[MelvinBot]

Details

Bumps transitive browserslist 4.21.9 → 4.29.3 (lockfile only) to fix GHSA-c83g-rgw3-j3cx and GHSA-73wf-gq98-2v4g (patched in 4.28.7). Its deps moved too: caniuse-lite, electron-to-chromium, node-releases, update-browserslist-db, escalade, picocolors, plus new baseline-browser-mapping. 4.29.4 is excluded by .npmrc min-release-age=7.

Usage: build-time only. @babel/preset-env (via @babel/helper-compilation-targets and core-js-compat) uses it to pick compile targets when building dist/. Not shipped to consumers.

Change Log

• 4.29.3: Updated Firefox ESR.
• 4.29.2: Fixed ignoring null usage in cover X in Y.
• 4.29.1: Fixed config name loading on Windows; case-insensitive negation, percentage, and supports queries.
• 4.29.0: Added query continuations across lines and array entries.
• 4.28.9: Improved or parsing performance.
• 4.28.8: Fixed including kaios in baseline queries.
• 4.28.7: Fixed unbounded memory growth and prototype write (the alerts).
• 4.28.6: Fixed Electron version queries.
• 4.28.5: Fixed > and >= queries.
• 4.28.4: Fixed SyntaxError regression of 4.28.3.
• 4.28.3: Fixed baseline query case-insensitivity.
• 4.28.2: Fixed prototype pollution.
• 4.28.1: Removed Baseline warning.
• 4.28.0: Added firefox >= esr query.
• 4.27.0: Added BROWSERSLIST_TRACE_WARNING.
• 4.26.3: Fixed throwOnMissing with extends.
• 4.26.2: Fixed baseline-browser-mapping version requirement.
• 4.26.1: Updated Firefox ESR.
• 4.26.0: Added Baseline queries.
• 4.25.4: Fixed Windows support for custom stats.
• 4.25.3: Fixed ReDoS.
• 4.25.2: Fixed Node.js --permission support.
• 4.25.1: Updated Firefox ESR.
• 4.25.0: Added cover 95% in <config> stats query.
• 4.24.5: Fixed ESM shared config.
• 4.24.4: Improved caching performance.
• 4.24.3: Updated Firefox ESR.
• 4.24.2: Clarified outdated caniuse-lite warning.
• 4.24.1: Added months since last caniuse-lite update to warning.
• 4.24.0: Added browserslist.findConfigFile().
• 4.23.3: Fixed >= query for ios.
• 4.23.2: Updated Firefox ESR.
• 4.23.1: Fixed feature query with mobile to desktop.
• 4.23.0: Added BROWSERSLIST_ROOT_PATH.
• 4.22.3: Fixed whitespace in supports query; scoped shared configs.
• 4.22.2: Fixed time queries with mobileToDesktop.
• 4.22.1: Updated Firefox ESR.
• 4.22.0: Added fully supports and partially supports queries.
• 4.21.11: Added --update-db deprecation warning.
• 4.21.10: Updated Firefox ESR.

Related Issues

$ https://github.com/Expensify/Expensify/issues/695886

Manual Tests

1. npm ci succeeds.
2. npm run build succeeds and outputs dist/.
3. npx eslint src, npx prettier . --check, and npm run ts pass.
4. npm ls browserslist shows only 4.29.3.

All four passed locally.

Linked PRs

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}

[Beamanator]

closing, see https://expensify.slack.com/archives/C03TQ48KC/p1793034901158699