This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Adoption](https://docs.renovatebot.com/merge-confidence/) | [Passing](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [@swc/core](https://swc.rs) ([source](https://redirect.github.com/swc-project/swc/tree/HEAD/packages/core)) | [`1.15.11` → `1.15.13`](https://renovatebot.com/diffs/npm/@swc%2fcore/1.15.11/1.15.13) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@swc%2fcore/1.15.13?slim=true) | ![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@swc%2fcore/1.15.13?slim=true) | ![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@swc%2fcore/1.15.11/1.15.13?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@swc%2fcore/1.15.11/1.15.13?slim=true) | | [simple-git](https://redirect.github.com/steveukx/git-js) ([source](https://redirect.github.com/steveukx/git-js/tree/HEAD/simple-git)) | [`3.31.1` → `3.32.3`](https://renovatebot.com/diffs/npm/simple-git/3.31.1/3.32.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/simple-git/3.32.3?slim=true) | ![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/simple-git/3.32.3?slim=true) | ![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/simple-git/3.31.1/3.32.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/simple-git/3.31.1/3.32.3?slim=true) | --- ### Release Notes <details> <summary>swc-project/swc (@swc/core)</summary> ### [`v1.15.13`](https://redirect.github.com/swc-project/swc/blob/HEAD/CHANGELOG.md#11513---2026-02-23) [Compare Source](https://redirect.github.com/swc-project/swc/compare/v1.15.11...v1.15.13) ##### Bug Fixes - **(errors)** Avoid panic on invalid diagnostic spans ([#11561](https://redirect.github.com/swc-project/swc/issues/11561)) ([b24b8e0](https://redirect.github.com/swc-project/swc/commit/b24b8e0253e4e2db4a36a2180906d65ee89495da)) - **(es/helpers)** Fix `_object_without_properties` crash on primitive values ([#11571](https://redirect.github.com/swc-project/swc/issues/11571)) ([4f35904](https://redirect.github.com/swc-project/swc/commit/4f35904ebfc7d924b75635af4166dd8e2b26c069)) - **(es/jsx)** Preserve whitespace before HTML entities ([#11521](https://redirect.github.com/swc-project/swc/issues/11521)) ([64be077](https://redirect.github.com/swc-project/swc/commit/64be077515ee15501b179ebe523fa68d2c29f905)) - **(es/minifier)** Do not merge if statements with different local variable values ([#11518](https://redirect.github.com/swc-project/swc/issues/11518)) ([3e63627](https://redirect.github.com/swc-project/swc/commit/3e636273d4ba0563c9fa15736cfa4c57d80c943d)) - **(es/minifier)** Prevent convert\_tpl\_to\_str when there's emoji under es5 ([#11529](https://redirect.github.com/swc-project/swc/issues/11529)) ([ff6cf88](https://redirect.github.com/swc-project/swc/commit/ff6cf88c88497881839ccb40fa18d33225971203)) - **(es/minifier)** Inline before merge if ([#11526](https://redirect.github.com/swc-project/swc/issues/11526)) ([aa5a9ac](https://redirect.github.com/swc-project/swc/commit/aa5a9ac3ebae1f2a5775d980da65bc6a1c2574d7)) - **(es/minifier)** Preserve array join("") nullish semantics ([#11558](https://redirect.github.com/swc-project/swc/issues/11558)) ([d477f61](https://redirect.github.com/swc-project/swc/commit/d477f61d85de8d88113e886f5e5d8076192ca76a)) - **(es/minifier)** Inline side-effect-free default params ([#11564](https://redirect.github.com/swc-project/swc/issues/11564)) ([1babda7](https://redirect.github.com/swc-project/swc/commit/1babda721a42de7a85cd0da6f6231f9a67c54bfa)) - **(es/parser)** Fix generic arrow function in TSX mode ([#11549](https://redirect.github.com/swc-project/swc/issues/11549)) ([366a16b](https://redirect.github.com/swc-project/swc/commit/366a16b4a469d61ca816ec8187d3d476a57860d7)) - **(es/react)** Preserve first-line leading whitespace with entities ([#11568](https://redirect.github.com/swc-project/swc/issues/11568)) ([fc62617](https://redirect.github.com/swc-project/swc/commit/fc62617f31707bb464dc167d3317dcc705aecd4c)) - **(es/regexp)** Transpile unicode property escapes in RegExp constructor ([#11554](https://redirect.github.com/swc-project/swc/issues/11554)) ([476d544](https://redirect.github.com/swc-project/swc/commit/476d544f911ea643fcc8434e46aaddd344fa49f8)) ##### Documentation - **(agents)** Clarify sandbox escalation for progress ([#11574](https://redirect.github.com/swc-project/swc/issues/11574)) ([cb31d0d](https://redirect.github.com/swc-project/swc/commit/cb31d0da37b35858986ba63e0dab300555f8ec82)) ##### Features - **(es/minifier)** Add `unsafe_hoist_static_method_alias` option ([#11493](https://redirect.github.com/swc-project/swc/issues/11493)) ([6e7dbe2](https://redirect.github.com/swc-project/swc/commit/6e7dbe234555f926f98d8714789b5cd4a5e65b3d)) - **(es/minifier)** Remove unused args for IIFE ([#11536](https://redirect.github.com/swc-project/swc/issues/11536)) ([3cc286b](https://redirect.github.com/swc-project/swc/commit/3cc286b2f16489c8175faf5a72601c5be1376bdc)) ##### Refactor - **(es/parser)** Compare token kind rather than strings ([#11531](https://redirect.github.com/swc-project/swc/issues/11531)) ([5872ffa](https://redirect.github.com/swc-project/swc/commit/5872ffa74a5b214bd6fd03732a26479118c41011)) - **(es/typescript)** Run typescript transform in two passes ([#11532](https://redirect.github.com/swc-project/swc/issues/11532)) ([b069558](https://redirect.github.com/swc-project/swc/commit/b06955813af93cd784aad90e7e98ab06fb648438)) - **(es/typescript)** Precompute namespace import-equals usage in semantic pass ([#11534](https://redirect.github.com/swc-project/swc/issues/11534)) ([b7e87c7](https://redirect.github.com/swc-project/swc/commit/b7e87c7b951cb8f62d6b22a5cfa2105310a91ccc)) ##### Testing - **(es/minifier)** Add execution tests for issue [#11517](https://redirect.github.com/swc-project/swc/issues/11517) ([#11530](https://redirect.github.com/swc-project/swc/issues/11530)) ([01b3b64](https://redirect.github.com/swc-project/swc/commit/01b3b648114ddb2e1e5ded32856397b996cb9fc2)) - Disable `cva` ecosystem ci temporariliy ([55bc966](https://redirect.github.com/swc-project/swc/commit/55bc966be4e2a393b926317e228f6d33eacb7715)) ##### Ci - Reset closed issue and PR milestone to Planned ([#11559](https://redirect.github.com/swc-project/swc/issues/11559)) ([d5c4ebe](https://redirect.github.com/swc-project/swc/commit/d5c4ebe3d991b05697f01d8fb67efe7ad708a1f8)) - Add permission ([431c576](https://redirect.github.com/swc-project/swc/commit/431c5764b84d43fad0e30d25dcc0a8e049e8beae)) </details> <details> <summary>steveukx/git-js (simple-git)</summary> ### [`v3.32.3`](https://redirect.github.com/steveukx/git-js/blob/HEAD/simple-git/CHANGELOG.md#3323) [Compare Source](https://redirect.github.com/steveukx/git-js/compare/simple-git@3.32.2...simple-git@3.32.3) ##### Patch Changes - [`f704208`](https://redirect.github.com/steveukx/git-js/commit/f704208): Enhanced `protocol.allow` checks in `allowUnsafeExtProtocol` handling. Thanks to [@CodeAnt-AI-Security](https://redirect.github.com/CodeAnt-AI-Security) for identifying the issue ### [`v3.32.2`](https://redirect.github.com/steveukx/git-js/blob/HEAD/simple-git/CHANGELOG.md#3322) [Compare Source](https://redirect.github.com/steveukx/git-js/compare/simple-git@3.32.1...simple-git@3.32.2) ##### Patch Changes - [`8d02097`](https://redirect.github.com/steveukx/git-js/commit/8d02097): Enhanced clone unsafe switch detection. ### [`v3.32.1`](https://redirect.github.com/steveukx/git-js/blob/HEAD/simple-git/CHANGELOG.md#3321) [Compare Source](https://redirect.github.com/steveukx/git-js/compare/simple-git@3.32.0...simple-git@3.32.1) ##### Patch Changes - [`23b070f`](https://redirect.github.com/steveukx/git-js/commit/23b070f): Fix regex for detecting unsafe clone options Thanks to [@stevenwdv](https://redirect.github.com/stevenwdv) for reporting this issue. ### [`v3.32.0`](https://redirect.github.com/steveukx/git-js/blob/HEAD/simple-git/CHANGELOG.md#3320) [Compare Source](https://redirect.github.com/steveukx/git-js/compare/simple-git@3.31.1...simple-git@3.32.0) ##### Minor Changes - [`1effd8e`](https://redirect.github.com/steveukx/git-js/commit/1effd8e): Enhances the `unsafe` plugin to block additional cases where the `-u` switch may be disguised along with other single character options. Thanks to [@JuHwiSang](https://redirect.github.com/JuHwiSang) for identifying this as vulnerability. ##### Patch Changes - [`d5fd4fe`](https://redirect.github.com/steveukx/git-js/commit/d5fd4fe): Use task runner for logging use of deprecated (already no-op) functions. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/oxc-project/oxc-node).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>