parameter 'rollup… (@image-gif, @lukastaegert)

#6223: Deduplicate CLI help file (@lukastaegert)

#6224: OpenBSD support (@edshot99, @lukastaegert)

#6225: Throw a warning for circular chunks (@TrickyPi)

#6226: fix(deps): update swc monorepo (major) (@renovate[bot])

#6227: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6228: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6229: chore(deps): lock file maintenance minor/patch updates (@renovate[bot])

Commits

299cc46 4.55.1
72f650d Fix OpenBSD artifacts and ensure OIDC is working (#6231)
570b7ee 4.55.0
55014f3 OpenBSD support (#6224)
72b0f0e Add support for ppc64 & loong64 musl linux (#5997)
e0bfc4b Throw a warning for circular chunks (#6225)
b58ea7b Handle TLA dynamic import cycles in chunkAssignment (#6221)
93aea33 fix(deps): update swc monorepo (major) (#6226)
639f4eb chore(deps): lock file maintenance minor/patch updates (#6229)
14ac7df chore(deps): lock file maintenance minor/patch updates (#6228)
Additional commits viewable in compare view

Updates baseline-browser-mapping from 2.9.11 to 2.9.17

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.3 - remove process.loadEnvFile()

What's Changed

Remove process.loadEnfFile() from main script by @tonypconway in web-platform-dx/baseline-browser-mapping#112

Full Changelog: https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.9.2...v2.9.3

Commits

802fe15 Patch to 2.9.17 because browser or feature data changed
fb0d550 Browser or feature data changed
ebb10d9 Updating static site
d130866 Patch to 2.9.16 because browser or feature data changed
659ecf3 Browser or feature data changed
115d837 Updating static site
24a0c04 Patch to 2.9.15 because browser or feature data changed
6a70ccf Browser or feature data changed
6900fae Updating static site
19137db Patch to 2.9.14 because browser or feature data changed
Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001762 to 1.0.30001766

Commits

db00262 Update caniuse-db 1.0.30001766
14a4372 Update caniuse-db 1.0.30001765
7eb3ee1 Update caniuse-db 1.0.30001764
ab8c373 Update caniuse-db 1.0.30001763
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Package Dependencies

Package:
@types/react

Ecosystem:
npm

Version Change:
19.2.7 → 19.2.8

Update Type:
Patch

Package:
@babel/preset-env

Ecosystem:
npm

Version Change:
7.28.5 → 7.28.6

Update Type:
Patch

Package:
@babel/core

Ecosystem:
npm

Version Change:
7.28.5 → 7.28.6

Update Type:
Patch

Package:
rollup

Ecosystem:
npm

Version Change:
4.54.0 → 4.55.1

Update Type:
Minor

Package:
caniuse-lite

Ecosystem:
npm

Version Change:
1.0.30001762 → 1.0.30001766

Update Type:
Patch

Package:
baseline-browser-mapping

Ecosystem:
npm

Version Change:
2.9.11 → 2.9.17

Update Type:
Patch

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`13057244`
UUID:	`3847511479`
Node ID:	`PR_kwDODgsJYM6-70lk`
Host:	GitHub
Repository:	NHSDigital/nhsuk-react-components

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Dependabot

Bump the build group with 6 updates

v7.28.6 (2026-01-12)

:bug: Bug Fix

:nail_care: Polish

:house: Internal

:running_woman: Performance

Committers: 7

Changelog

v7.28.6 (2026-01-12)

:bug: Bug Fix

:nail_care: Polish

:house: Internal

:running_woman: Performance

Committers: 7

Changelog

v4.55.1

4.55.1

Bug Fixes

Pull Requests

4.55.1

Bug Fixes

Pull Requests

4.55.0

Features

Bug Fixes

Pull Requests

v2.9.3 - remove `process.loadEnvFile()`

What's Changed

Package Dependencies

Actions

Technical Details

Bump the build group with 6 updates

v7.28.6 (2026-01-12)

:bug: Bug Fix

:nail_care: Polish

:house: Internal

:running_woman: Performance

Committers: 7

Changelog

v7.28.6 (2026-01-12)

:bug: Bug Fix

:nail_care: Polish

:house: Internal

:running_woman: Performance

Committers: 7

Changelog

v4.55.1

4.55.1

Bug Fixes

Pull Requests

4.55.1

Bug Fixes

Pull Requests

4.55.0

Features

Bug Fixes

Pull Requests

v2.9.3 - remove process.loadEnvFile()

What's Changed

Package Dependencies

Actions

Technical Details

v2.9.3 - remove `process.loadEnvFile()`