Bump browserslist from 4.28.2 to 4.29.0

[dependabot]

Bumps browserslist from 4.28.2 to 4.29.0.

Release notes

Sourced from browserslist's releases.

4.29.0

• Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

• Improve or parsing performance (by @​NotAFlightRisk).

4.28.8

• Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

• Improved parsing performance.
• Fixed unbounded memory growth (by @​alanturing881).
• Fixed prototype write issue (by @​alanturing881).

4.28.6

• Fixed Electron version queries (by @​spokodev).

4.28.5

• Fixed > and >= queries (by @​spokodev).

4.28.4

• Fixed SyntaxError regression of 4.28.3.

4.28.3

• Fixed baseline query case-insensitivity (by @​swwind).

Changelog

Sourced from browserslist's changelog.

4.29.0

• Added query continuations across lines and array entries (by @​fzlzjerry).

4.28.9

• Improved or parsing performance (by @​NotAFlightRisk).

4.28.8

• Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

• Improved parsing performance.
• Fixed unbounded memory growth (by @​alanturing881).
• Fixed prototype write issue (by @​alanturing881).

4.28.6

• Fixed Electron version queries (by @​spokodev).

4.28.5

• Fixed > and >= queries (by @​spokodev).

4.28.4

• Fixed SyntaxError regression of 4.28.3.

4.28.3

• Fixed baseline query case-insensitivity (by @​swwind).

Commits

• e6dd578 Release 4.29.0 version
• 8987b7d Typo
• 47fefe6 Move from actions-up to pnpm
• 17b1e23 Update dependencies
• df16b26 Merge pull request #944 from fzlzjerry/fix/757-query-continuations
• a2673d7 Support query continuations across entries
• f46a5b7 Merge pull request #942 from agilgur5/fix-docs-typo-security-table
• 989c8c9 docs: fix typo in table rendering for SECURITY.md
• 12ed525 Release 4.28.9 version
• b1d8cf9 Update dependencies
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for browserslist since your current version.

[leecalcote]

@dependabot rebase

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: b0858576-88c3-4304-be5d-919b25dbc922

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[jijillery]

Muse Code review: Dependabot bump of browserslist 4.28.2 → 4.29.0 (lockfile-only, package-lock.json). Looks safe to merge.

What I verified:

• package-lock.json on master still pins browserslist 4.28.2 (line 238) with the exact old transitive versions this diff replaces (baseline-browser-mapping 2.11.22, caniuse-lite 1.0.30001788, electron-to-chromium 1.5.339, node-releases 2.0.37, update-browserslist-db 1.2.3), so the bump still applies and is not superseded.
• PR is MERGEABLE / CLEAN against master; checks are 3 passed, 1 skipped (Handle Copilot PR), 0 failed. Single file changed.
• This is a dev-only transitive dependency (pulled in via the docs/build toolchain); 4.29.0 is a minor feature release (query continuations across lines/array entries) plus the 4.28.3–4.28.9 parsing/memory fixes. No breaking API changes noted in the changelog.
• The one behavioral-adjacent change in the transitive set is node-releases 2.0.55 adding "engines": {"node": ">=18"}. CI workflows pin Node 20/22 (hugo.yaml, build-docs-preview.yml, feature-list.yml), and package.json declares no engines field, so this is a non-issue here.

Nits (non-blocking, no action needed):

• The head branch is named dependabot/npm_and_yarn/browserslist-4.28.9 but the PR content is now 4.29.0 — Dependabot reused the branch across updates. Cosmetic only.
• No package.json change is involved (correct: browserslist is transitive), so no version-range review applies.