fix(deps): update patch updates (patch) - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/eslint-plugin	^1.5.2 -> ^1.5.4
browserslist	4.28.0 -> 4.28.1
caniuse-lite	^1.0.30001760 -> ^1.0.30001761
esbuild	^0.27.1 -> ^0.27.2

---

Release Notes

vitest-dev/eslint-plugin-vitest (@​vitest/eslint-plugin)

v1.5.4

Compare Source

No significant changes

    View changes on GitHub

browserslist/browserslist (browserslist)

v4.28.1

Compare Source

• Removed Baseline warning since we have it own warning.

browserslist/caniuse-lite (caniuse-lite)

v1.0.30001761

Compare Source

evanw/esbuild (esbuild)

v0.27.2

Compare Source

• Allow import path specifiers starting with #/ (#​4361)

  Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

  This change was contributed by @​hybrist.

• Automatically add the -webkit-mask prefix (#​4357, #​4358)

  This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

  /* Original code */
  main {
    mask: url(x.png) center/5rem no-repeat
  }
  
  /* Old output (with --target=chrome110) */
  main {
    mask: url(x.png) center/5rem no-repeat;
  }
  
  /* New output (with --target=chrome110) */
  main {
    -webkit-mask: url(x.png) center/5rem no-repeat;
    mask: url(x.png) center/5rem no-repeat;
  }

  This change was contributed by @​BPJEnnova.

• Additional minification of switch statements (#​4176, #​4359)

  This release contains additional minification patterns for reducing switch statements. Here is an example:

  // Original code
  switch (x) {
    case 0:
      foo()
      break
    case 1:
    default:
      bar()
  }
  
  // Old output (with --minify)
  switch(x){case 0:foo();break;case 1:default:bar()}
  
  // New output (with --minify)
  x===0?foo():bar();

• Forbid using declarations inside switch clauses (#​4323)

  This is a rare change to remove something that was previously possible. The Explicit Resource Management proposal introduced using declarations. These were previously allowed inside case and default clauses in switch statements. This had well-defined semantics and was already widely implemented (by V8, SpiderMonkey, TypeScript, esbuild, and others). However, it was considered to be too confusing because of how scope works in switch statements, so it has been removed from the specification. This edge case will now be a syntax error. See tc39/proposal-explicit-resource-management#215 and rbuckton/ecma262#14 for details.

  Here is an example of code that is no longer allowed:

  switch (mode) {
    case 'read':
      using readLock = db.read()
      return readAll(readLock)
  
    case 'write':
      using writeLock = db.write()
      return writeAll(writeLock)
  }

  That code will now have to be modified to look like this instead (note the additional { and } block statements around each case body):

  switch (mode) {
    case 'read': {
      using readLock = db.read()
      return readAll(readLock)
    }
    case 'write': {
      using writeLock = db.write()
      return writeAll(writeLock)
    }
  }

  This is not being released in one of esbuild's breaking change releases since this feature hasn't been finalized yet, and esbuild always tracks the current state of the specification (so esbuild's previous behavior was arguably incorrect).

---

Configuration

📅 Schedule: Branch creation - "after 10:00 before 19:00 every weekday except after 13:00 before 14:00" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Thank you for following the naming conventions! 🙏

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	browserslist-config-anolilab@​6.0.7
	@​vitest/​coverage-v8@​4.0.15
	@​typescript-eslint/​parser@​8.49.0
	esbuild@​0.27.1 ⏵ 0.27.2
	eslint-plugin-no-for-of-array@​0.1.0
	@​visulima/​tsconfig@​2.1.3
	@​unocss/​eslint-plugin@​66.5.10
	caniuse-lite@​1.0.30001761
	@​visulima/​packem@​2.0.0-alpha.36
	cz-conventional-changelog@​3.3.0
	eslint-plugin-antfu@​3.1.1
	eslint-import-resolver-node@​0.3.9
	eslint-plugin-simple-import-sort@​12.1.1
	confusing-browser-globals@​1.0.11
	eslint-plugin-no-only-tests@​3.3.0
	eslint-plugin-toml@​0.12.0
	eslint-plugin-html@​8.1.3
	eslint-plugin-no-unsanitized@​4.1.4
	eslint-merge-processors@​2.0.0
	eslint-plugin-no-secrets@​2.2.1
	cross-env@​10.1.0
	audit-ci@​7.1.0
	eslint-plugin-react-perf@​3.3.3
	eslint-plugin-promise@​7.2.1
	eslint-plugin-compat@​6.0.2
	astro-eslint-parser@​1.2.2
	eslint-plugin-sonarjs@​3.0.5
	eslint-config-flat-gitignore@​2.1.0
	eslint-plugin-tailwindcss@​3.18.2
	eslint-plugin-security@​3.0.1
	eslint-plugin-react@​7.37.5
	eslint-plugin-jsx-a11y@​6.10.2
	eslint-plugin-regexp@​2.10.0
See 24 more rows in the dashboard

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report