mirror of
https://github.com/evroon/bracket.git
synced 2026-09-15 15:43:15 -04:00
copilot/fix-github-actions-job-failure
1445
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 copilot-swe-agent[bot]andevroon
|
a5a4062c84 |
Fix pyrefly bad-assignment errors in validation.py
Co-authored-by: evroon <11857441+evroon@users.noreply.github.com> |
||
|
dependabot[bot]
|
c242bb2cd7 |
Bump pyrefly from 1.1.1 to 1.2.0 in /backend
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 1.1.1 to 1.2.0. - [Release notes](https://github.com/facebook/pyrefly/releases) - [Commits](https://github.com/facebook/pyrefly/compare/1.1.1...1.2.0) --- updated-dependencies: - dependency-name: pyrefly dependency-version: 1.2.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> |
||
|
dependabot[bot]
|
a4476c40ff |
Bump axios from 1.18.0 to 1.19.0 in /frontend (#1807)
Bumps [axios](https://github.com/axios/axios) from 1.18.0 to 1.19.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v1.19.0 - July 22, 2026</h2> <p>This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.</p> <h2>🔒 Security Fixes</h2> <ul> <li>Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx</a>). (<a href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li>Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (<a href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>, <a href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li> <li>Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (<a href="https://redirect.github.com/axios/axios/issues/11051">#11051</a>)</li> <li>HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (<a href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (<a href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>, <a href="https://redirect.github.com/axios/axios/issues/11018">#11018</a>)</li> <li>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (<a href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>, <a href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li> <li>Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (<a href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li> <li>Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (<a href="https://redirect.github.com/axios/axios/issues/11036">#11036</a>, <a href="https://redirect.github.com/axios/axios/issues/11037">#11037</a>)</li> <li>URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (<a href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>, <a href="https://redirect.github.com/axios/axios/issues/11038">#11038</a>)</li> <li>Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (<a href="https://redirect.github.com/axios/axios/issues/11039">#11039</a>, <a href="https://redirect.github.com/axios/axios/issues/11040">#11040</a>)</li> <li>Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (<a href="https://redirect.github.com/axios/axios/issues/11044">#11044</a>, <a href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li> <li>Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (<a href="https://redirect.github.com/axios/axios/issues/11061">#11061</a>)</li> <li>Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (<a href="https://redirect.github.com/axios/axios/issues/11071">#11071</a>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li>Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (<a href="https://redirect.github.com/axios/axios/issues/11031">#11031</a>, <a href="https://redirect.github.com/axios/axios/issues/11055">#11055</a>, <a href="https://redirect.github.com/axios/axios/issues/11056">#11056</a>, <a href="https://redirect.github.com/axios/axios/issues/11058">#11058</a>, <a href="https://redirect.github.com/axios/axios/issues/11079">#11079</a>, <a href="https://redirect.github.com/axios/axios/issues/11080">#11080</a>, <a href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>, <a href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>, <a href="https://redirect.github.com/axios/axios/issues/11090">#11090</a>)</li> <li>Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (<a href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li> <li>Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (<a href="https://redirect.github.com/axios/axios/issues/11062">#11062</a>)</li> <li>Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (<a href="https://redirect.github.com/axios/axios/issues/11032">#11032</a>, <a href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li> <li>Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (<a href="https://redirect.github.com/axios/axios/issues/11041">#11041</a>, <a href="https://redirect.github.com/axios/axios/issues/11068">#11068</a>, <a href="https://redirect.github.com/axios/axios/issues/11076">#11076</a>, <a href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li> <li>Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (<a href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>, <a href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve Axios:</p> <ul> <li><a href="https://github.com/afonsojramos"><code>@afonsojramos</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li> <li><a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>)</li> <li><a href="https://github.com/yassertawfik4"><code>@yassertawfik4</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>)</li> <li><a href="https://github.com/AnandSundar"><code>@AnandSundar</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>)</li> <li><a href="https://github.com/lin-hongkuan"><code>@lin-hongkuan</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li> <li><a href="https://github.com/Wali007-lab"><code>@Wali007-lab</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li> <li><a href="https://github.com/magicdawn"><code>@magicdawn</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>)</li> <li><a href="https://github.com/andrewkernel"><code>@andrewkernel</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li> <li><a href="https://github.com/Sagargupta16"><code>@Sagargupta16</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li> <li><a href="https://github.com/Rpaudel379"><code>@Rpaudel379</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h2>v1.19.0 — July 22, 2026</h2> <p>This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.</p> <h2>🔒 Security Fixes</h2> <ul> <li>Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx</a>). (<a href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li>Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (<a href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>, <a href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li> <li>Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (<a href="https://redirect.github.com/axios/axios/issues/11051">#11051</a>)</li> <li>HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (<a href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li> <p>Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (<a href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>, <a href="https://redirect.github.com/axios/axios/issues/11018">#11018</a>)</p> </li> <li> <p>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (<a href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>, <a href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</p> </li> <li> <p>Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (<a href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</p> </li> <li> <p>Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (<a href="https://redirect.github.com/axios/axios/issues/11036">#11036</a>, <a href="https://redirect.github.com/axios/axios/issues/11037">#11037</a>)</p> </li> <li> <p>URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (<a href="https://redirect.github.com/axios/axios/issues/11008">#11008</a>, <a href="https://redirect.github.com/axios/axios/issues/11038">#11038</a>)</p> </li> <li> <p>Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (<a href="https://redirect.github.com/axios/axios/issues/11039">#11039</a>, <a href="https://redirect.github.com/axios/axios/issues/11040">#11040</a>)</p> </li> <li> <p>Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (<a href="https://redirect.github.com/axios/axios/issues/11044">#11044</a>, <a href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</p> </li> <li> <p>Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (<a href="https://redirect.github.com/axios/axios/issues/11061">#11061</a>)</p> </li> <li> <p>Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (<a href="https://redirect.github.com/axios/axios/issues/11071">#11071</a>)</p> </li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li>Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (<a href="https://redirect.github.com/axios/axios/issues/11031">#11031</a>, <a href="https://redirect.github.com/axios/axios/issues/11055">#11055</a>, <a href="https://redirect.github.com/axios/axios/issues/11056">#11056</a>, <a href="https://redirect.github.com/axios/axios/issues/11058">#11058</a>, <a href="https://redirect.github.com/axios/axios/issues/11079">#11079</a>, <a href="https://redirect.github.com/axios/axios/issues/11080">#11080</a>, <a href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>, <a href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>, <a href="https://redirect.github.com/axios/axios/issues/11090">#11090</a>)</li> <li>Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (<a href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li> <li>Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (<a href="https://redirect.github.com/axios/axios/issues/11062">#11062</a>)</li> <li>Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (<a href="https://redirect.github.com/axios/axios/issues/11032">#11032</a>, <a href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li> <li>Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (<a href="https://redirect.github.com/axios/axios/issues/11041">#11041</a>, <a href="https://redirect.github.com/axios/axios/issues/11068">#11068</a>, <a href="https://redirect.github.com/axios/axios/issues/11076">#11076</a>, <a href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li> <li>Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (<a href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>, <a href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve Axios:</p> <ul> <li><a href="https://github.com/afonsojramos"><code>@afonsojramos</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li> <li><a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>)</li> <li><a href="https://github.com/yassertawfik4"><code>@yassertawfik4</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>)</li> <li><a href="https://github.com/AnandSundar"><code>@AnandSundar</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>)</li> <li><a href="https://github.com/lin-hongkuan"><code>@lin-hongkuan</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li> <li><a href="https://github.com/Wali007-lab"><code>@Wali007-lab</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li> <li><a href="https://github.com/magicdawn"><code>@magicdawn</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>)</li> <li><a href="https://github.com/andrewkernel"><code>@andrewkernel</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li> <li><a href="https://github.com/Sagargupta16"><code>@Sagargupta16</code></a> (<a href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/311fcc5c8d989b7248f05d390bb83bfbfb009977"><code>311fcc5</code></a> chore(release): prepare release 1.19.0 (<a href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li> <li><a href="https://github.com/axios/axios/commit/cb4fd743abd1c595761c8eda25d1323fc62a3b93"><code>cb4fd74</code></a> chore(deps): bump axios from 1.16.1 to 1.18.1 in /docs (<a href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>)</li> <li><a href="https://github.com/axios/axios/commit/004c93a9d2acd0561c498eff7bb4431c6bad78af"><code>004c93a</code></a> chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the github-action...</li> <li><a href="https://github.com/axios/axios/commit/122edde91b1183572f4ba399b5b6bc4e3b989718"><code>122edde</code></a> chore(deps-dev): bump the development_dependencies group with 3 updates (<a href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>)</li> <li><a href="https://github.com/axios/axios/commit/c44f8d0a910df99486da9175584b99f56a94a73b"><code>c44f8d0</code></a> ci: use bundled npm for v1 publish (<a href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>)</li> <li><a href="https://github.com/axios/axios/commit/878bb29de570765b0d4c0970e30400d9ea9399f7"><code>878bb29</code></a> fix(sandbox): resolve TypeError on constant variable path assignment (<a href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li> <li><a href="https://github.com/axios/axios/commit/a092bae50d1884782151b2fcea12974d6da6e376"><code>a092bae</code></a> fix(core): synchronous interceptors swallow errors and proceed with request (...</li> <li><a href="https://github.com/axios/axios/commit/3041b8fd1daf17404d1bad1f9d94026ea5ab400b"><code>3041b8f</code></a> feat(HttpStatusCode): add missing 520 status code (<a href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li> <li><a href="https://github.com/axios/axios/commit/58b16c88f0bddf1fadb321aed58ba3f49a90481b"><code>58b16c8</code></a> refactor(helpers): extract duplicated setFormDataHeaders into a shared helper...</li> <li><a href="https://github.com/axios/axios/commit/3077e62097726d22ba30f1cb847d7a07050e339a"><code>3077e62</code></a> feat(types): Allow the Params property to be typed, instead of <code>any</code> (<a href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.18.0...v1.19.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
c0078f2757 |
Bump @tabler/icons-react from 3.45.0 to 3.46.0 in /frontend (#1806)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.45.0 to 3.46.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases">@tabler/icons-react's releases</a>.</em></p> <blockquote> <h2>Release 3.46.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/play-bug</code></li> <li><code>outline/play-bugs</code></li> <li><code>outline/remote-control</code></li> <li><code>outline/rocking-chair</code></li> <li><code>outline/run-sprint</code></li> <li><code>outline/sparkles-2-off</code></li> <li><code>outline/tabs</code></li> <li><code>outline/tags-chevron-down</code></li> <li><code>outline/tags-chevron-left</code></li> <li><code>outline/tags-chevron-right</code></li> <li><code>outline/tags-chevron-up</code></li> <li><code>outline/thinking-high</code></li> <li><code>outline/thinking-low</code></li> <li><code>outline/thinking-medium</code></li> <li><code>outline/treasure-chest</code></li> <li><code>outline/twig</code></li> <li><code>outline/vault</code></li> <li><code>outline/yarn</code></li> </ul> <p>Fixed icons: <code>outline/credits</code>, <code>outline/currency-tether</code>, <code>outline/device-3d-camera</code>, <code>outline/device-screen</code>, <code>outline/home-lock</code>, <code>outline/map-lock</code>, <code>outline/notdef</code>, <code>outline/queue-pop-in</code>, <code>outline/server-bolt</code>, <code>outline/server</code>, <code>outline/sparkles-2</code>, <code>outline/transform-point-bottom-left</code>, <code>outline/transform-point-bottom-right</code>, <code>outline/transform-point-top-left</code>, <code>outline/transform-point-top-right</code></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/8ac7d81b72ece11072ef25ea9fd92e80c6f3c9fc"><code>8ac7d81</code></a> Release 3.46.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/fe319f05d943a17efb29c5089e21364d3975843c"><code>fe319f0</code></a> Add publishConfig for public access in all icon packages (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1562">#1562</a>)</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
39a9d164cf |
Bump npm-check-updates from 22.2.9 to 23.0.0 in /frontend (#1805)
Bumps [npm-check-updates](https://github.com/raineorshine/npm-check-updates) from 22.2.9 to 23.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raineorshine/npm-check-updates/releases">npm-check-updates's releases</a>.</em></p> <blockquote> <h2>v23.0.0</h2> <h3>⚠️ Breaking changes & migration</h3> <p><strong>1. Node.js 22+ required</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1844">#1844</a>) The minimum supported Node.js is now <strong>22</strong>. Supported versions: <code>^22.22.2 || ^24.15.0 || >=26.0.0</code> (and npm <code>>=10</code>).</p> <ul> <li><em>Migration:</em> Upgrade Node before installing. On older Node, stay on v22.x.</li> </ul> <p><strong>2. Pure ESM package — CJS build dropped, default export is now callable</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1916">#1916</a>, <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1894">#1894</a>) The package is now pure ESM (no more CommonJS build), and the default export is now callable directly. <code>ncu.run()</code> and <code>ncu.defineConfig()</code> still work as namespaced properties.</p> <ul> <li><em>Migration (ESM):</em> <pre lang="js"><code>// before import * as ncu from 'npm-check-updates' const upgraded = await ncu.run({ /* ... */ }) // after import ncu from 'npm-check-updates' const upgraded = await ncu({ /* ... */ }) // ncu.run({...}) also still works </code></pre> </li> <li><em>Migration (CommonJS):</em> Still usable via Node's native <code>require()</code> of ESM (Node 22+), but the import shape changed: <pre lang="js"><code>// before const ncu = require('npm-check-updates') // after const { default: ncu } = require('npm-check-updates') ncu({ /* ... */ }).then(upgraded => console.log(upgraded)) </code></pre> </li> </ul> <p><strong>3. <code>filterVersion</code> / <code>rejectVersion</code> no longer accept a predicate function. Use <code>filter</code> / <code>reject</code> instead.</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1933">#1933</a>) These options now accept only a string, wildcard, glob, comma/space-delimited list, or <code>/regex/</code>. (CLI usage is unchanged — the CLI never supported functions.)</p> <ul> <li><em>Migration:</em> If you passed a function to <code>filterVersion</code>/<code>rejectVersion</code> in <code>.ncurc.js</code> or via the module API, move it to <code>filter</code> / <code>reject</code> instead. Those receive the package name <strong>and</strong> the parsed current version, so they can match on both: <pre lang="js"><code>// before filterVersion: (name, semver) => !(name.startsWith('@myorg/') && +semver[0].major > 5) // after filter: (name, semver) => !(name.startsWith('@myorg/') && +semver[0].major > 5) </code></pre> </li> </ul> <p><strong>4. Output is now grouped by default</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1937">#1937</a>) <code>--format</code> now defaults to <code>["group"]</code>, so upgrades are grouped by major / minor / patch out of the box. This is a better default for most users.</p> <ul> <li><em>Migration:</em> To get the old flat output, use: <pre lang="bash"><code>ncu --format no-group </code></pre> The new <code>no-</code> prefix removes a value from the default list instead of replacing the whole list, so <code>--format no-group,time</code> disables grouping while adding publish times.</li> </ul> <p><strong>5. <code>--target semver</code> now respects explicit upper bounds</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1920">#1920</a>) An explicit upper bound in a range is now preserved and never exceeded, e.g. <code>^9.5.0 <10</code> → <code>^9.7.0 <10</code> (previously the bound could be overrun). This can change which versions are selected for ranges with explicit upper bounds.</p> <h3>✨ Other improvements</h3> <ul> <li>Native TypeScript loading (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1888">#1888</a>), lazy-loaded <code>npm-registry-fetch</code> for faster startup (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1898">#1898</a>), and reduced dependencies for a lighter install.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md">npm-check-updates's changelog</a>.</em></p> <blockquote> <h2>[23.0.0] - 2026-07-26</h2> <h3>⚠️ Breaking changes & migration</h3> <p><strong>1. Node.js 22+ required</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1844">#1844</a>) The minimum supported Node.js is now <strong>22</strong>. Supported versions: <code>^22.22.2 || ^24.15.0 || >=26.0.0</code> (and npm <code>>=10</code>).</p> <ul> <li><em>Migration:</em> Upgrade Node before installing. On older Node, stay on v22.x.</li> </ul> <p><strong>2. Pure ESM package — CJS build dropped, default export is now callable</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1916">#1916</a>, <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1894">#1894</a>) The package is now pure ESM (no more CommonJS build), and the default export is now callable directly. <code>ncu.run()</code> and <code>ncu.defineConfig()</code> still work as namespaced properties.</p> <ul> <li> <p><em>Migration (ESM):</em></p> <pre lang="js"><code>// before import * as ncu from 'npm-check-updates' const upgraded = await ncu.run({/* ... */}) // after import ncu from 'npm-check-updates' const upgraded = await ncu({/* ... */}) // ncu.run({...}) also still works </code></pre> </li> <li> <p><em>Migration (CommonJS):</em> Still usable via Node's native <code>require()</code> of ESM (Node 22+), but the import shape changed:</p> <pre lang="js"><code>// before const ncu = require('npm-check-updates') // after const { default: ncu } = require('npm-check-updates') ncu({/* ... */}).then(upgraded => console.log(upgraded)) </code></pre> </li> </ul> <p><strong>3. <code>filterVersion</code> / <code>rejectVersion</code> no longer accept a predicate function. Use <code>filter</code> / <code>reject</code> instead.</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1933">#1933</a>) These options now accept only a string, wildcard, glob, comma/space-delimited list, or <code>/regex/</code>. (CLI usage is unchanged — the CLI never supported functions.)</p> <ul> <li> <p><em>Migration:</em> If you passed a function to <code>filterVersion</code>/<code>rejectVersion</code> in <code>.ncurc.js</code> or via the module API, move it to <code>filter</code> / <code>reject</code> instead. Those receive the package name <strong>and</strong> the parsed current version, so they can match on both:</p> <pre lang="js"><code>// before filterVersion: (name, semver) => !(name.startsWith('@myorg/') && +semver[0].major > 5) // after filter: (name, semver) => !(name.startsWith('@myorg/') && +semver[0].major > 5) </code></pre> </li> </ul> <p><strong>4. Output is now grouped by default</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1937">#1937</a>) <code>--format</code> now defaults to <code>["group"]</code>, so upgrades are grouped by major / minor / patch out of the box. This is a better default for most users.</p> <ul> <li><em>Migration:</em> To get the old flat output, use:</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/2417fe3b0ce0356deefa22f1b650afe37e8b5ead"><code>2417fe3</code></a> 23.0.0</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/61b8818b28dddd2b3810225275d54905677e4ee9"><code>61b8818</code></a> Update deps (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1948">#1948</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/548c6e3969865b5c8a5f57ad475617978c343534"><code>548c6e3</code></a> Merge pull request <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1943">#1943</a> from raineorshine/xmr/test-doctor</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/d31677a3fe9110b0233b5075141ee4464d2c33a3"><code>d31677a</code></a> test/doctor: run fixtures from a temp copy instead of mutating tracked files</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/31c7e85a8ba37a1a1c26154c1f00a2f1aefdec9b"><code>31c7e85</code></a> Fix and clean up skipped tests (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1941">#1941</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/c7c968f71aaf67cfc6aefd04ffd16b6c7a97f6a1"><code>c7c968f</code></a> Merge pull request <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1935">#1935</a> from raineorshine/xmr/fix-regex</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/e42e613794eb89f25c2b32ba6aee9711755edbf6"><code>e42e613</code></a> Update dependencies (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1940">#1940</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/5c7b4225ff4a299b6bb0c10b3afca6ef5da3d897"><code>5c7b422</code></a> Add regression test for single-character override keys that are not '.'</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/8d0d4be47363891b4362519f64629f12fa8a8609"><code>8d0d4be</code></a> Move override tests into upgradePackageData.test.ts</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/21b8f539eb64db2c7156deb8afb51b4e26312ff5"><code>21b8f53</code></a> Use jsonc-parser for packageManager and JSON catalog upgrades</li> <li>Additional commits viewable in <a href="https://github.com/raineorshine/npm-check-updates/compare/v22.2.9...v23.0.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
1bc2d8b4ae |
Bump vite from 8.1.5 to 8.2.0 in /frontend (#1804)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.1.5 to 8.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>create-vite@8.2.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.2.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.2.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.2.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.2.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.2.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.2.0-beta.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.2.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/vitejs/vite/compare/v8.2.0-beta.0...v8.2.0">8.2.0</a> (2026-07-30)</h2> <h3>Features</h3> <ul> <li>add <code>input</code> to <code>server.fs.allow</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23035">#23035</a>) (<a href="https://github.com/vitejs/vite/commit/95a3cdab83e1125b03d2e8dd942fb6b64209e5fa">95a3cda</a>)</li> <li><strong>bundled-dev:</strong> reload once after rebuild instead of via the fallback page (<a href="https://redirect.github.com/vitejs/vite/issues/23106">#23106</a>) (<a href="https://github.com/vitejs/vite/commit/b24381d741941b9ce2b1c07db62cc5f4d7bad981">b24381d</a>)</li> <li><strong>bundled-dev:</strong> support worker file update accepted by HMR (<a href="https://redirect.github.com/vitejs/vite/issues/23068">#23068</a>) (<a href="https://github.com/vitejs/vite/commit/0d04351fdc12258c75b9f1cda5780fdb836ed0ef">0d04351</a>)</li> <li><strong>config:</strong> include column in config incompatibility location (<a href="https://redirect.github.com/vitejs/vite/issues/23064">#23064</a>) (<a href="https://github.com/vitejs/vite/commit/8a245726944ed29225920d49be77c33c6e03afc8">8a24572</a>)</li> <li><strong>dev:</strong> resolve interface name for explicit host in network URLs (<a href="https://redirect.github.com/vitejs/vite/issues/22965">#22965</a>) (<a href="https://github.com/vitejs/vite/commit/3ac77d9dd742968961af38a5a91ed6b061ceda7d">3ac77d9</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>bundledDev:</strong> print build errors to the terminal when an HMR update fails (<a href="https://redirect.github.com/vitejs/vite/issues/23024">#23024</a>) (<a href="https://github.com/vitejs/vite/commit/41c465896e8b11b1eb9c5fbdafbdcc528e189a2c">41c4658</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23069">#23069</a>) (<a href="https://github.com/vitejs/vite/commit/4c07b74416f859d7e8bdace13409ef2d080edf76">4c07b74</a>)</li> <li><strong>hmr:</strong> preserve environment snapshot during server restart (<a href="https://redirect.github.com/vitejs/vite/issues/22992">#22992</a>) (<a href="https://github.com/vitejs/vite/commit/b1186c36d06bb94941c58e8272fc4acb8512c93b">b1186c3</a>)</li> <li><strong>importAnalysis:</strong> interop imports injected into optimized dep files by plugins (<a href="https://redirect.github.com/vitejs/vite/issues/23029">#23029</a>) (<a href="https://github.com/vitejs/vite/commit/8c2a87d41fb24536e59643351758084cde4d0dd7">8c2a87d</a>)</li> <li><strong>module-runner:</strong> keep stack trace interception working when <code>Object.prototype</code> is frozen (<a href="https://redirect.github.com/vitejs/vite/issues/23073">#23073</a>) (<a href="https://github.com/vitejs/vite/commit/599c5b02a8b6879b05ede988020f1331e877aaea">599c5b0</a>)</li> <li><strong>server:</strong> strip base in indexHtml module graph lookup (<a href="https://redirect.github.com/vitejs/vite/issues/22932">#22932</a>) (<a href="https://github.com/vitejs/vite/commit/fa005d19af5d847931c6dbefc63841c137383e6c">fa005d1</a>)</li> <li>support resolving top-level input option with plugins (<a href="https://redirect.github.com/vitejs/vite/issues/23101">#23101</a>) (<a href="https://github.com/vitejs/vite/commit/41df81a6a4c3eef08f7a9a8ac9530cd136c0eafa">41df81a</a>)</li> </ul> <h3>Documentation</h3> <ul> <li><strong>config:</strong> correct cacheDir default fallback description (<a href="https://redirect.github.com/vitejs/vite/issues/23060">#23060</a>) (<a href="https://github.com/vitejs/vite/commit/aafa103af5d71fb59d7c3dd617d0cbef3b222f1f">aafa103</a>)</li> </ul> <h3>Tests</h3> <ul> <li>config CJS module vars in ESM case (<a href="https://redirect.github.com/vitejs/vite/issues/23010">#23010</a>) (<a href="https://github.com/vitejs/vite/commit/d8cd38830251b95fd7dddcd0eee0ce94cc61c2f4">d8cd388</a>)</li> </ul> <h2><a href="https://github.com/vitejs/vite/compare/v8.1.5...v8.2.0-beta.0">8.2.0-beta.0</a> (2026-07-22)</h2> <h3>Features</h3> <ul> <li>add <code>input</code> option (<a href="https://redirect.github.com/vitejs/vite/issues/22642">#22642</a>) (<a href="https://github.com/vitejs/vite/commit/9beae37d7221b25463a011feb40b0303ca328d87">9beae37</a>)</li> <li><strong>config:</strong> warn features incompatible with native loader in bundle loader (<a href="https://redirect.github.com/vitejs/vite/issues/22850">#22850</a>) (<a href="https://github.com/vitejs/vite/commit/05302b07267f6b4f9dbeac5b1d73fcc3dc06d730">05302b0</a>)</li> <li><strong>css:</strong> export PostCSS config type for type-safe configs (<a href="https://redirect.github.com/vitejs/vite/issues/22792">#22792</a>) (<a href="https://github.com/vitejs/vite/commit/302c755a8125b9a26214e3b413922b5513e41981">302c755</a>)</li> <li><strong>dev:</strong> label network URLs with their interface name (<a href="https://redirect.github.com/vitejs/vite/issues/22830">#22830</a>) (<a href="https://github.com/vitejs/vite/commit/78accc42a5b8887d9df624f7d4a934d3ead677d1">78accc4</a>)</li> <li><strong>optimizer:</strong> support aube lockfile (<a href="https://redirect.github.com/vitejs/vite/issues/22813">#22813</a>) (<a href="https://github.com/vitejs/vite/commit/6319827116c5be2a19c1b91c84ba3d38ad26a41c">6319827</a>)</li> <li><strong>optimizer:</strong> support nub lockfile (<a href="https://redirect.github.com/vitejs/vite/issues/22891">#22891</a>) (<a href="https://github.com/vitejs/vite/commit/65d3604f6fdbfcf6e86244d7fe3c1ca86acae701">65d3604</a>)</li> <li>update rolldown-related dependencies and use client-side HMR in bundled-dev (<a href="https://redirect.github.com/vitejs/vite/issues/22961">#22961</a>) (<a href="https://github.com/vitejs/vite/commit/960e9efbc1372000caac46cc2f123cef4824e2bb">960e9ef</a>)</li> <li><strong>wasm:</strong> expand test suite, unwrap WebAssembly.Global and enable js-string builtins (<a href="https://redirect.github.com/vitejs/vite/issues/22674">#22674</a>) (<a href="https://github.com/vitejs/vite/commit/9e79b51579457a9af4fa623b68a0bfabbf38010b">9e79b51</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>build:</strong> map CSS chunks in chunk import maps (fix <a href="https://redirect.github.com/vitejs/vite/issues/22946">#22946</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/22947">#22947</a>) (<a href="https://github.com/vitejs/vite/commit/e16ff3a1199293ac9cdfa6132c08fdea162215f3">e16ff3a</a>)</li> <li><strong>config:</strong> exclude virtual modules from native config compat check (<a href="https://redirect.github.com/vitejs/vite/issues/22979">#22979</a>) (<a href="https://github.com/vitejs/vite/commit/2ced1fe4e4e480ed78cb7aa5c78319e57bfa7783">2ced1fe</a>)</li> <li><strong>css:</strong> rewrite urls in OnceExit-injected content (<a href="https://redirect.github.com/vitejs/vite/issues/22983">#22983</a>) (<a href="https://github.com/vitejs/vite/commit/abb793e18c92592c21fbb8e1f3fc450b5839f04f">abb793e</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22985">#22985</a>) (<a href="https://github.com/vitejs/vite/commit/04f345b37064cd0bba6447eb5c32be5c22162f3d">04f345b</a>)</li> <li><strong>deps:</strong> update dependency magic-string to v1 (<a href="https://redirect.github.com/vitejs/vite/issues/22998">#22998</a>) (<a href="https://github.com/vitejs/vite/commit/c60b4d7cdb85b7d4f78671cdcfb863e5f8b66bb7">c60b4d7</a>)</li> <li><strong>hmr:</strong> remove hot data after prune (<a href="https://redirect.github.com/vitejs/vite/issues/23002">#23002</a>) (<a href="https://github.com/vitejs/vite/commit/be9631658f5191ee5c5665e780239d42a330280a">be96316</a>)</li> <li>resolve root to real path (<a href="https://redirect.github.com/vitejs/vite/issues/22832">#22832</a>) (<a href="https://github.com/vitejs/vite/commit/55bba7bbd9de40d031360e4408fe91bff5b29ec9">55bba7b</a>)</li> </ul> <h3>Performance Improvements</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/24a611f1c83a976d32262628d42f683609746635"><code>24a611f</code></a> release: v7.2.4</li> <li><a href="https://github.com/vitejs/vite/commit/2d66b7b14aa6dfd62f3d6a59ee8382ed5ca6fd32"><code>2d66b7b</code></a> fix: revert "perf(deps): replace debug with obug (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)"</li> <li><a href="https://github.com/vitejs/vite/commit/a668014dba377c2b82a32d8124f1761e9ea74f82"><code>a668014</code></a> release: v7.2.3</li> <li><a href="https://github.com/vitejs/vite/commit/acfe939e1f7c303c34b0b39b883cc302da767fa2"><code>acfe939</code></a> perf(deps): replace debug with obug (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/4f8171eb3046bd70c83964689897dab4c6b58bc0"><code>4f8171e</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21128">#21128</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/50297208452241061cb44d09a4bbdf77a11ac01e"><code>5029720</code></a> chore(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21127">#21127</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/5909efd8fbfd1bf1eab65427aea0613124b2797a"><code>5909efd</code></a> fix: allow multiple <code>bindCLIShortcuts</code> calls with shortcut merging (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21103">#21103</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/39a0a15fd24ed37257c48b795097a3794e54d255"><code>39a0a15</code></a> chore(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21095">#21095</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/6a34ac3422686e7cf7cc9a25d299cb8e5a8d92a0"><code>6a34ac3</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21096">#21096</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/02ceaec45e17bef19159188a28d9196fed1761be"><code>02ceaec</code></a> chore(deps): update dependency <code>@rollup/plugin-commonjs</code> to v29 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21099">#21099</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
ce5be51d2d |
Bump @tabler/icons-react from 3.45.0 to 3.46.0 in /docs (#1802)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.45.0 to 3.46.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases">@tabler/icons-react's releases</a>.</em></p> <blockquote> <h2>Release 3.46.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/play-bug</code></li> <li><code>outline/play-bugs</code></li> <li><code>outline/remote-control</code></li> <li><code>outline/rocking-chair</code></li> <li><code>outline/run-sprint</code></li> <li><code>outline/sparkles-2-off</code></li> <li><code>outline/tabs</code></li> <li><code>outline/tags-chevron-down</code></li> <li><code>outline/tags-chevron-left</code></li> <li><code>outline/tags-chevron-right</code></li> <li><code>outline/tags-chevron-up</code></li> <li><code>outline/thinking-high</code></li> <li><code>outline/thinking-low</code></li> <li><code>outline/thinking-medium</code></li> <li><code>outline/treasure-chest</code></li> <li><code>outline/twig</code></li> <li><code>outline/vault</code></li> <li><code>outline/yarn</code></li> </ul> <p>Fixed icons: <code>outline/credits</code>, <code>outline/currency-tether</code>, <code>outline/device-3d-camera</code>, <code>outline/device-screen</code>, <code>outline/home-lock</code>, <code>outline/map-lock</code>, <code>outline/notdef</code>, <code>outline/queue-pop-in</code>, <code>outline/server-bolt</code>, <code>outline/server</code>, <code>outline/sparkles-2</code>, <code>outline/transform-point-bottom-left</code>, <code>outline/transform-point-bottom-right</code>, <code>outline/transform-point-top-left</code>, <code>outline/transform-point-top-right</code></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/8ac7d81b72ece11072ef25ea9fd92e80c6f3c9fc"><code>8ac7d81</code></a> Release 3.46.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/fe319f05d943a17efb29c5089e21364d3975843c"><code>fe319f0</code></a> Add publishConfig for public access in all icon packages (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1562">#1562</a>)</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
f35729c089 |
Bump oxlint from 1.75.0 to 1.76.0 in /docs (#1801)
Bumps [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) from 1.75.0 to 1.76.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/oxc-project/oxc/releases">oxlint's releases</a>.</em></p> <blockquote> <h2>oxlint v1.76.0 & oxfmt v0.61.0</h2> <h2>Table of Contents</h2> <ul> <li><a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/blob/HEAD/#oxlint-v1.76.0">Oxlint v1.76.0</a></li> <li><a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/blob/HEAD/#oxfmt-v0.61.0">Oxfmt v0.61.0</a></li> </ul> <h2>Oxlint v1.76.0</h2> <h3>🚀 Features</h3> <ul> <li>8d31dfa linter: Verify eslint/no-restricted-globals config schema (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>) (vigneshwar)</li> <li>7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>) (Bartok)</li> <li>016cf2a linter/oxc: Add bad-match-all-arg rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>) (camc314)</li> <li>cdc941e linter/n: Implement <code>exports-style</code> rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>) (Mikhail Baev)</li> <li>1ad6f6c linter/eslint: Implement <code>id-denylist</code> rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>) (Mikhail Baev)</li> <li>678bbb5 linter/typescript-eslint: Implement suggestion for <code>class-literal-property-style</code> rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24766">#24766</a>) (Mikhail Baev)</li> </ul> <h3>🐛 Bug Fixes</h3> <ul> <li>a5f3a0e linter: Mark missing suggestions as pending (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24956">#24956</a>) (Mikhail Baev)</li> <li>a065946 oxlint: Absolutize explicit CLI paths even with --no-ignore (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24646">#24646</a>) (Bez Sahara)</li> <li>17688bb linter/jsx-a11y/interactive-supports-focus: Match eslint behavior for custom components (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24780">#24780</a>) (Cole Ellison)</li> <li>0aef19e linter/typescript/no-confusing-non-null-assertion: Report <code>in</code> and <code>instanceof</code> (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24825">#24825</a>) (Mikhail Baev)</li> <li>361dce9 linter: Unicorn/no-array-reverse and no-array-sort replacements should be suggestions (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24848">#24848</a>) (klem)</li> <li>9213560 config: Preserve defineConfig field JSDoc (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24326">#24326</a>) (周星星同学)</li> <li>334d884 linter/node/no-top-level-await: Clarify diagnostic (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24803">#24803</a>) (camc314)</li> <li>b9fc6af linter/eslint/func-names: Ignore overloads (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24801">#24801</a>) (camc314)</li> <li>e80574f estree: Handle empty spans serializing <code>ImportMeta</code> and <code>NewTarget</code> (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24775">#24775</a>) (overlookmotel)</li> </ul> <h3>⚡ Performance</h3> <ul> <li>e9de5a1 linter/jest-vitest/no-test-return-statement: Only run on return statements (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24167">#24167</a>) (Cam McHenry)</li> <li>aea459d linter/eslint/func-style: Rewrite rule to not iterate over all nodes (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24156">#24156</a>) (Cam McHenry)</li> <li>fb4398c linter/eslint/no-new-func: Only run on new and call expressions (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24166">#24166</a>) (Cam McHenry)</li> <li>c75dc60 linter: Avoid <code>Vec</code> allocations via <code>bound_names</code> (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24959">#24959</a>) (connorshea)</li> <li>9f9f39d linter/eslint/no-const-assign: Avoid <code>Vec</code> allocation per <code>const</code> declarator (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24953">#24953</a>) (connorshea)</li> <li>10a621e linter/typescript/adjacent-overload-signatures: Avoid collecting vec in some cases (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24874">#24874</a>) (connorshea)</li> <li>ed167e1 linter/node/exports-style: Iterate once over global references (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24877">#24877</a>) (connorshea)</li> <li>69908fe linter: Avoid allocations in jest/no-deprecated-functions (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24866">#24866</a>) (Connor Shea)</li> <li>a3585d7 linter: Speed up jest/vitest prefer-each (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24872">#24872</a>) (Connor Shea)</li> <li>62fe640 linter/eslint/prefer-rest-params: Run once per file (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24873">#24873</a>) (Connor Shea)</li> <li>7a7aa54 linter/eslint/no-this-before-super: Skip files without classes (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24869">#24869</a>) (Connor Shea)</li> <li>4ad0c94 linter/plugins: Faster copying comments to JS allocator (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24858">#24858</a>) (overlookmotel)</li> <li>4c25b91 linter/plugins: Test booleans with explicit <code>=== false</code> (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24830">#24830</a>) (overlookmotel)</li> <li>b7add00 linter/plugins: Remove check in loop in <code>getDisableDirectives</code> (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24833">#24833</a>) (overlookmotel)</li> </ul> <h3>📚 Documentation</h3> <ul> <li>3ff2e0e linter: Clarify config extends types (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>) (Boshen)</li> </ul> <h2>Oxfmt v0.61.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md">oxlint's changelog</a>.</em></p> <blockquote> <h2>[1.76.0] - 2026-07-27</h2> <h3>🚀 Features</h3> <ul> <li>8d31dfa linter: Verify eslint/no-restricted-globals config schema (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>) (vigneshwar)</li> <li>7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>) (Bartok)</li> <li>016cf2a linter/oxc: Add bad-match-all-arg rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>) (camc314)</li> <li>cdc941e linter/n: Implement <code>exports-style</code> rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>) (Mikhail Baev)</li> <li>1ad6f6c linter/eslint: Implement <code>id-denylist</code> rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>) (Mikhail Baev)</li> </ul> <h3>📚 Documentation</h3> <ul> <li>3ff2e0e linter: Clarify config extends types (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>) (Boshen)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/oxc-project/oxc/commit/65fe65d8429e1d1bdf86c517ff08bd119ee87660"><code>65fe65d</code></a> release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24976">#24976</a>)</li> <li><a href="https://github.com/oxc-project/oxc/commit/3ff2e0e6fa1670d2300b2fb44dddc08c2df50a00"><code>3ff2e0e</code></a> docs(linter): clarify config extends types (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>)</li> <li><a href="https://github.com/oxc-project/oxc/commit/8d31dfa3934b0c8d276e022ad546836ee6d1dcd7"><code>8d31dfa</code></a> feat(linter): verify eslint/no-restricted-globals config schema (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>)</li> <li><a href="https://github.com/oxc-project/oxc/commit/7069621199a47158b853743ab6664126ec7b24b4"><code>7069621</code></a> feat(linter): verify jest/vitest prefer-lowercase-title config schema (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>)</li> <li><a href="https://github.com/oxc-project/oxc/commit/016cf2acd64e4f6d34226aecc84e69d342708858"><code>016cf2a</code></a> feat(linter/oxc): add bad-match-all-arg rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>)</li> <li><a href="https://github.com/oxc-project/oxc/commit/cdc941e5f81d00dfca63cc17cc39eb6d1462a9ed"><code>cdc941e</code></a> feat(linter/n): implement <code>exports-style</code> rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>)</li> <li><a href="https://github.com/oxc-project/oxc/commit/1ad6f6c823da92a9b70a9f8c23d355d1b99f9e75"><code>1ad6f6c</code></a> feat(linter/eslint): implement <code>id-denylist</code> rule (<a href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>)</li> <li>See full diff in <a href="https://github.com/oxc-project/oxc/commits/oxlint_v1.76.0/npm/oxlint">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
203a98b838 |
Bump docker/login-action from 4.5.1 to 4.6.0 (#1800)
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.1 to 4.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/login-action/releases">docker/login-action's releases</a>.</em></p> <blockquote> <h2>v4.6.0</h2> <ul> <li>Harden buildx scoped config path handling by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1059">docker/login-action#1059</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1095.0 in <a href="https://redirect.github.com/docker/login-action/pull/1051">docker/login-action#1051</a></li> <li>Bump js-yaml from 5.2.1 to 5.2.2 in <a href="https://redirect.github.com/docker/login-action/pull/1057">docker/login-action#1057</a></li> <li>Bump postcss from 8.5.10 to 8.5.22 in <a href="https://redirect.github.com/docker/login-action/pull/1056">docker/login-action#1056</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.5.2...v4.6.0">https://github.com/docker/login-action/compare/v4.5.2...v4.6.0</a></p> <h2>v4.5.2</h2> <ul> <li>Surface Docker Hub OIDC error responses by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1058">docker/login-action#1058</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.5.1...v4.5.2">https://github.com/docker/login-action/compare/v4.5.1...v4.5.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/dbcb813823bdd20940b903addbd779551569679f"><code>dbcb813</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1051">#1051</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li> <li><a href="https://github.com/docker/login-action/commit/5bcb015ee6ec720ecdeaef2dc1164122e9b209fc"><code>5bcb015</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/b30b2f2d3196c1714318ba0c3c3bec211d949752"><code>b30b2f2</code></a> build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...</li> <li><a href="https://github.com/docker/login-action/commit/9087f1e6d666fe0292409e3c819680c18526e108"><code>9087f1e</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1057">#1057</a> from docker/dependabot/npm_and_yarn/js-yaml-5.2.2</li> <li><a href="https://github.com/docker/login-action/commit/0009830ea169ca16c24c0ea4cac1c325bfa3aee4"><code>0009830</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/23255232d3e43c8f0052d9a0dba82a515a88ce92"><code>2325523</code></a> build(deps): bump js-yaml from 5.2.1 to 5.2.2</li> <li><a href="https://github.com/docker/login-action/commit/4ec1d4a769e8b05a89a7396551dc38b329211688"><code>4ec1d4a</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1056">#1056</a> from docker/dependabot/npm_and_yarn/postcss-8.5.22</li> <li><a href="https://github.com/docker/login-action/commit/5fc99ba47bca274c5a499688f71c7ea79c0ea1b3"><code>5fc99ba</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1053">#1053</a> from docker/dependabot/github_actions/aws-actions/co...</li> <li><a href="https://github.com/docker/login-action/commit/e512bd59d16c53d79ea5c0f0e345fe554453c4bb"><code>e512bd5</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1052">#1052</a> from docker/dependabot/github_actions/codeql-actions...</li> <li><a href="https://github.com/docker/login-action/commit/a146c91b8f371700d323bae808af7cbdc2766ed5"><code>a146c91</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1059">#1059</a> from crazy-max/harden-buildx-scope-paths</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/v4.5.1...v4.6.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
github-actions[bot]
|
fcd82fe580 |
Update contributors in readme (#1799)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
5ce2024b19 |
Bump @types/node from 26.0.1 to 26.1.1 in /frontend (#1798)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 26.0.1 to 26.1.1. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
44885368e1 |
Bump date-fns from 4.1.0 to 4.4.0 in /frontend (#1797)
Bumps [date-fns](https://github.com/date-fns/date-fns) from 4.1.0 to 4.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/date-fns/date-fns/releases">date-fns's releases</a>.</em></p> <blockquote> <h2>v4.4.0</h2> <p>This release revisits the approach to CDN usage and introduces a new package, <code>@date-fns/cdn</code> and deprecates the <code>date-fns</code> CDN scripts. It allowed reducing the zipped package size from <code>5.83 MB</code> down to <code>3.96 MB</code> without introducing any breaking changes.</p> <p>In <code>v5.0.0-alpha.0</code> where CDN scripts are completely removed from <code>date-fns</code> the change is more significant and brings the zipped package size down to <code>2.89 MB</code>.</p> <p>It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.</p> <h3>Changed</h3> <ul> <li> <p><strong>DEPRECATED</strong>: The <code>date-fns</code> CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new <code>@date-fns/cdn</code> package for CDN usage.</p> </li> <li> <p>Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new <code>@date-fns/cdn</code> package that still includes them.</p> </li> </ul> <h2>v4.3.0</h2> <p>Kudos to <a href="https://github.com/ImRodry"><code>@ImRodry</code></a> and <a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a> for their contributions.</p> <h3>Fixed</h3> <ul> <li> <p>Fixed missing modularized optimization fallback (<a href="https://x.com/kossnocorp/status/1731181274579325260">for Next.js and others</a>). See <a href="https://x.com/kossnocorp/status/1731181274579325260">#4193</a>.</p> </li> <li> <p>Fixed <code>pt</code> locale first day of week to be Sunday. See <a href="https://redirect.github.com/date-fns/date-fns/pull/4195">#4195</a> by <a href="https://github.com/ImRodry"><code>@ImRodry</code></a>.</p> </li> <li> <p>Fixed <code>zh-CN</code>, <code>zh-HK</code>, and <code>zh-TW</code> locale month parsing for October, November, and December. See <a href="https://redirect.github.com/date-fns/date-fns/pull/4194">#4194</a> by <a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a>.</p> </li> </ul> <h2>v4.2.1</h2> <h3>Fixed</h3> <ul> <li>Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.</li> </ul> <h2>v4.2.0</h2> <p>This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new <a href="https://date-fns.org/you-dont-need-date-fns">You Don't Need date-fns*</a> page.</p> <p>* Not really</p> <h3>Changed</h3> <ul> <li>Added Temporal API references to the JSDoc annotations of <code>add</code>, <code>addBusinessDays</code>, and <code>addDays</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/date-fns/date-fns/commit/cd53d2538cfa318404eff7ade6449b49bf34562e"><code>cd53d25</code></a> Promote to v4.4.0</li> <li><a href="https://github.com/date-fns/date-fns/commit/d948ec151d395096de8a45fbcd9b1e79c26fda25"><code>d948ec1</code></a> Preserve but deprecate CDN versions for v4, set up v5 with polyfills</li> <li><a href="https://github.com/date-fns/date-fns/commit/ee65753cfc5d73cc9acd43aaa8012b3b233ddf32"><code>ee65753</code></a> Add root <code>mise :format</code> task</li> <li><a href="https://github.com/date-fns/date-fns/commit/9f5bdf5d5a944772aa9668c4fa6567d89ca01fa9"><code>9f5bdf5</code></a> Add positional argument to <code>test/smoke.sh</code> script</li> <li><a href="https://github.com/date-fns/date-fns/commit/651ead6faf331515814803faf457f5b9db7c9729"><code>651ead6</code></a> Split CDN bundles into separate <code>@date-fns/cdn</code> package</li> <li><a href="https://github.com/date-fns/date-fns/commit/224c1a209967dad359a2c2adc9a5b0ef72e4fe7b"><code>224c1a2</code></a> Deprecate type tests as attw hangs on date-fns package</li> <li><a href="https://github.com/date-fns/date-fns/commit/7bb2842dac3d579f84b2de62f015335fb3ac734a"><code>7bb2842</code></a> Switch <code>PACKAGE_OUTPUT_PATH</code> to <code>--dist</code> flag in the package build script</li> <li><a href="https://github.com/date-fns/date-fns/commit/b6ad5acc5ab0b40777a2695ec074c2ffcd982763"><code>b6ad5ac</code></a> Add flags to control package build script</li> <li><a href="https://github.com/date-fns/date-fns/commit/424a783de1fd974bcdbe907c9c5eb5154e9db29f"><code>424a783</code></a> Fix docs release after moving to monorepo setup</li> <li><a href="https://github.com/date-fns/date-fns/commit/f95bcf18b53e6832b2c575c24c98654a24f52699"><code>f95bcf1</code></a> (docs): Add missing <code>tsx</code> dependency</li> <li>Additional commits viewable in <a href="https://github.com/date-fns/date-fns/compare/v4.1.0...v4.4.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
61d7893e64 |
Bump vite from 8.0.16 to 8.1.5 in /frontend (#1795)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.16 to 8.1.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.1.5</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.4</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.3</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.2</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@8.1.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.1.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.1.0-beta.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.0-beta.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.1.4...v8.1.5">8.1.5</a> (2026-07-16)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li><strong>bundled-dev:</strong> avoid duplicated <code>buildEnd</code> (<a href="https://redirect.github.com/vitejs/vite/issues/22931">#22931</a>) (<a href="https://github.com/vitejs/vite/commit/810032097079be1a7da0e2b09ec9d92dd07ec13f">8100320</a>)</li> <li><strong>client:</strong> overlay error message format align rolldown (<a href="https://redirect.github.com/vitejs/vite/issues/22869">#22869</a>) (<a href="https://github.com/vitejs/vite/commit/5a72b8780705b575026617e86b0b92dea63a56a5">5a72b87</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22921">#22921</a>) (<a href="https://github.com/vitejs/vite/commit/fef682d3f067d534a559faf6fd9baedda2e9f8f1">fef682d</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22922">#22922</a>) (<a href="https://github.com/vitejs/vite/commit/3c345e475a5546a1cc6374682af89caebfe9c593">3c345e4</a>)</li> <li><strong>module-runner:</strong> don't crash stack-trace source mapping when globalThis.Buffer is absent (<a href="https://redirect.github.com/vitejs/vite/issues/22945">#22945</a>) (<a href="https://github.com/vitejs/vite/commit/f8b38e316bcefbf29f762f90ee49c88cd52c43b5">f8b38e3</a>)</li> <li><strong>optimizer:</strong> respect importer module format for dynamic import interop with CJS deps (<a href="https://redirect.github.com/vitejs/vite/issues/22951">#22951</a>) (<a href="https://github.com/vitejs/vite/commit/6c08c39ac4fb5868d080a51ff976a44693fc56ab">6c08c39</a>)</li> <li><strong>ssr:</strong> scope switch-case declarations to the switch, not the function (<a href="https://redirect.github.com/vitejs/vite/issues/22893">#22893</a>) (<a href="https://github.com/vitejs/vite/commit/b59a73f76f5557492d83d097bb33b3dd02f27d51">b59a73f</a>)</li> </ul> <h3>Documentation</h3> <ul> <li><strong>build:</strong> fix incorrect <code>@default</code> for build.cssMinify (<a href="https://redirect.github.com/vitejs/vite/issues/22948">#22948</a>) (<a href="https://github.com/vitejs/vite/commit/c88c236186d8e2384653e382dd0960ca1ff5b24c">c88c236</a>)</li> <li><strong>build:</strong> fix incorrect <code>@default</code> for build.lib.formats (<a href="https://redirect.github.com/vitejs/vite/issues/22911">#22911</a>) (<a href="https://github.com/vitejs/vite/commit/369ed609a4aace3aee4e4194a54990694aa4e7ac">369ed60</a>)</li> </ul> <h3>Tests</h3> <ul> <li>avoid scanner scanning all files under <code>__tests__</code> (<a href="https://redirect.github.com/vitejs/vite/issues/22912">#22912</a>) (<a href="https://github.com/vitejs/vite/commit/c961cae2868cc1521457ec60583867f0440e6949">c961cae</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.1.3...v8.1.4">8.1.4</a> (2026-07-09)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li><strong>legacy:</strong> prefer oxc as minifier (fix <a href="https://redirect.github.com/vitejs/vite/issues/21973">#21973</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/22468">#22468</a>) (<a href="https://github.com/vitejs/vite/commit/ab5dafa8e66296ef201f615489fb57954bb740ce">ab5dafa</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>build:</strong> add workaround for building on stackblitz (<a href="https://redirect.github.com/vitejs/vite/issues/22840">#22840</a>) (<a href="https://github.com/vitejs/vite/commit/575c32c29925c554f4ef4068738ab89c6878f615">575c32c</a>)</li> <li><strong>build:</strong> keep <code>import.meta.url</code> in preload function as-is (<a href="https://redirect.github.com/vitejs/vite/issues/22839">#22839</a>) (<a href="https://github.com/vitejs/vite/commit/f1f90ed4742b3cf453428c7e581a6016a4d47321">f1f90ed</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22865">#22865</a>) (<a href="https://github.com/vitejs/vite/commit/d4295a9ffce428c0e51892373e00c07fccc0498a">d4295a9</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22866">#22866</a>) (<a href="https://github.com/vitejs/vite/commit/7cf07e4c5f7a6af276012e0c2ec06e08499e951e">7cf07e4</a>)</li> <li><strong>html:</strong> avoid backtracking in import-only check (<a href="https://redirect.github.com/vitejs/vite/issues/22848">#22848</a>) (<a href="https://github.com/vitejs/vite/commit/b5868c01a124d345664450aaebd677bfba964c05">b5868c0</a>)</li> <li><strong>optimizer:</strong> avoid optimizer run for transform request before init (<a href="https://redirect.github.com/vitejs/vite/issues/22852">#22852</a>) (<a href="https://github.com/vitejs/vite/commit/72a5e2192506f51a5efd09c059815a5c43a9eacb">72a5e21</a>)</li> <li><strong>ssr:</strong> align named export function call stacktrace column with Node (<a href="https://redirect.github.com/vitejs/vite/issues/22829">#22829</a>) (<a href="https://github.com/vitejs/vite/commit/173a1b648c321e0f836e5a94fc47c4fa9b081bfc">173a1b6</a>)</li> <li>strip pure CSS chunk imports when chunkImportMap is enabled (<a href="https://redirect.github.com/vitejs/vite/issues/22841">#22841</a>) (<a href="https://github.com/vitejs/vite/commit/648bd04933093d0aac9565f21a49811437776886">648bd04</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>fix incorrect <code>@default</code> for <code>server.cors</code> (<a href="https://redirect.github.com/vitejs/vite/issues/22859">#22859</a>) (<a href="https://github.com/vitejs/vite/commit/70435b2551ee4fe3a0d55c8a3bb61b96f44d2763">70435b2</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update dependency postcss-modules to v9 (<a href="https://redirect.github.com/vitejs/vite/issues/22867">#22867</a>) (<a href="https://github.com/vitejs/vite/commit/a9539d69efc7a4ccf988bbf5da31c2b416ba990e">a9539d6</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>eliminate ineffectiveDynamicImport warn (<a href="https://redirect.github.com/vitejs/vite/issues/22876">#22876</a>) (<a href="https://github.com/vitejs/vite/commit/ea22fb352aad9a42c0a9d08f39d8a0bae8c111a5">ea22fb3</a>)</li> </ul> <h3>Tests</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/5e7fe129a4dde4f41934083b25e490059985f4e6"><code>5e7fe12</code></a> release: v8.1.5</li> <li><a href="https://github.com/vitejs/vite/commit/6c08c39ac4fb5868d080a51ff976a44693fc56ab"><code>6c08c39</code></a> fix(optimizer): respect importer module format for dynamic import interop wit...</li> <li><a href="https://github.com/vitejs/vite/commit/5a72b8780705b575026617e86b0b92dea63a56a5"><code>5a72b87</code></a> fix(client): overlay error message format align rolldown (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22869">#22869</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/f8b38e316bcefbf29f762f90ee49c88cd52c43b5"><code>f8b38e3</code></a> fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...</li> <li><a href="https://github.com/vitejs/vite/commit/810032097079be1a7da0e2b09ec9d92dd07ec13f"><code>8100320</code></a> fix(bundled-dev): avoid duplicated <code>buildEnd</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22931">#22931</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/c88c236186d8e2384653e382dd0960ca1ff5b24c"><code>c88c236</code></a> docs(build): fix incorrect <code>@default</code> for build.cssMinify (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22948">#22948</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/b59a73f76f5557492d83d097bb33b3dd02f27d51"><code>b59a73f</code></a> fix(ssr): scope switch-case declarations to the switch, not the function (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22">#22</a>...</li> <li><a href="https://github.com/vitejs/vite/commit/fef682d3f067d534a559faf6fd9baedda2e9f8f1"><code>fef682d</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22921">#22921</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/3c345e475a5546a1cc6374682af89caebfe9c593"><code>3c345e4</code></a> fix(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22922">#22922</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/369ed609a4aace3aee4e4194a54990694aa4e7ac"><code>369ed60</code></a> docs(build): fix incorrect <code>@default</code> for build.lib.formats (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22911">#22911</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.1.5/packages/vite">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
5169542733 |
Bump ruff from 0.15.0 to 0.16.0 in /backend (#1794)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.0 to 0.16.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p> <blockquote> <h2>0.16.0</h2> <h2>Release Notes</h2> <p>Released on 2026-07-23.</p> <p>Check out the <a href="https://astral.sh/blog/ruff-v0.16.0">blog post</a> for a migration guide and overview of the changes!</p> <h3>Breaking changes</h3> <ul> <li> <p>Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new <a href="https://docs.astral.sh/ruff/default-rules/">Default Rules</a> page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (<code>E</code>) and pyflakes (<code>F</code>) rules have been removed from the default set: <code>E401</code>, <code>E402</code>, <code>E701</code>, <code>E702</code>, <code>E703</code>, <code>E711</code>, <code>E712</code>, <code>E713</code>, <code>E714</code>, <code>E721</code>, <code>E731</code>, <code>E741</code>, <code>E742</code>, <code>E743</code>, <code>F403</code>, <code>F405</code>, <code>F406</code>, and <code>F722</code>.</p> </li> <li> <p>Ruff can now format Python code blocks in Markdown files and will do this by default. See the <a href="https://docs.astral.sh/ruff/formatter/#markdown-code-formatting">documentation</a> for more details.</p> </li> <li> <p>Ruff now supports <code>ruff: ignore</code> comments at the ends of lines, like <code>noqa</code> comments, or on the line preceding a diagnostic. For example, these both suppress an <a href="https://docs.astral.sh/ruff/rules/unused-import/"><code>unused-import</code></a> (<code>F401</code>) diagnostic:</p> <pre lang="py"><code>import math # ruff: ignore[F401] <h1>ruff: ignore[F401]</h1> <p>import os </code></pre></p> </li> <li> <p>Fixes are now shown in <code>check</code> and <code>format --check</code> output:</p> <pre lang="console"><code>❯ ruff format --check . unformatted: File would be reformatted --> try.md:1:1 | 1 | ```python - import math 2 + import math 3 | ``` | <p>1 file would be reformatted </code></pre></p> <p>This example also shows off the Markdown formatting.</p> </li> <li> <p><code>format --check</code> now supports the same output formats as the linter, including the <code>github</code> and <code>gitlab</code> outputs for rendering annotations in CI:</p> <pre lang="console"><code>❯ ruff format --check --output-format github . ::error title=ruff (unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8: unformatted: File would be reformatted </code></pre> <p>See the CLI help or <a href="https://docs.astral.sh/ruff/settings/#output-format">documentation</a> for the full list of supported formats.</p> </li> <li> <p>The <code>filename</code>, <code>location</code>, <code>end_location</code>, <code>fix.edits[].location</code>, and <code>fix.edits[].end_location</code> fields in the JSON output format may now be <code>null</code> rather than defaulting to the empty string and row 1, column 1, respectively.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p> <blockquote> <h2>0.16.0</h2> <p>Released on 2026-07-23.</p> <p>Check out the <a href="https://astral.sh/blog/ruff-v0.16.0">blog post</a> for a migration guide and overview of the changes!</p> <h3>Breaking changes</h3> <ul> <li> <p>Ruff now enables a much larger set of rules by default (413, up from 59). See the blog post for more details and the new <a href="https://docs.astral.sh/ruff/default-rules/">Default Rules</a> page for a full listing of the enabled rules. Note that this is primarily an expansion, but 18 of the more opinionated pycodestyle (<code>E</code>) and pyflakes (<code>F</code>) rules have been removed from the default set: <code>E401</code>, <code>E402</code>, <code>E701</code>, <code>E702</code>, <code>E703</code>, <code>E711</code>, <code>E712</code>, <code>E713</code>, <code>E714</code>, <code>E721</code>, <code>E731</code>, <code>E741</code>, <code>E742</code>, <code>E743</code>, <code>F403</code>, <code>F405</code>, <code>F406</code>, and <code>F722</code>.</p> </li> <li> <p>Ruff can now format Python code blocks in Markdown files and will do this by default. See the <a href="https://docs.astral.sh/ruff/formatter/#markdown-code-formatting">documentation</a> for more details.</p> </li> <li> <p>Ruff now supports <code>ruff: ignore</code> comments at the ends of lines, like <code>noqa</code> comments, or on the line preceding a diagnostic. For example, these both suppress an <a href="https://docs.astral.sh/ruff/rules/unused-import/"><code>unused-import</code></a> (<code>F401</code>) diagnostic:</p> <pre lang="py"><code>import math # ruff: ignore[F401] <h1>ruff: ignore[F401]</h1> <p>import os </code></pre></p> </li> <li> <p>Fixes are now shown in <code>check</code> and <code>format --check</code> output:</p> <pre lang="console"><code>❯ ruff format --check . unformatted: File would be reformatted --> try.md:1:1 | 1 | ```python - import math 2 + import math 3 | ``` | <p>1 file would be reformatted </code></pre></p> <p>This example also shows off the Markdown formatting.</p> </li> <li> <p><code>format --check</code> now supports the same output formats as the linter, including the <code>github</code> and <code>gitlab</code> outputs for rendering annotations in CI:</p> <pre lang="console"><code></code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/ruff/commit/a2635fd8f39e1d34ce8074cb486809426148f3e9"><code>a2635fd</code></a> Bump 0.16.0 (<a href="https://redirect.github.com/astral-sh/ruff/issues/27136">#27136</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/34334491652f8ceca5246d15c5c5afe0d6bc77ae"><code>3433449</code></a> [ty] Reuse full call diagnostics for implicit setter calls (<a href="https://redirect.github.com/astral-sh/ruff/issues/27115">#27115</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/22400709220931375e072ad5d7460b9fc781af78"><code>2240070</code></a> Reflect <code>ruff: ignore</code> and <code>--add-ignore</code> stabilization in documentation (<a href="https://redirect.github.com/astral-sh/ruff/issues/27">#27</a>...</li> <li><a href="https://github.com/astral-sh/ruff/commit/17ef71142c52230b923dad46ee5554140fc3fd2e"><code>17ef711</code></a> Stabilize <code>--add-ignore</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/27125">#27125</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/ef912bbbe466856aa4aac10ad2a8856eb3d5aef3"><code>ef912bb</code></a> Add newly stabilized rules to defaults (<a href="https://redirect.github.com/astral-sh/ruff/issues/27055">#27055</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/b30f04023281b46f12011f13ce6b45c247e0d2e3"><code>b30f040</code></a> Stabilize new default rules (<a href="https://redirect.github.com/astral-sh/ruff/issues/27035">#27035</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/bcd70c5f10ea97ed52a785d70e7f33b83b7c697a"><code>bcd70c5</code></a> Exclude Markdown files from <code>format-dev</code> runs (<a href="https://redirect.github.com/astral-sh/ruff/issues/27052">#27052</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/87e51e2cbbaed376fc13dead40fd772361fa07c0"><code>87e51e2</code></a> Fix <code>format --check</code> spans for syntax errors (<a href="https://redirect.github.com/astral-sh/ruff/issues/27045">#27045</a>)</li> <li><a href="https://github.com/astral-sh/ruff/commit/afe2723a348364ac7f4b9abd76fc67779490c05e"><code>afe2723</code></a> [<code>flake8-gettext</code>] Stabilize qualified-name and built-in binding resolution (...</li> <li><a href="https://github.com/astral-sh/ruff/commit/a9702d8928344f77a41dbe535f655a69fb04e2df"><code>a9702d8</code></a> [<code>flake8-bandit</code>] Stabilize string literal binding resolution (<code>S310</code>) (<a href="https://redirect.github.com/astral-sh/ruff/issues/26944">#26944</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.15.0...0.16.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
5dad55b44a |
Bump @tabler/icons-react from 3.44.0 to 3.45.0 in /frontend (#1796)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.44.0 to 3.45.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases">@tabler/icons-react's releases</a>.</em></p> <blockquote> <h2>Release 3.45.0</h2> <!-- raw HTML omitted --> <h3>20 new icons:</h3> <ul> <li><code>filled/brand-signal</code></li> <li><code>outline/app-window-bottom-left</code></li> <li><code>outline/app-window-bottom-right</code></li> <li><code>outline/app-window-bottom</code></li> <li><code>outline/app-window-center</code></li> <li><code>outline/arrow-fork-triple</code></li> <li><code>outline/brand-signal</code></li> <li><code>outline/device-vision-pro-wifi</code></li> <li><code>outline/device-workstation</code></li> <li><code>outline/dragon</code></li> <li><code>outline/italic-off</code></li> <li><code>outline/tab-close</code></li> <li><code>outline/text-outline</code></li> <li><code>outline/text-regex-asterisk</code></li> <li><code>outline/text-regex-end</code></li> <li><code>outline/text-regex-plus</code></li> <li><code>outline/text-regex-question</code></li> <li><code>outline/text-regex-start</code></li> <li><code>outline/underline-off</code></li> <li><code>outline/virtual-space</code></li> </ul> <h2>New features</h2> <ul> <li>New package: <code>@tabler/icons-astro</code> — Astro support</li> <li>Added <code>sideEffects: false</code> for better tree-shaking in Vue package</li> <li>Spelling fixes: corrected misspelled icon names</li> </ul> <p>Fixed icons: <code>outline/flip-horizontal</code>, <code>outline/flip-vertical</code></p> <p>Renamed icons:</p> <ul> <li><code>filled/mood-confuzed</code> renamed to <code>filled/mood-confused</code></li> <li><code>outline/brand-adobe-after-effect</code> renamed to <code>outline/brand-adobe-after-effects</code></li> <li><code>outline/brand-kako-talk</code> renamed to <code>outline/brand-kakao-talk</code></li> <li><code>outline/currency-rubel</code> renamed to <code>outline/currency-ruble</code></li> <li><code>outline/foodsteps</code> renamed to <code>outline/footsteps</code></li> <li><code>outline/gender-trasvesti</code> renamed to <code>outline/gender-travesti</code></li> <li><code>outline/ikosaedr</code> renamed to <code>outline/icosahedron</code></li> <li><code>outline/mood-confuzed</code> renamed to <code>outline/mood-confused</code></li> <li><code>outline/physotherapist</code> renamed to <code>outline/physiotherapist</code></li> <li><code>outline/sport-billard</code> renamed to <code>outline/sport-billiard</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/975920ff99c12c4dc9e3fe61a03738330600f9b2"><code>975920f</code></a> Release 3.45.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/4a4b287666235d2dd371f5cf02f96cfbeea235f1"><code>4a4b287</code></a> Add Astro support for Tabler Icons (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1559">#1559</a>)</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.45.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
cedc711154 |
Bump @mantine/form from 9.0.1 to 9.4.2 in /frontend (#1793)
Bumps [@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form) from 9.0.1 to 9.4.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mantinedev/mantine/releases">@mantine/form's releases</a>.</em></p> <blockquote> <h2>9.4.2</h2> <h2>What's Changed</h2> <ul> <li><code>[@mantine/schedule]</code> Fix 1-3 minutes events not aligning correctly in ResourcesWeekView and ResourcesDayView (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9057">#9057</a>)</li> <li><code>[@mantine/form]</code> Fix async validation with debounce on initial keystroke of empty input (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9068">#9068</a>)</li> <li><code>[@mantine/core]</code> Add <code>keepMountedMode</code> prop to Modal and Drawer components (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9056">#9056</a>)</li> <li><code>[@mantine/core]</code> Menubar: Fix menu requiring two clicks to dismiss after switching menus with hover (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9050">#9050</a>)</li> <li><code>[@mantine/core]</code> AppShell: Fix <code>breakpoint={0}</code> not working correctly (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9042">#9042</a>)</li> <li><code>[@mantine/core]</code> Tree: Fix keyboard navigation not working on Safari (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9049">#9049</a>)</li> <li><code>[@mantine/notifications]</code> NotificationContainer: Fix <code>autoClose</code> leak (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9048">#9048</a>)</li> <li><code>[@mantine/core]</code> Collapse: Add <code>keepMountedMode</code> prop (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9021">#9021</a>)</li> <li><code>[@mantine/dates]</code> TimePicker: Fix incorrect <code>withSeconds</code> handling when pasting partial values (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9041">#9041</a>)</li> <li><code>[@mantine/schedule]</code> Add option to customize current time in ResourcesDayView and ResourcesWeekView components</li> <li><code>[@mantine/core]</code> TreeSelect: Add <code>expand</code> callback to <code>renderNode</code> payload</li> <li><code>[@mantine/core]</code> Fix incorrect empty children arrays handling in Tree and TreeSelect</li> <li><code>[@mantine/hooks]</code> Fix unstable <code>scrollIntoView</code> for some bundlers (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9035">#9035</a>)</li> <li><code>[@mantine/schedule]</code> Add <code>intervalMinutes</code> more than 60 support to ResourcesDayView and ResourcesWeekView</li> <li><code>[@mantine/schedule]</code> ResourcesWeekView: Fix incorrect handling of events with small duration</li> <li><code>[@mantine/schedule]</code> ResourcesDayView: Fix events with small durations not being visible</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/saadpocalypse"><code>@saadpocalypse</code></a> made their first contribution in <a href="https://redirect.github.com/mantinedev/mantine/pull/9021">mantinedev/mantine#9021</a></li> <li><a href="https://github.com/Arman-Luthra"><code>@Arman-Luthra</code></a> made their first contribution in <a href="https://redirect.github.com/mantinedev/mantine/pull/9050">mantinedev/mantine#9050</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mantinedev/mantine/compare/9.4.1...9.4.2">https://github.com/mantinedev/mantine/compare/9.4.1...9.4.2</a></p> <h2>9.4.1</h2> <h2>What's Changed</h2> <ul> <li><code>[@mantine/form]</code> Fix some functions not working correctly with react compiler (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9007">#9007</a>)</li> <li><code>[@mantine/charts]</code> Heatmap: Fix values outside the provided domain rendering with no fill (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8982">#8982</a>)</li> <li><code>[@mantine/core]</code> RollingNumber: Fix rendering <code>-0</code> for values that round to zero (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8983">#8983</a>)</li> <li><code>[@mantine/core]</code> Slider: Fix incorrect marks labels position in RTL layouts (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8996">#8996</a>)</li> <li><code>[@mantine/hooks]</code> Fix use-set and use-map hooks using stale values when used with React compiler (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9008">#9008</a>)</li> <li><code>[@mantine/form]</code> Add <code>FormProviderProps</code> type export (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9009">#9009</a>)</li> <li><code>[@mantine/schedule]</code> ResourcesDayView: Fix incorrect multiday events rendering (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9014">#9014</a>)</li> <li><code>[@mantine/dates]</code> TimePicker: Fix duration values greater than 9999 hours not working (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9002">#9002</a>)</li> <li><code>[@mantine/core]</code> Menu: Mark <code>non-menuitem</code> dropdown children as presentational (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9004">#9004</a>)</li> <li><code>[@mantine/core]</code> Collapse: Fix <code>ref</code> and <code>style</code> props not working when <code>transitionDuration: 0</code> (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9013">#9013</a>)</li> <li><code>[@mantine/core]</code> Textarea: Fix autosize not working correctly with <code>minRows</code> on initial render</li> <li><code>[@mantine/schedule]</code> ResourcesWeekView: Add events resizing support</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ayu3456"><code>@ayu3456</code></a> made their first contribution in <a href="https://redirect.github.com/mantinedev/mantine/pull/9013">mantinedev/mantine#9013</a></li> <li><a href="https://github.com/Sanjays2402"><code>@Sanjays2402</code></a> made their first contribution in <a href="https://redirect.github.com/mantinedev/mantine/pull/9004">mantinedev/mantine#9004</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mantinedev/mantine/compare/9.4.0...9.4.1">https://github.com/mantinedev/mantine/compare/9.4.0...9.4.1</a></p> <h2>9.4.0 🥵</h2> <p><a href="https://mantine.dev/changelog/9-4-0">View changelog with demos on mantine.dev website</a></p> <h2>Support Mantine development</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mantinedev/mantine/commit/e5752de4067bd58f6cdd970660b3c8469a56d4e5"><code>e5752de</code></a> [release] Version: 9.4.2</li> <li><a href="https://github.com/mantinedev/mantine/commit/1d68be7025ceca3619eda9db00b9395c53b75c0a"><code>1d68be7</code></a> [<code>@mantine/form</code>] Fix async validation with debounce on initial keystroke of em...</li> <li><a href="https://github.com/mantinedev/mantine/commit/d709e0bc277255c2a857f138cc694028273d8697"><code>d709e0b</code></a> [release] Version: 9.4.1</li> <li><a href="https://github.com/mantinedev/mantine/commit/f53d726d4f7e32381cc3723e2f547e5136b151ae"><code>f53d726</code></a> [<code>@mantine/form</code>] Fix some functions not working correctly with react compiler ...</li> <li><a href="https://github.com/mantinedev/mantine/commit/61a8d3508c8bb296d24058407e2c584fe2e38a3c"><code>61a8d35</code></a> [<code>@mantine/form</code>] Add <code>FormProviderProps</code> type export (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9009">#9009</a>)</li> <li><a href="https://github.com/mantinedev/mantine/commit/75d5ab5b419f3aa560bb56fc1d75d7815c5fb2f8"><code>75d5ab5</code></a> [release] Version: 9.4.0</li> <li><a href="https://github.com/mantinedev/mantine/commit/73a04e07abd340d9e11cb956e04e8ee8dd105560"><code>73a04e0</code></a> [release] Version: 9.3.2</li> <li><a href="https://github.com/mantinedev/mantine/commit/33b8c0f3c1ce6dbdd692d4c2ecc805875aad3d26"><code>33b8c0f</code></a> [release] Version: 9.3.1</li> <li><a href="https://github.com/mantinedev/mantine/commit/bf03b9a0d9a5ece7ddf834532dcaf323907255ec"><code>bf03b9a</code></a> [release] Version: 9.3.0</li> <li><a href="https://github.com/mantinedev/mantine/commit/4685c4195a855641fcf0331dc6e0857bd03fdad8"><code>4685c41</code></a> [release] Version: 9.2.2</li> <li>Additional commits viewable in <a href="https://github.com/mantinedev/mantine/commits/9.4.2/packages/@mantine/form">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
29f4154e32 |
Bump fastapi from 0.139.0 to 0.140.0 in /backend (#1792)
Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.139.0 to 0.140.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastapi/fastapi/releases">fastapi's releases</a>.</em></p> <blockquote> <h2>0.140.0</h2> <h3>Refactors</h3> <ul> <li>⚡️ Reduce memory usage in dependencies. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16049">#16049</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Docs</h3> <ul> <li>📝 Fix links in docs. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15967">#15967</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> <li>📝 Add Library Skills documentation. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16041">#16041</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>📝 Update docs to use uv projects by default. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16032">#16032</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>📝 Restructure FastAPI People and related pages. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16015">#16015</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Internal</h3> <ul> <li>👷 Add CI memory benchmark. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16046">#16046</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>👥 Update FastAPI People - Sponsors. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16027">#16027</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🔥 Remove now-obsolete scripts to generate data for FastAPI People. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16016">#16016</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h2>0.139.2</h2> <h3>Fixes</h3> <ul> <li>🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16013">#16013</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h2>0.139.1</h2> <h3>Fixes</h3> <ul> <li>🐛 Fix frontend fallback support for doted paths like <code>/users/john.doe</code>. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16011">#16011</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Docs</h3> <ul> <li>📝 Fix topic repository list not being displayed and <code>skip_users</code> not being applied. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15995">#15995</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> </ul> <h3>Translations</h3> <ul> <li>🌐 Update translations for tr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16005">#16005</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh-hant (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15996">#15996</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for fr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16006">#16006</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for de (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15999">#15999</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ko (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16004">#16004</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16001">#16001</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for uk (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16003">#16003</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ja (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15998">#15998</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for pt (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16000">#16000</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for es (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15997">#15997</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ru (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16002">#16002</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for hi (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15990">#15990</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for hi (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15925">#15925</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for hi (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15797">#15797</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update <code>llm-prompt.md</code> for Hindi. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15810">#15810</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> <li>🌐 Fix language-specific translation prompt for Russian language. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15924">#15924</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastapi/fastapi/commit/255b912928904e3ba5980425a54d6837c8bd1a1c"><code>255b912</code></a> 🔖 Release version 0.140.0 (<a href="https://redirect.github.com/fastapi/fastapi/issues/16050">#16050</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/892eacd27dcdcfe6c5ea114543ff473cbbfd7c6f"><code>892eacd</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/027082950068d6e3897b5422ab6cde3168f7d8b0"><code>0270829</code></a> ⚡️ Reduce memory usage in dependencies (<a href="https://redirect.github.com/fastapi/fastapi/issues/16049">#16049</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/ae031be7b5a2df589f63f4d25389cf07b7b8fc86"><code>ae031be</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/f3644b33cdaf1b14868d77f1c309e0a455c6bac8"><code>f3644b3</code></a> 📝 Fix links in docs (<a href="https://redirect.github.com/fastapi/fastapi/issues/15967">#15967</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/1e24ca0e12e9a66cecb1e42780b9116374e2618d"><code>1e24ca0</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/513c396322664bcb3bdcb3946c440a8ed8ef080b"><code>513c396</code></a> 👷 Add CI memory benchmark (<a href="https://redirect.github.com/fastapi/fastapi/issues/16046">#16046</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/a64dfbbd21a445288ff583d58e1f646fe6baf3af"><code>a64dfbb</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/4f155486f0c1465c5e1f8701544acc10cb8a78bb"><code>4f15548</code></a> 📝 Add Library Skills documentation (<a href="https://redirect.github.com/fastapi/fastapi/issues/16041">#16041</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/704fbe1439341994100622853f515a8af7ccc2eb"><code>704fbe1</code></a> 📝 Update release notes</li> <li>Additional commits viewable in <a href="https://github.com/fastapi/fastapi/compare/0.139.0...0.140.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
02ab76eeea |
Bump types-simplejson from 3.20.0.20250218 to 4.1.0.20260724 in /backend (#1791)
Bumps [types-simplejson](https://github.com/python/typeshed) from 3.20.0.20250218 to 4.1.0.20260724. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/python/typeshed/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
b2a0209ca4 |
Bump react-qr-code from 2.0.18 to 2.2.0 in /frontend (#1790)
Bumps [react-qr-code](https://github.com/rosskhanas/react-qr-code) from 2.0.18 to 2.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rosskhanas/react-qr-code/releases">react-qr-code's releases</a>.</em></p> <blockquote> <h2>Release 2.2.0</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.1.1...2.2.0">2.2.0</a> (2026-06-09)</h2> <h3>Bug Fixes</h3> <ul> <li>add types to package.json exports (<a href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593">19158d2</a>)</li> </ul> <h2>Release 2.1.1</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.1.0...2.1.1">2.1.1</a> (2026-06-08)</h2> <h2>Release 2.0.21</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.20...2.0.21">2.0.21</a> (2026-04-29)</h2> <h2>Release 2.0.20</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.19...2.0.20">2.0.20</a> (2026-04-29)</h2> <h2>Release 2.0.19</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.0.19">2.0.19</a> (2026-04-29)</h2> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rosskhanas/react-qr-code/blob/master/CHANGELOG.md">react-qr-code's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.1.1...2.2.0">2.2.0</a> (2026-06-09)</h2> <h3>Bug Fixes</h3> <ul> <li>add types to package.json exports (<a href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593">19158d2</a>)</li> </ul> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.1.0...2.1.1">2.1.1</a> (2026-06-08)</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.21...2.1.0">2.1.0</a> (2026-06-08)</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.20...2.0.21">2.0.21</a> (2026-04-29)</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.19...2.0.20">2.0.20</a> (2026-04-29)</h2> <h2><a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.0.19">2.0.19</a> (2026-04-29)</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/821cb672ea8db747e75593d90d04c245f83dd2fa"><code>821cb67</code></a> chore: release 2.2.0</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/a658bff4fe05d29c25c3d8be56b9aedf8dbf4529"><code>a658bff</code></a> migrate from qr.js to qrcode-generator</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/fbf8bfd21f7063a372ba6be96cf0971d80e372bd"><code>fbf8bfd</code></a> Merge pull request <a href="https://redirect.github.com/rosskhanas/react-qr-code/issues/290">#290</a> from Fleny113/fix/types</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593"><code>19158d2</code></a> fix: add types to package.json exports</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/f2213b73d140e18950f61476c9ab702aacb56f44"><code>f2213b7</code></a> chore: release 2.1.1</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/c0174ec975b2634c2992cda1a25bae64e02374ef"><code>c0174ec</code></a> fix rn import</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/f08e7320aeb9c71cdfe9d674155eb19d68d3c77f"><code>f08e732</code></a> chore: release 2.1.0</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/f48bdf2b0bdb7e84ec48cbc964342b3489b9e610"><code>f48bdf2</code></a> build mjs with rollup</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/a2ac3f549bef3a5b5b92d4c6d4fcb4ca8b60ec82"><code>a2ac3f5</code></a> refactor src</li> <li><a href="https://github.com/rosskhanas/react-qr-code/commit/d95d7a3ba534d8115fe7eeebf9cb75478134f6e8"><code>d95d7a3</code></a> upgrade babel & other deps</li> <li>Additional commits viewable in <a href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.2.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
ab7b2a1ad4 |
Bump lucide-react from 1.24.0 to 1.27.0 in /docs (#1789)
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 1.24.0 to 1.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lucide-icons/lucide/releases">lucide-react's releases</a>.</em></p> <blockquote> <h2>Version 1.27.0</h2> <h2>What's Changed</h2> <ul> <li>feat(icons): removed brand names from tags & revised brand stopwords by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4575">lucide-icons/lucide#4575</a></li> <li>fix(docs): Fix site build by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4582">lucide-icons/lucide#4582</a></li> <li>fix(icons): optimised <code>square-scissors</code> icons by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4581">lucide-icons/lucide#4581</a></li> <li>fix(packages/angular): add more supported attributes for SVG nodes by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4570">lucide-icons/lucide#4570</a></li> <li>feat(icons): added <code>pending-cw</code> icon by <a href="https://github.com/NielsLazaroms"><code>@NielsLazaroms</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4439">lucide-icons/lucide#4439</a></li> <li>fix(icons): changed <code>zap</code> and <code>zap-off</code> icons by <a href="https://github.com/kapowaz"><code>@kapowaz</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4536">lucide-icons/lucide#4536</a></li> <li>feat(icons): add <code>square-off</code> icon by <a href="https://github.com/october-learns"><code>@october-learns</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4496">lucide-icons/lucide#4496</a></li> <li>chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4572">lucide-icons/lucide#4572</a></li> <li>fix(icons): changed <code>toolbox</code> icon by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4571">lucide-icons/lucide#4571</a></li> <li>feat(icons): add scan-square by <a href="https://github.com/samuelalake"><code>@samuelalake</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4550">lucide-icons/lucide#4550</a></li> <li>feat(icons): added <code>user-shield</code> icon by <a href="https://github.com/MArtytraM99"><code>@MArtytraM99</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/3099">lucide-icons/lucide#3099</a></li> <li>feat(icons): added <code>mosque</code> icon by <a href="https://github.com/iskepr"><code>@iskepr</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4494">lucide-icons/lucide#4494</a></li> <li>fix(request-review): Remove pull_request_target by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4593">lucide-icons/lucide#4593</a></li> <li>fix(icons): changed <code>feather</code> icon by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4584">lucide-icons/lucide#4584</a></li> <li>feat(ci): added custom prettier plugin for icon SVG files by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4576">lucide-icons/lucide#4576</a></li> <li>ci(ci.yml): Remove concurrency in ci.yml by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4595">lucide-icons/lucide#4595</a></li> <li>fix(icons): changed <code>barrel</code> icon by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4592">lucide-icons/lucide#4592</a></li> <li>feat(lab): Migrate lab to main repo. by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4521">lucide-icons/lucide#4521</a></li> <li>fix(icons): changed <code>trophy</code> icon by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4591">lucide-icons/lucide#4591</a></li> <li>feat(analytics): add utm source and medium by <a href="https://github.com/jguddas"><code>@jguddas</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4596">lucide-icons/lucide#4596</a></li> <li>feat(docs): Add lab requirement in pull_request_template.md by <a href="https://github.com/danielbayley"><code>@danielbayley</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/3651">lucide-icons/lucide#3651</a></li> <li>feat(icons): replaces <code>podcast</code> icon with new <code>mic-*</code> icons by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4583">lucide-icons/lucide#4583</a></li> <li>feat(icons): add layout-freeform by <a href="https://github.com/samuelalake"><code>@samuelalake</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4543">lucide-icons/lucide#4543</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/NielsLazaroms"><code>@NielsLazaroms</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4439">lucide-icons/lucide#4439</a></li> <li><a href="https://github.com/kapowaz"><code>@kapowaz</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4536">lucide-icons/lucide#4536</a></li> <li><a href="https://github.com/october-learns"><code>@october-learns</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4496">lucide-icons/lucide#4496</a></li> <li><a href="https://github.com/samuelalake"><code>@samuelalake</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4550">lucide-icons/lucide#4550</a></li> <li><a href="https://github.com/iskepr"><code>@iskepr</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4494">lucide-icons/lucide#4494</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lucide-icons/lucide/compare/1.26.0...1.27.0">https://github.com/lucide-icons/lucide/compare/1.26.0...1.27.0</a></p> <h2>Version 1.26.0</h2> <h2>What's Changed</h2> <ul> <li>fix(docs): fix home page package links & accessible labels by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4540">lucide-icons/lucide#4540</a></li> <li>fix(icons): changed <code>columns-3-cog</code> icon by <a href="https://github.com/kamilasw"><code>@kamilasw</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4578">lucide-icons/lucide#4578</a></li> <li>fix(icons): extended metadata of <code>ad</code> icon by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4579">lucide-icons/lucide#4579</a></li> <li>fix(icons): changed <code>book-open</code> icons by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4565">lucide-icons/lucide#4565</a></li> <li>feat(icons): added <code>shield-keyhole</code> icon by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4580">lucide-icons/lucide#4580</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/kamilasw"><code>@kamilasw</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4578">lucide-icons/lucide#4578</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lucide-icons/lucide/compare/1.25.0...1.26.0">https://github.com/lucide-icons/lucide/compare/1.25.0...1.26.0</a></p> <h2>Version 1.25.0</h2> <h2>What's Changed</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lucide-icons/lucide/commit/f229f83f0c42f46befeac3cfd8ef7aaa82a71325"><code>f229f83</code></a> chore(depedencies): Update dependencies (<a href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4553">#4553</a>)</li> <li>See full diff in <a href="https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
5317467706 |
Bump @tabler/icons-react from 3.44.0 to 3.45.0 in /docs (#1788)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.44.0 to 3.45.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases">@tabler/icons-react's releases</a>.</em></p> <blockquote> <h2>Release 3.45.0</h2> <!-- raw HTML omitted --> <h3>20 new icons:</h3> <ul> <li><code>filled/brand-signal</code></li> <li><code>outline/app-window-bottom-left</code></li> <li><code>outline/app-window-bottom-right</code></li> <li><code>outline/app-window-bottom</code></li> <li><code>outline/app-window-center</code></li> <li><code>outline/arrow-fork-triple</code></li> <li><code>outline/brand-signal</code></li> <li><code>outline/device-vision-pro-wifi</code></li> <li><code>outline/device-workstation</code></li> <li><code>outline/dragon</code></li> <li><code>outline/italic-off</code></li> <li><code>outline/tab-close</code></li> <li><code>outline/text-outline</code></li> <li><code>outline/text-regex-asterisk</code></li> <li><code>outline/text-regex-end</code></li> <li><code>outline/text-regex-plus</code></li> <li><code>outline/text-regex-question</code></li> <li><code>outline/text-regex-start</code></li> <li><code>outline/underline-off</code></li> <li><code>outline/virtual-space</code></li> </ul> <h2>New features</h2> <ul> <li>New package: <code>@tabler/icons-astro</code> — Astro support</li> <li>Added <code>sideEffects: false</code> for better tree-shaking in Vue package</li> <li>Spelling fixes: corrected misspelled icon names</li> </ul> <p>Fixed icons: <code>outline/flip-horizontal</code>, <code>outline/flip-vertical</code></p> <p>Renamed icons:</p> <ul> <li><code>filled/mood-confuzed</code> renamed to <code>filled/mood-confused</code></li> <li><code>outline/brand-adobe-after-effect</code> renamed to <code>outline/brand-adobe-after-effects</code></li> <li><code>outline/brand-kako-talk</code> renamed to <code>outline/brand-kakao-talk</code></li> <li><code>outline/currency-rubel</code> renamed to <code>outline/currency-ruble</code></li> <li><code>outline/foodsteps</code> renamed to <code>outline/footsteps</code></li> <li><code>outline/gender-trasvesti</code> renamed to <code>outline/gender-travesti</code></li> <li><code>outline/ikosaedr</code> renamed to <code>outline/icosahedron</code></li> <li><code>outline/mood-confuzed</code> renamed to <code>outline/mood-confused</code></li> <li><code>outline/physotherapist</code> renamed to <code>outline/physiotherapist</code></li> <li><code>outline/sport-billard</code> renamed to <code>outline/sport-billiard</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/975920ff99c12c4dc9e3fe61a03738330600f9b2"><code>975920f</code></a> Release 3.45.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/4a4b287666235d2dd371f5cf02f96cfbeea235f1"><code>4a4b287</code></a> Add Astro support for Tabler Icons (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1559">#1559</a>)</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.45.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
cfc288fff2 |
Bump @radix-ui/react-avatar from 1.1.11 to 1.2.6 in /docs (#1787)
Bumps [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar) from 1.1.11 to 1.2.6. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md">@radix-ui/react-avatar's changelog</a>.</em></p> <blockquote> <h2>1.2.6</h2> <ul> <li>Reverted breaking changes that caused compatibility issues with React Server Components.</li> <li>Updated dependencies: <code>@radix-ui/react-context@1.2.2</code>, <code>@radix-ui/react-primitive@2.1.10</code>, <code>@radix-ui/react-use-callback-ref@1.1.4</code>, <code>@radix-ui/react-use-is-hydrated@0.1.3</code>, <code>@radix-ui/react-use-layout-effect@1.1.4</code></li> </ul> <h2>1.2.5</h2> <ul> <li>Updated dependencies: <code>@radix-ui/react-primitive@2.1.9</code></li> </ul> <h2>1.2.4</h2> <ul> <li>Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.</li> <li>Updated dependencies: <code>@radix-ui/primitive@1.1.7</code>, <code>@radix-ui/react-context@1.2.1</code>, <code>@radix-ui/react-primitive@2.1.8</code>, <code>@radix-ui/react-use-callback-ref@1.1.3</code>, <code>@radix-ui/react-use-is-hydrated@0.1.2</code>, <code>@radix-ui/react-use-layout-effect@1.1.3</code></li> </ul> <h2>1.2.3</h2> <ul> <li>Improved tree-shaking so bundlers can drop unused components. Component parts are now marked <code>/* @__PURE__ */</code> and use named render functions instead of <code>Component.displayName = ...</code> assignments, which previously prevented dead-code elimination with some bundlers.</li> <li>Fix dev-only checks with conditional exports to drop dev-warnings from production builds.</li> <li>Updated dependencies: <code>@radix-ui/primitive@1.1.6</code>, <code>@radix-ui/react-context@1.2.0</code>, <code>@radix-ui/react-primitive@2.1.7</code>, <code>@radix-ui/react-use-callback-ref@1.1.2</code>, <code>@radix-ui/react-use-is-hydrated@0.1.1</code>, <code>@radix-ui/react-use-layout-effect@1.1.2</code></li> </ul> <h2>1.2.2</h2> <ul> <li>Updated dependencies: <code>@radix-ui/react-context@1.2.0</code></li> </ul> <h2>1.2.1</h2> <ul> <li>Updated dependencies: <code>@radix-ui/react-primitive@2.1.7</code></li> </ul> <h2>1.2.0</h2> <ul> <li>Fixed several edge cases with Avatar's loading state <ul> <li>An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.</li> <li>Rendering multiple <code>Avatar.Image</code> components per <code>Avatar.Root</code> was never supported and results in buggy, unpredictable behavior. We now warn about this in development.</li> <li>Zero-sized images were treated as <code>loading</code>, meaning that <code>onLoadingStatusChange</code> is never called once loaded. A zero-sized image now triggers an <code>error</code> status on load.</li> </ul> </li> </ul> <h3>Other updates</h3> <ul> <li>Fixed console warnings to show in test environments.</li> <li>Updated dependencies: <code>@radix-ui/react-primitive@2.1.6</code></li> </ul> <h2>1.1.12</h2> <ul> <li>Added repository.directory to all package.json files</li> <li>Updated dependencies: <code>@radix-ui/react-context@1.1.4</code>, <code>@radix-ui/react-primitive@2.1.5</code>, <code>@radix-ui/react-use-callback-ref@1.1.2</code>, <code>@radix-ui/react-use-is-hydrated@0.1.1</code>, <code>@radix-ui/react-use-layout-effect@1.1.2</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for <code>@radix-ui/react-avatar</code> since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
1c7ab4199d |
Bump autoprefixer from 10.4.22 to 10.5.4 in /docs (#1786)
Bumps [autoprefixer](https://github.com/postcss/autoprefixer) from 10.4.22 to 10.5.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/autoprefixer/releases">autoprefixer's releases</a>.</em></p> <blockquote> <h2>10.5.4</h2> <ul> <li>Fixed prefixed rule duplication (by <a href="https://github.com/xianjianlf2"><code>@xianjianlf2</code></a>).</li> </ul> <h2>10.5.3</h2> <ul> <li>Fixed brackets and gradient parser (<a href="https://github.com/alanturing881"><code>@alanturing881</code></a>).</li> </ul> <h2>10.5.2</h2> <ul> <li>Moved <code>-webkit-fill-available</code> before <code>-moz-available</code>, so Firefox will use <code>-webkit-</code> version which is closer to <code>stretch</code>.</li> </ul> <h2>10.5.1</h2> <ul> <li>Fixed <code>grid-area</code> span reset for overriding areas (by <a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a>).</li> </ul> <h2>10.5.0 “Each Endeavouring, All Achieving”</h2> <!-- raw HTML omitted --> <ul> <li>Added <code>mask-position-x</code> and <code>mask-position-y</code> support (by <a href="https://github.com/toporek"><code>@toporek</code></a>).</li> </ul> <h2>10.4.27</h2> <ul> <li>Removed development key from <code>package.json</code>.</li> </ul> <h2>10.4.26</h2> <ul> <li>Reduced package size.</li> </ul> <h2>10.4.25</h2> <ul> <li>Fixed broken gradients on CSS Custom Properties (by <a href="https://github.com/serger777"><code>@serger777</code></a>).</li> </ul> <h2>10.4.24</h2> <ul> <li>Made Autoprefixer a little faster (by <a href="https://github.com/Cherry"><code>@Cherry</code></a>).</li> </ul> <h2>10.4.23</h2> <ul> <li>Reduced dependencies (by <a href="https://github.com/hyperz111"><code>@hyperz111</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md">autoprefixer's changelog</a>.</em></p> <blockquote> <h2>10.5.4</h2> <ul> <li>Fixed prefixed rule duplication (by <a href="https://github.com/xianjianlf2"><code>@xianjianlf2</code></a>).</li> </ul> <h2>10.5.3</h2> <ul> <li>Fixed brackets and gradient parser (<a href="https://github.com/alanturing881"><code>@alanturing881</code></a>).</li> </ul> <h2>10.5.2</h2> <ul> <li>Moved <code>-webkit-fill-available</code> before <code>-moz-available</code>, so Firefox will use <code>-webkit-</code> version which is closer to <code>stretch</code>.</li> </ul> <h2>10.5.1</h2> <ul> <li>Fixed <code>grid-area</code> span reset for overriding areas (by <a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a>).</li> </ul> <h2>10.5.0 “Each Endeavouring, All Achieving”</h2> <ul> <li>Added <code>mask-position-x</code> and <code>mask-position-y</code> support (by <a href="https://github.com/toporek"><code>@toporek</code></a>).</li> </ul> <h2>10.4.27</h2> <ul> <li>Removed development key from <code>package.json</code>.</li> </ul> <h2>10.4.26</h2> <ul> <li>Reduced package size.</li> </ul> <h2>10.4.25</h2> <ul> <li>Fixed broken gradients on CSS Custom Properties (by <a href="https://github.com/serger777"><code>@serger777</code></a>).</li> </ul> <h2>10.4.24</h2> <ul> <li>Made Autoprefixer a little faster (by <a href="https://github.com/Cherry"><code>@Cherry</code></a>).</li> </ul> <h2>10.4.23</h2> <ul> <li>Reduced dependencies (by <a href="https://github.com/hyperz111"><code>@hyperz111</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/autoprefixer/commit/4cad00f0e839f3d7bbcdcc00b7df6fc448fb28f3"><code>4cad00f</code></a> Release 10.5.4 version</li> <li><a href="https://github.com/postcss/autoprefixer/commit/e62a4b1782f4ece51070feba79b0ff19f4305c68"><code>e62a4b1</code></a> Update CI config</li> <li><a href="https://github.com/postcss/autoprefixer/commit/c8f0d0ae00f5bb28bbcc3413f70b088020007469"><code>c8f0d0a</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/autoprefixer/commit/cae35771dc4a4dfeda637a31dc1795ace6d9d28b"><code>cae3577</code></a> Move back to latest pnpm 11</li> <li><a href="https://github.com/postcss/autoprefixer/commit/fd31eb33b56ab9663d298b5bf08ae4ff47f76878"><code>fd31eb3</code></a> Fix duplicated prefixed selectors on reformatted CSS (<a href="https://redirect.github.com/postcss/autoprefixer/issues/1552">#1552</a>)</li> <li><a href="https://github.com/postcss/autoprefixer/commit/958d390787c31c3044c1fb68ec37efc29637e26b"><code>958d390</code></a> Release 10.5.3 version</li> <li><a href="https://github.com/postcss/autoprefixer/commit/21d2adb4d1fc6103c1e3cc39c991de59fdb5496e"><code>21d2adb</code></a> Fix gradient parser</li> <li><a href="https://github.com/postcss/autoprefixer/commit/f7ddae99f0ebfa3961a5c14bd9ecb7d4310601a6"><code>f7ddae9</code></a> Fix bracket parser</li> <li><a href="https://github.com/postcss/autoprefixer/commit/10ea5e7b8511a3e07aeb8a0f50f61496bc3faf4f"><code>10ea5e7</code></a> Update dependencies and remove patch</li> <li><a href="https://github.com/postcss/autoprefixer/commit/b6e8a2a4672cafafcb3bb2c72cd0027a31b1a320"><code>b6e8a2a</code></a> Update Dev Container</li> <li>Additional commits viewable in <a href="https://github.com/postcss/autoprefixer/compare/10.4.22...10.5.4">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for autoprefixer since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
9b89792a79 |
Bump docker/login-action from 4.4.0 to 4.5.1 (#1785)
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.4.0 to 4.5.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/login-action/releases">docker/login-action's releases</a>.</em></p> <blockquote> <h2>v4.5.1</h2> <ul> <li>Support <code>dhi.io</code> as Docker Hub OIDC registry by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1054">docker/login-action#1054</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.5.0...v4.5.1">https://github.com/docker/login-action/compare/v4.5.0...v4.5.1</a></p> <h2>v4.5.0</h2> <ul> <li><a href="https://github.com/docker/login-action#docker-hub">Docker Hub OIDC</a> login support by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1048">docker/login-action#1048</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1091.0 in <a href="https://redirect.github.com/docker/login-action/pull/1037">docker/login-action#1037</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.92.0 to 0.94.0 in <a href="https://redirect.github.com/docker/login-action/pull/1044">docker/login-action#1044</a> <a href="https://redirect.github.com/docker/login-action/pull/1050">docker/login-action#1050</a></li> <li>Bump brace-expansion from 1.1.13 to 1.1.16 in <a href="https://redirect.github.com/docker/login-action/pull/1046">docker/login-action#1046</a></li> <li>Bump js-yaml from 5.2.0 to 5.2.1 in <a href="https://redirect.github.com/docker/login-action/pull/1038">docker/login-action#1038</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.4.0...v4.5.0">https://github.com/docker/login-action/compare/v4.4.0...v4.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/abd2ef45e78c5afb21d64d4ca52ee8550d9572c7"><code>abd2ef4</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1055">#1055</a> from crazy-max/test-registry-auth-oidc</li> <li><a href="https://github.com/docker/login-action/commit/d49d3a9839fef51322fa44989a44fdc43fccfc22"><code>d49d3a9</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1054">#1054</a> from crazy-max/oidc-missing-dhi</li> <li><a href="https://github.com/docker/login-action/commit/b58b17c30b4db92a4ed049b213cae512b12e460b"><code>b58b17c</code></a> test: cover Docker Hub OIDC with registry-auth</li> <li><a href="https://github.com/docker/login-action/commit/be646c21cec26cea303e29290d5f6ba6fde8e606"><code>be646c2</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/d77c059cb9956cedaa427dc022d89f39acba678f"><code>d77c059</code></a> support dhi.io as Docker Hub OIDC registry</li> <li><a href="https://github.com/docker/login-action/commit/06fb636fac595d6fb4b28a5dfcb21a6f5091859c"><code>06fb636</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1037">#1037</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li> <li><a href="https://github.com/docker/login-action/commit/a8bc9539118a762b0e5788b53a50907977cc1b8d"><code>a8bc953</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/f54b9019bf5074f6e3480a3ac4b834f5f4b90aab"><code>f54b901</code></a> build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...</li> <li><a href="https://github.com/docker/login-action/commit/77f18f6713512f90ac35aaf21db0d3710f1b85a6"><code>77f18f6</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1049">#1049</a> from docker/dependabot/github_actions/codeql-actions...</li> <li><a href="https://github.com/docker/login-action/commit/ec0bf287fb1e2e051c56b2f6e6a3eed487b9fe52"><code>ec0bf28</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1050">#1050</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/v4.4.0...v4.5.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
6295b1f49a |
Bump sentry-sdk from 2.64.0 to 2.66.0 in /backend (#1784)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.64.0 to 2.66.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's releases</a>.</em></p> <blockquote> <h2>2.66.0</h2> <h3>New Features ✨</h3> <ul> <li>(tracing) Promote trace_lifecycle and ignore_spans to top-level options by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6821">#6821</a></li> </ul> <h3>Bug Fixes 🐛</h3> <h4>Tracing</h4> <ul> <li>Skip child span creation in streaming path when no current span (HTTP clients) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6811">#6811</a></li> <li>Skip child span creation in streaming path when no current span (task queues) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6814">#6814</a></li> <li>Skip child span creation in streaming path when no current span (misc) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6815">#6815</a></li> <li>Skip child span creation in streaming path when no current span (databases) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6808">#6808</a></li> <li>Skip child span creation in streaming path when no current span (web frameworks) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6810">#6810</a></li> <li>Skip child span creation in streaming path when no current span (django) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6809">#6809</a></li> </ul> <h3>Internal Changes 🔧</h3> <ul> <li>(logging) Fix flaky test_logging_captured_warnings by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6824">#6824</a></li> <li>Remove flaky no cyclic garbage test by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6817">#6817</a></li> <li>Remove Claude permission settings by <a href="https://github.com/cleptric"><code>@cleptric</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6806">#6806</a></li> <li>Move <code>nullcontext</code> to <code>sentry_sdk.utils</code> by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6805">#6805</a></li> </ul> <h2>2.65.0</h2> <h3>New Features ✨</h3> <h4>Huey</h4> <ul> <li>Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6779">#6779</a></li> <li>Set <code>messaging.destination.name</code> on producer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6778">#6778</a></li> </ul> <h4>Other</h4> <ul> <li>(arq) Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6767">#6767</a></li> <li>(dramatiq) Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6776">#6776</a></li> <li>(rq) Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6774">#6774</a></li> </ul> <h3>Bug Fixes 🐛</h3> <h4>Tracing</h4> <ul> <li>Take first sentry-trace header in case multiple are supplied by <a href="https://github.com/sl0thentr0py"><code>@sl0thentr0py</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6722">#6722</a></li> </ul> <h4>Other</h4> <ul> <li>(django) Avoid <code>ValueError</code> in async middleware <code>process_*</code> hooks by <a href="https://github.com/r0ro"><code>@r0ro</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6698">#6698</a></li> <li>(scope) Drop None user attribute values in set_user by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6692">#6692</a></li> <li>(starlette) Don't overwrite user set during request in AuthenticationMiddleware by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6760">#6760</a></li> </ul> <h3>Internal Changes 🔧</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's changelog</a>.</em></p> <blockquote> <h2>2.66.0</h2> <h3>New Features ✨</h3> <ul> <li>(tracing) Promote trace_lifecycle and ignore_spans to top-level options by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6821">#6821</a></li> </ul> <h3>Bug Fixes 🐛</h3> <h4>Tracing</h4> <ul> <li>Skip child span creation in streaming path when no current span (HTTP clients) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6811">#6811</a></li> <li>Skip child span creation in streaming path when no current span (task queues) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6814">#6814</a></li> <li>Skip child span creation in streaming path when no current span (misc) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6815">#6815</a></li> <li>Skip child span creation in streaming path when no current span (databases) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6808">#6808</a></li> <li>Skip child span creation in streaming path when no current span (web frameworks) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6810">#6810</a></li> <li>Skip child span creation in streaming path when no current span (django) by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6809">#6809</a></li> </ul> <h3>Internal Changes 🔧</h3> <ul> <li>(logging) Fix flaky test_logging_captured_warnings by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6824">#6824</a></li> <li>Remove flaky no cyclic garbage test by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6817">#6817</a></li> <li>Remove Claude permission settings by <a href="https://github.com/cleptric"><code>@cleptric</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6806">#6806</a></li> <li>Move <code>nullcontext</code> to <code>sentry_sdk.utils</code> by <a href="https://github.com/sentrivana"><code>@sentrivana</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6805">#6805</a></li> </ul> <h2>2.65.0</h2> <h3>New Features ✨</h3> <h4>Huey</h4> <ul> <li>Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6779">#6779</a></li> <li>Set <code>messaging.destination.name</code> on producer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6778">#6778</a></li> </ul> <h4>Other</h4> <ul> <li>(arq) Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6767">#6767</a></li> <li>(dramatiq) Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6776">#6776</a></li> <li>(rq) Set <code>messaging.destination.name</code> on consumer spans by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6774">#6774</a></li> </ul> <h3>Bug Fixes 🐛</h3> <h4>Tracing</h4> <ul> <li>Take first sentry-trace header in case multiple are supplied by <a href="https://github.com/sl0thentr0py"><code>@sl0thentr0py</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6722">#6722</a></li> </ul> <h4>Other</h4> <ul> <li>(django) Avoid <code>ValueError</code> in async middleware <code>process_*</code> hooks by <a href="https://github.com/r0ro"><code>@r0ro</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6698">#6698</a></li> <li>(scope) Drop None user attribute values in set_user by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6692">#6692</a></li> <li>(starlette) Don't overwrite user set during request in AuthenticationMiddleware by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6760">#6760</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/getsentry/sentry-python/commit/5179f60b025693f381d6d93cd69817f32931825b"><code>5179f60</code></a> update changelog with docs link</li> <li><a href="https://github.com/getsentry/sentry-python/commit/e4bcb59e5a87772b1a9dee6189889a2dcee8d776"><code>e4bcb59</code></a> release: 2.66.0</li> <li><a href="https://github.com/getsentry/sentry-python/commit/5ba869c03908edde69b2c6526bdd5f03a37bfef4"><code>5ba869c</code></a> fix(tracing): Skip child span creation in streaming path when no current span...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/efddaab9211769982e0c1874e2fb77b0db88b4cd"><code>efddaab</code></a> fix(tracing): Skip child span creation in streaming path when no current span...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/b199a9eea34d7107d81714ca2d1c759f3a6e7e0e"><code>b199a9e</code></a> fix(tracing): Skip child span creation in streaming path when no current span...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/d695a6eb6ab6a81251d1abec12b61456b786a566"><code>d695a6e</code></a> fix(tracing): Skip child span creation in streaming path when no current span...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/dbf5d03f30d97cffd12116e09a34df7b4c2fdafe"><code>dbf5d03</code></a> fix(tracing): Skip child span creation in streaming path when no current span...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/5c1403440a25999f7d6ce69fcb106205be0b8322"><code>5c14034</code></a> fix(tracing): Skip child span creation in streaming path when no current span...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/e0d2c4a4c5e01452865d06d4cdcafb5823fef164"><code>e0d2c4a</code></a> feat(tracing): Promote trace_lifecycle and ignore_spans to top-level options ...</li> <li><a href="https://github.com/getsentry/sentry-python/commit/baa423fa766a5ba990ad27b1d3b1231f4b265182"><code>baa423f</code></a> test(logging): Fix flaky test_logging_captured_warnings (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6824">#6824</a>)</li> <li>Additional commits viewable in <a href="https://github.com/getsentry/sentry-python/compare/2.64.0...2.66.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
70286f2375 |
Bump mypy from 2.2.0 to 2.3.0 in /backend (#1783)
Bumps [mypy](https://github.com/python/mypy) from 2.2.0 to 2.3.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's changelog</a>.</em></p> <blockquote> <h1>Mypy Release Notes</h1> <h2>Next Release</h2> <h3>Packaging changes</h3> <ul> <li>No longer provide mypyc-accelerated wheels for macOS x86_64 [mypyc-wheels <a href="https://redirect.github.com/python/mypy/issues/119">#119</a>](<a href="https://redirect.github.com/mypyc/mypy_mypyc-wheels/pull/119">mypyc/mypy_mypyc-wheels#119</a>)</li> </ul> <h2>Mypy 2.3</h2> <p>We've just uploaded mypy 2.3.0 to the Python Package Index (<a href="https://pypi.org/project/mypy/">PyPI</a>). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:</p> <pre><code>python3 -m pip install -U mypy </code></pre> <p>You can read the full documentation for this release on <a href="http://mypy.readthedocs.io">Read the Docs</a>.</p> <h3>The Upcoming Switch to the New Native Parser</h3> <p>We are planning to enable the new native parser (<code>--native-parser</code>) by default soon. We recommend that you test the native parser in your projects and report any issues in the <a href="https://github.com/python/mypy/issues">mypy issue tracker</a>.</p> <h3>Mypyc Free-threading Memory Safety</h3> <p>Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.</p> <p>List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using <code>librt.vecs.vec</code> instead of list is often significantly faster, but note that <code>vec</code> is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced <code>librt.threading.Lock</code> helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.</p> <p>Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.</p> <p>Full list of changes:</p> <ul> <li>Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21705">21705</a>)</li> <li>Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21688">21688</a>)</li> <li>Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21683">21683</a>)</li> <li>Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21679">21679</a>)</li> <li>Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21684">21684</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/mypy/commit/8aabf8435357eaffceca7237f371e293b8168e54"><code>8aabf84</code></a> Drop +dev from version</li> <li><a href="https://github.com/python/mypy/commit/4d8ad2ab5e86c99581b73775f2c00b9b8265b589"><code>4d8ad2a</code></a> Update changelog for 2.3 release (<a href="https://redirect.github.com/python/mypy/issues/21728">#21728</a>)</li> <li><a href="https://github.com/python/mypy/commit/2c2154672040c52e481f423854d104e6cf172585"><code>2c21546</code></a> [mypyc] Update documentation of race conditions under free threading (<a href="https://redirect.github.com/python/mypy/issues/21726">#21726</a>)</li> <li><a href="https://github.com/python/mypy/commit/a9f62a3cf98a58a7a2607b7c81695802b39f5edc"><code>a9f62a3</code></a> [mypyc] Make attribute access memory safe on free-threaded builds (<a href="https://redirect.github.com/python/mypy/issues/21705">#21705</a>)</li> <li><a href="https://github.com/python/mypy/commit/0faa413ebf7c924a864ef5dabd70303d898e7766"><code>0faa413</code></a> Use <code>PYODIDE</code> environment variable for Emscripten cross-compilation detection...</li> <li><a href="https://github.com/python/mypy/commit/3d75cdb09f0928fa8b83e5ef03572ed878ac8d09"><code>3d75cdb</code></a> [mypyc] Borrow final attributes more aggressively (<a href="https://redirect.github.com/python/mypy/issues/21702">#21702</a>)</li> <li><a href="https://github.com/python/mypy/commit/24c237d85b48f618e655ffff1dc0f19089d9b599"><code>24c237d</code></a> [mypyc] Improve documentation of Final (<a href="https://redirect.github.com/python/mypy/issues/21713">#21713</a>)</li> <li><a href="https://github.com/python/mypy/commit/b5be217392b9b2771d1764066b9d600bf93ce7a8"><code>b5be217</code></a> [mypyc] Update free threading Python compatibility docs (<a href="https://redirect.github.com/python/mypy/issues/21711">#21711</a>)</li> <li><a href="https://github.com/python/mypy/commit/cbcb51add3094ec91b29cdd4c624943bf251b63f"><code>cbcb51a</code></a> Narrow for frozendict membership check (<a href="https://redirect.github.com/python/mypy/issues/21709">#21709</a>)</li> <li><a href="https://github.com/python/mypy/commit/af2bc0f3cc7f2f129f0c11294158d0c292692c3d"><code>af2bc0f</code></a> Sync typeshed (<a href="https://redirect.github.com/python/mypy/issues/21707">#21707</a>)</li> <li>Additional commits viewable in <a href="https://github.com/python/mypy/compare/v2.2.0...v2.3.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d91d635abd |
Bump actions/setup-python from 6.3.0 to 7.0.0 (#1782)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-python/releases">actions/setup-python's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1330">actions/setup-python#1330</a></li> <li>Pin SHA commits and update docs with latest versions by <a href="https://github.com/HarithaVattikuti"><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1338">actions/setup-python#1338</a></li> <li>Remove the pip-install input by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1336">actions/setup-python#1336</a></li> </ul> <h3>Bug Fix</h3> <ul> <li>Fix to Classify stderr warning messages as warnings instead of errors in annotations by <a href="https://github.com/lmvysakh"><code>@lmvysakh</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li> <li>Validate and retry manifest fetch to prevent silent failures by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1332">actions/setup-python#1332</a></li> </ul> <h3>Dependency Upgrade</h3> <ul> <li>Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1328">actions/setup-python#1328</a></li> <li>Remove EOL Python versions and Bumps numpy text fixture by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1333">actions/setup-python#1333</a></li> <li>Upgrade <code>@actions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai"><code>@philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lmvysakh"><code>@lmvysakh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li> <li><a href="https://github.com/philip-gai"><code>@philip-gai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v6...v7.0.0">https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97"><code>5fda3b9</code></a> Pin SHA commits and update docs with latest versions (<a href="https://redirect.github.com/actions/setup-python/issues/1338">#1338</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e"><code>4ab7e95</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-python/issues/1337">#1337</a> from actions/philip-gai/bump-actions-cache-6-2-0</li> <li><a href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c"><code>0f3a009</code></a> Remove the pip-install input (<a href="https://redirect.github.com/actions/setup-python/issues/1336">#1336</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932"><code>f8cf429</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-python/issues/1330">#1330</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5"><code>54baeea</code></a> Validate and retry manifest fetch to prevent silent failures (<a href="https://redirect.github.com/actions/setup-python/issues/1332">#1332</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5"><code>c709277</code></a> Annotation code fix (<a href="https://redirect.github.com/actions/setup-python/issues/1335">#1335</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a"><code>6849080</code></a> remove EOL Python versions and Bumps numpy text fixture (<a href="https://redirect.github.com/actions/setup-python/issues/1333">#1333</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e"><code>0903b46</code></a> Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data (<a href="https://redirect.github.com/actions/setup-python/issues/1328">#1328</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-python/compare/v6.3.0...v7.0.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
1e002609e9 |
Bump actions/setup-node from 6.4.0 to 7.0.0 (#1781)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Add cache-primary-key and cache-matched-key as outputs by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Remove dummy NODE_AUTH_TOKEN export by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li> <li>Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided by <a href="https://github.com/deiga"><code>@deiga</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> </ul> <h3>Documentation updates:</h3> <ul> <li>Add documentation for publishing to npm with Trusted Publisher (OIDC) by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li>docs: Update restore-only cache documentation by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li> <li>docs: Update caching recommendations to mitigate cache poisoning risks by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li> </ul> <h3>Dependency update:</h3> <ul> <li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li><a href="https://github.com/deiga"><code>@deiga</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> <li><a href="https://github.com/jasongin"><code>@jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p> <h2>v6.5.0</h2> <h2>What's Changed</h2> <ul> <li>Update <code>@actions/cache</code> to 5.1.0 and add security overrides for undici and fast-xml-parser by <a href="https://github.com/HarithaVattikuti"><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a> Add cache-primary-key and cache-matched-key as outputs (<a href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a> docs: Update caching recommendations to mitigate cache poisoning risks (<a href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a> from jasongin/update-actions-cache-5.1.0</li> <li><a href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a> Resolve high-severity audit issues</li> <li><a href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a> Update dist</li> <li><a href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a> Strict equality</li> <li><a href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a> Bump <code>@actions/cache</code> to 5.1.0, log cache write denied</li> <li><a href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a> Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided (<a href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a> Remove dummy NODE_AUTH_TOKEN export (<a href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-node/compare/v6.4.0...v7.0.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
28a2cb2329 |
Bump i18next-http-backend from 3.0.5 to 4.0.0 in /frontend (#1780)
Bumps [i18next-http-backend](https://github.com/i18next/i18next-http-backend) from 3.0.5 to 4.0.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md">i18next-http-backend's changelog</a>.</em></p> <blockquote> <h3>4.0.0</h3> <ul> <li>BREAKING: drop <code>cross-fetch</code> dependency. <code>i18next-http-backend</code> now requires a host-provided <code>fetch</code>. This is available in Node ≥ 18 (stable since Node 21), all modern browsers, Deno, and Bun. For runtimes without native <code>fetch</code>, install a ponyfill yourself and inject it via <code>options.alternateFetch</code>, or stay on v3.x.</li> <li>BREAKING: minimum Node version is now 18 (<code>engines.node = ">=18"</code>).</li> <li>chore: simplified environment detection in <code>lib/request.js</code> — uses <code>globalThis</code> (with <code>global</code> / <code>window</code> fallbacks for legacy embedded runtimes) instead of separate <code>global.*</code> / <code>window.*</code> branches per API. XHR / ActiveXObject are still picked up if the host provides them, but no longer polyfilled.</li> <li>chore: declared <code>"sideEffects": false</code> for better tree-shaking by downstream bundlers.</li> <li>build: replaced babel + browserify + uglify-js with <a href="https://tsdown.dev"><code>tsdown</code></a> (rolldown + oxc). One config produces ESM, CJS, and the IIFE browser bundles. Drops <code>@babel/cli</code>, <code>@babel/core</code>, <code>@babel/preset-env</code>, <code>babel-plugin-add-module-exports</code>, <code>browserify</code>, <code>uglify-js</code>, the <code>fixcjs</code> rewrite hack, and the <code>--ignore cross-fetch</code> browserify flag. Side benefit: minified browser bundle shrinks from ~13 KB to ~6.8 KB (oxc minifier + no babel runtime helpers).</li> <li>build: ESM and CJS outputs are now bundled into a single <code>index.js</code> per format (previously one file per <code>lib/*.js</code> module). The package's <code>exports</code> map is unchanged, so this is invisible to consumers using documented entry points.</li> <li>lint: replaced <code>eslint-config-standard</code> (+ five plugins) with <a href="https://github.com/neostandard/neostandard"><code>neostandard</code></a> and migrated to ESLint 9 flat config (<code>eslint.config.mjs</code>). Removed deprecated <code>tslint</code> and <code>dtslint</code> — <code>test:typescript</code> now runs <code>tsc --noEmit</code> plus <code>tsd</code>.</li> <li>chore: tightened <code>.npmignore</code> — published tarball no longer includes the source <code>lib/</code>, the build configs (<code>tsdown.config.ts</code>, <code>eslint.config.mjs</code>, <code>tsconfig.json</code>), or the root <code>index.js</code> re-export shim. Drops from 21.3 KB → ~17 KB packed.</li> <li>docs: <code>alternateFetch</code> is now documented in the README options block as the supported escape hatch for fetch ponyfills, test mocking, and request interception. v4 migration note added to "Getting started".</li> </ul> <h3>3.0.6</h3> <ul> <li>fix: allow forward slashes in <code>ns</code> values so nested namespace names (mapping to URL layouts such as <code>/locales/en/a/b.json</code>) fetch correctly again. 3.0.5's security fix applied the same strict URL-segment check to both <code>lng</code> and <code>ns</code>, which was correct for <code>lng</code> (no BCP-47 shape contains <code>/</code>) but over-strict for <code>ns</code> — nested namespaces containing <code>/</code> were never officially supported, but the behaviour fell out of the implicit string-substitution semantics of <code>loadPath</code> and is common enough in the wild to be worth accommodating. <code>isSafeUrlSegment</code> is now split into <code>isSafeLangUrlSegment</code> (strict — still rejects <code>/</code>) and <code>isSafeNsUrlSegment</code> (loose — allows <code>/</code> but still rejects <code>..</code>, <code>\</code>, URL-structure characters, control chars, prototype keys, and oversized inputs). <code>isSafeUrlSegment</code> is kept as a backwards-compatible alias for the strict check. The 3.0.5 security fix remains in force for every concrete attack pattern from the original advisory.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-http-backend/commit/a4d4a83c53f024cdea912e157e5fb1ef5c6adf3b"><code>a4d4a83</code></a> 4.0.0</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/fdf4f986e146059152537f169f434cb28e160e8c"><code>fdf4f98</code></a> feat!: v4 — drop cross-fetch, switch build to tsdown, lint to neostandard</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/d8dafd88aedf732b81aacb0e40012d2f86cf6d90"><code>d8dafd8</code></a> docs: clarify that nested-ns with slashes was never officially supported</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/e534a6267ea231408d3dff0045b1aa55b9682206"><code>e534a62</code></a> build</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/ddf104807729437c11c0cc25a059b0aac1a1dab6"><code>ddf1048</code></a> 3.0.6</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/d73cfdc23d397a7d978e03bf6541852da08ae1e2"><code>d73cfdc</code></a> fix: allow forward slashes in ns values</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/9abbdee14e28f2a055251a51e7f238bb2bd1e696"><code>9abbdee</code></a> Bump i18next-http-backend from 1.4.0 to 3.0.5 in /example/i18next-vue (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/184">#184</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/b4ca8bb3d207d53f8f35100126a4a8f686a0ab8e"><code>b4ca8bb</code></a> Bump i18next-http-backend from 3.0.1 to 3.0.5 in /example/fallback (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/183">#183</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/dffddd494145419f00901aed4ad67b34eb13fbda"><code>dffddd4</code></a> Bump i18next-http-backend from 3.0.2 to 3.0.5 in /example/next (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/182">#182</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/fd29b400e3ead7ccd1caebc55027aeb4f4c43c1f"><code>fd29b40</code></a> Bump i18next-http-backend from 1.3.2 to 3.0.5 in /example/vue (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/181">#181</a>)</li> <li>Additional commits viewable in <a href="https://github.com/i18next/i18next-http-backend/compare/v3.0.5...v4.0.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
170f16dddd |
Bump the npm_and_yarn group across 2 directories with 1 update (#1752)
Bumps the npm_and_yarn group with 1 update in the /docs directory: [postcss](https://github.com/postcss/postcss). Bumps the npm_and_yarn group with 1 update in the /frontend directory: [postcss](https://github.com/postcss/postcss). Updates `postcss` from 8.5.18 to 8.5.23 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a> Release 8.5.23 version</li> <li><a href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a> Does no load source map file without opts.from</li> <li><a href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a> Typo</li> <li><a href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a> Release 8.5.22 version</li> <li><a href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a> Fix custom property losing its semicolon before a comment (<a href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a> Release 8.5.21 version</li> <li><a href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a> Update dependencies</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare view</a></li> </ul> </details> <br /> Updates `postcss` from 8.5.18 to 8.5.23 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a> Release 8.5.23 version</li> <li><a href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a> Does no load source map file without opts.from</li> <li><a href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a> Typo</li> <li><a href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a> Release 8.5.22 version</li> <li><a href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a> Fix custom property losing its semicolon before a comment (<a href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a> Release 8.5.21 version</li> <li><a href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a> Update dependencies</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare view</a></li> </ul> </details> <br /> Updates `postcss` from 8.5.18 to 8.5.23 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a> Release 8.5.23 version</li> <li><a href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a> Does no load source map file without opts.from</li> <li><a href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a> Typo</li> <li><a href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a> Release 8.5.22 version</li> <li><a href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a> Fix custom property losing its semicolon before a comment (<a href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a> Release 8.5.21 version</li> <li><a href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a> Update dependencies</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare view</a></li> </ul> </details> <br /> Updates `postcss` from 8.5.18 to 8.5.23 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.23</h2> <ul> <li>Do not load source map without <code>opts.from</code> for security reasons.</li> </ul> <h2>8.5.22</h2> <ul> <li>Fixed custom property losing semicolon before a comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.21</h2> <ul> <li>Fixed childless at-rule losing semicolon before comment (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/isker"><code>@isker</code></a>).</li> </ul> <h2>8.5.20</h2> <ul> <li>Fixed missing space if <code>AtRule#params</code> is set after (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed mixing AST error on warnings (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> <h2>8.5.19</h2> <ul> <li>Fixed cleaning <code>before</code> for new nodes inserted to <code>Root</code> (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a> Release 8.5.23 version</li> <li><a href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a> Does no load source map file without opts.from</li> <li><a href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a> Typo</li> <li><a href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a> Update EM banner</li> <li><a href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a> Release 8.5.22 version</li> <li><a href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a> Fix custom property losing its semicolon before a comment (<a href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a> Release 8.5.21 version</li> <li><a href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a> Update dependencies</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
1329ef4aa1 |
Bump nuqs from 2.8.9 to 2.9.0 in /frontend (#1779)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) from 2.8.9 to 2.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/47ng/nuqs/releases">nuqs's releases</a>.</em></p> <blockquote> <h2>v2.9.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437">#1437</a> - add support for react-router v8, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451">#1451</a> - add history to adapters <!-- raw HTML omitted -->defaultOptions<!-- raw HTML omitted -->, by <a href="https://github.com/manojVivek"><code>@manojVivek</code></a></li> </ul> <h2>Bug fixes</h2> <ul> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318">#1318</a> - cross-page transitions in TanStack Router, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1433">#1433</a>)</li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1334">#1334</a> - stale URL value when revisiting a page under Next.js cacheComponents, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1273">#1273</a>)</li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1366">#1366</a> - prevent infinite re-renders with TSR viewport preloading, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1363">#1363</a>)</li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1368">#1368</a> - wrong transient state in next/app when updating in useEffect, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1365">#1365</a>, <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1428">#1428</a>)</li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445">#1445</a> - stale value under Activity, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1444">#1444</a>)</li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450">#1450</a> - stale search params leaking across React Router navigation, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1358">#1358</a>)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1222">#1222</a> - add registry metadata, by <a href="https://github.com/taro-yanagiya"><code>@taro-yanagiya</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1221">#1221</a>)</li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1256">#1256</a> - add changelog page, by <a href="https://github.com/rajanarahul93"><code>@rajanarahul93</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1251">#1251</a>)</li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1351">#1351</a> - strip Fumadocs inline code syntax highlighting hints from LLM markdown, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1353">#1353</a> - update recharts & replace partialLine implementation, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1356">#1356</a> - add Sentry and Syntax.fm as sponsors 💖, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1357">#1357</a> - add 1771 Technologies as a sponsor 💖, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1362">#1362</a> - update images alt attributes, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1364">#1364</a> - extrapolate missing NPM stats data, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1376">#1376</a> - add attribution footer in LLM docs, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1383">#1383</a> - add 1771 Technologies as sidebar sponsor, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1400">#1400</a> - add redirect from /changelog to /docs/changelog, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1406">#1406</a> - add brand assets context menu, by <a href="https://github.com/TheOrcDev"><code>@TheOrcDev</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1409">#1409</a> - add TradingGoose as a sponsor 💖, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1414">#1414</a> - add Upstash as a sponsor 💖, by <a href="https://github.com/mezotv"><code>@mezotv</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1415">#1415</a> - add CodeRabbit as a sponsor 💖, by <a href="https://github.com/mezotv"><code>@mezotv</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1416">#1416</a> - use <a href="http://www.usenotra.com">www.usenotra.com</a> for Notra sponsor link, by <a href="https://github.com/mezotv"><code>@mezotv</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1418">#1418</a> - tighter sponsors grid, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1432">#1432</a> - changelog reads DTO from releases, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1438">#1438</a> - add Deno & other package managers to install instructions, by <a href="https://github.com/bartlomieju"><code>@bartlomieju</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1441">#1441</a> - theme-aware shieldcn badges + wordmark header, by <a href="https://github.com/jal-co"><code>@jal-co</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1447">#1447</a> - trim down llm content, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1456">#1456</a> - add Loops as a sponsor 💖, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1457">#1457</a> - strip unreleased headings from the production ToC, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1461">#1461</a> - fix shallow updates "Invalid URL" crash, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1460">#1460</a>)</li> <li>9cb051fc - reorder & tweak readme badges, by François Best</li> <li>e9cd8f7c - fix contributors link in README, by François Best</li> <li>f48b3908 - fix wordmark on npmx.dev & npmjs.com, by François Best</li> <li>6722fe05 - fix react router logos in README, by François Best</li> </ul> <h2>Other changes</h2> <ul> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1154">#1154</a> - add Knip for upkeeping, by <a href="https://github.com/franky47"><code>@franky47</code></a></li> <li><a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176">#1176</a> - split debug logs to reduce bundle size, by <a href="https://github.com/franky47"><code>@franky47</code></a> (closes <a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1149">#1149</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/47ng/nuqs/commit/692687ba358e56fb78b887448392a54a22397559"><code>692687b</code></a> fix: stale search params leaking across React Router navigation (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450">#1450</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/8b2dee5eab9a53aab772fe4ba9bf9c965b3d2897"><code>8b2dee5</code></a> feat: add history to adapter's <code>defaultOptions</code> (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451">#1451</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/95dcb8309dd4e78c1e0d4c66bbd91f12754ec3ee"><code>95dcb83</code></a> fix: stale URL value when revisiting a page under Next.js cacheComponents (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1">#1</a>...</li> <li><a href="https://github.com/47ng/nuqs/commit/af8ce38a2546ede9f421edaf9d9c94caea86bf1a"><code>af8ce38</code></a> ref: scope nullable useSearchParams defence to Next.js specific adapter (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1446">#1446</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/06be94ff1d2fa8dd5474570d30244350026c3f70"><code>06be94f</code></a> ref: split debug logs to reduce bundle size (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176">#1176</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/2d5fa8eed3b0911902e64c5b8034520fcaad2940"><code>2d5fa8e</code></a> fix: stale value under Activity (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445">#1445</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/84ee2dfe11be1dbaa76b34519b4e2683da51d00c"><code>84ee2df</code></a> feat: add support for react-router v8 (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437">#1437</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/54cbbd882cd0b125a98692b14ea0e501da243469"><code>54cbbd8</code></a> fix: cross-page transitions in TanStack Router (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318">#1318</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/f57551f31fc6b00350a83eab7f6856850f51f849"><code>f57551f</code></a> chore: pnpm dedupe (<a href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1436">#1436</a>)</li> <li><a href="https://github.com/47ng/nuqs/commit/281a0f04fa0e5490ae2eae5b328cc6585613ba25"><code>281a0f0</code></a> chore(ci): keep npm --json stdout clean and harden stage-id parsing</li> <li>Additional commits viewable in <a href="https://github.com/47ng/nuqs/commits/v2.9.0/packages/nuqs">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
ef6e0e9f37 |
Bump npm-check-updates from 20.0.0 to 22.2.9 in /frontend (#1778)
Bumps [npm-check-updates](https://github.com/raineorshine/npm-check-updates) from 20.0.0 to 22.2.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raineorshine/npm-check-updates/releases">npm-check-updates's releases</a>.</em></p> <blockquote> <h2>v22.2.9</h2> <h2>What's Changed</h2> <ul> <li>Dockerfile: use lts-alpine image by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1862">raineorshine/npm-check-updates#1862</a></li> <li>Rename variable and test file by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1884">raineorshine/npm-check-updates#1884</a></li> <li>eslint.config.js: drop moot jest globals by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1887">raineorshine/npm-check-updates#1887</a></li> <li>replace zod with valibot to reduce bundle size by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1885">raineorshine/npm-check-updates#1885</a></li> <li>CI: add prettier in lint workflow by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1889">raineorshine/npm-check-updates#1889</a></li> <li>Use async glob instead of glob.sync in getAllPackages by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1891">raineorshine/npm-check-updates#1891</a></li> <li>Minor type tweaks by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1892">raineorshine/npm-check-updates#1892</a></li> <li>Switch mocha tests to parallel by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1886">raineorshine/npm-check-updates#1886</a></li> <li>Replace markdownlint-cli with markdownlint-cli2 by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1893">raineorshine/npm-check-updates#1893</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/raineorshine/npm-check-updates/compare/v22.2.8...v22.2.9">https://github.com/raineorshine/npm-check-updates/compare/v22.2.8...v22.2.9</a></p> <h2>v22.2.8</h2> <h2>What's Changed</h2> <ul> <li>CI: remove concurrency by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1846">raineorshine/npm-check-updates#1846</a></li> <li>build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1872">raineorshine/npm-check-updates#1872</a></li> <li>Downgrade ts-json-schema-generator to v2.4.0 for Node.js 20 support by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1848">raineorshine/npm-check-updates#1848</a></li> <li>prepare: add exit 0 as an extra guard by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1850">raineorshine/npm-check-updates#1850</a></li> <li>ESLint: bump to es2023 globals by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1854">raineorshine/npm-check-updates#1854</a></li> <li>package.json: remove redundant tests from files by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1855">raineorshine/npm-check-updates#1855</a></li> <li>tsconfig: enable verbatimModuleSyntax by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1860">raineorshine/npm-check-updates#1860</a></li> <li>Remove the unused libnpmconfig.d.ts by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1857">raineorshine/npm-check-updates#1857</a></li> <li>Clean up <code>run()</code> return type JSDoc by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1868">raineorshine/npm-check-updates#1868</a></li> <li>cache test: remove any previous stale cache file to prevent failures by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1865">raineorshine/npm-check-updates#1865</a></li> <li>package.json: remove duplicate typecheck script by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1856">raineorshine/npm-check-updates#1856</a></li> <li>Doctor tests cleanup by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1869">raineorshine/npm-check-updates#1869</a></li> <li>fix: skip cache write when cooldown is active by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1871">raineorshine/npm-check-updates#1871</a></li> <li>Fix stale <a href="https://github.com/param"><code>@param</code></a> names in JSDoc by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1874">raineorshine/npm-check-updates#1874</a></li> <li>Simplify tsconfig.json by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1858">raineorshine/npm-check-updates#1858</a></li> <li>Add a .npmrc file enabling engine-strict by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1847">raineorshine/npm-check-updates#1847</a></li> <li>Enforce node: protocol and dedupe imports by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1842">raineorshine/npm-check-updates#1842</a></li> <li>Fix verbose log printing local yarn config under "user yarn config" header by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1875">raineorshine/npm-check-updates#1875</a></li> <li>lint: add --continue-on-error by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1859">raineorshine/npm-check-updates#1859</a></li> <li>test: cover <code>$</code> override references by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1877">raineorshine/npm-check-updates#1877</a></li> <li>CI updates by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1870">raineorshine/npm-check-updates#1870</a></li> <li>More shell tweaks by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1853">raineorshine/npm-check-updates#1853</a></li> <li>Update interactive hint for q button by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1879">raineorshine/npm-check-updates#1879</a></li> <li>Vite config cleanup by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1861">raineorshine/npm-check-updates#1861</a></li> <li>package.json: remove unneeded overrides by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1849">raineorshine/npm-check-updates#1849</a></li> <li>build: stub unused iconv-lite out of the bundle by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1881">raineorshine/npm-check-updates#1881</a></li> <li>package.json: specify allowScripts by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1878">raineorshine/npm-check-updates#1878</a></li> <li>build(deps): bump softprops/action-gh-release by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1880">raineorshine/npm-check-updates#1880</a></li> <li>refactor prettifyCooldown and share the cooldown regex by <a href="https://github.com/XhmikosR"><code>@XhmikosR</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1883">raineorshine/npm-check-updates#1883</a></li> <li>build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1876">raineorshine/npm-check-updates#1876</a></li> <li>fix(cooldown): scope auto-cooldown config to active package manager only by <a href="https://github.com/raineorshine"><code>@raineorshine</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1882">raineorshine/npm-check-updates#1882</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md">npm-check-updates's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p><strong>This file is no longer maintained.</strong> Release notes are published on the <a href="https://github.com/raineorshine/npm-check-updates/releases">GitHub releases page</a>.</p> <hr /> <h2>[22.0.0] - 2026-04-25</h2> <h2>Breaking Changes</h2> <p><code>--cooldown</code> now falls back to the greatest non-prerelease version rather than skipping the upgrade entirely when the latest version falls within the cooldown window.</p> <ul> <li>This <em>only</em> affects <code>--cooldown</code> (or inferred cooldown from <code>min-release-age</code>/<code>minimumReleaseAge</code>/<code>npmMinimalAgeGate</code>).</li> <li>This <em>only</em> affects <code>--target latest</code> (which is the default).</li> </ul> <h3>⚠️ WARNING</h3> <p>In rare circumstances, it is now possible for <code>ncu --cooldown 10</code> to install a version <strong>that was never published to latest</strong>. This is because the npm registry does not store a history of versions published to the <code>latest</code> dist-tag. It is <em>impossible</em> to fall back to an earlier <code>latest</code> version, because there is no record of it. However, we do have a list of all published versions, and it's <em>likely</em> that a boring version like <code>1.0.1</code> was published to <code>latest</code> at some point. Versions like <code>1.0.1-pre.0</code>, <code>1.0.1-beta</code>, <code>1.0.1-build.58157394</code>, etc will be ignored, as you would expect.</p> <p>While npm-check-updates typically takes a conservative approach to version upgrades, following semver exactly and only upgrading to the <code>latest</code> version, falling back to the highest version outside the cooldown window is clearly the more intuitive behavior, and this outweighs the few cases where the results would be undesirable. The discussion in <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1556">#1556</a> and the large amount of confusion since the initial release of <code>--cooldown</code> attest to this.</p> <h3>How to opt out of the new behavior</h3> <p>You can opt out of the new behavior by using <code>--target "@latest"</code>. This forces a strict upgrade (or downgrade) to the <code>latest</code> tag only, without any fallback behavior.</p> <p>For granular control, use a custom ncurc function to set the <a href="https://github.com/raineorshine/npm-check-updates#target">target</a> or disable <a href="https://github.com/raineorshine/npm-check-updates#cooldown">cooldown</a> for a single package.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/raineorshine/npm-check-updates/compare/v21.0.3...v22.0.0">https://github.com/raineorshine/npm-check-updates/compare/v21.0.3...v22.0.0</a></p> <h2>[21.0.0] - 2026-04-14</h2> <h3>⚠️ Breaking Changes</h3> <p>This is a <strong>major breaking change</strong> with significant architectural updates.</p> <h4>ESM Migration & Module System</h4> <ul> <li><strong>Pure ESM:</strong> Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.</li> <li><strong>Import Syntax:</strong> Programmatic usage now requires named imports or namespace imports. <ul> <li><strong>Old:</strong> <code>import ncu from 'npm-check-updates'</code></li> <li><strong>New:</strong> <code>import * as ncu from 'npm-check-updates'</code> or <code>import { run } from 'npm-check-updates'</code></li> </ul> </li> <li><strong>Node.js Requirements:</strong> Now requires <code>^20.19.0 || ^22.12.0 || >=24.0.0</code>. This is required for native <code>require(esm)</code> support and the Rolldown engine.</li> <li><strong>npm Requirements:</strong> Minimum version increased to <code>>=10.0.0</code>.</li> </ul> <h4>Configuration Files (<code>.ncurc.js</code>)</h4> <ul> <li>Files named <code>.ncurc.js</code> that use <code>module.exports</code> will now fail in projects that are <code>"type": "module"</code>.</li> <li><strong>Fix:</strong> Rename these files to <code>.ncurc.cjs</code> or convert them to use <code>export default</code>.</li> </ul> <h4>Dependency Updates (Pure ESM versions)</h4> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/5ad831bd29963c3d7d4435603f043ec0fd2cc38c"><code>5ad831b</code></a> 22.2.9</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/2653ab6e94fc425b3a9d872a5efbd64fe091bfa8"><code>2653ab6</code></a> Replace markdownlint-cli with markdownlint-cli2 (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1893">#1893</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/75a6a92549b9da24560f8658a5bce14ebd23df0b"><code>75a6a92</code></a> Switch mocha tests to parallel (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1886">#1886</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/bf7285b72d2ae26ae54a87b4b486623b1ccbe5bb"><code>bf7285b</code></a> Minor type tweaks (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1892">#1892</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/3231f230e540b4581bae161ea1aa896380cccfe5"><code>3231f23</code></a> Use async glob instead of glob.sync in getAllPackages (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1891">#1891</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/8a37479348bb035758905a39acffb28d893649c4"><code>8a37479</code></a> CI: add prettier in lint workflow (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1889">#1889</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/0409e7739b6c355953468cea649365468b64207f"><code>0409e77</code></a> replace zod with valibot to reduce bundle size (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1885">#1885</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/02b4218b926d2fd433f98d23de4c66df989599f6"><code>02b4218</code></a> eslint.config.js: drop moot jest globals (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1887">#1887</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/c4435d0800386ad3eae29f3416074ef2c35123ad"><code>c4435d0</code></a> Rename variable and test file (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1884">#1884</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/e849b1d75948aba5f5e7f2f0c56dc96030b61608"><code>e849b1d</code></a> Dockerfile: use lts-alpine image (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1862">#1862</a>)</li> <li>Additional commits viewable in <a href="https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v22.2.9">compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
76f3054446 |
Bump mypy from 2.1.0 to 2.2.0 in /backend (#1777)
Bumps [mypy](https://github.com/python/mypy) from 2.1.0 to 2.2.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's changelog</a>.</em></p> <blockquote> <h1>Mypy Release Notes</h1> <h2>Next Release</h2> <h3>Packaging changes</h3> <ul> <li>No longer provide mypyc-accelerated wheels for macOS x86_64 [mypyc-wheels <a href="https://redirect.github.com/python/mypy/issues/119">#119</a>](<a href="https://redirect.github.com/mypyc/mypy_mypyc-wheels/pull/119">mypyc/mypy_mypyc-wheels#119</a>)</li> </ul> <h2>Mypy 2.3</h2> <p>We've just uploaded mypy 2.3.0 to the Python Package Index (<a href="https://pypi.org/project/mypy/">PyPI</a>). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:</p> <pre><code>python3 -m pip install -U mypy </code></pre> <p>You can read the full documentation for this release on <a href="http://mypy.readthedocs.io">Read the Docs</a>.</p> <h3>The Upcoming Switch to the New Native Parser</h3> <p>We are planning to enable the new native parser (<code>--native-parser</code>) by default soon. We recommend that you test the native parser in your projects and report any issues in the <a href="https://github.com/python/mypy/issues">mypy issue tracker</a>.</p> <h3>Mypyc Free-threading Memory Safety</h3> <p>Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.</p> <p>List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using <code>librt.vecs.vec</code> instead of list is often significantly faster, but note that <code>vec</code> is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced <code>librt.threading.Lock</code> helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.</p> <p>Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.</p> <p>Full list of changes:</p> <ul> <li>Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21705">21705</a>)</li> <li>Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21688">21688</a>)</li> <li>Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21683">21683</a>)</li> <li>Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21679">21679</a>)</li> <li>Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR <a href="https://redirect.github.com/python/mypy/pull/21684">21684</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/mypy/commit/b3c4a5b93adb49f979ab553fffebae7179cefa74"><code>b3c4a5b</code></a> Mark release</li> <li><a href="https://github.com/python/mypy/commit/396f5082ac677a5115fbd6a0122328a6711f73dd"><code>396f508</code></a> [Chore] Update changelog for 2.2 (<a href="https://redirect.github.com/python/mypy/issues/21691">#21691</a>)</li> <li><a href="https://github.com/python/mypy/commit/9592a9ea65a9502b14ac3094b28f9e0e3a2e500a"><code>9592a9e</code></a> Upload wasm wheels to PyPI (<a href="https://redirect.github.com/python/mypy/issues/21671">#21671</a>)</li> <li><a href="https://github.com/python/mypy/commit/1dc69620d9e827b015e6486114e0aaff7ec2d990"><code>1dc6962</code></a> Bump ast-serialize to 0.6.0 (<a href="https://redirect.github.com/python/mypy/issues/21664">#21664</a>)</li> <li><a href="https://github.com/python/mypy/commit/96a791310d47575827e44d10360505d8e23807b0"><code>96a7913</code></a> Bump librt to 0.12.0 (<a href="https://redirect.github.com/python/mypy/issues/21663">#21663</a>)</li> <li><a href="https://github.com/python/mypy/commit/5ef090270579013c337a9bcc79e2c58417f09538"><code>5ef0902</code></a> Fix the exportjson tool (.ff cache to .json conversion) (<a href="https://redirect.github.com/python/mypy/issues/21628">#21628</a>)</li> <li><a href="https://github.com/python/mypy/commit/8d621adb954731ba76b25bf7130275f3cadbb81a"><code>8d621ad</code></a> Support --shadow-file with --native-parser (<a href="https://redirect.github.com/python/mypy/issues/21623">#21623</a>)</li> <li><a href="https://github.com/python/mypy/commit/74ecdd8ecc9bee271eab49948436af63751ed1ff"><code>74ecdd8</code></a> Sync typeshed (<a href="https://redirect.github.com/python/mypy/issues/21612">#21612</a>)</li> <li><a href="https://github.com/python/mypy/commit/0cd154158ab2829a2f8c7a2728c7d4ed55e8f193"><code>0cd1541</code></a> [mypyc] Make function wrappers thread-safe on free-threaded builds (<a href="https://redirect.github.com/python/mypy/issues/21620">#21620</a>)</li> <li><a href="https://github.com/python/mypy/commit/22a9cfd1595798810e27ef145ea4c989ccdcc883"><code>22a9cfd</code></a> [mypyc] Make list remove and index thread-safe on free-threaded builds (<a href="https://redirect.github.com/python/mypy/issues/21614">#21614</a>)</li> <li>Additional commits viewable in <a href="https://github.com/python/mypy/compare/v2.1.0...v2.2.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3063b5ed6f |
Bump uvicorn from 0.50.0 to 0.51.0 in /backend (#1776)
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.50.0 to 0.51.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn's releases</a>.</em></p> <blockquote> <h2>Version 0.51.0</h2> <h2>What's Changed</h2> <ul> <li>Restart workers with overlap on SIGHUP for near-zero-downtime reloads by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3025">Kludex/uvicorn#3025</a></li> <li>Remove colorama from the standard extra by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3027">Kludex/uvicorn#3027</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.50.2...0.51.0">https://github.com/Kludex/uvicorn/compare/0.50.2...0.51.0</a></p> <h2>Version 0.50.1</h2> <h2>What's Changed</h2> <ul> <li>Split comma-separated <code>Sec-WebSocket-Protocol</code> values in the websockets-sansio implementation by <a href="https://github.com/Aayush7352"><code>@Aayush7352</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3019">Kludex/uvicorn#3019</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Aayush7352"><code>@Aayush7352</code></a> made their first contribution in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3019">Kludex/uvicorn#3019</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.50.0...0.50.1">https://github.com/Kludex/uvicorn/compare/0.50.0...0.50.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's changelog</a>.</em></p> <blockquote> <h2>0.51.0 (July 8, 2026)</h2> <h3>Added</h3> <ul> <li>Restart workers one at a time on <code>SIGHUP</code>, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3025">#3025</a>)</li> </ul> <h3>Removed</h3> <ul> <li>Remove <code>colorama</code> from the <code>standard</code> extra (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3027">#3027</a>)</li> </ul> <h2>0.50.2 (July 6, 2026)</h2> <h3>Fixed</h3> <ul> <li>Require <code>websockets>=13.0</code>, which the default <code>websockets-sansio</code> implementation needs (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3021">#3021</a>)</li> </ul> <h2>0.50.1 (July 6, 2026)</h2> <h3>Fixed</h3> <ul> <li>Split comma-separated <code>Sec-WebSocket-Protocol</code> values in the <code>websockets-sansio</code> implementation (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3019">#3019</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Kludex/uvicorn/commit/e4d0b05eb8c6459b7ba27ad13a2c2f4f8d4ece50"><code>e4d0b05</code></a> Version 0.51.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3028">#3028</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/944e43ddbf715aea7c587f2738cd94c3f9106110"><code>944e43d</code></a> Remove colorama from the standard extra (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3027">#3027</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/2e787704f2610133059e76d56bbd60f48edd34a3"><code>2e78770</code></a> Restart workers with overlap on SIGHUP for near-zero-downtime reloads (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3025">#3025</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/a1b570cf577d512bfd396b64d72313233e9c3325"><code>a1b570c</code></a> Version 0.50.2 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3022">#3022</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/83c7da7332ac3100171c258071de40d5dde35e13"><code>83c7da7</code></a> Require websockets>=13.0 for the default sansio implementation (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3021">#3021</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/b4d011668a75d02370353f34de6dea59692dcad2"><code>b4d0116</code></a> Version 0.50.1 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3020">#3020</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/2a9151d0e763df2c56da2bfe8c5dcead4fe5a276"><code>2a9151d</code></a> Split comma-separated <code>Sec-WebSocket-Protocol</code> values in the websockets-sansi...</li> <li><a href="https://github.com/Kludex/uvicorn/commit/1bf3ab42e3aba1cf4acd1ef0c29d8ad9a599d333"><code>1bf3ab4</code></a> Cover the excluded-directory branch in <code>FileFilter</code> with a direct test (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3014">#3014</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/837b5f960dbe2f03e9f12feb9955ce2217211ad8"><code>837b5f9</code></a> Deflake multiprocess, reload, and signal supervisor tests (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2975">#2975</a>)</li> <li>See full diff in <a href="https://github.com/Kludex/uvicorn/compare/0.50.0...0.51.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
15700b46c0 |
Bump @hey-api/openapi-ts from 0.97.3 to 0.99.0 in /frontend (#1775)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts) from 0.97.3 to 0.99.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md">@hey-api/openapi-ts's changelog</a>.</em></p> <blockquote> <h2>0.99.0</h2> <h3>Minor Changes</h3> <ul> <li><strong>BREAKING</strong> <strong>plugin</strong>: rename <code>.symbols</code> to <code>.imports</code> (<a href="https://redirect.github.com/hey-api/hey-api/pull/4052">#4052</a>) (<a href="https://github.com/hey-api/hey-api/commit/57fac5ef22bca2b4ac47c8df136270f967f85ed1"><code>57fac5e</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <p>To better represent its functionality, the <code>plugin.symbols</code> property has been renamed to <code>plugin.imports</code>.</p> <ul> <li><strong>BREAKING</strong> <strong>config</strong>: merge duplicate plugin configurations (<a href="https://github.com/hey-api/hey-api/commit/089ed2ed065ff92accb7d98cdeb95c66cf88f2f6"><code>089ed2e</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Plugin duplicates behavior</h3> <p>If you specified the same plugin multiple times, only the last instance would be used. We eventually added a warning for this behavior, but that didn't treat the root issue. This release changes that by merging duplicate plugin configurations.</p> <ul> <li> <p><strong>BREAKING</strong> <strong>plugin(<code>@hey-api/schemas</code>)</strong>: widen <code>schema</code> type in <code>nameBuilder</code> to unknown (<a href="https://redirect.github.com/hey-api/hey-api/pull/4076">#4076</a>) (<a href="https://github.com/hey-api/hey-api/commit/98ce35e3b51bd4d4fd58ebe9b81b6632ca654416"><code>98ce35e</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>BREAKING</strong> <strong>plugin</strong>: remove <code>.external()</code> method (<a href="https://redirect.github.com/hey-api/hey-api/pull/4052">#4052</a>) (<a href="https://github.com/hey-api/hey-api/commit/57fac5ef22bca2b4ac47c8df136270f967f85ed1"><code>57fac5e</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> </ul> <h3>Removed <code>plugin.external()</code> function</h3> <p>This function was used to reference external symbols. All plugins now use the Imports API, which allows you to reference external symbols in a type-safe way through <code>plugin.imports</code>.</p> <h3>Patch Changes</h3> <ul> <li> <p><strong>api</strong>: replace <code>~</code> fields with <code>$</code> (<a href="https://redirect.github.com/hey-api/hey-api/pull/4086">#4086</a>) (<a href="https://github.com/hey-api/hey-api/commit/d5ca286729e8b881387d5a7ac9234512af58dcd4"><code>d5ca286</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>config</strong>: add Presets API (<a href="https://github.com/hey-api/hey-api/commit/3b4ee7a5d3fd454aa8416ad1ed4a565119632be1"><code>3b4ee7a</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-angular</code>)</strong>: fix: send an empty object request body when explicitly provided in flat parameters mode (<a href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>) (<a href="https://github.com/hey-api/hey-api/commit/ab522ef77953ccb2c55cbdcc369a27eed90de3d3"><code>ab522ef</code></a>) by <a href="https://github.com/matthewjamesadam"><code>@matthewjamesadam</code></a></p> </li> <li> <p><strong>client</strong>: use <code>getBaseUrl()</code> function to determine default value (<a href="https://redirect.github.com/hey-api/hey-api/pull/3772">#3772</a>) (<a href="https://github.com/hey-api/hey-api/commit/4026955318aed9282b46464b15a75ab1cdc7243a"><code>4026955</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(zod)</strong>: improve discriminator handling (<a href="https://github.com/hey-api/hey-api/commit/680b94766855232fdfe8cf34029224c3900821f8"><code>680b947</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/preact-query</code>)</strong>: fix: strip <code>initialData</code> from the inferred result types for infinite query options (<a href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/solid-query</code>)</strong>: fix: strip <code>initialData</code> from the inferred result types for infinite query options (<a href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(valibot)</strong>: support custom regular expression error messages with <code>x-pattern-message</code> (<a href="https://redirect.github.com/hey-api/hey-api/pull/4117">#4117</a>) (<a href="https://github.com/hey-api/hey-api/commit/3ed3afbe785d9a79f9eec02ab6240d2041d4f49a"><code>3ed3afb</code></a>) by <a href="https://github.com/apps/pullfrog"><code>@pullfrog</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-next</code>)</strong>: fix: send an empty object request body when explicitly provided in flat parameters mode (<a href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>) (<a href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>) by <a href="https://github.com/matthewjamesadam"><code>@matthewjamesadam</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-axios</code>)</strong>: fix: send an empty object request body when explicitly provided in flat parameters mode (<a href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>) (<a href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>) by <a href="https://github.com/matthewjamesadam"><code>@matthewjamesadam</code></a></p> </li> <li> <p><strong>plugin(zod)</strong>: support creating optional request schemas (<a href="https://github.com/hey-api/hey-api/commit/11315c763a6a8ba9f7b2396466bfaf5a9e257fee"><code>11315c7</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/react-query</code>)</strong>: fix: strip <code>initialData</code> from the inferred result types for infinite query options (<a href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-ky</code>)</strong>: fix: send an empty object request body when explicitly provided in flat parameters mode (<a href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>) (<a href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>) by <a href="https://github.com/matthewjamesadam"><code>@matthewjamesadam</code></a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/hey-api/commit/8f3eb72dd7dc52908a81cefc841d9d6f7416bbdf"><code>8f3eb72</code></a> ci: release</li> <li><a href="https://github.com/hey-api/hey-api/commit/3ed3afbe785d9a79f9eec02ab6240d2041d4f49a"><code>3ed3afb</code></a> docs: add changesets</li> <li><a href="https://github.com/hey-api/hey-api/commit/66bc2b759d4ad7ddde61b39b956675eac63e0b1e"><code>66bc2b7</code></a> feat: support x-pattern-message extension in Zod and Valibot validator plugins</li> <li><a href="https://github.com/hey-api/hey-api/commit/7b83c97e0eb7305b4a9eb54c81ae76ea9bb91e34"><code>7b83c97</code></a> test: update snapshots</li> <li><a href="https://github.com/hey-api/hey-api/commit/020df93fb0d756bcbe93e246a82b566da0fcf6b8"><code>020df93</code></a> feat(faker): first implementation</li> <li><a href="https://github.com/hey-api/hey-api/commit/a3338ac5df8cbb14d78eaab8e5fbabc0bd25a253"><code>a3338ac</code></a> test: update snapshots</li> <li><a href="https://github.com/hey-api/hey-api/commit/307e020bbb851bc3ab10aae08319e2b9676c0405"><code>307e020</code></a> test: update snapshots</li> <li><a href="https://github.com/hey-api/hey-api/commit/835c2304843be396e1e799b260868af56239d5ba"><code>835c230</code></a> chore: more cleanup</li> <li><a href="https://github.com/hey-api/hey-api/commit/1490b058b59a244d908b6e1fe8680bf82e21cd94"><code>1490b05</code></a> test: update snapshots</li> <li><a href="https://github.com/hey-api/hey-api/commit/9e6bddeb71990cd5f6c8e0ef9ee872cbf2f42c14"><code>9e6bdde</code></a> chore: clean up</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.99.0/packages/openapi-ts">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
e66421df13 |
Bump @tailwindcss/postcss from 4.2.1 to 4.3.2 in /docs (#1773)
Bumps [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) from 4.2.1 to 4.3.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/releases">@tailwindcss/postcss's releases</a>.</em></p> <blockquote> <h2>v4.3.2</h2> <h3>Fixed</h3> <ul> <li>Support bare spacing values for <code>auto-rows-*</code> and <code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and <code>auto-cols-16</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229">#20229</a>)</li> <li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode from crashing on Windows when <code>@source</code> points to a directory that doesn't exist (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242">#20242</a>)</li> <li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x when <code>context.parentURL</code> is not a valid URL (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245">#20245</a>)</li> <li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode rebuilds when the input CSS file changes in an ignored directory (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246">#20246</a>)</li> <li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to use custom variants defined later (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247">#20247</a>)</li> <li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when scanned files or directories are deleted (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259">#20259</a>)</li> <li>Generate <code>font-size</code> instead of <code>color</code> declarations for <code>text-[--spacing(…)]</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260">#20260</a>)</li> <li>Prevent <code>@source</code> patterns from scanning unrelated sibling files and folders (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263">#20263</a>)</li> <li>Extract class candidates adjacent to Template Toolkit delimiters like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and <code>.tx</code> files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li> <li>Extract class candidates from conditional Maud syntax like <code>p.text-black[condition]</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li> <li>Prevent <code>@position-try</code> rules from triggering unknown at-rule warnings when optimizing CSS (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277">#20277</a>)</li> <li>Support class suggestions for named opacity modifiers from <code>--opacity</code> theme values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287">#20287</a>)</li> <li>Prevent type errors in <code>@tailwindcss/postcss</code> when used with newer PostCSS patch releases (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289">#20289</a>)</li> </ul> <h2>v4.3.1</h2> <h3>Added</h3> <ul> <li>Add <code>--silent</code> option to suppress output in <code>@tailwindcss/cli</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100">#20100</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Remove deprecation warnings by using <code>Module#registerHooks</code> instead of <code>Module#register</code> on Node 26+ (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028">#20028</a>)</li> <li>Canonicalization: don't crash when plugin utilities throw for unsupported values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052">#20052</a>)</li> <li>Allow <code>@apply</code> to be used with CSS mixins (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427">#19427</a>)</li> <li>Ensure <code>not-*</code> correctly negates <code>@container</code> queries, including <code>style(…)</code> queries (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059">#20059</a>)</li> <li>Ensure <code>drop-shadow-*</code> color utilities work with custom shadow values containing <code>calc(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080">#20080</a>)</li> <li>Fix 'Sourcemap is likely to be incorrect' warnings when using <code>@tailwindcss/vite</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103">#20103</a>)</li> <li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack projects without requiring <code>webpack</code> as a peer dependency (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027">#20027</a>)</li> <li>Canonicalization: don't suggest invalid <code>calc(…)</code> expressions (e.g. <code>px-[calc(1rem+0px)]</code> → <code>px-[calc(1rem+0)]</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127">#20127</a>)</li> <li>Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. <code>left-[99999px]</code> → <code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130">#20130</a>)</li> <li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode recovers when a tracked dependency is deleted and restored (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137">#20137</a>)</li> <li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored when scanning for class candidates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139">#20139</a>)</li> <li>Ensure class candidates are extracted from Twig <code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198">#20198</a>)</li> <li>Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588">#19588</a>)</li> <li>Allow <code>@variant</code> to be used inside <code>addBase</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480">#19480</a>)</li> <li>Ensure <code>@source</code> globs with symlinks are preserved (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li> <li>Ensure later <code>@source</code> rules can re-include files excluded by earlier <code>@source not</code> rules (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li> <li>Upgrade: don't migrate empty class rules to invalid <code>@utility</code> rules (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205">#20205</a>)</li> <li>Ensure transitions between <code>inset-shadow-none</code> and other inset shadows work correctly (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208">#20208</a>)</li> <li>Ensure explicitly referenced <code>@source</code> directories are scanned even when ignored by git (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214">#20214</a>)</li> <li>Ensure <code>@source</code> globs ending in <code>**/*</code> preserve dynamic path segments to avoid scanning too many files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217">#20217</a>)</li> <li>Canonicalization: don't fold <code>calc(…)</code> divisions when the result would require high precision (e.g. <code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not <code>w-[28.571428571428573%]</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221">#20221</a>)</li> <li>Serve ESM type declarations to ESM importers of <code>@tailwindcss/postcss</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228">#20228</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Generate <code>0</code> instead of <code>calc(var(--spacing) * 0)</code> for spacing utilities like <code>m-0</code> and <code>left-0</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20196">#20196</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md">@tailwindcss/postcss's changelog</a>.</em></p> <blockquote> <h2>[4.3.2] - 2026-06-26</h2> <h3>Fixed</h3> <ul> <li>Support bare spacing values for <code>auto-rows-*</code> and <code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and <code>auto-cols-16</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229">#20229</a>)</li> <li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode from crashing on Windows when <code>@source</code> points to a directory that doesn't exist (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242">#20242</a>)</li> <li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x when <code>context.parentURL</code> is not a valid URL (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245">#20245</a>)</li> <li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode rebuilds when the input CSS file changes in an ignored directory (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246">#20246</a>)</li> <li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to use custom variants defined later (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247">#20247</a>)</li> <li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when scanned files or directories are deleted (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259">#20259</a>)</li> <li>Generate <code>font-size</code> instead of <code>color</code> declarations for <code>text-[--spacing(…)]</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260">#20260</a>)</li> <li>Prevent <code>@source</code> patterns from scanning unrelated sibling files and folders (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263">#20263</a>)</li> <li>Extract class candidates adjacent to Template Toolkit delimiters like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and <code>.tx</code> files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li> <li>Extract class candidates from conditional Maud syntax like <code>p.text-black[condition]</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li> <li>Prevent <code>@position-try</code> rules from triggering unknown at-rule warnings when optimizing CSS (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277">#20277</a>)</li> <li>Support class suggestions for named opacity modifiers from <code>--opacity</code> theme values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287">#20287</a>)</li> <li>Prevent type errors in <code>@tailwindcss/postcss</code> when used with newer PostCSS patch releases (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289">#20289</a>)</li> </ul> <h2>[4.3.1] - 2026-06-12</h2> <h3>Added</h3> <ul> <li>Add <code>--silent</code> option to suppress output in <code>@tailwindcss/cli</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100">#20100</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Remove deprecation warnings by using <code>Module#registerHooks</code> instead of <code>Module#register</code> on Node 26+ (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028">#20028</a>)</li> <li>Canonicalization: don't crash when plugin utilities throw for unsupported values (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052">#20052</a>)</li> <li>Allow <code>@apply</code> to be used with CSS mixins (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427">#19427</a>)</li> <li>Ensure <code>not-*</code> correctly negates <code>@container</code> queries, including <code>style(…)</code> queries (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059">#20059</a>)</li> <li>Ensure <code>drop-shadow-*</code> color utilities work with custom shadow values containing <code>calc(…)</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080">#20080</a>)</li> <li>Fix 'Sourcemap is likely to be incorrect' warnings when using <code>@tailwindcss/vite</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103">#20103</a>)</li> <li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack projects without requiring <code>webpack</code> as a peer dependency (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027">#20027</a>)</li> <li>Canonicalization: don't suggest invalid <code>calc(…)</code> expressions (e.g. <code>px-[calc(1rem+0px)]</code> → <code>px-[calc(1rem+0)]</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127">#20127</a>)</li> <li>Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. <code>left-[99999px]</code> → <code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130">#20130</a>)</li> <li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode recovers when a tracked dependency is deleted and restored (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137">#20137</a>)</li> <li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored when scanning for class candidates (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139">#20139</a>)</li> <li>Ensure class candidates are extracted from Twig <code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198">#20198</a>)</li> <li>Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588">#19588</a>)</li> <li>Allow <code>@variant</code> to be used inside <code>addBase</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480">#19480</a>)</li> <li>Ensure <code>@source</code> globs with symlinks are preserved (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li> <li>Ensure later <code>@source</code> rules can re-include files excluded by earlier <code>@source not</code> rules (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li> <li>Upgrade: don't migrate empty class rules to invalid <code>@utility</code> rules (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205">#20205</a>)</li> <li>Ensure transitions between <code>inset-shadow-none</code> and other inset shadows work correctly (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208">#20208</a>)</li> <li>Ensure explicitly referenced <code>@source</code> directories are scanned even when ignored by git (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214">#20214</a>)</li> <li>Ensure <code>@source</code> globs ending in <code>**/*</code> preserve dynamic path segments to avoid scanning too many files (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217">#20217</a>)</li> <li>Canonicalization: don't fold <code>calc(…)</code> divisions when the result would require high precision (e.g. <code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not <code>w-[28.571428571428573%]</code>) (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221">#20221</a>)</li> <li>Serve ESM type declarations to ESM importers of <code>@tailwindcss/postcss</code> (<a href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228">#20228</a>)</li> </ul> <h3>Changed</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/056a1550721d4bf79ff732d5ab9414fa83f7064f"><code>056a155</code></a> 4.3.2 (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20281">#20281</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/8a14a710102cae195f6811e8578bef9477bc6be9"><code>8a14a71</code></a> 4.3.1 (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20226">#20226</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/522288ca08c7ed0e7e9d3256f40fd36981d451a3"><code>522288c</code></a> Serve ESM type declarations to ESM importers of <code>@tailwindcss/postcss</code> (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20228">#20228</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/8dcdb66e8a58b9df621ed1a9cb59396e0ddb6dd7"><code>8dcdb66</code></a> Bump dependencies (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20095">#20095</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/588bd7371f4cae96426e1387819b7fd1d99765f9"><code>588bd73</code></a> 4.3.0 (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20023">#20023</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/12eb5ae7b6026ff64c04f889b2221418d772da72"><code>12eb5ae</code></a> Cleanup noisy test output (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20015">#20015</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/4255671c5f792c42808ecd6b2dec27c16e3c559e"><code>4255671</code></a> Improve snapshot tests (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20013">#20013</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/52f94c74bb491e9c3641ce322a0ef90fb3c45de6"><code>52f94c7</code></a> Improve codebase quality (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19999">#19999</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/d194d4c3e656313421f1cfa1954db8f58eec0fcd"><code>d194d4c</code></a> docs: fix various typos in comments and documentation (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19878">#19878</a>)</li> <li><a href="https://github.com/tailwindlabs/tailwindcss/commit/bfb5732b0b948d89c6803cb537bca168ec8e0a46"><code>bfb5732</code></a> Fall back to the plugin <code>base</code> when PostCSS has no <code>from</code> option (<a href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19980">#19980</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-postcss">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for <code>@tailwindcss/postcss</code> since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
5aca59252e |
Bump markdownlint-cli2 from 0.22.0 to 0.23.0 in /docs (#1774)
Bumps [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) from 0.22.0 to 0.23.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md">markdownlint-cli2's changelog</a>.</em></p> <blockquote> <h2>0.23.0</h2> <ul> <li>Add <code>overrides</code> configuration option</li> <li>Improve options/configuration file handling</li> <li>Update dependencies (including <code>markdownlint</code>)</li> <li>Remove support for end-of-life Node 20</li> </ul> <h2>0.22.1</h2> <ul> <li>Update dependencies</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/534166213006ec869b773b7ed8c6ebeaad1165d0"><code>5341662</code></a> Update to version 0.23.0.</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/5a7b0fd857f62913f69d718f53b9f8b6f45a5d5d"><code>5a7b0fd</code></a> Add test cases to ensure user-provided Options object properties that use imp...</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/73c8de8a7148d8b9b40bf94df5723af9d33fb4fb"><code>73c8de8</code></a> Bump eslint from 10.5.0 to 10.6.0</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/fb55bdb49618c7011985e16e9f1130fdad724c2c"><code>fb55bdb</code></a> Bump js-yaml from 5.1.0 to 5.2.0</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/f4ee8c9de9b1f0296fcb526e2bfa527b3bb37c25"><code>f4ee8c9</code></a> Bump eslint-plugin-jsdoc from 63.0.9 to 63.0.10</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/b4f4a5233e77f2026f51f66ce5426a497c9d2fee"><code>b4f4a52</code></a> Add support for configuration object "extends" to new "overrides" behavior.</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/dacefd509c4a3a6a1b6ee95eae157d2ab440ddbf"><code>dacefd5</code></a> Refactor "extends" implementation to modify objects in place (simpler, more f...</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/2be557f178a7fa055c502882e78b84c3f80130ea"><code>2be557f</code></a> Bump eslint-plugin-n from 18.2.0 to 18.2.1</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/184d8d6a12733c25bf151d8c3d3635bb2a9f271b"><code>184d8d6</code></a> Bump eslint-plugin-jsdoc from 63.0.8 to 63.0.9</li> <li><a href="https://github.com/DavidAnson/markdownlint-cli2/commit/60ac5bc529202df1bfd5bbe6891b12b22652130c"><code>60ac5bc</code></a> Bump eslint-plugin-n from 18.1.0 to 18.2.0</li> <li>Additional commits viewable in <a href="https://github.com/DavidAnson/markdownlint-cli2/compare/v0.22.0...v0.23.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3ec0824862 |
Bump lucide-react from 1.23.0 to 1.24.0 in /docs (#1772)
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 1.23.0 to 1.24.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lucide-icons/lucide/releases">lucide-react's releases</a>.</em></p> <blockquote> <h2>Version 1.24.0</h2> <h2>What's Changed</h2> <ul> <li>fix(scripts): fix typo in renameIcon.function.mts by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4514">lucide-icons/lucide#4514</a></li> <li>chore(icons): remove <code>toBeRemovedInVersion</code> metadata and make it optional in schema by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4513">lucide-icons/lucide#4513</a></li> <li>feat(site): Add merch link by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4524">lucide-icons/lucide#4524</a></li> <li>fix(packages/angular): move child rendering logic to template from effect by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4519">lucide-icons/lucide#4519</a></li> <li>docs(site): list <code>@gyeonghokim/lucide-lit</code> as third-party package by <a href="https://github.com/GyeongHoKim"><code>@GyeongHoKim</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4421">lucide-icons/lucide#4421</a></li> <li>fix(icons): changed <code>option</code> icon by <a href="https://github.com/jamiemlaw"><code>@jamiemlaw</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4326">lucide-icons/lucide#4326</a></li> <li>fix(lucide-react-native): restore the icons entry point in the JS bundles by <a href="https://github.com/pvinis"><code>@pvinis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4528">lucide-icons/lucide#4528</a></li> <li>fix(vue): support kebab-case icon-node prop on Icon component by <a href="https://github.com/Sagargupta16"><code>@Sagargupta16</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4512">lucide-icons/lucide#4512</a></li> <li>fix(lucide-react-native): Add icon exports property to the package.json file by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4522">lucide-icons/lucide#4522</a></li> <li>fix(icons): centered the <code>dot</code> icon by <a href="https://github.com/cnlancehu"><code>@cnlancehu</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4492">lucide-icons/lucide#4492</a></li> <li>feat(icons): added <code>circle-euro-sign</code> icon by <a href="https://github.com/Guido3000"><code>@Guido3000</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4353">lucide-icons/lucide#4353</a></li> <li>feat(icons): added <code>server-plus</code> icon by <a href="https://github.com/Turboman3000"><code>@Turboman3000</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4232">lucide-icons/lucide#4232</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ericfennis"><code>@ericfennis</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4513">lucide-icons/lucide#4513</a></li> <li><a href="https://github.com/GyeongHoKim"><code>@GyeongHoKim</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4421">lucide-icons/lucide#4421</a></li> <li><a href="https://github.com/pvinis"><code>@pvinis</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4528">lucide-icons/lucide#4528</a></li> <li><a href="https://github.com/Sagargupta16"><code>@Sagargupta16</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4512">lucide-icons/lucide#4512</a></li> <li><a href="https://github.com/Guido3000"><code>@Guido3000</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4353">lucide-icons/lucide#4353</a></li> <li><a href="https://github.com/Turboman3000"><code>@Turboman3000</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4232">lucide-icons/lucide#4232</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lucide-icons/lucide/compare/1.23.0...1.24.0">https://github.com/lucide-icons/lucide/compare/1.23.0...1.24.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/lucide-icons/lucide/commits/1.24.0/packages/lucide-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3a1aa5dded |
Bump docker/build-push-action from 7.2.0 to 7.3.0 (#1756)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.2.0 to 7.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v7.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1567">docker/build-push-action#1567</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1545">docker/build-push-action#1545</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1572">docker/build-push-action#1572</a></li> <li>Bump <code>@sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1568">docker/build-push-action#1568</a></li> <li>Bump js-yaml from 4.1.1 to 4.3.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1566">docker/build-push-action#1566</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/build-push-action/pull/1547">docker/build-push-action#1547</a></li> <li>Bump undici from 6.24.1 to 6.27.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1564">docker/build-push-action#1564</a></li> <li>Bump vite from 7.3.2 to 7.3.6 in <a href="https://redirect.github.com/docker/build-push-action/pull/1563">docker/build-push-action#1563</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0">https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a"><code>53b7df9</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1572">#1572</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/154298c1ca89be1c0e019084f0611ddca621aafc"><code>154298c</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/cb1238b9c9eb453d106b4e4142a5bd9cde710040"><code>cb1238b</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.91.0 to 0.92.0</li> <li><a href="https://github.com/docker/build-push-action/commit/24f845d5cbe75d2d350a984fd0e18cb7a3f29c1c"><code>24f845d</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1566">#1566</a> from docker/dependabot/npm_and_yarn/js-yaml-4.2.0</li> <li><a href="https://github.com/docker/build-push-action/commit/9c6973007b52c322651c38915d5e8824cea95c50"><code>9c69730</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/bc3a3a5f72a6dca16c2c2468d1dfc55ee66d2193"><code>bc3a3a5</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1574">#1574</a> from docker/dependabot/github_actions/aws-actions/co...</li> <li><a href="https://github.com/docker/build-push-action/commit/a82c504a2387bb8bedc50072f9c554ae2a7dab5d"><code>a82c504</code></a> chore(deps): Bump js-yaml from 4.1.1 to 4.3.0</li> <li><a href="https://github.com/docker/build-push-action/commit/0285a75190c039d6dac52b7711abcef3f5d8f6f6"><code>0285a75</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1573">#1573</a> from docker/dependabot/github_actions/actions/cache-...</li> <li><a href="https://github.com/docker/build-push-action/commit/c6ad2a3f9644680619de938b97c8a10a87b2a88d"><code>c6ad2a3</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1575">#1575</a> from docker/dependabot/github_actions/actions/checko...</li> <li><a href="https://github.com/docker/build-push-action/commit/d37484fb9737c5442a257e2f0ae5a8d756ed7d92"><code>d37484f</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1564">#1564</a> from docker/dependabot/npm_and_yarn/undici-6.27.0</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
5312e7952d |
Bump actions/checkout from 6 to 7.0.0 (#1755)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.1.0</h2> <h2>What's Changed</h2> <ul> <li><strong>[BREAKING]</strong> backport <code>allow-unsafe-pr-checkout</code> to v6 by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2500">actions/checkout#2500</a></li> <li>backport fixes to releases-v6 by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2527">actions/checkout#2527</a></li> </ul> <p><a href="https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/">https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/</a> for more details about this breaking change</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v6.1.0">https://github.com/actions/checkout/compare/v6.0.3...v6.1.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357">actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446">actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth"><code>@yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3">https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355">actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2">https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314">actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328">actions/checkout#2328</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.1</h2> <ul> <li>Skip running unsafe pr check if input is default by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li> <li>Trim only ascii whitespace for branch by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li> <li>Escape values passed to --unset by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li> <li>Various dependency updates</li> </ul> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Various dependency updates</li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1"><code>3d3c42e</code></a> prep v7.0.1 release (<a href="https://redirect.github.com/actions/checkout/issues/2531">#2531</a>)</li> <li><a href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07"><code>2880268</code></a> escape values passed to --unset (<a href="https://redirect.github.com/actions/checkout/issues/2530">#2530</a>)</li> <li><a href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1"><code>12cd223</code></a> trim only ascii whitespace for branch (<a href="https://redirect.github.com/actions/checkout/issues/2521">#2521</a>)</li> <li><a href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541"><code>62661c4</code></a> skip running unsafe pr check if input is default (<a href="https://redirect.github.com/actions/checkout/issues/2518">#2518</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f"><code>e8d4307</code></a> Bump the minor-actions-dependencies group with 2 updates (<a href="https://redirect.github.com/actions/checkout/issues/2499">#2499</a>)</li> <li><a href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87"><code>631c942</code></a> eslint 9 (<a href="https://redirect.github.com/actions/checkout/issues/2474">#2474</a>)</li> <li><a href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e"><code>4f1f4ae</code></a> Bump actions/upload-artifact from 4 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2476">#2476</a>)</li> <li><a href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92"><code>ba09753</code></a> Bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2488">#2488</a>)</li> <li><a href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22"><code>b9e0990</code></a> Bump docker/login-action from 3.3.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2479">#2479</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2"><code>e8cb398</code></a> Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2478">#2478</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v6...v7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
c79bb37a1a |
Bump react-icons from 5.6.0 to 5.7.0 in /docs (#1768)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [react-icons](https://github.com/react-icons/react-icons) from 5.6.0 to 5.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react-icons/react-icons/releases">react-icons's releases</a>.</em></p> <blockquote> <h2>v5.7.0</h2> <h2>What's Changed</h2> <ul> <li>update packages by <a href="https://github.com/kamijin-fanta"><code>@kamijin-fanta</code></a> in <a href="https://redirect.github.com/react-icons/react-icons/pull/1153">react-icons/react-icons#1153</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0">https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0</a></p> <table> <thead> <tr> <th>Icon Library</th> <th>License</th> <th>Version</th> <th align="right">Count</th> </tr> </thead> <tbody> <tr> <td><a href="https://circumicons.com/">Circum Icons</a></td> <td><a href="https://github.com/Klarr-Agency/Circum-Icons/blob/main/LICENSE">MPL-2.0 license</a></td> <td>1.0.0</td> <td align="right">288</td> </tr> <tr> <td><a href="https://fontawesome.com/">Font Awesome 5</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 License</a></td> <td>5.15.4-3-gafecf2a</td> <td align="right">1612</td> </tr> <tr> <td><a href="https://fontawesome.com/">Font Awesome 6</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 License</a></td> <td>6.7.2-1-g840c215</td> <td align="right">2060</td> </tr> <tr> <td><a href="https://ionicons.com/">Ionicons 4</a></td> <td><a href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td> <td>4.6.3</td> <td align="right">696</td> </tr> <tr> <td><a href="https://ionicons.com/">Ionicons 5</a></td> <td><a href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td> <td>5.5.4</td> <td align="right">1332</td> </tr> <tr> <td><a href="http://google.github.io/material-design-icons/">Material Design icons</a></td> <td><a href="https://github.com/google/material-design-icons/blob/master/LICENSE">Apache License Version 2.0</a></td> <td>4.0.0-161-gf3fb4442b2</td> <td align="right">4341</td> </tr> <tr> <td><a href="http://s-ings.com/typicons/">Typicons</a></td> <td><a href="https://creativecommons.org/licenses/by-sa/3.0/">CC BY-SA 3.0</a></td> <td>2.1.2</td> <td align="right">336</td> </tr> <tr> <td><a href="https://octicons.github.com/">Github Octicons icons</a></td> <td><a href="https://github.com/primer/octicons/blob/master/LICENSE">MIT</a></td> <td>18.3.0</td> <td align="right">264</td> </tr> <tr> <td><a href="https://feathericons.com/">Feather</a></td> <td><a href="https://github.com/feathericons/feather/blob/master/LICENSE">MIT</a></td> <td>4.29.2</td> <td align="right">287</td> </tr> <tr> <td><a href="https://lucide.dev/">Lucide</a></td> <td><a href="https://github.com/lucide-icons/lucide/blob/main/LICENSE">ISC</a></td> <td>0.462.0</td> <td align="right">1541</td> </tr> <tr> <td><a href="https://game-icons.net/">Game Icons</a></td> <td><a href="https://creativecommons.org/licenses/by/3.0/">CC BY 3.0</a></td> <td>12920d6565588f0512542a3cb0cdfd36a497f910</td> <td align="right">4040</td> </tr> <tr> <td><a href="https://erikflowers.github.io/weather-icons/">Weather Icons</a></td> <td><a href="http://scripts.sil.org/OFL">SIL OFL 1.1</a></td> <td>2.0.12</td> <td align="right">219</td> </tr> <tr> <td><a href="https://vorillaz.github.io/devicons/">Devicons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.8.0</td> <td align="right">192</td> </tr> <tr> <td><a href="https://github.com/ant-design/ant-design-icons">Ant Design Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>4.4.2</td> <td align="right">831</td> </tr> <tr> <td><a href="https://github.com/twbs/icons">Bootstrap Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.13.1</td> <td align="right">2754</td> </tr> <tr> <td><a href="https://github.com/Remix-Design/RemixIcon">Remix Icon</a></td> <td><a href="http://www.apache.org/licenses/">Apache License Version 2.0</a></td> <td>4.9.1</td> <td align="right">3229</td> </tr> <tr> <td><a href="https://github.com/icons8/flat-color-icons">Flat Color Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.0.2</td> <td align="right">329</td> </tr> <tr> <td><a href="https://github.com/grommet/grommet-icons">Grommet-Icons</a></td> <td><a href="http://www.apache.org/licenses/">Apache License Version 2.0</a></td> <td>4.14.0</td> <td align="right">637</td> </tr> <tr> <td><a href="https://github.com/tailwindlabs/heroicons">Heroicons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.0.6</td> <td align="right">460</td> </tr> <tr> <td><a href="https://github.com/tailwindlabs/heroicons">Heroicons 2</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>2.2.0</td> <td align="right">972</td> </tr> <tr> <td><a href="https://simpleicons.org/">Simple Icons</a></td> <td><a href="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 Universal</a></td> <td>16.24.0</td> <td align="right">3446</td> </tr> <tr> <td><a href="https://thesabbir.github.io/simple-line-icons/">Simple Line Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>2.5.5</td> <td align="right">189</td> </tr> <tr> <td><a href="https://github.com/Keyamoon/IcoMoon-Free">IcoMoon Free</a></td> <td><a href="https://github.com/Keyamoon/IcoMoon-Free/blob/master/License.txt">CC BY 4.0 License</a></td> <td>d006795ede82361e1bac1ee76f215cf1dc51e4ca</td> <td align="right">491</td> </tr> <tr> <td><a href="https://github.com/atisawd/boxicons">BoxIcons</a></td> <td><a href="https://github.com/atisawd/boxicons/blob/master/LICENSE">MIT</a></td> <td>2.1.4</td> <td align="right">1634</td> </tr> <tr> <td><a href="https://github.com/astrit/css.gg">css.gg</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>2.1.4</td> <td align="right">704</td> </tr> <tr> <td><a href="https://github.com/microsoft/vscode-codicons">VS Code Icons</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0</a></td> <td>0.0.0</td> <td align="right">612</td> </tr> <tr> <td><a href="https://github.com/tabler/tabler-icons">Tabler Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>3.44.0</td> <td align="right">6146</td> </tr> <tr> <td><a href="https://github.com/lykmapipo/themify-icons">Themify Icons</a></td> <td><a href="https://github.com/thecreation/standard-icons/blob/master/modules/themify-icons/LICENSE">MIT</a></td> <td>v0.1.2-2-g9600186</td> <td align="right">352</td> </tr> <tr> <td><a href="https://icons.radix-ui.com">Radix Icons</a></td> <td><a href="https://github.com/radix-ui/icons/blob/master/LICENSE">MIT</a></td> <td><code>@radix-ui/react-icons</code><a href="https://github.com/1"><code>@1</code></a>.3.2-35-g112af91</td> <td align="right">332</td> </tr> <tr> <td><a href="https://github.com/phosphor-icons/core">Phosphor Icons</a></td> <td><a href="https://github.com/phosphor-icons/core/blob/main/LICENSE">MIT</a></td> <td>2.1.1</td> <td align="right">9072</td> </tr> <tr> <td><a href="https://icons8.com/line-awesome">Icons8 Line Awesome</a></td> <td><a href="https://github.com/icons8/line-awesome/blob/master/LICENSE.md">MIT</a></td> <td>1.3.1</td> <td align="right">1544</td> </tr> </tbody> </table> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react-icons/react-icons/commit/87470d588c5624bf3e291f17527c3ecd1419c8ae"><code>87470d5</code></a> v5.7.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/e1cb06116df395109208fa4786b5e6ae4cc20187"><code>e1cb061</code></a> fix ci publish</li> <li><a href="https://github.com/react-icons/react-icons/commit/bffaab7c0f90d78b240bd06be1c40953be89a992"><code>bffaab7</code></a> Revert "v5.7.0"</li> <li><a href="https://github.com/react-icons/react-icons/commit/2cde989e0d3637fa39471e3f24df99ffb88cb1d1"><code>2cde989</code></a> v5.7.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/dac95ccf8126f41dc068f17fb09573fd86b6a0e9"><code>dac95cc</code></a> update npm in ci workflow</li> <li><a href="https://github.com/react-icons/react-icons/commit/21fcd0452250a30cde4827b83bff3e086b106369"><code>21fcd04</code></a> Revert "v5.7.0"</li> <li><a href="https://github.com/react-icons/react-icons/commit/3a05518a3b8b1fe147c915aea1ca6db6cd212ae8"><code>3a05518</code></a> v5.7.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/c8b5050f417e08a270fc74393d36a7ea844a1977"><code>c8b5050</code></a> fix github pages deploy</li> <li><a href="https://github.com/react-icons/react-icons/commit/2f78ae43254f217c132078956848f257b72ec6cb"><code>2f78ae4</code></a> Update CI actions, Pages deploy, and staged npm publishing</li> <li><a href="https://github.com/react-icons/react-icons/commit/11f5a06ff937287537590bd165ccbd24e9f800e4"><code>11f5a06</code></a> update packages (<a href="https://redirect.github.com/react-icons/react-icons/issues/1153">#1153</a>)</li> <li>See full diff in <a href="https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for react-icons since your current version.</p> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
fd4948333d |
Bump @tabler/icons-react from 3.41.1 to 3.44.0 in /docs (#1767)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.41.1 to 3.44.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases">@tabler/icons-react's releases</a>.</em></p> <blockquote> <h2>Release 3.44.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/code-ai</code></li> <li><code>outline/email-stamp</code></li> <li><code>outline/foodsteps</code></li> <li><code>outline/git-pull-request-conflict</code></li> <li><code>outline/noise-reduction</code></li> <li><code>outline/photo-alt</code></li> <li><code>outline/pointer-2</code></li> <li><code>outline/pointer-collaboration-2</code></li> <li><code>outline/pointer-collaboration</code></li> <li><code>outline/roulette</code></li> <li><code>outline/scan-cube</code></li> <li><code>outline/sketching</code></li> <li><code>outline/sparkle-2</code></li> <li><code>outline/sparkle-highlight</code></li> <li><code>outline/sparkle</code></li> <li><code>outline/sphere-2</code></li> <li><code>outline/text-scan-ai</code></li> <li><code>outline/vignette</code></li> </ul> <p>Fixed icons: <code>outline/air-balloon</code>, <code>outline/body-scan</code>, <code>outline/chart-sankey</code>, <code>outline/ear-scan</code>, <code>outline/grid-scan</code>, <code>outline/line-scan</code>, <code>outline/object-scan</code>, <code>outline/photo-scan</code>, <code>outline/route-scan</code>, <code>outline/scan-eye</code>, <code>outline/scan-letter-a</code>, <code>outline/scan-letter-t</code>, <code>outline/scan-position</code>, <code>outline/scan-traces</code>, <code>outline/scan</code>, <code>outline/text-scan-2</code>, <code>outline/user-scan</code>, <code>outline/zoom-scan</code></p> <h2>Release 3.43.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/acorn</code></li> <li><code>outline/acrobatic</code></li> <li><code>outline/banana</code></li> <li><code>outline/brand-audible</code></li> <li><code>outline/building-eiffel-tower</code></li> <li><code>outline/car-door</code></li> <li><code>outline/car-lifter</code></li> <li><code>outline/chocolate</code></li> <li><code>outline/dumbbell</code></li> <li><code>outline/exercise-ball</code></li> <li><code>outline/flood</code></li> <li><code>outline/hula-hoop</code></li> <li><code>outline/leaf-maple</code></li> <li><code>outline/notdef</code></li> <li><code>outline/rugby</code></li> <li><code>outline/taiwan-dollar</code></li> <li><code>outline/target-2</code></li> <li><code>outline/unicycle</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/6d128ed935d4546607b1e4d5d08c8b27bdbe7758"><code>6d128ed</code></a> Release 3.44.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/e40738b64486f857128ae58335354681e4e9dc9b"><code>e40738b</code></a> Release 3.43.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/076f4a9e4d705d6f2cb6fc7f1417501117de12e8"><code>076f4a9</code></a> Release 3.42.0</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.44.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
e35a1cb37c |
Bump @tabler/icons-react from 3.41.0 to 3.44.0 in /frontend (#1771)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.41.0 to 3.44.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases">@tabler/icons-react's releases</a>.</em></p> <blockquote> <h2>Release 3.44.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/code-ai</code></li> <li><code>outline/email-stamp</code></li> <li><code>outline/foodsteps</code></li> <li><code>outline/git-pull-request-conflict</code></li> <li><code>outline/noise-reduction</code></li> <li><code>outline/photo-alt</code></li> <li><code>outline/pointer-2</code></li> <li><code>outline/pointer-collaboration-2</code></li> <li><code>outline/pointer-collaboration</code></li> <li><code>outline/roulette</code></li> <li><code>outline/scan-cube</code></li> <li><code>outline/sketching</code></li> <li><code>outline/sparkle-2</code></li> <li><code>outline/sparkle-highlight</code></li> <li><code>outline/sparkle</code></li> <li><code>outline/sphere-2</code></li> <li><code>outline/text-scan-ai</code></li> <li><code>outline/vignette</code></li> </ul> <p>Fixed icons: <code>outline/air-balloon</code>, <code>outline/body-scan</code>, <code>outline/chart-sankey</code>, <code>outline/ear-scan</code>, <code>outline/grid-scan</code>, <code>outline/line-scan</code>, <code>outline/object-scan</code>, <code>outline/photo-scan</code>, <code>outline/route-scan</code>, <code>outline/scan-eye</code>, <code>outline/scan-letter-a</code>, <code>outline/scan-letter-t</code>, <code>outline/scan-position</code>, <code>outline/scan-traces</code>, <code>outline/scan</code>, <code>outline/text-scan-2</code>, <code>outline/user-scan</code>, <code>outline/zoom-scan</code></p> <h2>Release 3.43.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/acorn</code></li> <li><code>outline/acrobatic</code></li> <li><code>outline/banana</code></li> <li><code>outline/brand-audible</code></li> <li><code>outline/building-eiffel-tower</code></li> <li><code>outline/car-door</code></li> <li><code>outline/car-lifter</code></li> <li><code>outline/chocolate</code></li> <li><code>outline/dumbbell</code></li> <li><code>outline/exercise-ball</code></li> <li><code>outline/flood</code></li> <li><code>outline/hula-hoop</code></li> <li><code>outline/leaf-maple</code></li> <li><code>outline/notdef</code></li> <li><code>outline/rugby</code></li> <li><code>outline/taiwan-dollar</code></li> <li><code>outline/target-2</code></li> <li><code>outline/unicycle</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/6d128ed935d4546607b1e4d5d08c8b27bdbe7758"><code>6d128ed</code></a> Release 3.44.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/e40738b64486f857128ae58335354681e4e9dc9b"><code>e40738b</code></a> Release 3.43.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/076f4a9e4d705d6f2cb6fc7f1417501117de12e8"><code>076f4a9</code></a> Release 3.42.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/9b27b65e3d2e72ff4fd219b2dc21da81ea9cbab8"><code>9b27b65</code></a> Release 3.41.1</li> <li><a href="https://github.com/tabler/tabler-icons/commit/ebad60b50af5ba521245ab982a3fe69df0e5efd9"><code>ebad60b</code></a> Update homepage links in documentation and package files to point to the new ...</li> <li><a href="https://github.com/tabler/tabler-icons/commit/8ed617b1b7153d1d35910cda09861077a6f649b9"><code>8ed617b</code></a> Update README files to wrap images in anchor tags linking to the Tabler Icons...</li> <li><a href="https://github.com/tabler/tabler-icons/commit/ef6e875bbef5252b3627fd1281421b10ddd04a16"><code>ef6e875</code></a> Update dependencies in pnpm-lock.yaml and package.json files (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1497">#1497</a>)</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.44.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
87e8f01f2b |
Bump react-icons from 5.6.0 to 5.7.0 in /frontend (#1770)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [react-icons](https://github.com/react-icons/react-icons) from 5.6.0 to 5.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react-icons/react-icons/releases">react-icons's releases</a>.</em></p> <blockquote> <h2>v5.7.0</h2> <h2>What's Changed</h2> <ul> <li>update packages by <a href="https://github.com/kamijin-fanta"><code>@kamijin-fanta</code></a> in <a href="https://redirect.github.com/react-icons/react-icons/pull/1153">react-icons/react-icons#1153</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0">https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0</a></p> <table> <thead> <tr> <th>Icon Library</th> <th>License</th> <th>Version</th> <th align="right">Count</th> </tr> </thead> <tbody> <tr> <td><a href="https://circumicons.com/">Circum Icons</a></td> <td><a href="https://github.com/Klarr-Agency/Circum-Icons/blob/main/LICENSE">MPL-2.0 license</a></td> <td>1.0.0</td> <td align="right">288</td> </tr> <tr> <td><a href="https://fontawesome.com/">Font Awesome 5</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 License</a></td> <td>5.15.4-3-gafecf2a</td> <td align="right">1612</td> </tr> <tr> <td><a href="https://fontawesome.com/">Font Awesome 6</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 License</a></td> <td>6.7.2-1-g840c215</td> <td align="right">2060</td> </tr> <tr> <td><a href="https://ionicons.com/">Ionicons 4</a></td> <td><a href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td> <td>4.6.3</td> <td align="right">696</td> </tr> <tr> <td><a href="https://ionicons.com/">Ionicons 5</a></td> <td><a href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td> <td>5.5.4</td> <td align="right">1332</td> </tr> <tr> <td><a href="http://google.github.io/material-design-icons/">Material Design icons</a></td> <td><a href="https://github.com/google/material-design-icons/blob/master/LICENSE">Apache License Version 2.0</a></td> <td>4.0.0-161-gf3fb4442b2</td> <td align="right">4341</td> </tr> <tr> <td><a href="http://s-ings.com/typicons/">Typicons</a></td> <td><a href="https://creativecommons.org/licenses/by-sa/3.0/">CC BY-SA 3.0</a></td> <td>2.1.2</td> <td align="right">336</td> </tr> <tr> <td><a href="https://octicons.github.com/">Github Octicons icons</a></td> <td><a href="https://github.com/primer/octicons/blob/master/LICENSE">MIT</a></td> <td>18.3.0</td> <td align="right">264</td> </tr> <tr> <td><a href="https://feathericons.com/">Feather</a></td> <td><a href="https://github.com/feathericons/feather/blob/master/LICENSE">MIT</a></td> <td>4.29.2</td> <td align="right">287</td> </tr> <tr> <td><a href="https://lucide.dev/">Lucide</a></td> <td><a href="https://github.com/lucide-icons/lucide/blob/main/LICENSE">ISC</a></td> <td>0.462.0</td> <td align="right">1541</td> </tr> <tr> <td><a href="https://game-icons.net/">Game Icons</a></td> <td><a href="https://creativecommons.org/licenses/by/3.0/">CC BY 3.0</a></td> <td>12920d6565588f0512542a3cb0cdfd36a497f910</td> <td align="right">4040</td> </tr> <tr> <td><a href="https://erikflowers.github.io/weather-icons/">Weather Icons</a></td> <td><a href="http://scripts.sil.org/OFL">SIL OFL 1.1</a></td> <td>2.0.12</td> <td align="right">219</td> </tr> <tr> <td><a href="https://vorillaz.github.io/devicons/">Devicons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.8.0</td> <td align="right">192</td> </tr> <tr> <td><a href="https://github.com/ant-design/ant-design-icons">Ant Design Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>4.4.2</td> <td align="right">831</td> </tr> <tr> <td><a href="https://github.com/twbs/icons">Bootstrap Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.13.1</td> <td align="right">2754</td> </tr> <tr> <td><a href="https://github.com/Remix-Design/RemixIcon">Remix Icon</a></td> <td><a href="http://www.apache.org/licenses/">Apache License Version 2.0</a></td> <td>4.9.1</td> <td align="right">3229</td> </tr> <tr> <td><a href="https://github.com/icons8/flat-color-icons">Flat Color Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.0.2</td> <td align="right">329</td> </tr> <tr> <td><a href="https://github.com/grommet/grommet-icons">Grommet-Icons</a></td> <td><a href="http://www.apache.org/licenses/">Apache License Version 2.0</a></td> <td>4.14.0</td> <td align="right">637</td> </tr> <tr> <td><a href="https://github.com/tailwindlabs/heroicons">Heroicons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.0.6</td> <td align="right">460</td> </tr> <tr> <td><a href="https://github.com/tailwindlabs/heroicons">Heroicons 2</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>2.2.0</td> <td align="right">972</td> </tr> <tr> <td><a href="https://simpleicons.org/">Simple Icons</a></td> <td><a href="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 Universal</a></td> <td>16.24.0</td> <td align="right">3446</td> </tr> <tr> <td><a href="https://thesabbir.github.io/simple-line-icons/">Simple Line Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>2.5.5</td> <td align="right">189</td> </tr> <tr> <td><a href="https://github.com/Keyamoon/IcoMoon-Free">IcoMoon Free</a></td> <td><a href="https://github.com/Keyamoon/IcoMoon-Free/blob/master/License.txt">CC BY 4.0 License</a></td> <td>d006795ede82361e1bac1ee76f215cf1dc51e4ca</td> <td align="right">491</td> </tr> <tr> <td><a href="https://github.com/atisawd/boxicons">BoxIcons</a></td> <td><a href="https://github.com/atisawd/boxicons/blob/master/LICENSE">MIT</a></td> <td>2.1.4</td> <td align="right">1634</td> </tr> <tr> <td><a href="https://github.com/astrit/css.gg">css.gg</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>2.1.4</td> <td align="right">704</td> </tr> <tr> <td><a href="https://github.com/microsoft/vscode-codicons">VS Code Icons</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0</a></td> <td>0.0.0</td> <td align="right">612</td> </tr> <tr> <td><a href="https://github.com/tabler/tabler-icons">Tabler Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>3.44.0</td> <td align="right">6146</td> </tr> <tr> <td><a href="https://github.com/lykmapipo/themify-icons">Themify Icons</a></td> <td><a href="https://github.com/thecreation/standard-icons/blob/master/modules/themify-icons/LICENSE">MIT</a></td> <td>v0.1.2-2-g9600186</td> <td align="right">352</td> </tr> <tr> <td><a href="https://icons.radix-ui.com">Radix Icons</a></td> <td><a href="https://github.com/radix-ui/icons/blob/master/LICENSE">MIT</a></td> <td><code>@radix-ui/react-icons</code><a href="https://github.com/1"><code>@1</code></a>.3.2-35-g112af91</td> <td align="right">332</td> </tr> <tr> <td><a href="https://github.com/phosphor-icons/core">Phosphor Icons</a></td> <td><a href="https://github.com/phosphor-icons/core/blob/main/LICENSE">MIT</a></td> <td>2.1.1</td> <td align="right">9072</td> </tr> <tr> <td><a href="https://icons8.com/line-awesome">Icons8 Line Awesome</a></td> <td><a href="https://github.com/icons8/line-awesome/blob/master/LICENSE.md">MIT</a></td> <td>1.3.1</td> <td align="right">1544</td> </tr> </tbody> </table> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react-icons/react-icons/commit/87470d588c5624bf3e291f17527c3ecd1419c8ae"><code>87470d5</code></a> v5.7.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/e1cb06116df395109208fa4786b5e6ae4cc20187"><code>e1cb061</code></a> fix ci publish</li> <li><a href="https://github.com/react-icons/react-icons/commit/bffaab7c0f90d78b240bd06be1c40953be89a992"><code>bffaab7</code></a> Revert "v5.7.0"</li> <li><a href="https://github.com/react-icons/react-icons/commit/2cde989e0d3637fa39471e3f24df99ffb88cb1d1"><code>2cde989</code></a> v5.7.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/dac95ccf8126f41dc068f17fb09573fd86b6a0e9"><code>dac95cc</code></a> update npm in ci workflow</li> <li><a href="https://github.com/react-icons/react-icons/commit/21fcd0452250a30cde4827b83bff3e086b106369"><code>21fcd04</code></a> Revert "v5.7.0"</li> <li><a href="https://github.com/react-icons/react-icons/commit/3a05518a3b8b1fe147c915aea1ca6db6cd212ae8"><code>3a05518</code></a> v5.7.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/c8b5050f417e08a270fc74393d36a7ea844a1977"><code>c8b5050</code></a> fix github pages deploy</li> <li><a href="https://github.com/react-icons/react-icons/commit/2f78ae43254f217c132078956848f257b72ec6cb"><code>2f78ae4</code></a> Update CI actions, Pages deploy, and staged npm publishing</li> <li><a href="https://github.com/react-icons/react-icons/commit/11f5a06ff937287537590bd165ccbd24e9f800e4"><code>11f5a06</code></a> update packages (<a href="https://redirect.github.com/react-icons/react-icons/issues/1153">#1153</a>)</li> <li>See full diff in <a href="https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for react-icons since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
2c28ac3089 |
Bump i18next from 26.0.3 to 26.3.4 in /frontend (#1769)
Bumps [i18next](https://github.com/i18next/i18next) from 26.0.3 to 26.3.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v26.3.4</h2> <ul> <li>fix(security): <code>deepExtend</code> (used by <code>addResourceBundle(..., deep, overwrite)</code>) no longer recurses into inherited properties. It checked key existence with the <code>in</code> operator, which walks the prototype chain, so a source key matching an inherited built-in (e.g. <code>hasOwnProperty</code>, <code>toString</code>) caused recursion into the shared <code>Object.prototype</code> function and, with <code>overwrite: true</code>, could overwrite e.g. <code>Object.prototype.hasOwnProperty.call</code> with a non-callable value — corrupting a shared built-in process-wide (DoS). Existence is now checked with <code>Object.prototype.hasOwnProperty.call</code>, so such keys are copied as plain own data instead. This complements the existing <code>__proto__</code>/<code>constructor</code> guard and is also strictly more correct for an own-property merge. Only affects applications that pass attacker-controlled data with <code>deep: true</code> and <code>overwrite: true</code>; no standard backend/integration does this. Distinct from CVE-2026-48713 / CVE-2026-48714 (different packages, <code>setPath</code> mechanism). Thanks to zx (Jace) for the responsible disclosure.</li> </ul> <h2>v26.3.3</h2> <ul> <li>fix(types): selector <code>t($ => $.arr, { returnObjects: true, context })</code> on a JSON array of <strong>heterogeneous</strong> objects now preserves each element's full shape (e.g. <code>{ transKey1: string; transKey2: string }[]</code>) instead of collapsing to a union of partial element types. Two type-level causes: (1) <code>FilterKeys</code> evaluated the whole array element type at once, so <code>keyof (A | B)</code> only saw the keys common to every element — it now distributes over the object union and filters each element independently; (2) when TypeScript merges mismatched array element types it injects phantom optional <code>undefined</code> keys (e.g. <code>transKey1_withContext?: undefined</code> on elements that don't define it), which the context-detection helpers mistook for real context variants — they now skip keys typed as <code>undefined</code>. Also adds a dedicated <code>context</code> + <code>returnObjects: true</code> selector overload using <code>const Fn</code> + <code>ReturnType<Fn></code>, so <code>Target</code> is no longer collapsed to <code>unknown</code> via <code>ApplyTarget</code>. Resolves Problem 1 of <a href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a> (Problem 2 was already fixed on master). Thanks <a href="https://github.com/sauravgupta-dotcom"><code>@sauravgupta-dotcom</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2438">#2438</a>). Fixes <a href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a>.</li> </ul> <h2>v26.3.2</h2> <ul> <li>fix: chained formatters with a parenthesised option that contains the format separator (e.g. <code>join(separator: ', ')</code>) now work at <strong>any</strong> position in the chain, not just first. Previously the comma-in-parens reassembly only repaired <code>formats[0]</code>, so <code>{{v, uppercase, join(separator: ', ')}}</code> split the <code>join(...)</code> option on the inner comma and never rejoined it, producing corrupt output. Replaced the first-position-only repair with a position-independent pass that re-joins fragments until each open paren closes. Thanks <a href="https://github.com/spokodev"><code>@spokodev</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2437">#2437</a>).</li> </ul> <h2>v26.3.1</h2> <ul> <li>fix(types): <code>t()</code> with a <code>keyPrefix</code> no longer pollutes its return type with sibling keys' values. A regression in 26.3.0 — the <code>[Res] extends [never]</code> guards added to <code>KeysBuilderWithReturnObjects</code> / <code>KeysBuilderWithoutReturnObjects</code> turned the builders into deferred conditional types, so <code>KeyPrefix<Ns></code> stopped resolving to a literal union and <code>keyPrefix</code> inference widened to the whole namespace. Symptom: <code>useTranslation(ns, { keyPrefix: 'a.b' })</code> then <code>t('title')</code> would resolve to <code>'<a.b>.title' | '<other.path>.title' | ...</code> instead of just the scoped value. Affected every <code>react-i18next</code> user using <code>keyPrefix</code>. Restored to the eager 26.2.0 form. The same-namespace conflict handling from <a href="https://redirect.github.com/i18next/i18next/issues/2434">#2434</a> still works via <code>_DropConflictKeys</code> at the merge layer (in <code>options.d.ts</code>). Thanks <a href="https://github.com/aaronrosenthal"><code>@aaronrosenthal</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2436">#2436</a>).</li> </ul> <h2>v26.3.0</h2> <ul> <li>feat(types): introduce <code>ResourceNamespaceMap</code> — a separate mergeable augmentation surface for namespace resource types, designed for monorepos where multiple packages each want to contribute their own namespaces. Previously, every package had to coordinate on a single <code>CustomTypeOptions.resources</code> declaration (or fall back to typing dependency namespaces as <code>any</code>) because <code>resources</code> is a single property of an interface and TypeScript reports TS2717 when two declarations of the same property disagree. The new interface merges naturally across <code>declare module 'i18next'</code> blocks, so each package can ship its own <code>i18next.d.ts</code> independently. Per-property merge handles same-namespace contributions from multiple packages, and same-key/different-literal conflicts are silently dropped to avoid poisoning <code>t()</code> overload resolution. Fully backwards-compatible — existing <code>CustomTypeOptions.resources</code> augmentations continue to work, and both surfaces can coexist. Scalar options (<code>defaultNS</code>, <code>returnNull</code>, <code>enableSelector</code>, etc.) still belong on <code>CustomTypeOptions</code>. Thanks <a href="https://github.com/sh3xu"><code>@sh3xu</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2434">#2434</a>). Fixes <a href="https://redirect.github.com/i18next/i18next/issues/2409">#2409</a>.</li> </ul> <h2>v26.2.0</h2> <ul> <li>feat(types): new <code>parseInterpolation</code> TypeOption (default <code>true</code>). When set to <code>false</code> in <code>CustomTypeOptions</code>, the type-level extractor stops parsing translation strings for <code>{{variable}}</code> patterns. Required by <code>i18next-icu</code> users — the default extractor mistakes ICU MessageFormat nested-brace plurals like <code>{count, plural, one {{count} row} other {{count} rows}}</code> for an interpolation block and demands a phantom variable name. The flag is type-only; runtime interpolation is governed by <code>InterpolationOptions</code> and is unaffected. Fixes <a href="https://redirect.github.com/i18next/i18next-icu/issues/85">i18next-icu#85</a>.</li> <li>fix(types): expose <code>enableSelector</code> on <code>InitOptions</code> so <code>i18next.init({ enableSelector: 'strict' })</code> typechecks without a module augmentation. The runtime already reads <code>opts?.enableSelector</code> from init options; this lands the matching type declaration next to the other selector-resolution knobs. Accepts <code>false | true | 'optimize' | 'strict'</code>. Thanks <a href="https://github.com/Faithfinder"><code>@Faithfinder</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2431">#2431</a>)</li> </ul> <h2>v26.1.0</h2> <ul> <li>feat: <code>enableSelector: 'strict'</code> (TypeOptions + runtime option). Opt-in mode that drops the flattened-primary form from <code>NsResource</code> at the type level — every namespace (primary included) is exposed only under its own key on <code>$</code>, uniformly across single- and multi-ns hooks. At runtime, a leading selector path segment matching the scope's namespace list is always rewritten as a namespace prefix, including the primary. Eliminates the silent-miss surface area where <code>t($ => $.primary.foo)</code> typechecks but doesn't resolve under the default mode (see <a href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a>). Backward-compatible: default <code>enableSelector: false | true | 'optimize'</code> behavior is unchanged. Note: strict mode is incompatible with the <a href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a> pattern (keys whose names match sibling namespaces) — those users should stay on default mode.</li> </ul> <h2>v26.0.10</h2> <ul> <li>feat: <code>getFixedT</code> accepts a fourth optional <code>fixedOpts</code> argument carrying <code>scopeNs</code> — the full namespace list the bound <code>t</code> was created for. The selector API uses <code>scopeNs</code> to detect when a path's first segment is a namespace prefix, <strong>without</strong> changing resolution scope. Resolution still uses the bound <code>ns</code> (a single primary string in the typical react-i18next setup), so plain <code>t('key')</code> lookups stay isolated to the primary namespace exactly as before — only <code>t($ => $.secondaryNs.foo)</code> selectors now route correctly under <code>useTranslation([nsA, nsB])</code>. Fixes the runtime side of <a href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a> for the <code>react-i18next</code> default-<code>nsMode</code> case. The 4th argument is opt-in: existing 3-arg <code>getFixedT(lng, ns, keyPrefix)</code> callers see no behavior change.</li> </ul> <h2>v26.0.9</h2> <ul> <li>fix(types): unformatted interpolation values are now typed as <code>string | number</code> (was <code>string</code>). i18next stringifies values at runtime, so requiring callers to wrap numbers in <code>String(...)</code> for plain <code>{{var}}</code> placeholders was unnecessary friction — and could mask the real problem when a non-string value was passed alongside multiple interpolation slots (the <code>t()</code> overload resolution would fall through to the 3-arg form and report a confusing "not assignable to string" error against the options object). Typed format specifiers like <code>{{x, number}}</code>, <code>{{x, currency}}</code>, <code>{{x, datetime}}</code>, etc. keep their precise types; this only relaxes the no-format default. The <code>count</code> variable remains <code>number</code>-only</li> </ul> <h2>v26.0.8</h2> <ul> <li>fix(types): restore the pre-v25.10.4 <code>ExistsFunction</code> shape so plain arrow functions can again be assigned to <code>ExistsFunction</code>-typed variables (TypeScript cannot infer type predicates through multi-overload assignment). Direct <code>i18next.exists(key)</code> calls still narrow <code>key</code> to <code>SelectorKey</code> — the predicate is now declared inline on <code>i18n.exists</code>. Custom wrappers that want the narrowing can type themselves as <code>typeof i18next.exists</code> <a href="https://redirect.github.com/i18next/i18next/issues/2425">2425</a></li> </ul> <h2>v26.0.7</h2> <ul> <li>fix: when a plural lookup misses, the <code>missingKey</code> debug log now shows the actual plural-resolved key (e.g. <code>foo.bar_many</code> for Polish <code>count: 14</code>) instead of the base key — making it obvious which plural category was expected and missing <a href="https://redirect.github.com/i18next/i18next/issues/2423">2423</a></li> <li>chore: drop <code>@babel/runtime</code> runtime dependency. The build no longer generates any <code>@babel/runtime</code> imports, so the package is unused by consumers. Rollup now uses <code>babelHelpers: 'bundled'</code> so any helpers that are ever needed in the future will be inlined rather than imported externally <a href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li> <li>chore: stop emitting <code>dist/esm/i18next.bundled.js</code>. It was byte-identical to <code>dist/esm/i18next.js</code> because no helpers were being imported <a href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li> </ul> <h2>v26.0.6</h2> <p>Security release — all issues found via an internal audit. GHSA advisory filed after release.</p> <ul> <li>security: warn when a translation string combines <code>escapeValue: false</code> with interpolated variables inside a <code>$t(key, { ... "{{var}}" ... })</code> nesting-options block. In that narrow combination, attacker-controlled string values containing <code>"</code> can break out of the JSON options literal and inject additional nesting options (e.g. redirect <code>lng</code>/<code>ns</code>). The default <code>escapeValue: true</code> configuration is unaffected because HTML-escaping neutralises the quote before <code>JSON.parse</code>. See the security docs for mitigation guidance (GHSA-TBD)</li> <li>security: apply <code>regexEscape</code> to <code>unescapePrefix</code> / <code>unescapeSuffix</code> on par with the other interpolation delimiters. Prevents ReDoS (catastrophic-backtracking) when a misconfigured delimiter contains regex metacharacters, and fixes silent breakage of the <code>{{- var}}</code> syntax when the delimiter contains characters like <code>(</code>, <code>[</code>, <code>.</code></li> <li>security: strip CR/LF/NUL and other C0/C1 control characters from string log arguments to prevent log forging via user-controlled translation keys, language codes, namespaces, or interpolation variable names (CWE-117)</li> <li>chore: ignore <code>.env*</code> and <code>*.pem</code>/<code>*.key</code> files in <code>.gitignore</code></li> </ul> <h2>v26.0.5</h2> <ul> <li>fix: <code>cloneInstance().changeLanguage()</code> no longer fails to update language state when the target language is not yet loaded — a race between <code>init()</code>'s deferred <code>load()</code> and the user's <code>changeLanguage()</code> could overwrite <code>isLanguageChangingTo</code>, causing <code>setLngProps</code> to be skipped <a href="https://redirect.github.com/i18next/i18next/issues/2422">2422</a></li> </ul> <h2>v26.0.4</h2> <ul> <li>fix(types): inline formatting options like <code>{{price, currency(EUR)}}</code> are now correctly resolved to their base format type (e.g. <code>number</code> for <code>currency</code>) instead of falling back to <code>string</code> <a href="https://redirect.github.com/i18next/i18next/issues/2378">2378</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>26.3.4</h2> <ul> <li>fix(security): <code>deepExtend</code> (used by <code>addResourceBundle(..., deep, overwrite)</code>) no longer recurses into inherited properties. It checked key existence with the <code>in</code> operator, which walks the prototype chain, so a source key matching an inherited built-in (e.g. <code>hasOwnProperty</code>, <code>toString</code>) caused recursion into the shared <code>Object.prototype</code> function and, with <code>overwrite: true</code>, could overwrite e.g. <code>Object.prototype.hasOwnProperty.call</code> with a non-callable value — corrupting a shared built-in process-wide (DoS). Existence is now checked with <code>Object.prototype.hasOwnProperty.call</code>, so such keys are copied as plain own data instead. This complements the existing <code>__proto__</code>/<code>constructor</code> guard and is also strictly more correct for an own-property merge. Only affects applications that pass attacker-controlled data with <code>deep: true</code> and <code>overwrite: true</code>; no standard backend/integration does this. Distinct from CVE-2026-48713 / CVE-2026-48714 (different packages, <code>setPath</code> mechanism). See advisory <a href="https://github.com/i18next/i18next/security/advisories/GHSA-6jcc-5g8w-32mx">GHSA-6jcc-5g8w-32mx</a>, CVSS 5.9 (<code>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H</code>). Thanks to zx (Jace) <a href="https://github.com/manus-use"><code>@manus-use</code></a> for the responsible disclosure.</li> </ul> <h2>26.3.3</h2> <ul> <li>fix(types): selector <code>t($ => $.arr, { returnObjects: true, context })</code> on a JSON array of <strong>heterogeneous</strong> objects now preserves each element's full shape (e.g. <code>{ transKey1: string; transKey2: string }[]</code>) instead of collapsing to a union of partial element types. Two type-level causes: (1) <code>FilterKeys</code> evaluated the whole array element type at once, so <code>keyof (A | B)</code> only saw the keys common to every element — it now distributes over the object union and filters each element independently; (2) when TypeScript merges mismatched array element types it injects phantom optional <code>undefined</code> keys (e.g. <code>transKey1_withContext?: undefined</code> on elements that don't define it), which the context-detection helpers mistook for real context variants — they now skip keys typed as <code>undefined</code>. Also adds a dedicated <code>context</code> + <code>returnObjects: true</code> selector overload using <code>const Fn</code> + <code>ReturnType<Fn></code>, so <code>Target</code> is no longer collapsed to <code>unknown</code> via <code>ApplyTarget</code>. Resolves Problem 1 of <a href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a> (Problem 2 was already fixed on master). Thanks <a href="https://github.com/sauravgupta-dotcom"><code>@sauravgupta-dotcom</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2438">#2438</a>). Fixes <a href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a>.</li> </ul> <h2>26.3.2</h2> <ul> <li>fix: chained formatters with a parenthesised option that contains the format separator (e.g. <code>join(separator: ', ')</code>) now work at <strong>any</strong> position in the chain, not just first. Previously the comma-in-parens reassembly only repaired <code>formats[0]</code>, so <code>{{v, uppercase, join(separator: ', ')}}</code> split the <code>join(...)</code> option on the inner comma and never rejoined it, producing corrupt output. Replaced the first-position-only repair with a position-independent pass that re-joins fragments until each open paren closes. Thanks <a href="https://github.com/spokodev"><code>@spokodev</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2437">#2437</a>).</li> </ul> <h2>26.3.1</h2> <ul> <li>fix(types): <code>t()</code> with a <code>keyPrefix</code> no longer pollutes its return type with sibling keys' values. A regression in 26.3.0 — the <code>[Res] extends [never]</code> guards added to <code>KeysBuilderWithReturnObjects</code> / <code>KeysBuilderWithoutReturnObjects</code> turned the builders into deferred conditional types, so <code>KeyPrefix<Ns></code> stopped resolving to a literal union and <code>keyPrefix</code> inference widened to the whole namespace. Symptom: <code>useTranslation(ns, { keyPrefix: 'a.b' })</code> then <code>t('title')</code> would resolve to <code>'<a.b>.title' | '<other.path>.title' | ...</code> instead of just the scoped value. Affected every <code>react-i18next</code> user using <code>keyPrefix</code>. Restored to the eager 26.2.0 form. The same-namespace conflict handling from <a href="https://redirect.github.com/i18next/i18next/issues/2434">#2434</a> still works via <code>_DropConflictKeys</code> at the merge layer (in <code>options.d.ts</code>). Thanks <a href="https://github.com/aaronrosenthal"><code>@aaronrosenthal</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2436">#2436</a>).</li> </ul> <h2>26.3.0</h2> <ul> <li>feat(types): introduce <code>ResourceNamespaceMap</code> — a separate mergeable augmentation surface for namespace resource types, designed for monorepos where multiple packages each want to contribute their own namespaces. Previously, every package had to coordinate on a single <code>CustomTypeOptions.resources</code> declaration (or fall back to typing dependency namespaces as <code>any</code>) because <code>resources</code> is a single property of an interface and TypeScript reports TS2717 when two declarations of the same property disagree. The new interface merges naturally across <code>declare module 'i18next'</code> blocks, so each package can ship its own <code>i18next.d.ts</code> independently. Per-property merge handles same-namespace contributions from multiple packages, and same-key/different-literal conflicts are silently dropped to avoid poisoning <code>t()</code> overload resolution. Fully backwards-compatible — existing <code>CustomTypeOptions.resources</code> augmentations continue to work, and both surfaces can coexist. Scalar options (<code>defaultNS</code>, <code>returnNull</code>, <code>enableSelector</code>, etc.) still belong on <code>CustomTypeOptions</code>. Thanks <a href="https://github.com/sh3xu"><code>@sh3xu</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2434">#2434</a>). Fixes <a href="https://redirect.github.com/i18next/i18next/issues/2409">#2409</a>.</li> </ul> <h2>26.2.0</h2> <ul> <li>feat(types): new <code>parseInterpolation</code> TypeOption (default <code>true</code>). When set to <code>false</code> in <code>CustomTypeOptions</code>, the type-level extractor stops parsing translation strings for <code>{{variable}}</code> patterns. Required by <code>i18next-icu</code> users — the default extractor mistakes ICU MessageFormat nested-brace plurals like <code>{count, plural, one {{count} row} other {{count} rows}}</code> for an interpolation block and demands a phantom variable name. The flag is type-only; runtime interpolation is governed by <code>InterpolationOptions</code> and is unaffected. Fixes <a href="https://redirect.github.com/i18next/i18next-icu/issues/85">i18next-icu#85</a>.</li> <li>fix(types): expose <code>enableSelector</code> on <code>InitOptions</code> so <code>i18next.init({ enableSelector: 'strict' })</code> typechecks without a module augmentation. The runtime already reads <code>opts?.enableSelector</code> from init options; this lands the matching type declaration next to the other selector-resolution knobs. Accepts <code>false | true | 'optimize' | 'strict'</code>. Thanks <a href="https://github.com/Faithfinder"><code>@Faithfinder</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2431">#2431</a>)</li> </ul> <h2>26.1.0</h2> <ul> <li>feat: <code>enableSelector: 'strict'</code> (TypeOptions + runtime option). Opt-in mode that drops the flattened-primary form from <code>NsResource</code> at the type level — every namespace (primary included) is exposed only under its own key on <code>$</code>, uniformly across single- and multi-ns hooks. At runtime, a leading selector path segment matching the scope's namespace list is always rewritten as a namespace prefix, including the primary. Eliminates the silent-miss surface area where <code>t($ => $.primary.foo)</code> typechecks but doesn't resolve under the default mode (see <a href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a>). Backward-compatible: default <code>enableSelector: false | true | 'optimize'</code> behavior is unchanged. Note: strict mode is incompatible with the <a href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a> pattern (keys whose names match sibling namespaces) — those users should stay on default mode.</li> </ul> <h2>26.0.10</h2> <ul> <li>feat: <code>getFixedT</code> accepts a fourth optional <code>fixedOpts</code> argument carrying <code>scopeNs</code> — the full namespace list the bound <code>t</code> was created for. The selector API uses <code>scopeNs</code> to detect when a path's first segment is a namespace prefix, <strong>without</strong> changing resolution scope. Resolution still uses the bound <code>ns</code> (a single primary string in the typical react-i18next setup), so plain <code>t('key')</code> lookups stay isolated to the primary namespace exactly as before — only <code>t($ => $.secondaryNs.foo)</code> selectors now route correctly under <code>useTranslation([nsA, nsB])</code>. Fixes the runtime side of <a href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a> for the <code>react-i18next</code> default-<code>nsMode</code> case. The 4th argument is opt-in: existing 3-arg <code>getFixedT(lng, ns, keyPrefix)</code> callers see no behavior change.</li> </ul> <h2>26.0.9</h2> <ul> <li>fix(types): unformatted interpolation values are now typed as <code>string | number</code> (was <code>string</code>). i18next stringifies values at runtime, so requiring callers to wrap numbers in <code>String(...)</code> for plain <code>{{var}}</code> placeholders was unnecessary friction — and could mask the real problem when a non-string value was passed alongside multiple interpolation slots (the <code>t()</code> overload resolution would fall through to the 3-arg form and report a confusing "not assignable to string" error against the options object). Typed format specifiers like <code>{{x, number}}</code>, <code>{{x, currency}}</code>, <code>{{x, datetime}}</code>, etc. keep their precise types; this only relaxes the no-format default. The <code>count</code> variable remains <code>number</code>-only</li> </ul> <h2>26.0.8</h2> <ul> <li>fix(types): restore the pre-v25.10.4 <code>ExistsFunction</code> shape so plain arrow functions can again be assigned to <code>ExistsFunction</code>-typed variables (TypeScript cannot infer type predicates through multi-overload assignment). Direct <code>i18next.exists(key)</code> calls still narrow <code>key</code> to <code>SelectorKey</code> — the predicate is now declared inline on <code>i18n.exists</code>. Custom wrappers that want the narrowing can type themselves as <code>typeof i18next.exists</code> <a href="https://redirect.github.com/i18next/i18next/issues/2425">2425</a></li> </ul> <h2>26.0.7</h2> <ul> <li>fix: when a plural lookup misses, the <code>missingKey</code> debug log now shows the actual plural-resolved key (e.g. <code>foo.bar_many</code> for Polish <code>count: 14</code>) instead of the base key — making it obvious which plural category was expected and missing <a href="https://redirect.github.com/i18next/i18next/issues/2423">2423</a></li> <li>chore: drop <code>@babel/runtime</code> runtime dependency. The build no longer generates any <code>@babel/runtime</code> imports, so the package is unused by consumers. Rollup now uses <code>babelHelpers: 'bundled'</code> so any helpers that are ever needed in the future will be inlined rather than imported externally <a href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li> <li>chore: stop emitting <code>dist/esm/i18next.bundled.js</code>. It was byte-identical to <code>dist/esm/i18next.js</code> because no helpers were being imported <a href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li> </ul> <h2>26.0.6</h2> <p>Security release — all issues found via an internal audit.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/817ede5146e6d366645982885b0a729861d10a3a"><code>817ede5</code></a> 26.3.4</li> <li><a href="https://github.com/i18next/i18next/commit/46d0dd80b505b6b69feccebbe7d9c4fd66c8f85c"><code>46d0dd8</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/642137b7786d83661ec3ee53027798dc4b81d30a"><code>642137b</code></a> fix(security): prevent deepExtend from recursing into inherited built-ins</li> <li><a href="https://github.com/i18next/i18next/commit/cf7080d363c0bc775681215bba6513a3610dee8b"><code>cf7080d</code></a> 26.3.3</li> <li><a href="https://github.com/i18next/i18next/commit/05fd7be281a3c2175da16c9e867a91d95e034889"><code>05fd7be</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/cc0bd80943eae4f45867abbd78c0ae8dd964bb82"><code>cc0bd80</code></a> changelog: 26.3.3 entry for <a href="https://redirect.github.com/i18next/i18next/issues/2438">#2438</a></li> <li><a href="https://github.com/i18next/i18next/commit/9cbfa6353b6ab726c42be1e6ed52aab5b0601612"><code>9cbfa63</code></a> fix(types): preserve selector returnObjects shape with context (<a href="https://redirect.github.com/i18next/i18next/issues/2438">#2438</a>)</li> <li><a href="https://github.com/i18next/i18next/commit/3b047122f5ad5b99a29f9138bb8542de125c8783"><code>3b04712</code></a> 26.3.2</li> <li><a href="https://github.com/i18next/i18next/commit/fc20f5dd5ae9744045942e135e93dd787e4bc869"><code>fc20f5d</code></a> changelog: 26.3.2 entry for <a href="https://redirect.github.com/i18next/i18next/issues/2437">#2437</a></li> <li><a href="https://github.com/i18next/i18next/commit/6901e04f07f0eec1848242d8af26509ab5438920"><code>6901e04</code></a> fix: reassemble comma-in-parens formatters at any chain position (<a href="https://redirect.github.com/i18next/i18next/issues/2437">#2437</a>)</li> <li>Additional commits viewable in <a href="https://github.com/i18next/i18next/compare/v26.0.3...v26.3.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
adbc3ebdb4 |
Bump fastapi from 0.138.0 to 0.139.0 in /backend (#1766)
Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.138.0 to 0.139.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastapi/fastapi/releases">fastapi's releases</a>.</em></p> <blockquote> <h2>0.139.0</h2> <h3>Features</h3> <ul> <li>✨ Support dependencies in <code>app.frontend()</code>, e.g. for automatic cookie authentication for the frontend. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15908">#15908</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Translations</h3> <ul> <li>🌐 Update translations for fr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15897">#15897</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ja (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15895">#15895</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh-hant (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15896">#15896</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for de (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15899">#15899</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for es (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15892">#15892</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for tr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15891">#15891</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for pt (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15893">#15893</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15898">#15898</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for uk (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15900">#15900</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ko (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15890">#15890</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ru (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15894">#15894</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ko (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15888">#15888</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for es (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15880">#15880</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh-hant (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15889">#15889</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for pt (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15883">#15883</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for zh (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15885">#15885</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ja (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15882">#15882</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for tr (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15887">#15887</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for uk (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15886">#15886</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for fr (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15881">#15881</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for de (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15884">#15884</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>🌐 Update translations for ru (add-missing). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15879">#15879</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Internal</h3> <ul> <li>👥 Update FastAPI People - Experts. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15909">#15909</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>👥 Update FastAPI GitHub topic repositories. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15906">#15906</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>👥 Update FastAPI People - Contributors and Translators. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15878">#15878</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>👷 Remove not needed <code>allow-unsafe-pr-checkout: true</code>. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15876">#15876</a> by <a href="https://github.com/YuriiMotov"><code>@YuriiMotov</code></a>.</li> <li>⬆ Bump the github-actions group with 5 updates. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15872">#15872</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> <li>⬆ Bump the python-packages group across 1 directory with 10 updates. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15870">#15870</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> <li>⬆ Bump CodSpeedHQ/action from 4.17.0 to 4.17.5 in the github-actions group. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15826">#15826</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> </ul> <h2>0.138.1</h2> <h3>Refactors</h3> <ul> <li>♻️ Refactor Library Skills, make info easier to find for agents. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15841">#15841</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Internal</h3> <ul> <li>👷 Simplify pull request workflow triggers. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15836">#15836</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>👷 Update issue-manager to 0.7.1. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15833">#15833</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> <li>⬆️ Update issue-manager to 0.7.0. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/15831">#15831</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastapi/fastapi/commit/cecd96d9c6c318e0df1c40cedbc2e953381ddfd3"><code>cecd96d</code></a> 🔖 Release version 0.139.0 (<a href="https://redirect.github.com/fastapi/fastapi/issues/15910">#15910</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/aea660936b55fdbd84270d24f892839388922dd6"><code>aea6609</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/319be508ce7db9ee5f52c3b9baa68c6cc1037c10"><code>319be50</code></a> ✨ Support dependencies in <code>app.frontend()</code>, e.g. for automatic cookie authent...</li> <li><a href="https://github.com/fastapi/fastapi/commit/66a90f6ee9c0cf58ec61b14f8925344d6f16eae5"><code>66a90f6</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/d30a3ebfc7d7fd7851ba4243677266c53cb9f154"><code>d30a3eb</code></a> 👥 Update FastAPI People - Experts (<a href="https://redirect.github.com/fastapi/fastapi/issues/15909">#15909</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/122f1b58f4e0fabfefef3710a8c8247bb2bd820b"><code>122f1b5</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/fd6ece32eeb27c9ce164bd9170f9d8e1db1dacff"><code>fd6ece3</code></a> 👥 Update FastAPI GitHub topic repositories (<a href="https://redirect.github.com/fastapi/fastapi/issues/15906">#15906</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/ec2a6adaf14c440bdcd0fd3f4ca203daa8c3ba6a"><code>ec2a6ad</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/9d7d7febd3a66844f948254c1ba4745b6cc16f40"><code>9d7d7fe</code></a> 🌐 Update translations for fr (update-outdated) (<a href="https://redirect.github.com/fastapi/fastapi/issues/15897">#15897</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/8dc852df4713efa998d126c5194302e9f06e7675"><code>8dc852d</code></a> 📝 Update release notes</li> <li>Additional commits viewable in <a href="https://github.com/fastapi/fastapi/compare/0.138.0...0.139.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d21013794b |
Bump uvicorn from 0.49.0 to 0.50.0 in /backend (#1765)
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.49.0 to 0.50.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn's releases</a>.</em></p> <blockquote> <h2>Version 0.50.0</h2> <h2>What's Changed</h2> <ul> <li>Memoize trusted host checks to avoid re-parsing the client IP per request by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2970">Kludex/uvicorn#2970</a></li> <li>Cache the <code>asgi</code> scope sub-dict per connection by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2976">Kludex/uvicorn#2976</a></li> <li>Build a fresh <code>asgi</code> scope dict per request by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2977">Kludex/uvicorn#2977</a></li> <li>Replace click.style with an internal ANSI style helper by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2981">Kludex/uvicorn#2981</a></li> <li>Avoid copying single-frame WebSocket payloads in websockets-sansio by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2983">Kludex/uvicorn#2983</a></li> <li>Deprecate the legacy websockets implementation and default <code>auto</code> to websockets-sansio by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/2985">Kludex/uvicorn#2985</a></li> <li>Exit with a dedicated code on startup failure and stop the supervisor when a worker can't boot by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3001">Kludex/uvicorn#3001</a></li> <li>Skip the eager app import in the parent when spawning workers by <a href="https://github.com/Kludex"><code>@Kludex</code></a> in <a href="https://redirect.github.com/Kludex/uvicorn/pull/3012">Kludex/uvicorn#3012</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/Kludex/uvicorn/compare/0.49.0...0.50.0">https://github.com/Kludex/uvicorn/compare/0.49.0...0.50.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's changelog</a>.</em></p> <blockquote> <h2>0.50.0 (July 4, 2026)</h2> <p>If you use WebSockets, note that <code>--ws auto</code> now picks the <code>websockets-sansio</code> implementation. You shouldn't need it, but you can pin <code>--ws websockets</code> to get the deprecated legacy one back.</p> <h3>Changed</h3> <ul> <li>Exit with the dedicated code 3 on any startup failure: app loading, socket bind and lifespan startup errors previously exited with a mix of 0, 1 and 3 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3001">#3001</a>)</li> <li>Stop the multiprocess supervisor when a worker exits with code 3 instead of restarting it forever (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3001">#3001</a>)</li> <li>Default <code>--ws auto</code> to <code>websockets-sansio</code> when websockets is installed (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2985">#2985</a>)</li> <li>Skip the eager app import in the parent process with <code>--reload</code> or <code>--workers</code>, fixing a memory regression introduced in 0.47.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3012">#3012</a>)</li> <li>Build a fresh <code>asgi</code> scope dict per request (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2977">#2977</a>)</li> <li>Cache the <code>asgi</code> scope sub-dict per connection (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2976">#2976</a>)</li> <li>Avoid copying single-frame WebSocket payloads in <code>websockets-sansio</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2983">#2983</a>)</li> <li>Memoize trusted host checks in <code>ProxyHeadersMiddleware</code> (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2970">#2970</a>)</li> <li>Replace <code>click.style</code> with an internal ANSI style helper (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2981">#2981</a>)</li> </ul> <h3>Deprecated</h3> <ul> <li>Deprecate the legacy <code>websockets</code> implementation; use <code>websockets-sansio</code> or <code>wsproto</code> instead (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2985">#2985</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Kludex/uvicorn/commit/21d2c16fd162ce0e92b5c35f4aadca63a8b12e2d"><code>21d2c16</code></a> Version 0.50.0 (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3013">#3013</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/6c42e8d63bc41e7b721d30b33ff97c7e2fc27ce4"><code>6c42e8d</code></a> Skip the eager app import in the parent when spawning workers (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3012">#3012</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/56a4631c98bdfa8f4712214e3910add5e5e7d7ba"><code>56a4631</code></a> Exit with a dedicated code on startup failure and stop the supervisor when a ...</li> <li><a href="https://github.com/Kludex/uvicorn/commit/3314dfcc18835a4d4afbac4b0c4b8f0ee0d5095d"><code>3314dfc</code></a> chore(deps): bump the github-actions group with 4 updates (<a href="https://redirect.github.com/Kludex/uvicorn/issues/3007">#3007</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/e8a31bca03254b8457c4c89596e310282cc33edc"><code>e8a31bc</code></a> chore(deps): bump the python-packages group across 1 directory with 9 updates...</li> <li><a href="https://github.com/Kludex/uvicorn/commit/8d088b18f1ead0d75a0603d983300717079f9025"><code>8d088b1</code></a> Deprecate the legacy websockets implementation and default <code>auto</code> to websocke...</li> <li><a href="https://github.com/Kludex/uvicorn/commit/5b08cf6374430ce47de74ff2e594b277d09db17e"><code>5b08cf6</code></a> Avoid copying single-frame WebSocket payloads in websockets-sansio (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2983">#2983</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/bf3f60c28e92178878ecf043b858ab55cd97c223"><code>bf3f60c</code></a> Replace click.style with an internal ANSI style helper (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2981">#2981</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/eea1bcc895349d0f3c5e2fe8229d6484f801a1c4"><code>eea1bcc</code></a> Build a fresh <code>asgi</code> scope dict per request (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2977">#2977</a>)</li> <li><a href="https://github.com/Kludex/uvicorn/commit/afed2116795358dee707dbfc890b9eb5106d4720"><code>afed211</code></a> Cache the <code>asgi</code> scope sub-dict per connection (<a href="https://redirect.github.com/Kludex/uvicorn/issues/2976">#2976</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Kludex/uvicorn/compare/0.49.0...0.50.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
37f84c087f |
Bump lucide-react from 1.21.0 to 1.23.0 in /docs (#1764)
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 1.21.0 to 1.23.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lucide-icons/lucide/releases">lucide-react's releases</a>.</em></p> <blockquote> <h2>Version 1.23.0</h2> <h2>What's Changed</h2> <ul> <li>fix(docs): prevent scrollbar layout shift on icons page by <a href="https://github.com/g30r93g"><code>@g30r93g</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4500">lucide-icons/lucide#4500</a></li> <li>chore(docs): Remove certificates banner by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4504">lucide-icons/lucide#4504</a></li> <li>ci(repo-journal.yml): GH copilot repo summary by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4505">lucide-icons/lucide#4505</a></li> <li>ci(repo-journal.yml): Small fix in the workflow by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4508">lucide-icons/lucide#4508</a></li> <li>ci(repo-journal.yml): Switch to token by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4509">lucide-icons/lucide#4509</a></li> <li>feat(icons): added <code>paper-bag</code> icon by <a href="https://github.com/dkast"><code>@dkast</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4023">lucide-icons/lucide#4023</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/g30r93g"><code>@g30r93g</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4500">lucide-icons/lucide#4500</a></li> <li><a href="https://github.com/dkast"><code>@dkast</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4023">lucide-icons/lucide#4023</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lucide-icons/lucide/compare/1.22.0...1.23.0">https://github.com/lucide-icons/lucide/compare/1.22.0...1.23.0</a></p> <h2>Version 1.22.0</h2> <h2>What's Changed</h2> <ul> <li>feat(icons): add 6 database variant icons by <a href="https://github.com/Barakudum"><code>@Barakudum</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4336">lucide-icons/lucide#4336</a></li> <li>ci(release.yml): Remove concurrency field to prevent release mess by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4485">lucide-icons/lucide#4485</a></li> <li>fix(docs): fix color input clipping by <a href="https://github.com/Hsiii"><code>@Hsiii</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4488">lucide-icons/lucide#4488</a></li> <li>docs(site): add Deno to installation instructions by <a href="https://github.com/bartlomieju"><code>@bartlomieju</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4486">lucide-icons/lucide#4486</a></li> <li>chore(deps): bump esbuild from 0.25.12 to 0.28.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4459">lucide-icons/lucide#4459</a></li> <li>fix(docs): prevent private analytics token from blocking local dev by <a href="https://github.com/Hsiii"><code>@Hsiii</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4481">lucide-icons/lucide#4481</a></li> <li>docs(installation.md): Remove outdate next tag in installation by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4495">lucide-icons/lucide#4495</a></li> <li>fix(lucide-react-native): Fix context provider export by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4497">lucide-icons/lucide#4497</a></li> <li>fix(astro): add Astro v7 compatibility by <a href="https://github.com/iseraph-dev"><code>@iseraph-dev</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4491">lucide-icons/lucide#4491</a></li> <li>fix(icons): changed <code>carrot</code> icon by <a href="https://github.com/jguddas"><code>@jguddas</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4010">lucide-icons/lucide#4010</a></li> <li>fix(icons): changed <code>ungroup</code> icon by <a href="https://github.com/jguddas"><code>@jguddas</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/3969">lucide-icons/lucide#3969</a></li> <li>feat(icons): added <code>phi</code> icon also used as <code>golden-ratio</code> by <a href="https://github.com/whoisBugsbunny"><code>@whoisBugsbunny</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4218">lucide-icons/lucide#4218</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/bartlomieju"><code>@bartlomieju</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4486">lucide-icons/lucide#4486</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/lucide-icons/lucide/compare/1.21.0...1.22.0">https://github.com/lucide-icons/lucide/compare/1.21.0...1.22.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/lucide-icons/lucide/commits/1.23.0/packages/lucide-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
1cf528621c |
Bump sentry-sdk from 2.63.0 to 2.64.0 in /backend (#1763)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.63.0 to 2.64.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's releases</a>.</em></p> <blockquote> <h2>2.64.0</h2> <p>The SDK now extracts all <code>gen_ai</code> spans out of a transaction and sends them as v2 envelope items by default. This prevents <code>gen_ai</code> spans from being dropped when the transaction payload exceeds size limits. Because they are no longer constrained by transaction size limits, AI message data is also no longer truncated. To keep the previous behavior, set <code>stream_gen_ai_spans=False</code>.</p> <p>Self-hosted Sentry users should opt out with <code>stream_gen_ai_spans=False</code>, since streamed <code>gen_ai</code> spans may not be ingested by their Sentry instance.</p> <h3>Bug Fixes 🐛</h3> <ul> <li>(asyncpg) Use distinct span ops for cursor iteration and fetch to prevent N+1 false positives by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6609">#6609</a></li> <li>(aiohttp) Gate url.full, url.path, url.query on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6650">#6650</a></li> <li>(asgi) Add url.path to ASGI request span attributes by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6652">#6652</a></li> <li>(boto3) Gate url.full, url.query, url.fragment behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6674">#6674</a></li> <li>(httpx) Gate url.full, url.query, and url.fragment behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6668">#6668</a></li> <li>(httpx2) Gate url.full, url.query on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6670">#6670</a></li> <li>(langgraph) Ignore <code>GraphBubbleUp</code> exceptions by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6608">#6608</a></li> <li>(litellm) Store span off-band, not in forwarded metadata by <a href="https://github.com/jgreer013"><code>@jgreer013</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6598">#6598</a></li> <li>(mcp) Support MCP SDK v2 handler signature and removed request_ctx by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6583">#6583</a></li> <li>(pydantic-ai) Stop truncating in the streaming trace lifecycle by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6659">#6659</a></li> <li>(pymongo) Add db.query.text to streamed query spans by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6637">#6637</a></li> <li>(pyreqwest) Gate url.full, url.query, url.fragment on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6673">#6673</a></li> <li>(sanic) Gate url.full, url.path, and http.query behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6663">#6663</a></li> <li>(starlette) Stop duplicating <code>scope["root_path"]</code> in URLs by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6579">#6579</a></li> <li>(stdlib) Gate url.full and http.query behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6666">#6666</a></li> <li>(tests) Fix flaky OTel propagator entry point test by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6655">#6655</a></li> <li>(tornado) Gate url.full, url.path, url.query on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6664">#6664</a></li> <li>(wsgi) Gate url.full, url.path, and http.query behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6654">#6654</a></li> <li>Stop unconditionally importing <code>contextvars</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6625">#6625</a></li> <li>(.agents) Update project agent lockfiles by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6662">#6662</a></li> </ul> <h3>Documentation 📚</h3> <ul> <li>Add light/dark logos by <a href="https://github.com/hwhsu1231"><code>@hwhsu1231</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6627">#6627</a></li> <li>Fix typos by <a href="https://github.com/juliosuas"><code>@juliosuas</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6602">#6602</a></li> </ul> <h3>Internal Changes 🔧</h3> <ul> <li>(mcp) Pin mcp package to <2.0.0 while alphas are in flight by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6687">#6687</a></li> <li>🤖 Update test matrix with new releases (06/29) by <a href="https://github.com/github-actions"><code>@github-actions</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6682">#6682</a></li> <li>Make <code>stream_gen_ai_spans</code> opt out by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6658">#6658</a></li> <li>Remove <code>setuptools</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6618">#6618</a></li> <li>Remove <code>executing</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6619">#6619</a></li> <li>Remove <code>asttokens</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6615">#6615</a></li> <li>Remove <code>responses</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6621">#6621</a></li> <li>Remove <code>pytest-forked</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6611">#6611</a></li> <li>Remove <code>docker</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6616">#6616</a></li> <li>Add <code>--skip-version-update</code> option to <code>populate_tox.py</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6675">#6675</a></li> <li>Remove <code>httpcore</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6622">#6622</a></li> <li>Remove <code>pytest-timeout</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6613">#6613</a></li> <li>Remove <code>pytest-localserver</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6612">#6612</a></li> <li>Remove <code>jsonschema</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6620">#6620</a></li> <li>Remove <code>socksio</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6617">#6617</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's changelog</a>.</em></p> <blockquote> <h2>2.64.0</h2> <p>The SDK now extracts all <code>gen_ai</code> spans out of a transaction and sends them as v2 envelope items by default. This prevents <code>gen_ai</code> spans from being dropped when the transaction payload exceeds size limits. Because they are no longer constrained by transaction size limits, AI message data is also no longer truncated. To keep the previous behavior, set <code>stream_gen_ai_spans=False</code>.</p> <p>Self-hosted Sentry users should opt out with <code>stream_gen_ai_spans=False</code>, since streamed <code>gen_ai</code> spans may not be ingested by their Sentry instance.</p> <h3>Bug Fixes 🐛</h3> <ul> <li>(asyncpg) Use distinct span ops for cursor iteration and fetch to prevent N+1 false positives by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6609">#6609</a></li> <li>(aiohttp) Gate url.full, url.path, url.query on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6650">#6650</a></li> <li>(asgi) Add url.path to ASGI request span attributes by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6652">#6652</a></li> <li>(boto3) Gate url.full, url.query, url.fragment behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6674">#6674</a></li> <li>(httpx) Gate url.full, url.query, and url.fragment behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6668">#6668</a></li> <li>(httpx2) Gate url.full, url.query on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6670">#6670</a></li> <li>(langgraph) Ignore <code>GraphBubbleUp</code> exceptions by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6608">#6608</a></li> <li>(litellm) Store span off-band, not in forwarded metadata by <a href="https://github.com/jgreer013"><code>@jgreer013</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6598">#6598</a></li> <li>(mcp) Support MCP SDK v2 handler signature and removed request_ctx by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6583">#6583</a></li> <li>(pydantic-ai) Stop truncating in the streaming trace lifecycle by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6659">#6659</a></li> <li>(pymongo) Add db.query.text to streamed query spans by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6637">#6637</a></li> <li>(pyreqwest) Gate url.full, url.query, url.fragment on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6673">#6673</a></li> <li>(sanic) Gate url.full, url.path, and http.query behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6663">#6663</a></li> <li>(starlette) Stop duplicating <code>scope["root_path"]</code> in URLs by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6579">#6579</a></li> <li>(stdlib) Gate url.full and http.query behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6666">#6666</a></li> <li>(tests) Fix flaky OTel propagator entry point test by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6655">#6655</a></li> <li>(tornado) Gate url.full, url.path, url.query on send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6664">#6664</a></li> <li>(wsgi) Gate url.full, url.path, and http.query behind send_default_pii by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6654">#6654</a></li> <li>Stop unconditionally importing <code>contextvars</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6625">#6625</a></li> <li>(.agents) Update project agent lockfiles by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6662">#6662</a></li> </ul> <h3>Documentation 📚</h3> <ul> <li>Add light/dark logos by <a href="https://github.com/hwhsu1231"><code>@hwhsu1231</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6627">#6627</a></li> <li>Fix typos by <a href="https://github.com/juliosuas"><code>@juliosuas</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6602">#6602</a></li> </ul> <h3>Internal Changes 🔧</h3> <ul> <li>(mcp) Pin mcp package to <2.0.0 while alphas are in flight by <a href="https://github.com/ericapisani"><code>@ericapisani</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6687">#6687</a></li> <li>🤖 Update test matrix with new releases (06/29) by <a href="https://github.com/github-actions"><code>@github-actions</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6682">#6682</a></li> <li>Make <code>stream_gen_ai_spans</code> opt out by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6658">#6658</a></li> <li>Remove <code>setuptools</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6618">#6618</a></li> <li>Remove <code>executing</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6619">#6619</a></li> <li>Remove <code>asttokens</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6615">#6615</a></li> <li>Remove <code>responses</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6621">#6621</a></li> <li>Remove <code>pytest-forked</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6611">#6611</a></li> <li>Remove <code>docker</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6616">#6616</a></li> <li>Add <code>--skip-version-update</code> option to <code>populate_tox.py</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6675">#6675</a></li> <li>Remove <code>httpcore</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6622">#6622</a></li> <li>Remove <code>pytest-timeout</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6613">#6613</a></li> <li>Remove <code>pytest-localserver</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6612">#6612</a></li> <li>Remove <code>jsonschema</code> from <code>requirements-testing.txt</code> by <a href="https://github.com/alexander-alderman-webb"><code>@alexander-alderman-webb</code></a> in <a href="https://redirect.github.com/getsentry/sentry-python/pull/6620">#6620</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/getsentry/sentry-python/commit/9cb0167cee81bb19686f36adb8e9888248f214af"><code>9cb0167</code></a> Call out changed stream_gen_ai_spans default value</li> <li><a href="https://github.com/getsentry/sentry-python/commit/bdbe208f41e8c2dd4615dc64dcd1485497d65d6d"><code>bdbe208</code></a> Update CHANGELOG.md</li> <li><a href="https://github.com/getsentry/sentry-python/commit/8966e45ade8bd3036027e7ad8aca2c3402d3e0fa"><code>8966e45</code></a> release: 2.64.0</li> <li><a href="https://github.com/getsentry/sentry-python/commit/707464306ca78d4928e4668ba4d383948f7eb7fb"><code>7074643</code></a> ci: 🤖 Update test matrix with new releases (06/29) (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6682">#6682</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/b0f319f4fb0a33d521a80e27304104b8a992c45e"><code>b0f319f</code></a> (test): exclude django 6.1 alphas and betas from tox (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6690">#6690</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/a661615a40fa26450e4b4f50cec760733cc858d8"><code>a661615</code></a> (test): need to include the alpha tag for mcp package inclusion (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6688">#6688</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/9c836062fc6f7244aae5046ce66814f0469c9891"><code>9c83606</code></a> ci(mcp): Pin mcp package to <2.0.0 while alphas are in flight (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6687">#6687</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/1dd161de3fef199b46342e8c0947a503316e5e99"><code>1dd161d</code></a> feat: Set <code>sentry.trace_lifecycle</code> attr in span streaming (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6684">#6684</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/5dabd02e83cfb8a4bb8160c766df70864407f569"><code>5dabd02</code></a> fix(pydantic-ai): Stop truncating in the streaming trace lifecycle (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6659">#6659</a>)</li> <li><a href="https://github.com/getsentry/sentry-python/commit/7991f716a4bdef5c0b01ba5a3c6a3765640e312b"><code>7991f71</code></a> ref: Make <code>stream_gen_ai_spans</code> opt out (<a href="https://redirect.github.com/getsentry/sentry-python/issues/6658">#6658</a>)</li> <li>Additional commits viewable in <a href="https://github.com/getsentry/sentry-python/compare/2.63.0...2.64.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
13f8838a3a |
Bump tailwind-merge from 3.5.0 to 3.6.0 in /docs (#1761)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [tailwind-merge](https://github.com/dcastil/tailwind-merge) from 3.5.0 to 3.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dcastil/tailwind-merge/releases">tailwind-merge's releases</a>.</em></p> <blockquote> <h2>v3.6.0</h2> <h3>New Features</h3> <ul> <li>Add support for Tailwind CSS v4.3 by <a href="https://github.com/dcastil"><code>@dcastil</code></a> in <a href="https://redirect.github.com/dcastil/tailwind-merge/pull/677">dcastil/tailwind-merge#677</a> <ul> <li>Add <code>postfixLookupClassGroups</code> option to config to support Tailwind utilities where a slash is part of the full class name, like named container queries</li> </ul> </li> <li>Add support for readonly array values by <a href="https://github.com/unional"><code>@unional</code></a> in <a href="https://redirect.github.com/dcastil/tailwind-merge/pull/652">dcastil/tailwind-merge#652</a></li> </ul> <h3>Documentation</h3> <ul> <li>Fix broken links in README by <a href="https://github.com/maurer2"><code>@maurer2</code></a> in <a href="https://redirect.github.com/dcastil/tailwind-merge/pull/662">dcastil/tailwind-merge#662</a></li> </ul> <h3>Other</h3> <ul> <li>Harden internal CI pipeline security by omitting git checkout by <a href="https://github.com/dcastil"><code>@dcastil</code></a>, suggested by <a href="https://github.com/kyletaylored"><code>@kyletaylored</code></a> in <a href="https://github.com/dcastil/tailwind-merge/commit/6b2499c10cf52bed42426d30b4219e90374b30d6">https://github.com/dcastil/tailwind-merge/commit/6b2499c10cf52bed42426d30b4219e90374b30d6</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dcastil/tailwind-merge/compare/v3.5.0...v3.6.0">https://github.com/dcastil/tailwind-merge/compare/v3.5.0...v3.6.0</a></p> <p>Thanks to <a href="https://github.com/brandonmcconnell"><code>@brandonmcconnell</code></a>, <a href="https://github.com/manavm1990"><code>@manavm1990</code></a>, <a href="https://github.com/langy"><code>@langy</code></a>, <a href="https://github.com/roboflow"><code>@roboflow</code></a>, <a href="https://github.com/syntaxfm"><code>@syntaxfm</code></a>, <a href="https://github.com/getsentry"><code>@getsentry</code></a>, <a href="https://github.com/codecov"><code>@codecov</code></a>, a private sponsor, <a href="https://github.com/block"><code>@block</code></a>, <a href="https://github.com/openclaw"><code>@openclaw</code></a>, <a href="https://github.com/sourcegraph"><code>@sourcegraph</code></a>, <a href="https://github.com/mike-healy"><code>@mike-healy</code></a> and more via <a href="https://github.com/thnxdev"><code>@thnxdev</code></a> for sponsoring tailwind-merge! ❤️</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dcastil/tailwind-merge/commit/d54f7e5713c653d0171971405344f7c6e44d418f"><code>d54f7e5</code></a> v3.6.0</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/638871a67a0a124ac9275eda77cd08b03f2f045e"><code>638871a</code></a> Update README to add info about Tailwind CSS v4.3 support</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/39fc7b5e915493e5eb3ddb1ca615f5b2eeff2540"><code>39fc7b5</code></a> Revert "v3.6.0"</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/bd8390f6ca387f93c9e989fb3fb09924fb843445"><code>bd8390f</code></a> v3.6.0</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/802877c6e31f9fb64c627e5e760729a16cd0a69b"><code>802877c</code></a> add v3.6.0 changelog</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/a35fedac7d1fc8756223da94290a83a32068d2ae"><code>a35feda</code></a> Merge pull request <a href="https://redirect.github.com/dcastil/tailwind-merge/issues/665">#665</a> from dcastil/renovate/rollup-plugin-babel-7.x</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/940389cf89ed0da277ff5c01b98fd619687926e9"><code>940389c</code></a> Merge pull request <a href="https://redirect.github.com/dcastil/tailwind-merge/issues/667">#667</a> from dcastil/renovate/release-drafter-release-drafter...</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/005af6df08cfbe2adac7ca6cb5a7be02b9261fbd"><code>005af6d</code></a> pin to specific version</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/5816ced627ebcaefd497ad8e4202baf750dd545c"><code>5816ced</code></a> implement breaking changes</li> <li><a href="https://github.com/dcastil/tailwind-merge/commit/17041e17c5b9c96fcb0f4758c718799cb3af14a6"><code>17041e1</code></a> Merge pull request <a href="https://redirect.github.com/dcastil/tailwind-merge/issues/676">#676</a> from dcastil/dependabot/npm_and_yarn/babel/plugin-tra...</li> <li>Additional commits viewable in <a href="https://github.com/dcastil/tailwind-merge/compare/v3.5.0...v3.6.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |