Skip to content

Bump browserslist from 4.17.0 to 4.29.0 in /app - #1407

Open
dependabot[bot] wants to merge 30 commits into
devfrom
dependabot/npm_and_yarn/app/browserslist-4.28.9
Open

dependabot[bot] wants to merge 30 commits into
devfrom
dependabot/npm_and_yarn/app/browserslist-4.28.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown

Bumps browserslist from 4.17.0 to 4.29.0.

Release notes

Sourced from browserslist's releases.

4.29.0

  • Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

4.28.6

4.28.5

4.28.4

  • Fixed SyntaxError regression of 4.28.3.

4.28.3

  • Fixed baseline query case-insensitivity (by @​swwind).

4.28.2

4.28.1

  • Removed Baseline warning since we have it own warning.

4.27.0

  • Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

4.26.2

  • Fixed baseline-browser-mapping version requirement.

4.26.1

  • Updated Firefox ESR.

4.26.0

4.25.4

... (truncated)

Changelog

Sourced from browserslist's changelog.

4.29.0

  • Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

4.28.8

  • Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

4.28.6

4.28.5

4.28.4

  • Fixed SyntaxError regression of 4.28.3.

4.28.3

  • Fixed baseline query case-insensitivity (by @​swwind).

4.28.2

4.28.1

  • Removed Baseline warning since we have it own warning.

4.48.0

4.27.0

  • Added BROWSERSLIST_TRACE_WARNING environment variable.

... (truncated)

Commits
  • e6dd578 Release 4.29.0 version
  • 8987b7d Typo
  • 47fefe6 Move from actions-up to pnpm
  • 17b1e23 Update dependencies
  • df16b26 Merge pull request #944 from fzlzjerry/fix/757-query-continuations
  • a2673d7 Support query continuations across entries
  • f46a5b7 Merge pull request #942 from agilgur5/fix-docs-typo-security-table
  • 989c8c9 docs: fix typo in table rendering for SECURITY.md
  • 12ed525 Release 4.28.9 version
  • b1d8cf9 Update dependencies
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for browserslist since your current version.


includenull and others added 21 commits June 28, 2026 23:56
- Replace deprecated Electron remote usage with @electron/remote
- Add shared wrappers for remote access and electron-store
- Upgrade Electron and electron-rebuild
- Update Electron runtime and lockfile
- Note `yarn test` in AGENTS.md
- Guard QR generation when transaction data is missing
- Add Electron and Ledger transport mocks for Jest
- Fall back to in-memory store outside Electron
- Bump the Electron runtime and related lockfile dependencies
- Refresh transitive packages for the newer Electron toolchain
- Bump Electron runtime from 22.3.27 to 28.3.3
- Refresh matching Node type and lockfile entries
- Bump Electron to 34.5.8
- Launch main dev script through a wrapper and guard process.mainModule
- Bump Electron runtime and refresh lockfile dependencies
- Bump Electron runtime from 40.10.5
- Refresh lockfile for the new Electron release
Migrates config to the v26 schema: linux.desktop entries nest under
`entry`, and win.publisherName moves into signtoolOptions. Drops the
dead greymass.pfx reference.

Windows packaging can no longer be cross-compiled from macOS —
@electron/rebuild does not support node-hid's pkg-prebuilds binaries.
Documented in AGENTS.md.
`@ledgerhq/hw-transport-node-hid@6.6.0` is TypeScript-compiled to ES5 and
inherits via the `__extends` helper, whose generated constructor calls
`_super.apply(this, arguments)`. It declares its base class as
`@ledgerhq/hw-transport-node-hid-noevents@^6.6.0`, and that caret range had
floated to 6.35.4, which ships a native ES6 `class`. Invoking an ES6 class
via `.apply()` throws, so every connection attempt failed with:

    TypeError: Class constructor TransportNodeHidNoEvents
    cannot be invoked without 'new'

This regressed in 77819d0, which added the node-hid/usb resolutions and
regenerated app/yarn.lock; the base class drifted as a side effect. Ledger
has been broken on this branch since, on all platforms.

The failure also leaked HID handles. `TransportNodeHid.open()` evaluates
`new HID(path)` as an argument before the constructor that throws, so the
opened device was orphaned with no reference and no close(). The leaked
handle blocked the next retry with "cannot open device" until GC reclaimed
it, producing an endless alternation between the two errors.

Upgrade the transport to 6.33.5 so both sides of the inheritance are ES6.
This requires moving the `usb` resolution from 1.7.2 to 2.9.0: 6.33.5's
listenDevices.js uses the usb 2.x named-export API (`usb.usb.on("attach")`),
which does not exist in 1.7.2 where the module *is* the binding. usb 2.9.0
also ships N-API prebuilds for win32-x64 and win32-ia32, removing the
per-arch source compile and surviving future Electron upgrades.

Bound the reconnect loop so a persistent failure no longer retries forever
and keeps the device busy. A renderer-initiated request resets the budget.
Also align before-quit on clearTimeout, matching the setTimeout handle.

Verified on Windows against a Nano X: transport opens and transactions sign.
The suite was written in 2019 and enforced by CircleCI until the npm to yarn
migration broke that config, which then went unnoticed for years. By now 55 of
the 61 files only asserted that components rendered exactly as they did in 2019,
and Jest 24 could no longer parse its own dependencies, so nothing had run in a
long time.

Drops jest, enzyme, react-test-renderer and eslint-plugin-jest along with the
test files, the dead CircleCI config, and the RunTests script no package script
referenced. 221 packages leave the lockfile. @babel/polyfill stays: the main
webpack config and main.dev.js both import it.
The producer and proxy table rows passed the monospace font via a "styles"
prop, which React does not recognise, so the font never applied. Renaming it
to "style" clears the react/no-unknown-property errors and makes those account
names render monospaced as intended.

Index.childContextTypes declared a legacy context type that nothing provided:
there is no getChildContext anywhere, and the persistor is reached through
window.persistor instead. Removing the declaration also retires the last use of
the PropTypes import in that file.

yarn lint now exits 0. The 1878 warnings are unchanged.
Notarization is handled by the hooks: notarize.js notarizes each .app on
afterSign, and staple.js notarizes and staples the disk images on
afterAllArtifactBuild. The built-in path was never configured, so every macOS
build logged "skipped macOS notarization: `notarize` options were unable to be
generated" directly alongside the real signing output.

Setting it to false states that the hooks own notarization and stops a benign
message from reading like a signing failure.
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@dependabot
dependabot Bot changed the base branch from master to dev September 17, 2026 21:50
aaroncox and others added 3 commits September 17, 2026 16:00
Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.17.0 to 4.29.0.
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](browserslist/browserslist@4.17.0...4.29.0)

---
updated-dependencies:
- dependency-name: browserslist
  dependency-version: 4.28.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump browserslist from 4.17.0 to 4.28.9 in /app Bump browserslist from 4.17.0 to 4.29.0 in /app Sep 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/app/browserslist-4.28.9 branch from 8544b78 to a6580ca Compare September 17, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants