chore(deps): dependabot updates 09-15-2026

[dapperdandev]

Batched dependabot updates for 09-15-2026.

Updated (package.json)

• @xmldom/xmldom: 0.8.13 → 0.8.15 (supersedes Bump @xmldom/xmldom from 0.8.13 to 0.8.15 #56)

Lockfile-only (transitive / security)

• fast-uri: 3.1.5 → 3.1.7 (supersedes Bump fast-uri from 3.1.5 to 3.1.7 #55)
• browserslist: 4.28.1 → 4.28.9 (supersedes Bump browserslist from 4.28.1 to 4.28.9 #57)
• baseline-browser-mapping: 2.9.9 → 2.11.23 (supersedes Bump baseline-browser-mapping from 2.9.9 to 2.11.21 #58; npm resolved a patch ahead of dependabot's 2.11.21)

Internal @Kno2 packages (bumped to latest published)

• none (this repo pins no @kno2/* dependencies)

Excluded (major npm version — handle separately)

• @babel/core: 7.28.5 → 8.0.1 (Bump @babel/core and @babel/preset-env #48)
• @babel/preset-env: 7.28.5 → 8.0.2 (Bump @babel/core and @babel/preset-env #48)

package-lock.json was reconciled by hand and verified stable: a fresh npm install
produces no further changes. Built with node 24.18.0 / npm 11.16.0; npm run build
(webpack) compiles successfully.

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

No unresolved review comments; dependency updates are synchronized and the build is reported successful.

Pull request overview

This pull request updates the XML parser and related transitive dependencies.

Changes:

• Bumps @xmldom/xmldom to 0.8.15.
• Refreshes fast-uri, Browserslist, and related lockfile dependencies.

File summaries

File	Description
package.json	Updates the direct XML dependency.
package-lock.json	Records direct and transitive dependency updates.

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.