fix(deps): update npm major updates (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/preset-env (source)	7.29.7 → 8.0.2
@babel/preset-react (source)	7.29.7 → 8.0.1
eslint-plugin-tailwindcss	3.18.3 → 4.4.0
js-yaml	4.3.2 → 5.4.1
typescript (source)	6.0.3 → 7.0.2
vite-plugin-dts (source)	4.5.4 → 5.0.3
vite-plugin-svgr	4.5.0 → 5.2.0

---

Release Notes

babel/babel (@​babel/preset-env)

v8.0.2

Compare Source

🐛 Bug Fix

• Other
  • #​18083 Use the @babel/core version when asserting version in @babel/standalone (@​nicolo-ribaudo)
• babel-helper-validator-identifier
  • #​18075 fix(identifier): avoid double escaping slash (@​JLHwung)

🏠 Internal

• babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env
  • #​18081 Update @babel/preset-modules and polyfill packages (@​nicolo-ribaudo)

v8.0.1

Compare Source

💥 Breaking Change

• babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone
  • #​18079 Actually remove preset-env's useBuiltIns (@​nicolo-ribaudo)

v8.0.0

Compare Source

👓 Spec Compliance

• babel-core
  • #​18039 perf: Only extract source map comments at the end of the file (@​liuxingbaoyu)

💥 Breaking Change

• babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • #​18069 Fallback to assuming ESM support with modules: auto (@​nicolo-ribaudo)
• babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • #​18036 Remove corejs exports for @babe/runtime-corejs3 (@​liuxingbaoyu)
• babel-parser
  • #​18034 Remove locations: "packed" (@​liuxingbaoyu)

🐛 Bug Fix

• babel-generator
  • #​18046 fix(generator): improve new callee parens check (@​JLHwung)
• babel-plugin-transform-modules-systemjs
  • #​18032 fix(systemjs): support proto as an export name (@​JLHwung)

📝 Documentation

• #​18070 Add EOL date for Babel 7 (end of June 2027) to SECURITY.md (@​nicolo-ribaudo)

🏠 Internal

• #​18018 ci: enforce yarn integrity (@​JLHwung)

🏃‍♀️ Performance

• babel-core
  • #​18039 perf: Only extract source map comments at the end of the file (@​liuxingbaoyu)

francoismassart/eslint-plugin-tailwindcss (eslint-plugin-tailwindcss)

v4.4.0

Compare Source

🚀 Features

• perf: Enhanced linting speed (by Celtian 🙏)

• feat(rule): add enforces-canonical-classname (by rsmple 🙏)

  ⚠️ Only available if you are using Tailwind CSS v4.3.0 or above.

🐞 Fixes

• fix: add import.meta.url to paths in TailwindUtils (by jeremy-code 🙏)
• fix: support for satisfies opeartor in TypeScript (based on PR by rendob 🙏)

v4.3.0

Compare Source

🚀 Features

🌈 Enhanced support for Svelte projects, here are few examples:

• class="flex"
• class:lg:block={true}
• class={{ "block absolute": shown, "size-0 invisible": !shown }}
• class={[faded && 'saturate-0 opacity-50', large && 'scale-200']}
• class={['block absolute', props.class]}

🔍 Minor

• docs: update getting started configuration to use flat config
• docs: changelog, roadmap and a new one time sponsor ❤️

v4.2.0

Compare Source

🚀 Features

New rule important-modifier-suffix: Makes sure the ! important modifier is at the end of the class names. The former ! location (between the modifiers and the class name is deprecated).

v4.1.0

Compare Source

🚀 Features

no-unnecessary-arbitrary-value: Expanded checks to catch and replace redundant arbitrary values (resolves #​366).

💡 What's new: Prior to v4.1.0, this rule only flagged exact string matches between an arbitrary value and a preset. The rule is now smart enough to resolve unit conversions and spacing configurations.

The plugin will now suggest cleaner native alternatives for:

• Native presets: Replaces inset-[1px] with inset-px (previously ignored because px preset is not declared in the config, yet it exists).
• Unitless values: Replaces z-[123] with z-123.
• Spacing-based values: Replaces m-[8px] with m-2 by intelligently parsing your Tailwind v4's configuration (--spacing: 0.25rem; /* 4px */).

🐞 Fixes

• fix: respect the optional ! important modifiers in the fixers

v4.0.6

Compare Source

• fix: false positives with border and divide by no-contradicting-classname rule #​461

v4.0.5

Compare Source

• fix: missing eslint as peer dependency #​463
• fix: enforces-shorthand did not work when prefixed #​462

v4.0.4

Compare Source

• minor: add shadcn ui's cn inside functions default values of the settings
• fix: peer & peer/... are now considered valid classnames

v4.0.3: Tailwind CSS v4

Compare Source

Made for Tailwind CSS v4

Version 4 of the eslint-plugin-tailwindcss is:

• re-written from scratch
• using TypeScript
• Based as much as possible on internal assets of Tailwind CSS:
  • via the prettier-plugin-tailwindcss plugin
  • via tailwind-api-utils
• only compatible with:
  • Tailwind CSS v4.x.x
  • ESLint flat config format
  • Node >= 20.19.0

This version has been made possible thanks to the work of hyoban and his project tailwind-api-utils.

The pre-release versions were tested on our Nx monorepo which uses Next.js, react and offcourse Tailwind CSS 4.

v4.0.2

Compare Source

nodeca/js-yaml (js-yaml)

v5.4.1

Compare Source

v5.4.0

Compare Source

Added

• Added the scalarStyleRules dumper option to customize string formatting.
  See Scalar styling for details.

Changed

• [breaking] Flattened the low-level AST node style representation. Scalar
  and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values;
  explicit tags use the separate tagged property. Alias nodes now contain
  only kind and anchor. This only affects code that directly constructs or
  edits AST nodes.
• [breaking] The sortKeys option was rewritten using AST mutation to avoid
  side effects.
• Reworked scalar style selection. This can change formatting without changing
  loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

• Accept a byte order mark at the start of each document in a stream, #​791.
• Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace,
  including alias and property-only keys, #​786.
• Preserve empty scalar items when converting block sequences to flow style.
• Do not apply the 1024-character simple-key limit to flow mapping keys.
• Count Unicode code points, rather than UTF-16 code units, for the
  1024-character simple-key limit.
• Add an explicit document-end marker after keep-chomped block scalars when
  needed to preserve trailing newlines.

v5.3.0

Compare Source

This release focuses on reworking the documentation and making small
architectural improvements before moving forward.

Added

• Added completely new documentation.
• Exported DUMP_SCHEMA, the default schema used by the dumper.
• Added YAMLException.throwAt() for throwing an error at a source position.

Changed

• Changed flat constant exports to grouped exports: EVENT_ID, SCALAR_STYLE,
  COLLECTION_STYLE, and CHOMPING_MODE, along with their value types. The old
  exports are still preserved, but deprecated.
• Made identify mandatory for custom tag definitions. Use
  identify: () => false for load-only tags.

Deprecated

• Deprecated flat constant exports. Use grouped ones instead.

Removed

• Removed the MERGE_KEY export (not used anymore after last fixes).

Fixed

• Validate << sequence items at merge time, so aliased merge sources are
  checked too.
• Resolve << outside of a mapping key as the plain string '<<', matching
  v4, instead of leaking an internal symbol into the result.

v5.2.3

Compare Source

Fixed

• Prevent prototype fallback when resolving tags and mapping entries, #​782.
• Resolve !!timestamp years 0000-0099 correctly, #​775.
• Preserve implicit null mapping values before document markers and reject
  unpaired mapping event streams, #​784.
• Preserve folded scalar values with tab-indented lines when round-tripping a
  parsed AST through present(); dump() and loading are unaffected, #​780.

v5.2.2

Compare Source

Fixed

• Quote flow scalars where a colon precedes a flow indicator, #​773.

Security

• Avoid exponential parsing time for nested flow sequence pairs.

v5.2.1

Compare Source

Fixed

• Add Map support to !!omap (should work when realMapTag used)

Security

• Remove quadratic complexity from !!omap addItem. Regression from v5
  (usually not critical, because YAML11_SCHEMA is not default anymore).

v5.2.0

Compare Source

Added

• Added maxTotalMergeKeys (10000) loader option to limit the total number of
  keys processed by YAML merge (<<) across one load() / loadAll() call.
• Added maxAliases (-1) loader option to limit the number of YAML aliases per
  document.

Removed

• maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge
  processing.

Fixed

• Round-trip of integers with exponential form (>= 1e21)

v5.1.0

Compare Source

Added

• Collection tags can finalize an incrementally populated carrier into a
  different result value.

Changed

• [breaking] quoteStyle now selects the preferred quote style; use the
  restored forceQuotes option to force quoting non-key strings.

v5.0.0

Compare Source

Added

• Added named exports for schemas, tags, parser events and AST utilities.
• Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution
  rules, and added YAML11_SCHEMA.
• Added realMapTag for lossless mappings with non-string and complex keys.
  Object-based mappings now reject complex keys instead of stringifying them.
• Added dump() transform option for changing the generated AST before
  rendering.
• Added dump() options seqInlineFirst, flowBracketPadding,
  flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and
  tagBeforeAnchor.
• Added formal data layers (events and AST) for modular data pipelines.
  • Added low-level parser (to events), presenter and visitor APIs.
• Added the YAML Test Suite to the
  test set.

Changed

• See the migration guide for upgrade notes.
• Rewritten in TypeScript and reorganized the public API around flat named
  exports.
• Reduced the set of exported schemas:
  • YAML 1.2 schemas: CORE_SCHEMA (loader default), JSON_SCHEMA,
    FAILSAFE_SCHEMA.
  • YAML11_SCHEMA, a combination of all YAML 1.1 tags (YAML 1.1 does not
    specify a schema, only "types").
• load/dump default behaviour is now specified exactly via schemas:
  • load uses CORE_SCHEMA, without !!merge by default.
  • dump uses YAML11_SCHEMA + CORE_SCHEMA for the quoting check, to
    guarantee backward compatibility by default.
• !!set is now loaded as a JavaScript Set.
• Replaced the Type API with a tags API. Similar, but more precise and
  simpler. See examples for details. Tags can be defined via
  defineScalarTag(), defineSequenceTag() and defineMappingTag(), or as a
  spread + override of an existing tag.
• Renamed Schema.extend() to Schema.withTags().
• Expanded YAML 1.2 conformance and improved handling of directives, document
  markers, block keys, multiline scalars, tag syntax and other things.
• load() now throws on empty input instead of returning undefined.
• Moved browser builds to the js-yaml/browser export.
• Deprecated the loadAll signature with an iterator (still works, but is a
  candidate for removal).

Removed

• Removed deprecated safeLoad(), safeLoadAll() and safeDump() exports.
• Removed DEFAULT_SCHEMA and the nested types export.
• Removed loader options onWarning, legacy and listener.
• Removed dumper options styles, replacer, noCompatMode, condenseFlow,
  quotingType and forceQuotes. Renamed noArrayIndent to seqNoIndent.
  Formatting and representation are now configured through presenter options,
  schemas and tag definitions. See migration guide on how to replace.
• Removed support for importing internal files from lib/.

microsoft/TypeScript (typescript)

v7.0.2

Compare Source

qmhc/unplugin-dts (vite-plugin-dts)

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

pd4d10/vite-plugin-svgr (vite-plugin-svgr)

v5.2.0

Compare Source

No significant changes

    View changes on GitHub

v5.1.0

Compare Source

   🐞 Bug Fixes

• Correct OxcTransformOptions type to expose jsx options  -  by @​rivajunior in #​144 (0ca4f)

   🏎 Performance

• Lazy load SVGR dependencies  -  by @​pd4d10 (8aadc)

    View changes on GitHub

v5.0.0

Compare Source

   🚨 Breaking Changes

• Drop vite 2 support and add vite compat tests  -  by @​pd4d10 (d19af)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "before 9am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3c400d0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates toolchain dependencies across apps and packages, primarily focusing on TypeScript and build/type-generation tooling versions.

Changes:

• Bumped typescript to 7.0.2 across multiple workspaces.
• Bumped vite-plugin-dts to 5.0.3 across multiple workspaces.
• Updated select tooling deps (@babel/preset-*, @graphql-codegen/*) to newer major versions.

Reviewed changes

Copilot reviewed 12 out of 13 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
packages/url-state-provider/package.json	Bumps TypeScript and vite-plugin-dts for the package toolchain.
packages/ui-components/package.json	Bumps Babel presets, TypeScript, and vite-plugin-dts for UI component tooling.
packages/template/package.json	Bumps TypeScript and vite-plugin-dts for the template package.
packages/oauth/package.json	Bumps TypeScript and vite-plugin-dts for OAuth package tooling.
packages/messages-provider/package.json	Bumps TypeScript and vite-plugin-dts for provider package tooling.
packages/k8s-client/package.json	Bumps vite-plugin-dts for the client package tooling.
packages/greenhouse-auth-provider/package.json	Bumps TypeScript and vite-plugin-dts for auth provider tooling.
packages/config/package.json	Bumps TypeScript used by the shared config/tooling package.
packages/communicator/package.json	Bumps TypeScript and vite-plugin-dts for communicator package tooling.
apps/template/package.json	Bumps TypeScript for the template app tooling.
apps/heureka/package.json	Bumps GraphQL codegen plugins and TypeScript for the app toolchain.
apps/carbon/package.json	Bumps TypeScript for the app toolchain.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

PR Preview Action v1.8.1
🚀 View preview at https://cloudoperators.github.io/juno/pr-preview/pr-1874/
Built to branch gh-pages at 2026-09-25 21:10 UTC. Preview will be ready when the GitHub Pages deployment is complete.

[KirylSAP]

Heads up: lint-check isn't flaky here — it fails consistently because typescript-eslint@8.67.0 doesn't support TypeScript 7 yet (this PR bumps typescript to 7.0.2). It's a known upstream gap, tracked in typescript-eslint#10940, still open. We just need to wait for that to land before this can go green.