mirror of
https://github.com/evroon/bracket.git
synced 2026-09-16 08:04:15 -04:00
copilot/remove-databases-dependency
744
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
3606868b98 |
frontend: replace Prettier stack with oxfmt (#1750)
This PR migrates formatting in `frontend/` from Prettier to `oxfmt`,
including script wiring and dependency cleanup. It removes the Prettier
plugin/config path so formatting is handled by a single tool.
- **Script migration**
- Renamed/rewired formatting scripts in `frontend/package.json`:
- `prettier:check` → `format:check` (`oxfmt --check .`)
- `prettier:write` → `format:write` (`oxfmt .`)
- Updated dependent scripts:
- `test` now runs `pnpm run format:write`
- `openapi-ts` now runs `pnpm run format:write` after generation
- **Dependency cleanup**
- Removed `prettier-plugin-organize-imports` from `dependencies`
- Removed `prettier` from `devDependencies`
- Added `oxfmt` (latest stable at update time)
- **Config removal**
- Deleted `frontend/.prettierrc.js` (no longer used after migration)
- **Lockfile alignment**
- Updated `frontend/pnpm-lock.yaml` to reflect the dependency and script
ecosystem change
```json
{
"scripts": {
"format:check": "oxfmt --check .",
"format:write": "oxfmt .",
"openapi-ts": "openapi-ts && pnpm run format:write",
"test": "tsc && pnpm run format:write"
}
}
```
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Erik Vroon <11857441+evroon@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
||
|
dependabot[bot]
|
986d1ff836 |
Bump postcss from 8.5.10 to 8.5.18 in /frontend (#1746)
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.18. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.18</h2> <ul> <li>Restricted loading previous source maps file to the <code>opts.from</code> folder for security reasons (use <code>unsafeMap: true</code> to disable the check).</li> </ul> <h2>8.5.17</h2> <ul> <li>Fixed <code>Maximum call stack size exceeded</code> error.</li> <li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li> <li>Fixed <code>Input#origin()</code> for unmapped end position (by <a href="https://github.com/chatman-media"><code>@chatman-media</code></a>).</li> </ul> <h2>8.5.16</h2> <ul> <li>Fixed <code>Input#origin()</code> position (by <a href="https://github.com/mizdra"><code>@mizdra</code></a>).</li> <li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed putting parent-less node in <code>nodes</code> of new node (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> <li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by <a href="https://github.com/greymoth-jp"><code>@greymoth-jp</code></a>).</li> <li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.15</h2> <ul> <li>Fixed declaration parsing performance (by <a href="https://github.com/homanp"><code>@homanp</code></a>).</li> </ul> <h2>8.5.14</h2> <ul> <li>Fixed custom syntax regression (by <a href="https://github.com/43081j"><code>@43081j</code></a>).</li> </ul> <h2>8.5.13</h2> <ul> <li>Fixed <code>postcss-scss</code> commend regression.</li> </ul> <h2>8.5.12</h2> <ul> <li>Fixed reading any file via user-generated CSS.</li> <li>Added <code>opts.unsafeMap</code> to disable checks.</li> </ul> <h2>8.5.11</h2> <ul> <li>Fixed nested brackets parsing performance (by <a href="https://github.com/offset"><code>@offset</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.18</h2> <ul> <li>Restricted loading previous source maps file to the <code>opts.from</code> folder for security reasons (use <code>unsafeMap: true</code> to disable the check).</li> </ul> <h2>8.5.17</h2> <ul> <li>Fixed <code>Maximum call stack size exceeded</code> error.</li> <li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li> <li>Fixed <code>Input#origin()</code> for unmapped end position (by <a href="https://github.com/chatman-media"><code>@chatman-media</code></a>).</li> </ul> <h2>8.5.16</h2> <ul> <li>Fixed <code>Input#origin()</code> position (by <a href="https://github.com/mizdra"><code>@mizdra</code></a>).</li> <li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed putting parent-less node in <code>nodes</code> of new node (by <a href="https://github.com/MahinAnowar"><code>@MahinAnowar</code></a>).</li> <li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by <a href="https://github.com/greymoth-jp"><code>@greymoth-jp</code></a>).</li> <li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> </ul> <h2>8.5.15</h2> <ul> <li>Fixed declaration parsing performance (by <a href="https://github.com/homanp"><code>@homanp</code></a>).</li> </ul> <h2>8.5.14</h2> <ul> <li>Fixed custom syntax regression (by <a href="https://github.com/43081j"><code>@43081j</code></a>).</li> </ul> <h2>8.5.13</h2> <ul> <li>Fixed <code>postcss-scss</code> commend regression.</li> </ul> <h2>8.5.12</h2> <ul> <li>Fixed reading any file via user-generated CSS.</li> <li>Added <code>opts.unsafeMap</code> to disable checks.</li> </ul> <h2>8.5.11</h2> <ul> <li>Fixed nested brackets parsing performance (by <a href="https://github.com/offset"><code>@offset</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/4c0d194c136fd374495d0993c890d794cab65b81"><code>4c0d194</code></a> Release 8.5.18 version</li> <li><a href="https://github.com/postcss/postcss/commit/92b4e7891ec7b811821d01acc8aa0f010caf41e2"><code>92b4e78</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/95663d3eb7ba26f4854dd19d3b4f4425760cf56c"><code>95663d3</code></a> Limit where source map can be loaded for security reasons</li> <li><a href="https://github.com/postcss/postcss/commit/74e25ae9f4efaa56a41a449064a655d7da78072c"><code>74e25ae</code></a> Release 8.5.17 version</li> <li><a href="https://github.com/postcss/postcss/commit/d1518afd5a88f42728b30b87f8917210f363f9f1"><code>d1518af</code></a> Fix Maximum call stack size exceeded error</li> <li><a href="https://github.com/postcss/postcss/commit/2421312ffea96ba77b35ce24a1b2d9c2e22b5e83"><code>2421312</code></a> Fix linter</li> <li><a href="https://github.com/postcss/postcss/commit/a50352c583df991710f92ccac25b36304695161a"><code>a50352c</code></a> Fix CI</li> <li><a href="https://github.com/postcss/postcss/commit/33948f0969bb858acdd52c9692e3a785a3ed0a73"><code>33948f0</code></a> Prevent prototype hijacking in fromJSON</li> <li><a href="https://github.com/postcss/postcss/commit/2131909351161cd2c5fc2be58b14919a873ea824"><code>2131909</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/93440abcca92793b31c5d1fdf5f2da7b58b27599"><code>93440ab</code></a> Fix non-closed <code>\<div align="center"></code> in README (<a href="https://redirect.github.com/postcss/postcss/issues/2110">#2110</a>)</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.5.10...8.5.18">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for postcss since your current version.</p> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
cfdc741478 |
Bump axios from 1.15.2 to 1.18.0 in /frontend (#1738)
Bumps [axios](https://github.com/axios/axios) from 1.15.2 to 1.18.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v1.18.0 — June 13, 2026</h2> <p>This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.</p> <h2>🔒 Security Fixes</h2> <ul> <li> <p><strong>Redirect Header Safety:</strong> Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (<strong><a href="https://redirect.github.com/axios/axios/issues/10892">#10892</a></strong>)</p> </li> <li> <p><strong>URL And Request Hardening:</strong> Rejects malformed <code>http:</code> and <code>https:</code> URLs that omit <code>//</code> with <code>ERR_INVALID_URL</code>, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local <code>NO_PROXY</code> matching. (<strong><a href="https://redirect.github.com/axios/axios/issues/11000">#11000</a></strong>)</p> </li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Status Validation:</strong> Added <code>transitional.validateStatusUndefinedResolves</code> so applications can opt in to treating <code>validateStatus: undefined</code> like the option was omitted, while <code>validateStatus: null</code> remains the explicit way to accept every status. (<strong><a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li> <p><strong>Documentation:</strong> Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the <code>proxy</code> request config as Node.js-only in the advanced docs. (<strong><a href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10988">#10988</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10992">#10992</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</p> </li> <li> <p><strong>Dependencies:</strong> Bumped <code>@babel/core</code>, <code>@babel/preset-env</code>, <code>@commitlint/cli</code>, <code>@commitlint/config-conventional</code>, <code>@rollup/plugin-babel</code>, <code>@rollup/plugin-commonjs</code>, <code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>, <code>eslint</code>, <code>lint-staged</code>, <code>rollup</code>, <code>vitest</code>, and <code>actions/checkout</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10989">#10989</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10996">#10996</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10997">#10997</a></strong>)</p> </li> <li> <p><strong>Release Metadata:</strong> Prepared the 1.18.0 release by updating package metadata and the runtime <code>VERSION</code> value. (<strong><a href="https://redirect.github.com/axios/axios/issues/11003">#11003</a></strong>)</p> </li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p> <ul> <li><strong><a href="https://github.com/drori12"><code>@drori12</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>)</li> <li><strong><a href="https://github.com/eyupcanakman"><code>@eyupcanakman</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li> <li><strong><a href="https://github.com/Adi-Beker"><code>@Adi-Beker</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.17.0...v1.18.0">Full Changelog</a></p> <h2>v1.17.0 — June 1, 2026</h2> <p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li> <li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li> <li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li> <li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h2>v1.18.0 — June 13, 2026</h2> <p>This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.</p> <h2>🔒 Security Fixes</h2> <ul> <li> <p><strong>Redirect Header Safety:</strong> Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (<strong><a href="https://redirect.github.com/axios/axios/issues/10892">#10892</a></strong>)</p> </li> <li> <p><strong>URL And Request Hardening:</strong> Rejects malformed <code>http:</code> and <code>https:</code> URLs that omit <code>//</code> with <code>ERR_INVALID_URL</code>, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local <code>NO_PROXY</code> matching. (<strong><a href="https://redirect.github.com/axios/axios/issues/11000">#11000</a></strong>)</p> </li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Status Validation:</strong> Added <code>transitional.validateStatusUndefinedResolves</code> so applications can opt in to treating <code>validateStatus: undefined</code> like the option was omitted, while <code>validateStatus: null</code> remains the explicit way to accept every status. (<strong><a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li> <p><strong>Documentation:</strong> Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the <code>proxy</code> request config as Node.js-only in the advanced docs. (<strong><a href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10988">#10988</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10992">#10992</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</p> </li> <li> <p><strong>Dependencies:</strong> Bumped <code>@babel/core</code>, <code>@babel/preset-env</code>, <code>@commitlint/cli</code>, <code>@commitlint/config-conventional</code>, <code>@rollup/plugin-babel</code>, <code>@rollup/plugin-commonjs</code>, <code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>, <code>eslint</code>, <code>lint-staged</code>, <code>rollup</code>, <code>vitest</code>, and <code>actions/checkout</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10989">#10989</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10996">#10996</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10997">#10997</a></strong>)</p> </li> <li> <p><strong>Release Metadata:</strong> Prepared the 1.18.0 release by updating package metadata and the runtime <code>VERSION</code> value. (<strong><a href="https://redirect.github.com/axios/axios/issues/11003">#11003</a></strong>)</p> </li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p> <ul> <li><strong><a href="https://github.com/drori12"><code>@drori12</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>)</li> <li><strong><a href="https://github.com/eyupcanakman"><code>@eyupcanakman</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li> <li><strong><a href="https://github.com/Adi-Beker"><code>@Adi-Beker</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.17.0...v1.18.0">Full Changelog</a></p> <h2>v1.17.0 — June 1, 2026</h2> <p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li> <li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li> <li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li> <li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/2d06f96e8602c2db13b65a26340ee4a1bbc0b61f"><code>2d06f96</code></a> chore(release): prepare release 1.18.0 (<a href="https://redirect.github.com/axios/axios/issues/11003">#11003</a>)</li> <li><a href="https://github.com/axios/axios/commit/32fc489632377d214db55bfa4e2c48486a7d7ce2"><code>32fc489</code></a> fix: malformed http urls (<a href="https://redirect.github.com/axios/axios/issues/11000">#11000</a>)</li> <li><a href="https://github.com/axios/axios/commit/b40ce498abfa10d90b873b4fd08f520afa5d2545"><code>b40ce49</code></a> chore(deps-dev): bump the development_dependencies group with 10 updates (<a href="https://redirect.github.com/axios/axios/issues/10">#10</a>...</li> <li><a href="https://github.com/axios/axios/commit/fe964f960ecb52c3e1155b0daf7be77541956b01"><code>fe964f9</code></a> docs: mark proxy config as Node.js only (<a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a>)</li> <li><a href="https://github.com/axios/axios/commit/5f229d2d1f018d1db3dab6bbe034dbf3f9041b99"><code>5f229d2</code></a> chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions ...</li> <li><a href="https://github.com/axios/axios/commit/fae9d4e7db6a858c407c75e607a071c533c5c4f6"><code>fae9d4e</code></a> docs: clarify package update PR policy (<a href="https://redirect.github.com/axios/axios/issues/10992">#10992</a>)</li> <li><a href="https://github.com/axios/axios/commit/28ab2ced820e55192806c53472ab3eb0cbb68dc2"><code>28ab2ce</code></a> chore(deps-dev): bump the development_dependencies group with 2 updates (<a href="https://redirect.github.com/axios/axios/issues/10989">#10989</a>)</li> <li><a href="https://github.com/axios/axios/commit/a8e4f13aeecc45a3b8fab3ecfd9ddb5d70fb772b"><code>a8e4f13</code></a> fix(core): keep default validateStatus when request passes undefined (<a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a>)</li> <li><a href="https://github.com/axios/axios/commit/614f4552a17de757d4171ad7c3bd38c9c1025fd8"><code>614f455</code></a> docs: publish v1.17.0 release notes (<a href="https://redirect.github.com/axios/axios/issues/10988">#10988</a>)</li> <li><a href="https://github.com/axios/axios/commit/6bb12c191f5380fad321322fb90216ae0dc36985"><code>6bb12c1</code></a> fix: custom auth headers not stripped on cross-origin redirects (<a href="https://redirect.github.com/axios/axios/issues/10892">#10892</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.15.2...v1.18.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]andcopilot-swe-agent[bot]
|
79120544ab |
Bump vite from 8.0.8 to 8.0.16 in /frontend (#1711)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.8 to 8.0.16. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.0.16</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.15</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.14</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.13</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.12</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.11</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.10</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.10/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.9</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.9/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.15...v8.0.16">8.0.16</a> (2026-06-01)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> reject UNC paths for launch-editor-middleware (<a href="https://redirect.github.com/vitejs/vite/issues/22571">#22571</a>) (<a href="https://github.com/vitejs/vite/commit/50b951225bbf6151eb84a3ad5a454908ab4a76c9">50b9512</a>)</li> <li>reject windows alternate paths (<a href="https://redirect.github.com/vitejs/vite/issues/22572">#22572</a>) (<a href="https://github.com/vitejs/vite/commit/dc245c71e5007ea4d891a025e2d69ac96c736546">dc245c7</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.14...v8.0.15">8.0.15</a> (2026-06-01)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li>send 408 on request timeout (<a href="https://redirect.github.com/vitejs/vite/issues/22476">#22476</a>) (<a href="https://github.com/vitejs/vite/commit/c85c9eeb9aaf41f477b48b057146887bd5620797">c85c9ee</a>)</li> <li>update rolldown to 1.0.3 (<a href="https://redirect.github.com/vitejs/vite/issues/22538">#22538</a>) (<a href="https://github.com/vitejs/vite/commit/646dbedd2870f8ec48df0321177d8aa64bbd1575">646dbed</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>capitalize error messages and remove spurious space in parse error (<a href="https://redirect.github.com/vitejs/vite/issues/22488">#22488</a>) (<a href="https://github.com/vitejs/vite/commit/85a0eff1c82bbb7c99a0fe8e63704316578a40d3">85a0eff</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22511">#22511</a>) (<a href="https://github.com/vitejs/vite/commit/2686d7d0b722402204d3bcc687a87adea1bcf9fa">2686d7d</a>)</li> <li><strong>dev:</strong> fix html-proxy cache key mismatch for /@fs/ HTML paths (<a href="https://redirect.github.com/vitejs/vite/issues/21762">#21762</a>) (<a href="https://github.com/vitejs/vite/commit/47c4213f134f562c41ed7c031e4788510cf7e31e">47c4213</a>)</li> <li><strong>glob:</strong> error on relative glob in virtual module when no files match (<a href="https://redirect.github.com/vitejs/vite/issues/22497">#22497</a>) (<a href="https://github.com/vitejs/vite/commit/5c8e98f8b584ac5d42f0f9b8580c49792213b13c">5c8e98f</a>)</li> <li><strong>optimizer:</strong> close the rolldown bundle when write() rejects (<a href="https://redirect.github.com/vitejs/vite/issues/22528">#22528</a>) (<a href="https://github.com/vitejs/vite/commit/e3cfb9deecff563550fa1b8abd27656b8b292815">e3cfb9d</a>)</li> <li><strong>resolve:</strong> provide onWarn for viteResolvePlugin in JS plugin containers (<a href="https://redirect.github.com/vitejs/vite/issues/22509">#22509</a>) (<a href="https://github.com/vitejs/vite/commit/40985f1c09b7696e594e6c5695fbc315d2da2c83">40985f1</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22566">#22566</a>) (<a href="https://github.com/vitejs/vite/commit/3052a67d9350f4c5076ab1c222c4a21a589cbcdd">3052a67</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>correct logic in <code>collectAllModules</code> function (<a href="https://redirect.github.com/vitejs/vite/issues/22562">#22562</a>) (<a href="https://github.com/vitejs/vite/commit/6978a9ceb942c4f5e211d52b8a1e569f8a65c80c">6978a9c</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.13...v8.0.14">8.0.14</a> (2026-05-21)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li>update rolldown to 1.0.2 (<a href="https://redirect.github.com/vitejs/vite/issues/22484">#22484</a>) (<a href="https://github.com/vitejs/vite/commit/96efc88570b6a6ddf1a910f106920cbac07b3cf0">96efc88</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22471">#22471</a>) (<a href="https://github.com/vitejs/vite/commit/98b81632139d51820f82036e58d6fbbf122b77b3">98b8163</a>)</li> <li><strong>dev:</strong> handle errors when sending messages to vite server (<a href="https://redirect.github.com/vitejs/vite/issues/22450">#22450</a>) (<a href="https://github.com/vitejs/vite/commit/e8e9a34dcf2540139de558a10187630884d10217">e8e9a34</a>)</li> <li><strong>html:</strong> handle trailing slash paths in transformIndexHtml (<a href="https://redirect.github.com/vitejs/vite/issues/22480">#22480</a>) (<a href="https://github.com/vitejs/vite/commit/5d94d1bffdb2a15de9341194d89baec86ce1f693">5d94d1b</a>)</li> <li><strong>optimizer:</strong> pass oxc jsx options to transformSync in dependency scan (<a href="https://redirect.github.com/vitejs/vite/issues/22342">#22342</a>) (<a href="https://github.com/vitejs/vite/commit/b3132dacea9c6e0cf526cd9f0f09d850f577c262">b3132da</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22470">#22470</a>) (<a href="https://github.com/vitejs/vite/commit/7cb728eb629cc677661f1bc52a044ffc0b87fc7f">7cb728e</a>)</li> <li>remove irrelevant commits from changelog (<a href="https://github.com/vitejs/vite/commit/2c69495f250edf01132d4a20128de19dbe836086">2c69495</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li><strong>glob:</strong> do not rewrite import path for absolute base (<a href="https://redirect.github.com/vitejs/vite/issues/22310">#22310</a>) (<a href="https://github.com/vitejs/vite/commit/0ae2844ab6d6d1ccf78a2975b8132769fc35b302">0ae2844</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/f94df87ff03b40b65e29bacdc04cc18c7bccaa4a"><code>f94df87</code></a> release: v8.0.16</li> <li><a href="https://github.com/vitejs/vite/commit/dc245c71e5007ea4d891a025e2d69ac96c736546"><code>dc245c7</code></a> fix: reject windows alternate paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572">#22572</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/50b951225bbf6151eb84a3ad5a454908ab4a76c9"><code>50b9512</code></a> fix(deps): reject UNC paths for launch-editor-middleware (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571">#22571</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/8d1b0195fd186d0b3297d7cd17acff6c96797420"><code>8d1b019</code></a> release: v8.0.15</li> <li><a href="https://github.com/vitejs/vite/commit/2686d7d0b722402204d3bcc687a87adea1bcf9fa"><code>2686d7d</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22511">#22511</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/3052a67d9350f4c5076ab1c222c4a21a589cbcdd"><code>3052a67</code></a> chore(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22566">#22566</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/e3cfb9deecff563550fa1b8abd27656b8b292815"><code>e3cfb9d</code></a> fix(optimizer): close the rolldown bundle when write() rejects (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22528">#22528</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/6978a9ceb942c4f5e211d52b8a1e569f8a65c80c"><code>6978a9c</code></a> refactor: correct logic in <code>collectAllModules</code> function (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22562">#22562</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/646dbedd2870f8ec48df0321177d8aa64bbd1575"><code>646dbed</code></a> feat: update rolldown to 1.0.3 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22538">#22538</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/85a0eff1c82bbb7c99a0fe8e63704316578a40d3"><code>85a0eff</code></a> fix: capitalize error messages and remove spurious space in parse error (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22488">#22488</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.0.16/packages/vite">compare view</a></li> </ul> </details> <br /> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> |
||
|
dependabot[bot]andcopilot-swe-agent[bot]
|
6b397d0016 |
Bump @types/node from 25.5.0 to 26.0.1 in /frontend (#1685)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.5.0 to 26.0.1. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> |
||
|
dependabot[bot]andcopilot-swe-agent[bot]
|
b012edc365 |
Bump @hey-api/openapi-ts from 0.95.0 to 0.97.3 in /frontend (#1727)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts) from 0.95.0 to 0.97.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md">@hey-api/openapi-ts's changelog</a>.</em></p> <blockquote> <h2>0.97.3</h2> <h3>Patch Changes</h3> <ul> <li> <p><strong>plugin(<code>@hey-api/client-axios</code>)</strong>: fix: correct return type in SSE (<a href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>) (<a href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>) by <a href="https://github.com/kitlangton"><code>@kitlangton</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/preact-query</code>)</strong>: add <code>getQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-ofetch</code>)</strong>: fix: correct return type in SSE (<a href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>) (<a href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>) by <a href="https://github.com/kitlangton"><code>@kitlangton</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/svelte-query</code>)</strong>: add <code>getQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/angular-query-experimental</code>)</strong>: add <code>getQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/react-query</code>)</strong>: add <code>getQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-fetch</code>)</strong>: fix: correct return type in SSE (<a href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>) (<a href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>) by <a href="https://github.com/kitlangton"><code>@kitlangton</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/react-query</code>)</strong>: add <code>useGetQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-ky</code>)</strong>: fix: correct return type in SSE (<a href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>) (<a href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>) by <a href="https://github.com/kitlangton"><code>@kitlangton</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/solid-query</code>)</strong>: add <code>getQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-next</code>)</strong>: fix: correct return type in SSE (<a href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>) (<a href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>) by <a href="https://github.com/kitlangton"><code>@kitlangton</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/preact-query</code>)</strong>: add <code>useGetQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-angular</code>)</strong>: fix: correct return type in SSE (<a href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>) (<a href="https://github.com/hey-api/hey-api/commit/58962a055b19c61ea5721d01f7ba2589bbbcb1ad"><code>58962a0</code></a>) by <a href="https://github.com/kitlangton"><code>@kitlangton</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/transformers</code>)</strong>: add support for Temporal API via <a href="https://github.com/fullcalendar/temporal-polyfill">temporal-polyfill</a> in <code>dates</code> (<a href="https://redirect.github.com/hey-api/hey-api/pull/3916">#3916</a>) (<a href="https://github.com/hey-api/hey-api/commit/bfa457a3da2bebad46f6c621cfd8a0f22aa6b9d8"><code>bfa457a</code></a>) by <a href="https://github.com/OptoCloud"><code>@OptoCloud</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/vue-query</code>)</strong>: add <code>getQueryData</code> option (<a href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>) (<a href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>) by <a href="https://github.com/inas-sirhan"><code>@inas-sirhan</code></a></p> </li> <li> <p><strong>plugin(zod)</strong>: fix: avoid invalid <code>.extend()</code> on <code>z.record()</code> when a discriminated union member is an empty object (<a href="https://redirect.github.com/hey-api/hey-api/pull/3915">#3915</a>) (<a href="https://github.com/hey-api/hey-api/commit/8fa9f3ae0932401c097ccdd542d08b092f13873c"><code>8fa9f3a</code></a>) by <a href="https://github.com/apps/pullfrog"><code>@pullfrog</code></a></p> </li> </ul> <h3>Updated Dependencies:</h3> <ul> <li><code>@hey-api/shared</code><a href="https://github.com/0"><code>@0</code></a>.4.5</li> <li><code>@hey-api/codegen-core</code><a href="https://github.com/0"><code>@0</code></a>.8.2</li> </ul> <h2>0.97.2</h2> <h3>Patch Changes</h3> <ul> <li> <p><strong>plugin(zod)</strong>: use enums from TypeScript if available (<a href="https://redirect.github.com/hey-api/hey-api/pull/3884">#3884</a>) (<a href="https://github.com/hey-api/hey-api/commit/abc8ceb43f37e7c9739fe010d3fcdb3be0bb5290"><code>abc8ceb</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/client-next</code>)</strong>: fix: preserve query auth when when there are no other query parameters (<a href="https://redirect.github.com/hey-api/hey-api/pull/3853">#3853</a>) (<a href="https://github.com/hey-api/hey-api/commit/a6ee7eb11cc6e8f1d5093d2c211d77874f337bbe"><code>a6ee7eb</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/sdk</code>)</strong>: support <code>valibot</code> as response transformer (<a href="https://redirect.github.com/hey-api/hey-api/pull/3847">#3847</a>) (<a href="https://github.com/hey-api/hey-api/commit/6770f78dec53b1bf8f37c361c7b9c2e2eb4157fa"><code>6770f78</code></a>) by <a href="https://github.com/SukkaW"><code>@SukkaW</code></a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/hey-api/commit/d833f735fdb3c850800b7668ddb058f17aa62ab9"><code>d833f73</code></a> ci: release</li> <li><a href="https://github.com/hey-api/hey-api/commit/4987bc3c32ea2c585f4f2400b7d22154dceccfb8"><code>4987bc3</code></a> docs: add changesets</li> <li><a href="https://github.com/hey-api/hey-api/commit/30498ceff194c855cb81cca652739cbe3d924c28"><code>30498ce</code></a> Merge branch 'main' of <a href="https://github.com/hey-api/openapi-ts">https://github.com/hey-api/openapi-ts</a> into feat/tansta...</li> <li><a href="https://github.com/hey-api/hey-api/commit/9be7e7f181995158e9c41ab70ca62c47c35f62f6"><code>9be7e7f</code></a> chore: one more try</li> <li><a href="https://github.com/hey-api/hey-api/commit/4c5916d59384a5e9075463808fca1047856757a4"><code>4c5916d</code></a> chore: one more try</li> <li><a href="https://github.com/hey-api/hey-api/commit/83b4464cd8535a779aab1743fa1f16aa68f1a0e4"><code>83b4464</code></a> chore: one more try</li> <li><a href="https://github.com/hey-api/hey-api/commit/597e151a282b4ca7fa41f162c35f94e8728df8c7"><code>597e151</code></a> Merge branch 'main' into pullfrog/3914-zod-discriminated-union-empty-object</li> <li><a href="https://github.com/hey-api/hey-api/commit/462c2e9432bc42d1c75267130472de89a3219634"><code>462c2e9</code></a> Merge branch 'main' into feat/transformers-temporal</li> <li><a href="https://github.com/hey-api/hey-api/commit/3367e64f071df30e4824e7c8b1e21040cae6f2d7"><code>3367e64</code></a> Merge branch 'main' into fix/sse-iterator-treturn-miswiring</li> <li><a href="https://github.com/hey-api/hey-api/commit/e6d4416ff6f0a5f28009a7181001c2fc31bfd3b0"><code>e6d4416</code></a> refactor: valibot plugin</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts">compare view</a></li> </ul> </details> <br /> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> |
||
|
dependabot[bot]andcopilot-swe-agent[bot]
|
c9733d2ecc |
Bump react-router from 7.14.0 to 8.3.0 in /frontend (#1743)
Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) from 7.14.0 to 8.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/releases">react-router's releases</a>.</em></p> <blockquote> <h2>v8.3.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830</a></p> <h2>v8.2.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820</a></p> <h2>v8.1.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810</a></p> <h2>v8.0.1</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801</a></p> <h2>v8.0.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800</a></p> <h2>v7.18.1</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181</a></p> <h2>v7.18.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180</a></p> <h2>v7.17.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170</a></p> <h2>v7.16.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160</a></p> <h2>v7.15.1</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151</a></p> <h2>v7.15.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150</a></p> <h2>v7.14.2</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142</a></p> <h2>v7.14.1</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md">react-router's changelog</a>.</em></p> <blockquote> <h2>v8.3.0</h2> <h3>Patch Changes</h3> <ul> <li>Encode path params in <code>href</code>/<code>generatePath</code> per RFC 3986 path-segment rules instead of <code>encodeURIComponent</code> (<a href="https://redirect.github.com/remix-run/react-router/pull/15310">#15310</a>) <ul> <li>Characters that are valid literally in a path segment (<code>$ & + , ; = : @</code> — RFC 3986 <code>pchar</code>) are no longer percent-encoded, so values like a semver build <code>1.0.0+1</code> interpolate unchanged instead of becoming <code>1.0.0%2B1</code></li> <li>Structural/unsafe characters (<code>/ ? # %</code>, whitespace, non-ASCII) are still escaped exactly as before</li> </ul> </li> <li>Use <code>crypto.randomUUID()</code> for <code>createMemorySessionStorage</code> session ids (<a href="https://redirect.github.com/remix-run/react-router/pull/15302">#15302</a>) <ul> <li><code>createMemorySessionStorage</code> is only intended for local development and testing - sessions are lost when the server restarts</li> </ul> </li> <li>Fix <code>NavLink</code> not applying its <code>pending</code> state when <code>to</code> has a trailing slash (<a href="https://redirect.github.com/remix-run/react-router/pull/15300">#15300</a>)</li> <li>Preserve RSC route component metadata so routes with a <code>clientLoader</code> can skip unnecessary server requests once their components have rendered while still fetching missing server-rendered elements (<a href="https://redirect.github.com/remix-run/react-router/pull/15323">#15323</a>)</li> <li>Harden RSC CSRF code paths (<a href="https://redirect.github.com/remix-run/react-router/pull/15311">#15311</a>)</li> <li>Fix server crash (<code>TypeError: Invalid state: Unable to enqueue</code>) when a request is aborted while the RSC HTML stream has a pending flush (<a href="https://redirect.github.com/remix-run/react-router/pull/15286">#15286</a>) <ul> <li>Handle cancellation of the <code>injectRSCPayload</code> readable side, clear the pending flush, and cancel the underlying RSC payload stream</li> </ul> </li> </ul> <h3>Unstable Changes</h3> <p>⚠️ <em><a href="https://reactrouter.com/community/api-development-strategy#unstable-flags">Unstable features</a> are not recommended for production use</em></p> <ul> <li> <p>Detect stale RSC clients during lazy route discovery and reload the destination document (<a href="https://redirect.github.com/remix-run/react-router/pull/15318">#15318</a>)</p> <h4>Migration</h4> <p>Apps using the default RSC Framework entry do not need to make any changes. Apps with a custom <code>entry.rsc.tsx</code> should import the generated client version and pass it to <code>unstable_matchRSCServerRequest</code>:</p> <pre lang="tsx"><code>import clientVersion from "virtual:react-router/unstable_rsc/client-version"; <p>return unstable_matchRSCServerRequest({<br /> // ...<br /> clientVersion,<br /> });<br /> </code></pre></p> </li> <li> <p>Add CSP nonce support to RSC document rendering (<a href="https://redirect.github.com/remix-run/react-router/pull/15320">#15320</a>)</p> <ul> <li>Add <code>nonce</code> options to <code>unstable_routeRSCServerRequest</code> and <code>unstable_RSCStaticRouter</code></li> <li>Forward the nonce to the HTML renderer and apply it to injected RSC payload scripts and nonce-aware framework components</li> </ul> <p>To adopt nonce-based CSP, update your <code>entry.ssr.tsx</code> (run <code>react-router reveal entry.ssr</code> first in RSC Framework Mode) to generate a fresh nonce for each request. Pass it to <code>routeRSCServerRequest</code>, spread the <code>renderHTML</code> options into React's HTML renderer, pass <code>options.nonce</code> to <code>RSCStaticRouter</code>, and use the same nonce in the <code>Content-Security-Policy</code> response header:</p> <pre lang="tsx"><code>const nonce = crypto.randomUUID(); const response = await routeRSCServerRequest({ request, serverResponse, createFromReadableStream, nonce, async renderHTML(getPayload, options) { const payload = getPayload(); return renderHTMLToReadableStream( </code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/remix-run/react-router/commit/2edaca7a4f12a50cad002d55d84f73b0cdd462b6"><code>2edaca7</code></a> Release v8.3.0 (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15294">#15294</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/687ab72dddcc19d2fc749f992fe29789ba13daad"><code>687ab72</code></a> Prep release notes</li> <li><a href="https://github.com/remix-run/react-router/commit/d2f1f1baa5f7f75def8e07bac3c37fb185c04e1f"><code>d2f1f1b</code></a> update changes files to use h4 instead of h3 (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15334">#15334</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/8186207e4773958a3e124a76de5565256b248134"><code>8186207</code></a> fix(rsc): preserve component metadata for client loader revalidation (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15323">#15323</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/c26e431c608c68580841e7c156ed986919c60630"><code>c26e431</code></a> feat(rsc): support CSP nonces in document rendering (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15320">#15320</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/6286f904855afc245513a47ba5e4e4ffa3d63a15"><code>6286f90</code></a> feat(rsc): reload stale clients after new deployments (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15318">#15318</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/3d83ad4ac2d19768bf7b9f80962b76c52c1f777a"><code>3d83ad4</code></a> docs: fix useLinkClickHandler defaultShouldRevalidate default description (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/1">#1</a>...</li> <li><a href="https://github.com/remix-run/react-router/commit/f75c89fd9cf76177c22d008265d78ee9184c483e"><code>f75c89f</code></a> Update docs links to v8 API reference (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15316">#15316</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/baa9ba617b9df1114359439013462cc3486d5b72"><code>baa9ba6</code></a> fix: encode path params per RFC 3986 path-segment rules in href/generatePath ...</li> <li><a href="https://github.com/remix-run/react-router/commit/69debd1a33aa87924740ec199c4a598d4d1ebcae"><code>69debd1</code></a> fix: apply NavLink pending state when the to prop has a trailing slash (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15300">#15300</a>)</li> <li>Additional commits viewable in <a href="https://github.com/remix-run/react-router/commits/react-router@8.3.0/packages/react-router">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evroon/bracket/network/alerts). </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> |
||
|
dependabot[bot]
|
06da3d3598 |
Bump axios from 1.15.0 to 1.15.2 in /frontend (#1678)
Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.15.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v1.15.2</h2> <p>This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in <code>allowedSocketPaths</code> allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Prototype Pollution Hardening (HTTP Adapter):</strong> Hardened the Node HTTP adapter and <code>resolveConfig</code>/<code>mergeConfig</code>/validator paths to read only own properties and use null-prototype config objects, preventing polluted <code>auth</code>, <code>baseURL</code>, <code>socketPath</code>, <code>beforeRedirect</code>, and <code>insecureHTTPParser</code> from influencing requests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10779">#10779</a></strong>)</li> <li><strong>SSRF via <code>socketPath</code>:</strong> Rejects non-string <code>socketPath</code> values and adds an opt-in <code>allowedSocketPaths</code> config option to restrict permitted Unix domain socket paths, returning <code>AxiosError</code> <code>ERR_BAD_OPTION_VALUE</code> on mismatch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li> <li><strong>Supply-chain Hardening:</strong> Added <code>.npmrc</code> with <code>ignore-scripts=true</code>, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded <code>SECURITY.md</code>/<code>THREATMODEL.md</code> with provenance verification (<code>npm audit signatures</code>), 60-day resolution policy, and maintainer incident-response runbook. (<strong><a href="https://redirect.github.com/axios/axios/issues/10776">#10776</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong><code>allowedSocketPaths</code> Config Option:</strong> New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Keep-alive Socket Memory Leak:</strong> Installs a single per-socket <code>error</code> listener tracking the active request via <code>kAxiosSocketListener</code>/<code>kAxiosCurrentReq</code>, eliminating per-request listener accumulation, <code>MaxListenersExceededWarning</code>, and linear heap growth under concurrent or long-running keep-alive workloads (fixes <a href="https://redirect.github.com/axios/axios/issues/10780">#10780</a>). (<strong><a href="https://redirect.github.com/axios/axios/issues/10788">#10788</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Changelog:</strong> Updated <code>CHANGELOG.md</code> with v1.15.1 release notes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10781">#10781</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.15.1...v1.15.2">Full Changelog</a></p> <h2>v1.15.1</h2> <p>This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Header Injection Hardening:</strong> Tightened validation and sanitisation across request header construction to close the header-injection attack surface. (<strong><a href="https://redirect.github.com/axios/axios/issues/10749">#10749</a></strong>)</li> <li><strong>CRLF Stripping in Multipart Headers:</strong> Correctly strips CR/LF from multipart header values to prevent injection via field names and filenames. (<strong><a href="https://redirect.github.com/axios/axios/issues/10758">#10758</a></strong>)</li> <li><strong>Prototype Pollution / Auth Bypass:</strong> Replaced unsafe <code>in</code> checks with <code>hasOwnProperty</code> to prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10761">#10761</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10760">#10760</a></strong>)</li> <li><strong><code>withXSRFToken</code> Truthy Bypass:</strong> Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (<strong><a href="https://redirect.github.com/axios/axios/issues/10762">#10762</a></strong>)</li> <li><strong><code>maxBodyLength</code> With Zero Redirects:</strong> Enforces <code>maxBodyLength</code> even when <code>maxRedirects</code> is set to <code>0</code>, closing a bypass path for oversized request bodies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10753">#10753</a></strong>)</li> <li><strong>Streamed Response <code>maxContentLength</code> Bypass:</strong> Applies <code>maxContentLength</code> to streamed responses that previously bypassed the cap. (<strong><a href="https://redirect.github.com/axios/axios/issues/10754">#10754</a></strong>)</li> <li><strong>Follow-up CVE Completion:</strong> Completes an earlier incomplete CVE fix to fully close the regression window. (<strong><a href="https://redirect.github.com/axios/axios/issues/10755">#10755</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>AI-Based Docs Translations:</strong> Initial scaffold for AI-assisted translations of the documentation site. (<strong><a href="https://redirect.github.com/axios/axios/issues/10705">#10705</a></strong>)</li> <li><strong><code>Location</code> Request Header Type:</strong> Adds <code>Location</code> to <code>CommonRequestHeadersList</code> for accurate typing of redirect-aware requests. (<strong><a href="https://redirect.github.com/axios/axios/issues/7528">#7528</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>FormData Handling:</strong> Removes <code>Content-Type</code> when no boundary is present on <code>FormData</code> fetch requests, supports multi-select fields, cancels <code>request.body</code> instead of the source stream on fetch abort, and fixes a recursion bug in form-data serialisation. (<strong><a href="https://redirect.github.com/axios/axios/issues/7314">#7314</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10676">#10676</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10702">#10702</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10726">#10726</a></strong>)</li> <li><strong>HTTP Adapter:</strong> Handles socket-only request errors without leaking keep-alive listeners. (<strong><a href="https://redirect.github.com/axios/axios/issues/10576">#10576</a></strong>)</li> <li><strong>Progress Events:</strong> Clamps <code>loaded</code> to <code>total</code> for computable upload/download progress events. (<strong><a href="https://redirect.github.com/axios/axios/issues/7458">#7458</a></strong>)</li> <li><strong>Types:</strong> Aligns <code>runWhen</code> type with the runtime behaviour in <code>InterceptorManager</code> and makes response header keys case-insensitive. (<strong><a href="https://redirect.github.com/axios/axios/issues/7529">#7529</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10677">#10677</a></strong>)</li> <li><strong><code>buildFullPath</code>:</strong> Uses strict equality in the base/relative URL check. (<strong><a href="https://redirect.github.com/axios/axios/issues/7252">#7252</a></strong>)</li> <li><strong><code>AxiosURLSearchParams</code> Regex:</strong> Improves the regex used for param serialisation to avoid edge-case mismatches. (<strong><a href="https://redirect.github.com/axios/axios/issues/10736">#10736</a></strong>)</li> <li><strong>Resilient Value Parsing:</strong> Parses out header/config values instead of throwing on malformed input. (<strong><a href="https://redirect.github.com/axios/axios/issues/10687">#10687</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h2>v1.15.2 - April 21, 2026</h2> <p>This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in <code>allowedSocketPaths</code> allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Prototype Pollution Hardening (HTTP Adapter):</strong> Hardened the Node HTTP adapter and <code>resolveConfig</code>/<code>mergeConfig</code>/validator paths to read only own properties and use null-prototype config objects, preventing polluted <code>auth</code>, <code>baseURL</code>, <code>socketPath</code>, <code>beforeRedirect</code>, and <code>insecureHTTPParser</code> from influencing requests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10779">#10779</a></strong>)</li> <li><strong>SSRF via <code>socketPath</code>:</strong> Rejects non-string <code>socketPath</code> values and adds an opt-in <code>allowedSocketPaths</code> config option to restrict permitted Unix domain socket paths, returning <code>AxiosError</code> <code>ERR_BAD_OPTION_VALUE</code> on mismatch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li> <li><strong>Supply-chain Hardening:</strong> Added <code>.npmrc</code> with <code>ignore-scripts=true</code>, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded <code>SECURITY.md</code>/<code>THREATMODEL.md</code> with provenance verification (<code>npm audit signatures</code>), 60-day resolution policy, and maintainer incident-response runbook. (<strong><a href="https://redirect.github.com/axios/axios/issues/10776">#10776</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong><code>allowedSocketPaths</code> Config Option:</strong> New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Keep-alive Socket Memory Leak:</strong> Installs a single per-socket <code>error</code> listener tracking the active request via <code>kAxiosSocketListener</code>/<code>kAxiosCurrentReq</code>, eliminating per-request listener accumulation, <code>MaxListenersExceededWarning</code>, and linear heap growth under concurrent or long-running keep-alive workloads (fixes <a href="https://redirect.github.com/axios/axios/issues/10780">#10780</a>). (<strong><a href="https://redirect.github.com/axios/axios/issues/10788">#10788</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Changelog:</strong> Updated <code>CHANGELOG.md</code> with v1.15.1 release notes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10781">#10781</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.15.1...v1.15.2">Full Changelog</a></p> <hr /> <h2>v1.15.1 - April 19, 2026</h2> <p>This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.</p> <h2>🔒 Security Fixes</h2> <ul> <li> <p><strong>Header Injection Hardening:</strong> Tightened validation and sanitisation across request header construction to close the header-injection attack surface. (<strong><a href="https://redirect.github.com/axios/axios/issues/10749">#10749</a></strong>)</p> </li> <li> <p><strong>CRLF Stripping in Multipart Headers:</strong> Correctly strips CR/LF from multipart header values to prevent injection via field names and filenames. (<strong><a href="https://redirect.github.com/axios/axios/issues/10758">#10758</a></strong>)</p> </li> <li> <p><strong>Prototype Pollution / Auth Bypass:</strong> Replaced unsafe <code>in</code> checks with <code>hasOwnProperty</code> to prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10761">#10761</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10760">#10760</a></strong>)</p> </li> <li> <p><strong><code>withXSRFToken</code> Truthy Bypass:</strong> Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (<strong><a href="https://redirect.github.com/axios/axios/issues/10762">#10762</a></strong>)</p> </li> <li> <p><strong><code>maxBodyLength</code> With Zero Redirects:</strong> Enforces <code>maxBodyLength</code> even when <code>maxRedirects</code> is set to <code>0</code>, closing a bypass path for oversized request bodies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10753">#10753</a></strong>)</p> </li> <li> <p><strong>Streamed Response <code>maxContentLength</code> Bypass:</strong> Applies <code>maxContentLength</code> to streamed responses that previously bypassed the cap. (<strong><a href="https://redirect.github.com/axios/axios/issues/10754">#10754</a></strong>)</p> </li> <li> <p><strong>Follow-up CVE Completion:</strong> Completes an earlier incomplete CVE fix to fully close the regression window. (<strong><a href="https://redirect.github.com/axios/axios/issues/10755">#10755</a></strong>)</p> </li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>AI-Based Docs Translations:</strong> Initial scaffold for AI-assisted translations of the documentation site. (<strong><a href="https://redirect.github.com/axios/axios/issues/10705">#10705</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/582934382e4e0e0bcb679c628071a4203e93cf57"><code>5829343</code></a> chore(release): prepare release 1.15.2 (<a href="https://redirect.github.com/axios/axios/issues/10789">#10789</a>)</li> <li><a href="https://github.com/axios/axios/commit/4709a48fa2717ba97f43f5432d48ca4e26c2d326"><code>4709a48</code></a> fix: added fix for memory leak in sockets (<a href="https://redirect.github.com/axios/axios/issues/10788">#10788</a>)</li> <li><a href="https://github.com/axios/axios/commit/be3336014e01f9a4fc1f8aef15303cf7daaf58db"><code>be33360</code></a> chore: update changelog (<a href="https://redirect.github.com/axios/axios/issues/10781">#10781</a>)</li> <li><a href="https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"><code>4791514</code></a> fix: more header pollutions (<a href="https://redirect.github.com/axios/axios/issues/10779">#10779</a>)</li> <li><a href="https://github.com/axios/axios/commit/6feafcff6c2dbafe206161c5d09e38e1d36af66f"><code>6feafcf</code></a> fix: socket issue (<a href="https://redirect.github.com/axios/axios/issues/10777">#10777</a>)</li> <li><a href="https://github.com/axios/axios/commit/302e2739c602f00e323d4f3f5c79500647633a73"><code>302e273</code></a> docs: update docs, add a couple actions etc (<a href="https://redirect.github.com/axios/axios/issues/10776">#10776</a>)</li> <li><a href="https://github.com/axios/axios/commit/ac42446be51300fe214ba3c6e40cc95f34fd6871"><code>ac42446</code></a> chore(release): prepare release 1.15.1 (<a href="https://redirect.github.com/axios/axios/issues/10767">#10767</a>)</li> <li><a href="https://github.com/axios/axios/commit/908f2206b6bfeff67236784abce85935698ac1d9"><code>908f220</code></a> docs: update threatmodel (<a href="https://redirect.github.com/axios/axios/issues/10765">#10765</a>)</li> <li><a href="https://github.com/axios/axios/commit/f93f8155250c2e066205521eda05ae22983a1f6d"><code>f93f815</code></a> docs: added docs around potential decompressions bomb (<a href="https://redirect.github.com/axios/axios/issues/10763">#10763</a>)</li> <li><a href="https://github.com/axios/axios/commit/1728aa1b15b8857f970611fd8983c06b423fc486"><code>1728aa1</code></a> fix: short-circuits on any truthy non-boolean in withXSRFToken (<a href="https://redirect.github.com/axios/axios/issues/10762">#10762</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.15.0...v1.15.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evroon/bracket/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3a59b5e4bb |
Bump @typescript-eslint/eslint-plugin from 8.57.0 to 8.58.0 in /frontend (#1677)
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 8.57.0 to 8.58.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/eslint-plugin's releases</a>.</em></p> <blockquote> <h2>v8.58.0</h2> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.57.2</h2> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li> <li>RyoheiYamamoto</li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@typescript-eslint/eslint-plugin's changelog</a>.</em></p> <blockquote> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.57.1 (2026-03-16)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a> chore(release): publish 8.58.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/5a9bd366139c8e306dd78ae906d4389972de42b6"><code>5a9bd36</code></a> fix(eslint-plugin): [prefer-regexp-exec] avoid fixing unknown RegExp flags (#...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/edb90ebf7c75a71065bed719f3e72d18b830c6a0"><code>edb90eb</code></a> fix(eslint-plugin): [no-extraneous-class] handle index signatures (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12142">#12142</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12124">#12124</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1bf86c9f5c799916d12079c037c79e10b29cdc9c"><code>1bf86c9</code></a> fix(eslint-plugin): crash in <code>no-unnecessary-type-arguments</code> (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12163">#12163</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/e9cc25a794dbf82a241807f394489a2aad39ffae"><code>e9cc25a</code></a> docs(eslint-plugin): fix typo (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12155">#12155</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a> chore(release): publish 8.57.2</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f68c8e4baca096281b458ccb6ff16ca6c5a1d199"><code>f68c8e4</code></a> fix(eslint-plugin): [prefer-readonly-parameter-types] preserve type alias inf...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/73acd2e6833c4757d2743a8dbb979154d31a1e98"><code>73acd2e</code></a> fix(eslint-plugin): [no-useless-default-assignment] skip reporting false posi...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3d21482030e4fd220f466cea7036e07695277364"><code>3d21482</code></a> fix(eslint-plugin): [no-unsafe-return] false positive on unwrapping generic (...</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
17f0b797af |
Bump react-i18next from 16.6.2 to 17.0.1 in /frontend (#1674)
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 16.6.2 to 17.0.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.0.1</h2> <ul> <li>chore: bump minimum i18next peer dependency to <code>>= 26.0.1</code> <em>(forgot to do it in last version)</em></li> <li>fix: migrate test setup from removed legacy <code>interpolation.format</code> to <code>i18n.services.formatter.add()</code> (i18next v26)</li> </ul> <h2>17.0.0</h2> <h3>Potentially breaking changes</h3> <ul> <li>fix: <code>transKeepBasicHtmlNodesFor</code> now correctly preserves HTML tag names when children contain interpolations or mixed content <a href="https://redirect.github.com/i18next/i18next-cli/issues/230">230</a> <ul> <li>Previously, <code><strong>{{name}}</strong></code> was incorrectly serialized as <code><1>{{name}}</1></code> — the tag name was only preserved for plain string children</li> <li>This bug existed since the feature was introduced and affects auto-generated keys (when no explicit <code>i18nKey</code> is provided)</li> <li>If you rely on auto-generated Trans keys containing indexed tags for kept HTML elements with interpolation children, you will need to update your translation files</li> </ul> </li> </ul> <h3>Other changes</h3> <ul> <li>updated dev dependencies (vitest, rollup plugins, happy-dom, typescript, etc.)</li> </ul> <h3>16.6.6</h3> <ul> <li>fix(peer-deps): bump i18next peer dependency to <code>>= 25.10.9</code> to match required type exports (<code>ConstrainTarget</code>, <code>ApplyTarget</code>, <code>GetSource</code>) used by <code>TransSelector</code> <a href="https://redirect.github.com/i18next/react-i18next/issues/1911">1911</a></li> </ul> <h3>16.6.5</h3> <ul> <li>fix(types): selector keyPrefix overload in <code>useTranslation</code> no longer matches when <code>keyPrefix</code> is absent, fixing <code>defaultNS: false</code> with explicit <code>ns</code> option <a href="https://redirect.github.com/i18next/i18next/issues/2412">2412</a></li> </ul> <h3>16.6.4</h3> <ul> <li>allow TypeScript 6 as peer dependency <a href="https://redirect.github.com/i18next/react-i18next/issues/1910">1910</a></li> </ul> <h3>16.6.3</h3> <ul> <li>fix(types): merge <code>TransSelector</code> overloads into a single signature so <code>typeof Trans</code> remains extendable <a href="https://redirect.github.com/i18next/react-i18next/issues/1909">1909</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/23214960e3ead0b6774a1a0cb40387d41868da60"><code>2321496</code></a> 17.0.1</li> <li><a href="https://github.com/i18next/react-i18next/commit/7e656b567125b059738ccd6f79b45de3767a8df4"><code>7e656b5</code></a> chore: bump minimum i18next peer dependency</li> <li><a href="https://github.com/i18next/react-i18next/commit/dfc350b2c465a7e0283c4fa5c6d83e3d447fc87a"><code>dfc350b</code></a> upate github actions</li> <li><a href="https://github.com/i18next/react-i18next/commit/7fe2620326e3027ecf4654ae739c4f74f83a5482"><code>7fe2620</code></a> 17.0.0</li> <li><a href="https://github.com/i18next/react-i18next/commit/f4ada4c38c0d0fb5a992a8e76d5b510df69b257d"><code>f4ada4c</code></a> fix: <code>transKeepBasicHtmlNodesFor</code> now correctly preserves HTML tag names when...</li> <li><a href="https://github.com/i18next/react-i18next/commit/eb02c6305a9252222179bd6272c09f3e4ff9ad6a"><code>eb02c63</code></a> 16.6.6</li> <li><a href="https://github.com/i18next/react-i18next/commit/76f98cdd00e12d36b99bccb18614d647f6f9ce30"><code>76f98cd</code></a> fix(peer-deps): bump i18next peer dependency to <code>>= 25.10.9</code> to match require...</li> <li><a href="https://github.com/i18next/react-i18next/commit/9f830e1df1f12e77365579ba0c25a814aa988493"><code>9f830e1</code></a> 16.6.5</li> <li><a href="https://github.com/i18next/react-i18next/commit/9f0005f8585b2132c69f706d6fe4adf6da1d5025"><code>9f0005f</code></a> fix(types): selector keyPrefix overload in <code>useTranslation</code> no longer matches...</li> <li><a href="https://github.com/i18next/react-i18next/commit/f820b806d793f9a5bfe9c79adb6dd52527975cfa"><code>f820b80</code></a> 16.6.4</li> <li>Additional commits viewable in <a href="https://github.com/i18next/react-i18next/compare/v16.6.2...v17.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
b6591d7a92 |
Bump @tabler/icons-react from 3.40.0 to 3.41.0 in /frontend (#1673)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.40.0 to 3.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases"><code>@tabler/icons-react</code>'s releases</a>.</em></p> <blockquote> <h2>Release 3.41.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/brand-jira</code></li> <li><code>outline/car-off-road</code></li> <li><code>outline/car-suspension</code></li> <li><code>outline/credit-card-hand</code></li> <li><code>outline/device-3d-camera</code></li> <li><code>outline/device-3d-lens</code></li> <li><code>outline/device-screen</code></li> <li><code>outline/iceberg</code></li> <li><code>outline/jetski</code></li> <li><code>outline/olympic-torch</code></li> <li><code>outline/parking-meter</code></li> <li><code>outline/pillow</code></li> <li><code>outline/pipeline</code></li> <li><code>outline/quote-open</code></li> <li><code>outline/scan-letter-a</code></li> <li><code>outline/scan-letter-t</code></li> <li><code>outline/segway</code></li> <li><code>outline/x-mark</code></li> </ul> <h3>New features</h3> <ul> <li><strong>Angular support</strong>: new <code>@tabler/icons-angular</code> package with components, build pipeline, unit tests, and <code>test/test-angular</code> sample app (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1091">#1091</a>).</li> <li><strong>SVG validation</strong>: validation for <code><g></code> elements; broader SVG icon validation improvements (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1487">#1487</a>); more consistent SVG path syntax (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1488">#1488</a>).</li> <li><strong><code>icons-react</code></strong>: JSDoc with icon previews in generated output (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1472">#1472</a>).</li> <li><strong><code>icons-react-native</code></strong>: <code>react-native-svg</code> added as a <strong>peer dependency</strong> (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1475">#1475</a>).</li> <li><strong><code>icons-solidjs</code></strong>: SSR support via <code>rollup-preset-solid</code> and JSX/TSX component refactor (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1493">#1493</a>).</li> </ul> <h3>Fixed icons</h3> <ul> <li><strong><code>outline/brand-kbin</code></strong> and <strong><code>outline/volume-4</code></strong>: adjusted for compatibility with <code>buildJsIcons</code> (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1469">#1469</a>).</li> <li><strong><code>outline/number-35-small</code></strong> through <strong><code>outline/number-50-small</code></strong>: updated Unicode values (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1494">#1494</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/6cbe8857c8baa758383bb0a9e0f6922cf82da01c"><code>6cbe885</code></a> Release 3.41.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/19d735e6206997fe06a42f6546188b9678ad57de"><code>19d735e</code></a> Add JSDoc with previews in icons-react (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1472">#1472</a>)</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.41.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
a158f25616 |
Bump postcss from 8.5.0 to 8.5.10 in /frontend (#1672)
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.0 to 8.5.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.10</h2> <ul> <li>Fixed XSS via unescaped <code></style></code> in non-bundler cases (by <a href="https://github.com/TharVid"><code>@TharVid</code></a>).</li> </ul> <h2>8.5.9</h2> <ul> <li>Speed up source map encoding paring in case of the error.</li> </ul> <h2>8.5.8</h2> <ul> <li>Fixed <code>Processor#version</code>.</li> </ul> <h2>8.5.7</h2> <ul> <li>Improved source map annotation cleaning performance (by CodeAnt AI).</li> </ul> <h2>8.5.6</h2> <ul> <li>Fixed <code>ContainerWithChildren</code> type discriminating (by <a href="https://github.com/Goodwine"><code>@Goodwine</code></a>).</li> </ul> <h2>8.5.5</h2> <ul> <li>Fixed <code>package.json</code>→<code>exports</code> compatibility with some tools (by <a href="https://github.com/JounQin"><code>@JounQin</code></a>).</li> </ul> <h2>8.5.4</h2> <ul> <li>Fixed Parcel compatibility issue (by <a href="https://github.com/git-sumitchaudhary"><code>@git-sumitchaudhary</code></a>).</li> </ul> <h2>8.5.3</h2> <ul> <li>Added more details to <code>Unknown word</code> error (by <a href="https://github.com/hiepxanh"><code>@hiepxanh</code></a>).</li> <li>Fixed types (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/catnipan"><code>@catnipan</code></a>).</li> </ul> <h2>8.5.2</h2> <ul> <li>Fixed end position of rules with semicolon (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.5.1</h2> <ul> <li>Fixed backwards compatibility for complex cases (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.10</h2> <ul> <li>Fixed XSS via unescaped <code></style></code> in non-bundler cases (by <a href="https://github.com/TharVid"><code>@TharVid</code></a>).</li> </ul> <h2>8.5.9</h2> <ul> <li>Speed up source map encoding paring in case of the error.</li> </ul> <h2>8.5.8</h2> <ul> <li>Fixed <code>Processor#version</code>.</li> </ul> <h2>8.5.7</h2> <ul> <li>Improved source map annotation cleaning performance (by CodeAnt AI).</li> </ul> <h2>8.5.6</h2> <ul> <li>Fixed <code>ContainerWithChildren</code> type discriminating (by <a href="https://github.com/Goodwine"><code>@Goodwine</code></a>).</li> </ul> <h2>8.5.5</h2> <ul> <li>Fixed <code>package.json</code>→<code>exports</code> compatibility with some tools (by <a href="https://github.com/JounQin"><code>@JounQin</code></a>).</li> </ul> <h2>8.5.4</h2> <ul> <li>Fixed Parcel compatibility issue (by <a href="https://github.com/git-sumitchaudhary"><code>@git-sumitchaudhary</code></a>).</li> </ul> <h2>8.5.3</h2> <ul> <li>Added more details to <code>Unknown word</code> error (by <a href="https://github.com/hiepxanh"><code>@hiepxanh</code></a>).</li> <li>Fixed types (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/catnipan"><code>@catnipan</code></a>).</li> </ul> <h2>8.5.2</h2> <ul> <li>Fixed end position of rules with semicolon (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.5.1</h2> <ul> <li>Fixed backwards compatibility for complex cases (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.5 “Duke Alloces”</h2> <ul> <li>Added <code>Input#document</code> for sources like CSS-in-JS or HTML (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.4.49</h2> <ul> <li>Fixed custom syntax without <code>source.offset</code> (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/33b9790263dc1562a46ce45d9532bd63e95b7986"><code>33b9790</code></a> Release 8.5.10 version</li> <li><a href="https://github.com/postcss/postcss/commit/536c79e4b01e58a3a56b09c3c0cf2323f4b9a28b"><code>536c79e</code></a> Escape </style> in CSS output (<a href="https://redirect.github.com/postcss/postcss/issues/2074">#2074</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/afa96b2a139ce625c4d27973313479c7c85f39d4"><code>afa96b2</code></a> Update dependencies (<a href="https://redirect.github.com/postcss/postcss/issues/2073">#2073</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/effe88bb87cabdc1876e02adbdd30f392f19f40d"><code>effe88b</code></a> Typo (<a href="https://redirect.github.com/postcss/postcss/issues/2072">#2072</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/3ee79a2c4a11e41d52db50b444eebe38299495ad"><code>3ee79a2</code></a> Thread model (<a href="https://redirect.github.com/postcss/postcss/issues/2071">#2071</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/2e0683daca4dc2919211b03774f6b2d137136c01"><code>2e0683d</code></a> Create incident response docs (<a href="https://redirect.github.com/postcss/postcss/issues/2070">#2070</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/fe88ac29c06b7b218be32994cdc6ca1525bdf2c9"><code>fe88ac2</code></a> Release 8.5.9 version</li> <li><a href="https://github.com/postcss/postcss/commit/c551632496b87ab3f1965bfda5dc386b6c71963e"><code>c551632</code></a> Avoid RegExp when we can use simple JS</li> <li><a href="https://github.com/postcss/postcss/commit/89a6b744060eb8dee743351c785a9fbe37d4525a"><code>89a6b74</code></a> Move SECURITY.txt for docs folder to keep GitHub page cleaner</li> <li><a href="https://github.com/postcss/postcss/commit/6ceb8a46af9f9de821faee98f861bdf84617347b"><code>6ceb8a4</code></a> Create SECURITY.md</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.5.0...8.5.10">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evroon/bracket/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
6cb1ffffb3 |
Bump i18next-http-backend from 3.0.2 to 3.0.5 in /frontend (#1669)
Bumps [i18next-http-backend](https://github.com/i18next/i18next-http-backend) from 3.0.2 to 3.0.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md">i18next-http-backend's changelog</a>.</em></p> <blockquote> <h3>3.0.5</h3> <p>Security release — all issues found via an internal audit. See published advisory <a href="https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-q89c-q3h5-w34g">GHSA-q89c-q3h5-w34g</a>.</p> <ul> <li>security: refuse to build request URLs when <code>lng</code> or <code>ns</code> values contain path-traversal, URL-structure (<code>?</code>, <code>#</code>, <code>%</code>, <code>@</code>, whitespace), path separators, control characters, prototype keys, or exceed 128 chars. Prevents path traversal / SSRF / URL injection via attacker-controlled language-code values. <code>isSafeUrlSegment</code> is permissive for legitimate i18next language codes (any BCP-47-like shape, underscores, hyphens, dots, <code>+</code>-joined multi-language requests) (<a href="https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-q89c-q3h5-w34g">GHSA-q89c-q3h5-w34g</a>)</li> <li>security: per-instance <code>omitFetchOptions</code> — the fetch-options-stripping fallback is now scoped to a single backend instance via <code>options._omitFetchOptions</code> instead of a module-level boolean. One instance hitting a "not implemented" fetch error no longer permanently strips <code>requestOptions</code> (including <code>credentials</code>, <code>mode</code>, <code>cache</code>) from every other backend instance in the same process</li> <li>security: strip CR/LF/NUL and other C0/C1 control characters from <code>lng</code>/<code>ns</code> / URL values before they appear in error-callback strings (CWE-117 log forging)</li> <li>security: redact <code>user:password</code> credentials from URLs before including them in error-callback strings — prevents leaking basic-auth credentials embedded in <code>loadPath</code> / <code>addPath</code></li> <li>security: iterate own enumerable keys only (<code>Object.keys</code> + prototype-key guard) in <code>addQueryString</code> and in the <code>customHeaders</code> loop in XHR mode — prevents prototype-pollution amplification into the URL and request headers</li> <li>chore: ignore <code>.env*</code> and <code>*.pem</code>/<code>*.key</code> files in <code>.gitignore</code></li> </ul> <h3>3.0.4</h3> <ul> <li>use own interpolation function for loadPath and addPath instead of relying on i18next's interpolator <a href="https://redirect.github.com/i18next/i18next/issues/2420">i18next#2420</a> — this means only <code>{{lng}}</code> and <code>{{ns}}</code> placeholders are supported; custom interpolation prefix/suffix from i18next config no longer applies to backend paths</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-http-backend/commit/5757fa3283bff31bd75e75598c3bcb44179bd892"><code>5757fa3</code></a> 3.0.5</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/4cee84f229c637b9c182366d3156f726d407a621"><code>4cee84f</code></a> security: hardening for 3.0.5</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/4cbc48741128d9b1f6cceb43edabfbec84c92615"><code>4cbc487</code></a> Bump next from 16.2.1 to 16.2.3 in /example/next (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/180">#180</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/0d7dcbb09989d358b3af9a67658469ae8ed361dc"><code>0d7dcbb</code></a> make last change more clear</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/c740e013ab5ff4ea3a71f9e0842a302bdf4147ae"><code>c740e01</code></a> year</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/e1dc72b3fb016932959d2bf796d94985baca7050"><code>e1dc72b</code></a> changelog fix</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/4dbb4851ff53b0058d8f0a254779b45c839e6c24"><code>4dbb485</code></a> 3.0.4</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/5f33a0c2d72f8f9c1e0add30b9b75a0c2edeb7b6"><code>5f33a0c</code></a> use own interpolation function for loadPath and addPath instead of relying on...</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/681c09d12ebfafef09351b784d2e7b250328879f"><code>681c09d</code></a> update ci actions</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/e63ff163717ba02c589e27fa81cc881add892fbd"><code>e63ff16</code></a> adjust deno test</li> <li>Additional commits viewable in <a href="https://github.com/i18next/i18next-http-backend/compare/v3.0.2...v3.0.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evroon/bracket/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Erik Vroon
|
aa5ff361a7 | Update deps (#1663) | ||
|
dependabot[bot]
|
737ba642f3 |
Bump @vitejs/plugin-react from 5.2.0 to 6.0.1 in /frontend (#1658)
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.2.0 to 6.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/releases"><code>@vitejs/plugin-react</code>'s releases</a>.</em></p> <blockquote> <h2>plugin-react@6.0.1</h2> <h3>Expand <code>@rolldown/plugin-babel</code> peer dep range (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1146">#1146</a>)</h3> <p>Expanded <code>@rolldown/plugin-babel</code> peer dep range to include <code>^0.2.0</code>.</p> <h2>plugin-react@6.0.0</h2> <h3>Remove Babel Related Features (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1123">#1123</a>)</h3> <p>Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.</p> <p>If you are using Babel, you can use <code>@rolldown/plugin-babel</code> together with this plugin:</p> <pre lang="diff"><code> import { defineConfig } from 'vite' import react from '@vitejs/plugin-react' +import babel from '@rolldown/plugin-babel' <p>export default defineConfig({ plugins: [</p> <ul> <li> <pre><code>react({ </code></pre> </li> <li> <pre><code> babel: { </code></pre> </li> <li> <pre><code> plugins: ['@babel/plugin-proposal-throw-expressions'], </code></pre> </li> <li> <pre><code> }, </code></pre> </li> <li> <pre><code>}), </code></pre> </li> </ul> <ul> <li> <pre><code>react(), </code></pre> </li> <li> <pre><code>babel({ </code></pre> </li> <li> <pre><code> plugins: ['@babel/plugin-proposal-throw-expressions'], </code></pre> </li> <li> <pre><code>}), </code></pre> ] }) </code></pre></li> </ul> <p>For React compiler users, you can use <code>reactCompilerPreset</code> for easier setup with preconfigured filter to improve build performance:</p> <pre lang="diff"><code> import { defineConfig } from 'vite' -import react from '@vitejs/plugin-react' +import react, { reactCompilerPreset } from '@vitejs/plugin-react' +import babel from '@rolldown/plugin-babel' <p>export default defineConfig({ plugins: [</p> <ul> <li>react({</li> <li> <pre><code> babel: { </code></pre> </li> <li> <pre><code> plugins: ['babel-plugin-react-compiler'], </code></pre> </li> <li> <pre><code> }, </code></pre> </li> <li>}),</li> </ul> <ul> <li>react(),</li> <li>babel({</li> <li> <pre><code> presets: [reactCompilerPreset()] </code></pre> </li> </ul> <p></tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md"><code>@vitejs/plugin-react</code>'s changelog</a>.</em></p> <blockquote> <h2>6.0.1 (2026-03-13)</h2> <h3>Expand <code>@rolldown/plugin-babel</code> peer dep range (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1146">#1146</a>)</h3> <p>Expanded <code>@rolldown/plugin-babel</code> peer dep range to include <code>^0.2.0</code>.</p> <h2>6.0.0 (2026-03-12)</h2> <h2>6.0.0-beta.0 (2026-03-03)</h2> <h3>Remove Babel Related Features (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1123">#1123</a>)</h3> <p>Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.</p> <p>If you are using Babel, you can use <code>@rolldown/plugin-babel</code> together with this plugin:</p> <pre lang="diff"><code> import { defineConfig } from 'vite' import react from '@vitejs/plugin-react' +import babel from '@rolldown/plugin-babel' <p>export default defineConfig({ plugins: [</p> <ul> <li> <pre><code>react({ </code></pre> </li> <li> <pre><code> babel: { </code></pre> </li> <li> <pre><code> plugins: ['@babel/plugin-proposal-throw-expressions'], </code></pre> </li> <li> <pre><code> }, </code></pre> </li> <li> <pre><code>}), </code></pre> </li> </ul> <ul> <li> <pre><code>react(), </code></pre> </li> <li> <pre><code>babel({ </code></pre> </li> <li> <pre><code> plugins: ['@babel/plugin-proposal-throw-expressions'], </code></pre> </li> <li> <pre><code>}), </code></pre> ] }) </code></pre></li> </ul> <p>For React compiler users, you can use <code>reactCompilerPreset</code> for easier setup with preconfigured filter to improve build performance:</p> <pre lang="diff"><code> import { defineConfig } from 'vite' -import react from '@vitejs/plugin-react' +import react, { reactCompilerPreset } from '@vitejs/plugin-react' +import babel from '@rolldown/plugin-babel' <p>export default defineConfig({ plugins: [</p> <ul> <li>react({</li> <li> <pre><code> babel: { </code></pre> </li> <li> <pre><code> plugins: ['babel-plugin-react-compiler'], </code></pre> </li> <li> <pre><code> }, </code></pre> </li> </ul> <p></tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/1e94c06995c2afe2d1fee5aea2ef9720d35a7e02"><code>1e94c06</code></a> release: plugin-react@6.0.1</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/77c00c007263e963dc7f6f108d1add8afb3f1d4a"><code>77c00c0</code></a> feat(plugin-react): expand <code>@rolldown/plugin-babel</code> peer dep range (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1146">#1146</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/dcc901236079ef7fa99139f7ba7beebac583f301"><code>dcc9012</code></a> release: plugin-react@6.0.0</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/3a17886073e4f44fb039981492d982d36481b176"><code>3a17886</code></a> docs: add a link to the Oxlint rule for component exports alongside the ESLin...</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/f812135f84907947406cab5913b6d868685db585"><code>f812135</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1140">#1140</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/a0329a082450b3d2293f43fc9fed224506a131b4"><code>a0329a0</code></a> docs(react): clarify react compiler preset filter (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1137">#1137</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/704e0d388b3ecf56d08d3c7aa128c832d38f497e"><code>704e0d3</code></a> release: plugin-react@6.0.0-beta.0</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/ac16acc03798aa5f1cb8dc766106b2c34eaeb06c"><code>ac16acc</code></a> feat(react)!: remove babel (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1123">#1123</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/f01b30cd09ea3bf758993aaa29fda7f588f76ab9"><code>f01b30c</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1127">#1127</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/b1014bd5582627aaa38a0bef8aaab1ef2522769b"><code>b1014bd</code></a> chore(react): add changelog for <a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1124">#1124</a></li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
|
3754040f22 |
Bump vite from 7.3.2 to 8.0.5 in /frontend (#1641)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 8.0.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.0.5</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.4</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@8.0.3</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.0.3/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.3</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.3/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@8.0.2</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.0.2/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.2</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@8.0.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.0.1/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.0.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.0.1/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@8.0.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.0.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.0.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.0.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.0-beta.18</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.0-beta.18/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.0-beta.17</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.0-beta.17/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.0-beta.16</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.0-beta.16/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.0-beta.15</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.0-beta.15/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.0-beta.14</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.0-beta.14/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.4...v8.0.5">8.0.5</a> (2026-04-06)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li>apply server.fs check to env transport (<a href="https://redirect.github.com/vitejs/vite/issues/22159">#22159</a>) (<a href="https://github.com/vitejs/vite/commit/f02d9fde0b195afe3ea2944414186962fbbe41e0">f02d9fd</a>)</li> <li>avoid path traversal with optimize deps sourcemap handler (<a href="https://redirect.github.com/vitejs/vite/issues/22161">#22161</a>) (<a href="https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694">79f002f</a>)</li> <li>check <code>server.fs</code> after stripping query as well (<a href="https://redirect.github.com/vitejs/vite/issues/22160">#22160</a>) (<a href="https://github.com/vitejs/vite/commit/a9a3df299378d9cbc5f069e3536a369f8188c8ff">a9a3df2</a>)</li> <li>disallow referencing files outside the package from sourcemap (<a href="https://redirect.github.com/vitejs/vite/issues/22158">#22158</a>) (<a href="https://github.com/vitejs/vite/commit/f05f50173461789e0f1323fe06b51f18ca41c132">f05f501</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.3...v8.0.4">8.0.4</a> (2026-04-06)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li>allow esbuild 0.28 as peer deps (<a href="https://redirect.github.com/vitejs/vite/issues/22155">#22155</a>) (<a href="https://github.com/vitejs/vite/commit/b0da97372f5dba73e78035d1cc7680466ff6cf7f">b0da973</a>)</li> <li><strong>hmr:</strong> truncate list of files on hmr update (<a href="https://redirect.github.com/vitejs/vite/issues/21535">#21535</a>) (<a href="https://github.com/vitejs/vite/commit/d00e806d7be15ebbfe7875e9244963d80ee8b142">d00e806</a>)</li> <li><strong>optimizer:</strong> log when dependency scanning or bundling takes over 1s (<a href="https://redirect.github.com/vitejs/vite/issues/21797">#21797</a>) (<a href="https://github.com/vitejs/vite/commit/f61a1ab33b05dc6f6a7eda6e8bc9c4c5b9aab133">f61a1ab</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><code>hasBothRollupOptionsAndRolldownOptions</code> should return <code>false</code> for proxy case (<a href="https://redirect.github.com/vitejs/vite/issues/22043">#22043</a>) (<a href="https://github.com/vitejs/vite/commit/99897d27b44dd73307fa03e2f11f0baa1a1dc939">99897d2</a>)</li> <li>add types for <code>vite/modulepreload-polyfill</code> (<a href="https://redirect.github.com/vitejs/vite/issues/22126">#22126</a>) (<a href="https://github.com/vitejs/vite/commit/17330d2b9e132460f194d6d4b547cfee7e25c788">17330d2</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22073">#22073</a>) (<a href="https://github.com/vitejs/vite/commit/6daa10ff1e8d15a90f49d8dd909ff208da85d6d8">6daa10f</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22143">#22143</a>) (<a href="https://github.com/vitejs/vite/commit/22b016612703320db45c64a2fe44472051ef5ec5">22b0166</a>)</li> <li><strong>resolve:</strong> resolve tsconfig paths starting with <code>#</code> (<a href="https://redirect.github.com/vitejs/vite/issues/22038">#22038</a>) (<a href="https://github.com/vitejs/vite/commit/3460fc55aa89aef4103d2c05ac2e446032511a6d">3460fc5</a>)</li> <li><strong>ssr:</strong> use browser platform for webworker SSR builds (fix <a href="https://redirect.github.com/vitejs/vite/issues/21969">#21969</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/21963">#21963</a>) (<a href="https://github.com/vitejs/vite/commit/364c2273a121dad4d93ec3b9ec87ffbe0d6e860b">364c227</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>add <code>environment.fetchModule</code> documentation (<a href="https://redirect.github.com/vitejs/vite/issues/22035">#22035</a>) (<a href="https://github.com/vitejs/vite/commit/54229e78631ebf10d1db767b51ea85f3cf06718a">54229e7</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/21989">#21989</a>) (<a href="https://github.com/vitejs/vite/commit/0ded6274579e8bda6b22a7ba93b15d15b4c28b78">0ded627</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>upgrade to typescript 6 (<a href="https://redirect.github.com/vitejs/vite/issues/22110">#22110</a>) (<a href="https://github.com/vitejs/vite/commit/cc41398c2cf0bb5061cf0ca5dc3b408ae7e41191">cc41398</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.2...v8.0.3">8.0.3</a> (2026-03-26)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li>update rolldown to 1.0.0-rc.12 (<a href="https://redirect.github.com/vitejs/vite/issues/22024">#22024</a>) (<a href="https://github.com/vitejs/vite/commit/84164ef47b24b1de114f1c29446a9e650825d4ea">84164ef</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>html:</strong> cache unfiltered CSS list to prevent missing styles across entries (<a href="https://redirect.github.com/vitejs/vite/issues/22017">#22017</a>) (<a href="https://github.com/vitejs/vite/commit/5464190a3ee8f23db20004e7818186fbcc32b0e5">5464190</a>)</li> <li><strong>module-runner:</strong> handle non-ascii characters in base64 sourcemaps (<a href="https://redirect.github.com/vitejs/vite/issues/21985">#21985</a>) (<a href="https://github.com/vitejs/vite/commit/77c95bff834c43f8be9fe513c10b5393805a7487">77c95bf</a>)</li> <li><strong>module-runner:</strong> skip re-import if the runner is closed (<a href="https://redirect.github.com/vitejs/vite/issues/22020">#22020</a>) (<a href="https://github.com/vitejs/vite/commit/ee2c2cd2c2ce3f53088bd2313fa23e9d52a49b4f">ee2c2cd</a>)</li> <li><strong>optimizer:</strong> scan is not resolving sub path import if used in a glob import (<a href="https://redirect.github.com/vitejs/vite/issues/22018">#22018</a>) (<a href="https://github.com/vitejs/vite/commit/ddfe20d19e95a323fa3c8d2c19a02c4e02f93824">ddfe20d</a>)</li> <li><strong>ssr:</strong> ssrTransform incorrectly rewrites <code>meta</code> identifier inside <code>import.meta</code> when a binding named <code>meta</code> exists (<a href="https://redirect.github.com/vitejs/vite/issues/22019">#22019</a>) (<a href="https://github.com/vitejs/vite/commit/cff5f0cca5f08c2ce50f233441485e10b6e115e9">cff5f0c</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/1a12d4ca4c62eedaeaf734d722b27ab17b5b1dd0"><code>1a12d4c</code></a> release: v8.0.5</li> <li><a href="https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694"><code>79f002f</code></a> fix: avoid path traversal with optimize deps sourcemap handler (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161">#22161</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/a9a3df299378d9cbc5f069e3536a369f8188c8ff"><code>a9a3df2</code></a> fix: check <code>server.fs</code> after stripping query as well (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22160">#22160</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/f02d9fde0b195afe3ea2944414186962fbbe41e0"><code>f02d9fd</code></a> fix: apply server.fs check to env transport (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159">#22159</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/f05f50173461789e0f1323fe06b51f18ca41c132"><code>f05f501</code></a> fix: disallow referencing files outside the package from sourcemap (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22158">#22158</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/7339bdc915c297e16e6530f6ebcbb2509cb57f24"><code>7339bdc</code></a> release: v8.0.4</li> <li><a href="https://github.com/vitejs/vite/commit/54229e78631ebf10d1db767b51ea85f3cf06718a"><code>54229e7</code></a> docs: add <code>environment.fetchModule</code> documentation (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22035">#22035</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/b0da97372f5dba73e78035d1cc7680466ff6cf7f"><code>b0da973</code></a> feat: allow esbuild 0.28 as peer deps (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22155">#22155</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/22b016612703320db45c64a2fe44472051ef5ec5"><code>22b0166</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22143">#22143</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/17330d2b9e132460f194d6d4b547cfee7e25c788"><code>17330d2</code></a> fix: add types for <code>vite/modulepreload-polyfill</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22126">#22126</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.0.5/packages/vite">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: evroon <11857441+evroon@users.noreply.github.com> |
||
|
dependabot[bot]
|
cbee85a53d |
Bump axios from 1.14.0 to 1.15.0 in /frontend (#1655)
Bumps [axios](https://github.com/axios/axios) from 1.14.0 to 1.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v1.15.0</h2> <p>This release delivers two critical security patches, adds runtime support for Deno and Bun, and includes significant CI hardening, documentation improvements, and routine dependency updates.</p> <h2>⚠️ Important Changes</h2> <ul> <li><strong>Deprecation:</strong> <code>url.parse()</code> usage has been replaced to address Node.js deprecation warnings. If you are on a recent version of Node.js, this resolves console warnings you may have been seeing. (<strong><a href="https://redirect.github.com/axios/axios/issues/10625">#10625</a></strong>)</li> </ul> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Proxy Handling:</strong> Fixed a <code>no_proxy</code> hostname normalisation bypass that could lead to Server-Side Request Forgery (SSRF). (<strong><a href="https://redirect.github.com/axios/axios/issues/10661">#10661</a></strong>)</li> <li><strong>Header Injection:</strong> Fixed an unrestricted cloud metadata exfiltration vulnerability via a header injection chain. (<strong><a href="https://redirect.github.com/axios/axios/issues/10660">#10660</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>Runtime Support:</strong> Added compatibility checks and documentation for Deno and Bun environments. (<strong><a href="https://redirect.github.com/axios/axios/issues/10652">#10652</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10653">#10653</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>CI Security:</strong> Hardened workflow permissions to least privilege, added the <code>zizmor</code> security scanner, pinned action versions, and gated npm publishing with OIDC and environment protection. (<strong><a href="https://redirect.github.com/axios/axios/issues/10618">#10618</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10619">#10619</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10627">#10627</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10637">#10637</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10666">#10666</a></strong>)</li> <li><strong>Dependencies:</strong> Bumped <code>serialize-javascript</code>, <code>handlebars</code>, <code>picomatch</code>, <code>vite</code>, and <code>denoland/setup-deno</code> to latest versions. Added a 7-day Dependabot cooldown period. (<strong><a href="https://redirect.github.com/axios/axios/issues/10574">#10574</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10572">#10572</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10568">#10568</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10663">#10663</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10664">#10664</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10665">#10665</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10669">#10669</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10670">#10670</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10616">#10616</a></strong>)</li> <li><strong>Documentation:</strong> Unified docs, improved <code>beforeRedirect</code> credential leakage example, clarified <code>withCredentials</code>/<code>withXSRFToken</code> behaviour, HTTP/2 support notes, async/await timeout error handling, header case preservation, and various typo fixes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10649">#10649</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10624">#10624</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/7452">#7452</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/7471">#7471</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10654">#10654</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10644">#10644</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10589">#10589</a></strong>)</li> <li><strong>Housekeeping:</strong> Removed stale files, regenerated lockfile, and updated sponsor scripts and blocks. (<strong><a href="https://redirect.github.com/axios/axios/issues/10584">#10584</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10650">#10650</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10582">#10582</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10640">#10640</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10659">#10659</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10668">#10668</a></strong>)</li> <li><strong>Tests:</strong> Added regression coverage for urlencoded <code>Content-Type</code> casing. (<strong><a href="https://redirect.github.com/axios/axios/issues/10573">#10573</a></strong>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve Axios:</p> <ul> <li><strong><a href="https://github.com/raashish1601"><code>@raashish1601</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10573">#10573</a></strong>)</li> <li><strong><a href="https://github.com/Kilros0817"><code>@Kilros0817</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10625">#10625</a></strong>)</li> <li><strong><a href="https://github.com/ashstrc"><code>@ashstrc</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10624">#10624</a></strong>)</li> <li><strong><a href="https://github.com/Abhi3975"><code>@Abhi3975</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10589">#10589</a></strong>)</li> <li><strong><a href="https://github.com/theamodhshetty"><code>@theamodhshetty</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/7452">#7452</a></strong>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2><a href="https://github.com/axios/axios/compare/v1.13.2...v1.13.3">1.13.3</a> (2026-01-20)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>http2:</strong> Use port 443 for HTTPS connections by default. (<a href="https://redirect.github.com/axios/axios/issues/7256">#7256</a>) (<a href="https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e">d7e6065</a>)</li> <li><strong>interceptor:</strong> handle the error in the same interceptor (<a href="https://redirect.github.com/axios/axios/issues/6269">#6269</a>) (<a href="https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89">5945e40</a>)</li> <li>main field in package.json should correspond to cjs artifacts (<a href="https://redirect.github.com/axios/axios/issues/5756">#5756</a>) (<a href="https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04">7373fbf</a>)</li> <li><strong>package.json:</strong> add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (<a href="https://redirect.github.com/axios/axios/issues/5754">#5754</a>) (<a href="https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8">b89217e</a>)</li> <li>silentJSONParsing=false should throw on invalid JSON (<a href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>) (<a href="https://redirect.github.com/axios/axios/issues/7257">#7257</a>) (<a href="https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf">7d19335</a>)</li> <li>turn AxiosError into a native error (<a href="https://redirect.github.com/axios/axios/issues/5394">#5394</a>) (<a href="https://redirect.github.com/axios/axios/issues/5558">#5558</a>) (<a href="https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b">1c6a86d</a>)</li> <li><strong>types:</strong> add handlers to AxiosInterceptorManager interface (<a href="https://redirect.github.com/axios/axios/issues/5551">#5551</a>) (<a href="https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a">8d1271b</a>)</li> <li><strong>types:</strong> restore AxiosError.cause type from unknown to Error (<a href="https://redirect.github.com/axios/axios/issues/7327">#7327</a>) (<a href="https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b">d8233d9</a>)</li> <li>unclear error message is thrown when specifying an empty proxy authorization (<a href="https://redirect.github.com/axios/axios/issues/6314">#6314</a>) (<a href="https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29">6ef867e</a>)</li> </ul> <h3>Features</h3> <ul> <li>add <code>undefined</code> as a value in AxiosRequestConfig (<a href="https://redirect.github.com/axios/axios/issues/5560">#5560</a>) (<a href="https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd">095033c</a>)</li> <li>add automatic minor and patch upgrades to dependabot (<a href="https://redirect.github.com/axios/axios/issues/6053">#6053</a>) (<a href="https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed">65a7584</a>)</li> <li>add Node.js coverage script using c8 (closes <a href="https://redirect.github.com/axios/axios/issues/7289">#7289</a>) (<a href="https://redirect.github.com/axios/axios/issues/7294">#7294</a>) (<a href="https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a">ec9d94e</a>)</li> <li>added copilot instructions (<a href="https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26">3f83143</a>)</li> <li>compatibility with frozen prototypes (<a href="https://redirect.github.com/axios/axios/issues/6265">#6265</a>) (<a href="https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012">860e033</a>)</li> <li>enhance pipeFileToResponse with error handling (<a href="https://redirect.github.com/axios/axios/issues/7169">#7169</a>) (<a href="https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552">88d7884</a>)</li> <li><strong>types:</strong> Intellisense for string literals in a widened union (<a href="https://redirect.github.com/axios/axios/issues/6134">#6134</a>) (<a href="https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5">f73474d</a>), closes <a href="https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329">microsoft/TypeScript#33471</a></li> </ul> <h3>Reverts</h3> <ul> <li>Revert "fix: silentJSONParsing=false should throw on invalid JSON (<a href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>) (<a href="https://redirect.github.com/axios/axios/issues/7">#7</a>…" (<a href="https://redirect.github.com/axios/axios/issues/7298">#7298</a>) (<a href="https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a">a4230f5</a>), closes <a href="https://redirect.github.com/axios/axios/issues/7253">#7253</a> <a href="https://redirect.github.com/axios/axios/issues/7">#7</a> <a href="https://redirect.github.com/axios/axios/issues/7298">#7298</a></li> <li><strong>deps:</strong> bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (<a href="https://redirect.github.com/axios/axios/issues/7334">#7334</a>) (<a href="https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a">2d6ad5e</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/ashvin2005" title="+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218) [#7218](https://github.com/axios/axios/issues/7218) )">Ashvin Tiwari</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/mochinikunj" title="+940/-12 ([#7294](https://github.com/axios/axios/issues/7294) [#7294](https://github.com/axios/axios/issues/7294) )">Nikunj Mochi</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/imanchalsingh" title="+544/-102 ([#7169](https://github.com/axios/axios/issues/7169) [#7185](https://github.com/axios/axios/issues/7185) )">Anchal Singh</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/jasonsaayman" title="+317/-73 ([#7334](https://github.com/axios/axios/issues/7334) [#7298](https://github.com/axios/axios/issues/7298) )">jasonsaayman</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/brodo" title="+99/-120 ([#5558](https://github.com/axios/axios/issues/5558) )">Julian Dax</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/AKASHDHARDUBEY" title="+167/-0 ([#7287](https://github.com/axios/axios/issues/7287) [#7288](https://github.com/axios/axios/issues/7288) )">Akash Dhar Dubey</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/madhumitaaa" title="+20/-68 ([#7198](https://github.com/axios/axios/issues/7198) )">Madhumita</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Tackoil" title="+80/-2 ([#6269](https://github.com/axios/axios/issues/6269) )">Tackoil</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/justindhillon" title="+41/-41 ([#6324](https://github.com/axios/axios/issues/6324) [#6315](https://github.com/axios/axios/issues/6315) )">Justin Dhillon</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Rudrxxx" title="+71/-2 ([#7257](https://github.com/axios/axios/issues/7257) )">Rudransh</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/WuMingDao" title="+36/-36 ([#7215](https://github.com/axios/axios/issues/7215) )">WuMingDao</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/codenomnom" title="+70/-0 ([#7201](https://github.com/axios/axios/issues/7201) [#7201](https://github.com/axios/axios/issues/7201) )">codenomnom</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Nandann018-ux" title="+60/-10 ([#7272](https://github.com/axios/axios/issues/7272) )">Nandan Acharya</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/KernelDeimos" title="+22/-40 ([#7042](https://github.com/axios/axios/issues/7042) )">Eric Dubé</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/tiborpilz" title="+40/-4 ([#5551](https://github.com/axios/axios/issues/5551) )">Tibor Pilz</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/joaoGabriel55" title="+31/-4 ([#6314](https://github.com/axios/axios/issues/6314) )">Gabriel Quaresma</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/turadg" title="+23/-6 ([#6265](https://github.com/axios/axios/issues/6265) )">Turadg Aleahmad</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7"><code>772a4e5</code></a> chore(release): prepare release 1.15.0 (<a href="https://redirect.github.com/axios/axios/issues/10671">#10671</a>)</li> <li><a href="https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22"><code>4b07137</code></a> chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (<a href="https://redirect.github.com/axios/axios/issues/10663">#10663</a>)</li> <li><a href="https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6"><code>51e57b3</code></a> chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (<a href="https://redirect.github.com/axios/axios/issues/10664">#10664</a>)</li> <li><a href="https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa"><code>fba1a77</code></a> chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (<a href="https://redirect.github.com/axios/axios/issues/10665">#10665</a>)</li> <li><a href="https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e"><code>0bf6e28</code></a> chore(deps): bump denoland/setup-deno in the github-actions group (<a href="https://redirect.github.com/axios/axios/issues/10669">#10669</a>)</li> <li><a href="https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661"><code>8107157</code></a> chore(deps-dev): bump the development_dependencies group with 4 updates (<a href="https://redirect.github.com/axios/axios/issues/10670">#10670</a>)</li> <li><a href="https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542"><code>e66530e</code></a> ci: require npm-publish environment for releases (<a href="https://redirect.github.com/axios/axios/issues/10666">#10666</a>)</li> <li><a href="https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2"><code>49f23cb</code></a> chore(sponsor): update sponsor block (<a href="https://redirect.github.com/axios/axios/issues/10668">#10668</a>)</li> <li><a href="https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"><code>3631854</code></a> fix: unrestricted cloud metadata exfiltration via header injection chain (<a href="https://redirect.github.com/axios/axios/issues/10">#10</a>...</li> <li><a href="https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"><code>fb3befb</code></a> fix: no_proxy hostname normalization bypass leads to ssrf (<a href="https://redirect.github.com/axios/axios/issues/10661">#10661</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.14.0...v1.15.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evroon/bracket/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
9654bfdaa8 |
Bump react-router from 7.13.0 to 7.14.0 in /frontend (#1645)
Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) from 7.13.0 to 7.14.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/releases">react-router's releases</a>.</em></p> <blockquote> <h2>v7.14.0</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140</a></p> <h2>v7.13.2</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132</a></p> <h2>v7.13.1</h2> <p>See the changelog for release notes: <a href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md">react-router's changelog</a>.</em></p> <blockquote> <h2>7.14.0</h2> <h3>Patch Changes</h3> <ul> <li> <p>UNSTABLE RSC FRAMEWORK MODE BREAKING CHANGE - Existing route module exports remain unchanged from stable v7 non-RSC mode, but new exports are added for RSC mode. If you want to use RSC features, you will need to update your route modules to export the new annotations. (<a href="https://redirect.github.com/remix-run/react-router/pull/14901">#14901</a>)</p> <p>If you are using RSC framework mode currently, you will need to update your route modules to the new conventions. The following route module components have their own mutually exclusive server component counterparts:</p> <table> <thead> <tr> <th>Server Component Export</th> <th>Client Component</th> </tr> </thead> <tbody> <tr> <td><code>ServerComponent</code></td> <td><code>default</code></td> </tr> <tr> <td><code>ServerErrorBoundary</code></td> <td><code>ErrorBoundary</code></td> </tr> <tr> <td><code>ServerLayout</code></td> <td><code>Layout</code></td> </tr> <tr> <td><code>ServerHydrateFallback</code></td> <td><code>HydrateFallback</code></td> </tr> </tbody> </table> <p>If you were previously exporting a <code>ServerComponent</code>, your <code>ErrorBoundary</code>, <code>Layout</code>, and <code>HydrateFallback</code> were also server components. If you want to keep those as server components, you can rename them and prefix them with <code>Server</code>. If you were previously importing the implementations of those components from a client module, you can simply inline them.</p> <p>Example:</p> <p>Before</p> <pre lang="tsx"><code>import { ErrorBoundary as ClientErrorBoundary } from "./client"; <p>export function ServerComponent() {<br /> // ...<br /> }</p> <p>export function ErrorBoundary() {<br /> return <ClientErrorBoundary />;<br /> }</p> <p>export function Layout() {<br /> // ...<br /> }</p> <p>export function HydrateFallback() {<br /> // ...<br /> }<br /> </code></pre></p> <p>After</p> <pre lang="tsx"><code>export function ServerComponent() { // ... } <p>export function ErrorBoundary() {<br /> // previous implementation of ClientErrorBoundary, this is now a client component<br /> </code></pre></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/remix-run/react-router/commit/e31077b0c380d9764dbced4c753e9ff99387045d"><code>e31077b</code></a> chore: Update version for release (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14945">#14945</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/6683e85a9d7d607a45a3f6374afcc598a474f602"><code>6683e85</code></a> chore: Update version for release (pre) (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14943">#14943</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/49a2ed5b482af282536baa394f5ade1e1d3f703f"><code>49a2ed5</code></a> Merge branch 'main' into release-next</li> <li><a href="https://github.com/remix-run/react-router/commit/e8b3c3aea21e3a6740d9fb34f1686071d04dcc65"><code>e8b3c3a</code></a> feat: RSC framework mode prerender (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14907">#14907</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/82eca19e1762eb9b4ae83e4eb2bdf279e63c60ee"><code>82eca19</code></a> docs: clarify useViewTransitionState matches to or from path (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14922">#14922</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/d4391881e2c9610fe9081582c7bb2c7c05313cf3"><code>d439188</code></a> feat:! new RSC framework mode module API (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14901">#14901</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/98641e215cfd52b78dde04133d844836331b1aa7"><code>98641e2</code></a> feat: rsc prefetch (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14902">#14902</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/903d924db565506f29552adc83332c9adb799092"><code>903d924</code></a> chore: format</li> <li><a href="https://github.com/remix-run/react-router/commit/0d577486af9e79628debfddabf3aad9f9de272e5"><code>0d57748</code></a> Merge branch 'release-next' into dev</li> <li><a href="https://github.com/remix-run/react-router/commit/921db15de3b7026b992df08929488b68fe6b9885"><code>921db15</code></a> chore: format</li> <li>Additional commits viewable in <a href="https://github.com/remix-run/react-router/commits/react-router@7.14.0/packages/react-router">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d53799db05 |
Bump @typescript-eslint/parser from 8.57.0 to 8.58.0 in /frontend (#1644)
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 8.57.0 to 8.58.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.58.0</h2> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> crash in <code>no-unnecessary-type-arguments</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li> <li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index signatures (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing unknown RegExp flags (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>ej shafran <a href="https://github.com/ej-shafran"><code>@ej-shafran</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>GG ZIBLAKING</li> <li>milkboy2564 <a href="https://github.com/SeolJaeHyeok"><code>@SeolJaeHyeok</code></a></li> <li>teee32 <a href="https://github.com/teee32"><code>@teee32</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.57.2</h2> <h2>8.57.2 (2026-03-23)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove dangling closing parenthesis (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li> <li><strong>eslint-plugin:</strong> [array-type] ignore Array and ReadonlyArray without type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li> <li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned generics in extends or implements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on unwrapping generic (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] preserve type alias infomation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li> <li><strong>typescript-estree:</strong> skip createIsolatedProgram fallback for projectService (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>Konv Suu</li> <li>mdm317</li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li> <li>RyoheiYamamoto</li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Tamashoo <a href="https://github.com/Tamashoo"><code>@Tamashoo</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.58.0 (2026-03-30)</h2> <h3>🚀 Features</h3> <ul> <li>support TypeScript 6 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.57.2 (2026-03-23)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.57.1 (2026-03-16)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a> chore(release): publish 8.58.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a> feat: support TypeScript 6 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12124">#12124</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a> chore(release): publish 8.57.2</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a> chore(release): publish 8.57.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
eeebb5316a |
Bump @hey-api/openapi-ts from 0.94.0 to 0.95.0 in /frontend (#1643)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from 0.94.0 to 0.95.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hey-api/openapi-ts/releases"><code>@hey-api/openapi-ts</code>'s releases</a>.</em></p> <blockquote> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.95.0</h2> <h3>Minor Changes</h3> <ul> <li><strong>plugin(valibot)</strong>: remove request data schema (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3671">#3671</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/96f60adb6af144e39133884e97e74a6693b6c059"><code>96f60ad</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Validator request schemas</h3> <p>Valibot plugin no longer exports composite request <code>Data</code> schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with <code>shouldExtract</code>:</p> <pre lang="js"><code>export default { input: "hey-api/backend", // sign up at app.heyapi.dev output: "src/client", plugins: [ // ...other plugins { name: "sdk", validator: "valibot", }, { name: "valibot", requests: { shouldExtract: true, }, }, ], }; </code></pre> <ul> <li><strong>internal</strong>: remove <code>plugin.getSymbol()</code> function (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3671">#3671</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/96f60adb6af144e39133884e97e74a6693b6c059"><code>96f60ad</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Removed <code>plugin.getSymbol()</code> function</h3> <p>This function has been removed. You can use <code>plugin.querySymbol()</code> instead. It accepts the same arguments and returns the same result.</p> <ul> <li><strong>plugin(zod)</strong>: remove request data schema (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3671">#3671</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/96f60adb6af144e39133884e97e74a6693b6c059"><code>96f60ad</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Validator request schemas</h3> <p>Zod plugin no longer exports composite request <code>Data</code> schemas. Instead, each layer is exported as a separate schema. If you're using validators with SDKs, you can preserve the composite schema with <code>shouldExtract</code>:</p> <pre lang="js"><code>export default { input: "hey-api/backend", // sign up at app.heyapi.dev output: "src/client", plugins: [ // ...other plugins { name: "sdk", validator: "zod", </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/openapi-ts/commit/5e1eaea77beffc56273619988494bf826514fb28"><code>5e1eaea</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3664">#3664</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/acd0e9d4b1bdeb0c2e8b44d60c36b8dfc466d071"><code>acd0e9d</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/632638ffe258a452d858321ba7585c196ec42c6a"><code>632638f</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3675">#3675</a> from hey-api/refactor/dsl-from-value</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/8aa4698e5eb9e12906c715da14da518d45e72fe6"><code>8aa4698</code></a> refactor: rename fromValue file to from-value</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/11db9af9d60a47a6da428ad3010071c7ddedd205"><code>11db9af</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3674">#3674</a> from hey-api/docs/sponsors-mintlify-3</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/a32e70b5a456ff8650ccaf2c20673adbf746b685"><code>a32e70b</code></a> docs: remove Mintlify from sponsors</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3efbe9ba0d6c4142aaec7adac2cdbc7b19b2ab55"><code>3efbe9b</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3673">#3673</a> from hey-api/docs/sponsors-mintlify-2</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/bd2bf6eb3d1e82086f43f08b77ce1c626b0e6d7b"><code>bd2bf6e</code></a> docs: remove Mintlify from sponsors</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/1162b4a9f54dc15df8aad0076aaf679e938fe53b"><code>1162b4a</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3672">#3672</a> from hey-api/docs/soon-to-vote</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/5f696b7494dd32d1de24ca1830b38793c97a7332"><code>5f696b7</code></a> docs: update soon label to vote</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.94.0...@hey-api/openapi-ts@0.95.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
9d01188714 |
Bump axios from 1.13.5 to 1.14.0 in /frontend (#1642)
Bumps [axios](https://github.com/axios/axios) from 1.13.5 to 1.14.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v1.14.0</h2> <p>This release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.</p> <h2>⚠️ Important Changes</h2> <ul> <li><strong>Breaking Changes:</strong> None identified in this release.</li> <li><strong>Action Required:</strong> If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably <code>proxy-from-env</code> v2 alignment and <code>main</code> entry compatibility fix).</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>Runtime Features:</strong> No new end-user features were introduced in this release.</li> <li><strong>Test Coverage Expansion:</strong> Added broader smoke/module test coverage for CJS and ESM package usage. (<a href="https://redirect.github.com/axios/axios/pull/7510">#7510</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Headers:</strong> Trim trailing CRLF in normalised header values. (<a href="https://redirect.github.com/axios/axios/pull/7456">#7456</a>)</li> <li><strong>HTTP/2:</strong> Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (<a href="https://redirect.github.com/axios/axios/pull/7457">#7457</a>)</li> <li><strong>Fetch Adapter:</strong> Cancel <code>ReadableStream</code> created during request-stream capability probing to prevent async resource leaks. (<a href="https://redirect.github.com/axios/axios/pull/7515">#7515</a>)</li> <li><strong>Proxy Handling:</strong> Fixed env proxy behavior with <code>proxy-from-env</code> v2 usage. (<a href="https://redirect.github.com/axios/axios/pull/7499">#7499</a>)</li> <li><strong>CommonJS Compatibility:</strong> Fixed package <code>main</code> entry regression affecting CJS consumers. (<a href="https://redirect.github.com/axios/axios/pull/7532">#7532</a>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Security/Dependencies:</strong> Updated <code>formidable</code> and refreshed package set to newer versions. (<a href="https://redirect.github.com/axios/axios/pull/7533">#7533</a>, <a href="https://redirect.github.com/axios/axios/pull/10556">#10556</a>)</li> <li><strong>Tooling:</strong> Continued migration to Vitest and modernised CI/test harnesses. (<a href="https://redirect.github.com/axios/axios/pull/7484">#7484</a>, <a href="https://redirect.github.com/axios/axios/pull/7489">#7489</a>, <a href="https://redirect.github.com/axios/axios/pull/7498">#7498</a>)</li> <li><strong>Build/Lint Stack:</strong> Rollup, ESLint, TypeScript, and related dev-dependency updates. (<a href="https://redirect.github.com/axios/axios/pull/7508">#7508</a>, <a href="https://redirect.github.com/axios/axios/pull/7509">#7509</a>, <a href="https://redirect.github.com/axios/axios/pull/7522">#7522</a>)</li> <li><strong>Documentation:</strong> Clarified JSON parsing and adapter-related docs/comments. (<a href="https://redirect.github.com/axios/axios/pull/7398">#7398</a>, <a href="https://redirect.github.com/axios/axios/pull/7460">#7460</a>, <a href="https://redirect.github.com/axios/axios/pull/7478">#7478</a>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve Axios:</p> <ul> <li><a href="https://github.com/aviu16"><code>@aviu16</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7456">#7456</a>)</li> <li><a href="https://github.com/NETIZEN-11"><code>@NETIZEN-11</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7460">#7460</a>)</li> <li><a href="https://github.com/fedotov"><code>@fedotov</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7457">#7457</a>)</li> <li><a href="https://github.com/nthbotast"><code>@nthbotast</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7478">#7478</a>)</li> <li><a href="https://github.com/veeceey"><code>@veeceey</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7398">#7398</a>)</li> <li><a href="https://github.com/penkzhou"><code>@penkzhou</code></a> (<a href="https://redirect.github.com/axios/axios/pull/7515">#7515</a>)</li> </ul> <p><em>Full Changelog: <a href="https://github.com/axios/axios/compare/v1.13.6...v1.14.0">v1.13.6...v1.14.0</a></em></p> <h2>v1.13.6</h2> <p>This release focuses on platform compatibility, error handling improvements, and code quality maintenance.</p> <h2>⚠️ Important Changes</h2> <ul> <li><strong>Breaking Changes:</strong> None identified in this release.</li> <li><strong>Action Required:</strong> Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>React Native Blob Support:</strong> Axios now includes support for React Native Blob objects. Thanks to <a href="https://github.com/moh3n9595"><code>@moh3n9595</code></a> for the initial implementation. (<a href="https://redirect.github.com/axios/axios/pull/5764">#5764</a>)</li> <li><strong>Code Quality:</strong> Implemented prettier across the codebase and resolved associated formatting issues. (<a href="https://redirect.github.com/axios/axios/pull/7385">#7385</a>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Environment Compatibility:</strong> <ul> <li>Fixed module exports for React Native and Browserify environments. (<a href="https://redirect.github.com/axios/axios/pull/7386">#7386</a>)</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/46bee3dea75ef53a8eae49f3b7487e6341de6074"><code>46bee3d</code></a> chore(release): prepare release 1.14.0 (<a href="https://redirect.github.com/axios/axios/issues/10563">#10563</a>)</li> <li><a href="https://github.com/axios/axios/commit/518aff569043116c87ce78e3d83877d5251f2a16"><code>518aff5</code></a> chore: add AI Moderator workflow for spam detection (<a href="https://redirect.github.com/axios/axios/issues/10551">#10551</a>)</li> <li><a href="https://github.com/axios/axios/commit/b7dfda3e7cf9e85f6063d90334318f82842b42d0"><code>b7dfda3</code></a> chore(sponsor): update sponsor block (<a href="https://redirect.github.com/axios/axios/issues/10557">#10557</a>)</li> <li><a href="https://github.com/axios/axios/commit/9aa34d52918c13eaa445d884a24e9e20e71a7a93"><code>9aa34d5</code></a> fix: updated release flow to match the current flows (<a href="https://redirect.github.com/axios/axios/issues/10562">#10562</a>)</li> <li><a href="https://github.com/axios/axios/commit/e9e5ebe483b3f0cecbb5a4c9fa95a316ea5d0645"><code>e9e5ebe</code></a> Update packages to latest version (<a href="https://redirect.github.com/axios/axios/issues/10556">#10556</a>)</li> <li><a href="https://github.com/axios/axios/commit/4d8931ca8a92e53c5dcf02cf46d1016a10e60ec0"><code>4d8931c</code></a> fix: formidable dependency vulnerable to arbitrary (<a href="https://redirect.github.com/axios/axios/issues/7533">#7533</a>)</li> <li><a href="https://github.com/axios/axios/commit/3a6f5c1ae1f9b58198e9f3109896a2c11d017c58"><code>3a6f5c1</code></a> chore(deps-dev): bump <code>@babel/preset-env</code> (<a href="https://redirect.github.com/axios/axios/issues/7531">#7531</a>)</li> <li><a href="https://github.com/axios/axios/commit/bcfd2997dc93b56669dd03b29b83d8a868797937"><code>bcfd299</code></a> fix: bug axios breaks commonjs compatibility main entry (<a href="https://redirect.github.com/axios/axios/issues/7532">#7532</a>)</li> <li><a href="https://github.com/axios/axios/commit/d6dcbfd53e9506d9c8c0b1fd09c4d960bea9b9f0"><code>d6dcbfd</code></a> fix: dependabot uses the correct labels (<a href="https://redirect.github.com/axios/axios/issues/7530">#7530</a>)</li> <li><a href="https://github.com/axios/axios/commit/5dd7ba78b8960fb29e39b6918ee5cb9a2130f15c"><code>5dd7ba7</code></a> chore: upgrade to latest ts (<a href="https://redirect.github.com/axios/axios/issues/7522">#7522</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.13.5...v1.14.0">compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
072becd123 |
Bump @mantine/form from 8.3.7 to 9.0.1 in /frontend (#1640)
Bumps [@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form) from 8.3.7 to 9.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mantinedev/mantine/releases"><code>@mantine/form</code>'s releases</a>.</em></p> <blockquote> <h2>9.0.1</h2> <h2>What's Changed</h2> <ul> <li><code>[@mantine/core]</code> LoadingOverlay: Fix double overlay visible with dark color scheme (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8811">#8811</a>)</li> <li><code>[@mantine/core]</code> RingProgress: Add missing viewBox (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8806">#8806</a>)</li> <li><code>[@mantine/core]</code> Input: Add <code>rootRef</code> prop support</li> <li><code>[@mantine/core]</code> Combobox: Fix <code>refProp</code> not working on <code>Combobox.Target</code> (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8798">#8798</a>)</li> <li><code>[@mantine/mcp-server]</code> Fix stdio transport to comply with MCP spec (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8792">#8792</a>)</li> <li><code>[@mantine/core]</code> Input: Fix <code>aria-invalid="false"</code> attribute being set (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8785">#8785</a>)</li> <li><code>[@mantine/core]</code> Slider: Fix incorrect orientation inheritance from the parent markup (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8791">#8791</a>)</li> <li><code>[@mantine/core]</code> Fix incorrect default placeholder size in PasswordInput and other components (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8793">#8793</a>)</li> <li><code>[@mantine/core]</code> Badge: Fix text being cut off with some fonts (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8788">#8788</a>)</li> <li><code>[@mantine/hooks]</code> use-scroller: Fix element dynamic resizing not being handled correctly (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8800">#8800</a>)</li> <li><code>[@mantine/core]</code> Fix <code>Checkbox.Group</code>, <code>Switch.Group</code>, <code>Radio.Group</code> and <code>Chip.Group</code> not working with generic primitive values (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8801">#8801</a>)</li> <li><code>[@mantine/core]</code> Popover: Fix missing <code>withProps</code> (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8802">#8802</a>)</li> <li><code>[@mantine/core]</code> Accordion: Fix focus ring being cut off (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8797">#8797</a>)</li> <li><code>[@mantine/charts]</code> Add option to fully customize reference lines label (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8790">#8790</a>)</li> <li><code>[@mantine/core]</code> Fix <code>loading</code> prop not being handled correctly in TagsInput and MultiSelect (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8803">#8803</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mantinedev/mantine/compare/9.0.0...9.0.1">https://github.com/mantinedev/mantine/compare/9.0.0...9.0.1</a></p> <h2>9.0.0 🤩</h2> <p><a href="https://mantine.dev/changelog/9-0-0">View changelog with demos on mantine.dev website</a></p> <h2>Migration guide</h2> <p>This changelog covers breaking changes and new features in Mantine 9.0. To migrate your application to Mantine 9.0, follow <a href="https://mantine.dev/guides/8x-to-9x">8.x → 9.x migration guide</a>.</p> <h2>Peer dependencies requirements updates</h2> <p>Starting from Mantine 9.0, the following dependencies are required:</p> <ul> <li>React 19.2+ for all <code>@mantine/*</code> packages</li> <li>Tiptap 3+ for <code>@mantine/tiptap</code> (<a href="https://mantine.dev/guides/tiptap-3-migration">migration guide</a>)</li> <li>Recharts 3+ for <code>@mantine/charts</code> (no migration required)</li> </ul> <h2>New <code>@mantine/schedule</code> package</h2> <p>New <a href="https://mantine.dev/schedule/getting-started"><code>@mantine/schedule</code></a> package provides a complete set of calendar scheduling components for React applications. It includes multiple view levels, drag-and-drop event management, and extensive customization options.</p> <h3>Schedule</h3> <p><a href="https://mantine.dev/schedule/schedule">Schedule</a> is a unified container component that combines all views with built-in navigation and view switching. Drag events to reschedule them:</p> <pre lang="tsx"><code>import { useState } from 'react'; import dayjs from 'dayjs'; import { Schedule, ScheduleEventData } from '@mantine/schedule'; </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mantinedev/mantine/commit/b90d9b81031f45f5d15e75f25138ed6477f65bce"><code>b90d9b8</code></a> [core] Fix typos, update versions</li> <li><a href="https://github.com/mantinedev/mantine/commit/79cfa90f2e1165355916c7d1e6e680a6b3c9915f"><code>79cfa90</code></a> [refactor] Fix failing tests</li> <li><a href="https://github.com/mantinedev/mantine/commit/0fabf4e0b9e42d7bef766ed2a0baf7a29ca53694"><code>0fabf4e</code></a> [<code>@mantine/form</code>] Fix <code>form.watch</code> not working with arrays (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/6996">#6996</a>)</li> <li><a href="https://github.com/mantinedev/mantine/commit/ac4aeb8b0cf0f4f5fd8d33cdfca86ec01527bdbe"><code>ac4aeb8</code></a> [<code>@mantine/form</code>] Update types to use new React 19 features</li> <li><a href="https://github.com/mantinedev/mantine/commit/7aeb1ad848830004789d92f04508b9661d9b5151"><code>7aeb1ad</code></a> [<code>@mantine/form</code>] Make Values and TransformedValues covariant (<a href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8198">#8198</a>)</li> <li><a href="https://github.com/mantinedev/mantine/commit/a097b0cbe3341d7bdaf4fb05e3aba296f122e90b"><code>a097b0c</code></a> [release] Version: 9.0.0-alpha.6</li> <li><a href="https://github.com/mantinedev/mantine/commit/81d8a5433dee0f04eb66c7366e5bd7c62bcd4872"><code>81d8a54</code></a> [refactor] Fix tests</li> <li><a href="https://github.com/mantinedev/mantine/commit/0bf0b44549224afc9a63bedcaa8d4605be3405c5"><code>0bf0b44</code></a> [<code>@mantine/form</code>] Add standard schema resolvers support</li> <li><a href="https://github.com/mantinedev/mantine/commit/53c9a802a74d9ddec381ee133930d436ebda71c2"><code>53c9a80</code></a> [release] Version: 9.0.0-alpha.5</li> <li><a href="https://github.com/mantinedev/mantine/commit/0cab72dacb56f536eb473f641e991eb559a04784"><code>0cab72d</code></a> [core] Update peer requirements to use React 19.2</li> <li>Additional commits viewable in <a href="https://github.com/mantinedev/mantine/commits/9.0.1/packages/@mantine/form">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d5b6102f5a |
Bump i18next from 25.10.5 to 26.0.3 in /frontend (#1639)
Bumps [i18next](https://github.com/i18next/i18next) from 25.10.5 to 26.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v26.0.3</h2> <ul> <li>fix(types): <code>addResourceBundle</code> now accepts an optional 6th <code>options</code> parameter (<code>{ silent?: boolean; skipCopy?: boolean }</code>) matching the runtime API <a href="https://redirect.github.com/i18next/i18next/issues/2419">2419</a></li> </ul> <h2>v26.0.2</h2> <ul> <li>fix(types): <code>t("key", {} as TOptions)</code> no longer produces a type error — the context constraint now bypasses strict checking when <code>context</code> is <code>unknown</code> (e.g. from <code>TOptions</code>) <a href="https://redirect.github.com/i18next/i18next/issues/2418">2418</a></li> </ul> <h2>v26.0.1</h2> <ul> <li>fix: Formatter no longer crashes when <code>alwaysFormat</code> is <code>true</code> and no format specifier is present (<code>format</code> is <code>undefined</code>)</li> <li>fix: Formatter now returns <code>undefined</code>/<code>null</code> values as-is instead of producing <code>NaN</code> when the value is missing</li> </ul> <h2>v26.0.0</h2> <p><strong>This is a major breaking release:</strong></p> <h3>Breaking Changes</h3> <ul> <li><strong>Remove deprecated <code>initImmediate</code> option</strong> — the backward-compatibility mapping from <code>initImmediate</code> to <code>initAsync</code> (introduced in v24) has been removed. Use <code>initAsync</code> instead.</li> <li><strong>Remove legacy <code>interpolation.format</code> function</strong> — the old monolithic format function (<code>interpolation: { format: (value, format, lng) => ... }</code>) is no longer supported. The built-in Formatter (or a custom Formatter module via <code>.use()</code>) is now always used. Migrate to the <a href="https://www.i18next.com/translation-function/formatting">new formatting approach</a> using <code>i18next.services.formatter.add()</code> or <code>.addCached()</code> for custom formatters.</li> <li><strong>Remove console support notice</strong> — the console support notice introduced in v25.8.0 has been removed, along with the <code>showSupportNotice</code> option and all related internal suppression logic (<code>globalThis.__i18next_supportNoticeShown</code>, <code>I18NEXT_NO_SUPPORT_NOTICE</code> env var). See our blog post for the <a href="https://www.locize.com/blog/i18next-support-notice">full story</a>.</li> <li><strong>Remove <code>simplifyPluralSuffix</code> option</strong> — this option was unused by the core PluralResolver (which relies entirely on <code>Intl.PluralRules</code>). It only had an effect in the old v1/v2/v3 compatibility layer. The v4 test compatibility layer now defaults to <code>true</code> internally.</li> <li><strong>Remove deprecated <code>@babel/polyfill</code></strong> from devDependencies.</li> </ul> <h3>Improvements</h3> <ul> <li><strong>Code modernization</strong> across all source files: <ul> <li>Replace <code>indexOf() > -1</code> / <code>indexOf() < 0</code> with <code>.includes()</code> (~40+ occurrences)</li> <li>Replace <code>indexOf() === 0</code> with <code>.startsWith()</code> where appropriate</li> <li>Replace <code>var</code> with <code>const</code>, <code>'' + object</code> with <code>String(object)</code>, <code>.substring()</code> with <code>.slice()</code></li> <li>Replace <code>.apply(observer, [event, ...args])</code> with direct call <code>observer(event, ...args)</code></li> <li>Remove unnecessary <code>.call(this, ...)</code> in BackendConnector retry logic</li> <li>Fix <code>array-callback-return</code> in LanguageUtils <code>getBestMatchFromCodes</code></li> <li>Clean up all stale <code>eslint-disable</code> comments from source files</li> </ul> </li> <li><strong>EventEmitter</strong>: add <code>once()</code> method for one-time event subscriptions</li> <li><strong>Memory leak fix</strong>: move module-level <code>checkedLoadedFor</code> cache to Translator instance, preventing cross-instance state leakage</li> <li><strong>TypeScript</strong>: fix <code>BackendModule</code> generic parameter naming inconsistency between CJS and ESM type definitions</li> <li><strong>TypeScript</strong>: add <code>once()</code> method to <code>i18n</code> and <code>ResourceStore</code> type interfaces</li> <li><strong>ESLint 9</strong>: migrate from ESLint 8 (airbnb-base) to ESLint 9 flat config with <a href="https://github.com/neostandard/neostandard">neostandard</a></li> <li><strong>Vitest 4</strong>: upgrade from vitest 3 to vitest 4, migrate workspace files to <code>test.projects</code> config</li> </ul> <h2>v25.10.10</h2> <ul> <li>feat: suppress support notice automatically in production environments (<code>NODE_ENV=production</code>)</li> </ul> <h2>v25.10.9</h2> <ul> <li>feat(types): export <code>SelectorParam<Ns, KPrefix></code> helper type — a stable, readable alternative to <code>Parameters<TFunction<Ns>>[0]</code> for typing selector function props <a href="https://redirect.github.com/i18next/i18next/issues/2414">2414</a></li> </ul> <h2>v25.10.8</h2> <ul> <li>fix(types): reorder <code>TFunctionSelector</code> overloads so <code>Parameters<TFunction></code> resolves to the general selector signature instead of the branded <code>SelectorKey</code> type <a href="https://redirect.github.com/i18next/i18next/issues/2412">2412</a></li> </ul> <h2>v25.10.7</h2> <ul> <li>feat(types): support typescript 6 to address <a href="https://redirect.github.com/i18next/react-i18next/issues/1910">i18next/react-i18next#1910</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>26.0.3</h2> <ul> <li>fix(types): <code>addResourceBundle</code> now accepts an optional 6th <code>options</code> parameter (<code>{ silent?: boolean; skipCopy?: boolean }</code>) matching the runtime API <a href="https://redirect.github.com/i18next/i18next/issues/2419">2419</a></li> </ul> <h2>26.0.2</h2> <ul> <li>fix(types): <code>t("key", {} as TOptions)</code> no longer produces a type error — the context constraint now bypasses strict checking when <code>context</code> is <code>unknown</code> (e.g. from <code>TOptions</code>) <a href="https://redirect.github.com/i18next/i18next/issues/2418">2418</a></li> </ul> <h2>26.0.1</h2> <ul> <li>fix: Formatter no longer crashes when <code>alwaysFormat</code> is <code>true</code> and no format specifier is present (<code>format</code> is <code>undefined</code>)</li> <li>fix: Formatter now returns <code>undefined</code>/<code>null</code> values as-is instead of producing <code>NaN</code> when the value is missing</li> </ul> <h2>26.0.0</h2> <p><strong>This is a major breaking release:</strong></p> <h3>Breaking Changes</h3> <ul> <li><strong>Remove deprecated <code>initImmediate</code> option</strong> — the backward-compatibility mapping from <code>initImmediate</code> to <code>initAsync</code> (introduced in v24) has been removed. Use <code>initAsync</code> instead.</li> <li><strong>Remove legacy <code>interpolation.format</code> function</strong> — the old monolithic format function (<code>interpolation: { format: (value, format, lng) => ... }</code>) is no longer supported. The built-in Formatter (or a custom Formatter module via <code>.use()</code>) is now always used. Migrate to the <a href="https://www.i18next.com/translation-function/formatting">new formatting approach</a> using <code>i18next.services.formatter.add()</code> or <code>.addCached()</code> for custom formatters.</li> <li><strong>Remove console support notice</strong> — the console support notice introduced in v25.8.0 has been removed, along with the <code>showSupportNotice</code> option and all related internal suppression logic (<code>globalThis.__i18next_supportNoticeShown</code>, <code>I18NEXT_NO_SUPPORT_NOTICE</code> env var). See our blog post for the <a href="https://www.locize.com/blog/i18next-support-notice">full story</a>.</li> <li><strong>Remove <code>simplifyPluralSuffix</code> option</strong> — this option was unused by the core PluralResolver (which relies entirely on <code>Intl.PluralRules</code>). It only had an effect in the old v1/v2/v3 compatibility layer. The v4 test compatibility layer now defaults to <code>true</code> internally.</li> <li><strong>Remove deprecated <code>@babel/polyfill</code></strong> from devDependencies.</li> </ul> <h3>Improvements</h3> <ul> <li><strong>Code modernization</strong> across all source files: <ul> <li>Replace <code>indexOf() > -1</code> / <code>indexOf() < 0</code> with <code>.includes()</code> (~40+ occurrences)</li> <li>Replace <code>indexOf() === 0</code> with <code>.startsWith()</code> where appropriate</li> <li>Replace <code>var</code> with <code>const</code>, <code>'' + object</code> with <code>String(object)</code>, <code>.substring()</code> with <code>.slice()</code></li> <li>Replace <code>.apply(observer, [event, ...args])</code> with direct call <code>observer(event, ...args)</code></li> <li>Remove unnecessary <code>.call(this, ...)</code> in BackendConnector retry logic</li> <li>Fix <code>array-callback-return</code> in LanguageUtils <code>getBestMatchFromCodes</code></li> <li>Clean up all stale <code>eslint-disable</code> comments from source files</li> </ul> </li> <li><strong>EventEmitter</strong>: add <code>once()</code> method for one-time event subscriptions</li> <li><strong>Memory leak fix</strong>: move module-level <code>checkedLoadedFor</code> cache to Translator instance, preventing cross-instance state leakage</li> <li><strong>TypeScript</strong>: fix <code>BackendModule</code> generic parameter naming inconsistency between CJS and ESM type definitions</li> <li><strong>TypeScript</strong>: add <code>once()</code> method to <code>i18n</code> and <code>ResourceStore</code> type interfaces</li> <li><strong>ESLint 9</strong>: migrate from ESLint 8 (airbnb-base) to ESLint 9 flat config with <a href="https://github.com/neostandard/neostandard">neostandard</a></li> <li><strong>Vitest 4</strong>: upgrade from vitest 3 to vitest 4, migrate workspace files to <code>test.projects</code> config</li> </ul> <h2>25.10.10</h2> <ul> <li>feat: suppress support notice automatically in production environments (<code>NODE_ENV=production</code>)</li> </ul> <h2>25.10.9</h2> <ul> <li>feat(types): export <code>SelectorParam<Ns, KPrefix></code> helper type — a stable, readable alternative to <code>Parameters<TFunction<Ns>>[0]</code> for typing selector function props <a href="https://redirect.github.com/i18next/i18next/issues/2414">2414</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/ea8391c875ed663038fb5fb0db89aaead9f6fff6"><code>ea8391c</code></a> 26.0.3</li> <li><a href="https://github.com/i18next/i18next/commit/5da85e09afe0f53033840666e13ee954d87e89e9"><code>5da85e0</code></a> fix(types): <code>addResourceBundle</code> now accepts an optional 6th <code>options</code> paramet...</li> <li><a href="https://github.com/i18next/i18next/commit/3db098f72a40b108123c1200234707934d9e03ac"><code>3db098f</code></a> 26.0.2</li> <li><a href="https://github.com/i18next/i18next/commit/6ece798338e6e96d37a6148c20e4ca7279fa9897"><code>6ece798</code></a> fix(types): <code>t("key", {} as TOptions)</code> no longer produces a type error — the ...</li> <li><a href="https://github.com/i18next/i18next/commit/18b3dbb4734dc25dba1c21ea05df0315c73f6bc0"><code>18b3dbb</code></a> 26.0.1</li> <li><a href="https://github.com/i18next/i18next/commit/c829f91a2af9d227b35be3025d4ce8866f5c25c1"><code>c829f91</code></a> fix: Formater crashes etc.</li> <li><a href="https://github.com/i18next/i18next/commit/1593d1125ef7890ef294aa5fef39dd70e11ca537"><code>1593d11</code></a> remove node v18 from github actions</li> <li><a href="https://github.com/i18next/i18next/commit/d85c23da8615c0f0fdbeaae588a741a6c6149eb4"><code>d85c23d</code></a> 26.0.0</li> <li><a href="https://github.com/i18next/i18next/commit/fad19d59cf4d2acd512981d2cc41a0033d6cf672"><code>fad19d5</code></a> feat!: v26.0.0 — major version with breaking changes</li> <li><a href="https://github.com/i18next/i18next/commit/780aa9170f4ed5b645aa35bb9ef1832d38f7b5d8"><code>780aa91</code></a> jsr update</li> <li>Additional commits viewable in <a href="https://github.com/i18next/i18next/compare/v25.10.5...v26.0.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
adedd52705 |
Bump vite from 7.3.0 to 7.3.2 in /frontend (#1635)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.0 to 7.3.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v7.3.2</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v7.3.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v7.3.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v7.3.1...v7.3.2">7.3.2</a> (2026-04-06)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li>avoid path traversal with optimize deps sourcemap handler (<a href="https://redirect.github.com/vitejs/vite/issues/22161">#22161</a>) (<a href="https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7">09d8c90</a>)</li> <li>backport <a href="https://redirect.github.com/vitejs/vite/issues/22159">#22159</a>, apply server.fs check to env transport (<a href="https://redirect.github.com/vitejs/vite/issues/22162">#22162</a>) (<a href="https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1">19db0f2</a>)</li> <li>check <code>server.fs</code> after stripping query as well (<a href="https://redirect.github.com/vitejs/vite/issues/22160">#22160</a>) (<a href="https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6">f8103cc</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v7.3.0...v7.3.1">7.3.1</a> (2026-01-07)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li>add <code>ignoreOutdatedRequests</code> option to <code>optimizeDeps</code> (<a href="https://redirect.github.com/vitejs/vite/issues/21364">#21364</a>) (<a href="https://github.com/vitejs/vite/commit/9d39d373a7b4e0a93322b70b9dbeb202af06af3e">9d39d37</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/cc383e07b66d4c5a9768fcb570e0af812cb8d999"><code>cc383e0</code></a> release: v7.3.2</li> <li><a href="https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7"><code>09d8c90</code></a> fix: avoid path traversal with optimize deps sourcemap handler (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161">#22161</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6"><code>f8103cc</code></a> fix: check <code>server.fs</code> after stripping query as well (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22160">#22160</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1"><code>19db0f2</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159">#22159</a>, apply server.fs check to env transport (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22162">#22162</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/95e8923f35d0252c9f6eb2d5e358c084542706f1"><code>95e8923</code></a> release: v7.3.1</li> <li><a href="https://github.com/vitejs/vite/commit/9d39d373a7b4e0a93322b70b9dbeb202af06af3e"><code>9d39d37</code></a> feat: add <code>ignoreOutdatedRequests</code> option to <code>optimizeDeps</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21364">#21364</a>)</li> <li>See full diff in <a href="https://github.com/vitejs/vite/commits/v7.3.2/packages/vite">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evroon/bracket/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
7537b653c0 |
Bump i18next from 25.8.0 to 25.10.5 in /frontend (#1624)
Bumps [i18next](https://github.com/i18next/i18next) from 25.8.0 to 25.10.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v25.10.5</h2> <ul> <li>feat(types): selector functions as <code>keyPrefix</code> in <code>getFixedT</code> now provide full type-safe key narrowing — the returned <code>t</code> function is scoped to the prefix subtree <a href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li> </ul> <h2>v25.10.4</h2> <ul> <li>feat(types): i18nKey of <code><Trans i18nKey={sk} /></code> to accept a <code>SelectorKey</code> <a href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li> </ul> <h2>v25.10.3</h2> <ul> <li>check also for I18NEXT_NO_SUPPORT_NOTICE env variable</li> </ul> <h2>v25.10.2</h2> <ul> <li>feat(types): <code>keyFromSelector</code> is now type-safe — the selector callback is constrained against your resource definitions, catching invalid keys at compile time. Supports optional <code>ns</code> and <code>keyPrefix</code> options for non-default namespace/prefix contexts <a href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li> </ul> <h2>v25.10.1</h2> <ul> <li>fix(types): <code>FilterKeys</code> now correctly excludes base keys that have context variants when the provided context doesn't match any of them (e.g. key <code>some</code> with variant <code>some_me</code> is no longer accessible with <code>context="one"</code>)</li> </ul> <h2>v25.10.0</h2> <ul> <li>feat(types): <code>keyFromSelector</code> now returns a branded <code>SelectorKey</code> type that <code>t()</code> accepts directly, enabling pre-computed and reusable translation keys <a href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li> <li>feat: support selector syntax for <code>keyPrefix</code> in <code>getFixedT</code> and per-call options <a href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li> <li>feat(types): interpolation values are now automatically typed based on built-in format specifiers — <code>{{val, number}}</code> requires <code>number</code>, <code>{{val, datetime}}</code> requires <code>Date</code>, <code>{{name}}</code> requires <code>string</code>, etc. Custom formatters can be typed via <code>interpolationFormatTypeMap</code> in <code>CustomTypeOptions</code> <a href="https://redirect.github.com/i18next/i18next/issues/2378">2378</a></li> <li>fix(types): <code>FilterKeys</code> in selector mode now preserves non-context, non-plural leaf keys when <code>context</code> is provided, fixing incorrect type narrowing when combining <code>returnObjects: true</code> with <code>context</code> <a href="https://redirect.github.com/i18next/i18next/issues/2398">2398</a></li> </ul> <h2>v25.9.0</h2> <ul> <li>feat(types): selector API now enforces <code>{ count: number }</code> when a key resolves to plural forms <a href="https://redirect.github.com/i18next/i18next/issues/2373">2373</a></li> <li>fix(types): string unions with invalid members are now correctly detected as type errors when used as context option <a href="https://redirect.github.com/i18next/i18next/issues/2172">2172</a></li> </ul> <h2>v25.8.20</h2> <ul> <li> <ul> <li>fix: <code>getFixedT()</code> selector now resolves namespaces against the effective <code>ns</code> rather than the global init options <a href="https://redirect.github.com/i18next/i18next/issues/2406">#2406</a></li> </ul> </li> </ul> <h2>v25.8.19</h2> <ul> <li>fix: selector API namespace resolution regression for single-string <code>ns</code> and primary namespace in array <a href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a>. Reverts the broad namespace-prefix rewrite from v25.8.15 and replaces it with a targeted fix that only rewrites paths starting with a secondary namespace in a multi-namespace array, matching the type-level contract of <code>GetSource</code></li> </ul> <h2>v25.8.18</h2> <ul> <li>improve selector api to accept array of selector functions, analogous to array of keys <a href="https://redirect.github.com/i18next/i18next/issues/2404">2404</a></li> </ul> <h2>v25.8.17</h2> <ul> <li>update deps</li> </ul> <h2>v25.8.16</h2> <ul> <li>fix(types): <code>on()</code> method now correctly returns <code>this</code> instead of <code>void</code>, matching the runtime behavior and enabling proper method chaining in TypeScript</li> </ul> <h2>v25.8.15</h2> <ul> <li>fix: Selector API unable to resolve namespaces <a href="https://redirect.github.com/i18next/i18next/issues/2402">#2402</a></li> </ul> <h2>v25.8.14</h2> <ul> <li>fix: getCleanedCode now replaces all underscores</li> </ul> <h2>v25.8.13</h2> <ul> <li>improve support notice shown logic</li> </ul> <h2>v25.8.12</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>25.10.5</h2> <ul> <li>feat(types): selector functions as <code>keyPrefix</code> in <code>getFixedT</code> now provide full type-safe key narrowing — the returned <code>t</code> function is scoped to the prefix subtree <a href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li> </ul> <h2>25.10.4</h2> <ul> <li>feat(types): <code>exists()</code> is now a type guard that narrows the key to <code>SelectorKey</code>, so a validated key can be passed directly to <code>t()</code> <a href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li> </ul> <h2>25.10.3</h2> <ul> <li>check also for I18NEXT_NO_SUPPORT_NOTICE env variable</li> </ul> <h2>25.10.2</h2> <ul> <li>feat(types): <code>keyFromSelector</code> is now type-safe — the selector callback is constrained against your resource definitions, catching invalid keys at compile time. Supports optional <code>ns</code> and <code>keyPrefix</code> options for non-default namespace/prefix contexts <a href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li> </ul> <h2>25.10.1</h2> <ul> <li>fix(types): <code>FilterKeys</code> now correctly excludes base keys that have context variants when the provided context doesn't match any of them (e.g. key <code>some</code> with variant <code>some_me</code> is no longer accessible with <code>context="one"</code>)</li> </ul> <h2>25.10.0</h2> <ul> <li>feat(types): <code>keyFromSelector</code> now returns a branded <code>SelectorKey</code> type that <code>t()</code> accepts directly, enabling pre-computed and reusable translation keys <a href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li> <li>feat: support selector syntax for <code>keyPrefix</code> in <code>getFixedT</code> and per-call options <a href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li> <li>feat(types): interpolation values are now automatically typed based on built-in format specifiers — <code>{{val, number}}</code> requires <code>number</code>, <code>{{val, datetime}}</code> requires <code>Date</code>, <code>{{name}}</code> requires <code>string</code>, etc. Custom formatters can be typed via <code>interpolationFormatTypeMap</code> in <code>CustomTypeOptions</code> <a href="https://redirect.github.com/i18next/i18next/issues/2378">2378</a></li> <li>fix(types): <code>FilterKeys</code> in selector mode now preserves non-context, non-plural leaf keys when <code>context</code> is provided, fixing incorrect type narrowing when combining <code>returnObjects: true</code> with <code>context</code> <a href="https://redirect.github.com/i18next/i18next/issues/2398">2398</a></li> </ul> <h2>25.9.0</h2> <ul> <li>feat(types): selector API now enforces <code>{ count: number }</code> when a key resolves to plural forms <a href="https://redirect.github.com/i18next/i18next/issues/2373">2373</a></li> <li>fix(types): string unions with invalid members are now correctly detected as type errors when used as context option <a href="https://redirect.github.com/i18next/i18next/issues/2172">2172</a></li> </ul> <h2>25.8.20</h2> <ul> <li> <ul> <li>fix: <code>getFixedT()</code> selector now resolves namespaces against the effective <code>ns</code> rather than the global init options <a href="https://redirect.github.com/i18next/i18next/issues/2406">2406</a></li> </ul> </li> </ul> <h2>25.8.19</h2> <ul> <li>fix: selector API namespace resolution regression for single-string <code>ns</code> and primary namespace in array <a href="https://redirect.github.com/i18next/i18next/issues/2405">2405</a>. Reverts the broad namespace-prefix rewrite from v25.8.15 and replaces it with a targeted fix that only rewrites paths starting with a secondary namespace in a multi-namespace array, matching the type-level contract of <code>GetSource</code></li> </ul> <h2>25.8.18</h2> <ul> <li>improve selector api to accept array of selector functions, analogous to array of keys <a href="https://redirect.github.com/i18next/i18next/issues/2404">2404</a></li> </ul> <h2>25.8.17</h2> <ul> <li>update deps</li> </ul> <h2>25.8.16</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/83230b8f485b416931cbb8a2a0b6bc9290eaff66"><code>83230b8</code></a> 25.10.5</li> <li><a href="https://github.com/i18next/i18next/commit/79aa4d624510004bd45f6277f967d248a53921a4"><code>79aa4d6</code></a> address <a href="https://redirect.github.com/i18next/i18next/issues/2367">#2367</a></li> <li><a href="https://github.com/i18next/i18next/commit/06f4ef70f242be8fa207f274f7fcadc3bd4d6457"><code>06f4ef7</code></a> address <a href="https://redirect.github.com/i18next/i18next/issues/2367">#2367</a></li> <li><a href="https://github.com/i18next/i18next/commit/7902915328a899a6dc7680cc2563631b315ec8bc"><code>7902915</code></a> fix changelog</li> <li><a href="https://github.com/i18next/i18next/commit/640ae9a2b2d8d3291889ce1576b43fffbfb874ee"><code>640ae9a</code></a> jsr update</li> <li><a href="https://github.com/i18next/i18next/commit/de429ab17d9dbb230aef89996adc5a0b3ebd0436"><code>de429ab</code></a> 25.10.4</li> <li><a href="https://github.com/i18next/i18next/commit/3eb1b35b912bd8a656affa787b6d95ebf44c9d16"><code>3eb1b35</code></a> feat(types): i18nKey of <code>\<Trans i18nKey={sk} /></code> to accept a <code>SelectorKey</code> <a href="https://redirect.github.com/i18next/i18next/issues/2364">#2364</a></li> <li><a href="https://github.com/i18next/i18next/commit/53220b7fb80cbe22275c3b7cdbab6d91f12d2ceb"><code>53220b7</code></a> jsr update</li> <li><a href="https://github.com/i18next/i18next/commit/908d0376bb72f731df9d65a219c7fc472db01b66"><code>908d037</code></a> 25.10.3</li> <li><a href="https://github.com/i18next/i18next/commit/4e0b5da2971d404f85cf45a618dc249864b5243a"><code>4e0b5da</code></a> check also for I18NEXT_NO_SUPPORT_NOTICE env variable <a href="https://redirect.github.com/i18next/i18next/issues/2407">#2407</a></li> <li>Additional commits viewable in <a href="https://github.com/i18next/i18next/compare/v25.8.0...v25.10.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
0cabe48233 |
Bump react-i18next from 16.5.0 to 16.6.2 in /frontend (#1621)
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 16.5.0 to 16.6.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h3>16.6.2</h3> <ul> <li>feat(types): <code>useTranslation</code> now accepts selector functions as <code>keyPrefix</code> with full type-safe key narrowing when <code>enableSelector</code> is enabled <a href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li> </ul> <h3>16.6.1</h3> <ul> <li>feat(types): i18nKey of <code><Trans i18nKey={sk} /></code> to accept a <code>SelectorKey</code> <a href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li> </ul> <h3>16.6.0</h3> <ul> <li>warn when <code>t</code> is called before <code>ready</code> with <code>useSuspense: false</code> <a href="https://redirect.github.com/i18next/react-i18next/issues/1896">1896</a></li> <li>type-safe <code>values</code> prop on <code><Trans /></code> component — interpolation variables are now inferred from the translation string when custom types are configured <a href="https://redirect.github.com/i18next/react-i18next/issues/1772">1772</a></li> </ul> <h3>16.5.8</h3> <ul> <li>A selector function cannot be resolved without an i18n instance... returning empty string is safer than leaking the raw function reference. <a href="https://redirect.github.com/i18next/react-i18next/issues/1907">1907</a></li> </ul> <h3>16.5.7</h3> <ul> <li>fix: <code><Trans></code> component with <code>enableSelector: true</code> does not support multiple selectors for fallbacks <a href="https://redirect.github.com/i18next/react-i18next/issues/1907">1907</a></li> </ul> <h3>16.5.6</h3> <ul> <li>fix: prevent crash in <code>useSSR</code> when <code>init()</code> hasn't been called before <code>useSSR</code> — now logs a warning instead of throwing <a href="https://github.com/i18next/react-i18next/discussions/1604">1604</a></li> </ul> <h3>16.5.5</h3> <ul> <li>fix: prevent crash in <code>useSSR</code>, <code>getInitialProps</code> and <code>Translation</code> when no i18next instance is available (e.g. in monorepo setups with duplicate <code>react-i18next</code> copies) — now logs a clear warning instead of throwing <a href="https://github.com/i18next/react-i18next/discussions/1604">1604</a></li> </ul> <h3>16.5.4</h3> <ul> <li>fix: Overriding React component props not working <a href="https://redirect.github.com/i18next/react-i18next/pull/1902">1902</a></li> </ul> <h3>16.5.3</h3> <ul> <li>fix: Trans named tags with underscore <a href="https://redirect.github.com/i18next/react-i18next/pull/1901">1901</a></li> </ul> <h3>16.5.2</h3> <ul> <li>fix: Type errors when you've declared a resources type <a href="https://redirect.github.com/i18next/react-i18next/issues/1899">1899</a> via <a href="https://redirect.github.com/i18next/react-i18next/pull/1900">1900</a></li> </ul> <h3>16.5.1</h3> <ul> <li>fix: export <code>nodesToString</code> (runtime + TypeScript typings) to support <code>i18next-cli</code> (<a href="https://redirect.github.com/i18next/i18next-cli/pull/155">i18next/i18next-cli#155</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/5190452b9954915a5e62dde6ed8b0ee5591fe8ac"><code>5190452</code></a> 16.6.2</li> <li><a href="https://github.com/i18next/react-i18next/commit/598dd8e0d7c9bf3b20d903acbb46cfa5302f9d26"><code>598dd8e</code></a> address: <a href="https://redirect.github.com/i18next/i18next/issues/2367">i18next/i18next#2367</a></li> <li><a href="https://github.com/i18next/react-i18next/commit/683156b25cd7bb94be4132b96b73fe27562ba618"><code>683156b</code></a> 16.6.1</li> <li><a href="https://github.com/i18next/react-i18next/commit/723d84bbcbc152f3b2e07f3aa704859978860335"><code>723d84b</code></a> feat(types): i18nKey of <code>\<Trans i18nKey={sk} /></code> to accept a <code>SelectorKey</code></li> <li><a href="https://github.com/i18next/react-i18next/commit/5c9f9f04e2ac665f2575c2bc7f783a368ab83c52"><code>5c9f9f0</code></a> update i18next dep</li> <li><a href="https://github.com/i18next/react-i18next/commit/3a68a0bcc0a61fc21cec8762acdfcab9025d9ba4"><code>3a68a0b</code></a> 16.6.0</li> <li><a href="https://github.com/i18next/react-i18next/commit/87eac5f84b79819fb268ee936fe9d9e282c6543f"><code>87eac5f</code></a> type-safe <code>values</code> prop on <code>\<Trans /></code> component — interpolation variables ar...</li> <li><a href="https://github.com/i18next/react-i18next/commit/522885581d57ea481a40bce22239d550aaa3f426"><code>5228855</code></a> warn when <code>t</code> is called before <code>ready</code> with <code>useSuspense: false</code> <a href="https://redirect.github.com/i18next/react-i18next/issues/1896">#1896</a></li> <li><a href="https://github.com/i18next/react-i18next/commit/a75ef78d50ba4643575c2d0f48e73d6e2d9961dc"><code>a75ef78</code></a> update deps and adjust tests</li> <li><a href="https://github.com/i18next/react-i18next/commit/b00adfad4296543ab637d87a6af2b2faec119fcb"><code>b00adfa</code></a> 16.5.8</li> <li>Additional commits viewable in <a href="https://github.com/i18next/react-i18next/compare/v16.5.0...v16.6.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3c45bd8099 |
Bump @types/node from 25.4.0 to 25.5.0 in /frontend (#1610)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.4.0 to 25.5.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d1754f539a |
Bump @typescript-eslint/eslint-plugin from 8.56.0 to 8.57.0 in /frontend (#1612)
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 8.56.0 to 8.57.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.0</h2> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>typescript-estree:</strong> switch back to use <code>ts.getModifiers()</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12034">#12034</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@fisker</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.56.1</h2> <h2>8.56.1 (2026-02-23)</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): update dependency minimatch to v10.2.2 by <a href="https://github.com/benmccann"><code>@benmccann</code></a> in <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12074">typescript-eslint/typescript-eslint#12074</a></li> </ul> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.56.1 (2026-02-23)</h2> <p>This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5"><code>2c6aeee</code></a> chore(release): publish 8.57.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/46bf066d3df4af9aa8804a383e0d6d407a8e79f0"><code>46bf066</code></a> docs(eslint-plugin): document no-unnecessary-condition limitation with object...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766"><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12047">#12047</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2029c78dcbe11b7e750af588d3c47f1211f02798"><code>2029c78</code></a> fix(eslint-plugin): [no-base-to-string] fix false positive for toString with ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/0f4f101a125487bc07db323288afb86d5247bc31"><code>0f4f101</code></a> fix(eslint-plugin): [prefer-promise-reject-errors] add allow `TypeOrValueSpec...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/53f473b7a8c46094623712ba69a627182d049a5b"><code>53f473b</code></a> fix(typescript-estree): if the template literal is tagged and the text has an...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2291b81f99670319618192645519a056fdb94cf4"><code>2291b81</code></a> docs: minor grammar adjustment (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12112">#12112</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/fc5cd09de85600134ca0885ad5cdcedcddcd20ba"><code>fc5cd09</code></a> fix(eslint-plugin): guard against negative paramIndex in no-useless-default-a...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/adc2aad848fe1ac8044ba4a8d84daf8bb1939ced"><code>adc2aad</code></a> fix(eslint-plugin): handle statically analyzable computed keys in prefer-read...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/85badfffbf38730772afbffaa6d024592752664a"><code>85badff</code></a> fix(eslint-plugin): [strict-void-return] false positives with overloads (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12055">#12055</a>)</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
af608182cf |
Bump @vitejs/plugin-react from 5.1.0 to 5.2.0 in /frontend (#1609)
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.1.0 to 5.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/releases"><code>@vitejs/plugin-react</code>'s releases</a>.</em></p> <blockquote> <h2>plugin-react@5.2.0</h2> <h3>Add Vite 8 to peerDependencies range <a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1143">#1143</a></h3> <p>This plugin is compatible with Vite 8.</p> <h2>plugin-react@5.1.4</h2> <h3>Fix <code>canSkipBabel</code> not accounting for <code>babel.overrides</code> (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1098">#1098</a>)</h3> <p>When configuring <code>babel.overrides</code> without top-level plugins or presets, Babel was incorrectly skipped. The <code>canSkipBabel</code> function now checks for <code>overrides.length</code> to ensure override configurations are processed.</p> <h2>plugin-react@5.1.3</h2> <p>No release notes provided.</p> <h2>plugin-react@5.1.2</h2> <p>No release notes provided.</p> <h2>plugin-react@5.1.1</h2> <h3>Update code to support newer <code>rolldown-vite</code> (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/976">#976</a>)</h3> <p><code>rolldown-vite</code> will remove <code>optimizeDeps.rollupOptions</code> in favor of <code>optimizeDeps.rolldownOptions</code> soon. This plugin now uses <code>optimizeDeps.rolldownOptions</code> to support newer <code>rolldown-vite</code>. Please update <code>rolldown-vite</code> to the latest version if you are using an older version.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/blob/plugin-react@5.2.0/packages/plugin-react/CHANGELOG.md"><code>@vitejs/plugin-react</code>'s changelog</a>.</em></p> <blockquote> <h2>5.2.0 (2026-03-12)</h2> <h3>Add Vite 8 to peerDependencies range <a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1143">#1143</a></h3> <p>This plugin is compatible with Vite 8.</p> <h2>5.1.4 (2026-02-10)</h2> <h3>Fix <code>canSkipBabel</code> not accounting for <code>babel.overrides</code> (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1098">#1098</a>)</h3> <p>When configuring <code>babel.overrides</code> without top-level plugins or presets, Babel was incorrectly skipped. The <code>canSkipBabel</code> function now checks for <code>overrides.length</code> to ensure override configurations are processed.</p> <h2>5.1.3 (2026-02-02)</h2> <h2>5.1.2 (2025-12-08)</h2> <h2>5.1.1 (2025-11-12)</h2> <h3>Update code to support newer <code>rolldown-vite</code> (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/976">#976</a>)</h3> <p><code>rolldown-vite</code> will remove <code>optimizeDeps.rollupOptions</code> in favor of <code>optimizeDeps.rolldownOptions</code> soon. This plugin now uses <code>optimizeDeps.rolldownOptions</code> to support newer <code>rolldown-vite</code>. Please update <code>rolldown-vite</code> to the latest version if you are using an older version.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/fda3a86095556b49ae3c995eb57a30d4e0b8fa8d"><code>fda3a86</code></a> release: plugin-react@5.2.0</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/99ab1b67b3ce8f67446a0f432222cbd1763cefc5"><code>99ab1b6</code></a> feat(react): add Vite 8 to peer dependency (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1143">#1143</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/f066114c3e6bf18f5209ff3d3ef6bf1ab46d3866"><code>f066114</code></a> release: plugin-react@5.1.4</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/e299dcab475952f3305b24eef6118f7f47e65f31"><code>e299dca</code></a> fix(plugin-react): <code>canSkipBabel</code> not checking <code>babel.overrides</code> (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1098">#1098</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/12ffadcd9afdb19a703ffddb3d3cc961178066c4"><code>12ffadc</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1103">#1103</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/cf0cb8aa3398e312f4e91b702281806aad004cd7"><code>cf0cb8a</code></a> release: plugin-react@5.1.3</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/99e480cf01323268b6f7d5e582ba1662728845d9"><code>99e480c</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1090">#1090</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/77f5e429d49b53c4115581abccaa9f5405bdf079"><code>77f5e42</code></a> fix(deps): update react 19.2.4 (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1084">#1084</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/e327da491fcc0eb9e10b98d7dd674b8375cb0f4f"><code>e327da4</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1083">#1083</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/3d3dbc2c1de09f1d2bd3ff3483415a73bdf61e96"><code>3d3dbc2</code></a> chore: add metadata for vite-plugin-registry (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1078">#1078</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.2.0/packages/plugin-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
49ab215dc5 |
Bump @hey-api/openapi-ts from 0.93.0 to 0.94.0 in /frontend (#1606)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from 0.93.0 to 0.94.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hey-api/openapi-ts/releases"><code>@hey-api/openapi-ts</code>'s releases</a>.</em></p> <blockquote> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.94.0</h2> <h3>Minor Changes</h3> <ul> <li><strong>BREAKING</strong> <strong>client</strong>: <code>buildUrl()</code> function includes <code>baseUrl</code> from config by default (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3491">#3491</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/c0cbffb9413c6f1cc12b41069af6ddb031401742"><code>c0cbffb</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><strong>dsl(reserved)</strong>: expand reserved keywords with more globals (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3487">#3487</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/89a9151b8d456796aa861c2a015af9bc1a300eb2"><code>89a9151</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>parser</strong>: fix: explicit discriminator mapping wins over fallback in nested <code>allOf</code> (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3490">#3490</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/a67d589e1f8e5860bd05d5caff134dd6a7eed6e2"><code>a67d589</code></a>) by <a href="https://github.com/pgraug"><code>@pgraug</code></a></p> </li> <li> <p><strong>plugin(<code>@pinia/colada</code>)</strong>: fix: pass error type generic to <code>defineQueryOptions</code> (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3483">#3483</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/8e5a57855c03a2a49f9c62398f5bdf1fa989f4de"><code>8e5a578</code></a>) by <a href="https://github.com/lukaspodmelle"><code>@lukaspodmelle</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/react-query</code>)</strong>: support generating <code>useMutation</code> hooks (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3432">#3432</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/12d76605e3dfb4204f9971dff7254be69c0a7359"><code>12d7660</code></a>) by <a href="https://github.com/nmokkenstorm"><code>@nmokkenstorm</code></a></p> </li> <li> <p><strong>plugin(typescript)</strong>: fix: reference enum object when creating enum types (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3500">#3500</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/127e67b9b761889751e25d95fe5900508e6fd151"><code>127e67b</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>output(header)</strong>: fix: support function signature in client and core files (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3486">#3486</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/942913af15ae10c5fc3c5e456800829b7dd9c10a"><code>942913a</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>output</strong>: fix: avoid double sanitizing leading character (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3448">#3448</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/c50f7bcf5676f2783a412288d243aeaeabd9f8bd"><code>c50f7bc</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>internal</strong>: fix: simplify dev mode check (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3498">#3498</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/ea2538b221605ee1ba900d173394cd4f0aab8b12"><code>ea2538b</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin(zod)</strong>: support function in <code>metadata</code> option (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3497">#3497</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/1ed39bc3ed713edd7ecdcc997fac1c7487b07105"><code>1ed39bc</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>plugin(valibot)</strong>: support function in <code>metadata</code> option (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3497">#3497</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/202cc054a7221d8ea7b63881785d314104ab01d2"><code>202cc05</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>internal</strong>: log symbol meta if name is falsy (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3448">#3448</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/c50f7bcf5676f2783a412288d243aeaeabd9f8bd"><code>c50f7bc</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>client</strong>: fix: change serializer types from <code>any</code> to <code>unknown</code> (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3471">#3471</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/ad11be241c494d23930ce8f76e57eb7afa631c67"><code>ad11be2</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>plugin(<code>@tanstack/preact-query</code>)</strong>: initial release (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3499">#3499</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/873839e065a7919fcf736348c15238bd3b6c3d15"><code>873839e</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> </ul> <h3>Updated Dependencies:</h3> <ul> <li><code>@hey-api/shared</code><a href="https://github.com/0"><code>@0</code></a>.2.2</li> <li><code>@hey-api/codegen-core</code><a href="https://github.com/0"><code>@0</code></a>.7.1</li> </ul> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.93.1</h2> <h3>Patch Changes</h3> <ul> <li> <p><strong>plugin(<code>@tanstack/query</code>)</strong>: fix: skip mutation queries for SSE endpoints (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3470">#3470</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/3ca4f317e422bb58345cb794faf979e26f10d127"><code>3ca4f31</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>client</strong>: fix: avoid removing empty arrays from flat arguments (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3451">#3451</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/1518fda8372b5fb27085f4b296a77b922c340885"><code>1518fda</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>plugin(zod)</strong>: fix: apply nullable modifier to <code>additionalProperties</code> schema (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3452">#3452</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/2e903af5d09881949b042bbd9aba516f3237764d"><code>2e903af</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>cli</strong>: fix: do not set <code>logs.file</code> to <code>true</code> by default (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3469">#3469</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/9e3d347d4b7a36c9d04b2f9c2d4988ece03677d8"><code>9e3d347</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>plugin(<code>@hey-api/sdk</code>)</strong>: fix: correctly set required flat parameters (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3458">#3458</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/bf50a559670311a866ff8b104c169ef7619fb202"><code>bf50a55</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/openapi-ts/commit/60fc6a95d004c55291c9cca2bc2ad543e7b512f2"><code>60fc6a9</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3478">#3478</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/7fcee0c5fe26490a677d4159ff819446c35a88fc"><code>7fcee0c</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3324e945abe66a4e598adc3d869862a319aba451"><code>3324e94</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3500">#3500</a> from hey-api/fix/typescript-enum-ref</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/127e67b9b761889751e25d95fe5900508e6fd151"><code>127e67b</code></a> fix: reference enum object when creating enum types</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/f38367d017b923387f324b859c3ee3db9dcd26d9"><code>f38367d</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3499">#3499</a> from hey-api/feat/tanstack-preact-query</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/873839e065a7919fcf736348c15238bd3b6c3d15"><code>873839e</code></a> feat: add <code>@tanstack/preact-query</code> plugin</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/e2643c136f079133cdfb8fb3e8cc203d4852eda8"><code>e2643c1</code></a> chore(docs): update contributors list</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/f4ab41674b47421cf7dc259eb6240bdffe2478a7"><code>f4ab416</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3498">#3498</a> from hey-api/fix/dev-mode-check</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/ea2538b221605ee1ba900d173394cd4f0aab8b12"><code>ea2538b</code></a> fix: simplify dev mode check</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3ae2b77833a70c07986282ab157419be70c0ac13"><code>3ae2b77</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3497">#3497</a> from hey-api/copilot/expand-metadata-option-zod-valibot</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.93.0...@hey-api/openapi-ts@0.94.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
7023620097 |
Bump @typescript-eslint/parser from 8.56.0 to 8.57.0 in /frontend (#1605)
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 8.56.0 to 8.57.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.57.0</h2> <h2>8.57.0 (2026-03-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] allow literal loop conditions in for/do loops (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12080">#12080</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [strict-void-return] false positives with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12055">#12055</a>)</li> <li><strong>eslint-plugin:</strong> handle statically analyzable computed keys in prefer-readonly (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12079">#12079</a>)</li> <li><strong>eslint-plugin:</strong> guard against negative paramIndex in no-useless-default-assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12077">#12077</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-promise-reject-errors] add allow <code>TypeOrValueSpecifier</code> to prefer-promise-reject-errors (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12094">#12094</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] fix false positive for toString with overloads (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12089">#12089</a>)</li> <li><strong>typescript-estree:</strong> switch back to use <code>ts.getModifiers()</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12034">#12034</a>)</li> <li><strong>typescript-estree:</strong> if the template literal is tagged and the text has an invalid escape, <code>cooked</code> will be <code>null</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11355">#11355</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>Brian Schlenker <a href="https://github.com/bschlenk"><code>@bschlenk</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@fisker</code></a></li> <li>James Henry <a href="https://github.com/JamesHenry"><code>@JamesHenry</code></a></li> <li>Josh Goldberg</li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>Moses Odutusin <a href="https://github.com/thebolarin"><code>@thebolarin</code></a></li> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.56.1</h2> <h2>8.56.1 (2026-02-23)</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): update dependency minimatch to v10.2.2 by <a href="https://github.com/benmccann"><code>@benmccann</code></a> in <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12074">typescript-eslint/typescript-eslint#12074</a></li> </ul> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.57.0 (2026-03-09)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.56.1 (2026-02-23)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2c6aeeec238dfea860b9f3c146a55f8f49f15cf5"><code>2c6aeee</code></a> chore(release): publish 8.57.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f696dadfc37078efe4119ad2ab0609cde3e42766"><code>f696dad</code></a> chore: use pnpm catalog (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12047">#12047</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a09921e2de2e8790e6a803016b825815ca9409d8"><code>a09921e</code></a> chore: update vitest to 4.x (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12071">#12071</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/96a04a97454cf6b6ae8366711c09333bf6e2327a"><code>96a04a9</code></a> chore(release): publish 8.56.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/parser">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
f886f9e3c2 |
Bump @tabler/icons-react from 3.38.0 to 3.40.0 in /frontend (#1602)
Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.38.0 to 3.40.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases"><code>@tabler/icons-react</code>'s releases</a>.</em></p> <blockquote> <h2>Release 3.40.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/api-book</code></li> <li><code>outline/brand-infakt</code></li> <li><code>outline/circle-open-arrow-down</code></li> <li><code>outline/circle-open-arrow-left</code></li> <li><code>outline/circle-open-arrow-right</code></li> <li><code>outline/circle-open-arrow-up</code></li> <li><code>outline/circle-plus-minus</code></li> <li><code>outline/home-lock</code></li> <li><code>outline/map-lock</code></li> <li><code>outline/map-shield</code></li> <li><code>outline/mesh</code></li> <li><code>outline/queue-pop-in</code></li> <li><code>outline/queue-pop-out</code></li> <li><code>outline/stroke-curved</code></li> <li><code>outline/stroke-dynamic</code></li> <li><code>outline/stroke-straight</code></li> <li><code>outline/trending-up-down</code></li> <li><code>outline/vip-2</code></li> </ul> <p>Fixed icons: <code>outline/api</code>, <code>outline/home-shield</code></p> <h2>Release 3.39.0</h2> <!-- raw HTML omitted --> <h3>18 new icons:</h3> <ul> <li><code>outline/ai-agent</code></li> <li><code>outline/ai-agents</code></li> <li><code>outline/ai-gateway</code></li> <li><code>outline/bot-id</code></li> <li><code>outline/canary</code></li> <li><code>outline/codeblock</code></li> <li><code>outline/connection</code></li> <li><code>outline/credits</code></li> <li><code>outline/firewall-check</code></li> <li><code>outline/firewall-flame</code></li> <li><code>outline/image-generation</code></li> <li><code>outline/microfrontends</code></li> <li><code>outline/middleware</code></li> <li><code>outline/scan-traces</code></li> <li><code>outline/serverless</code></li> <li><code>outline/user-key</code></li> <li><code>outline/world-map</code></li> <li><code>outline/zero-config</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/e4ca37707bd3f165a75ffa050755116ccde5a9a0"><code>e4ca377</code></a> Release 3.40.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/602a746fd925dc950e777eaa4c3f35a9e55bba94"><code>602a746</code></a> Release 3.39.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/ac3715cabbb41e432c860387cf55beee5d7d24c6"><code>ac3715c</code></a> Refactor clean script in package.json files to improve directory cleanup proc...</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.40.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d2131d38c7 |
Bump react-icons from 5.5.0 to 5.6.0 in /frontend (#1603)
Bumps [react-icons](https://github.com/react-icons/react-icons) from 5.5.0 to 5.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react-icons/react-icons/releases">react-icons's releases</a>.</em></p> <blockquote> <h2>v5.6.0</h2> <h2>What's Changed</h2> <ul> <li>Bump prismjs from 1.29.0 to 1.30.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1033">react-icons/react-icons#1033</a></li> <li>Bump <code>@babel/helpers</code> from 7.23.2 to 7.26.10 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1036">react-icons/react-icons#1036</a></li> <li>Bump http-proxy-middleware from 2.0.7 to 2.0.9 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1041">react-icons/react-icons#1041</a></li> <li>Bump form-data from 3.0.1 to 3.0.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1058">react-icons/react-icons#1058</a></li> <li>Bump vite from 5.4.14 to 5.4.20 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1071">react-icons/react-icons#1071</a></li> <li>upgrade packages by <a href="https://github.com/kamijin-fanta"><code>@kamijin-fanta</code></a> in <a href="https://redirect.github.com/react-icons/react-icons/pull/1075">react-icons/react-icons#1075</a></li> <li>Bump tar from 6.2.0 to 6.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1078">react-icons/react-icons#1078</a></li> <li>Bump vite from 6.3.6 to 6.4.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1081">react-icons/react-icons#1081</a></li> <li>Bump tmp from 0.2.3 to 0.2.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1077">react-icons/react-icons#1077</a></li> <li>Bump glob from 11.0.3 to 11.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1089">react-icons/react-icons#1089</a></li> <li>Bump <code>@babel/runtime</code> from 7.23.2 to 7.28.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1073">react-icons/react-icons#1073</a></li> <li>Bump node-forge from 1.3.1 to 1.3.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1092">react-icons/react-icons#1092</a></li> <li>Bump mdast-util-to-hast from 13.0.2 to 13.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1094">react-icons/react-icons#1094</a></li> <li>Bump undici from 7.16.0 to 7.18.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1103">react-icons/react-icons#1103</a></li> <li>Bump devalue from 5.3.2 to 5.6.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1104">react-icons/react-icons#1104</a></li> <li>Bump h3 from 1.15.4 to 1.15.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1105">react-icons/react-icons#1105</a></li> <li>Bump diff from 5.2.0 to 5.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1107">react-icons/react-icons#1107</a></li> <li>Bump webpack from 5.94.0 to 5.104.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1110">react-icons/react-icons#1110</a></li> <li>Bump jsonpath from 1.1.1 to 1.2.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1113">react-icons/react-icons#1113</a></li> <li>Bump devalue from 5.6.2 to 5.6.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1115">react-icons/react-icons#1115</a></li> <li>Bump astro from 5.14.1 to 5.15.9 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1091">react-icons/react-icons#1091</a></li> <li>Bump ajv from 6.12.6 to 6.14.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/react-icons/react-icons/pull/1116">react-icons/react-icons#1116</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/react-icons/react-icons/compare/v5.5.0...v5.6.0">https://github.com/react-icons/react-icons/compare/v5.5.0...v5.6.0</a></p> <table> <thead> <tr> <th>Icon Library</th> <th>License</th> <th>Version</th> <th align="right">Count</th> </tr> </thead> <tbody> <tr> <td><a href="https://circumicons.com/">Circum Icons</a></td> <td><a href="https://github.com/Klarr-Agency/Circum-Icons/blob/main/LICENSE">MPL-2.0 license</a></td> <td>1.0.0</td> <td align="right">288</td> </tr> <tr> <td><a href="https://fontawesome.com/">Font Awesome 5</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 License</a></td> <td>5.15.4-3-gafecf2a</td> <td align="right">1612</td> </tr> <tr> <td><a href="https://fontawesome.com/">Font Awesome 6</a></td> <td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 License</a></td> <td>6.7.2-1-g840c215</td> <td align="right">2060</td> </tr> <tr> <td><a href="https://ionicons.com/">Ionicons 4</a></td> <td><a href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td> <td>4.6.3</td> <td align="right">696</td> </tr> <tr> <td><a href="https://ionicons.com/">Ionicons 5</a></td> <td><a href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td> <td>5.5.4</td> <td align="right">1332</td> </tr> <tr> <td><a href="http://google.github.io/material-design-icons/">Material Design icons</a></td> <td><a href="https://github.com/google/material-design-icons/blob/master/LICENSE">Apache License Version 2.0</a></td> <td>4.0.0-142-gbb04090f93</td> <td align="right">4341</td> </tr> <tr> <td><a href="http://s-ings.com/typicons/">Typicons</a></td> <td><a href="https://creativecommons.org/licenses/by-sa/3.0/">CC BY-SA 3.0</a></td> <td>2.1.2</td> <td align="right">336</td> </tr> <tr> <td><a href="https://octicons.github.com/">Github Octicons icons</a></td> <td><a href="https://github.com/primer/octicons/blob/master/LICENSE">MIT</a></td> <td>18.3.0</td> <td align="right">264</td> </tr> <tr> <td><a href="https://feathericons.com/">Feather</a></td> <td><a href="https://github.com/feathericons/feather/blob/master/LICENSE">MIT</a></td> <td>4.29.2</td> <td align="right">287</td> </tr> <tr> <td><a href="https://lucide.dev/">Lucide</a></td> <td><a href="https://github.com/lucide-icons/lucide/blob/main/LICENSE">ISC</a></td> <td>0.462.0</td> <td align="right">1541</td> </tr> <tr> <td><a href="https://game-icons.net/">Game Icons</a></td> <td><a href="https://creativecommons.org/licenses/by/3.0/">CC BY 3.0</a></td> <td>12920d6565588f0512542a3cb0cdfd36a497f910</td> <td align="right">4040</td> </tr> <tr> <td><a href="https://erikflowers.github.io/weather-icons/">Weather Icons</a></td> <td><a href="http://scripts.sil.org/OFL">SIL OFL 1.1</a></td> <td>2.0.12</td> <td align="right">219</td> </tr> <tr> <td><a href="https://vorillaz.github.io/devicons/">Devicons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.8.0</td> <td align="right">192</td> </tr> <tr> <td><a href="https://github.com/ant-design/ant-design-icons">Ant Design Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>4.4.2</td> <td align="right">831</td> </tr> <tr> <td><a href="https://github.com/twbs/icons">Bootstrap Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.13.1</td> <td align="right">2754</td> </tr> <tr> <td><a href="https://github.com/Remix-Design/RemixIcon">Remix Icon</a></td> <td><a href="http://www.apache.org/licenses/">Apache License Version 2.0</a></td> <td>4.6.0</td> <td align="right">3058</td> </tr> <tr> <td><a href="https://github.com/icons8/flat-color-icons">Flat Color Icons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.0.2</td> <td align="right">329</td> </tr> <tr> <td><a href="https://github.com/grommet/grommet-icons">Grommet-Icons</a></td> <td><a href="http://www.apache.org/licenses/">Apache License Version 2.0</a></td> <td>4.14.0</td> <td align="right">637</td> </tr> <tr> <td><a href="https://github.com/tailwindlabs/heroicons">Heroicons</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>1.0.6</td> <td align="right">460</td> </tr> <tr> <td><a href="https://github.com/tailwindlabs/heroicons">Heroicons 2</a></td> <td><a href="https://opensource.org/licenses/MIT">MIT</a></td> <td>2.2.0</td> <td align="right">972</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react-icons/react-icons/commit/6501a4156153b396d062deffed5ed2c8eb64a458"><code>6501a41</code></a> v5.6.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/387e78027eeea4ef28df13b732e5906725ee3c2f"><code>387e780</code></a> update icons</li> <li><a href="https://github.com/react-icons/react-icons/commit/fb057e730c8f3bfb9b698ecf7f3f92ee3c43afd9"><code>fb057e7</code></a> 5.5.1-snapshot.0</li> <li><a href="https://github.com/react-icons/react-icons/commit/6f7475550af2cacfcfa87e4127b8803a3d5fee6c"><code>6f74755</code></a> update eslint</li> <li><a href="https://github.com/react-icons/react-icons/commit/73c281f3323d720a5cf8ff626ce4dd04e62afb88"><code>73c281f</code></a> Bump ajv from 6.12.6 to 6.14.0 (<a href="https://redirect.github.com/react-icons/react-icons/issues/1116">#1116</a>)</li> <li><a href="https://github.com/react-icons/react-icons/commit/3f2b26446f3943a2a11c083f2073e20c3f222c7b"><code>3f2b264</code></a> Bump astro from 5.14.1 to 5.15.9 (<a href="https://redirect.github.com/react-icons/react-icons/issues/1091">#1091</a>)</li> <li><a href="https://github.com/react-icons/react-icons/commit/04adc762186d4adc6428279cc6d9119f2894ae20"><code>04adc76</code></a> Bump devalue from 5.6.2 to 5.6.3 (<a href="https://redirect.github.com/react-icons/react-icons/issues/1115">#1115</a>)</li> <li><a href="https://github.com/react-icons/react-icons/commit/44a5e85bcc53a51950cb53f25f9f5ed8fdbdafb8"><code>44a5e85</code></a> Bump jsonpath from 1.1.1 to 1.2.1 (<a href="https://redirect.github.com/react-icons/react-icons/issues/1113">#1113</a>)</li> <li><a href="https://github.com/react-icons/react-icons/commit/e2c1d6ccc98ab477b7aa992bf1f9836b6eca80da"><code>e2c1d6c</code></a> Bump webpack from 5.94.0 to 5.104.1 (<a href="https://redirect.github.com/react-icons/react-icons/issues/1110">#1110</a>)</li> <li><a href="https://github.com/react-icons/react-icons/commit/f3dca028cec5bb6012b95dc03e3ff0efb71709b5"><code>f3dca02</code></a> Bump diff from 5.2.0 to 5.2.2 (<a href="https://redirect.github.com/react-icons/react-icons/issues/1107">#1107</a>)</li> <li>Additional commits viewable in <a href="https://github.com/react-icons/react-icons/compare/v5.5.0...v5.6.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d4ae165d3f |
Bump @types/node from 25.3.0 to 25.4.0 in /frontend (#1601)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.3.0 to 25.4.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
0f912f15fe |
Bump @tabler/icons-react from 3.37.1 to 3.38.0 in /frontend (#1587)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.37.1 to 3.38.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases"><code>@tabler/icons-react</code>'s releases</a>.</em></p> <blockquote> <h2>Release 3.38.0</h2> <!-- raw HTML omitted --> <h3>34 new icons:</h3> <ul> <li><code>filled/adjustments-horizontal</code></li> <li><code>filled/check</code></li> <li><code>filled/chevron-down</code></li> <li><code>filled/chevron-right</code></li> <li><code>filled/click</code></li> <li><code>filled/copy</code></li> <li><code>filled/database</code></li> <li><code>filled/device-floppy</code></li> <li><code>filled/device-gamepad-2</code></li> <li><code>filled/dots-vertical</code></li> <li><code>filled/dots</code></li> <li><code>filled/download</code></li> <li><code>filled/edit</code></li> <li><code>filled/external-link</code></li> <li><code>filled/headset</code></li> <li><code>filled/help</code></li> <li><code>filled/home-2</code></li> <li><code>filled/id</code></li> <li><code>filled/link</code></li> <li><code>filled/list-check</code></li> <li><code>filled/list-details</code></li> <li><code>filled/list</code></li> <li><code>filled/menu-2</code></li> <li><code>filled/messages</code></li> <li><code>filled/pencil</code></li> <li><code>filled/plus</code></li> <li><code>filled/scale</code></li> <li><code>filled/school</code></li> <li><code>filled/search</code></li> <li><code>filled/send</code></li> <li><code>filled/ticket</code></li> <li><code>filled/tools-kitchen-2</code></li> <li><code>filled/world</code></li> <li><code>filled/x</code></li> </ul> <p>Fixed icons: <code>filled/calendar-event</code>, <code>filled/trash</code></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/44681e5d20b3dc4c2d066d3705ba241822f630d9"><code>44681e5</code></a> Release 3.38.0</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.38.0/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
76fca6bff7 |
Bump @hey-api/openapi-ts from 0.92.3 to 0.93.0 in /frontend (#1578)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from 0.92.3 to 0.93.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hey-api/openapi-ts/releases"><code>@hey-api/openapi-ts</code>'s releases</a>.</em></p> <blockquote> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.93.0</h2> <h3>Minor Changes</h3> <ul> <li><strong>plugin(valibot)</strong>: remove <code>enum.nodes.nullable</code> resolver node (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3396">#3396</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/ea6f3865c8e381b3160e1526435c4522f0dc6aa4"><code>ea6f386</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Removed resolver node</h3> <p>Valibot plugin no longer exposes the <code>enum.nodes.nullable</code> node. It was refactored so that nullable values are handled outside of resolvers.</p> <ul> <li><strong>plugin(zod)</strong>: remove <code>enum.nodes.nullable</code> resolver node (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3398">#3398</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/737730c9c6450c60a81a8949259336e790e9b4f4"><code>737730c</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Removed resolver node</h3> <p>Zod plugin no longer exposes the <code>enum.nodes.nullable</code> node. It was refactored so that nullable values are handled outside of resolvers.</p> <h3>Patch Changes</h3> <ul> <li> <p><strong>parser</strong>: prefer unprefixed schema names from external files (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3417">#3417</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/f3a264b2c5d7af06bb44fa0350ef613bde3aff87"><code>f3a264b</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>parser(patch)</strong>: support callback for <code>patch.schemas</code> (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3415">#3415</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/e494f4dd828167a0096a0a488b222a013f911055"><code>e494f4d</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>output</strong>: fix: apply <code>output.header</code> to bundled files (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3438">#3438</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/bcd0a87cdd366cef572eb920b59c115ae65f67bb"><code>bcd0a87</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>parser</strong>: handle OpenAPI 3.1 <code>contentMediaType</code> keyword as binary format when file-like (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3431">#3431</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/d6a85381e3c52b4fd1c4af43ee57506459db7a45"><code>d6a8538</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>input</strong>: fix: improve returned status code when spec fetch fails (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3427">#3427</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/37dd92c6629511860ae434c64ac8af9154ed6aed"><code>37dd92c</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>client</strong>: expose <code>onRequest</code> in RequestOptions for SSE request interception (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3392">#3392</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/8fc46819d5df1d4a353be5ae7cd45a8c669a5d7e"><code>8fc4681</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>parser</strong>: add <code>patch.input</code> and shorthand <code>patch()</code> option for full specification transformations (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3411">#3411</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/ba9f893d71b959721e177717ae85fce34d697002"><code>ba9f893</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>parser</strong>: fix: preserve <code>unevaluatedProperties</code> keyword in transforms (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3435">#3435</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/f659b38701795d2c2b61c8d3f5c43af93893481a"><code>f659b38</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>plugin(zod)</strong>: use <code>.nullable()</code> and <code>.nullish()</code> methods (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3398">#3398</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/737730c9c6450c60a81a8949259336e790e9b4f4"><code>737730c</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>parser</strong>: fix: resolve sibling schemas from external files during bundling (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3422">#3422</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/19fd80aff26b1198d6838d48357702c39ad05501"><code>19fd80a</code></a>) by <a href="https://github.com/j-westover"><code>@j-westover</code></a></p> </li> <li> <p><strong>parser(transforms)</strong>: add <code>schemaName</code> transform (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3416">#3416</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/4b9d032c6a144fa79cedc28e077782b9d67803a3"><code>4b9d032</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>plugin(valibot)</strong>: use <code>.nullable()</code> and <code>.nullish()</code> methods (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3396">#3396</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/ea6f3865c8e381b3160e1526435c4522f0dc6aa4"><code>ea6f386</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>input</strong>: fix: avoid prefixing sources if paths do not collide on operations (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3436">#3436</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/b1a419a835c312a1f8bf36a5b781109368041220"><code>b1a419a</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>parser(patch)</strong>: support callback for <code>patch.operations</code> (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3420">#3420</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/e1cd970e4f3028b29ace44a58b2d2cae18a6c45f"><code>e1cd970</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> <li> <p><strong>parser</strong>: add support for non-string discriminator property types (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3385">#3385</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/dd0be9c6ca93552c3367ca8e8ba785381295a112"><code>dd0be9c</code></a>) by <a href="https://github.com/SipanP"><code>@SipanP</code></a></p> </li> </ul> <h3>Updated Dependencies:</h3> <ul> <li><code>@hey-api/shared</code><a href="https://github.com/0"><code>@0</code></a>.2.1</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/openapi-ts/commit/6e46330ed8b5796eba872bcd59f77d8a2ca32526"><code>6e46330</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3393">#3393</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/c9ddeec795ba9a819cd25cb948c1a62539b41d94"><code>c9ddeec</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/f3253660d1aa42ad33f88cbd44bf08db4102d77b"><code>f325366</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3440">#3440</a> from hey-api/chore/py-dsl-types</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/406fa1c7255c69498981ab47b1adaeee0d8fb630"><code>406fa1c</code></a> chore: clean up some assertions</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/14f2894cd7be943deec36e7ca598f680bffde4cc"><code>14f2894</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3438">#3438</a> from hey-api/copilot/fix-output-header-config</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/c66d565e8595ef0db9060b98a43f6113803facbd"><code>c66d565</code></a> Fix typecheck error: use typeof string check instead of Array.isArray for Rea...</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/bcd0a87cdd366cef572eb920b59c115ae65f67bb"><code>bcd0a87</code></a> Create famous-pianos-attack.md</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/077adc69ab3959f6f2ff3008f0dfccce40258809"><code>077adc6</code></a> Remove hardcoded header fallback; apply same fix to openapi-python</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/243d33a1fc66a93c0e00444d90e21cb403625068"><code>243d33a</code></a> Fix output header config not applied to bundled client files</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3e974bb93d214c791968288a78e97ebd728c772d"><code>3e974bb</code></a> Initial plan</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.92.3...@hey-api/openapi-ts@0.93.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
732693b5b7 |
Bump eslint-plugin-testing-library from 7.15.1 to 7.16.0 in /frontend (#1579)
Bumps [eslint-plugin-testing-library](https://github.com/testing-library/eslint-plugin-testing-library) from 7.15.1 to 7.16.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/testing-library/eslint-plugin-testing-library/releases">eslint-plugin-testing-library's releases</a>.</em></p> <blockquote> <h2>v7.16.0</h2> <h1><a href="https://github.com/testing-library/eslint-plugin-testing-library/compare/v7.15.4...v7.16.0">7.16.0</a> (2026-02-17)</h1> <h3>Features</h3> <ul> <li>support ESLint v10 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1211">#1211</a>) (<a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/af31739e0c47ba053154c4210f68fe922af39759">af31739</a>)</li> </ul> <h2>v7.15.4</h2> <h2><a href="https://github.com/testing-library/eslint-plugin-testing-library/compare/v7.15.3...v7.15.4">7.15.4</a> (2025-12-31)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> bump <code>typescript-eslint</code> to v8.51.0 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1171">#1171</a>) (<a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/b8ef3772487a32c886cb5c338da2a144560a437b">b8ef377</a>)</li> </ul> <h2>v7.15.3</h2> <h2><a href="https://github.com/testing-library/eslint-plugin-testing-library/compare/v7.15.2...v7.15.3">7.15.3</a> (2025-12-22)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> bump <code>typescript-eslint</code> to v8.50.0 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1164">#1164</a>) (<a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/c23f025277d32b90c879daf85a8b79e5a29eb5c9">c23f025</a>)</li> </ul> <h2>v7.15.2</h2> <h2><a href="https://github.com/testing-library/eslint-plugin-testing-library/compare/v7.15.1...v7.15.2">7.15.2</a> (2025-12-22)</h2> <h3>Bug Fixes</h3> <ul> <li>expose correct meta version (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1163">#1163</a>) (<a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/d994f0c0339977f2d43b8a61d2bacc10940c39ce">d994f0c</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/af31739e0c47ba053154c4210f68fe922af39759"><code>af31739</code></a> feat: support ESLint v10 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1211">#1211</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/340cf4842b54af47b9495d3bedfa38dc72f60729"><code>340cf48</code></a> chore(deps): update dependency <code>@types/node</code> to v22.19.11 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1215">#1215</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/4f87fd32db140ea711ca7f53225a0c89a3eb7a36"><code>4f87fd3</code></a> chore(deps): update dependency <code>@vitest/eslint-plugin</code> to v1.6.7 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1214">#1214</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/9e508289274c195b8d9ce97d276375a3bea59578"><code>9e50828</code></a> chore(deps): update dependency <code>@types/node</code> to v22.19.10 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1213">#1213</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/9d82486aa80821a50963393c53c87514147c8e3d"><code>9d82486</code></a> chore(deps): update dependency <code>@types/node</code> to v22.19.9 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1210">#1210</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/0bc70623a96c695c24850ad7f4e072de7ffc9a6e"><code>0bc7062</code></a> chore(deps): update dependency tsdown to v0.20.3 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1209">#1209</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/e1f11a71af7327ce2da8609fab96cf691b491f62"><code>e1f11a7</code></a> chore(deps): update dependency <code>@types/node</code> to v22.19.8 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1208">#1208</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/52f20bad6b28cd66445cf024141c0d0d97090e89"><code>52f20ba</code></a> build(deps): bump npm from 11.7.0 to 11.9.0 in the npm_and_yarn group across ...</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/1e1b271026fa447b03b420965483cea75d2bc157"><code>1e1b271</code></a> chore(deps): update dependency globals to v17.3.0 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1205">#1205</a>)</li> <li><a href="https://github.com/testing-library/eslint-plugin-testing-library/commit/3e2aad5427c8a2eb23167d306cc81c43c5176cc4"><code>3e2aad5</code></a> chore(deps): update commitlint monorepo to v20.4.1 (<a href="https://redirect.github.com/testing-library/eslint-plugin-testing-library/issues/1206">#1206</a>)</li> <li>Additional commits viewable in <a href="https://github.com/testing-library/eslint-plugin-testing-library/compare/v7.15.1...v7.16.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
c418085462 |
Bump @typescript-eslint/eslint-plugin from 8.55.0 to 8.56.0 in /frontend (#1580)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 8.55.0 to 8.56.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.56.0</h2> <h2>8.56.0 (2026-02-16)</h2> <h3>🚀 Features</h3> <ul> <li>support ESLint v10 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12057">#12057</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li>use parser options from context.languageOptions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12043">#12043</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>fnx <a href="https://github.com/DMartens"><code>@DMartens</code></a></li> <li>Joshua Chen</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.56.0 (2026-02-16)</h2> <h3>🚀 Features</h3> <ul> <li>support ESLint v10 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12057">#12057</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li>use parser options from context.languageOptions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12043">#12043</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>fnx <a href="https://github.com/DMartens"><code>@DMartens</code></a></li> <li>Joshua Chen</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8b8b68f200a48ee9d6f7be8670e964629375196c"><code>8b8b68f</code></a> chore(release): publish 8.56.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/68a074fb61a10c3627f09678859fb4d42a3b88f5"><code>68a074f</code></a> feat: support ESLint v10 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12057">#12057</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c0a359df266e2ff4903eff2fdfa6c8ea30b84bca"><code>c0a359d</code></a> fix: use parser options from context.languageOptions (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12043">#12043</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
47a6401d4f |
Bump @tabler/icons-react from 3.36.0 to 3.37.1 in /frontend (#1576)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react) from 3.36.0 to 3.37.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tabler/tabler-icons/releases"><code>@tabler/icons-react</code>'s releases</a>.</em></p> <blockquote> <h2>Release 3.37.1</h2> <h3>Fixed</h3> <ul> <li>Fixed icon: <code>credit-card-off</code></li> <li>Added missing icon versions metadata</li> </ul> <h2>Release 3.37.0</h2> <!-- raw HTML omitted --> <h3>20 new icons:</h3> <ul> <li><code>filled/ball-bowling</code></li> <li><code>filled/crown</code></li> <li><code>filled/folder</code></li> <li><code>filled/leaf</code></li> <li><code>filled/pacman</code></li> <li><code>filled/phone-call</code></li> <li><code>filled/phone-calling</code></li> <li><code>filled/phone-check</code></li> <li><code>filled/phone-x</code></li> <li><code>filled/plane-arrival</code></li> <li><code>filled/plane-departure</code></li> <li><code>filled/plane-tilt</code></li> <li><code>filled/plane</code></li> <li><code>filled/play-card</code></li> <li><code>filled/playlist</code></li> <li><code>filled/report-analytics</code></li> <li><code>filled/report-money</code></li> <li><code>filled/satellite</code></li> <li><code>filled/sparkles-2</code></li> <li><code>filled/sparkles</code></li> </ul> <p>Fixed icon: <code>outline/pacman</code></p> <h2>Releace 3.36.1</h2> <h3>Changed</h3> <ul> <li><strong>2,433 icons</strong> have been optimized and fixed</li> <li><code>outline/brand-adobe-premier</code> → <code>outline/brand-adobe-premiere</code> (typo fix)</li> </ul> <h3>Fixed</h3> <ul> <li><strong>React</strong> (<code>@tabler/icons-react</code>): Fixed TypeScript type definition for <code>TablerIcon</code> to properly handle ref forwarding</li> <li><strong>Webfont</strong> (<code>@tabler/icons-webfont</code>): Fixed font generation - icons now render correctly in webfont format</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tabler/tabler-icons/commit/f4b74b4f49e0bf58b303cc5ae7b5b2e6ad354a38"><code>f4b74b4</code></a> Release 3.37.1</li> <li><a href="https://github.com/tabler/tabler-icons/commit/5f64612d54a9e0f1941e603ed9c19b72effce086"><code>5f64612</code></a> Release 3.37.0</li> <li><a href="https://github.com/tabler/tabler-icons/commit/0094572ac251d3c9bddef0501cd1b296423a2f62"><code>0094572</code></a> Release 3.36.1</li> <li><a href="https://github.com/tabler/tabler-icons/commit/73587799790ba9f7c6062964a7406242ec5dcfe4"><code>7358779</code></a> Remove eleventy-sass dependency and update <code>@tabler/icons</code> references to use wo...</li> <li><a href="https://github.com/tabler/tabler-icons/commit/2702274bfaf92fdd92d17733e7a3e145f6c7c6b7"><code>2702274</code></a> Update package dependencies and configurations (<a href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1447">#1447</a>)</li> <li><a href="https://github.com/tabler/tabler-icons/commit/78e46e478dc357ba7bf1e0dcde2eb11cf3ff00b9"><code>78e46e4</code></a> Added type checks in <code>icons-react</code> tests and ensured consistent dependency ma...</li> <li>See full diff in <a href="https://github.com/tabler/tabler-icons/commits/v3.37.1/packages/icons-react">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
0df42354ac |
Bump @types/node from 25.2.0 to 25.3.0 in /frontend (#1574)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.2.0 to 25.3.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
d5d4cde2ce |
Bump @typescript-eslint/parser from 8.55.0 to 8.56.0 in /frontend (#1563)
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 8.55.0 to 8.56.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.56.0</h2> <h2>8.56.0 (2026-02-16)</h2> <h3>🚀 Features</h3> <ul> <li>support ESLint v10 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12057">#12057</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li>use parser options from context.languageOptions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12043">#12043</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>fnx <a href="https://github.com/DMartens"><code>@DMartens</code></a></li> <li>Joshua Chen</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.56.0 (2026-02-16)</h2> <h3>🚀 Features</h3> <ul> <li>support ESLint v10 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12057">#12057</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>Joshua Chen</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8b8b68f200a48ee9d6f7be8670e964629375196c"><code>8b8b68f</code></a> chore(release): publish 8.56.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/68a074fb61a10c3627f09678859fb4d42a3b88f5"><code>68a074f</code></a> feat: support ESLint v10 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12057">#12057</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/parser">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
dd9a159843 |
Bump @typescript-eslint/eslint-plugin from 7.18.0 to 8.55.0 in /frontend (#1562)
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 7.18.0 to 8.55.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@typescript-eslint/eslint-plugin</code>'s releases</a>.</em></p> <blockquote> <h2>v8.55.0</h2> <h2>8.55.0 (2026-02-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>utils:</strong> deprecate defaultOptions in favor of meta.defaultOptions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11992">#11992</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unused-vars] remove trailing newline when removing entire import (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11990">#11990</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] require strictNullChecks (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11966">#11966</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12000">#12000</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] report unnecessary defaults in ternary expressions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11984">#11984</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] reduce param index to ts this handling (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11949">#11949</a>)</li> <li><strong>typescript-estree:</strong> forbid invalid modifier in object expression (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11931">#11931</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Christian Rose <a href="https://github.com/chrros95"><code>@chrros95</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@fisker</code></a></li> <li>Josh Goldberg</li> <li>Maria Solano <a href="https://github.com/MariaSolOs"><code>@MariaSolOs</code></a></li> <li>Minyeong Kim <a href="https://github.com/minyeong981"><code>@minyeong981</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Yukihiro Hasegawa <a href="https://github.com/y-hsgw"><code>@y-hsgw</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.54.0</h2> <h2>8.54.0 (2026-01-26)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin-internal:</strong> add prefer-tsutils-methods rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11974">#11974</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11625">#11625</a>)</li> <li><strong>scope-manager:</strong> support ScopeManager#addGlobals (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11914">#11914</a>)</li> <li><strong>typescript-estree:</strong> add shortcut methods to ParserServicesWithTypeInformation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11965">#11965</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11955">#11955</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unused-private-class-members] private destructured class member is defined but used (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11785">#11785</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11967">#11967</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11559">#11559</a>)</li> <li><strong>scope-manager:</strong> fix catch clause scopes <code>def.name</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11982">#11982</a>)</li> <li><strong>scope-manager:</strong> prevent misidentification of <code>"use strict"</code> directives (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11995">#11995</a>)</li> <li><strong>utils:</strong> handle missing <code>FlatESLint</code> and <code>LegacyESLint</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11958">#11958</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>fnx <a href="https://github.com/DMartens"><code>@DMartens</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@typescript-eslint/eslint-plugin</code>'s changelog</a>.</em></p> <blockquote> <h2>8.55.0 (2026-02-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>utils:</strong> deprecate defaultOptions in favor of meta.defaultOptions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11992">#11992</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] reduce param index to ts this handling (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11949">#11949</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] report unnecessary defaults in ternary expressions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11984">#11984</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] require strictNullChecks (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11966">#11966</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12000">#12000</a>)</li> <li><strong>eslint-plugin:</strong> [no-unused-vars] remove trailing newline when removing entire import (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11990">#11990</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Christian Rose <a href="https://github.com/chrros95"><code>@chrros95</code></a></li> <li>Josh Goldberg</li> <li>Maria Solano <a href="https://github.com/MariaSolOs"><code>@MariaSolOs</code></a></li> <li>Minyeong Kim <a href="https://github.com/minyeong981"><code>@minyeong981</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Yukihiro Hasegawa <a href="https://github.com/y-hsgw"><code>@y-hsgw</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.54.0 (2026-01-26)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin-internal:</strong> add prefer-tsutils-methods rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11974">#11974</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11625">#11625</a>)</li> <li><strong>typescript-estree:</strong> add shortcut methods to ParserServicesWithTypeInformation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11965">#11965</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11955">#11955</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11967">#11967</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11559">#11559</a>)</li> <li><strong>deps:</strong> update dependency prettier to v3.8.0 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11991">#11991</a>)</li> <li><strong>scope-manager:</strong> fix catch clause scopes <code>def.name</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11982">#11982</a>)</li> <li><strong>eslint-plugin:</strong> [no-unused-private-class-members] private destructured class member is defined but used (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11785">#11785</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>Josh Goldberg</li> <li>MinJae <a href="https://github.com/Ju-MINJAE"><code>@Ju-MINJAE</code></a></li> <li>Minyeong Kim <a href="https://github.com/minyeong981"><code>@minyeong981</code></a></li> <li>overlookmotel</li> <li>Yuya Yoshioka <a href="https://github.com/YuyaYoshioka"><code>@YuyaYoshioka</code></a></li> <li>김현수 <a href="https://github.com/Kimsoo0119"><code>@Kimsoo0119</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/fedfe8665afbabd5c7d3ee09d14f450d5ba0b10a"><code>fedfe86</code></a> chore(release): publish 8.55.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8a95834bb5fd818cc049390e4cb57196717a011f"><code>8a95834</code></a> fix(eslint-plugin): [no-useless-default-assignment] reduce param index to ts ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4ba1e72cd76f357044dca209978d87137c31e6c0"><code>4ba1e72</code></a> fix(eslint-plugin): [no-useless-default-assignment] report unnecessary defaul...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a1f86179074a143fdb06445a28b1144427d33ec9"><code>a1f8617</code></a> feat(utils): deprecate defaultOptions in favor of meta.defaultOptions (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/11992">#11992</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3f0ce54da520cdc58f1dd2e2c45073c92617e2c2"><code>3f0ce54</code></a> fix(eslint-plugin): [no-useless-default-assignment] require strictNullChecks ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3df0002e8663f170749cc4a9a054af377cf0c554"><code>3df0002</code></a> fix(eslint-plugin): [no-unused-vars] remove trailing newline when removing en...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/b931f8c706beafc289462824814dca158694cb48"><code>b931f8c</code></a> chore: use workspace refs for workspace deps (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12018">#12018</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1f17a7918cd507b11fd04ce75fe44a9c62bf9542"><code>1f17a79</code></a> chore: migrate to pnpm (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/11248">#11248</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/d423e57622e1c8e789a1b84109d1ab2c15497507"><code>d423e57</code></a> chore(release): publish 8.54.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/80e33ff2fd81f88100cda942db5232851adab90e"><code>80e33ff</code></a> feat(eslint-plugin-internal): add prefer-tsutils-methods rule (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/11974">#11974</a>)</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.55.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for <code>@typescript-eslint/eslint-plugin</code> since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
0220b1b7e3 |
Bump eslint-config-mantine from 3.2.0 to 4.0.3 in /frontend (#1544)
Bumps [eslint-config-mantine](https://github.com/mantinedev/eslint-config-mantine) from 3.2.0 to 4.0.3. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/mantinedev/eslint-config-mantine/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
13e9c6e228 |
Bump axios from 1.13.0 to 1.13.5 in /frontend (#1555)
Bumps [axios](https://github.com/axios/axios) from 1.13.0 to 1.13.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v1.13.5</h2> <h2>Release 1.13.5</h2> <h3>Highlights</h3> <ul> <li><strong>Security:</strong> Fixed a potential <strong>Denial of Service</strong> issue involving the <code>__proto__</code> key in <code>mergeConfig</code>. (PR <a href="https://redirect.github.com/axios/axios/pull/7369">#7369</a>)</li> <li><strong>Bug fix:</strong> Resolved an issue where <code>AxiosError</code> could be missing the <code>status</code> field on and after <strong>v1.13.3</strong>. (PR <a href="https://redirect.github.com/axios/axios/pull/7368">#7368</a>)</li> </ul> <h3>Changes</h3> <h4>Security</h4> <ul> <li>Fix Denial of Service via <code>__proto__</code> key in <code>mergeConfig</code>. (PR <a href="https://redirect.github.com/axios/axios/pull/7369">#7369</a>)</li> </ul> <h4>Fixes</h4> <ul> <li>Fix/5657. (PR <a href="https://redirect.github.com/axios/axios/pull/7313">#7313</a>)</li> <li>Ensure <code>status</code> is present in <code>AxiosError</code> on and after v1.13.3. (PR <a href="https://redirect.github.com/axios/axios/pull/7368">#7368</a>)</li> </ul> <h4>Features / Improvements</h4> <ul> <li>Add input validation to <code>isAbsoluteURL</code>. (PR <a href="https://redirect.github.com/axios/axios/pull/7326">#7326</a>)</li> <li>Refactor: bump minor package versions. (PR <a href="https://redirect.github.com/axios/axios/pull/7356">#7356</a>)</li> </ul> <h4>Documentation</h4> <ul> <li>Clarify object-check comment. (PR <a href="https://redirect.github.com/axios/axios/pull/7323">#7323</a>)</li> <li>Fix deprecated <code>Buffer</code> constructor usage and README formatting. (PR <a href="https://redirect.github.com/axios/axios/pull/7371">#7371</a>)</li> </ul> <h4>CI / Maintenance</h4> <ul> <li>Chore: fix issues with YAML. (PR <a href="https://redirect.github.com/axios/axios/pull/7355">#7355</a>)</li> <li>CI: update workflow YAMLs. (PR <a href="https://redirect.github.com/axios/axios/pull/7372">#7372</a>)</li> <li>CI: fix run condition. (PR <a href="https://redirect.github.com/axios/axios/pull/7373">#7373</a>)</li> <li>Dev deps: bump <code>karma-sourcemap-loader</code> from 0.3.8 to 0.4.0. (PR <a href="https://redirect.github.com/axios/axios/pull/7360">#7360</a>)</li> <li>Chore(release): prepare release 1.13.5. (PR <a href="https://redirect.github.com/axios/axios/pull/7379">#7379</a>)</li> </ul> <h3>New Contributors</h3> <ul> <li><a href="https://github.com/sachin11063"><code>@sachin11063</code></a> (first contribution — PR <a href="https://redirect.github.com/axios/axios/pull/7323">#7323</a>)</li> <li><a href="https://github.com/asmitha-16"><code>@asmitha-16</code></a> (first contribution — PR <a href="https://redirect.github.com/axios/axios/pull/7326">#7326</a>)</li> </ul> <p><strong>Full Changelog:</strong> <a href="https://github.com/axios/axios/compare/v1.13.4...v1.13.5">https://github.com/axios/axios/compare/v1.13.4...v1.13.5</a></p> <h2>v1.13.4</h2> <h2>Overview</h2> <p>The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/axios/axios/compare/v1.13.3...v1.13.4">v1.13.3...v1.13.4</a></p> <h2>What's New in v1.13.4</h2> <h3>Bug Fixes</h3> <ul> <li><strong>fix: issues with version 1.13.3</strong> (<a href="https://redirect.github.com/axios/axios/issues/7352">#7352</a>) (<a href="https://github.com/axios/axios/commit/ee90dfc28abffbb61e24974b2bd3139a4a40ac76">ee90dfc</a>) <ul> <li>Fixed issues discovered in v1.13.3 release</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2><a href="https://github.com/axios/axios/compare/v1.13.2...v1.13.3">1.13.3</a> (2026-01-20)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>http2:</strong> Use port 443 for HTTPS connections by default. (<a href="https://redirect.github.com/axios/axios/issues/7256">#7256</a>) (<a href="https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e">d7e6065</a>)</li> <li><strong>interceptor:</strong> handle the error in the same interceptor (<a href="https://redirect.github.com/axios/axios/issues/6269">#6269</a>) (<a href="https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89">5945e40</a>)</li> <li>main field in package.json should correspond to cjs artifacts (<a href="https://redirect.github.com/axios/axios/issues/5756">#5756</a>) (<a href="https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04">7373fbf</a>)</li> <li><strong>package.json:</strong> add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (<a href="https://redirect.github.com/axios/axios/issues/5754">#5754</a>) (<a href="https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8">b89217e</a>)</li> <li>silentJSONParsing=false should throw on invalid JSON (<a href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>) (<a href="https://redirect.github.com/axios/axios/issues/7257">#7257</a>) (<a href="https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf">7d19335</a>)</li> <li>turn AxiosError into a native error (<a href="https://redirect.github.com/axios/axios/issues/5394">#5394</a>) (<a href="https://redirect.github.com/axios/axios/issues/5558">#5558</a>) (<a href="https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b">1c6a86d</a>)</li> <li><strong>types:</strong> add handlers to AxiosInterceptorManager interface (<a href="https://redirect.github.com/axios/axios/issues/5551">#5551</a>) (<a href="https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a">8d1271b</a>)</li> <li><strong>types:</strong> restore AxiosError.cause type from unknown to Error (<a href="https://redirect.github.com/axios/axios/issues/7327">#7327</a>) (<a href="https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b">d8233d9</a>)</li> <li>unclear error message is thrown when specifying an empty proxy authorization (<a href="https://redirect.github.com/axios/axios/issues/6314">#6314</a>) (<a href="https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29">6ef867e</a>)</li> </ul> <h3>Features</h3> <ul> <li>add <code>undefined</code> as a value in AxiosRequestConfig (<a href="https://redirect.github.com/axios/axios/issues/5560">#5560</a>) (<a href="https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd">095033c</a>)</li> <li>add automatic minor and patch upgrades to dependabot (<a href="https://redirect.github.com/axios/axios/issues/6053">#6053</a>) (<a href="https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed">65a7584</a>)</li> <li>add Node.js coverage script using c8 (closes <a href="https://redirect.github.com/axios/axios/issues/7289">#7289</a>) (<a href="https://redirect.github.com/axios/axios/issues/7294">#7294</a>) (<a href="https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a">ec9d94e</a>)</li> <li>added copilot instructions (<a href="https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26">3f83143</a>)</li> <li>compatibility with frozen prototypes (<a href="https://redirect.github.com/axios/axios/issues/6265">#6265</a>) (<a href="https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012">860e033</a>)</li> <li>enhance pipeFileToResponse with error handling (<a href="https://redirect.github.com/axios/axios/issues/7169">#7169</a>) (<a href="https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552">88d7884</a>)</li> <li><strong>types:</strong> Intellisense for string literals in a widened union (<a href="https://redirect.github.com/axios/axios/issues/6134">#6134</a>) (<a href="https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5">f73474d</a>), closes <a href="https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329">microsoft/TypeScript#33471</a></li> </ul> <h3>Reverts</h3> <ul> <li>Revert "fix: silentJSONParsing=false should throw on invalid JSON (<a href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>) (<a href="https://redirect.github.com/axios/axios/issues/7">#7</a>…" (<a href="https://redirect.github.com/axios/axios/issues/7298">#7298</a>) (<a href="https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a">a4230f5</a>), closes <a href="https://redirect.github.com/axios/axios/issues/7253">#7253</a> <a href="https://redirect.github.com/axios/axios/issues/7">#7</a> <a href="https://redirect.github.com/axios/axios/issues/7298">#7298</a></li> <li><strong>deps:</strong> bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (<a href="https://redirect.github.com/axios/axios/issues/7334">#7334</a>) (<a href="https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a">2d6ad5e</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/ashvin2005" title="+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218) [#7218](https://github.com/axios/axios/issues/7218) )">Ashvin Tiwari</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/mochinikunj" title="+940/-12 ([#7294](https://github.com/axios/axios/issues/7294) [#7294](https://github.com/axios/axios/issues/7294) )">Nikunj Mochi</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/imanchalsingh" title="+544/-102 ([#7169](https://github.com/axios/axios/issues/7169) [#7185](https://github.com/axios/axios/issues/7185) )">Anchal Singh</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/jasonsaayman" title="+317/-73 ([#7334](https://github.com/axios/axios/issues/7334) [#7298](https://github.com/axios/axios/issues/7298) )">jasonsaayman</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/brodo" title="+99/-120 ([#5558](https://github.com/axios/axios/issues/5558) )">Julian Dax</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/AKASHDHARDUBEY" title="+167/-0 ([#7287](https://github.com/axios/axios/issues/7287) [#7288](https://github.com/axios/axios/issues/7288) )">Akash Dhar Dubey</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/madhumitaaa" title="+20/-68 ([#7198](https://github.com/axios/axios/issues/7198) )">Madhumita</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Tackoil" title="+80/-2 ([#6269](https://github.com/axios/axios/issues/6269) )">Tackoil</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/justindhillon" title="+41/-41 ([#6324](https://github.com/axios/axios/issues/6324) [#6315](https://github.com/axios/axios/issues/6315) )">Justin Dhillon</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Rudrxxx" title="+71/-2 ([#7257](https://github.com/axios/axios/issues/7257) )">Rudransh</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/WuMingDao" title="+36/-36 ([#7215](https://github.com/axios/axios/issues/7215) )">WuMingDao</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/codenomnom" title="+70/-0 ([#7201](https://github.com/axios/axios/issues/7201) [#7201](https://github.com/axios/axios/issues/7201) )">codenomnom</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/Nandann018-ux" title="+60/-10 ([#7272](https://github.com/axios/axios/issues/7272) )">Nandan Acharya</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/KernelDeimos" title="+22/-40 ([#7042](https://github.com/axios/axios/issues/7042) )">Eric Dubé</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/tiborpilz" title="+40/-4 ([#5551](https://github.com/axios/axios/issues/5551) )">Tibor Pilz</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/joaoGabriel55" title="+31/-4 ([#6314](https://github.com/axios/axios/issues/6314) )">Gabriel Quaresma</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/turadg" title="+23/-6 ([#6265](https://github.com/axios/axios/issues/6265) )">Turadg Aleahmad</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/29f75425f0c9f73021f5eedc869c176e30e05fe7"><code>29f7542</code></a> chore(release): prepare release 1.13.5 (<a href="https://redirect.github.com/axios/axios/issues/7379">#7379</a>)</li> <li><a href="https://github.com/axios/axios/commit/431c3a361490a2e3d5ac5d9e08d66d4bb5f3cd2a"><code>431c3a3</code></a> ci: fix run condition (<a href="https://redirect.github.com/axios/axios/issues/7373">#7373</a>)</li> <li><a href="https://github.com/axios/axios/commit/9ff3a78ad72ecd665a4b673686f1517d824284bf"><code>9ff3a78</code></a> ci: update ymls (<a href="https://redirect.github.com/axios/axios/issues/7372">#7372</a>)</li> <li><a href="https://github.com/axios/axios/commit/265b71234c20fabbd6d691858c65a7e9c978659f"><code>265b712</code></a> docs: fix deprecated Buffer constructor and formatting issues in README (<a href="https://redirect.github.com/axios/axios/issues/7371">#7371</a>)</li> <li><a href="https://github.com/axios/axios/commit/475e75a260668d227aec9f77735a49748c9041ff"><code>475e75a</code></a> feat: add input validation to isAbsoluteURL (<a href="https://redirect.github.com/axios/axios/issues/7326">#7326</a>)</li> <li><a href="https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57"><code>28c7215</code></a> fix: Denial of Service via <strong>proto</strong> Key in mergeConfig (<a href="https://redirect.github.com/axios/axios/issues/7369">#7369</a>)</li> <li><a href="https://github.com/axios/axios/commit/04cf01969ed58f96920da032f340bfe4614aab90"><code>04cf019</code></a> docs: clarify object check comment (<a href="https://redirect.github.com/axios/axios/issues/7323">#7323</a>)</li> <li><a href="https://github.com/axios/axios/commit/696fa753c5366afbd21859c294c64c9ff2b359ab"><code>696fa75</code></a> fix: status is missing in AxiosError on and after v1.13.3 (<a href="https://redirect.github.com/axios/axios/issues/7368">#7368</a>)</li> <li><a href="https://github.com/axios/axios/commit/569f028a5878faaec8d7d138ba686aac407bda4c"><code>569f028</code></a> fix: added a option to choose between legacy and the new request/response int...</li> <li><a href="https://github.com/axios/axios/commit/44b7c9f0c4900fd8784f18e871199402f07fc69f"><code>44b7c9f</code></a> chore(deps-dev): bump karma-sourcemap-loader (<a href="https://redirect.github.com/axios/axios/issues/7360">#7360</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.13.0...v1.13.5">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for axios since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evroon/bracket/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
a9ffe60ae1 |
Bump vite-tsconfig-paths from 6.0.3 to 6.1.0 in /frontend (#1554)
Bumps [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) from 6.0.3 to 6.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aleclarson/vite-tsconfig-paths/releases">vite-tsconfig-paths's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h3>Features</h3> <ul> <li><strong>New <code>importerFilter</code> option:</strong> Provides fine-grained control over which files should have their imports resolved by this plugin. (Closes <a href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/175">#175</a>, <a href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/193">#193</a>)</li> <li><strong>Ignore <code>.d.ts</code> overrides:</strong> The plugin now ignores resolutions that point to <code>.d.ts</code> files, avoiding issues when <code>tsconfig</code> is used for opt-in type overrides. (Closes <a href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/179">#179</a>, <a href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/180">#180</a>)</li> </ul> <h3>Performance</h3> <ul> <li>Hoisted regular expressions out of the hot path in the resolver for better performance.</li> </ul> <h3>Internal</h3> <ul> <li>Added <code>resolvedToDeclarationFile</code> event to the debug log file.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/c5659ce858e973ff071d0c3baa756e29c7c48467"><code>c5659ce</code></a> chore: release v6.1.0</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/93dd8877ae6564ae4b538b9592b0563fc39e60bf"><code>93dd887</code></a> chore: add "resolvedToDeclarationFile" event to log file</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/e1e76784d064f2b5b48bb2db283392a52aec0b02"><code>e1e7678</code></a> feat: ignore .d.ts-only overrides in tsconfig</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/c8e4ec308d518943e5197d573e42f144b4180dc3"><code>c8e4ec3</code></a> chore(perf): hoist regexes out of hot path</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/d0ad01cff6812bd144260ccd92cfc1ac8eab741d"><code>d0ad01c</code></a> feat: add <code>importerFilter</code> option</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/0b47a6ab7e56ca2e4a66e99f3f4f3561618ebb30"><code>0b47a6a</code></a> chore: release v6.0.5</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/14aa53b312952b60004139dedf728a2386c72440"><code>14aa53b</code></a> fix: change <code>vite</code> to a required peer dependency</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/f91de32e3360f8ca9c24049ea2fff91457ab6686"><code>f91de32</code></a> chore: release v6.0.4</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/232f17ce43678d65eb5775bdd4281796d8997c15"><code>232f17c</code></a> fix: move <code>vite</code> to dependencies</li> <li><a href="https://github.com/aleclarson/vite-tsconfig-paths/commit/8ecf047a84e83e71c1f75fe83ef933985f2f8e78"><code>8ecf047</code></a> fix: initialize resolvers before dependency pre-bundling occurs</li> <li>See full diff in <a href="https://github.com/aleclarson/vite-tsconfig-paths/compare/v6.0.3...v6.1.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
595effb219 |
Bump @hey-api/openapi-ts from 0.91.1 to 0.92.3 in /frontend (#1553)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from 0.91.1 to 0.92.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hey-api/openapi-ts/releases"><code>@hey-api/openapi-ts</code>'s releases</a>.</em></p> <blockquote> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.92.3</h2> <h3>Patch Changes</h3> <ul> <li><strong>plugin(zod)</strong>: use namespace import for zod v4 (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3325">#3325</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/e54db3e7e34e86c17d5c1fba90d9df9778c4b32d"><code>e54db3e</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.92.2</h2> <h3>Minor Changes</h3> <ul> <li><strong>BREAKING:</strong> <strong>symbol</strong>: replace <code>exportFrom</code> array with <code>getExportFromFilePath()</code> function (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/cd44523b9656dd7a29354ad7f815336642164bc8"><code>cd44523</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Updated Symbol interface</h3> <p>The <code>exportFrom</code> property has been replaced with the <code>getExportFromFilePath()</code> function. This allows you to dynamically determine export paths based on symbol properties. This is a low-level feature, so you're most likely unaffected.</p> <h3>Patch Changes</h3> <ul> <li> <p><strong>config</strong>: rename <code>exportFromIndex</code> option to <code>includeInEntry</code> (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/cd44523b9656dd7a29354ad7f815336642164bc8"><code>cd44523</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>config</strong>: <code>includeInEntry</code> accepts function in addition to primitive value (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/cd44523b9656dd7a29354ad7f815336642164bc8"><code>cd44523</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>parser</strong>: add <code>getExportFromFilePath()</code> hook (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/cd44523b9656dd7a29354ad7f815336642164bc8"><code>cd44523</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>plugin</strong>: add <code>comments</code> option to all plugins (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3317">#3317</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/7b3c8f20a70115b7130807eb39410c0ba03c5275"><code>7b3c8f2</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>types</strong>: improve <code>defineConfig()</code> types (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/cd44523b9656dd7a29354ad7f815336642164bc8"><code>cd44523</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>config</strong>: rename <code>output.indexFile</code> to <code>output.entryFile</code> (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/cd44523b9656dd7a29354ad7f815336642164bc8"><code>cd44523</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></p> </li> <li> <p><strong>fix</strong>: improve dev mode detection causing builds to fail (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3300">#3300</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/be2f3fbaee1b3bcbd50efce057d68f206bbb8efb"><code>be2f3fb</code></a>) by <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a></p> </li> </ul> <h3>Updated Dependencies:</h3> <ul> <li><code>@hey-api/shared</code><a href="https://github.com/0"><code>@0</code></a>.1.2</li> <li><code>@hey-api/codegen-core</code><a href="https://github.com/0"><code>@0</code></a>.7.0</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/openapi-ts/commit/e223fa8241861aea677522716ab85befb879ff82"><code>e223fa8</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3326">#3326</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3dc934476d3641700db9568ed554b373696380db"><code>3dc9344</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/a715512d8bca34fd3c6c1fc2f42d4e52f5352309"><code>a715512</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3325">#3325</a> from hey-api/fix/zod-v4-asterisk</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/e54db3e7e34e86c17d5c1fba90d9df9778c4b32d"><code>e54db3e</code></a> fix: use namespace import for zod v4</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/1581c11b8359303b575fd34a84cf8f97fa7ad40f"><code>1581c11</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3323">#3323</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/9a7c46a623c0f5c2b1f9c3160751c58106e56660"><code>9a7c46a</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/e0c14539818b7d0f60f47752bd880cf874638244"><code>e0c1453</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3324">#3324</a> from hey-api/ci/fix-publish-2</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/734621e7b38c25e788c0318a388be1733176c767"><code>734621e</code></a> ci: add snapshot releases</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/0e7dd853eecdb96e703ee903b47c491ef41b44b3"><code>0e7dd85</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3322">#3322</a> from hey-api/revert-3319-changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/bfd43ec6d638bfc97b6905dd9dee2c911ccea3e0"><code>bfd43ec</code></a> Revert "ci: release"</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.91.1...@hey-api/openapi-ts@0.92.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
9ef6e22c17 |
Bump @typescript-eslint/parser from 7.18.0 to 8.55.0 in /frontend (#1552)
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 7.18.0 to 8.55.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@typescript-eslint/parser</code>'s releases</a>.</em></p> <blockquote> <h2>v8.55.0</h2> <h2>8.55.0 (2026-02-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>utils:</strong> deprecate defaultOptions in favor of meta.defaultOptions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11992">#11992</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unused-vars] remove trailing newline when removing entire import (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11990">#11990</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] require strictNullChecks (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11966">#11966</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12000">#12000</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] report unnecessary defaults in ternary expressions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11984">#11984</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] reduce param index to ts this handling (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11949">#11949</a>)</li> <li><strong>typescript-estree:</strong> forbid invalid modifier in object expression (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11931">#11931</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Christian Rose <a href="https://github.com/chrros95"><code>@chrros95</code></a></li> <li>fisker Cheung <a href="https://github.com/fisker"><code>@fisker</code></a></li> <li>Josh Goldberg</li> <li>Maria Solano <a href="https://github.com/MariaSolOs"><code>@MariaSolOs</code></a></li> <li>Minyeong Kim <a href="https://github.com/minyeong981"><code>@minyeong981</code></a></li> <li>SungHyun627 <a href="https://github.com/SungHyun627"><code>@SungHyun627</code></a></li> <li>Yukihiro Hasegawa <a href="https://github.com/y-hsgw"><code>@y-hsgw</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>v8.54.0</h2> <h2>8.54.0 (2026-01-26)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin-internal:</strong> add prefer-tsutils-methods rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11974">#11974</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11625">#11625</a>)</li> <li><strong>scope-manager:</strong> support ScopeManager#addGlobals (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11914">#11914</a>)</li> <li><strong>typescript-estree:</strong> add shortcut methods to ParserServicesWithTypeInformation (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11965">#11965</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11955">#11955</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unused-private-class-members] private destructured class member is defined but used (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11785">#11785</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11967">#11967</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11559">#11559</a>)</li> <li><strong>scope-manager:</strong> fix catch clause scopes <code>def.name</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11982">#11982</a>)</li> <li><strong>scope-manager:</strong> prevent misidentification of <code>"use strict"</code> directives (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11995">#11995</a>)</li> <li><strong>utils:</strong> handle missing <code>FlatESLint</code> and <code>LegacyESLint</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11958">#11958</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>fnx <a href="https://github.com/DMartens"><code>@DMartens</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@typescript-eslint/parser</code>'s changelog</a>.</em></p> <blockquote> <h2>8.55.0 (2026-02-09)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.54.0 (2026-01-26)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.53.1 (2026-01-19)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.53.0 (2026-01-12)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.52.0 (2026-01-05)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.51.0 (2025-12-29)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.50.1 (2025-12-22)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <h2>8.50.0 (2025-12-15)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/fedfe8665afbabd5c7d3ee09d14f450d5ba0b10a"><code>fedfe86</code></a> chore(release): publish 8.55.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/b931f8c706beafc289462824814dca158694cb48"><code>b931f8c</code></a> chore: use workspace refs for workspace deps (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12018">#12018</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1f17a7918cd507b11fd04ce75fe44a9c62bf9542"><code>1f17a79</code></a> chore: migrate to pnpm (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/11248">#11248</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/d423e57622e1c8e789a1b84109d1ab2c15497507"><code>d423e57</code></a> chore(release): publish 8.54.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/9940e53a156ec75b2e2910a63310650b4d19a6c6"><code>9940e53</code></a> chore(release): publish 8.53.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3021ede961732e66b1daca804759aa0cf4143b97"><code>3021ede</code></a> chore(release): publish 8.53.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/9ddd5712687140a68352978fb76428de53ab789e"><code>9ddd571</code></a> chore(release): publish 8.52.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/95c7c730c254ef5e51843e2f3280977eec53f5b8"><code>95c7c73</code></a> chore: update deps to latest minor/patch (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/11921">#11921</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/e4c57f5996a9a3aed8a8c2b02712a9ce37db4928"><code>e4c57f5</code></a> chore(release): publish 8.51.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/d520b88990e1b20674dcfa3db3b0461c1d6d9aa2"><code>d520b88</code></a> chore(release): publish 8.50.1</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.55.0/packages/parser">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for <code>@typescript-eslint/parser</code> since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
9552b2576c |
Bump @types/node from 25.0.0 to 25.2.0 in /frontend (#1546)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.0.0 to 25.2.0. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3a4c227c3f |
Bump @hey-api/openapi-ts from 0.90.1 to 0.91.1 in /frontend (#1545)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from 0.90.1 to 0.91.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hey-api/openapi-ts/releases"><code>@hey-api/openapi-ts</code>'s releases</a>.</em></p> <blockquote> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.91.1</h2> <h3>Patch Changes</h3> <h3>Updated Dependencies:</h3> <ul> <li><code>@hey-api/codegen-core</code><a href="https://github.com/0"><code>@0</code></a>.6.1</li> <li><code>@hey-api/shared</code><a href="https://github.com/0"><code>@0</code></a>.1.1</li> </ul> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.91.0</h2> <h3>Minor Changes</h3> <ul> <li><strong>BREAKING</strong>: Drop CommonJS (CJS) support. This package is now <strong>ESM-only</strong>. (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3251">#3251</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/7f19d5921dadfa96ecae84a5298b7aee1daee56d"><code>7f19d59</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <h3>Removed CommonJS (CJS) support</h3> <p><code>@hey-api/openapi-ts</code> is now ESM-only. This change simplifies the codebase, improves tree-shaking, and enables better integration with modern bundlers and TypeScript tooling.</p> <p>CommonJS entry points (<code>require()</code>, <code>module.exports</code>) are no longer supported. If you are in a CJS environment, you can still load the package dynamically using <code>import()</code> like:</p> <pre lang="js"><code>const { defineConfig } = await import('@hey-api/openapi-ts'); </code></pre> <p>If you have previously written:</p> <pre lang="js"><code>const { defineConfig } = require('@hey-api/openapi-ts'); </code></pre> <p>Migrate by updating your static imports:</p> <pre lang="js"><code>import { defineConfig } from '@hey-api/openapi-ts'; </code></pre> <p>If your environment cannot use ESM, pin to a previous version.</p> <h3>Patch Changes</h3> <h3>Updated Dependencies:</h3> <ul> <li><code>@hey-api/shared</code><a href="https://github.com/0"><code>@0</code></a>.1.0</li> <li><code>@hey-api/codegen-core</code><a href="https://github.com/0"><code>@0</code></a>.6.0</li> <li><code>@hey-api/types</code><a href="https://github.com/0"><code>@0</code></a>.1.3</li> </ul> <h2><code>@hey-api/openapi-ts</code><a href="https://github.com/0"><code>@0</code></a>.90.10</h2> <h3>Patch Changes</h3> <ul> <li><strong>plugin(<code>@tanstack/solid-query</code>)</strong>: index mutation options symbol (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3253">#3253</a>) (<a href="https://github.com/hey-api/openapi-ts/commit/c5f379ea5534272d63a423c671427ff1ef13197a"><code>c5f379e</code></a>) by <a href="https://github.com/mrlubos"><code>@mrlubos</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/openapi-ts/commit/ce5977e70c81031a784cfd89df301cf7116a987c"><code>ce5977e</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3292">#3292</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/1542a56c81997165d66d60af516b88ce2caf526d"><code>1542a56</code></a> chore: update lock file</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/dd988e99a49e5f855f97c946eb0818bd6a09f31a"><code>dd988e9</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/caabc9f93c7566997b02c558a8c4a8f4122ebbf6"><code>caabc9f</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3291">#3291</a> from hey-api/copilot/fix-duplicate-import-error</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3c08e38b4daa5c1f4829bdfb7f088d73b0e0f1f1"><code>3c08e38</code></a> Fix duplicate import error for symbols in planner</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3f23cefb37a1d3506ce45936078bfccec4918979"><code>3f23cef</code></a> Remove unnecessary comments and add planner unit tests for import deduplication</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/59efc7b34359f7a80beb955de66ce7e0ea2013b8"><code>59efc7b</code></a> Fix duplicate import error when same symbol is imported as both type and value</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/6e7770d7cd5d3e8f45befb3eda5d5191eda2d05b"><code>6e7770d</code></a> Initial plan</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/124dc280226d02e544806fa1db086e3a9d25cade"><code>124dc28</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3287">#3287</a> from hey-api/chore/py-typecheck</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/c7ebec35bacc6f4d90d8986e2a2226184bb782c6"><code>c7ebec3</code></a> chore: prepare Python typecheck</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.90.1...@hey-api/openapi-ts@0.91.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
a3e836b083 |
Bump eslint-plugin-react-hooks from 4.6.0 to 7.0.1 in /frontend (#1543)
Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 4.6.0 to 7.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/react/releases">eslint-plugin-react-hooks's releases</a>.</em></p> <blockquote> <h2>eslint-plugin-react-hooks@5.0.0 (Oct 11, 2024)</h2> <p>This release only contains <code>eslint-plugin-react-hooks</code>. Notably, new violations and support for ESLint v9 were added.</p> <h2><code>eslint-plugin-react-hooks</code></h2> <ul> <li><strong>New Violations:</strong> Component names now need to start with an uppercase letter instead of a non-lowercase letter. This means <code>_Button</code> or <code>_component</code> are no longer valid. (<a href="https://github.com/kassens"><code>@kassens</code></a>) in <a href="https://redirect.github.com/facebook/react/pull/25162">#25162</a> For example, in <pre lang="tsx"><code>function _Component() { useState() ^^^^^^^^ A React Hook "useState" is called in function "_Component" which is neither a Component nor a custom React Hook function. } </code></pre> <code>_Component</code> should be renamed to <code>Component</code>.</li> </ul> <ul> <li>Add support for ESLint v9. (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> in <a href="https://redirect.github.com/facebook/react/pull/28773">#28773</a>)</li> <li>Consider dispatch from <code>useActionState</code> stable. (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> in <a href="https://redirect.github.com/facebook/react/pull/29665">#29665</a>)</li> <li>Accept <code>as</code> expression in callback. (<a href="https://github.com/StyleShit"><code>@StyleShit</code></a> in <a href="https://redirect.github.com/facebook/react/pull/28202">#28202</a>)</li> <li>Accept <code>as</code> expressions in deps array. (<a href="https://github.com/StyleShit"><code>@StyleShit</code></a> in <a href="https://redirect.github.com/facebook/react/pull/28189">#28189</a>)</li> <li>Treat <code>React.use()</code> the same as <code>use()</code>. (<a href="https://github.com/kassens"><code>@kassens</code></a> in <a href="https://redirect.github.com/facebook/react/pull/27769">#27769</a>)</li> <li>Move <code>use()</code> lint to non-experimental. (<a href="https://github.com/kassens"><code>@kassens</code></a> in <a href="https://redirect.github.com/facebook/react/pull/27768">#27768</a>)</li> <li>Support Flow <code>as</code> expressions. (<a href="https://github.com/cpojer"><code>@cpojer</code></a> in <a href="https://redirect.github.com/facebook/react/pull/27590">#27590</a>)</li> <li>Allow <code>useEffect(fn, undefined)</code>. (<a href="https://github.com/kassens"><code>@kassens</code></a> in <a href="https://redirect.github.com/facebook/react/pull/27525">#27525</a>)</li> <li>Disallow hooks in async functions. (<a href="https://github.com/acdlite"><code>@acdlite</code></a> in <a href="https://redirect.github.com/facebook/react/pull/27045">#27045</a>)</li> <li>Rename experimental <code>useEvent</code> to <code>useEffectEvent</code>. (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a> in <a href="https://redirect.github.com/facebook/react/pull/25881">#25881</a>)</li> <li>Lint for presence of <code>useEvent</code> functions in dependency lists. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/25512">#25512</a>)</li> <li>Check <code>useEvent</code> references instead. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/25319">#25319</a>)</li> <li>Update <code>RulesOfHooks</code> with <code>useEvent</code> rules. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/25285">#25285</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md">eslint-plugin-react-hooks's changelog</a>.</em></p> <blockquote> <h2>7.0.1</h2> <ul> <li>Disallowed passing inline <code>useEffectEvent</code> values as JSX props to guard against accidental propagation. (<a href="https://redirect.github.com/facebook/react/pull/34820">#34820</a> by <a href="https://github.com/jf-eirinha"><code>@jf-eirinha</code></a>)</li> <li>Switch to <code>export =</code> so eslint-plugin-react-hooks emits correct types for consumers in Node16 ESM projects. (<a href="https://redirect.github.com/facebook/react/pull/34949">#34949</a> by <a href="https://github.com/karlhorky"><code>@karlhorky</code></a>)</li> <li>Tightened the typing of <code>configs.flat</code> so the <code>configs</code> export is always defined. (<a href="https://redirect.github.com/facebook/react/pull/34950">#34950</a> by <a href="https://github.com/poteto"><code>@poteto</code></a>)</li> <li>Fix named import runtime errors. (<a href="https://redirect.github.com/facebook/react/pull/34951">#34951</a>, <a href="https://redirect.github.com/facebook/react/pull/34953">#34953</a> by <a href="https://github.com/karlhorky"><code>@karlhorky</code></a>)</li> </ul> <h2>7.0.0</h2> <p>This release slims down presets to just 2 configurations (<code>recommended</code> and <code>recommended-latest</code>), and all compiler rules are enabled by default.</p> <ul> <li><strong>Breaking:</strong> Removed <code>recommended-latest-legacy</code> and <code>flat/recommended</code> configs. The plugin now provides <code>recommended</code> (legacy and flat configs with all recommended rules), and <code>recommended-latest</code> (legacy and flat configs with all recommended rules plus new bleeding edge experimental compiler rules). (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34757">#34757</a>)</li> </ul> <h2>6.1.1</h2> <p><strong>Note:</strong> 6.1.0 accidentally allowed use of <code>recommended</code> without flat config, causing errors when used with ESLint v9's <code>defineConfig()</code> helper. This has been fixed in 6.1.1.</p> <ul> <li>Fix <code>recommended</code> config for flat config compatibility. The <code>recommended</code> config has been converted to flat config format. Non-flat config users should use <code>recommended-legacy</code> instead. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34700">#34700</a>)</li> <li>Add <code>recommended-latest</code> and <code>recommended-latest-legacy</code> configs that include React Compiler rules. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34675">#34675</a>)</li> <li>Remove unused <code>NoUnusedOptOutDirectives</code> rule. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34703">#34703</a>)</li> <li>Remove <code>hermes-parser</code> and dependency. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34719">#34719</a>)</li> <li>Remove <code>@babel/plugin-proposal-private-methods</code> dependency. (<a href="https://github.com/ArnaudBarre"><code>@ArnaudBarre</code></a> and <a href="https://github.com/josephsavona"><code>@josephsavona</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34715">#34715</a>)</li> <li>Update for Zod v3/v4 compatibility. (<a href="https://github.com/kolvian"><code>@kolian</code></a> and <a href="https://github.com/josephsavona"><code>@josephsavona</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34717">#34717</a>)</li> </ul> <h2>6.1.0</h2> <p><strong>Note:</strong> Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.</p> <ul> <li><strong>Breaking:</strong> Require Node.js 18 or newer. (<a href="https://github.com/michaelfaith"><code>@michaelfaith</code></a> in <a href="https://redirect.github.com/facebook/react/pull/32458">#32458</a>)</li> <li><strong>Breaking:</strong> Flat config is now the default <code>recommended</code> preset. Legacy config moved to <code>recommended-legacy</code>. (<a href="https://github.com/michaelfaith"><code>@michaelfaith</code></a> in <a href="https://redirect.github.com/facebook/react/pull/32457">#32457</a>)</li> <li><strong>New Violations:</strong> Disallow calling <code>use</code> within try/catch blocks. (<a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34040">#34040</a>)</li> <li><strong>New Violations:</strong> Disallow calling <code>useEffectEvent</code> functions in arbitrary closures. (<a href="https://github.com/jbrown215"><code>@jbrown215</code></a> in <a href="https://redirect.github.com/facebook/react/pull/33544">#33544</a>)</li> <li>Handle <code>React.useEffect</code> in addition to <code>useEffect</code> in rules-of-hooks. (<a href="https://github.com/Ayc0"><code>@Ayc0</code></a> in <a href="https://redirect.github.com/facebook/react/pull/34076">#34076</a>)</li> <li>Added <code>react-hooks</code> settings config option that to accept <code>additionalEffectHooks</code> that are used across exhaustive-deps and rules-of-hooks rules. (<a href="https://github.com/jbrown215"><code>@jbrown215</code></a>) in <a href="https://redirect.github.com/facebook/react/pull/34497">#34497</a></li> </ul> <h2>6.0.0</h2> <p>Accidentally released. See 6.1.0 for the actual changes.</p> <h2>5.2.0</h2> <ul> <li>Support flat config (<a href="https://github.com/michaelfaith"><code>@michaelfaith</code></a> in <a href="https://redirect.github.com/facebook/react/pull/30774">#30774</a>)</li> <li>Convert the plugin to TypeScript and provide package type declarations (<a href="https://github.com/michaelfaith"><code>@michaelfaith</code></a> in <a href="https://redirect.github.com/facebook/react/pull/32279">#32279</a>, <a href="https://redirect.github.com/facebook/react/pull/32283">#32283</a>, <a href="https://redirect.github.com/facebook/react/pull/32240">#32240</a>, <a href="https://redirect.github.com/facebook/react/pull/32400">#32400</a> and <a href="https://github.com/poteto"><code>@poteto</code></a> in <a href="https://redirect.github.com/facebook/react/pull/32420">#32420</a>)</li> <li>Fix false positive error in components with <code>do</code>/<code>while</code> loops (<a href="https://github.com/tyxla"><code>@tyxla</code></a> in <a href="https://redirect.github.com/facebook/react/pull/31720">#31720</a>)</li> <li>Detect issues in class properties (<a href="https://github.com/mjesun"><code>@mjesun</code></a> & <a href="https://github.com/ecraig12345"><code>@ecraig12345</code></a> in <a href="https://redirect.github.com/facebook/react/pull/31823">#31823</a>)</li> </ul> <h2>5.1.0</h2> <ul> <li>Add support for <code>do</code>/<code>while</code> loops (<a href="https://github.com/tyxla"><code>@tyxla</code></a> in <a href="https://redirect.github.com/facebook/react/pull/28714">#28714</a>)</li> <li>Fix error when callback argument is an identifier with an <code>as</code> expression (<a href="https://github.com/mskelton"><code>@mskelton</code></a> in <a href="https://redirect.github.com/facebook/react/pull/31119">#31119</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~react-bot">react-bot</a>, a new releaser for eslint-plugin-react-hooks since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |