build(deps): bump preact from 10.29.7 to 10.29.8 in the production-dependencies group across 1 directory

[dependabot]

Bumps the production-dependencies group with 1 update in the / directory: preact.

Updates preact from 10.29.7 to 10.29.8

Release notes

Sourced from preact's releases.

10.29.8

Performance

• Batch updates in flushSync (#5173, thanks @​JoviDeCroock)
• Avoid traversing retained subtrees (#5182, thanks @​JoviDeCroock)

Commits

• 389c7bc Merge pull request #5189 from preactjs/10.29.8
• 39edabf 10.29.8
• f27f3ec Merge pull request #5173 from preactjs/flush-sync-batch
• 84778ce Merge pull request #5182 from preactjs/perf/v10-retained-subtree-bailout
• 8623721 Golf retained-subtree bailout
• 1ab8135 Optimize retained subtree bailouts
• 3393c0b Batch updates in flushSync
• See full diff in compare view

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Bumps the preact dependency version in package.json to pick up the latest patch release.

Changes:

• Update preact from 10.29.7 to 10.29.8

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/preact	10.29.8	🟢 5.7	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Packaging 🟢 10 packaging workflow detected

Scanned Files

• package-lock.json

[dependabot]

Looks like preact is no longer updatable, so this is no longer needed.