chore(deps): bump the minor-versions group across 5 directories with 49 updates

[dependabot]

Bumps the minor-versions group with 26 updates in the / directory:

Package	From	To
react	19.2.3	19.2.4
@types/react	19.2.7	19.2.14
react-test-renderer	19.2.3	19.2.4
@bloom-housing/ui-seeds	3.1.4	3.4.1
@mapbox/mapbox-sdk	0.13.7	0.16.2
autoprefixer	10.4.20	10.4.27
axios	1.8.3	1.13.6
dayjs	1.11.8	1.11.20
dotenv	17.2.3	17.3.1
mapbox-gl	3.16.0	3.20.0
qs	6.11.2	6.15.0
react-dom	19.2.3	19.2.4
react-google-recaptcha-v3	1.10.1	1.11.0
@babel/core	7.21.4	7.29.0
@babel/preset-env	7.25.7	7.29.0
@testing-library/dom	10.4.0	10.4.1
@testing-library/jest-dom	6.6.3	6.9.1
@testing-library/react	16.2.0	16.3.2
postcss	8.5.3	8.5.8
sass	1.93.3	1.98.0
sass-loader	16.0.6	16.0.7
ts-loader	9.5.2	9.5.4
webpack	5.98.0	5.105.4
swr	2.2.5	2.4.1
@types/mapbox__mapbox-sdk	0.13.11	0.16.4
@google-cloud/translate	9.2.0	9.3.0

Bumps the minor-versions group with 28 updates in the /api directory:

Package	From	To
ts-jest	29.1.1	29.4.6
ts-node	10.9.1	10.9.2
typescript	5.1.6	5.9.3
axios	1.8.3	1.13.6
dayjs	1.11.9	1.11.20
dotenv	17.2.3	17.3.1
qs	6.11.2	6.15.0
ts-loader	9.5.2	9.5.4
webpack	5.98.0	5.105.4
@google-cloud/translate	9.2.0	9.3.0
@aws-sdk/client-s3	3.758.0	3.1009.0
@aws-sdk/lib-storage	3.758.0	3.1009.0
@aws-sdk/s3-request-presigner	3.750.0	3.1009.0
@google-cloud/recaptcha-enterprise	6.3.0	6.4.0
casbin	5.27.1	5.49.0
class-validator	0.14.0	0.15.1
compression	1.7.4	1.8.1
@types/compression	1.7.5	1.8.1
cookie-parser	1.4.6	1.4.7
jsonwebtoken	9.0.2	9.0.3
lodash	4.17.21	4.17.23
passport	0.6.0	0.7.0
reflect-metadata	0.1.13	0.2.2
rxjs	7.8.1	7.8.2
sanitize-html	2.17.0	2.17.1
@types/sanitize-html	2.16.0	2.16.1
swagger-axios-codegen	0.15.12	0.18.1
@types/exceljs	1.3.0	1.3.2

Bumps the minor-versions group with 5 updates in the /shared-helpers directory:

Package	From	To
react	19.2.3	19.2.4
react-test-renderer	19.2.3	19.2.4
@bloom-housing/ui-seeds	3.1.4	3.4.1
react-dom	19.2.3	19.2.4
@testing-library/react	16.3.0	16.3.2

Bumps the minor-versions group with 5 updates in the /sites/partners directory:

Package	From	To
react	19.2.3	19.2.4
@bloom-housing/ui-seeds	3.1.4	3.4.1
@mapbox/mapbox-sdk	0.13.7	0.16.2
react-dom	19.2.3	19.2.4
@types/mapbox__mapbox-sdk	0.13.11	0.16.4

Bumps the minor-versions group with 4 updates in the /sites/public directory: react, @bloom-housing/ui-seeds, @mapbox/mapbox-sdk and react-dom.

Updates react from 19.2.3 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 90ab3f8 Version 19.2.4
• See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.14

Commits

• See full diff in compare view

Updates react-test-renderer from 19.2.3 to 19.2.4

Release notes

Sourced from react-test-renderer's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 90ab3f8 Version 19.2.4
• See full diff in compare view

Updates @bloom-housing/ui-seeds from 3.1.4 to 3.4.1

Release notes

Sourced from @​bloom-housing/ui-seeds's releases.

v3.4.1

3.4.1 (2026-03-03)

Bug Fixes

• tab nav focus ring (#151) (8ae717e)

v3.4.0

3.4.0 (2026-03-03)

Features

• tabs as nav (#149) (5413c3b)

v3.3.2

3.3.2 (2026-03-02)

Bug Fixes

• heading type issue (#150) (4588309)

v3.3.1

3.3.1 (2026-02-04)

Bug Fixes

• rtl loading spinner (#147) (8278002)

v3.3.0

3.3.0 (2026-01-22)

Features

• spacer classes for zero release (#146) (57ba198)

Commits

• 8ae717e fix: tab nav focus ring (#151)
• 5413c3b feat: tabs as nav (#149)
• 4588309 fix: heading type issue (#150)
• 8278002 fix: rtl loading spinner (#147)
• 57ba198 feat: spacer classes for zero release (#146)
• da5a17d feat: spacer classes for zero (#145)
• 868accd fix: FieldValue children typing (#137)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by emilyjablonski, a new releaser for @​bloom-housing/ui-seeds since your current version.

Updates @heroicons/react from 2.1.1 to 2.2.0

Release notes

Sourced from @​heroicons/react's releases.

v2.2.0

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

v2.1.5

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

v2.1.4

Fixed

• Improve tree-shakability of React package (#1192)

v2.1.3

• Improve project READMEs (#1152)

v2.1.2

• Include license file with published packages (#1151)

Changelog

Sourced from @​heroicons/react's changelog.

[2.2.0] - 2024-11-18

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

[2.1.5] - 2024-07-10

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

[2.1.4] - 2024-06-17

Fixed

• Improve tree-shakability of React package (#1192)

[2.1.3] - 2024-03-22

• Improve project READMEs (#1152)

[2.1.2] - 2024-03-22

• Include license file with published packages (#1151)

Commits

• 0435d4c 2.2.0
• f327cbe Add React 19 support (#1247)
• 56c073c Update changelog
• 64e2368 Remove clip-path from 20/arrow-left-circle (#1211)
• ad0ad1f 2.1.5
• 58d511e Add new icons (#1204)
• c1b192b 2.1.4
• e2e487f Make sure calls to forwardRef are marked as pure (#1192)
• cafc7d6 use size-* instead of w-* h-* (#1182)
• 9a17872 Update README.md (#1167)
• Additional commits viewable in compare view

Updates @mapbox/mapbox-sdk from 0.13.7 to 0.16.2

Release notes

Sourced from @​mapbox/mapbox-sdk's releases.

v0.16.2

0.16.2

• Addressed security issues CVE-2025-7783 and CVE-2022-25881

v0.16.1

0.16.1

• Add: Add session_token as optional parameter in the geocoding services

v0.15.16

0.15.6

• Add: Add secondary_address to list of accepted types for Geocoding v6

v0.15.4

No release notes provided.

Changelog

Sourced from @​mapbox/mapbox-sdk's changelog.

Changelog

0.16.1

• Add: Add session_token as optional parameter in the geocoding services

0.16.0

• Add: Add depart_at as optional parameter in the isochrone service

0.15.6

• Fix: Add secondary_address to list of accepted types for Geocoding v6

0.15.5

• Fix: Rename directions api annotation option max_speed to maxspeed #480

0.15.4

• Fix: Set body = '' for POST, PUT, PATCH, and DELETE requests that do not have a body #479

0.15.3

• Fix: Maximum Optimization V1 request size limits should not be enforced client-side

0.15.2

• Add: Add depart_at and arrive_by as optional parameters in the directions service

0.15.1

• Add: Add driving-traffic as a profile option in the isochrone service

0.15.0

• Add: Geocoding v6 service

0.14.0

• Add: Config for Tokens#createToken and Tokens#updateToken can now include the allowedApplications property.

Commits

• 8b8dc60 Merge pull request #502 from mapbox/max/CVE-2025-7783
• f897e42 [CVE-2025-7783] Upgrade form-data
• 12f5a42 Merge pull request #493 from mapbox/geocoding-sessionid
• 0e19cc9 docs, bump package version
• ae00cc5 change to token
• 19b012d add sessionId param to geocoding services
• 41c7da5 0.16.0
• d5a34be prepare v0.16.0
• eb8e804 Merge pull request #473 from mapbox/add-depart-at
• 1b5c24b Merge pull request #483 from mapbox/geocoding-v6-secondary-address
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by mbx-npm-07-production, a new releaser for @​mapbox/mapbox-sdk since your current version.

Updates autoprefixer from 10.4.20 to 10.4.27

Release notes

Sourced from autoprefixer's releases.

10.4.27

• Removed development key from package.json.

10.4.26

• Reduced package size.

10.4.25

• Fixed broken gradients on CSS Custom Properties (by @​serger777).

10.4.24

• Made Autoprefixer a little faster (by @​Cherry).

10.4.23

• Reduced dependencies (by @​hyperz111).

10.4.22

• Fixed stretch prefixes on new Can I Use database.
• Updated fraction.js.

10.4.21

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

Changelog

Sourced from autoprefixer's changelog.

10.4.27

• Removed development key from package.json.

10.4.26

• Reduced package size.

10.4.25

• Fixed broken gradients on CSS Custom Properties (by @​serger777).

10.4.24

• Made Autoprefixer a little faster (by @​Cherry).

10.4.23

• Reduced dependencies (by @​hyperz111).

10.4.22

• Fixed stretch prefixes on new Can I Use database.
• Updated fraction.js.

10.4.21

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

Commits

• 360f2d9 Release 10.4.27 version
• ab5260c Update clean-publish
• 09e9dd1 Release 10.4.26 version
• ec75540 Ignore local patches
• 59601b8 Update c8 and clean-publish
• 06ea988 Release 10.4.25 version
• 47d8a5b Update dependencies and fix Node.js 25
• 51c596e Add Node.js 25 and 24 to CI
• 5239823 Fix CSS variables in gradients (#1515) (#1544)
• 36692c2 Release 10.4.24 version
• Additional commits viewable in compare view

Updates axios from 1.8.3 to 1.13.6

Release notes

Sourced from axios's releases.

v1.13.6

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

• Breaking Changes: None identified in this release.
• Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

• React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @​moh3n9595 for the initial implementation. (#5764)
• Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#7385)

🐛 Bug Fixes

• Environment Compatibility:

  • Fixed module exports for React Native and Browserify environments. (#7386)
  • Added safe FormData detection for the WeChat Mini Program environment. (#7324)

• Error Handling:

  • AxiosError.message is now correctly enumerable. (#7392)
  • AxiosError.from now correctly copies the status property from the source error, ensuring better error propagation. (#7403)

🔧 Maintenance & Chores

• Dependencies: Updated the development_dependencies group (5 updates). (#7432)
• Infrastructure: Migrated @​rollup/plugin-babel from v5.3.1 to v6.1.0. (#7424)
• Documentation: Added missing JSDoc comments to utilities. (#7427)

🌟 New Contributors

We are thrilled to welcome our new contributors! Thank you for helping improve the project:

• @​Gudahtt (#7386)
• @​ybbus (#7392)
• @​Shiwaangee (#7324)
• @​skrtheboss (#7403)
• @​Janaka66 (#7427)
• @​moh3n9595 (#5764)
• @​digital-wizard48 (#7424)

Full Changelog: v1.13.5...v1.13.6

v1.13.5

Release 1.13.5

Highlights

• Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
• Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

• Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

1.13.3 (2026-01-20)

Bug Fixes

• http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
• interceptor: handle the error in the same interceptor (#6269) (5945e40)
• main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
• package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
• silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
• turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
• types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
• types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
• unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

• add undefined as a value in AxiosRequestConfig (#5560) (095033c)
• add automatic minor and patch upgrades to dependabot (#6053) (65a7584)
• add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)
• added copilot instructions (3f83143)
• compatibility with frozen prototypes (#6265) (860e033)
• enhance pipeFileToResponse with error handling (#7169) (88d7884)
• types: Intellisense for string literals in a widened union (#6134) (f73474d), closes microsoft/TypeScript#33471

Reverts

• Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
• deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

• Ashvin Tiwari
• Nikunj Mochi
• Anchal Singh
• jasonsaayman
• Julian Dax
• Akash Dhar Dubey
• Madhumita
• Tackoil
• Justin Dhillon
• Rudransh
• WuMingDao
• codenomnom
• Nandan Acharya
• Eric Dubé
• Tibor Pilz
• Gabriel Quaresma
• Turadg Aleahmad

... (truncated)

Commits

• 7108c88 chore(release): prepare release 1.13.6 (#7446)
• 20a0ba3 refactor(deps): migrate @​rollup/plugin-babel from v5.3.1 to v6.1.0 (#7424)
• 885b4af feat: support react native blob objects (#5764)
• 00d97b9 docs(utils): add missing JSDoc comments (#7427)
• 9712548 chore(deps-dev): bump the development_dependencies group across 1 directory w...
• d51accb fix(core): copy status from source error in AxiosError.from (#7403)
• 3e30bbf chore: fix publish to only run on v1 tags
• 672491d fix: safe FormData detection for WeChat Mini Program (#7306) (#7324)
• 822e3e4 fix: make AxiosError.message property enumerable (#7392)
• ef3711d feat: implement prettier and fix all issues (#7385)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.

Updates dayjs from 1.11.8 to 1.11.20

Release notes

Sourced from dayjs's releases.

v1.11.20

1.11.20 (2026-03-12)

Bug Fixes

• Update locale km.js to support meridiem (#3017) (9d2b6a1)
• update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

v1.11.19

1.11.19 (2025-10-31)

Bug Fixes

• added usage warnings for diff + updated unit tests (#2948) (269a7a9)
• dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
• replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
• Updated Belarusian locale with relative time (#2656) (1d8746c)

v1.11.18

1.11.18 (2025-08-30)

Bug Fixes

• error semantic-release dependency (8cfb313)

v1.11.17

1.11.17 (2025-08-29)

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

v1.11.16

1.11.16 (2025-08-29)

Bug Fixes

• test release workflow (no code changes) (c38c428)

v1.11.15

1.11.15 (2025-08-28)

Bug Fixes

... (truncated)

Changelog

Sourced from dayjs's changelog.

1.11.20 (2026-03-12)

Bug Fixes

• Update locale km.js to support meridiem (#3017) (9d2b6a1)
• update updateLocale plugin to merge nested object properties instead of replacing (#3012) (99691c5), closes #1118

1.11.19 (2025-10-31)

Bug Fixes

• added usage warnings for diff + updated unit tests (#2948) (269a7a9)
• dont instantiate regexes within ar locale functions to avoid performance overhead (#2898) (af5e9f0)
• replace italian locale "un' ora fa" with "un'ora fa", add tests for it (#2930) (9e9f76c)
• Updated Belarusian locale with relative time (#2656) (1d8746c)

1.11.18 (2025-08-30)

Bug Fixes

• error semantic-release dependency (8cfb313)

1.11.17 (2025-08-29)

Bug Fixes

• [en-AU] locale use the same ordinal as moment (#2878) (1b95ecd)

1.11.16 (2025-08-29)

Bug Fixes

• test release workflow (no code changes) (c38c428)

1.11.15 (2025-08-28)

Bug Fixes

• Fix misspellings in Irish or Irish Gaelic [ga] (#2861) (9c14a42)

1.11.14 (2025-08-27)

Bug Fixes

... (truncated)

Commits

• af6e1f8 chore(release): 1.11.20 [skip ci]
• 82babd6 D2M (#3018)
• bbe4ab1 chore: fix lint error
• 99691c5 fix: update updateLocale plugin to merge nested object properties instead of ...
• 9d2b6a1 fix: Update locale km.js to support meridiem (#3017)
• acf21cd chore: update doc
• 55a64e1 chore: update doc
• 807face chore: update doc
• 54f4470 chore: update doc
• 9ea23c7 chore: update doc
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for dayjs since your current version.

Updates dotenv from 17.2.3 to 17.3.1

Changelog

Sourced from dotenv's changelog.

17.3.1 (2026-02-12)

Changed

• Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

• Add a new README section on dotenv’s approach to the agentic future.

Changed

• Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

• Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)

• Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

Commits

• 7bc16a4 17.3.1
• 27303fd update README-es
• 6379eb2 update README
• b6d7339 fix spelling
• 5febe35 17.3.0
• f61f383 changelog 🪵
• dec94ad update README
• 4856950 update README
• 6351887 update README
• 23bd017 update README
• Additional commits viewable in compare view

Updates mapbox-gl from 3.16.0 to 3.20.0

Release notes

Sourced from mapbox-gl's releases.

v3.20.0

Features and improvements ✨

• Improve memory efficiency by sharing image resources for symbol layers across map tiles.

Bug fixes 🐞

• Fix icons disappearing when changing the color theme.
• Fix display of symbols added via the Appearances runtime API.

v3.20.0-rc.2

Bug fixes 🐞

• Fix icons disappearing when changing the color theme.

v3.20.0-rc.1

Features and improvements ✨

• Improve memory efficiency by sharing image resources for symbol layers across map tiles.

Bug fixes 🐞

• Fix display of symbols added via the Appearances runtime API.

v3.19.1

Bug fixes 🐞

• Removed the unused @types/mapbox__point-geometry package that was causing some Typescript builds to fail

v3.19.0

3.19.0

Features and improvements ✨

• Promote elevated lines properties to stable: line-z-offset and line-elevation-reference.
• Add experimental text-size-scale-range and icon-size-scale-range style properties.
• Add experimental Map#setScaleFactor/Map#getScaleFactor methods for controlling symbol layer scaling.
• Apply global scale factor to images within text-field.
• Fix z-fighting for elevated raster layers.
• Add raster-elevation-reference paint property to elevate raster layers relative to ground instead of sea level.
• Add line-elevation-ground-scale layout property to scale elevated lines with terrain exaggeration.
• Use native async/await when loading models. Note: Please ensure GL JS is excluded from transpilation in your build setup.
• Explicitly state minimum supported browser versions in browserslist.
• Support pitch and distance expressions in filters.
• Support incremental updates when using setFeatureState.
• Add experimental Map#setNearClipOffset/Map#getNearClipOffset methods to control the near clip offset when ortohographic projections are used.

Bug fixes 🐞

• Fix RasterArrayTileSource#reload() not working correctly.

... (truncated)

Changelog

Sourced from mapbox-gl's changelog.

3.20.0

Features and improvements ✨

• Improve memory efficiency by sharing image resources for symbol layers across map tiles.

Bug fixes 🐞

• Fix icons disappearing when changing the color theme.
• Fix display of symbols added via the Appearances runtime API.

3.19.1

Bug fixes 🐞

• Removed the unused @types/mapbox__point-geometry package that was causing some Typescript builds to fail.

3.19.0

Features and improvements ✨

• Promote elevated lines properties to stable: line-z-offset and line-elevation-reference.
• Add experimental text-size-scale-range and icon-size-scale-range style properties.
• Add experimental Map#setScaleFactor/Map#getScaleFactor methods for controlling symbol layer scaling.
• Apply global scale factor to images within text-field.
• Fix z-fighting for elevated raster layers.
• Add raster-elevation-reference paint property to elevate raster layers relative to ground instead of sea level.
• Add line-elevation-ground-scale layout property to scale elevated lines with terrain exaggeration.
• Use native async/await when loading models. Note: Please ensure GL JS is excluded from transpilation in your build setup.
• Explicitly state minimum supported browser versions in browserslist.
• Support pitch and distance expressions in filters.
• Support incremental updates when using setFeatureState.
• Add experimental Map#setNearClipOffset/Map#getNearClipOffset methods to control the near clip offset when ortohographic projections are used.

Bug fixes 🐞

• Fix RasterArrayTileSource#reload() not working correctly.
• Add request cancellation support to the ModelSource.
• Fix flickering of aliased thin lines.
• Fix elevated line bevel join artifacts at sharp corners.
• Fix regressions in NavigationControl.
• Fix namespace conflicts in different featuresets' selectors.
• Recalculate layers with visibility: none in case properties were changed.
• Fix bug in border update logic of fill-extrusion layer, overriding clip layer's behaviour.
• Fix empty tiles on non-integer maxZoom when terrain was used.
• Fix prototype pollution via Style JSON.

3.18.1

Features and improvements ✨

... (truncated)

Commits

• 6ff7eb9 v3.20.0
• 466eb5f Replace st with http-server
• 1b7efd1 Apply cutout on viewport aligned background layer
• 72a40b8 [MAPSPERF-120] Fix failing render tests for procedural buildings (Vulkan) (in...
• 576b2c0 Pick drawShadowAfterLayer also based on slots
• a72e851 Add test for shadow-draw-before-layer using slot
• a17bcb0 Change render tests result template
• 67f936d Add strictNullChecks allowlist and enforcement
• 148d7e1 Bump size-limit from 12.0.0 to 12.0.1 (internal-10843)
• 5d15a89 Bump babel-loader from 10.0.0 to 10.1.0 (internal-10848)
• Additional commits viewable in compare view

Updates qs from 6.11.2 to 6.15.0

Changelog

Sourced from qs's changelog.

6.15.0

• [New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#425, #122)
• [Fix] duplicates option should not apply to bracket notation keys (#514)

6.14.2

• [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
• [Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
• [Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)
• [Fix] pars...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.