Update all non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/core (source)	8.0.6 → 8.0.7
@babel/preset-env (source)	8.0.6 → 8.0.7
dotenv	18.0.5 → 18.0.8
react (source)	19.3.0 → 19.3.1
react-dom (source)	19.3.0 → 19.3.1
react-is (source)	19.3.0 → 19.3.1

---

Release Notes

babel/babel (@​babel/core)

v8.0.7

Compare Source

🐛 Bug Fix

• babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env
  • #​18295 Bump regexpu-core to 6.5.3 (@​JLHwung)
• babel-plugin-transform-for-of
  • #​18292 Skip for await in transform-for-of (@​brunoborta)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3
  • #​18283 Fix asyncIterator helper forwarding .throw() to .return() (@​brunoborta)
• babel-parser
  • #​18288 fix(parser): allow await as a function expression name inside async arrow (@​JLHwung)
• babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3
  • #​18284 Guard @@toPrimitive usage in toPrimitive helper (@​nicolo-ribaudo)
• babel-plugin-transform-block-scoping
  • #​18195 fix: closures in for-loop init capture wrong binding (@​joelle-a-dev)
• babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object
  • #​18265 Return false for #x in on static private fields before initialization (@​hoobnn)
• babel-traverse
  • #​18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@​CINC0S)
  • #​18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@​wulu007)
• Other
  • #​18257 Fix eslint-parser AST definition of AccessorProperty (@​jpradelle)
• babel-core
  • #​18254 fix(core): createConfigItem allows cb as 2nd arg (@​JLHwung)

🏠 Internal

• babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  • #​18255 Simplify interopRequireWildcard helper (@​nicolo-ribaudo)

motdotla/dotenv (dotenv)

v18.0.8

Compare Source

Changed

• Fast parser should strip appended extra quotes (#​1073)
• Type detail improvement (#​1074)

v18.0.7

Compare Source

Changed

• Treat undefined settings like quiet: true as null rather than falsey (#​1070)
• CLI should honor DOTENV_QUIET setting in .env file (#​1071)

v18.0.6

Compare Source

Changed

• Use smarter parseBoolean not Boolean() to fix override (#​1069)

react/react (react)

v19.3.1: 19.3.1 (October 14th, 2026)

Compare Source

React Server Components

• Improve transport protocol (#​37845 by @​unstubbable and @​eps1lon)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 and 15 of the month (* * 1,15 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
github-insights	Ready	Preview	Oct 15, 2026 10:53am UTC

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud