chore(deps): update all non-major dependencies

[chrisbbreuer]

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	7
🚀 GitHub Actions	2
Total	9

📦 npm Dependencies

7 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@babel/core (source)	7.27.1 -> 7.28.5
@babel/preset-react (source)	7.27.1 -> 7.28.5
@types/react (source)	19.1.4 -> 19.2.7
react (source)	19.1.0 -> 19.2.3
typescript (source)	5.8.3 -> 5.9.3
@types/bun (source)	1.3.0 -> 1.3.4
bun-plugin-dtsx (source)	0.21.12 -> 0.21.17

🚀 GitHub Actions

2 actions will be updated

Action	Change	Type	Files
shivammathur/setup-php	v2 → v2.36.0	🟢 patch	buddy-bot.yml
oven-sh/setup-bun	v2 → v2.0.2	🟢 patch	ci.yml

---

Release Notes

babel/babel (@babel/core)

7.27.1 -> 7.28.5

v8.0.0-beta.3

Compare Source

v8.0.0-beta.3 (2025-10-23)

💥 Breaking Change

• babel-parser
  • #17505 [Babel 8] Treat allowSuperOutsideMethod as top-level only ([JLHwung](https://github.com/JLHwung))

🐛 Bug Fix

• babel-traverse, babel-types
  • #17499 Enable strictNullChecks for traverse ([liuxingbaoyu](https://github.com/liuxingbaoyu))
• babel-plugin-transform-runtime
  • #17512 [babel 8] Update default @babel/runtime version ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))

💅 Polish

• babel-core, babel-helper-transform-fixture-test-runner, babel-plugin-transform-runtime, babel-preset-env, babel-preset-react, babel-preset-typescript
  • #17404 Improve @babel/core typ...

[View full release notes]

Released by babel-bot on 10/23/2025

v7.28.5

Compare Source

v7.28.5 (2025-10-23)

Thank you CO0Ki3, Olexandr88, and youthfulhps for your first PRs!

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets ([liuxingbaoyu](https://github.com/liuxingbaoyu))
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 ([fisker](https://github.com/fisker))

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest ([CO0Ki3](https://github.com/CO0Ki3))
• babel-parser
  • #17521 Improve @babel/parser error typing ([[JLHwung](https...

[View full release notes]

Released by babel-bot on 10/23/2025

v8.0.0-beta.2

Compare Source

v8.0.0-beta.2 (2025-09-05)

💥 Breaking Change

• babel-standalone
  • #17421 Do not enable default plugins in @babel/standalone ([gwillen](https://github.com/gwillen))

🐛 Bug Fix

• babel-types
  • #17495 fix: allow d and v flag in regExpLiteral builder ([JLHwung](https://github.com/JLHwung))
• babel-parser
  • #17479 [Babel 8] Align TSMappedType AST ([JLHwung](https://github.com/JLHwung))

💅 Polish

• babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-object-rest-spread, babel-traverse
  • #17485 Improve babel/traverse typings ([JLHwung](https://github.com/JLHwung))
    ...

[View full release notes]

Released by babel-bot on 9/5/2025

babel/babel (@babel/preset-react)

7.27.1 -> 7.28.5

v8.0.0-beta.3

Compare Source

v8.0.0-beta.3 (2025-10-23)

💥 Breaking Change

• babel-parser
  • #17505 [Babel 8] Treat allowSuperOutsideMethod as top-level only ([JLHwung](https://github.com/JLHwung))

🐛 Bug Fix

• babel-traverse, babel-types
  • #17499 Enable strictNullChecks for traverse ([liuxingbaoyu](https://github.com/liuxingbaoyu))
• babel-plugin-transform-runtime
  • #17512 [babel 8] Update default @babel/runtime version ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))

💅 Polish

• babel-core, babel-helper-transform-fixture-test-runner, babel-plugin-transform-runtime, babel-preset-env, babel-preset-react, babel-preset-typescript
  • #17404 Improve @babel/core typ...

[View full release notes]

Released by babel-bot on 10/23/2025

v7.28.5

Compare Source

v7.28.5 (2025-10-23)

Thank you CO0Ki3, Olexandr88, and youthfulhps for your first PRs!

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets ([liuxingbaoyu](https://github.com/liuxingbaoyu))
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 ([fisker](https://github.com/fisker))

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest ([CO0Ki3](https://github.com/CO0Ki3))
• babel-parser
  • #17521 Improve @babel/parser error typing ([[JLHwung](https...

[View full release notes]

Released by babel-bot on 10/23/2025

v8.0.0-beta.2

Compare Source

v8.0.0-beta.2 (2025-09-05)

💥 Breaking Change

• babel-standalone
  • #17421 Do not enable default plugins in @babel/standalone ([gwillen](https://github.com/gwillen))

🐛 Bug Fix

• babel-types
  • #17495 fix: allow d and v flag in regExpLiteral builder ([JLHwung](https://github.com/JLHwung))
• babel-parser
  • #17479 [Babel 8] Align TSMappedType AST ([JLHwung](https://github.com/JLHwung))

💅 Polish

• babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-object-rest-spread, babel-traverse
  • #17485 Improve babel/traverse typings ([JLHwung](https://github.com/JLHwung))
    ...

[View full release notes]

Released by babel-bot on 9/5/2025

DefinitelyTyped/DefinitelyTyped (@types/react)

19.1.4 -> 19.2.7

Compare Source

TypeScript definitions for react

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

facebook/react (react)

19.1.0 -> 19.2.3

v19.1.4

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (sebmarkbage #35351)

Released by eps1lon on 12/12/2025

v19.2.3

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (sebmarkbage #35351)

Released by eps1lon on 12/11/2025

v19.2.2

Compare Source

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (eps1lon [Flight] Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (sebmarkbage, unstubbable #35289, #35345)

Released by eps1lon on 12/11/2025

microsoft/TypeScript (typescript)

5.8.3 -> 5.9.3

v5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

Released by jakebailey on 10/1/2025

v5.9.2

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

Released by jakebailey on 10/1/2025

v5.9-rc

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

Downloads are available on:

• npm

Released by jakebailey on 10/1/2025

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.0 -> 1.3.4

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

stacksjs/dtsx (bun-plugin-dtsx)

0.21.12 -> 0.21.17

v0.9.9

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 11/6/2025

v0.9.8

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 10/31/2025

v0.9.7

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 10/31/2025

shivammathur/setup-php

v2 → v2.36.0

Visit shivammathur/setup-php for release notes.

oven-sh/setup-bun

v2 → v2.0.2

Visit oven-sh/setup-bun for release notes.

---

📊 Package Statistics

• @babel/core: 82,781,870 weekly downloads
• @babel/preset-react: 19,340,217 weekly downloads
• @types/react: 57,050,332 weekly downloads
• react: 62,312,641 weekly downloads
• typescript: 111,129,786 weekly downloads
• @types/bun: 3,437,813 weekly downloads
• bun-plugin-dtsx: 153,267 weekly downloads
• shivammathur/setup-php: GitHub Action for workflow automation
• oven-sh/setup-bun: GitHub Action for workflow automation

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Buddy 🤖

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/stacksjs/bun-plugin-markdown@12

commit: 1b8d489