chore(deps): update all non-major dependencies

[chrisbbreuer]

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	7
🚀 GitHub Actions	2
Total	9

📦 npm Dependencies

7 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@babel/core (source)	7.27.1 -> 7.29.0
@babel/preset-react (source)	7.27.1 -> 7.28.5
@types/react (source)	19.1.4 -> 19.2.13
react (source)	19.1.0 -> 19.2.4
typescript (source)	5.8.3 -> 5.9.3
@types/bun (source)	1.3.0 -> 1.3.8
bun-plugin-dtsx (source)	0.21.12 -> 0.21.17

🚀 GitHub Actions

2 actions will be updated

Action	Change	Type	Files
oven-sh/setup-bun	v2 → v2.1.2	🟢 patch	ci.yml
shivammathur/setup-php	v2 → v2.36.0	🟢 patch	buddy-bot.yml

---

Release Notes

babel/babel (@babel/core)

7.27.1 -> 7.29.0

v8.0.0-rc.1

Compare Source

v8.0.0-rc.1 (2026-01-31)

Thanks ivonaest and wulu007 for your first PRs!

💥 Breaking Change

• babel-eslint-parser
  • #17763 Drop support for eslint v7-v8 ([liuxingbaoyu](https://github.com/liuxingbaoyu))
  • #17755 Make eslint-parser/experimental-worker the default ([liuxingbaoyu](https://github.com/liuxingbaoyu))
• babel-register
  • #17762 Remove browser entrypoint for @babel/register ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))
• babel-parser, babel-plugin-proposal-partial-application, babel-plugin-syntax-partial-application
  • #17760 [Babel 8]: partial-application plugin requires "version" option ([[...

[View full release notes]

Released by babel-bot on 1/31/2026

v7.29.0

Compare Source

v7.29.0 (2026-01-31)

Thanks simbahax for your first PR!

🚀 New Feature

• babel-types
  • #17750 [7.x backport] Add attributes import declaration builder ([JLHwung](https://github.com/JLHwung))
• babel-standalone
  • #17663 [7.x backport] feat(standalone): export async transform ([JLHwung](https://github.com/JLHwung))
  • #17725 [7.x backport] feat: read standalone targets from data-targets ([JLHwung](https://github.com/JLHwung))

🐛 Bug Fix

• babel-parser
  • #17765 fix(parser): correctly parse type assertions in extends clause ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))
  • [#17723](https://github.com/babel/babe...

[View full release notes]

Released by babel-bot on 1/31/2026

v8.0.0-beta.4

Compare Source

v8.0.0-beta.4 (2026-01-12)

Thanks ivonaest, simbahax, and sxzz for your first PRs!

💥 Breaking Change

• babel-generator, babel-parser, babel-plugin-transform-typescript, babel-types
  • #17659 Drop support for TS module <identifier> ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))
• babel-preset-env, babel-preset-typescript
  • #17670 breaking(preset-env): remove isPluginRequired export ([JLHwung](https://github.com/JLHwung))
• babel-parser
  • #17666 [Babel 8]: Ensure parseExpression with tokens: true returns the exported tokens ([JLHwung](https://github.com/JLHwung))
• babel-traverse
  • [#17671](https://github.com/babel/babel...

[View full release notes]

Released by babel-bot on 1/12/2026

babel/babel (@babel/preset-react)

7.27.1 -> 7.28.5

v8.0.0-rc.1

Compare Source

v8.0.0-rc.1 (2026-01-31)

Thanks ivonaest and wulu007 for your first PRs!

💥 Breaking Change

• babel-eslint-parser
  • #17763 Drop support for eslint v7-v8 ([liuxingbaoyu](https://github.com/liuxingbaoyu))
  • #17755 Make eslint-parser/experimental-worker the default ([liuxingbaoyu](https://github.com/liuxingbaoyu))
• babel-register
  • #17762 Remove browser entrypoint for @babel/register ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))
• babel-parser, babel-plugin-proposal-partial-application, babel-plugin-syntax-partial-application
  • #17760 [Babel 8]: partial-application plugin requires "version" option ([[...

[View full release notes]

Released by babel-bot on 1/31/2026

v7.29.0

Compare Source

v7.29.0 (2026-01-31)

Thanks simbahax for your first PR!

🚀 New Feature

• babel-types
  • #17750 [7.x backport] Add attributes import declaration builder ([JLHwung](https://github.com/JLHwung))
• babel-standalone
  • #17663 [7.x backport] feat(standalone): export async transform ([JLHwung](https://github.com/JLHwung))
  • #17725 [7.x backport] feat: read standalone targets from data-targets ([JLHwung](https://github.com/JLHwung))

🐛 Bug Fix

• babel-parser
  • #17765 fix(parser): correctly parse type assertions in extends clause ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))
  • [#17723](https://github.com/babel/babe...

[View full release notes]

Released by babel-bot on 1/31/2026

v8.0.0-beta.4

Compare Source

v8.0.0-beta.4 (2026-01-12)

Thanks ivonaest, simbahax, and sxzz for your first PRs!

💥 Breaking Change

• babel-generator, babel-parser, babel-plugin-transform-typescript, babel-types
  • #17659 Drop support for TS module <identifier> ([nicolo-ribaudo](https://github.com/nicolo-ribaudo))
• babel-preset-env, babel-preset-typescript
  • #17670 breaking(preset-env): remove isPluginRequired export ([JLHwung](https://github.com/JLHwung))
• babel-parser
  • #17666 [Babel 8]: Ensure parseExpression with tokens: true returns the exported tokens ([JLHwung](https://github.com/JLHwung))
• babel-traverse
  • [#17671](https://github.com/babel/babel...

[View full release notes]

Released by babel-bot on 1/12/2026

DefinitelyTyped/DefinitelyTyped (@types/react)

19.1.4 -> 19.2.13

Compare Source

TypeScript definitions for react

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

facebook/react (react)

19.1.0 -> 19.2.4

v19.2.4

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by gnoff, lubieowoce, sebmarkbage, unstubbable)

Released by eps1lon on 1/26/2026

v19.1.5

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by gnoff, lubieowoce, sebmarkbage, unstubbable)

Released by eps1lon on 1/26/2026

v19.1.4

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (sebmarkbage #35351)

Released by eps1lon on 12/12/2025

microsoft/TypeScript (typescript)

5.8.3 -> 5.9.3

v5.9.3

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

Released by jakebailey on 10/1/2025

v5.9.2

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

Released by jakebailey on 10/1/2025

v5.9-rc

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

Downloads are available on:

• npm

Released by jakebailey on 10/1/2025

DefinitelyTyped/DefinitelyTyped (@types/bun)

1.3.0 -> 1.3.8

Compare Source

TypeScript definitions for bun

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

stacksjs/dtsx (bun-plugin-dtsx)

0.21.12 -> 0.21.17

v0.9.9

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 11/6/2025

v0.9.8

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 10/31/2025

v0.9.7

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 10/31/2025

oven-sh/setup-bun

v2 → v2.1.2

Visit oven-sh/setup-bun for release notes.

shivammathur/setup-php

v2 → v2.36.0

Visit shivammathur/setup-php for release notes.

---

📊 Package Statistics

• @babel/core: 107,627,863 weekly downloads
• @babel/preset-react: 20,116,975 weekly downloads
• @types/react: 78,868,943 weekly downloads
• react: 86,477,138 weekly downloads
• typescript: 118,891,595 weekly downloads
• @types/bun: 6,247,166 weekly downloads
• bun-plugin-dtsx: 85,348 weekly downloads
• oven-sh/setup-bun: GitHub Action for workflow automation
• shivammathur/setup-php: GitHub Action for workflow automation

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Buddy 🤖