Bump picomatch, @babel/cli and fdir

[dependabot]

Removes picomatch. It's no longer used after updating ancestor dependencies picomatch, @babel/cli and fdir. These dependencies need to be updated together.

Removes picomatch

Updates @babel/cli from 7.23.4 to 8.0.4

Release notes

Sourced from @​babel/cli's releases.

v8.0.4 (2026-07-09)

👓 Spec Compliance

• babel-parser, babel-plugin-transform-typescript
  • #18120 fix(parser): disallow declare module M {} (@​JLHwung)
• babel-generator, babel-parser, babel-plugin-transform-typescript
  • #18100 fix(parser): forbid let x! and let x! = (@​JLHwung)

🐛 Bug Fix

• babel-traverse
  • #18122 fix: replaceWith in Visitor#exit should not stop traversal (@​liuxingbaoyu)

🏠 Internal

• babel-helper-validator-identifier
  • #18084 refactor: Shrink validator identifier size (@​JLHwung)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

v8.0.3 (2026-06-27)

🐛 Bug Fix

• babel-core, babel-plugin-syntax-typescript
  • #18089 fix: Remove isTSX from babel-plugin-syntax-typescript types (@​liuxingbaoyu)
• babel-standalone
  • #18086 fix: Use runtime: 'classic' in the browser for React (@​liuxingbaoyu)

Committers: 2

• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

v8.0.2 (2026-06-18)

🐛 Bug Fix

• Other
  • #18083 Use the @babel/core version when asserting version in @babel/standalone (@​nicolo-ribaudo)
• babel-helper-validator-identifier
  • #18075 fix(identifier): avoid double escaping slash (@​JLHwung)

🏠 Internal

• babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env
  • #18081 Update @babel/preset-modules and polyfill packages (@​nicolo-ribaudo)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)

... (truncated)

Changelog

Sourced from @​babel/cli's changelog.

v8.0.4 (2026-07-09)

👓 Spec Compliance

• babel-parser, babel-plugin-transform-typescript
  • #18120 fix(parser): disallow declare module M {} (@​JLHwung)
• babel-generator, babel-parser, babel-plugin-transform-typescript
  • #18100 fix(parser): forbid let x! and let x! = (@​JLHwung)

🐛 Bug Fix

• babel-traverse
  • #18122 fix: replaceWith in Visitor#exit should not stop traversal (@​liuxingbaoyu)

🏠 Internal

• babel-helper-validator-identifier
  • #18084 refactor: Shrink validator identifier size (@​JLHwung)

v8.0.3 (2026-06-27)

🐛 Bug Fix

• babel-core, babel-plugin-syntax-typescript
  • #18089 fix: Remove isTSX from babel-plugin-syntax-typescript types (@​liuxingbaoyu)
• babel-standalone
  • #18086 fix: Use runtime: 'classic' in the browser for React (@​liuxingbaoyu)

v8.0.2 (2026-06-18)

🐛 Bug Fix

• Other
  • #18083 Use the @babel/core version when asserting version in @babel/standalone (@​nicolo-ribaudo)
• babel-helper-validator-identifier
  • #18075 fix(identifier): avoid double escaping slash (@​JLHwung)

🏠 Internal

• babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env
  • #18081 Update @babel/preset-modules and polyfill packages (@​nicolo-ribaudo)

v8.0.1 (2026-06-17)

💥 Breaking Change

• babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone
  • #18079 Actually remove preset-env's useBuiltIns (@​nicolo-ribaudo)

v8.0.0 (2026-06-16)

👓 Spec Compliance

• babel-core
  • #18039 perf: Only extract source map comments at the end of the file (@​liuxingbaoyu)

💥 Breaking Change

• babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • #18069 Fallback to assuming ESM support with modules: auto (@​nicolo-ribaudo)
• babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • #18036 Remove corejs exports for @babe/runtime-corejs3 (@​liuxingbaoyu)
• babel-parser

... (truncated)

Commits

• 8ed5db1 v8.0.4
• b8e669f chore: bump chokidar to 5.0.0 (#18112)
• b4be199 v8.0.1
• cd96c47 chore(pkg): set @​babel/core peer deps to ^8.0.0 (#18076)
• 7dc825a v8.0.0
• 004f4b4 Fallback to assuming ESM support with modules: auto (#18069)
• 73bceef v8.0.0-rc.6
• c6d71f3 Enable strictFunctionTypes (#17946)
• 0e16971 Do not emit source map names for identical names (#18005)
• 3d34928 Use Yarn catalog for source map dependencies (#18004)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/cli since your current version.

Updates fdir from 6.1.1 to 6.5.0

Release notes

Sourced from fdir's releases.

v6.5.0

This release brings a lot of cool stuff:

ESM support

fdir now includes esm builds in addition to the commonjs build.

Thanks to @​TheAlexLichter in thecodrr/fdir#147

Node v12 support (is back!)

fdir v6.4.6 broke Node v12 & v14 compatibility as it made use of AbortController. We have now replaced AbortController with an in-house solution that should bring back support for Node v12.

Additionally, fdir now has the engines field set to >=12 to make it super clear what versions of Node we support.

Thanks to @​SuperchupuDev & @​benmccann for bringing this up and helping me test this!

Custom FS

Huge thanks to @​43081j for adding support for this. You can now pass a custom FS module and fdir will make use of it instead of the Node.js fs module.

You can use it like so:

    const api = new fdir({
      fs: fakeFs,
    }).crawl("node_modules");

The fs property expects the following methods:

export type FSLike = {
  readdir: typeof nativeFs.readdir;
  readdirSync: typeof nativeFs.readdirSync;
  realpath: typeof nativeFs.realpath;
  realpathSync: typeof nativeFs.realpathSync;
  stat: typeof nativeFs.stat;
  statSync: typeof nativeFs.statSync;
};

Other changes

• perf: use slice instead of replace when joining path by @​SuperchupuDev in thecodrr/fdir#152
• fix: support @types/picomatch v4 by @​SuperchupuDev in thecodrr/fdir#156

New Contributors

• @​TheAlexLichter made their first contribution in thecodrr/fdir#147

... (truncated)

Commits

• 14c678e chore: bump version to 6.5.0
• bcfbc2e chore: update lockfile
• 7800ee8 chore: set engines field (#159)
• e7d6042 build: set up tsdown for dual build (#147)
• 175a702 fix: support @types/picomatch v4
• 2ac620d fix: use || instead of ?? for node 12 compat
• f1630d1 chore: run format
• 6547a2d feat: support custom fs
• afde92a test: minor refactor
• 76cb3a4 fix: drop AbortController as it breaks fdir on Node v14
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.