Chore(deps): Bump the node-minor-patch group across 3 directories with 13 updates

[dependabot]

Bumps the node-minor-patch group with 6 updates in the /backend/compact-connect-ui-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.11.0	2.32.0
@aws-sdk/client-dynamodb	3.705.0	3.1023.0
@aws-sdk/client-s3	3.705.0	3.1023.0
@aws-sdk/util-dynamodb	3.705.0	3.996.2
esbuild	0.24.0	0.28.0
mocha	11.0.1	11.7.5

Bumps the node-minor-patch group with 11 updates in the /backend/compact-connect/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.30.2	2.32.0
@aws-sdk/client-dynamodb	3.985.0	3.1023.0
@aws-sdk/client-s3	3.985.0	3.1023.0
@aws-sdk/util-dynamodb	3.985.0	3.996.2
esbuild	0.24.0	0.28.0
@aws-sdk/client-sesv2	3.985.0	3.1023.0
@csg-org/email-builder	0.0.12	0.0.13
@types/aws-lambda	8.10.145	8.10.161
@typescript-eslint/eslint-plugin	8.54.0	8.58.0
@typescript-eslint/parser	8.54.0	8.58.0
ts-jest	29.4.6	29.4.9

Bumps the node-minor-patch group with 12 updates in the /backend/cosmetology-app/lambdas/nodejs directory:

Package	From	To
@aws-lambda-powertools/logger	2.30.2	2.32.0
@aws-sdk/client-dynamodb	3.985.0	3.1023.0
@aws-sdk/client-s3	3.985.0	3.1023.0
@aws-sdk/util-dynamodb	3.985.0	3.996.2
esbuild	0.24.0	0.28.0
@aws-sdk/client-sesv2	3.985.0	3.1023.0
@csg-org/email-builder	0.0.12	0.0.13
@types/aws-lambda	8.10.145	8.10.161
@types/nodemailer	7.0.9	7.0.11
@typescript-eslint/eslint-plugin	8.54.0	8.58.0
@typescript-eslint/parser	8.54.0	8.58.0
ts-jest	29.4.6	29.4.9

Updates @aws-lambda-powertools/logger from 2.11.0 to 2.32.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.32.0

Summary

In this release, we are pleased to announce a new utility for interacting with the Lambda Metadata Service in the commons package, allowing you to easily retrieve information about the Lambda function, such as the Availability Zone ID.

In the HTTP event handler, we have delivered two much requested features: a type-safe Store API, letting you share state between middleware and route handlers with full type safety, and request and response validation, so you can enforce data contracts at your API boundary, eliminating manual parsing and type assertion code.

We've also fixed a bug where the Kafka consumer would throw when processing tombstone events with undefined values.

⭐ Congratulations to @​haslers for their first PR merged in the project 🎉

Lambda Metadata Service

A new getMetadata() utility in the commons package fetches metadata from the AWS Lambda Metadata endpoint. The utility automatically returns an empty object outside of Lambda, so your code works seamlessly in local development and testing.

import { getMetadata } from '@aws-lambda-powertools/commons/utils/metadata';
import { Logger } from '@aws-lambda-powertools/logger';
const logger = new Logger({ serviceName: 'serverlessAirline' });
const metadata = await getMetadata();
export const handler = async () => {
const { AvailabilityZoneID: azId } = metadata;
logger.appendKeys({ azId });
};

Type-safe Store API

The HTTP event handler now includes a Store API that provides type-safe, scoped state management for route handlers with two built-in storage scopes:

• Request store — per-invocation state (set in middleware, read in handlers). Cleared automatically between requests.
• Shared store — router-scoped state (set at cold start, read everywhere). Persists across invocations.

import { Router } from '@aws-lambda-powertools/event-handler/http';
import type { Context } from 'aws-lambda';
type AppEnv = {
store: {
request: { userId: string; isAdmin: boolean };
shared: { db: { query: (sql: string) => Promise<unknown> } };
};
};
const app = new Router<AppEnv>();
app.shared.set('db', createDbClient());
</tr></table>

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.32.0 (2026-03-19)

Features

• commons add Lambda Metadata Service support (#5109) (46ffc2a)
• commons add Lambda Metadata Service support (#5106) (bdfa583)
• event-handler add type-safe Store API for request and shared state (#5081) (03034db)
• event-handler add validation support for REST router (#4736) (3617c8c)

Maintenance

• commons bump @​aws/lambda-invoke-store from 0.2.3 to 0.2.4 (#5089) (fe519ab)
• logger bump @​aws/lambda-invoke-store from 0.2.3 to 0.2.4 (#5089) (fe519ab)
• metrics bump @​aws/lambda-invoke-store from 0.2.3 to 0.2.4 (#5089) (fe519ab)
• batch bump @​aws/lambda-invoke-store from 0.2.3 to 0.2.4 (#5089) (fe519ab)
• validation bump ajv from 8.17.1 to 8.18.0 (#5021) (a7791e1)

Bug Fixes

• event-handler add overloads to route() for typed validation context (#5052) (dae12e4)
• event-handler default error handler returns a web Response correctly (#5024) (f8100e8)
• kafka handle tombstone events without value (#5017) (79553c9)

2.31.0 (2026-02-10)

Features

• metrics return metrics instance from metrics functions (#4930) (e7aa2e2)
• parameters pass underlying SDK error as cause to GetParameterError (#4936) (b3499db)
• event-handler add tracer middleware for HTTP routes (#4982) (8be6157)

Bug Fixes

• event-handler handle set-cookie header values with multiple attributes (#4990) (42317fe)
• kafka handle tombstone events (#4991) (04c3236)

2.30.2 (2026-01-12)

Features

• logger add tenantId to logger default properties (#4931) (2e3e867)

Maintenance

• batch remove invoke store global namespace workaround (#4932) (8e93ec3)

2.30.1 (2026-01-06)

... (truncated)

Commits

• 0abf2f0 chore(ci): bump version to 2.32.0 (#5112)
• 3677abc chore(ci): temporarily disable me-central-1 deployments (#5111)
• 46ffc2a feat(commons): add Lambda Metadata Service support (#5109)
• f1dc056 revert: feat(commons): add Lambda Metadata Service support (#5106) (#5107)
• e49984d chore(deps): bump valibot from 1.2.0 to 1.3.0 (#5101)
• 0cc6b0a chore(deps-dev): bump @​biomejs/biome from 2.4.6 to 2.4.7 (#5097)
• 4e3812b chore(deps): bump release-drafter/release-drafter from 7.0.0 to 7.1.0 (#5104)
• bdfa583 feat(commons): add Lambda Metadata Service support (#5106)
• 03034db feat(event-handler): add type-safe Store API for request and shared state (#...
• a72f66c chore(deps): bump release-drafter/release-drafter from 6.4.0 to 7.0.0 (#5095)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​aws-lambda-powertools/logger since your current version.

Updates @aws-sdk/client-dynamodb from 3.705.0 to 3.1023.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.1023.0

3.1023.0(2026-04-02)

Documentation Changes

• client-geo-places: This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations (f60237d7)

New Features

• clients: update client endpoints as of 2026-04-02 (b5ffded0)
• client-gamelift: Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. (9eb2723f)
• client-connect: Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. (69be1448)
• client-bedrock-data-automation: Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projects (b7560ab1)
• client-pricing: This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. (f3944601)
• client-cloudwatch: CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. (c34638a1)
• client-bedrock-agentcore-control: Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (3bf4e650)
• client-bedrock-runtime: Relax ToolUseId pattern to allow dots and colons (2837c477)
• client-appstream: Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. (3644b4c1)
• client-cloudwatch-logs: We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. (d3d6f2bb)
• client-deadline: AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. (522c454c)

---

For list of updated packages, view updated-packages.md in assets-3.1023.0.zip

v3.1022.0

3.1022.0(2026-04-01)

Chores

• add additional text to CONTRIBUTING.md (#7909) (02ff5d7c)

New Features

• client-elasticsearch-service: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions (4819301b)
• client-medical-imaging: Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. (af90be39)
• client-opensearch: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions (3173ac0b)
• client-bedrock-agentcore: Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. (a4d1169c)
• client-bedrock-agentcore-control: Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints (de642669)
• client-ecs: Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. (244432f2)
• client-elasticache: Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. (67fd75ea)
• client-bedrock: Adds support for Bedrock Batch Inference Job Progress Monitoring (4f7aa9cf)
• client-geo-routes: This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. (fc9dd509)

Tests

• endpoints: migrate from jest to vitest (#7908) (7ed15be1)
• increase vitest hook timeouts in e2e (#7910) (13186021)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.1023.0 (2026-04-02)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1022.0 (2026-04-01)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1021.0 (2026-03-31)

Bug Fixes

• codegen: sync for adaptive retry throttling detection fix (#7905) (03f108d)

3.1020.0 (2026-03-30)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1019.0 (2026-03-27)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.1018.0 (2026-03-26)

Note: Version bump only for package @​aws-sdk/client-dynamodb

... (truncated)

Commits

• 34e7b07 Publish v3.1023.0
• e7e636a Publish v3.1022.0
• 86db170 Publish v3.1021.0
• 03f108d fix(codegen): sync for adaptive retry throttling detection fix (#7905)
• 15cfc71 Publish v3.1020.0
• c702a75 chore(codegen): update smithy package versions (#7903)
• 7f8c031 chore(codegen): differentiate type imports (#7897)
• a84cde6 Publish v3.1019.0
• e35edfc chore(codegen): import from core submodules instead of root (#7896)
• a3a34e3 Publish v3.1018.0
• Additional commits viewable in compare view

Updates @aws-sdk/client-s3 from 3.705.0 to 3.1023.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1023.0

3.1023.0(2026-04-02)

Documentation Changes

• client-geo-places: This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations (f60237d7)

New Features

• clients: update client endpoints as of 2026-04-02 (b5ffded0)
• client-gamelift: Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. (9eb2723f)
• client-connect: Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. (69be1448)
• client-bedrock-data-automation: Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projects (b7560ab1)
• client-pricing: This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. (f3944601)
• client-cloudwatch: CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. (c34638a1)
• client-bedrock-agentcore-control: Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. (3bf4e650)
• client-bedrock-runtime: Relax ToolUseId pattern to allow dots and colons (2837c477)
• client-appstream: Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. (3644b4c1)
• client-cloudwatch-logs: We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. (d3d6f2bb)
• client-deadline: AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. (522c454c)

---

For list of updated packages, view updated-packages.md in assets-3.1023.0.zip

v3.1022.0

3.1022.0(2026-04-01)

Chores

• add additional text to CONTRIBUTING.md (#7909) (02ff5d7c)

New Features

• client-elasticsearch-service: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions (4819301b)
• client-medical-imaging: Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. (af90be39)
• client-opensearch: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions (3173ac0b)
• client-bedrock-agentcore: Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. (a4d1169c)
• client-bedrock-agentcore-control: Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints (de642669)
• client-ecs: Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. (244432f2)
• client-elasticache: Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. (67fd75ea)
• client-bedrock: Adds support for Bedrock Batch Inference Job Progress Monitoring (4f7aa9cf)
• client-geo-routes: This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. (fc9dd509)

Tests

• endpoints: migrate from jest to vitest (#7908) (7ed15be1)
• increase vitest hook timeouts in e2e (#7910) (13186021)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1023.0 (2026-04-02)

Note: Version bump only for package @​aws-sdk/client-s3

3.1022.0 (2026-04-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1021.0 (2026-03-31)

Bug Fixes

• codegen: sync for adaptive retry throttling detection fix (#7905) (03f108d)

Features

• client-s3: Add Bucket Metrics configuration support to directory buckets (67ff7cc)

3.1020.0 (2026-03-30)

Note: Version bump only for package @​aws-sdk/client-s3

3.1019.0 (2026-03-27)

Note: Version bump only for package @​aws-sdk/client-s3

3.1018.0 (2026-03-26)

... (truncated)

Commits

• 34e7b07 Publish v3.1023.0
• e7e636a Publish v3.1022.0
• 86db170 Publish v3.1021.0
• 67ff7cc feat(client-s3): Add Bucket Metrics configuration support to directory buckets
• 03f108d fix(codegen): sync for adaptive retry throttling detection fix (#7905)
• 15cfc71 Publish v3.1020.0
• c702a75 chore(codegen): update smithy package versions (#7903)
• 7f8c031 chore(codegen): differentiate type imports (#7897)
• a84cde6 Publish v3.1019.0
• e35edfc chore(codegen): import from core submodules instead of root (#7896)
• Additional commits viewable in compare view

Updates @aws-sdk/util-dynamodb from 3.705.0 to 3.996.2

Release notes

Sourced from @​aws-sdk/util-dynamodb's releases.

v3.996.0

3.996.0(2026-02-23)

Chores

• build:
  • remove redundant client codegen test (#7761) (58b80de0)
  • disable snapshot write/compare (#7760) (4fadf483)

Documentation Changes

• client-controlcatalog: Updated ExemptedPrincipalArns parameter documentation for improved accuracy (dd772c6d)

New Features

• clients: update client endpoints as of 2026-02-23 (02d83401)
• client-wickr: AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. (750b4d86)
• client-bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. (3fe66102)
• client-dynamodb: This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. (8e185cb4)
• client-quicksight: Adds support for SEMISTRUCT to InputColumn Type (581e9ea9)
• client-connectcases: SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. (21ae04f9)
• client-mediatailor: Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. (3068c8ee)
• client-datazone: Add workflow properties support to connections APIs (b76f82b3)

Bug Fixes

• core: handle empty error response body in AwsQuery protocol deserialization (#7766) (7d973147)
• scripts: disable Rollup externalLiveBindings to fix Jest auto-mocking (#7767) (95d1cc6c)
• protocols: handle missing error.Error in queryCompat mode (#7758) (15a27f99)

Other Changes

• build: revert - run partial package build prior to snapshot-write (#7768)" (#7775) (fb08e5f8)

Tests

• build: run partial package build prior to snapshot-write (#7768) (ce3811c8)
• clients: add snapshot tests (#7755) (6a275c28)

---

For list of updated packages, view updated-packages.md in assets-3.996.0.zip

v3.995.0

3.995.0(2026-02-20)

Chores

• codegen: bump codegen version to 0.45.0 (#7752) (3c93f8ab)

... (truncated)

Commits

• See full diff in compare view

Updates esbuild from 0.24.0 to 0.28.0

Release notes

Sourced from esbuild's releases.

v0.28.0

• Add support for with { type: 'text' } imports (#4435)

  The import text proposal has reached stage 3 in the TC39 process, which means that it's recommended for implementation. It has also already been implemented by Deno and Bun. So with this release, esbuild also adds support for it. This behaves exactly the same as esbuild's existing text loader. Here's an example:

  import string from './example.txt' with { type: 'text' }
  console.log(string)

• Add integrity checks to fallback download path (#4343)

  Installing esbuild via npm is somewhat complicated with several different edge cases (see esbuild's documentation for details). If the regular installation of esbuild's platform-specific package fails, esbuild's install script attempts to download the platform-specific package itself (first with the npm command, and then with a HTTP request to registry.npmjs.org as a last resort).

  This last resort path previously didn't have any integrity checks. With this release, esbuild will now verify that the hash of the downloaded binary matches the expected hash for the current release. This means the hashes for all of esbuild's platform-specific binary packages will now be embedded in the top-level esbuild package. Hopefully this should work without any problems. But just in case, this change is being done as a breaking change release.

• Update the Go compiler from 1.25.7 to 1.26.1

  This upgrade should not affect anything. However, there have been some significant internal changes to the Go compiler, so esbuild could potentially behave differently in certain edge cases:

  • It now uses the new garbage collector that comes with Go 1.26.
  • The Go compiler is now more aggressive with allocating memory on the stack.
  • The executable format that the Go linker uses has undergone several changes.
  • The WebAssembly build now unconditionally makes use of the sign extension and non-trapping floating-point to integer conversion instructions.

  You can read the Go 1.26 release notes for more information.

v0.27.7

• Fix lowering of define semantics for TypeScript parameter properties (#4421)

  The previous release incorrectly generated class fields for TypeScript parameter properties even when the configured target environment does not support class fields. With this release, the generated class fields will now be correctly lowered in this case:

  // Original code
  class Foo {
    constructor(public x = 1) {}
    y = 2
  }
  // Old output (with --loader=ts --target=es2021)
  class Foo {
  constructor(x = 1) {
  this.x = x;
  __publicField(this, "y", 2);
  }
  x;
  }
  // New output (with --loader=ts --target=es2021)
  class Foo {

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

• Fix regression with --define and import.meta (#4010, #4012, #4013)

  The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

  This fix was contributed by @​sapphi-red.

0.24.1

• Allow es2024 as a target in tsconfig.json (#4004)

  TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

  {
    "compilerOptions": {
      "target": "ES2024"
    }
  }

  As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

  This fix was contributed by @​billyjanitsch.

• Allow automatic semicolon insertion after get/set

  This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

  class Foo {
    get
    *x() {}
    set
    *y() {}
  }

  The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

• Allow quoted property names in --define and --pure (#4008)

  The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits

• 6a794df publish 0.28.0 to npm
• 64ee0ea fix #4435: support with { type: text } imports
• ef65aee fix sort order in snapshots_packagejson.txt
• 1a26a8e try to fix test-old-ts, also shuffle CI tasks
• 556ce6c use '' instead of null to omit build hashes
• 8e675a8 ci: allow missing binary hashes for tests
• 7067763 Reapply "update go 1.25.7 => 1.26.1"
• 39473a9 fix #4343: integrity check for binary download
• 2025c9f publish 0.27.7 to npm
• c6b586e fix typo in Makefile for @esbuild/win32-x64
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Updates mocha from 11.0.1 to 11.7.5

Release notes

Sourced from mocha's releases.

v11.7.5

11.7.5 (2025-11-04)

🩹 Fixes

• swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

• run tests on PRs for and pushes to v11.x (#5525) (8b21b38)
• setup release-please for v11 (#5522) (663fff4)

v11.7.4

11.7.4 (2025-10-01)

🩹 Fixes

• watch mode using chokidar v4 (#5379) (c2667c3)

📚 Documentation

• migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

• remove trailing spaces (#5475) (7f68e5c)

v11.7.3

11.7.3 (2025-09-30)

🩹 Fixes

• use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

• add security escalation policy (#5466) (4122c7d)
• fix duplicate global leak documentation (#5461) (1164b9d)
• migrate third party UIs wiki page to docs (#5434) (6654704)
• update maintainer release notes for release-please (#5453) (185ae1e)

🤖 Automation

... (truncated)

Changelog

Sourced from mocha's changelog.

11.7.5 (2025-11-04)

🩹 Fixes

• swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

• run tests on PRs for and pushes to v11.x (#5525) (8b21b38)
• setup release-please for v11 (#5522) (663fff4)

11.7.4 (2025-10-01)

🩹 Fixes

• watch mode using chokidar v4 (#5379) (c2667c3)

📚 Documentation

• migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

• remove trailing spaces (#5475) (7f68e5c)

11.7.3 (2025-09-30)

🩹 Fixes

• use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

• add security escalation policy (#5466) (4122c7d)
• fix duplicate global leak documentation (#5461) (1164b9d)
• migrate third party UIs wiki page to docs (#5434) (6654704)
• update maintainer release notes for release-please (#5453) (185ae1e)

🤖 Automation

• deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)

... (truncated)

Commits

• 9a6a5db chore(v11.x): release 11.7.5 (#5523)
• 8b21b38 chore: run tests on PRs for and pushes to v11.x (#5525)
• 663fff4 chore: setup release-please for v11 (