Bump the "dependencies" group with 2 updates across multiple ecosystems by dependabot[bot] · Pull Request #211 · HTTPArchive/custom-metrics

dependabot · 2026-11-01T11:37:51Z

Bumps the dependencies group with 2 updates: @babel/parser and @babel/traverse.

Updates @babel/parser from 8.0.6 to 8.0.8

Release notes

Sourced from @babel/parser's releases.

v8.0.8 (2026-10-23)

Thanks @bhushan4work and @webdevelopersrinu for your first PRs!

👓 Spec Compliance

babel-parser

#18366 fix(parser): disallow named specifiers after * as ns (@JLHwung)

#18336 fix(parser): disallow const x followed by linebreak and of (@JLHwung)

#18343 fix(parser): reject delete (x) when createParenthesizedExpressions: true (@JLHwung)

#18276 fix: report expression errors in object literals used as member base (@JLHwung)

#18286 Disallow arrow functions as new callee and await operand (@JLHwung)

#18309 Disallow call expressions as arrow function parameters in sloppy mode (@JLHwung)

#18315 Disallow eval and arguments as class names (@JLHwung)

🐛 Bug Fix

babel-parser

#18392 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@bhushan4work)

#18344 fix(parser): ASI between arrow body and /= regex (@JLHwung)

#18342 fix(parser): allow arguments as a label in class (@JLHwung)

#18365 fix(parser): allow ASI between property init and escaped in (@JLHwung)

#18327 fix(parser): register function id in labeled function declaration (@JLHwung)

#18323 Skip HTML-like comments in the parser's character lookahead (@JLHwung)

#18322 Allow ASI after export default from without exportDefaultFrom (@JLHwung)

babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime

#18186 Fix _arrayWithHoles bypassing custom Symbol.iterator on array-backed Proxies (@webdevelopersrinu)

babel-plugin-transform-typescript, babel-types

#18380 fix(types): visit decorators of TSParameterProperty (@JLHwung)

babel-plugin-transform-block-scoping

#18331 fix: wrap enclosing loop when a nested for head closure captures its bindings (@joellemd)

🏠 Internal

babel-plugin-transform-classes

#18383 Remove internal usage of loose in class transform (@nicolo-ribaudo)

🔬 Output optimization

babel-plugin-transform-spread

#18318 Avoid arrayLikeToArray for spreading literals (@nicolo-ribaudo)

Committers: 7

Babel Bot (@babel-bot)

Bhushan Agrawal (@bhushan4work)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joellemd)

Nicolò Ribaudo (@nicolo-ribaudo)

Srinu desetti (@webdevelopersrinu)

@liuxingbaoyu

v8.0.7 (2026-10-07)

Thanks @brunoborta, @CINC0S, @hoobnn, and @jpradelle for your first PRs!

... (truncated)

Changelog

Sourced from @babel/parser's changelog.

v8.0.8 (2026-10-23)

👓 Spec Compliance

babel-parser

#18366 fix(parser): disallow named specifiers after * as ns (@JLHwung)

#18336 fix(parser): disallow const x followed by linebreak and of (@JLHwung)

#18343 fix(parser): reject delete (x) when createParenthesizedExpressions: true (@JLHwung)

#18276 fix: report expression errors in object literals used as member base (@JLHwung)

#18286 Disallow arrow functions as new callee and await operand (@JLHwung)

#18309 Disallow call expressions as arrow function parameters in sloppy mode (@JLHwung)

#18315 Disallow eval and arguments as class names (@JLHwung)

🐛 Bug Fix

babel-parser

#18392 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@bhushan4work)

#18344 fix(parser): ASI between arrow body and /= regex (@JLHwung)

#18342 fix(parser): allow arguments as a label in class (@JLHwung)

#18365 fix(parser): allow ASI between property init and escaped in (@JLHwung)

#18327 fix(parser): register function id in labeled function declaration (@JLHwung)

#18323 Skip HTML-like comments in the parser's character lookahead (@JLHwung)

#18322 Allow ASI after export default from without exportDefaultFrom (@JLHwung)

babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime

#18186 Fix _arrayWithHoles bypassing custom Symbol.iterator on array-backed Proxies (@webdevelopersrinu)

babel-plugin-transform-typescript, babel-types

#18380 fix(types): visit decorators of TSParameterProperty (@JLHwung)

babel-plugin-transform-block-scoping

#18331 fix: wrap enclosing loop when a nested for head closure captures its bindings (@joellemd)

🏠 Internal

babel-plugin-transform-classes

#18383 Remove internal usage of loose in class transform (@nicolo-ribaudo)

🔬 Output optimization

babel-plugin-transform-spread

#18318 Avoid arrayLikeToArray for spreading literals (@nicolo-ribaudo)

v8.0.7 (2026-10-07)

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

... (truncated)

Commits

2208401 v8.0.8
44e867b fix(parser): set phase: null for eafer imports (#18392)
3524342 fix(parser): disallow named specifiers after * as ns (#18366)
656585c fix(parser): disallow const x followed by linebreak and of (#18336)
bad0a65 fix(parser): ASI between arrow body and /= regex (#18344)
2f65825 fix(parser): allow arguments as a label in class (#18342)
6cd3db7 fix(parser): allow ASI between property init and escaped in (#18365)
93e39e4 fix(parser): reject delete (x) when createParenthesizedExpressions: true (#18...
0ca5fda fix(parser): register function id in labeled function declaration (#18327)
0915316 Skip HTML-like comments in the parser's character lookahead (#18323)
Additional commits viewable in compare view

Updates @babel/traverse from 8.0.6 to 8.0.7

Release notes

Sourced from @babel/traverse's releases.

v8.0.7 (2026-10-07)

Thanks @brunoborta, @CINC0S, @hoobnn, and @jpradelle for your first PRs!

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

Committers: 11

Babel Bot (@babel-bot)

Bruno "Borta" Bortagaray (@brunoborta)

CINC05 (@CINC0S)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joelle-a-dev)

Julien Pradelle (@jpradelle)

Kevin Deng (@sxzz)

Nicolò Ribaudo (@nicolo-ribaudo)

Samual Norman (@samualtnorman)

@wulu007

hoobnn (@hoobnn)

Changelog

Sourced from @babel/traverse's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

Commits

1fc0073 v8.0.7
c5b07a5 Evaluate TypeScript expression wrappers in NodePath#evaluate (#18151)
f92e1af fix(traverse): do not evaluate destructured bindings in path.evaluate (#18250)
See full diff in compare view

Bumps the dependencies group with 1 update: super-linter/super-linter.

Updates super-linter/super-linter from 8 to 9

Release notes

Sourced from super-linter/super-linter's releases.

v9.0.0

9.0.0 (2026-10-01)

⚠ BREAKING CHANGES

update stylelint config file (super-linter/super-linter#7957), closes #7644

rely on jscpd config file for gitignore (#7958)

remove nbqa (#7697)

🚀 Features

editorconfig-checker fix mode (#8129) (d23a77f)

print version and revision on summary footer (#8131) (108536f), closes #7635

publish linter versions file (#8136) (29e44ea), closes #7919

tag slim images as version-slim (#8154) (958b6c0), closes #7598

update stylelint config file (super-linter/super-linter#7957), closes #7644 (c358755)

🐛 Bugfixes

codespell: skip root package lockfiles (#8094) (d3bc059)

go_modules: scan module sub-packages with golangci-lint (#7884) (262ba6b)

jscpd gitgnore option (#7951) (70dc6a6), closes #7949

rely on jscpd config file for gitignore (#7958) (9fa9f40)

tag local image instead of editing action.yml (#8166) (8802b51)

⬆️ Dependency updates

all: add dependency cooldowns (#7990) (123c30b)

bundler: bump rubocop (#8051) (8439a0b)

bundler: bump rubocop (#8124) (c55d5ad)

bundler: bump rubocop-minitest (#8005) (29e2320)

bundler: bump the rubocop group across 1 directory with 3 updates (#7977) (fe04526)

bundler: bump the rubocop group across 1 directory with 3 updates (#8085) (5d61d4a)

docker: bump python (#8048) (6c757dc)

docker: bump scalameta/scalafmt in the docker group (#8001) (07267f1)

docker: bump terraform-linters/tflint in the docker group (#8006) (260eccc)

docker: bump the docker group across 1 directory with 10 updates (#7997) (f89bfb7)

docker: bump the docker group across 1 directory with 13 updates (#8091) (2066911)

docker: bump the docker group across 1 directory with 5 updates (#8141) (0c4e34c)

docker: bump the docker group across 1 directory with 6 updates (#8050) (7d5c0e4)

docker: bump the docker group across 1 directory with 9 updates (#8118) (8a24b4b)

java: bump com.puppycrawl.tools:checkstyle (#7969) (a363fc9)

java: bump com.puppycrawl.tools:checkstyle (#7996) (b27705a)

java: bump com.puppycrawl.tools:checkstyle (#8026) (541db66)

java: bump com.puppycrawl.tools:checkstyle (#8075) (921de44)

java: bump the java-gradle group across 2 directories with 2 updates (#8060) (7ff6f35)

npm: bump @stoplight/spectral-cli in /dependencies (#7973) (1779ac9)

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

Changelog

9.0.0 (2026-10-01)

⚠ BREAKING CHANGES

update stylelint config file (super-linter/super-linter#7957), closes #7644

rely on jscpd config file for gitignore (#7958)

remove nbqa (#7697)

🚀 Features

editorconfig-checker fix mode (#8129) (d23a77f)

print version and revision on summary footer (#8131) (108536f), closes #7635

publish linter versions file (#8136) (29e44ea), closes #7919

tag slim images as version-slim (#8154) (958b6c0), closes #7598

update stylelint config file (super-linter/super-linter#7957), closes #7644 (c358755)

🐛 Bugfixes

codespell: skip root package lockfiles (#8094) (d3bc059)

go_modules: scan module sub-packages with golangci-lint (#7884) (262ba6b)

jscpd gitgnore option (#7951) (70dc6a6), closes #7949

rely on jscpd config file for gitignore (#7958) (9fa9f40)

tag local image instead of editing action.yml (#8166) (8802b51)

⬆️ Dependency updates

all: add dependency cooldowns (#7990) (123c30b)

bundler: bump rubocop (#8051) (8439a0b)

bundler: bump rubocop (#8124) (c55d5ad)

bundler: bump rubocop-minitest (#8005) (29e2320)

bundler: bump the rubocop group across 1 directory with 3 updates (#7977) (fe04526)

bundler: bump the rubocop group across 1 directory with 3 updates (#8085) (5d61d4a)

docker: bump python (#8048) (6c757dc)

docker: bump scalameta/scalafmt in the docker group (#8001) (07267f1)

docker: bump terraform-linters/tflint in the docker group (#8006) (260eccc)

docker: bump the docker group across 1 directory with 10 updates (#7997) (f89bfb7)

docker: bump the docker group across 1 directory with 13 updates (#8091) (2066911)

docker: bump the docker group across 1 directory with 5 updates (#8141) (0c4e34c)

docker: bump the docker group across 1 directory with 6 updates (#8050) (7d5c0e4)

docker: bump the docker group across 1 directory with 9 updates (#8118) (8a24b4b)

java: bump com.puppycrawl.tools:checkstyle (#7969) (a363fc9)

java: bump com.puppycrawl.tools:checkstyle (#7996) (b27705a)

java: bump com.puppycrawl.tools:checkstyle (#8026) (541db66)

java: bump com.puppycrawl.tools:checkstyle (#8075) (921de44)

java: bump the java-gradle group across 2 directories with 2 updates (#8060) (7ff6f35)

... (truncated)

Commits

2da1369 chore(main): release 9.0.0 (#7950)
8802b51 fix: tag local image instead of editing action.yml (#8166)
cd17c95 chore: scan pip requirements files with trivy (#8153)
958b6c0 feat: tag slim images as version-slim (#8154)
8afae23 build: upgrade to Alpine 3.24, PHP 8.5, Clang 22 (#8151)
c648681 ci: publish release after uploading assets (#8150)
1167157 deps(npm): bump qs (#8149)
568db29 deps(python): bump the pip group across 1 directory with 6 updates (#8127)
05bfa30 deps(npm): bump js-yaml (#8147)
f8ac9fb chore: group yq updates (#8148)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) and [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse). Updates `@babel/parser` from 8.0.6 to 8.0.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.8/packages/babel-parser) Updates `@babel/traverse` from 8.0.6 to 8.0.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-traverse) Bump super-linter/super-linter from 8 to 9 in the dependencies group Bumps the dependencies group with 1 update: [super-linter/super-linter](https://github.com/super-linter/super-linter). Updates `super-linter/super-linter` from 8 to 9 - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](super-linter/super-linter@v8...v9) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 8.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@babel/traverse" dependency-version: 8.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: super-linter/super-linter dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-11-01T11:39:06Z

https://almanac.httparchive.org/en/2022/

WPT result details

Changed custom metrics values:

{}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026

Navigation Menu

Repository navigation

Bump the "dependencies" group with 2 updates across multiple ecosystems - #211

Bump the "dependencies" group with 2 updates across multiple ecosystems#211
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/dependencies-13d41552d1

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

github-actions Bot commented Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v8.0.8 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 7

v8.0.7 (2026-10-07)

v8.0.8 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

v8.0.7 (2026-10-07)

🐛 Bug Fix

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

Committers: 11

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

v9.0.0

9.0.0 (2026-10-01)

⚠ BREAKING CHANGES

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

Changelog

9.0.0 (2026-10-01)

⚠ BREAKING CHANGES

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

Uh oh!

github-actions Bot commented Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants