1215 Commits

Author SHA1 Message Date
dependabot[bot]
9552b2576c Bump @types/node from 25.0.0 to 25.2.0 in /frontend (#1546)
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 25.0.0 to 25.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=25.0.0&new-version=25.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:43:43 +00:00
dependabot[bot]
d217cb4e77 Bump pyrefly from 0.50.0 to 0.51.0 in /backend (#1549)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.50.0 to
0.51.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1877edc645"><code>1877edc</code></a>
Update pyrefly version]</li>
<li><a
href="cb5f5d7ba5"><code>cb5f5d7</code></a>
Make Unions take less space</li>
<li><a
href="8b5434f1c5"><code>8b5434f</code></a>
Add <code>openlibrary</code> back to the blocklist</li>
<li><a
href="87f0990a71"><code>87f0990</code></a>
Fix pyrefly buck/cargo config</li>
<li><a
href="ddd20cc2e9"><code>ddd20cc</code></a>
Remove old get() method from LookupExport trait</li>
<li><a
href="e2aed196e7"><code>e2aed19</code></a>
Convert alt/class/django.rs to use new LookupExport API</li>
<li><a
href="0dcfcaef77"><code>0dcfcae</code></a>
Convert alt/attr.rs to use new LookupExport API</li>
<li><a
href="bcf03acf00"><code>bcf03ac</code></a>
Convert binding/scope.rs to use new LookupExport API</li>
<li><a
href="7092671918"><code>7092671</code></a>
Convert binding/bindings.rs to use new LookupExport API</li>
<li><a
href="971a115480"><code>971a115</code></a>
Convert binding/stmt.rs to use new LookupExport API</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.50.0...0.51.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.50.0&new-version=0.51.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:41:14 +00:00
dependabot[bot]
3a4c227c3f Bump @hey-api/openapi-ts from 0.90.1 to 0.91.1 in /frontend (#1545)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from
0.90.1 to 0.91.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/openapi-ts/releases"><code>@​hey-api/openapi-ts</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.91.1</h2>
<h3>Patch Changes</h3>
<h3>Updated Dependencies:</h3>
<ul>
<li><code>@​hey-api/codegen-core</code><a
href="https://github.com/0"><code>@​0</code></a>.6.1</li>
<li><code>@​hey-api/shared</code><a
href="https://github.com/0"><code>@​0</code></a>.1.1</li>
</ul>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.91.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><strong>BREAKING</strong>: Drop CommonJS (CJS) support. This package
is now <strong>ESM-only</strong>. (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3251">#3251</a>)
(<a
href="7f19d5921d"><code>7f19d59</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Removed CommonJS (CJS) support</h3>
<p><code>@hey-api/openapi-ts</code> is now ESM-only. This change
simplifies the codebase, improves tree-shaking, and enables better
integration with modern bundlers and TypeScript tooling.</p>
<p>CommonJS entry points (<code>require()</code>,
<code>module.exports</code>) are no longer supported. If you are in a
CJS environment, you can still load the package dynamically using
<code>import()</code> like:</p>
<pre lang="js"><code>const { defineConfig } = await
import('@hey-api/openapi-ts');
</code></pre>
<p>If you have previously written:</p>
<pre lang="js"><code>const { defineConfig } =
require('@hey-api/openapi-ts');
</code></pre>
<p>Migrate by updating your static imports:</p>
<pre lang="js"><code>import { defineConfig } from '@hey-api/openapi-ts';
</code></pre>
<p>If your environment cannot use ESM, pin to a previous version.</p>
<h3>Patch Changes</h3>
<h3>Updated Dependencies:</h3>
<ul>
<li><code>@​hey-api/shared</code><a
href="https://github.com/0"><code>@​0</code></a>.1.0</li>
<li><code>@​hey-api/codegen-core</code><a
href="https://github.com/0"><code>@​0</code></a>.6.0</li>
<li><code>@​hey-api/types</code><a
href="https://github.com/0"><code>@​0</code></a>.1.3</li>
</ul>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.90.10</h2>
<h3>Patch Changes</h3>
<ul>
<li><strong>plugin(<code>@​tanstack/solid-query</code>)</strong>: index
mutation options symbol (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3253">#3253</a>)
(<a
href="c5f379ea55"><code>c5f379e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ce5977e70c"><code>ce5977e</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3292">#3292</a>
from hey-api/changeset-release/main</li>
<li><a
href="1542a56c81"><code>1542a56</code></a>
chore: update lock file</li>
<li><a
href="dd988e99a4"><code>dd988e9</code></a>
ci: release</li>
<li><a
href="caabc9f93c"><code>caabc9f</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3291">#3291</a>
from hey-api/copilot/fix-duplicate-import-error</li>
<li><a
href="3c08e38b4d"><code>3c08e38</code></a>
Fix duplicate import error for symbols in planner</li>
<li><a
href="3f23cefb37"><code>3f23cef</code></a>
Remove unnecessary comments and add planner unit tests for import
deduplication</li>
<li><a
href="59efc7b343"><code>59efc7b</code></a>
Fix duplicate import error when same symbol is imported as both type and
value</li>
<li><a
href="6e7770d7cd"><code>6e7770d</code></a>
Initial plan</li>
<li><a
href="124dc28022"><code>124dc28</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3287">#3287</a>
from hey-api/chore/py-typecheck</li>
<li><a
href="c7ebec35ba"><code>c7ebec3</code></a>
chore: prepare Python typecheck</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.90.1...@hey-api/openapi-ts@0.91.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hey-api/openapi-ts&package-manager=npm_and_yarn&previous-version=0.90.1&new-version=0.91.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:41:08 +00:00
dependabot[bot]
49a82f349d Bump sentry-sdk from 2.50.0 to 2.51.0 in /backend (#1550)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.50.0 to 2.51.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.51.0</h2>
<h3>New Features </h3>
<h4>Openai</h4>
<ul>
<li>feat(openai): Set system instruction attribute for Responses API by
<a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5376">#5376</a></li>
<li>feat(openai): Set system instruction attribute for Completions API
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5358">#5358</a></li>
<li>feat(integrations): OpenAI/OpenAI Agents detect and report the time
to first token metric (TTFT) as
<code>gen_ai.response.time_to_first_token</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5348">#5348</a></li>
</ul>
<h4>Openai Agents</h4>
<ul>
<li>feat(openai-agents): Set system instruction attribute on
<code>gen_ai.chat</code> spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5370">#5370</a></li>
<li>feat(openai-agents): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5355">#5355</a></li>
<li>feat(integrations): openai-agents streaming support by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5291">#5291</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>feat(ai): Add original input length meta attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5375">#5375</a></li>
<li>feat(anthropic): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5353">#5353</a></li>
<li>feat(asyncio): Allow to turn task spans off by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5367">#5367</a></li>
<li>feat(gen_ai): add function <code>set_conversation_id</code> and
managing functions on the Scope and apply it on the Span on
<code>.finish()</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5362">#5362</a></li>
<li>feat(google-genai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5354">#5354</a></li>
<li>feat(langchain): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5357">#5357</a></li>
<li>feat(pydantic-ai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5356">#5356</a></li>
<li>feat(transport): Report 413 responses for oversized envelopes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5380">#5380</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(ai): Keep single content input message by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5345">#5345</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ci(release): Fix changelog-preview permissions by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5368">#5368</a></li>
<li>ref: Replace <code>set_data_normalized()</code> with
<code>Span.set_data()</code> for system instructions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5374">#5374</a></li>
<li>ci: Fix path in AI integration tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5347">#5347</a></li>
</ul>
<h2>2.51.0a1</h2>
<h3>New Features </h3>
<h4>Integrations</h4>
<ul>
<li>feat(integrations): OpenAI/OpenAI Agents detect and report the time
to first token metric (TTFT) as
<code>gen_ai.response.time_to_first_token</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5348">#5348</a></li>
<li>feat(integrations): openai-agents streaming support by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5291">#5291</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>feat(anthropic): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5353">#5353</a></li>
<li>feat(asyncio): Allow to turn task spans off by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5367">#5367</a></li>
<li>feat(gen_ai): add function <code>set_conversation_id</code> and
managing functions on the Scope and apply it on the Span on
<code>.finish()</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5362">#5362</a></li>
<li>feat(google-genai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5354">#5354</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.51.0</h2>
<h3>New Features </h3>
<h4>Openai</h4>
<ul>
<li>feat(openai): Set system instruction attribute for Responses API by
<a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5376">#5376</a></li>
<li>feat(openai): Set system instruction attribute for Completions API
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5358">#5358</a></li>
<li>feat(integrations): OpenAI/OpenAI Agents detect and report the time
to first token metric (TTFT) as
<code>gen_ai.response.time_to_first_token</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5348">#5348</a></li>
</ul>
<h4>Openai Agents</h4>
<ul>
<li>feat(openai-agents): Set system instruction attribute on
<code>gen_ai.chat</code> spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5370">#5370</a></li>
<li>feat(openai-agents): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5355">#5355</a></li>
<li>feat(integrations): openai-agents streaming support by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5291">#5291</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>feat(ai): Add original input length meta attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5375">#5375</a></li>
<li>feat(anthropic): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5353">#5353</a></li>
<li>feat(asyncio): Allow to turn task spans off by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5367">#5367</a></li>
<li>feat(gen_ai): add function <code>set_conversation_id</code> and
managing functions on the Scope and apply it on the Span on
<code>.finish()</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5362">#5362</a></li>
<li>feat(google-genai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5354">#5354</a></li>
<li>feat(langchain): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5357">#5357</a></li>
<li>feat(pydantic-ai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5356">#5356</a></li>
<li>feat(transport): Report 413 responses for oversized envelopes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5380">#5380</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(ai): Keep single content input message by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5345">#5345</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ci(release): Fix changelog-preview permissions by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5368">#5368</a></li>
<li>ref: Replace <code>set_data_normalized()</code> with
<code>Span.set_data()</code> for system instructions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5374">#5374</a></li>
<li>ci: Fix path in AI integration tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5347">#5347</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8517eb0a07"><code>8517eb0</code></a>
Update CHANGELOG.md</li>
<li><a
href="93e89e4c1b"><code>93e89e4</code></a>
release: 2.51.0</li>
<li><a
href="003cb73568"><code>003cb73</code></a>
feat(ai): Add original input length meta attribute (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5375">#5375</a>)</li>
<li><a
href="d4db6d32d6"><code>d4db6d3</code></a>
fix(ai): Keep single content input message (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5345">#5345</a>)</li>
<li><a
href="dafd62f0b5"><code>dafd62f</code></a>
ref: Replace <code>set_data_normalized()</code> with
<code>Span.set_data()</code> for system instru...</li>
<li><a
href="b3aa033dc1"><code>b3aa033</code></a>
feat(openai-agents): Set system instruction attribute on
<code>gen_ai.chat</code> spans ...</li>
<li><a
href="a6b4f2ea29"><code>a6b4f2e</code></a>
feat(openai): Set system instruction attribute for Responses API (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5376">#5376</a>)</li>
<li><a
href="6611957155"><code>6611957</code></a>
feat(openai): Set system instruction attribute for Completions API (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5358">#5358</a>)</li>
<li><a
href="0d424760b2"><code>0d42476</code></a>
feat(transport): Report 413 responses for oversized envelopes (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5380">#5380</a>)</li>
<li><a
href="0c81d3a450"><code>0c81d3a</code></a>
feat(integrations): OpenAI/OpenAI Agents detect and report the time to
first ...</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.50.0...2.51.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.50.0&new-version=2.51.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:59 +00:00
dependabot[bot]
505511b0e7 Bump pyjwt from 2.10.1 to 2.11.0 in /backend (#1547)
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.10.1 to 2.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/releases">pyjwt's
releases</a>.</em></p>
<blockquote>
<h2>2.11.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Fixed type error in comment by <a
href="https://github.com/shuhaib-aot"><code>@​shuhaib-aot</code></a> in
<a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1026">jpadilla/pyjwt#1026</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1018">jpadilla/pyjwt#1018</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1033">jpadilla/pyjwt#1033</a></li>
<li>Make note of use of leeway with nbf by <a
href="https://github.com/djw8605"><code>@​djw8605</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1034">jpadilla/pyjwt#1034</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1035">jpadilla/pyjwt#1035</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/964">#964</a>:
Validate key against allowed types for Algorithm family by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/985">jpadilla/pyjwt#985</a></li>
<li>Feat <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1024">#1024</a>:
Add iterator for PyJWKSet by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1041">jpadilla/pyjwt#1041</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1039">#1039</a>:
Add iss, issuer type checks by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1040">jpadilla/pyjwt#1040</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/660">#660</a>:
Improve typing/logic for <code>options</code> in decode,
decode_complete; Improve docs by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1045">jpadilla/pyjwt#1045</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1042">jpadilla/pyjwt#1042</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1052">jpadilla/pyjwt#1052</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1053">jpadilla/pyjwt#1053</a></li>
<li>Fix <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1022">#1022</a>:
Map <code>algorithm=None</code> to &quot;none&quot; by <a
href="https://github.com/qqii"><code>@​qqii</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1056">jpadilla/pyjwt#1056</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1055">jpadilla/pyjwt#1055</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1058">jpadilla/pyjwt#1058</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1060">jpadilla/pyjwt#1060</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1061">jpadilla/pyjwt#1061</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1047">#1047</a>:
Correct <code>PyJWKClient.get_signing_key_from_jwt</code> annotation by
<a href="https://github.com/khvn26"><code>@​khvn26</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1048">jpadilla/pyjwt#1048</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1062">jpadilla/pyjwt#1062</a></li>
<li>Fixed doc string typo in _validate_jti() function <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1063">#1063</a>
by <a
href="https://github.com/kuldeepkhatke"><code>@​kuldeepkhatke</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1064">jpadilla/pyjwt#1064</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1065">jpadilla/pyjwt#1065</a></li>
<li>Update SECURITY.md by <a
href="https://github.com/auvipy"><code>@​auvipy</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1057">jpadilla/pyjwt#1057</a></li>
<li>Typing fix: use <code>float</code> instead of <code>int</code> for
<code>lifespan</code> and <code>timeout</code> by <a
href="https://github.com/nikitagashkov"><code>@​nikitagashkov</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1068">jpadilla/pyjwt#1068</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1067">jpadilla/pyjwt#1067</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1071">jpadilla/pyjwt#1071</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1076">jpadilla/pyjwt#1076</a></li>
<li>Fix TYP header documentation by <a
href="https://github.com/fobiasmog"><code>@​fobiasmog</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1046">jpadilla/pyjwt#1046</a></li>
<li>doc: Document claims sub and jti by <a
href="https://github.com/cleder"><code>@​cleder</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1088">jpadilla/pyjwt#1088</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1077">jpadilla/pyjwt#1077</a></li>
<li>Bump actions/setup-python from 5 to 6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1089">jpadilla/pyjwt#1089</a></li>
<li>Bump actions/stale from 8 to 10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1090">jpadilla/pyjwt#1090</a></li>
<li>Bump actions/checkout from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1083">jpadilla/pyjwt#1083</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1091">jpadilla/pyjwt#1091</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1093">jpadilla/pyjwt#1093</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1096">jpadilla/pyjwt#1096</a></li>
<li>Resolve package build warnings by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1105">jpadilla/pyjwt#1105</a></li>
<li>Support Python 3.14, and test against PyPy 3.10+ by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1104">jpadilla/pyjwt#1104</a></li>
<li>Fix a <code>SyntaxWarning</code> caused by invalid escape sequences
by <a href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1103">jpadilla/pyjwt#1103</a></li>
<li>Standardize CHANGELOG links to PRs by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1110">jpadilla/pyjwt#1110</a></li>
<li>Migrate from <code>pep517</code>, which is deprecated, to
<code>build</code> by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1108">jpadilla/pyjwt#1108</a></li>
<li>Fix incorrectly-named test suite function by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1116">jpadilla/pyjwt#1116</a></li>
<li>Fix Read the Docs builds by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1111">jpadilla/pyjwt#1111</a></li>
<li>Bump actions/download-artifact from 4 to 6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1118">jpadilla/pyjwt#1118</a></li>
<li>Escalate test suite warnings to errors by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1107">jpadilla/pyjwt#1107</a></li>
<li>Add pyupgrade as a pre-commit hook by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1109">jpadilla/pyjwt#1109</a></li>
<li>Simplify the test suite decorators by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1113">jpadilla/pyjwt#1113</a></li>
<li>Improve coverage config and eliminate unused test suite code by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1115">jpadilla/pyjwt#1115</a></li>
<li>Build a shared wheel once in the test suite by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1114">jpadilla/pyjwt#1114</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's
changelog</a>.</em></p>
<blockquote>
<h2><code>v2.11.0
&lt;https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0&gt;</code>__</h2>
<p>Fixed</p>
<pre><code>
- Enforce ECDSA curve validation per RFC 7518 Section 3.4.
- Fix build system warnings by @kurtmckee in
`[#1105](https://github.com/jpadilla/pyjwt/issues/1105)
&lt;https://github.com/jpadilla/pyjwt/pull/1105&gt;`__
- Validate key against allowed types for Algorithm family in
`[#964](https://github.com/jpadilla/pyjwt/issues/964)
&lt;https://github.com/jpadilla/pyjwt/pull/964&gt;`__
- Add iterator for JWKSet in
`[#1041](https://github.com/jpadilla/pyjwt/issues/1041)
&lt;https://github.com/jpadilla/pyjwt/pull/1041&gt;`__
- Validate `iss` claim is a string during encoding and decoding by
@pachewise in `[#1040](https://github.com/jpadilla/pyjwt/issues/1040)
&lt;https://github.com/jpadilla/pyjwt/pull/1040&gt;`__
- Improve typing/logic for `options` in decode, decode_complete by
@pachewise in `[#1045](https://github.com/jpadilla/pyjwt/issues/1045)
&lt;https://github.com/jpadilla/pyjwt/pull/1045&gt;`__
- Declare float supported type for lifespan and timeout by
@nikitagashkov in
`[#1068](https://github.com/jpadilla/pyjwt/issues/1068)
&lt;https://github.com/jpadilla/pyjwt/pull/1068&gt;`__
- Fix ``SyntaxWarning``\s/``DeprecationWarning``\s caused by invalid
escape sequences by @kurtmckee in
`[#1103](https://github.com/jpadilla/pyjwt/issues/1103)
&lt;https://github.com/jpadilla/pyjwt/pull/1103&gt;`__
- Development: Build a shared wheel once to speed up test suite setup
times by @kurtmckee in
`[#1114](https://github.com/jpadilla/pyjwt/issues/1114)
&lt;https://github.com/jpadilla/pyjwt/pull/1114&gt;`__
- Development: Test type annotations across all supported Python
versions,
increase the strictness of the type checking, and remove the mypy
pre-commit hook
by @kurtmckee in `[#1112](https://github.com/jpadilla/pyjwt/issues/1112)
&lt;https://github.com/jpadilla/pyjwt/pull/1112&gt;`__
<p>Added
</code></pre></p>
<ul>
<li>Support Python 3.14, and test against PyPy 3.10 and 3.11 by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1104](https://github.com/jpadilla/pyjwt/issues/1104)
&lt;https://github.com/jpadilla/pyjwt/pull/1104&gt;</code>__</li>
<li>Development: Migrate to <code>build</code> to test package building
in CI by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1108](https://github.com/jpadilla/pyjwt/issues/1108)
&lt;https://github.com/jpadilla/pyjwt/pull/1108&gt;</code>__</li>
<li>Development: Improve coverage config and eliminate unused test suite
code by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1115](https://github.com/jpadilla/pyjwt/issues/1115)
&lt;https://github.com/jpadilla/pyjwt/pull/1115&gt;</code>__</li>
<li>Docs: Standardize CHANGELOG links to PRs by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1110](https://github.com/jpadilla/pyjwt/issues/1110)
&lt;https://github.com/jpadilla/pyjwt/pull/1110&gt;</code>__</li>
<li>Docs: Fix Read the Docs builds by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1111](https://github.com/jpadilla/pyjwt/issues/1111)
&lt;https://github.com/jpadilla/pyjwt/pull/1111&gt;</code>__</li>
<li>Docs: Add example of using leeway with nbf by <a
href="https://github.com/djw8605"><code>@​djw8605</code></a> in
<code>[#1034](https://github.com/jpadilla/pyjwt/issues/1034)
&lt;https://github.com/jpadilla/pyjwt/pull/1034&gt;</code>__</li>
<li>Docs: Refactored docs with <code>autodoc</code>; added
<code>PyJWS</code> and <code>jwt.algorithms</code> docs by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in
<code>[#1045](https://github.com/jpadilla/pyjwt/issues/1045)
&lt;https://github.com/jpadilla/pyjwt/pull/1045&gt;</code>__</li>
<li>Docs: Documentation improvements for &quot;sub&quot; and
&quot;jti&quot; claims by <a
href="https://github.com/cleder"><code>@​cleder</code></a> in
<code>[#1088](https://github.com/jpadilla/pyjwt/issues/1088)
&lt;https://github.com/jpadilla/pyjwt/pull/1088&gt;</code>__</li>
<li>Development: Add pyupgrade as a pre-commit hook by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1109](https://github.com/jpadilla/pyjwt/issues/1109)
&lt;https://github.com/jpadilla/pyjwt/pull/1109&gt;</code>__</li>
<li>Add minimum key length validation for HMAC and RSA keys (CWE-326).
Warns by default via <code>InsecureKeyLengthWarning</code> when keys are
below
minimum recommended lengths per RFC 7518 Section 3.2 (HMAC) and
NIST SP 800-131A (RSA). Pass
<code>enforce_minimum_key_length=True</code> in
options to <code>PyJWT</code> or <code>PyJWS</code> to raise
<code>InvalidKeyError</code> instead.</li>
<li>Refactor <code>PyJWT</code> to own an internal <code>PyJWS</code>
instance instead of
calling global <code>api_jws</code> functions.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="697344d259"><code>697344d</code></a>
bump up version</li>
<li><a
href="e4d0aec024"><code>e4d0aec</code></a>
fix: pre-commit</li>
<li><a
href="df9a6a0c44"><code>df9a6a0</code></a>
fix: failing test</li>
<li><a
href="2b2e53cd23"><code>2b2e53c</code></a>
fix: docs</li>
<li><a
href="635c8d89dd"><code>635c8d8</code></a>
fix: failing mypy</li>
<li><a
href="96ae3563b9"><code>96ae356</code></a>
feat: add minimum key length validation for HMAC and RSA</li>
<li><a
href="5b86227733"><code>5b86227</code></a>
fix: enforce ECDSA curve validation per RFC 7518 Section 3.4</li>
<li><a
href="04947d75dc"><code>04947d7</code></a>
Bump actions/download-artifact from 6 to 7 (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1125">#1125</a>)</li>
<li><a
href="dd448344c3"><code>dd44834</code></a>
Fix leeway value in usage documentation (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1124">#1124</a>)</li>
<li><a
href="407f0bde99"><code>407f0bd</code></a>
Thoroughly test type annotations, and resolve errors (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1112">#1112</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=uv&previous-version=2.10.1&new-version=2.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:47 +00:00
dependabot[bot]
7053b2daec Bump gunicorn from 24.1.1 to 25.0.1 in /backend (#1548)
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.1.1 to
25.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/benoitc/gunicorn/releases">gunicorn's
releases</a>.</em></p>
<blockquote>
<h2>25.0.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li>Fix ASGI streaming responses (SSE) hanging: add chunked transfer
encoding for
HTTP/1.1 responses without Content-Length header. Without chunked
encoding,
clients wait for connection close to determine end-of-response.</li>
</ul>
<h2>Changes</h2>
<ul>
<li>Update celery_alternative example to use FastAPI with native ASGI
worker and
uvloop for async task execution</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Add ASGI compliance test suite with Docker-based integration tests
covering HTTP,
WebSocket, streaming, lifespan, framework integration (Starlette,
FastAPI),
HTTP/2, and concurrency scenarios</li>
</ul>
<h2>Gunicorn 25.0.0</h2>
<h2>New Features</h2>
<ul>
<li>
<p><strong>Dirty Arbiters</strong>: Separate process pool for executing
long-running, blocking
operations (AI model loading, heavy computation) without blocking HTTP
workers
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3460">#3460</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3460">benoitc/gunicorn#3460</a>))</p>
<ul>
<li>Inspired by Erlang's dirty schedulers</li>
<li>Asyncio-based with Unix socket IPC</li>
<li>Stateful workers that persist loaded resources</li>
<li>New settings: <code>--dirty-app</code>,
<code>--dirty-workers</code>, <code>--dirty-timeout</code>,
<code>--dirty-threads</code>, <code>--dirty-graceful-timeout</code></li>
<li>Lifecycle hooks: <code>on_dirty_starting</code>,
<code>dirty_post_fork</code>,
<code>dirty_worker_init</code>, <code>dirty_worker_exit</code></li>
</ul>
</li>
<li>
<p><strong>Per-App Worker Allocation for Dirty Arbiters</strong>:
Control how many dirty workers
load each app for memory optimization with heavy models
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3473">#3473</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3473">benoitc/gunicorn#3473</a>))</p>
<ul>
<li>Set <code>workers</code> class attribute on DirtyApp (e.g.,
<code>workers = 2</code>)</li>
<li>Or use config format <code>module:class:N</code> (e.g.,
<code>myapp:HeavyModel:2</code>)</li>
<li>Requests automatically routed to workers with the target app</li>
<li>New exception <code>DirtyNoWorkersAvailableError</code> for graceful
error handling</li>
<li>Example: 8 workers × 10GB model = 80GB → with
<code>workers=2</code>: 20GB (75% savings)</li>
</ul>
</li>
<li>
<p><strong>HTTP/2 Support (Beta)</strong>: Native HTTP/2 (RFC 7540)
support for improved performance
with modern clients ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3468">#3468</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3468">benoitc/gunicorn#3468</a>))</p>
<ul>
<li>Multiplexed streams over a single connection</li>
<li>Header compression (HPACK)</li>
<li>Flow control and stream prioritization</li>
<li>Works with gthread, gevent, and ASGI workers</li>
<li>New settings: <code>--http-protocols</code>,
<code>--http2-max-concurrent-streams</code>,
<code>--http2-initial-window-size</code>,
<code>--http2-max-frame-size</code>,
<code>--http2-max-header-list-size</code></li>
<li>Requires SSL/TLS and h2 library: <code>pip install
gunicorn[http2]</code></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3bf529f6c2"><code>3bf529f</code></a>
docs: sync news.md with 2026-news.md</li>
<li><a
href="1f4f245d76"><code>1f4f245</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3478">#3478</a>
from benoitc/feature/asgi-compliance-testbed</li>
<li><a
href="e1519c0569"><code>e1519c0</code></a>
docs: add ASGI compliance test suite to changelog</li>
<li><a
href="0885005b08"><code>0885005</code></a>
fix(tests): correct assertions in ASGI compliance tests</li>
<li><a
href="658924c436"><code>658924c</code></a>
docs: update changelog for 25.0.1</li>
<li><a
href="c5b6e82277"><code>c5b6e82</code></a>
chore: bump version to 25.0.1</li>
<li><a
href="ce352dc230"><code>ce352dc</code></a>
fix(asgi): add chunked transfer encoding for streaming responses</li>
<li><a
href="29b8a3a763"><code>29b8a3a</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3476">#3476</a>
from benoitc/dependabot/github_actions/actions/check...</li>
<li><a
href="791ab46e1c"><code>791ab46</code></a>
chore(deps): bump actions/checkout from 4 to 6</li>
<li><a
href="9235b72ab8"><code>9235b72</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3475">#3475</a>
from benoitc/dependabot/github_actions/actions/uploa...</li>
<li>Additional commits viewable in <a
href="https://github.com/benoitc/gunicorn/compare/24.1.1...25.0.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gunicorn&package-manager=uv&previous-version=24.1.1&new-version=25.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:40 +00:00
dependabot[bot]
a3e836b083 Bump eslint-plugin-react-hooks from 4.6.0 to 7.0.1 in /frontend (#1543)
Bumps
[eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks)
from 4.6.0 to 7.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/releases">eslint-plugin-react-hooks's
releases</a>.</em></p>
<blockquote>
<h2>eslint-plugin-react-hooks@5.0.0 (Oct 11, 2024)</h2>
<p>This release only contains <code>eslint-plugin-react-hooks</code>.
Notably, new violations and support for ESLint v9 were added.</p>
<h2><code>eslint-plugin-react-hooks</code></h2>
<ul>
<li><strong>New Violations:</strong> Component names now need to start
with an uppercase letter instead of a non-lowercase letter. This means
<code>_Button</code> or <code>_component</code> are no longer valid. (<a
href="https://github.com/kassens"><code>@​kassens</code></a>) in <a
href="https://redirect.github.com/facebook/react/pull/25162">#25162</a>
For example, in
<pre lang="tsx"><code>function _Component() {
  useState()
^^^^^^^^ A React Hook &quot;useState&quot; is called in function
&quot;_Component&quot; which is neither a Component nor a custom React
Hook function.
}
</code></pre>
<code>_Component</code> should be renamed to
<code>Component</code>.</li>
</ul>
<ul>
<li>Add support for ESLint v9. (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28773">#28773</a>)</li>
<li>Consider dispatch from <code>useActionState</code> stable. (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/29665">#29665</a>)</li>
<li>Accept <code>as</code> expression in callback. (<a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28202">#28202</a>)</li>
<li>Accept <code>as</code> expressions in deps array. (<a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28189">#28189</a>)</li>
<li>Treat <code>React.use()</code> the same as <code>use()</code>. (<a
href="https://github.com/kassens"><code>@​kassens</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27769">#27769</a>)</li>
<li>Move <code>use()</code> lint to non-experimental. (<a
href="https://github.com/kassens"><code>@​kassens</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27768">#27768</a>)</li>
<li>Support Flow <code>as</code> expressions. (<a
href="https://github.com/cpojer"><code>@​cpojer</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27590">#27590</a>)</li>
<li>Allow <code>useEffect(fn, undefined)</code>. (<a
href="https://github.com/kassens"><code>@​kassens</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27525">#27525</a>)</li>
<li>Disallow hooks in async functions. (<a
href="https://github.com/acdlite"><code>@​acdlite</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27045">#27045</a>)</li>
<li>Rename experimental <code>useEvent</code> to
<code>useEffectEvent</code>. (<a
href="https://github.com/sebmarkbage"><code>@​sebmarkbage</code></a> in
<a
href="https://redirect.github.com/facebook/react/pull/25881">#25881</a>)</li>
<li>Lint for presence of <code>useEvent</code> functions in dependency
lists. (<a href="https://github.com/poteto"><code>@​poteto</code></a> in
<a
href="https://redirect.github.com/facebook/react/pull/25512">#25512</a>)</li>
<li>Check <code>useEvent</code> references instead. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/25319">#25319</a>)</li>
<li>Update <code>RulesOfHooks</code> with <code>useEvent</code> rules.
(<a href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/25285">#25285</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md">eslint-plugin-react-hooks's
changelog</a>.</em></p>
<blockquote>
<h2>7.0.1</h2>
<ul>
<li>Disallowed passing inline <code>useEffectEvent</code> values as JSX
props to guard against accidental propagation. (<a
href="https://redirect.github.com/facebook/react/pull/34820">#34820</a>
by <a
href="https://github.com/jf-eirinha"><code>@​jf-eirinha</code></a>)</li>
<li>Switch to <code>export =</code> so eslint-plugin-react-hooks emits
correct types for consumers in Node16 ESM projects. (<a
href="https://redirect.github.com/facebook/react/pull/34949">#34949</a>
by <a
href="https://github.com/karlhorky"><code>@​karlhorky</code></a>)</li>
<li>Tightened the typing of <code>configs.flat</code> so the
<code>configs</code> export is always defined. (<a
href="https://redirect.github.com/facebook/react/pull/34950">#34950</a>
by <a href="https://github.com/poteto"><code>@​poteto</code></a>)</li>
<li>Fix named import runtime errors. (<a
href="https://redirect.github.com/facebook/react/pull/34951">#34951</a>,
<a
href="https://redirect.github.com/facebook/react/pull/34953">#34953</a>
by <a
href="https://github.com/karlhorky"><code>@​karlhorky</code></a>)</li>
</ul>
<h2>7.0.0</h2>
<p>This release slims down presets to just 2 configurations
(<code>recommended</code> and <code>recommended-latest</code>), and all
compiler rules are enabled by default.</p>
<ul>
<li><strong>Breaking:</strong> Removed
<code>recommended-latest-legacy</code> and <code>flat/recommended</code>
configs. The plugin now provides <code>recommended</code> (legacy and
flat configs with all recommended rules), and
<code>recommended-latest</code> (legacy and flat configs with all
recommended rules plus new bleeding edge experimental compiler rules).
(<a href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34757">#34757</a>)</li>
</ul>
<h2>6.1.1</h2>
<p><strong>Note:</strong> 6.1.0 accidentally allowed use of
<code>recommended</code> without flat config, causing errors when used
with ESLint v9's <code>defineConfig()</code> helper. This has been fixed
in 6.1.1.</p>
<ul>
<li>Fix <code>recommended</code> config for flat config compatibility.
The <code>recommended</code> config has been converted to flat config
format. Non-flat config users should use <code>recommended-legacy</code>
instead. (<a href="https://github.com/poteto"><code>@​poteto</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/34700">#34700</a>)</li>
<li>Add <code>recommended-latest</code> and
<code>recommended-latest-legacy</code> configs that include React
Compiler rules. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34675">#34675</a>)</li>
<li>Remove unused <code>NoUnusedOptOutDirectives</code> rule. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34703">#34703</a>)</li>
<li>Remove <code>hermes-parser</code> and dependency. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34719">#34719</a>)</li>
<li>Remove <code>@babel/plugin-proposal-private-methods</code>
dependency. (<a
href="https://github.com/ArnaudBarre"><code>@​ArnaudBarre</code></a> and
<a
href="https://github.com/josephsavona"><code>@​josephsavona</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/34715">#34715</a>)</li>
<li>Update for Zod v3/v4 compatibility. (<a
href="https://github.com/kolvian"><code>@​kolian</code></a> and <a
href="https://github.com/josephsavona"><code>@​josephsavona</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/34717">#34717</a>)</li>
</ul>
<h2>6.1.0</h2>
<p><strong>Note:</strong> Version 6.0.0 was mistakenly released and
immediately deprecated and untagged on npm. This is the first official
6.x major release and includes breaking changes.</p>
<ul>
<li><strong>Breaking:</strong> Require Node.js 18 or newer. (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/32458">#32458</a>)</li>
<li><strong>Breaking:</strong> Flat config is now the default
<code>recommended</code> preset. Legacy config moved to
<code>recommended-legacy</code>. (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/32457">#32457</a>)</li>
<li><strong>New Violations:</strong> Disallow calling <code>use</code>
within try/catch blocks. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34040">#34040</a>)</li>
<li><strong>New Violations:</strong> Disallow calling
<code>useEffectEvent</code> functions in arbitrary closures. (<a
href="https://github.com/jbrown215"><code>@​jbrown215</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/33544">#33544</a>)</li>
<li>Handle <code>React.useEffect</code> in addition to
<code>useEffect</code> in rules-of-hooks. (<a
href="https://github.com/Ayc0"><code>@​Ayc0</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34076">#34076</a>)</li>
<li>Added <code>react-hooks</code> settings config option that to accept
<code>additionalEffectHooks</code> that are used across exhaustive-deps
and rules-of-hooks rules. (<a
href="https://github.com/jbrown215"><code>@​jbrown215</code></a>) in <a
href="https://redirect.github.com/facebook/react/pull/34497">#34497</a></li>
</ul>
<h2>6.0.0</h2>
<p>Accidentally released. See 6.1.0 for the actual changes.</p>
<h2>5.2.0</h2>
<ul>
<li>Support flat config (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/30774">#30774</a>)</li>
<li>Convert the plugin to TypeScript and provide package type
declarations (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/32279">#32279</a>,
<a
href="https://redirect.github.com/facebook/react/pull/32283">#32283</a>,
<a
href="https://redirect.github.com/facebook/react/pull/32240">#32240</a>,
<a
href="https://redirect.github.com/facebook/react/pull/32400">#32400</a>
and <a href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/32420">#32420</a>)</li>
<li>Fix false positive error in components with
<code>do</code>/<code>while</code> loops (<a
href="https://github.com/tyxla"><code>@​tyxla</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/31720">#31720</a>)</li>
<li>Detect issues in class properties (<a
href="https://github.com/mjesun"><code>@​mjesun</code></a> &amp; <a
href="https://github.com/ecraig12345"><code>@​ecraig12345</code></a> in
<a
href="https://redirect.github.com/facebook/react/pull/31823">#31823</a>)</li>
</ul>
<h2>5.1.0</h2>
<ul>
<li>Add support for <code>do</code>/<code>while</code> loops (<a
href="https://github.com/tyxla"><code>@​tyxla</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28714">#28714</a>)</li>
<li>Fix error when callback argument is an identifier with an
<code>as</code> expression (<a
href="https://github.com/mskelton"><code>@​mskelton</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/31119">#31119</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~react-bot">react-bot</a>, a new releaser
for eslint-plugin-react-hooks since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint-plugin-react-hooks&package-manager=npm_and_yarn&previous-version=4.6.0&new-version=7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:26 +00:00
dependabot[bot]
88febd34cd Bump swr from 2.3.0 to 2.4.0 in /frontend (#1542)
Bumps [swr](https://github.com/vercel/swr) from 2.3.0 to 2.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/swr/releases">swr's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: Migrate suspense related tests to e2e by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4204">vercel/swr#4204</a></li>
<li>CI: add missing flag for canary test by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4206">vercel/swr#4206</a></li>
<li>fix: Ensure useSWRImmutable overrides global refreshInterval by <a
href="https://github.com/CODEAbhinav-art"><code>@​CODEAbhinav-art</code></a>
in <a
href="https://redirect.github.com/vercel/swr/pull/4208">vercel/swr#4208</a></li>
<li>fix: Extra render when changing to new key with useSWRImmutable by
<a href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4209">vercel/swr#4209</a></li>
<li>fix: isHydration will cause unnecessary rerender by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4212">vercel/swr#4212</a></li>
<li>fix: Ensure preload runs only on client by <a
href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4213">vercel/swr#4213</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/CODEAbhinav-art"><code>@​CODEAbhinav-art</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4208">vercel/swr#4208</a></li>
<li><a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4213">vercel/swr#4213</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.8...v2.4.0">https://github.com/vercel/swr/compare/v2.3.8...v2.4.0</a></p>
<h2>v2.3.8</h2>
<h2>What's Changed</h2>
<ul>
<li>deps: upgrade dev deps for build by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4188">vercel/swr#4188</a></li>
<li>update use-sync-external-store to latest by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4189">vercel/swr#4189</a></li>
<li>fix: cve-2025-55182 critical rce vulnerability by <a
href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4192">vercel/swr#4192</a></li>
<li>fix: cve-2025-55184 &amp; CVE-2025-55183 by <a
href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4198">vercel/swr#4198</a></li>
<li>upgrade dev dep nextjs by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4199">vercel/swr#4199</a></li>
<li>update dev dependencies to address cve by <a
href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4200">vercel/swr#4200</a></li>
<li>enhance: Improve TSDoc comments by <a
href="https://github.com/shuding"><code>@​shuding</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4203">vercel/swr#4203</a></li>
<li>test: Import <code>act</code> from React by <a
href="https://github.com/shuding"><code>@​shuding</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4202">vercel/swr#4202</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4192">vercel/swr#4192</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.7...v2.3.8">https://github.com/vercel/swr/compare/v2.3.7...v2.3.8</a></p>
<h2>v2.3.7</h2>
<h2>What's Changed</h2>
<ul>
<li>deps: upgrade ci node version to 22 by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4184">vercel/swr#4184</a></li>
<li>deps: upgrade pnpm version by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4185">vercel/swr#4185</a></li>
<li>deps: upgrade playwright version by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4186">vercel/swr#4186</a></li>
<li>deps: upgrade eslint version and fix lint problem by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4187">vercel/swr#4187</a></li>
<li>feat: Add <code>strictServerPrefetchWarning</code> by <a
href="https://github.com/shuding"><code>@​shuding</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4183">vercel/swr#4183</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.6...v2.3.7">https://github.com/vercel/swr/compare/v2.3.6...v2.3.7</a></p>
<h2>v2.3.6</h2>
<h2>Patches</h2>
<ul>
<li>fix: do not error when not enabled during suspense by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4156">vercel/swr#4156</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.5...v2.3.6">https://github.com/vercel/swr/compare/v2.3.5...v2.3.6</a></p>
<h2>v2.3.5</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a029984bc"><code>9a02998</code></a>
2.4.0</li>
<li><a
href="f864770666"><code>f864770</code></a>
fix: Ensure preload runs only on client (<a
href="https://redirect.github.com/vercel/swr/issues/4213">#4213</a>)</li>
<li><a
href="1f93cc2c44"><code>1f93cc2</code></a>
fix: isHydration will cause unnecessary rerender (<a
href="https://redirect.github.com/vercel/swr/issues/4212">#4212</a>)</li>
<li><a
href="b75456a8ce"><code>b75456a</code></a>
fix: extra render when changing to new key with useSWRImmutable (<a
href="https://redirect.github.com/vercel/swr/issues/4209">#4209</a>)</li>
<li><a
href="de1dc5ac01"><code>de1dc5a</code></a>
fix: Ensure useSWRImmutable overrides global refreshInterval (<a
href="https://redirect.github.com/vercel/swr/issues/4208">#4208</a>)</li>
<li><a
href="a5214bf56e"><code>a5214bf</code></a>
ci: add missing flag for canary test (<a
href="https://redirect.github.com/vercel/swr/issues/4206">#4206</a>)</li>
<li><a
href="4acf8417b6"><code>4acf841</code></a>
migrate suspense related tests to e2e (<a
href="https://redirect.github.com/vercel/swr/issues/4204">#4204</a>)</li>
<li><a
href="e0426a90cd"><code>e0426a9</code></a>
2.3.8</li>
<li><a
href="ca6e11d4f9"><code>ca6e11d</code></a>
test: Import <code>act</code> from React (<a
href="https://redirect.github.com/vercel/swr/issues/4202">#4202</a>)</li>
<li><a
href="eff8fda1ca"><code>eff8fda</code></a>
enhance: Improve TSDoc comments (<a
href="https://redirect.github.com/vercel/swr/issues/4203">#4203</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/swr/compare/v2.3.0...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=swr&package-manager=npm_and_yarn&previous-version=2.3.0&new-version=2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:37:54 +00:00
dependabot[bot]
b00c865d85 Bump eslint from 9.26.0 to 9.39.2 in /frontend (#1541)
Bumps [eslint](https://github.com/eslint/eslint) from 9.26.0 to 9.39.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v9.39.2</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="5705833194"><code>5705833</code></a>
fix: warn when <code>eslint-env</code> configuration comments are found
(<a
href="https://redirect.github.com/eslint/eslint/issues/20381">#20381</a>)
(sethamus)</li>
</ul>
<h2>Build Related</h2>
<ul>
<li><a
href="506f1549a6"><code>506f154</code></a>
build: add .scss files entry to knip (<a
href="https://redirect.github.com/eslint/eslint/issues/20391">#20391</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="7ca0af7f9f"><code>7ca0af7</code></a>
chore: upgrade to <code>@eslint/js@9.39.2</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20394">#20394</a>)
(Francesco Trotta)</li>
<li><a
href="c43ce24ff0"><code>c43ce24</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="4c9858e47b"><code>4c9858e</code></a>
ci: add <code>v9.x-dev</code> branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20382">#20382</a>)
(Milos Djermanovic)</li>
</ul>
<h2>v9.39.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="650753ee39"><code>650753e</code></a>
fix: Only pass node to JS lang visitor methods (<a
href="https://redirect.github.com/eslint/eslint/issues/20283">#20283</a>)
(Nicholas C. Zakas)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="51b51f4f1c"><code>51b51f4</code></a>
docs: add a section on when to use extends vs cascading (<a
href="https://redirect.github.com/eslint/eslint/issues/20268">#20268</a>)
(Tanuj Kanti)</li>
<li><a
href="b44d42699d"><code>b44d426</code></a>
docs: Update README (GitHub Actions Bot)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="92db329211"><code>92db329</code></a>
chore: update <code>@eslint/js</code> version to 9.39.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/20284">#20284</a>)
(Francesco Trotta)</li>
<li><a
href="c7ebefc9ea"><code>c7ebefc</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="61778f6ca3"><code>61778f6</code></a>
chore: update eslint-config-eslint dependency <code>@​eslint/js</code>
to ^9.39.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/20275">#20275</a>)
(renovate[bot])</li>
<li><a
href="d9ca2fcd9a"><code>d9ca2fc</code></a>
ci: Add rangeStrategy to eslint group in renovate config (<a
href="https://redirect.github.com/eslint/eslint/issues/20266">#20266</a>)
(唯然)</li>
<li><a
href="009e5076ff"><code>009e507</code></a>
test: fix version tests for ESLint v10 (<a
href="https://redirect.github.com/eslint/eslint/issues/20274">#20274</a>)
(Milos Djermanovic)</li>
</ul>
<h2>v9.39.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="cc57d87a3f"><code>cc57d87</code></a>
feat: update error loc to key in <code>no-dupe-class-members</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20259">#20259</a>)
(Tanuj Kanti)</li>
<li><a
href="126552fcf3"><code>126552f</code></a>
feat: update error location in <code>for-direction</code> and
<code>no-dupe-args</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20258">#20258</a>)
(Tanuj Kanti)</li>
<li><a
href="167d0970d3"><code>167d097</code></a>
feat: update <code>complexity</code> rule to highlight only static block
header (<a
href="https://redirect.github.com/eslint/eslint/issues/20245">#20245</a>)
(jaymarvelz)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="15f5c7c168"><code>15f5c7c</code></a>
fix: forward traversal <code>step.args</code> to visitors (<a
href="https://redirect.github.com/eslint/eslint/issues/20253">#20253</a>)
(jaymarvelz)</li>
<li><a
href="5a1a534e87"><code>5a1a534</code></a>
fix: allow JSDoc comments in object-shorthand rule (<a
href="https://redirect.github.com/eslint/eslint/issues/20167">#20167</a>)
(Nitin Kumar)</li>
<li><a
href="e86b813eb6"><code>e86b813</code></a>
fix: Use more types from <code>@​eslint/core</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20257">#20257</a>)
(Nicholas C. Zakas)</li>
<li><a
href="927272d1f0"><code>927272d</code></a>
fix: correct <code>Scope</code> typings (<a
href="https://redirect.github.com/eslint/eslint/issues/20198">#20198</a>)
(jaymarvelz)</li>
<li><a
href="37f76d9c53"><code>37f76d9</code></a>
fix: use <code>AST.Program</code> type for Program node (<a
href="https://redirect.github.com/eslint/eslint/issues/20244">#20244</a>)
(Francesco Trotta)</li>
<li><a
href="ae07f0b333"><code>ae07f0b</code></a>
fix: unify timing report for concurrent linting (<a
href="https://redirect.github.com/eslint/eslint/issues/20188">#20188</a>)
(jaymarvelz)</li>
<li><a
href="b165d471be"><code>b165d47</code></a>
fix: correct <code>Rule</code> typings (<a
href="https://redirect.github.com/eslint/eslint/issues/20199">#20199</a>)
(jaymarvelz)</li>
<li><a
href="fb97cda70d"><code>fb97cda</code></a>
fix: improve error message for missing fix function in suggestions (<a
href="https://redirect.github.com/eslint/eslint/issues/20218">#20218</a>)
(jaymarvelz)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="d3e81e30ee"><code>d3e81e3</code></a>
docs: Always recommend to include a files property (<a
href="https://redirect.github.com/eslint/eslint/issues/20158">#20158</a>)
(Percy Ma)</li>
<li><a
href="0f0385f140"><code>0f0385f</code></a>
docs: use consistent naming recommendation (<a
href="https://redirect.github.com/eslint/eslint/issues/20250">#20250</a>)
(Alex M. Spieslechner)</li>
<li><a
href="a3b145609a"><code>a3b1456</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="cf5f2dd58d"><code>cf5f2dd</code></a>
docs: fix correct tag of <code>no-useless-constructor</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20255">#20255</a>)
(Tanuj Kanti)</li>
<li><a
href="10b995c8e5"><code>10b995c</code></a>
docs: add TS options and examples for <code>nofunc</code> in
<code>no-use-before-define</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20249">#20249</a>)
(Tanuj Kanti)</li>
<li><a
href="2584187e4a"><code>2584187</code></a>
docs: remove repetitive word in comment (<a
href="https://redirect.github.com/eslint/eslint/issues/20242">#20242</a>)
(reddaisyy)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9278324aa0"><code>9278324</code></a>
9.39.2</li>
<li><a
href="542266ad3c"><code>542266a</code></a>
Build: changelog update for 9.39.2</li>
<li><a
href="7ca0af7f9f"><code>7ca0af7</code></a>
chore: upgrade to <code>@eslint/js@9.39.2</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20394">#20394</a>)</li>
<li><a
href="c43ce24ff0"><code>c43ce24</code></a>
chore: package.json update for <code>@​eslint/js</code> release</li>
<li><a
href="5705833194"><code>5705833</code></a>
fix: warn when <code>eslint-env</code> configuration comments are found
(<a
href="https://redirect.github.com/eslint/eslint/issues/20381">#20381</a>)</li>
<li><a
href="506f1549a6"><code>506f154</code></a>
build: add .scss files entry to knip (<a
href="https://redirect.github.com/eslint/eslint/issues/20391">#20391</a>)</li>
<li><a
href="4c9858e47b"><code>4c9858e</code></a>
ci: add <code>v9.x-dev</code> branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20382">#20382</a>)</li>
<li><a
href="e2772811a8"><code>e277281</code></a>
9.39.1</li>
<li><a
href="4cdf397b30"><code>4cdf397</code></a>
Build: changelog update for 9.39.1</li>
<li><a
href="92db329211"><code>92db329</code></a>
chore: update <code>@eslint/js</code> version to 9.39.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/20284">#20284</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v9.26.0...v9.39.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=9.26.0&new-version=9.39.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:37:48 +00:00
dependabot[bot]
f7f525ae4a Bump @types/node from 25.0.0 to 25.2.0 in /docs (#1540)
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 25.0.0 to 25.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=25.0.0&new-version=25.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:37:27 +00:00
dependabot[bot]
29caadd925 Bump eslint from 8.57.0 to 9.26.0 in /frontend (#1537)
Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 9.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v9.26.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="e9754e7433"><code>e9754e7</code></a>
feat: add reportGlobalThis to no-shadow-restricted-names (<a
href="https://redirect.github.com/eslint/eslint/issues/19670">#19670</a>)
(sethamus)</li>
<li><a
href="0fa2b7a366"><code>0fa2b7a</code></a>
feat: add suggestions for <code>eqeqeq</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19640">#19640</a>)
(Nitin Kumar)</li>
<li><a
href="dcbdcc9c6b"><code>dcbdcc9</code></a>
feat: Add MCP server (<a
href="https://redirect.github.com/eslint/eslint/issues/19592">#19592</a>)
(Nicholas C. Zakas)</li>
<li><a
href="2dfd83ef4e"><code>2dfd83e</code></a>
feat: add <code>ignoreDirectives</code> option in
<code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19645">#19645</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="96e84de55a"><code>96e84de</code></a>
fix: check cache file existence before deletion (<a
href="https://redirect.github.com/eslint/eslint/issues/19648">#19648</a>)
(sethamus)</li>
<li><a
href="d683aebc8e"><code>d683aeb</code></a>
fix: don't crash on tests with circular references in
<code>RuleTester</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19664">#19664</a>)
(Milos Djermanovic)</li>
<li><a
href="9736d5d158"><code>9736d5d</code></a>
fix: add <code>namespace</code> to <code>Plugin.meta</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19661">#19661</a>)
(Milos Djermanovic)</li>
<li><a
href="17bae69e02"><code>17bae69</code></a>
fix: update <code>RuleTester.run()</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19634">#19634</a>)
(Nitin Kumar)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="dd98d63f09"><code>dd98d63</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="c25e858d2d"><code>c25e858</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="b2397e9bef"><code>b2397e9</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="addd0a6a62"><code>addd0a6</code></a>
docs: fix formatting of unordered lists in Markdown (<a
href="https://redirect.github.com/eslint/eslint/issues/19660">#19660</a>)
(Milos Djermanovic)</li>
<li><a
href="a21b38db02"><code>a21b38d</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="c0721a7f34"><code>c0721a7</code></a>
docs: fix double space in command (<a
href="https://redirect.github.com/eslint/eslint/issues/19657">#19657</a>)
(CamWass)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="5b247c859f"><code>5b247c8</code></a>
chore: upgrade to <code>@eslint/js@9.26.0</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19681">#19681</a>)
(Francesco Trotta)</li>
<li><a
href="d6fa4ac031"><code>d6fa4ac</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="09586905be"><code>0958690</code></a>
chore: disambiguate internal types <code>LanguageOptions</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19669">#19669</a>)
(Francesco Trotta)</li>
<li><a
href="f1c858e3c1"><code>f1c858e</code></a>
chore: fix internal type references to <code>Plugin</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19665">#19665</a>)
(Francesco Trotta)</li>
<li><a
href="40dd2998ce"><code>40dd299</code></a>
refactor: One-shot ESQuery selector analysis (<a
href="https://redirect.github.com/eslint/eslint/issues/19652">#19652</a>)
(Nicholas C. Zakas)</li>
<li><a
href="1cfd702422"><code>1cfd702</code></a>
chore: update dependency <code>@​eslint/json</code> to ^0.12.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/19656">#19656</a>)
(renovate[bot])</li>
</ul>
<h2>v9.25.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="cdc8e8c950"><code>cdc8e8c</code></a>
fix: revert directive detection in no-unused-expressions (<a
href="https://redirect.github.com/eslint/eslint/issues/19639">#19639</a>)
(sethamus)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="1f2b057ddc"><code>1f2b057</code></a>
chore: upgrade <code>@​eslint/js</code><a
href="https://github.com/9"><code>@​9</code></a>.25.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/19642">#19642</a>)
(Milos Djermanovic)</li>
<li><a
href="771317fa93"><code>771317f</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
</ul>
<h2>v9.25.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="dcd95aafa3"><code>dcd95aa</code></a>
feat: support TypeScript syntax in no-empty-function rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19551">#19551</a>)
(sethamus)</li>
<li><a
href="77d6d5bc49"><code>77d6d5b</code></a>
feat: support TS syntax in <code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19564">#19564</a>)
(Sweta Tanwar)</li>
<li><a
href="90228e5d57"><code>90228e5</code></a>
feat: support <code>JSRuleDefinition</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19604">#19604</a>)
(루밀LuMir)</li>
<li><a
href="59ba6b7378"><code>59ba6b7</code></a>
feat: add allowObjects option to no-restricted-properties (<a
href="https://redirect.github.com/eslint/eslint/issues/19607">#19607</a>)
(sethamus)</li>
<li><a
href="db650a036b"><code>db650a0</code></a>
feat: support TypeScript syntax in <code>no-invalid-this</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19532">#19532</a>)
(Tanuj Kanti)</li>
<li><a
href="9535cffe7b"><code>9535cff</code></a>
feat: support TS syntax in <code>no-loop-func</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19559">#19559</a>)
(Nitin Kumar)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="910bd13c4c"><code>910bd13</code></a>
fix: <code>nodeTypeKey</code> not being used in
<code>NodeEventGenerator</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19631">#19631</a>)
(StyleShit)</li>
</ul>
<h2>Documentation</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/blob/v9.26.0/CHANGELOG.md">eslint's
changelog</a>.</em></p>
<blockquote>
<p>v9.26.0 - May 2, 2025</p>
<ul>
<li><a
href="5b247c859f"><code>5b247c8</code></a>
chore: upgrade to <code>@eslint/js@9.26.0</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19681">#19681</a>)
(Francesco Trotta)</li>
<li><a
href="d6fa4ac031"><code>d6fa4ac</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="e9754e7433"><code>e9754e7</code></a>
feat: add reportGlobalThis to no-shadow-restricted-names (<a
href="https://redirect.github.com/eslint/eslint/issues/19670">#19670</a>)
(sethamus)</li>
<li><a
href="0fa2b7a366"><code>0fa2b7a</code></a>
feat: add suggestions for <code>eqeqeq</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19640">#19640</a>)
(Nitin Kumar)</li>
<li><a
href="dd98d63f09"><code>dd98d63</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="96e84de55a"><code>96e84de</code></a>
fix: check cache file existence before deletion (<a
href="https://redirect.github.com/eslint/eslint/issues/19648">#19648</a>)
(sethamus)</li>
<li><a
href="c25e858d2d"><code>c25e858</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="09586905be"><code>0958690</code></a>
chore: disambiguate internal types <code>LanguageOptions</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19669">#19669</a>)
(Francesco Trotta)</li>
<li><a
href="dcbdcc9c6b"><code>dcbdcc9</code></a>
feat: Add MCP server (<a
href="https://redirect.github.com/eslint/eslint/issues/19592">#19592</a>)
(Nicholas C. Zakas)</li>
<li><a
href="b2397e9bef"><code>b2397e9</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="d683aebc8e"><code>d683aeb</code></a>
fix: don't crash on tests with circular references in
<code>RuleTester</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19664">#19664</a>)
(Milos Djermanovic)</li>
<li><a
href="f1c858e3c1"><code>f1c858e</code></a>
chore: fix internal type references to <code>Plugin</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19665">#19665</a>)
(Francesco Trotta)</li>
<li><a
href="9736d5d158"><code>9736d5d</code></a>
fix: add <code>namespace</code> to <code>Plugin.meta</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19661">#19661</a>)
(Milos Djermanovic)</li>
<li><a
href="40dd2998ce"><code>40dd299</code></a>
refactor: One-shot ESQuery selector analysis (<a
href="https://redirect.github.com/eslint/eslint/issues/19652">#19652</a>)
(Nicholas C. Zakas)</li>
<li><a
href="addd0a6a62"><code>addd0a6</code></a>
docs: fix formatting of unordered lists in Markdown (<a
href="https://redirect.github.com/eslint/eslint/issues/19660">#19660</a>)
(Milos Djermanovic)</li>
<li><a
href="a21b38db02"><code>a21b38d</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="c0721a7f34"><code>c0721a7</code></a>
docs: fix double space in command (<a
href="https://redirect.github.com/eslint/eslint/issues/19657">#19657</a>)
(CamWass)</li>
<li><a
href="1cfd702422"><code>1cfd702</code></a>
chore: update dependency <code>@​eslint/json</code> to ^0.12.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/19656">#19656</a>)
(renovate[bot])</li>
<li><a
href="2dfd83ef4e"><code>2dfd83e</code></a>
feat: add <code>ignoreDirectives</code> option in
<code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19645">#19645</a>)
(sethamus)</li>
<li><a
href="17bae69e02"><code>17bae69</code></a>
fix: update <code>RuleTester.run()</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19634">#19634</a>)
(Nitin Kumar)</li>
</ul>
<p>v9.25.1 - April 21, 2025</p>
<ul>
<li><a
href="1f2b057ddc"><code>1f2b057</code></a>
chore: upgrade <code>@​eslint/js</code><a
href="https://github.com/9"><code>@​9</code></a>.25.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/19642">#19642</a>)
(Milos Djermanovic)</li>
<li><a
href="771317fa93"><code>771317f</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="cdc8e8c950"><code>cdc8e8c</code></a>
fix: revert directive detection in no-unused-expressions (<a
href="https://redirect.github.com/eslint/eslint/issues/19639">#19639</a>)
(sethamus)</li>
</ul>
<p>v9.25.0 - April 18, 2025</p>
<ul>
<li><a
href="88dc1965a4"><code>88dc196</code></a>
chore: upgrade <code>@​eslint/js</code><a
href="https://github.com/9"><code>@​9</code></a>.25.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/19636">#19636</a>)
(Milos Djermanovic)</li>
<li><a
href="345288d7b2"><code>345288d</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="910bd13c4c"><code>910bd13</code></a>
fix: <code>nodeTypeKey</code> not being used in
<code>NodeEventGenerator</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19631">#19631</a>)
(StyleShit)</li>
<li><a
href="ca7a735dde"><code>ca7a735</code></a>
docs: update <code>no-undef-init</code> when not to use section (<a
href="https://redirect.github.com/eslint/eslint/issues/19624">#19624</a>)
(Tanuj Kanti)</li>
<li><a
href="affe6be018"><code>affe6be</code></a>
chore: upgrade trunk (<a
href="https://redirect.github.com/eslint/eslint/issues/19628">#19628</a>)
(sethamus)</li>
<li><a
href="1b870c9da4"><code>1b870c9</code></a>
docs: use <code>eslint-config-xo</code> in the getting started guide (<a
href="https://redirect.github.com/eslint/eslint/issues/19629">#19629</a>)
(Nitin Kumar)</li>
<li><a
href="5d4af16ab1"><code>5d4af16</code></a>
docs: add types for multiple rule options (<a
href="https://redirect.github.com/eslint/eslint/issues/19616">#19616</a>)
(Tanuj Kanti)</li>
<li><a
href="e8f8d57bd6"><code>e8f8d57</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="a40348f1f6"><code>a40348f</code></a>
docs: no-use-before-define tweaks (<a
href="https://redirect.github.com/eslint/eslint/issues/19622">#19622</a>)
(Kirk Waiblinger)</li>
<li><a
href="0ba3ae3e5a"><code>0ba3ae3</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="865dbfed6c"><code>865dbfe</code></a>
docs: ensure &quot;learn more&quot; deprecation links point to useful
resource (<a
href="https://redirect.github.com/eslint/eslint/issues/19590">#19590</a>)
(Kirk Waiblinger)</li>
<li><a
href="dcd95aafa3"><code>dcd95aa</code></a>
feat: support TypeScript syntax in no-empty-function rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19551">#19551</a>)
(sethamus)</li>
<li><a
href="77d6d5bc49"><code>77d6d5b</code></a>
feat: support TS syntax in <code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19564">#19564</a>)
(Sweta Tanwar)</li>
<li><a
href="90228e5d57"><code>90228e5</code></a>
feat: support <code>JSRuleDefinition</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19604">#19604</a>)
(루밀LuMir)</li>
<li><a
href="f80b746d85"><code>f80b746</code></a>
docs: add known limitations for no-self-compare (<a
href="https://redirect.github.com/eslint/eslint/issues/19612">#19612</a>)
(Nitin Kumar)</li>
<li><a
href="59ba6b7378"><code>59ba6b7</code></a>
feat: add allowObjects option to no-restricted-properties (<a
href="https://redirect.github.com/eslint/eslint/issues/19607">#19607</a>)
(sethamus)</li>
<li><a
href="db650a036b"><code>db650a0</code></a>
feat: support TypeScript syntax in <code>no-invalid-this</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19532">#19532</a>)
(Tanuj Kanti)</li>
<li><a
href="dd20cf274e"><code>dd20cf2</code></a>
test: fix <code>no-loop-func</code> test with duplicate variable reports
(<a
href="https://redirect.github.com/eslint/eslint/issues/19610">#19610</a>)
(Milos Djermanovic)</li>
<li><a
href="9535cffe7b"><code>9535cff</code></a>
feat: support TS syntax in <code>no-loop-func</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19559">#19559</a>)
(Nitin Kumar)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8bbabc4691"><code>8bbabc4</code></a>
9.26.0</li>
<li><a
href="16f5ff7991"><code>16f5ff7</code></a>
Build: changelog update for 9.26.0</li>
<li><a
href="5b247c859f"><code>5b247c8</code></a>
chore: upgrade to <code>@eslint/js@9.26.0</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19681">#19681</a>)</li>
<li><a
href="d6fa4ac031"><code>d6fa4ac</code></a>
chore: package.json update for <code>@​eslint/js</code> release</li>
<li><a
href="e9754e7433"><code>e9754e7</code></a>
feat: add reportGlobalThis to no-shadow-restricted-names (<a
href="https://redirect.github.com/eslint/eslint/issues/19670">#19670</a>)</li>
<li><a
href="0fa2b7a366"><code>0fa2b7a</code></a>
feat: add suggestions for <code>eqeqeq</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19640">#19640</a>)</li>
<li><a
href="dd98d63f09"><code>dd98d63</code></a>
docs: Update README</li>
<li><a
href="96e84de55a"><code>96e84de</code></a>
fix: check cache file existence before deletion (<a
href="https://redirect.github.com/eslint/eslint/issues/19648">#19648</a>)</li>
<li><a
href="c25e858d2d"><code>c25e858</code></a>
docs: Update README</li>
<li><a
href="09586905be"><code>0958690</code></a>
chore: disambiguate internal types <code>LanguageOptions</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19669">#19669</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v8.57.0...v9.26.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=8.57.0&new-version=9.26.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-29 16:04:51 +00:00
dependabot[bot]
c5c09b4058 Bump next from 16.1.1 to 16.1.5 in /docs (#1536)
Bumps [next](https://github.com/vercel/next.js) from 16.1.1 to 16.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases">next's
releases</a>.</em></p>
<blockquote>
<h2>v16.1.5</h2>
<p>Please refer the following changelogs for more information about this
security release:</p>
<p><a
href="https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472">https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472</a>
<a
href="https://vercel.com/changelog/summary-of-cve-2026-23864">https://vercel.com/changelog/summary-of-cve-2026-23864</a></p>
<h2>v16.1.4</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Only filter next config if experimental flag is enabled (<a
href="https://redirect.github.com/vercel/next.js/issues/88733">#88733</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/mischnic"><code>@​mischnic</code></a> for
helping!</p>
<h2>v16.1.3</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Fix linked list bug in LRU deleteFromLru (<a
href="https://redirect.github.com/vercel/next.js/issues/88652">#88652</a>)</li>
<li>Fix relative same host redirects in node middleware (<a
href="https://redirect.github.com/vercel/next.js/issues/88253">#88253</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/acdlite"><code>@​acdlite</code></a> and <a
href="https://github.com/ijjk"><code>@​ijjk</code></a> for helping!</p>
<h2>v16.1.2</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Turbopack: Update to swc_core v50.2.3 (<a
href="https://redirect.github.com/vercel/next.js/issues/87841">#87841</a>)
(<a
href="https://redirect.github.com/vercel/next.js/issues/88296">#88296</a>)
<ul>
<li>Fixes a crash when processing mdx files with multibyte characters.
(<a
href="https://redirect.github.com/vercel/next.js/issues/87713">#87713</a>)</li>
</ul>
</li>
<li>Turbopack: <a
href="https://microsoft.github.io/mimalloc/">mimalloc</a> upgrade and
enabling it on musl (<a
href="https://redirect.github.com/vercel/next.js/issues/88503">#88503</a>)
(<a
href="https://redirect.github.com/vercel/next.js/issues/87815">#87815</a>)
(<a
href="https://redirect.github.com/vercel/next.js/issues/88426">#88426</a>)
<ul>
<li>Fixes <a
href="https://redirect.github.com/vercel/next.js/pull/88426">a
significant performance issue</a> on musl-based Linux distributions
(e.g. Alpine in Docker) related to musl's allocator.</li>
<li>Other platforms have always used mimalloc, but we previously did not
use mimalloc on musl because of compilation issues that have since been
resolved.</li>
</ul>
</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/mischnic"><code>@​mischnic</code></a> for
helping!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="acba4a6b9f"><code>acba4a6</code></a>
v16.1.5</li>
<li><a
href="e1d1fc6525"><code>e1d1fc6</code></a>
Add maximum size limit for postponed body parsing (<a
href="https://redirect.github.com/vercel/next.js/issues/88175">#88175</a>)</li>
<li><a
href="500ec83743"><code>500ec83</code></a>
fetch(next/image): reduce maximumResponseBody from 300MB to 50MB (<a
href="https://redirect.github.com/vercel/next.js/issues/88588">#88588</a>)</li>
<li><a
href="1caaca3cdb"><code>1caaca3</code></a>
feat(next/image)!: add <code>images.maximumResponseBody</code> config
(<a
href="https://redirect.github.com/vercel/next.js/issues/88183">#88183</a>)</li>
<li><a
href="522ed840be"><code>522ed84</code></a>
Sync DoS mitigations for React Flight</li>
<li><a
href="8cad197c76"><code>8cad197</code></a>
[backport][cna] Ensure created app is not considered the workspace root
in pn...</li>
<li><a
href="27186615d7"><code>2718661</code></a>
Backport/docs fixes (<a
href="https://redirect.github.com/vercel/next.js/issues/89031">#89031</a>)</li>
<li><a
href="53336250b3"><code>5333625</code></a>
Backport/docs fixes 16.1.5 (<a
href="https://redirect.github.com/vercel/next.js/issues/88916">#88916</a>)</li>
<li><a
href="60de6c2114"><code>60de6c2</code></a>
v16.1.4</li>
<li><a
href="5f75d22b80"><code>5f75d22</code></a>
backport: Only filter next config if experimental flag is enabled (<a
href="https://redirect.github.com/vercel/next.js/issues/88733">#88733</a>)
(#...</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v16.1.1...v16.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=next&package-manager=npm_and_yarn&previous-version=16.1.1&new-version=16.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 22:21:50 +00:00
dependabot[bot]
6b83168b22 Bump gunicorn from 23.0.0 to 24.1.1 in /backend (#1535)
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 23.0.0 to
24.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/benoitc/gunicorn/releases">gunicorn's
releases</a>.</em></p>
<blockquote>
<h2>24.1.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li>Fix <code>forwarded_allow_ips</code> and
<code>proxy_allow_ips</code> to remain as strings for backward
compatibility with external tools like uvicorn. Network validation now
uses strict
mode to detect invalid CIDR notation (e.g., <code>192.168.1.1/24</code>
where host bits are set)
(<a
href="https://redirect.github.com/benoitc/gunicorn/issues/3458">#3458</a>,
[PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3459">#3459</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3459">benoitc/gunicorn#3459</a>))</li>
</ul>
<hr />
<p><strong>Full Changelog</strong>: <a
href="https://github.com/benoitc/gunicorn/compare/24.1.0...24.1.1">https://github.com/benoitc/gunicorn/compare/24.1.0...24.1.1</a></p>
<h2>Gunicorn 24.1.0</h2>
<h2>New Features</h2>
<ul>
<li>
<p><strong>Official Docker Image</strong>: Gunicorn now publishes
official Docker images to GitHub Container Registry ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3454">#3454</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3454">benoitc/gunicorn#3454</a>))</p>
<ul>
<li>Available at <code>ghcr.io/benoitc/gunicorn</code></li>
<li>Based on Python 3.12 slim image</li>
<li>Uses recommended worker formula (2 × CPU + 1)</li>
<li>Configurable via environment variables</li>
</ul>
</li>
<li>
<p><strong>PROXY Protocol v2 Support</strong>: Extended PROXY protocol
implementation to support the binary v2 format in addition to the
existing text-based v1 format ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3451">#3451</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3451">benoitc/gunicorn#3451</a>))</p>
<ul>
<li>New <code>--proxy-protocol</code> modes: <code>off</code>,
<code>v1</code>, <code>v2</code>, <code>auto</code></li>
<li><code>auto</code> mode (default when enabled) detects v1 or v2
automatically</li>
<li>v2 binary format is more efficient and supports additional
metadata</li>
<li>Works with HAProxy, AWS NLB/ALB, and other PROXY protocol v2
sources</li>
</ul>
</li>
<li>
<p><strong>CIDR Network Support</strong>:
<code>--forwarded-allow-ips</code> and <code>--proxy-allow-from</code>
now accept CIDR notation (e.g., <code>192.168.0.0/16</code>) for
specifying trusted networks ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3449">#3449</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3449">benoitc/gunicorn#3449</a>))</p>
</li>
<li>
<p><strong>Socket Backlog Metric</strong>: New
<code>gunicorn.socket.backlog</code> gauge metric reports the current
socket backlog size on Linux systems ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3450">#3450</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3450">benoitc/gunicorn#3450</a>))</p>
</li>
<li>
<p><strong>InotifyReloader Enhancement</strong>: The inotify-based
reloader now watches newly imported modules, not just those loaded at
startup ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3447">#3447</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3447">benoitc/gunicorn#3447</a>))</p>
</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Fix signal handling regression where SIGCLD alias caused
&quot;Unhandled signal: cld&quot; errors on Linux when workers fail
during boot (<a
href="https://github.com/benoitc/gunicorn/discussions/3453">#3453</a>)</li>
<li>Fix socket blocking mode on keepalive connections preventing SSL
handshake failures with async workers ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3452">#3452</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3452">benoitc/gunicorn#3452</a>))</li>
<li>Use smaller buffer size in <code>finish_body()</code> for faster
timeout detection on slow or abandoned connections ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3453">#3453</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3453">benoitc/gunicorn#3453</a>))</li>
<li>Handle <code>SSLWantReadError</code> in <code>finish_body()</code>
to prevent worker hangs during SSL renegotiation ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3448">#3448</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3448">benoitc/gunicorn#3448</a>))</li>
<li>Log SIGTERM as info level instead of warning to reduce noise in
orchestrated environments ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3446">#3446</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3446">benoitc/gunicorn#3446</a>))</li>
<li>Print exception details to stderr when worker fails to boot ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3443">#3443</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3443">benoitc/gunicorn#3443</a>))</li>
<li>Fix <code>unreader.unread()</code> to prepend data to buffer instead
of appending ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3442">#3442</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3442">benoitc/gunicorn#3442</a>))</li>
<li>Prevent <code>RecursionError</code> when pickling Config objects
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3441">#3441</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3441">benoitc/gunicorn#3441</a>))</li>
<li>Use proper exception chaining with <code>raise from</code> in
glogging.py ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3440">#3440</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3440">benoitc/gunicorn#3440</a>))</li>
</ul>
<h2>Installation</h2>
<pre lang="bash"><code>pip install gunicorn==24.1.0
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="375e79e95b"><code>375e79e</code></a>
release: bump version to 24.1.1</li>
<li><a
href="ad0c12de98"><code>ad0c12d</code></a>
docs: add sponsors section to README</li>
<li><a
href="70200eef46"><code>70200ee</code></a>
chore: add GitHub Sponsors funding configuration</li>
<li><a
href="6841804116"><code>6841804</code></a>
docs: remove incorrect PR reference from Docker changelog entry</li>
<li><a
href="abce0ca9cb"><code>abce0ca</code></a>
docs: add 24.1.1 changelog entry for forwarded_allow_ips fix</li>
<li><a
href="e9a3f30a0f"><code>e9a3f30</code></a>
fix: keep forwarded_allow_ips as strings for backward compatibility (<a
href="https://redirect.github.com/benoitc/gunicorn/issues/3459">#3459</a>)</li>
<li><a
href="d73ff4b1d8"><code>d73ff4b</code></a>
docs: update main changelog with 24.1.0</li>
<li><a
href="53f2c31012"><code>53f2c31</code></a>
ci: allow docs deploy on workflow_dispatch</li>
<li><a
href="eab5f0b1a5"><code>eab5f0b</code></a>
ci: trigger Docker publish on tags with or without v prefix</li>
<li><a
href="a20d3fb220"><code>a20d3fb</code></a>
docs: add Docker image to 24.1.0 changelog</li>
<li>Additional commits viewable in <a
href="https://github.com/benoitc/gunicorn/compare/23.0.0...24.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gunicorn&package-manager=uv&previous-version=23.0.0&new-version=24.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:11:27 +00:00
dependabot[bot]
fe67b0c120 Bump pyrefly from 0.48.0 to 0.50.0 in /backend (#1534)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.48.0 to
0.50.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/pyrefly/releases">pyrefly's
releases</a>.</em></p>
<blockquote>
<h2>Pyrefly v0.49.0</h2>
<p><strong>Status : BETA</strong><br />
<em>Release date: 20 January 2026</em></p>
<p>Pyrefly v0.49.0 bundles <strong>231 commits</strong> from <strong>25
contributors</strong>.</p>
<hr />
<h1> New &amp; Improved</h1>
<table>
<thead>
<tr>
<th align="left">Area</th>
<th align="left">What’s new</th>
</tr>
</thead>
<tbody>
<tr>
<td align="left"><strong>Type Inference</strong></td>
<td align="left">- Partial type inference now possible in loops <!-- raw
HTML omitted --><!-- raw HTML omitted -->- Variance inference for
self-referential generic types (PEP 695) <!-- raw HTML omitted --><!--
raw HTML omitted -->- <code>typing.Mapping</code> now recognised as a
type alias</td>
</tr>
<tr>
<td align="left"><strong>Language Server</strong></td>
<td align="left">- Improved refactoring capabilities for moving module
members and lifting local functions/methods to top-level module scope,
with automatic import/shim creation. <!-- raw HTML omitted --><!-- raw
HTML omitted -->- Hover support for <code>in</code> keyword when used in
iteration contexts (for-loops and comprehensions), showing the type of
the iterable being iterated over <!-- raw HTML omitted --><!-- raw HTML
omitted -->- “Go to symbol” now correctly includes methods inside a
class <!-- raw HTML omitted --><!-- raw HTML omitted -->- Enabled
clickable inlay hints for built-in types like tuple, dict, str, and
special forms (TypeVar, ParamSpec, etc.), allowing users to quickly
navigate to type definitions in the IDE</td>
</tr>
<tr>
<td align="left"><strong>Pydantic Support</strong></td>
<td align="left">Added detection and support for
<code>pydantic.dataclasses.dataclass</code> decorator, including strict
and lax mode support for pydantic dataclasses</td>
</tr>
<tr>
<td align="left"><strong>Error Reporting</strong></td>
<td align="left">Improved error messages for <code>yield</code>,
<code>yield from</code>, augmented assignment, missing imports, and
missing stubs for better user clarity.</td>
</tr>
</tbody>
</table>
<hr />
<h1>🐛 bug fixes</h1>
<p>We closed <strong>38 bug issues</strong> this week 👏</p>
<ul>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/2145">#2145</a>
- Fixed variance inference incorrectly using
<code>inferred_variance</code> instead of
<code>specified_variance</code> for stdlib generic classes like
<code>Mapping[str, T]</code>.</li>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/1806">#1806</a>
- Fixed improper type narrowing and captured variable typing for
sequence patterns (e.g., <code>[*values]</code>) in match/case
statements.</li>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/1697">#1697</a>
- Fixed a bug where Pyrefly got confused if a class had the same name as
an overloaded method.</li>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/1494">#1494</a>
- Ensures correct overload resolution when promoting nested tuple
element literals for unannotated method-initialized attributes.</li>
<li>And more: <a
href="https://redirect.github.com/facebook/pyrefly/issues/1481">#1481</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1472">#1472</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1466">#1466</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1385">#1385</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1341">#1341</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1310">#1310</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1277">#1277</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1234">#1234</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1219">#1219</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1208">#1208</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1013">#1013</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1002">#1002</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/935">#935</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/910">#910</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/899">#899</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/773">#773</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/768">#768</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/755">#755</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/737">#737</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/708">#708</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/421">#421</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/295">#295</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/266">#266</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/265">#265</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1503">#1503</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1616">#1616</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1626">#1626</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1803">#1803</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2051">#2051</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2072">#2072</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2077">#2077</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2107">#2107</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2111">#2111</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2161">#2161</a></li>
</ul>
<p>Thank-you to all our contributors who found these bugs and reported
them! Did you know this is one of the most helpful contributions you can
make to an open-source project? If you find any bugs in Pyrefly we want
to know about them! Please open a bug report issue <a
href="https://github.com/facebook/pyrefly/issues">here</a></p>
<hr />
<h1>📦 Upgrade</h1>
<pre><code>pip install --upgrade pyrefly==0.49.0
</code></pre>
<h2>How to safely upgrade your codebase</h2>
<p>Upgrading the version of Pyrefly you're using or a third-party
library you depend on can reveal new type errors in your code. Fixing
them all at once is often unrealistic. We've written scripts to help you
temporarily silence them. After upgrading, follow these steps:</p>
<ol>
<li><code>pyrefly check --suppress-errors</code></li>
<li>run your code formatter of choice</li>
<li><code>pyrefly check --remove-unused-ignores</code></li>
<li>Repeat until you achieve a clean formatting run and a clean type
check.</li>
</ol>
<p>This will add <code># pyrefly: ignore</code> comments to your code,
enabling you to silence errors and return to fix them later. This can
make the process of upgrading a large codebase much more manageable.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4c95fadbff"><code>4c95fad</code></a>
Allow suppress command to take in json values (4/n)</li>
<li><a
href="ddc207782f"><code>ddc2077</code></a>
Disable test failing on Windows</li>
<li><a
href="5d09330250"><code>5d09330</code></a>
Fix completion item kinds for module attributes (<a
href="https://redirect.github.com/facebook/pyrefly/issues/1936">#1936</a>)</li>
<li><a
href="c57c5e5659"><code>c57c5e5</code></a>
Fix go-to-definition for intermediate submodule components</li>
<li><a
href="c5b01d308b"><code>c5b01d3</code></a>
Add go-to-def test for deep submodule chain with explicit
re-exports</li>
<li><a
href="46a55b2462"><code>46a55b2</code></a>
make --remove-unused-ignores a no-op for files with no unused ignores
(<a
href="https://redirect.github.com/facebook/pyrefly/issues/2217">#2217</a>)</li>
<li><a
href="bdac377cc3"><code>bdac377</code></a>
fix relative pyrefly.org link in documentation (<a
href="https://redirect.github.com/facebook/pyrefly/issues/2186">#2186</a>)</li>
<li><a
href="ab05550d2d"><code>ab05550</code></a>
Update pyrefly version]</li>
<li><a
href="06583faa51"><code>06583fa</code></a>
Simplify tarjan NodeVec push</li>
<li><a
href="063154c9fa"><code>063154c</code></a>
Refactor IsInstancePattern to use NarrowSource on IsInstance</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.48.0...0.50.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.48.0&new-version=0.50.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:11:14 +00:00
dependabot[bot]
92d8f81d96 Bump sentry-sdk from 2.49.0 to 2.50.0 in /backend (#1533)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.49.0 to 2.50.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.50.0</h2>
<h3>New Features </h3>
<h4>Ai</h4>
<ul>
<li>feat(ai): add cache writes for gen_ai by <a
href="https://github.com/shellmayr"><code>@​shellmayr</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5319">#5319</a></li>
<li>feat(ai): add parse_data_uri function to parse a data URI by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5311">#5311</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>
<p>feat(asyncio): Add on-demand way to enable AsyncioIntegration by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5288">#5288</a></p>
<p>You can now enable the <code>AsyncioIntegration</code> on demand,
after calling <code>sentry_sdk.init()</code>. This is useful in
scenarios where you don't have
the event loop running early on, or when you need to instrument multiple
event loops.</p>
</li>
</ul>
<pre lang="python"><code>import sentry_sdk
from sentry_sdk.integrations.asyncio import enable_asyncio_integration
<h1>Initializing the SDK as early as possible, when there is no event
loop yet</h1>
<p>sentry_sdk.init(<br />
...<br />
# No AsyncioIntegration in explicitly provided
<code>integrations</code><br />
)</p>
<p>async def main():<br />
enable_asyncio_integration()  # instruments the current event loop<br />
# ...your code...<br />
</code></pre></p>
<ul>
<li>feat(openai-agents): Inject propagation headers for
<code>HostedMCPTool</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5297">#5297</a></li>
<li>feat(stdlib): Handle proxy tunnels in httlib integration by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5303">#5303</a></li>
<li>feat: Support array types for logs and metrics attributes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5314">#5314</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Integrations</h4>
<ul>
<li>fix(integrations): google genai report image inputs by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5337">#5337</a></li>
<li>fix(integrations): google-genai: reworked
<code>gen_ai.request.messages</code> extraction from parameters by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5275">#5275</a></li>
<li>fix(integrations): pydantic-ai: properly format binary input message
parts to be conformant with the <code>gen_ai.request.messages</code>
structure by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5251">#5251</a></li>
<li>fix(integrations): Anthropic: add content transformation for images
and documents by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5276">#5276</a></li>
<li>fix(integrations): langchain add multimodal content transformation
functions for images, audio, and files by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5278">#5278</a></li>
</ul>
<h4>Litellm</h4>
<ul>
<li>fix(litellm): fix <code>gen_ai.request.messages</code> to be as
expected by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5255">#5255</a></li>
<li>fix(litellm): Guard against module shadowing by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5249">#5249</a></li>
</ul>
<h4>Other</h4>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.50.0</h2>
<h3>New Features </h3>
<h4>Ai</h4>
<ul>
<li>feat(ai): add cache writes for gen_ai by <a
href="https://github.com/shellmayr"><code>@​shellmayr</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5319">#5319</a></li>
<li>feat(ai): add parse_data_uri function to parse a data URI by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5311">#5311</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>
<p>feat(asyncio): Add on-demand way to enable AsyncioIntegration by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5288">#5288</a></p>
<p>You can now enable the <code>AsyncioIntegration</code> on demand,
after calling <code>sentry_sdk.init()</code>. This is useful in
scenarios where you don't have
the event loop running early on, or when you need to instrument multiple
event loops.</p>
</li>
</ul>
<pre lang="python"><code>import sentry_sdk
from sentry_sdk.integrations.asyncio import enable_asyncio_integration
<h1>Initializing the SDK as early as possible, when there is no event
loop yet</h1>
<p>sentry_sdk.init(<br />
...<br />
# No AsyncioIntegration in explicitly provided
<code>integrations</code><br />
)</p>
<p>async def main():<br />
enable_asyncio_integration()  # instruments the current event loop<br />
# ...your code...<br />
</code></pre></p>
<ul>
<li>feat(openai-agents): Inject propagation headers for
<code>HostedMCPTool</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5297">#5297</a></li>
<li>feat(stdlib): Handle proxy tunnels in httlib integration by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5303">#5303</a></li>
<li>feat: Support array types for logs and metrics attributes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5314">#5314</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Integrations</h4>
<ul>
<li>fix(integrations): google genai report image inputs by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5337">#5337</a></li>
<li>fix(integrations): google-genai: reworked
<code>gen_ai.request.messages</code> extraction from parameters by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5275">#5275</a></li>
<li>fix(integrations): pydantic-ai: properly format binary input message
parts to be conformant with the <code>gen_ai.request.messages</code>
structure by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5251">#5251</a></li>
<li>fix(integrations): Anthropic: add content transformation for images
and documents by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5276">#5276</a></li>
<li>fix(integrations): langchain add multimodal content transformation
functions for images, audio, and files by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5278">#5278</a></li>
</ul>
<h4>Litellm</h4>
<ul>
<li>fix(litellm): fix <code>gen_ai.request.messages</code> to be as
expected by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5255">#5255</a></li>
<li>fix(litellm): Guard against module shadowing by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5249">#5249</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="27b0bfd9b5"><code>27b0bfd</code></a>
Update CHANGELOG.md</li>
<li><a
href="73857b448f"><code>73857b4</code></a>
release: 2.50.0</li>
<li><a
href="d38b3782e0"><code>d38b378</code></a>
test(fastmcp): Narrow <code>AttributeError</code> try-except (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5339">#5339</a>)</li>
<li><a
href="e73e600ea1"><code>e73e600</code></a>
test(fastmcp): Stop accessing non-existent attribute (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5338">#5338</a>)</li>
<li><a
href="e0d42b9323"><code>e0d42b9</code></a>
chore(repo): Add Claude Code settings with basic permissions (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5342">#5342</a>)</li>
<li><a
href="2585678b19"><code>2585678</code></a>
feat(stdlib): Handle proxy tunnels in httlib integration (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5303">#5303</a>)</li>
<li><a
href="e1710092dc"><code>e171009</code></a>
fix(integrations): google genai report image inputs (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5337">#5337</a>)</li>
<li><a
href="749d8e5dba"><code>749d8e5</code></a>
fix(integrations): google-genai: reworked
<code>gen_ai.request.messages</code> extractio...</li>
<li><a
href="ab5cddedd6"><code>ab5cdde</code></a>
feat(ai): add cache writes for gen_ai (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5319">#5319</a>)</li>
<li><a
href="1970486d00"><code>1970486</code></a>
build(deps): bump getsentry/craft from 2.18.3 to 2.19.0 (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5331">#5331</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.49.0...2.50.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.49.0&new-version=2.50.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:10:59 +00:00
dependabot[bot]
4f3fbd1e67 Bump i18next from 25.7.1 to 25.8.0 in /frontend (#1532)
Bumps [i18next](https://github.com/i18next/i18next) from 25.7.1 to
25.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v25.8.0</h2>
<ul>
<li>fix: TFunctionReturn fallback <a
href="https://redirect.github.com/i18next/i18next/issues/2360">2360</a></li>
</ul>
<h2>v25.7.4</h2>
<ul>
<li>fix: Interpolation breaks when cloning an instance <a
href="https://redirect.github.com/i18next/react-i18next/issues/2376">2376</a></li>
</ul>
<h2>v25.7.3</h2>
<ul>
<li>type definitions for new transDefaultProps option in react-i18next
[react-i18next: <a
href="https://redirect.github.com/i18next/i18next/issues/1895">#1895</a>](<a
href="https://redirect.github.com/i18next/react-i18next/issues/1895">i18next/react-i18next#1895</a>)</li>
</ul>
<h2>v25.7.2</h2>
<ul>
<li>fix: Invalid overwrite of default value for
overloadTranslationOptionHandler <a
href="https://redirect.github.com/i18next/i18next/issues/2374">2374</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>25.8.0</h2>
<ul>
<li>fix: TFunctionReturn fallback <a
href="https://redirect.github.com/i18next/i18next/issues/2360">2360</a></li>
</ul>
<h2>25.7.4</h2>
<ul>
<li>fix: Interpolation breaks when cloning an instance <a
href="https://redirect.github.com/i18next/i18next/issues/2376">2376</a></li>
</ul>
<h2>25.7.3</h2>
<ul>
<li>type definitions for new transDefaultProps option in react-i18next
[react-i18next: <a
href="https://redirect.github.com/i18next/i18next/issues/1895">#1895</a>](<a
href="https://redirect.github.com/i18next/react-i18next/issues/1895">i18next/react-i18next#1895</a>)</li>
</ul>
<h2>25.7.2</h2>
<ul>
<li>fix: Invalid overwrite of default value for
overloadTranslationOptionHandler <a
href="https://redirect.github.com/i18next/i18next/issues/2374">2374</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="89b6579abc"><code>89b6579</code></a>
25.8.0</li>
<li><a
href="f39cac20dc"><code>f39cac2</code></a>
improve fallbackNS types handling</li>
<li><a
href="6c06b0055c"><code>6c06b00</code></a>
selector example</li>
<li><a
href="8cf616830c"><code>8cf6168</code></a>
TFunctionReturn fallback (<a
href="https://redirect.github.com/i18next/i18next/issues/2361">#2361</a>)</li>
<li><a
href="485b4ec818"><code>485b4ec</code></a>
help msg</li>
<li><a
href="d496e5ad6f"><code>d496e5a</code></a>
jsr update</li>
<li><a
href="04392be4ec"><code>04392be</code></a>
25.7.4</li>
<li><a
href="92c8f482ab"><code>92c8f48</code></a>
fix: Interpolation breaks when cloning an instance <a
href="https://redirect.github.com/i18next/i18next/issues/2376">#2376</a></li>
<li><a
href="5f44eb7018"><code>5f44eb7</code></a>
fix img url</li>
<li><a
href="1e5f568674"><code>1e5f568</code></a>
remove old addRule function</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v25.7.1...v25.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=25.7.1&new-version=25.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:09:20 +00:00
dependabot[bot]
17f6211544 Bump react-router from 7.12.0 to 7.13.0 in /frontend (#1531)
Bumps
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router)
from 7.12.0 to 7.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases">react-router's
releases</a>.</em></p>
<blockquote>
<h2>v7.13.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md">react-router's
changelog</a>.</em></p>
<blockquote>
<h2>7.13.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>Add <code>crossOrigin</code> prop to <code>Links</code> component
(<a
href="https://redirect.github.com/remix-run/react-router/pull/14687">#14687</a>)</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>Fix double slash normalization for useNavigate colon urls (<a
href="https://redirect.github.com/remix-run/react-router/pull/14718">#14718</a>)</li>
<li>Update failed origin checks to return a 400 status instead of a 500
(<a
href="https://redirect.github.com/remix-run/react-router/pull/14737">#14737</a>)</li>
<li>Bugfix <a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14666">#14666</a>:
Inline criticalCss is missing nonce (<a
href="https://redirect.github.com/remix-run/react-router/pull/14691">#14691</a>)</li>
<li>Loosen <code>allowedActionOrigins</code> glob check so
<code>**</code> matches all domains (<a
href="https://redirect.github.com/remix-run/react-router/pull/14722">#14722</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5557ba3f84"><code>5557ba3</code></a>
chore: Update version for release (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14749">#14749</a>)</li>
<li><a
href="62c6e0effd"><code>62c6e0e</code></a>
chore: Update version for release (pre) (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14738">#14738</a>)</li>
<li><a
href="3126264a69"><code>3126264</code></a>
Return 400 response on failed origin checks (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14737">#14737</a>)</li>
<li><a
href="3a5b5ad0e5"><code>3a5b5ad</code></a>
Fix double slash normalization for <code>useNavigate</code> paths with
colons (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14718">#14718</a>)</li>
<li><a
href="f29c6c9563"><code>f29c6c9</code></a>
Add docs and loosen origins wildcard check (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14722">#14722</a>)</li>
<li><a
href="0bb972b747"><code>0bb972b</code></a>
fix(react-router/dom/ssr): add <code>nonce</code> to inline critical css
(<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14691">#14691</a>)</li>
<li><a
href="dd08f8d3b1"><code>dd08f8d</code></a>
fix(react-router): add crossOrigin prop to Links component (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14687">#14687</a>)</li>
<li><a
href="c38d76ce4e"><code>c38d76c</code></a>
chore: format</li>
<li>See full diff in <a
href="https://github.com/remix-run/react-router/commits/react-router@7.13.0/packages/react-router">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-router&package-manager=npm_and_yarn&previous-version=7.12.0&new-version=7.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:09:03 +00:00
dependabot[bot]
7d6949be88 Bump lucide-react from 0.562.0 to 0.563.0 in /docs (#1530)
Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 0.562.0 to 0.563.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.563.0</h2>
<h2>What's Changed</h2>
<p><code>aria-hidden</code> is by default added to icons components in
all packages. This was already added to <code>lucide-react</code>
before.
Making icons accessible, you can add an <code>aria-label</code> or a
<code>title</code>. See docs about <a
href="https://lucide.dev/guide/advanced/accessibility">accessibility</a>.</p>
<h2>All changes</h2>
<ul>
<li>chore(dev): Enable ligatures in font build configuration by <a
href="https://github.com/dcxo"><code>@​dcxo</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3876">lucide-icons/lucide#3876</a></li>
<li>chore(repo): add Android to brand stopwords by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3895">lucide-icons/lucide#3895</a></li>
<li>fix(site): add missing titles and a title template by <a
href="https://github.com/taimar"><code>@​taimar</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3920">lucide-icons/lucide#3920</a></li>
<li>fix(site): unify and improve the styling of input fields by <a
href="https://github.com/taimar"><code>@​taimar</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3919">lucide-icons/lucide#3919</a></li>
<li>fix(icons): changed <code>star-off</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3952">lucide-icons/lucide#3952</a></li>
<li>fix(icons): changed <code>tickets-plane</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3928">lucide-icons/lucide#3928</a></li>
<li>fix(icons): changed <code>monitor-off</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3962">lucide-icons/lucide#3962</a></li>
<li>fix(icons): changed <code>lasso</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3961">lucide-icons/lucide#3961</a></li>
<li>fix(icons): changed <code>cloud-off</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3942">lucide-icons/lucide#3942</a></li>
<li>docs(site): added lucide-web-components third-party package by <a
href="https://github.com/midesweb"><code>@​midesweb</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3948">lucide-icons/lucide#3948</a></li>
<li>chore(deps-dev): bump preact from 10.27.2 to 10.27.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3955">lucide-icons/lucide#3955</a></li>
<li>feat(icon): add globe-x icon with metadata by <a
href="https://github.com/Muhammad-Aqib-Bashir"><code>@​Muhammad-Aqib-Bashir</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3827">lucide-icons/lucide#3827</a></li>
<li>fix(icons): changed <code>waypoints</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3990">lucide-icons/lucide#3990</a></li>
<li>fix(icons): changed <code>bookmark</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2906">lucide-icons/lucide#2906</a></li>
<li>fix(icons): changed <code>message-square-dashed</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3959">lucide-icons/lucide#3959</a></li>
<li>fix(icons): changed <code>cloudy</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3966">lucide-icons/lucide#3966</a></li>
<li>fix(github-actions): resolved spelling mistake in gh issue close
command by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4000">lucide-icons/lucide#4000</a></li>
<li>Update LICENSE by <a
href="https://github.com/alxgraphy"><code>@​alxgraphy</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4009">lucide-icons/lucide#4009</a></li>
<li>feat(packages): Added aria-hidden fallback for decorative icons to
all packages by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3604">lucide-icons/lucide#3604</a></li>
<li>chore(deps): bump lodash from 4.17.21 to 4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4020">lucide-icons/lucide#4020</a></li>
<li>chore(deps): bump lodash-es from 4.17.21 to 4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4019">lucide-icons/lucide#4019</a></li>
<li>Suggest anchoring to a specific lucide version when using a cdn by
<a href="https://github.com/drago1520"><code>@​drago1520</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/3727">lucide-icons/lucide#3727</a></li>
<li>feat(docs): upgraded backers block by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4014">lucide-icons/lucide#4014</a></li>
<li>fix(site): hide native search input clear &quot;X&quot; icon by <a
href="https://github.com/epifaniofrancisco"><code>@​epifaniofrancisco</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3933">lucide-icons/lucide#3933</a></li>
<li>feat(icons): added <code>printer-x</code> icon by <a
href="https://github.com/lt25106"><code>@​lt25106</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3941">lucide-icons/lucide#3941</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/dcxo"><code>@​dcxo</code></a> made their
first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3876">lucide-icons/lucide#3876</a></li>
<li><a href="https://github.com/midesweb"><code>@​midesweb</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3948">lucide-icons/lucide#3948</a></li>
<li><a href="https://github.com/alxgraphy"><code>@​alxgraphy</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4009">lucide-icons/lucide#4009</a></li>
<li><a href="https://github.com/drago1520"><code>@​drago1520</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3727">lucide-icons/lucide#3727</a></li>
<li><a href="https://github.com/lt25106"><code>@​lt25106</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3941">lucide-icons/lucide#3941</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.562.0...0.563.0">https://github.com/lucide-icons/lucide/compare/0.562.0...0.563.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="67c0485457"><code>67c0485</code></a>
feat(scripts): added helper script to automatically update
OpenCollective bac...</li>
<li><a
href="b6ed43d48c"><code>b6ed43d</code></a>
feat(packages): Added aria-hidden fallback for decorative icons to all
packag...</li>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/0.563.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lucide-react&package-manager=npm_and_yarn&previous-version=0.562.0&new-version=0.563.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:08:01 +00:00
dependabot[bot]
1cfbc6391a Bump python-multipart from 0.0.20 to 0.0.22 in /backend (#1529)
Bumps [python-multipart](https://github.com/Kludex/python-multipart)
from 0.0.20 to 0.0.22.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/python-multipart/releases">python-multipart's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.0.22</h2>
<h2>What's Changed</h2>
<ul>
<li>Drop directory path from filename in <code>File</code> <a
href="9433f4bbc9">9433f4b</a>.</li>
</ul>
<hr />
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/python-multipart/compare/0.0.21...0.0.22">https://github.com/Kludex/python-multipart/compare/0.0.21...0.0.22</a></p>
<h2>Version 0.0.21</h2>
<h2>What's Changed</h2>
<ul>
<li>Add support for Python 3.14 and drop EOL 3.8 and 3.9 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/Kludex/python-multipart/pull/216">Kludex/python-multipart#216</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/waketzheng"><code>@​waketzheng</code></a> made
their first contribution in <a
href="https://redirect.github.com/Kludex/python-multipart/pull/203">Kludex/python-multipart#203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/python-multipart/compare/0.0.20...0.0.21">https://github.com/Kludex/python-multipart/compare/0.0.20...0.0.21</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md">python-multipart's
changelog</a>.</em></p>
<blockquote>
<h2>0.0.22 (2026-01-25)</h2>
<ul>
<li>Drop directory path from filename in <code>File</code> <a
href="9433f4bbc9">9433f4b</a>.</li>
</ul>
<h2>0.0.21 (2025-12-17)</h2>
<ul>
<li>Add support for Python 3.14 and drop EOL 3.8 and 3.9 <a
href="https://redirect.github.com/Kludex/python-multipart/pull/216">#216</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bea7bbb290"><code>bea7bbb</code></a>
Version 0.0.22 (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/222">#222</a>)</li>
<li><a
href="0fb59a9df0"><code>0fb59a9</code></a>
chore: add return type on test (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/221">#221</a>)</li>
<li><a
href="9433f4bbc9"><code>9433f4b</code></a>
Merge commit from fork</li>
<li><a
href="d5c91ecb0a"><code>d5c91ec</code></a>
Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/219">#219</a>)</li>
<li><a
href="5a90631b48"><code>5a90631</code></a>
bump uv (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/218">#218</a>)</li>
<li><a
href="1f72955602"><code>1f72955</code></a>
Version 0.0.21 (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/217">#217</a>)</li>
<li><a
href="47ecfed353"><code>47ecfed</code></a>
Add support for Python 3.14 and drop EOL 3.8 and 3.9 (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/216">#216</a>)</li>
<li><a
href="f18b70941b"><code>f18b709</code></a>
Bump the github-actions group across 1 directory with 4 updates (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/214">#214</a>)</li>
<li><a
href="b388e9a7a8"><code>b388e9a</code></a>
chore: use depedency-groups in <code>pyproject.toml</code> (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/212">#212</a>)</li>
<li><a
href="6113e75097"><code>6113e75</code></a>
Bump the github-actions group across 1 directory with 3 updates (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/210">#210</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Kludex/python-multipart/compare/0.0.20...0.0.22">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=python-multipart&package-manager=uv&previous-version=0.0.20&new-version=0.0.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 23:58:06 +00:00
github-actions[bot]
9308d0ccd7 Update contributors in readme (#1526)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-23 19:37:56 +01:00
dependabot[bot]
551b59bccf Bump prettier from 3.7.4 to 3.8.0 in /docs (#1521)
Bumps [prettier](https://github.com/prettier/prettier) from 3.7.4 to
3.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/releases">prettier's
releases</a>.</em></p>
<blockquote>
<h2>3.8.0</h2>
<ul>
<li>Support Angular v21.1</li>
</ul>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release note
&quot;Prettier 3.8: Support for Angular v21.1&quot;</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md">prettier's
changelog</a>.</em></p>
<blockquote>
<h1>3.8.0</h1>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release
Notes</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="812a4d0071"><code>812a4d0</code></a>
Release 3.8.0</li>
<li><a
href="6cc1be31e2"><code>6cc1be3</code></a>
Consistent title</li>
<li><a
href="6d9bef0514"><code>6d9bef0</code></a>
Apply automated changes</li>
<li><a
href="3744a1840e"><code>3744a18</code></a>
Update code example</li>
<li><a
href="9a3edde022"><code>9a3edde</code></a>
Update</li>
<li><a
href="82dc52cdee"><code>82dc52c</code></a>
Regenerate</li>
<li><a
href="dc2de1a6e7"><code>dc2de1a</code></a>
Regenerate</li>
<li><a
href="5aa69662b4"><code>5aa6966</code></a>
Regenerate</li>
<li><a
href="daeeb51af9"><code>daeeb51</code></a>
Another version</li>
<li><a
href="a282985860"><code>a282985</code></a>
Add blog post</li>
<li>Additional commits viewable in <a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=3.7.4&new-version=3.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 14:24:01 +01:00
dependabot[bot]
e8d35e7706 Bump urllib3 from 2.5.0 to 2.6.3 in /backend (#1523)
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/urllib3/urllib3/releases">urllib3's
releases</a>.</em></p>
<blockquote>
<h2>2.6.3</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Changes</h2>
<ul>
<li>Fixed a security issue where decompression-bomb safeguards of the
streaming API were bypassed when HTTP redirects were followed.
(CVE-2026-21441 reported by <a
href="https://github.com/D47A"><code>@​D47A</code></a>, 8.9 High,
GHSA-38jv-5279-wg99)</li>
<li>Started treating <code>Retry-After</code> times greater than 6 hours
as 6 hours by default. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3743">urllib3/urllib3#3743</a>)</li>
<li>Fixed <code>urllib3.connection.VerifiedHTTPSConnection</code> on
Emscripten. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3752">urllib3/urllib3#3752</a>)</li>
</ul>
<h2>2.6.2</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Changes</h2>
<ul>
<li>Fixed <code>HTTPResponse.read_chunked()</code> to properly handle
leftover data in the decoder's buffer when reading compressed chunked
responses. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3734">urllib3/urllib3#3734</a>)</li>
</ul>
<h2>2.6.1</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Changes</h2>
<ul>
<li>Restore previously removed <code>HTTPResponse.getheaders()</code>
and <code>HTTPResponse.getheader()</code> methods. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3731">#3731</a>)</li>
</ul>
<h2>2.6.0</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Security</h2>
<ul>
<li>Fixed a security issue where streaming API could improperly handle
highly compressed HTTP content (&quot;decompression bombs&quot;) leading
to excessive resource consumption even when a small amount of data was
requested. Reading small chunks of compressed data is safer and much
more efficient now. (CVE-2025-66471 reported by <a
href="https://github.com/Cycloctane"><code>@​Cycloctane</code></a>, 8.9
High, GHSA-2xpw-w6gg-jr37)</li>
<li>Fixed a security issue where an attacker could compose an HTTP
response with virtually unlimited links in the
<code>Content-Encoding</code> header, potentially leading to a denial of
service (DoS) attack by exhausting system resources during decoding. The
number of allowed chained encodings is now limited to 5. (CVE-2025-66418
reported by <a
href="https://github.com/illia-v"><code>@​illia-v</code></a>, 8.9 High,
GHSA-gm62-xv2j-4w53)</li>
</ul>
<blockquote>
<p>[!IMPORTANT]</p>
<ul>
<li>If urllib3 is not installed with the optional
<code>urllib3[brotli]</code> extra, but your environment contains a
Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at
least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security
fixes and avoid warnings. Prefer using <code>urllib3[brotli]</code> to
install a compatible Brotli package automatically.</li>
</ul>
</blockquote>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's
changelog</a>.</em></p>
<blockquote>
<h1>2.6.3 (2026-01-07)</h1>
<ul>
<li>Fixed a high-severity security issue where decompression-bomb
safeguards of
the streaming API were bypassed when HTTP redirects were followed.
(<code>GHSA-38jv-5279-wg99
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99&gt;</code>__)</li>
<li>Started treating <code>Retry-After</code> times greater than 6 hours
as 6 hours by
default. (<code>[#3743](https://github.com/urllib3/urllib3/issues/3743)
&lt;https://github.com/urllib3/urllib3/issues/3743&gt;</code>__)</li>
<li>Fixed <code>urllib3.connection.VerifiedHTTPSConnection</code> on
Emscripten.
(<code>[#3752](https://github.com/urllib3/urllib3/issues/3752)
&lt;https://github.com/urllib3/urllib3/issues/3752&gt;</code>__)</li>
</ul>
<h1>2.6.2 (2025-12-11)</h1>
<ul>
<li>Fixed <code>HTTPResponse.read_chunked()</code> to properly handle
leftover data in
the decoder's buffer when reading compressed chunked responses.
(<code>[#3734](https://github.com/urllib3/urllib3/issues/3734)
&lt;https://github.com/urllib3/urllib3/issues/3734&gt;</code>__)</li>
</ul>
<h1>2.6.1 (2025-12-08)</h1>
<ul>
<li>Restore previously removed <code>HTTPResponse.getheaders()</code>
and
<code>HTTPResponse.getheader()</code> methods.
(<code>[#3731](https://github.com/urllib3/urllib3/issues/3731)
&lt;https://github.com/urllib3/urllib3/issues/3731&gt;</code>__)</li>
</ul>
<h1>2.6.0 (2025-12-05)</h1>
<h2>Security</h2>
<ul>
<li>Fixed a security issue where streaming API could improperly handle
highly
compressed HTTP content (&quot;decompression bombs&quot;) leading to
excessive resource
consumption even when a small amount of data was requested. Reading
small
chunks of compressed data is safer and much more efficient now.
(<code>GHSA-2xpw-w6gg-jr37
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37&gt;</code>__)</li>
<li>Fixed a security issue where an attacker could compose an HTTP
response with
virtually unlimited links in the <code>Content-Encoding</code> header,
potentially
leading to a denial of service (DoS) attack by exhausting system
resources
during decoding. The number of allowed chained encodings is now limited
to 5.
(<code>GHSA-gm62-xv2j-4w53
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53&gt;</code>__)</li>
</ul>
<p>.. caution::</p>
<ul>
<li>If urllib3 is not installed with the optional
<code>urllib3[brotli]</code> extra, but
your environment contains a Brotli/brotlicffi/brotlipy package anyway,
make
sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to
benefit from the security fixes and avoid warnings. Prefer using</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0248277dd7"><code>0248277</code></a>
Release 2.6.3</li>
<li><a
href="8864ac407b"><code>8864ac4</code></a>
Merge commit from fork</li>
<li><a
href="70cecb27ca"><code>70cecb2</code></a>
Fix Scorecard issues related to vulnerable dev dependencies (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3755">#3755</a>)</li>
<li><a
href="41f249abe1"><code>41f249a</code></a>
Move &quot;v2.0 Migration Guide&quot; to the end of the table of
contents (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3747">#3747</a>)</li>
<li><a
href="fd4dffd2fc"><code>fd4dffd</code></a>
Patch <code>VerifiedHTTPSConnection</code> for Emscripten (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3752">#3752</a>)</li>
<li><a
href="13f0bfd55e"><code>13f0bfd</code></a>
Handle massive values in Retry-After when calculating time to sleep for
(<a
href="https://redirect.github.com/urllib3/urllib3/issues/3743">#3743</a>)</li>
<li><a
href="8c480bf87b"><code>8c480bf</code></a>
Bump actions/upload-artifact from 5.0.0 to 6.0.0 (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3748">#3748</a>)</li>
<li><a
href="4b40616e95"><code>4b40616</code></a>
Bump actions/cache from 4.3.0 to 5.0.1 (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3750">#3750</a>)</li>
<li><a
href="82b8479663"><code>82b8479</code></a>
Bump actions/download-artifact from 6.0.0 to 7.0.0 (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3749">#3749</a>)</li>
<li><a
href="34284cb017"><code>34284cb</code></a>
Mention experimental features in the security policy (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3746">#3746</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/urllib3/urllib3/compare/2.5.0...2.6.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=uv&previous-version=2.5.0&new-version=2.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 04:14:12 +00:00
dependabot[bot]
19b5a2924e Bump aiohttp from 3.13.2 to 3.13.3 in /backend (#1524)
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aiohttp&package-manager=uv&previous-version=3.13.2&new-version=3.13.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 04:13:56 +00:00
dependabot[bot]
42f1e6a2d0 Bump prettier from 3.7.1 to 3.8.0 in /frontend (#1522)
Bumps [prettier](https://github.com/prettier/prettier) from 3.7.1 to
3.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/releases">prettier's
releases</a>.</em></p>
<blockquote>
<h2>3.8.0</h2>
<ul>
<li>Support Angular v21.1</li>
</ul>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release note
&quot;Prettier 3.8: Support for Angular v21.1&quot;</a></p>
<h2>3.7.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix comment in union type gets duplicated by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18393">prettier/prettier#18393</a></li>
<li>Fix unstable comment print in union type by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18395">prettier/prettier#18395</a></li>
<li>Avoid quote around LWC interpolations by <a
href="https://github.com/kovsu"><code>@​kovsu</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18383">prettier/prettier#18383</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#374">Changelog</a></p>
<h2>3.7.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix <code>prettier.getFileInfo()</code> change that breaks VSCode
extension by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18375">prettier/prettier#18375</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#373">Changelog</a></p>
<h2>3.7.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix string print when switching quotes by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18351">prettier/prettier#18351</a></li>
<li>Preserve quote for embedded HTML attribute values by <a
href="https://github.com/kovsu"><code>@​kovsu</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18352">prettier/prettier#18352</a></li>
<li>Fix comment in empty type literal by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18364">prettier/prettier#18364</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#372">Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md">prettier's
changelog</a>.</em></p>
<blockquote>
<h1>3.8.0</h1>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release
Notes</a></p>
<h1>3.7.4</h1>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.3...3.7.4">diff</a></p>
<h4>LWC: Avoid quote around interpolations (<a
href="https://redirect.github.com/prettier/prettier/pull/18383">#18383</a>
by <a href="https://github.com/kovsu"><code>@​kovsu</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="html"><code>&lt;!-- Input --&gt;
&lt;div foo={bar}&gt;   &lt;/div&gt;
<p>&lt;!-- Prettier 3.7.3 (--embedded-language-formatting off) --&gt;<br
/>
&lt;div foo=&quot;{bar}&quot;&gt;&lt;/div&gt;</p>
<p>&lt;!-- Prettier 3.7.4 (--embedded-language-formatting off) --&gt;<br
/>
&lt;div foo={bar}&gt;&lt;/div&gt;<br />
</code></pre></p>
<h4>TypeScript: Fix comment inside union type gets duplicated (<a
href="https://redirect.github.com/prettier/prettier/pull/18393">#18393</a>
by <a href="https://github.com/fisker"><code>@​fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="tsx"><code>// Input
type Foo = (/** comment */ a | b) | c;
<p>// Prettier 3.7.3<br />
type Foo = /** comment <em>/ (/</em>* comment */ a | b) | c;</p>
<p>// Prettier 3.7.4<br />
type Foo = /** comment */ (a | b) | c;<br />
</code></pre></p>
<h4>TypeScript: Fix unstable comment print in union type comments (<a
href="https://redirect.github.com/prettier/prettier/pull/18395">#18395</a>
by <a href="https://github.com/fisker"><code>@​fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="tsx"><code>// Input
type X = (A | B) &amp; (
  // comment
  A | B
);
<p>// Prettier 3.7.3 (first format)<br />
type X = (A | B) &amp;<br />
&lt;/tr&gt;&lt;/table&gt;<br />
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="812a4d0071"><code>812a4d0</code></a>
Release 3.8.0</li>
<li><a
href="6cc1be31e2"><code>6cc1be3</code></a>
Consistent title</li>
<li><a
href="6d9bef0514"><code>6d9bef0</code></a>
Apply automated changes</li>
<li><a
href="3744a1840e"><code>3744a18</code></a>
Update code example</li>
<li><a
href="9a3edde022"><code>9a3edde</code></a>
Update</li>
<li><a
href="82dc52cdee"><code>82dc52c</code></a>
Regenerate</li>
<li><a
href="dc2de1a6e7"><code>dc2de1a</code></a>
Regenerate</li>
<li><a
href="5aa69662b4"><code>5aa6966</code></a>
Regenerate</li>
<li><a
href="daeeb51af9"><code>daeeb51</code></a>
Another version</li>
<li><a
href="a282985860"><code>a282985</code></a>
Add blog post</li>
<li>Additional commits viewable in <a
href="https://github.com/prettier/prettier/compare/3.7.1...3.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=3.7.1&new-version=3.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 04:11:15 +00:00
Amin NAIRI
ffd8f49c68 Fixed path for the PostgreSQL data folder (#1520)
The ending `data` folder does not exist per the Postgres documentation
and causes errors when starting up the Docker Compose Stack.
2026-01-17 22:57:34 +01:00
dependabot[bot]
4a6258ded3 Bump pyrefly from 0.47.0 to 0.48.0 in /backend (#1519)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.47.0 to
0.48.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="468f7d55b4"><code>468f7d5</code></a>
Update pyrefly version]</li>
<li><a
href="96c01a087f"><code>96c01a0</code></a>
Add failing testcase for private attributes</li>
<li><a
href="583707b1af"><code>583707b</code></a>
Add testcase to document aggregate behavior</li>
<li><a
href="5e77d5a188"><code>5e77d5a</code></a>
Remove jinja and typeshed-stats from mypy primer blocklist</li>
<li><a
href="862bfcc4cf"><code>862bfcc</code></a>
Add additional test cases</li>
<li><a
href="59098f44a5"><code>59098f4</code></a>
fix Not inferring generic type for variable typed as Callable with
TypeVar <a
href="https://redirect.github.com/facebook/pyrefly/issues/1">#1</a>...</li>
<li><a
href="7f0ca20a16"><code>7f0ca20</code></a>
Allow mypy_primer results for xarray</li>
<li><a
href="b78342deaa"><code>b78342d</code></a>
Allow mypy_primer results for scikit learn</li>
<li><a
href="4311f9b011"><code>4311f9b</code></a>
Allow mypy primer for arviz</li>
<li><a
href="1279c6741e"><code>1279c67</code></a>
Allow mypy primer for pytest</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.47.0...0.48.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.47.0&new-version=0.48.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 06:17:51 +00:00
dependabot[bot]
f8b595c2ae Bump alembic from 1.17.1 to 1.18.0 in /backend (#1518)
Bumps [alembic](https://github.com/sqlalchemy/alembic) from 1.17.1 to
1.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sqlalchemy/alembic/releases">alembic's
releases</a>.</em></p>
<blockquote>
<h1>1.18.0</h1>
<p>Released: January 9, 2026</p>
<h2>feature</h2>
<ul>
<li>
<p><strong>[feature] [operations]</strong> When alembic is run in
&quot;verbose&quot; mode, alembic now logs a message to
indicate from which file is used to load the configuration.</p>
<p>References: <a
href="https://redirect.github.com/sqlalchemy/alembic/issues/1737">#1737</a></p>
</li>
<li>
<p><strong>[feature] [autogenerate]</strong> Autogenerate reflection
sweeps now use the &quot;bulk&quot; inspector methods
introduced in SQLAlchemy 2.0, which for selected dialects including
PostgreSQL and Oracle use batched queries to reflect whole collections
of
tables using O(1) queries rather than O(N).</p>
<p>References: <a
href="https://redirect.github.com/sqlalchemy/alembic/issues/1771">#1771</a></p>
</li>
<li>
<p><strong>[feature] [autogenerate]</strong> Release 1.18.0 introduces a
plugin system that allows for automatic
loading of third-party extensions as well as configurable autogenerate
compare functionality on a per-environment basis.</p>
<p>The <code>Plugin</code> class provides a common interface for
extensions that
register handlers among Alembic's existing extension points such as
<code>Operations.register_operation()</code> and
<code>Operations.implementation_for()</code>. A new interface for
registering
autogenerate comparison handlers,
<code>Plugin.add_autogenerate_comparator()</code>, provides for
autogenerate
compare functionality that may be custom-configured on a per-environment
basis using the new
<code>EnvironmentContext.configure.autogenerate_plugins</code>
parameter.</p>
<p>The change does not impact well known Alembic add-ons such as
<code>alembic-utils</code>, which continue to work as before; however,
such add-ons
have the option to provide plugin entrypoints going forward.</p>
<p>As part of this change, Alembic's autogenerate compare functionality
is
reorganized into a series of internal plugins under the
<code>alembic.autogenerate</code> namespace, which may be individually
or
collectively identified for inclusion and/or exclusion within the
<code>EnvironmentContext.configure()</code> call using a new parameter
<code>EnvironmentContext.configure.autogenerate_plugins</code>. This
parameter is also where third party comparison plugins may also be
indicated.</p>
<p>See <code>alembic.plugins.toplevel</code> for complete documentation
on
the new <code>Plugin</code> class as well as autogenerate-specific usage
instructions.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/sqlalchemy/alembic/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=alembic&package-manager=uv&previous-version=1.17.1&new-version=1.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 06:17:29 +00:00
dependabot[bot]
3f22bc08c5 Bump sentry-sdk from 2.48.0 to 2.49.0 in /backend (#1517)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.48.0 to 2.49.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.49.0</h2>
<h3>New Features </h3>
<ul>
<li>feat(api): Add <code>Scope.set_attribute</code> by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5256">#5256</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(grpc): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5246">#5246</a></li>
<li>fix(opentelemetry): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5247">#5247</a></li>
<li>fix(ray): Keep variadic kwargs last in signatures by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5244">#5244</a></li>
<li>fix(trytond): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5245">#5245</a></li>
<li>Fix openai count_tokens by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5281">#5281</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>docs: Fix typo in comment by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5280">#5280</a></li>
<li>docs: Fix <code>middleware_spans</code> docstring by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5279">#5279</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ref(scope): Set global attrs on global scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5259">#5259</a></li>
<li>chore: Ignore type migration for scripts/ and tests/ in blame by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5284">#5284</a></li>
<li>ref: Properly override parent func by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5283">#5283</a></li>
<li>ci: Allow to use Craft's new auto-versioning by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5218">#5218</a></li>
<li>ref: Deduplicate batchers by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5263">#5263</a></li>
<li>tests: Add dedicated transport format test for metrics, logs by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5264">#5264</a></li>
<li>ci: 🤖 Update test matrix with new releases (01/05) by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5273">#5273</a></li>
<li>tests: General logs tests should use Sentry logs API by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5262">#5262</a></li>
<li>tests: Test preserialization of attributes by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5260">#5260</a></li>
<li>ci: Unpin Pydantic 1.x version in tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5261">#5261</a></li>
<li>ref: Make logs, metrics go via scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5213">#5213</a></li>
<li>ci: Fix failing arq, fastapi tests on 3.7; update test matrix by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5258">#5258</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.49.0</h2>
<h3>New Features </h3>
<ul>
<li>feat(api): Add <code>Scope.set_attribute</code> by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5256">#5256</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(grpc): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5246">#5246</a></li>
<li>fix(opentelemetry): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5247">#5247</a></li>
<li>fix(ray): Keep variadic kwargs last in signatures by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5244">#5244</a></li>
<li>fix(trytond): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5245">#5245</a></li>
<li>Fix openai count_tokens by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5281">#5281</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>docs: Fix typo in comment by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5280">#5280</a></li>
<li>docs: Fix <code>middleware_spans</code> docstring by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5279">#5279</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ref(scope): Set global attrs on global scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5259">#5259</a></li>
<li>chore: Ignore type migration for scripts/ and tests/ in blame by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5284">#5284</a></li>
<li>ref: Properly override parent func by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5283">#5283</a></li>
<li>ci: Allow to use Craft's new auto-versioning by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5218">#5218</a></li>
<li>ref: Deduplicate batchers by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5263">#5263</a></li>
<li>tests: Add dedicated transport format test for metrics, logs by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5264">#5264</a></li>
<li>ci: 🤖 Update test matrix with new releases (01/05) by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5273">#5273</a></li>
<li>tests: General logs tests should use Sentry logs API by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5262">#5262</a></li>
<li>tests: Test preserialization of attributes by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5260">#5260</a></li>
<li>ci: Unpin Pydantic 1.x version in tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5261">#5261</a></li>
<li>ref: Make logs, metrics go via scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5213">#5213</a></li>
<li>ci: Fix failing arq, fastapi tests on 3.7; update test matrix by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5258">#5258</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2c85e64f99"><code>2c85e64</code></a>
release: 2.49.0</li>
<li><a
href="8f273d45ea"><code>8f273d4</code></a>
chore: Ignore type migration for scripts/ and tests/ in blame (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5284">#5284</a>)</li>
<li><a
href="dc8a8e5b0d"><code>dc8a8e5</code></a>
ref: Properly override parent func (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5283">#5283</a>)</li>
<li><a
href="485aa6ddb3"><code>485aa6d</code></a>
ci: Allow to use Craft's new auto-versioning (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5218">#5218</a>)</li>
<li><a
href="c8d8d60bef"><code>c8d8d60</code></a>
docs: Fix typo in comment (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5280">#5280</a>)</li>
<li><a
href="6039305f7a"><code>6039305</code></a>
ref: Deduplicate batchers (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5263">#5263</a>)</li>
<li><a
href="f2317dc4c7"><code>f2317dc</code></a>
ref(scope): Set global attrs on global scope (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5259">#5259</a>)</li>
<li><a
href="3d83b3912a"><code>3d83b39</code></a>
fix(ray): Keep variadic kwargs last in signatures (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5244">#5244</a>)</li>
<li><a
href="f5c51fc4a5"><code>f5c51fc</code></a>
Fix openai count_tokens (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5281">#5281</a>)</li>
<li><a
href="a979755d26"><code>a979755</code></a>
docs: Fix <code>middleware_spans</code> docstring (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5279">#5279</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.48.0...2.49.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.48.0&new-version=2.49.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 06:17:01 +00:00
dependabot[bot]
c9244d964a Bump @hcaptcha/react-hcaptcha from 1.17.0 to 2.0.0 in /frontend (#1516)
Bumps
[@hcaptcha/react-hcaptcha](https://github.com/hCaptcha/react-hcaptcha)
from 1.17.0 to 2.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hCaptcha/react-hcaptcha/releases"><code>@​hcaptcha/react-hcaptcha</code>'s
releases</a>.</em></p>
<blockquote>
<h2>2.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(publish): Update Github Action to use pnpm correctly by <a
href="https://github.com/brdlyptrs"><code>@​brdlyptrs</code></a> in <a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/pull/361">hCaptcha/react-hcaptcha#361</a></li>
<li>feat(esbuild): Switch to using esbuild and clean up repo by <a
href="https://github.com/brdlyptrs"><code>@​brdlyptrs</code></a> in <a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/pull/346">hCaptcha/react-hcaptcha#346</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/1.17.4...v2.0.0">https://github.com/hCaptcha/react-hcaptcha/compare/1.17.4...v2.0.0</a></p>
<h2>1.17.4</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump qs and express</li>
<li>fix: Fix imports/exports for Hooks</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/1.17.3...1.17.4">https://github.com/hCaptcha/react-hcaptcha/compare/1.17.3...1.17.4</a></p>
<h2>1.17.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Add type module to ESM build output by <a
href="https://github.com/joao-imi"><code>@​joao-imi</code></a> in <a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/pull/338">hCaptcha/react-hcaptcha#338</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/1.17.2...1.17.3">https://github.com/hCaptcha/react-hcaptcha/compare/1.17.2...1.17.3</a></p>
<h2>1.17.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Add missing fields in HCaptchaProps by <a
href="https://github.com/patrickdemers6"><code>@​patrickdemers6</code></a>
in <a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/pull/335">hCaptcha/react-hcaptcha#335</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/patrickdemers6"><code>@​patrickdemers6</code></a>
made their first contribution in <a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/pull/335">hCaptcha/react-hcaptcha#335</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/1.17.1...1.17.2">https://github.com/hCaptcha/react-hcaptcha/compare/1.17.1...1.17.2</a></p>
<h2>1.17.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Add TypeScript types to package.json exports for ESM
compatibility by <a
href="https://github.com/evgeniiPerov"><code>@​evgeniiPerov</code></a>
in <a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/pull/326">hCaptcha/react-hcaptcha#326</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/evgeniiPerov"><code>@​evgeniiPerov</code></a>
made their first contribution in <a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/pull/326">hCaptcha/react-hcaptcha#326</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/1.17.0...1.17.1">https://github.com/hCaptcha/react-hcaptcha/compare/1.17.0...1.17.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5c6a8fe178"><code>5c6a8fe</code></a>
feat(esbuild): Switch to using esbuild and clean up repo (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/346">#346</a>)</li>
<li><a
href="aedb4a4394"><code>aedb4a4</code></a>
fix: Fix imports/exports (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/341">#341</a>)</li>
<li><a
href="6df384ecf3"><code>6df384e</code></a>
chore(deps): bump qs and express (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/339">#339</a>)</li>
<li><a
href="edfa7fbb99"><code>edfa7fb</code></a>
fix: Add type module to ESM build output (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/338">#338</a>)</li>
<li><a
href="74d96ff5ef"><code>74d96ff</code></a>
fix: Add missing fields in HCaptchaProps (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/335">#335</a>)</li>
<li><a
href="31708030a8"><code>3170803</code></a>
fix: Add TypeScript types to package.json exports for ESM compatibility
(<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/326">#326</a>)</li>
<li>See full diff in <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/1.17.0...2.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hcaptcha/react-hcaptcha&package-manager=npm_and_yarn&previous-version=1.17.0&new-version=2.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 06:14:10 +00:00
dependabot[bot]
d5e2c58613 Bump react-router from 7.11.0 to 7.12.0 in /frontend (#1515)
Bumps
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router)
from 7.11.0 to 7.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases">react-router's
releases</a>.</em></p>
<blockquote>
<h2>v7.12.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md">react-router's
changelog</a>.</em></p>
<blockquote>
<h2>7.12.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>Add additional layer of CSRF protection by rejecting submissions to
UI routes from external origins. If you need to permit access to
specific external origins, you can specify them in the
<code>react-router.config.ts</code> config
<code>allowedActionOrigins</code> field. (<a
href="https://redirect.github.com/remix-run/react-router/pull/14708">#14708</a>)</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>
<p>Fix <code>generatePath</code> when used with suffixed params (i.e.,
&quot;/books/:id.json&quot;) (<a
href="https://redirect.github.com/remix-run/react-router/pull/14269">#14269</a>)</p>
</li>
<li>
<p>Export <code>UNSAFE_createMemoryHistory</code> and
<code>UNSAFE_createHashHistory</code> alongside
<code>UNSAFE_createBrowserHistory</code> for consistency. These are not
intended to be used for new apps but intended to help apps usiong
<code>unstable_HistoryRouter</code> migrate from v6-&gt;v7 so they can
adopt the newer APIs. (<a
href="https://redirect.github.com/remix-run/react-router/pull/14663">#14663</a>)</p>
</li>
<li>
<p>Escape HTML in scroll restoration keys (<a
href="https://redirect.github.com/remix-run/react-router/pull/14705">#14705</a>)</p>
</li>
<li>
<p>Validate redirect locations (<a
href="https://redirect.github.com/remix-run/react-router/pull/14706">#14706</a>)</p>
</li>
<li>
<p>[UNSTABLE] Pass <code>&lt;Scripts nonce&gt;</code> value through to
the underlying <code>importmap</code> <code>script</code> tag when using
<code>future.unstable_subResourceIntegrity</code> (<a
href="https://redirect.github.com/remix-run/react-router/pull/14675">#14675</a>)</p>
</li>
<li>
<p>[UNSTABLE] Add a new
<code>future.unstable_trailingSlashAwareDataRequests</code> flag to
provide consistent behavior of <code>request.pathname</code> inside
<code>middleware</code>, <code>loader</code>, and <code>action</code>
functions on document and data requests when a trailing slash is present
in the browser URL. (<a
href="https://redirect.github.com/remix-run/react-router/pull/14644">#14644</a>)</p>
<p>Currently, your HTTP and <code>request</code> pathnames would be as
follows for <code>/a/b/c</code> and <code>/a/b/c/</code></p>
<table>
<thead>
<tr>
<th>URL <code>/a/b/c</code></th>
<th><strong>HTTP pathname</strong></th>
<th><strong><code>request</code> pathname`</strong></th>
</tr>
</thead>
<tbody>
<tr>
<td><strong>Document</strong></td>
<td><code>/a/b/c</code></td>
<td><code>/a/b/c</code> </td>
</tr>
<tr>
<td><strong>Data</strong></td>
<td><code>/a/b/c.data</code></td>
<td><code>/a/b/c</code> </td>
</tr>
</tbody>
</table>
<table>
<thead>
<tr>
<th>URL <code>/a/b/c/</code></th>
<th><strong>HTTP pathname</strong></th>
<th><strong><code>request</code> pathname`</strong></th>
</tr>
</thead>
<tbody>
<tr>
<td><strong>Document</strong></td>
<td><code>/a/b/c/</code></td>
<td><code>/a/b/c/</code> </td>
</tr>
<tr>
<td><strong>Data</strong></td>
<td><code>/a/b/c.data</code></td>
<td><code>/a/b/c</code> ⚠️</td>
</tr>
</tbody>
</table>
<p>With this flag enabled, these pathnames will be made consistent
though a new <code>_.data</code> format for client-side
<code>.data</code> requests:</p>
<table>
<thead>
<tr>
<th>URL <code>/a/b/c</code></th>
<th><strong>HTTP pathname</strong></th>
<th><strong><code>request</code> pathname`</strong></th>
</tr>
</thead>
<tbody>
<tr>
<td><strong>Document</strong></td>
<td><code>/a/b/c</code></td>
<td><code>/a/b/c</code> </td>
</tr>
<tr>
<td><strong>Data</strong></td>
<td><code>/a/b/c.data</code></td>
<td><code>/a/b/c</code> </td>
</tr>
</tbody>
</table>
<table>
<thead>
<tr>
<th>URL <code>/a/b/c/</code></th>
<th><strong>HTTP pathname</strong></th>
<th><strong><code>request</code> pathname`</strong></th>
</tr>
</thead>
<tbody>
<tr>
<td><strong>Document</strong></td>
<td><code>/a/b/c/</code></td>
<td><code>/a/b/c/</code> </td>
</tr>
<tr>
<td><strong>Data</strong></td>
<td><code>/a/b/c/_.data</code> ⬅️</td>
<td><code>/a/b/c/</code> </td>
</tr>
</tbody>
</table>
<p>This a bug fix but we are putting it behind an opt-in flag because it
has the potential to be a &quot;breaking bug fix&quot; if you are
relying on the URL format for any other application or caching
logic.</p>
<p>Enabling this flag also changes the format of client side
<code>.data</code> requests from <code>/_root.data</code> to
<code>/_.data</code> when navigating to <code>/</code> to align with the
new format. This does not impact the <code>request</code> pathname which
is still <code>/</code> in all cases.</p>
</li>
<li>
<p>Preserve <code>clientLoader.hydrate=true</code> when using
<code>&lt;HydratedRouter unstable_instrumentations&gt;</code> (<a
href="https://redirect.github.com/remix-run/react-router/pull/14674">#14674</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="26653a6bcb"><code>26653a6</code></a>
chore: Update version for release (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14712">#14712</a>)</li>
<li><a
href="7ac2346873"><code>7ac2346</code></a>
chore: Update version for release (pre) (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14709">#14709</a>)</li>
<li><a
href="75b1ef5086"><code>75b1ef5</code></a>
Add origin checks for UI route submissions (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14708">#14708</a>)</li>
<li><a
href="c05ef936fd"><code>c05ef93</code></a>
Validate redirect locations (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14706">#14706</a>)</li>
<li><a
href="c89c32c562"><code>c89c32c</code></a>
Escape HTML in scroll restoration keys (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14705">#14705</a>)</li>
<li><a
href="cbcbf3091b"><code>cbcbf30</code></a>
fix: pass nonce to importmap script when using subResourceIntegrity (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14675">#14675</a>)</li>
<li><a
href="30f6c1d814"><code>30f6c1d</code></a>
fix(react-router): handle parameters with static suffixes in
generatePath (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/1">#1</a>...</li>
<li><a
href="7f140e098e"><code>7f140e0</code></a>
Handle data requests with trailing slash consistently (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14644">#14644</a>)</li>
<li><a
href="1954af6374"><code>1954af6</code></a>
Preserve hydrate property on client loaders during instrumentation (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14674">#14674</a>)</li>
<li><a
href="5ce5cd4ebf"><code>5ce5cd4</code></a>
chore: format</li>
<li>Additional commits viewable in <a
href="https://github.com/remix-run/react-router/commits/react-router@7.12.0/packages/react-router">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-router&package-manager=npm_and_yarn&previous-version=7.11.0&new-version=7.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-09 00:23:58 +00:00
Erik Vroon
be1c3e2018 New Crowdin updates (#1514) 2026-01-08 12:12:34 +01:00
Erik Vroon
9e4437ebc1 New Crowdin updates (#1513) 2026-01-07 13:25:08 +01:00
dependabot[bot]
af0f77030b Bump pyrefly from 0.46.0 to 0.47.0 in /backend (#1512)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.46.0 to
0.47.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="65be741335"><code>65be741</code></a>
Update pyrefly version]</li>
<li><a
href="b104e3bf39"><code>b104e3b</code></a>
fix: Pyrefly should narrow to intersection, not Never, for a TypeIs call
(<a
href="https://redirect.github.com/facebook/pyrefly/issues/1924">#1924</a>)</li>
<li><a
href="16b0e2bda4"><code>16b0e2b</code></a>
Add test files for pydantic.dataclasses</li>
<li><a
href="f39c7d119c"><code>f39c7d1</code></a>
fix Support types like pydantic.types.PositiveInt <a
href="https://redirect.github.com/facebook/pyrefly/issues/1451">#1451</a>
able to check call si...</li>
<li><a
href="2d2a146d8a"><code>2d2a146</code></a>
Report Non-Exhaustive match Statements <a
href="https://redirect.github.com/facebook/pyrefly/issues/400">#400</a>
(<a
href="https://redirect.github.com/facebook/pyrefly/issues/1833">#1833</a>)</li>
<li><a
href="d1979ac5fa"><code>d1979ac</code></a>
fix: Resolve TypeVars in generic TypedDict inheritance with Unpack (<a
href="https://redirect.github.com/facebook/pyrefly/issues/1922">#1922</a>)</li>
<li><a
href="c6ee5edd5b"><code>c6ee5ed</code></a>
Update pydantic documentation to explain lax mode</li>
<li><a
href="2c2cb49fa2"><code>2c2cb49</code></a>
fix Special output format for Github actions <a
href="https://redirect.github.com/facebook/pyrefly/issues/1599">#1599</a>
(<a
href="https://redirect.github.com/facebook/pyrefly/issues/1785">#1785</a>)</li>
<li><a
href="a489d5e550"><code>a489d5e</code></a>
fix LSP: Provide key autocompletion on annotated TypedDict <a
href="https://redirect.github.com/facebook/pyrefly/issues/1886">#1886</a>
(<a
href="https://redirect.github.com/facebook/pyrefly/issues/1964">#1964</a>)</li>
<li><a
href="cbaf45ef18"><code>cbaf45e</code></a>
Bump qs from 6.13.0 to 6.14.1 in /lsp (<a
href="https://redirect.github.com/facebook/pyrefly/issues/1966">#1966</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.46.0...0.47.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.46.0&new-version=0.47.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-06 04:09:10 +00:00
dependabot[bot]
4e3ce5f3a9 Bump @hey-api/openapi-ts from 0.89.2 to 0.90.1 in /frontend (#1511)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from
0.89.2 to 0.90.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/openapi-ts/releases"><code>@​hey-api/openapi-ts</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.90.1</h2>
<h3>Patch Changes</h3>
<ul>
<li><strong>plugin(<code>@​hey-api/sdk</code>)</strong>: add
<code>examples</code> option (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3175">#3175</a>)
(<a
href="b985053ffa"><code>b985053</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<p>The SDK plugin can generate ready-to-use code examples for each
operation, showing how to call the SDK methods with proper parameters
and setup.</p>
<p>Learn how to generate examples on the <a
href="https://heyapi.dev/openapi-ts/plugins/sdk#code-examples">SDK
plugin</a> page.</p>
<ul>
<li><strong>output</strong>: add <code>source</code> option (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3175">#3175</a>)
(<a
href="b985053ffa"><code>b985053</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<p>Source is a copy of the input specification used to generate your
output. It can be used to power documentation tools or to persist a
stable snapshot alongside your generated files.</p>
<p>Learn how to use the source on the <a
href="https://heyapi.dev/openapi-ts/configuration/output#source">Output</a>
page.</p>
<h3>Updated Dependencies:</h3>
<ul>
<li><code>@​hey-api/codegen-core</code><a
href="https://github.com/0"><code>@​0</code></a>.5.1</li>
</ul>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.90.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><strong>plugin(valibot)</strong>: <strong>BREAKING:</strong>
standardize <code>~resolvers</code> API (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3147">#3147</a>)
(<a
href="ab80a4b2c3"><code>ab80a4b</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<p>The <a
href="https://heyapi.dev/openapi-ts/plugins/concepts/resolvers">Resolvers
API</a> has been simplified and expanded to provide a more consistent
behavior across plugins. You can view a few common examples on the <a
href="https://heyapi.dev/openapi-ts/plugins/concepts/resolvers">Resolvers</a>
page.</p>
<ul>
<li><strong>plugin(sdk)</strong>: <strong>BREAKING</strong>: Structure
API (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3109">#3109</a>)
(<a
href="815a3de0af"><code>815a3de</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Structure API</h3>
<p>The <a href="https://heyapi.dev/openapi-ts/plugins/sdk">SDK
plugin</a> now implements the Structure API, enabling more complex
structures and fixing several known issues.</p>
<p>Some Structure APIs are incompatible with the previous configuration,
most notably the <code>methodNameBuilder</code> function, which accepted
the operation object as an argument. You can read the <a
href="https://heyapi.dev/openapi-ts/plugins/sdk#output">SDK Output</a>
section to familiarize yourself with the Structure API.</p>
<p>Please <a href="https://github.com/hey-api/openapi-ts/issues">open an
issue</a> if you're unable to migrate your configuration to the new
syntax.</p>
<ul>
<li><strong>plugin(zod)</strong>: <strong>BREAKING:</strong> standardize
<code>~resolvers</code> API (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3147">#3147</a>)
(<a
href="ab80a4b2c3"><code>ab80a4b</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<p>The <a
href="https://heyapi.dev/openapi-ts/plugins/concepts/resolvers">Resolvers
API</a> has been simplified and expanded to provide a more consistent
behavior across plugins. You can view a few common examples on the <a
href="https://heyapi.dev/openapi-ts/plugins/concepts/resolvers">Resolvers</a>
page.</p>
<ul>
<li><strong>plugin(<code>@​angular/common</code>)</strong>:
<strong>BREAKING</strong>: Structure API (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3109">#3109</a>)
(<a
href="815a3de0af"><code>815a3de</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Structure API</h3>
<p>The <a href="https://heyapi.dev/openapi-ts/plugins/angular">Angular
plugin</a> now implements the Structure API, enabling more complex
structures and fixing several known issues.</p>
<p>Some Structure APIs are incompatible with the previous configuration,
most notably the <code>methodNameBuilder</code> function, which accepted
the operation object as an argument. You can read the <a
href="https://heyapi.dev/openapi-ts/plugins/sdk#output">SDK Output</a>
section to familiarize yourself with the Structure API.</p>
<p>Please <a href="https://github.com/hey-api/openapi-ts/issues">open an
issue</a> if you're unable to migrate your configuration to the new
syntax.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="720c012cca"><code>720c012</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3178">#3178</a>
from hey-api/changeset-release/main</li>
<li><a
href="4f44a410f2"><code>4f44a41</code></a>
chore: update lock file</li>
<li><a
href="91c49a3724"><code>91c49a3</code></a>
ci: release</li>
<li><a
href="330a6283d1"><code>330a628</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3176">#3176</a>
from hey-api/renovate/opencode-ai-sdk-1.x</li>
<li><a
href="0242b1d138"><code>0242b1d</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3177">#3177</a>
from hey-api/renovate/pnpm-10.x</li>
<li><a
href="9e5243b645"><code>9e5243b</code></a>
chore(deps): update pnpm to v10.27.0</li>
<li><a
href="9848a1c61e"><code>9848a1c</code></a>
chore(deps): update dependency <code>@​opencode-ai/sdk</code> to
v1.0.221</li>
<li><a
href="469253a358"><code>469253a</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3175">#3175</a>
from hey-api/feat/sdk-examples</li>
<li><a
href="b985053ffa"><code>b985053</code></a>
feat: SDK examples</li>
<li><a
href="711452e936"><code>711452e</code></a>
chore(docs): update contributors list</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.89.2...@hey-api/openapi-ts@0.90.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hey-api/openapi-ts&package-manager=npm_and_yarn&previous-version=0.89.2&new-version=0.90.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-06 04:06:33 +00:00
Erik Vroon
1dbd2c9ea6 Fix corepack issue in dockerfile (#1509) 2025-12-31 14:48:01 +01:00
dependabot[bot]
099ac6f86b Bump markdownlint-cli2 from 0.14.0 to 0.20.0 in /docs (#1502)
Bumps
[markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2)
from 0.14.0 to 0.20.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md">markdownlint-cli2's
changelog</a>.</em></p>
<blockquote>
<h2>0.20.0</h2>
<ul>
<li>Update dependencies</li>
</ul>
<h2>0.19.1</h2>
<ul>
<li>Update <code>--format</code> to avoid trailing newline</li>
<li>Update dependencies</li>
</ul>
<h2>0.19.0</h2>
<ul>
<li>Add <code>--format</code> parameter for editor integration</li>
<li>Update output formatters for severity <code>warning</code></li>
<li>Explicitly version Docker containers for
<code>pre-commit</code></li>
<li>Update dependencies (including <code>markdownlint</code>)</li>
</ul>
<h2>0.18.1</h2>
<ul>
<li>Update dependencies (including <code>markdownlint</code>)</li>
</ul>
<h2>0.18.0</h2>
<ul>
<li>Use user ID in Docker containers for security</li>
<li>Update dependencies (including <code>markdownlint</code>)</li>
<li>Remove support for end-of-life Node 18</li>
</ul>
<h2>0.17.2</h2>
<ul>
<li>Update dependencies (including <code>markdownlint</code>)</li>
</ul>
<h2>0.17.1</h2>
<ul>
<li>Update dependencies (including <code>markdownlint</code>)</li>
</ul>
<h2>0.17.0</h2>
<ul>
<li>Convert to ECMAScript modules</li>
<li>Use import() when loading modules</li>
<li>Update dependencies (including <code>markdownlint</code>)</li>
</ul>
<h2>0.16.0</h2>
<ul>
<li>Try not to use require for modules (due to Node 22.12)</li>
<li>Update dependencies (EXcluding <code>markdownlint</code>)</li>
</ul>
<h2>0.15.0</h2>
<ul>
<li>Add support for <code>stdin</code> input via <code>-</code>
glob</li>
<li>Add output formatter based on string templates</li>
<li>Update dependencies (including <code>markdownlint</code>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7339935a30"><code>7339935</code></a>
Update to version 0.20.0.</li>
<li><a
href="b4a425736f"><code>b4a4257</code></a>
Add custom rule markdownlint-rule-numbered-headings-unique to Docker
containe...</li>
<li><a
href="dff79cc3ec"><code>dff79cc</code></a>
Update documentation and tests for markdownlint version update in
previous co...</li>
<li><a
href="dedb028dc4"><code>dedb028</code></a>
Bump markdownlint from 0.39.0 to 0.40.0</li>
<li><a
href="cddf7270f6"><code>cddf727</code></a>
Add test to ensure all project version numbers match.</li>
<li><a
href="a1f74abf03"><code>a1f74ab</code></a>
Bump execa from 9.6.0 to 9.6.1</li>
<li><a
href="d2942ba15b"><code>d2942ba</code></a>
Update indirect playwright dependencies to 1.57.0.</li>
<li><a
href="619cca15d2"><code>619cca1</code></a>
Bump <code>@​playwright/test</code> from 1.56.1 to 1.57.0</li>
<li><a
href="320454aa59"><code>320454a</code></a>
Bump eslint-plugin-jsdoc from 61.4.0 to 61.4.1</li>
<li><a
href="bacb4e3c44"><code>bacb4e3</code></a>
Exclude more invalid JavaScript test files from CodeQL analysis to avoid
&quot;Cou...</li>
<li>Additional commits viewable in <a
href="https://github.com/DavidAnson/markdownlint-cli2/compare/v0.14.0...v0.20.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdownlint-cli2&package-manager=npm_and_yarn&previous-version=0.14.0&new-version=0.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 13:36:53 +00:00
Erik Vroon
b7d5f3e020 Fix markdownlint (#1508)
Fixes an error for markdownlint-cli2 in
https://github.com/evroon/bracket/pull/1502
2025-12-31 13:33:26 +00:00
dependabot[bot]
092f6d0196 Bump prettier from 3.6.2 to 3.7.4 in /docs (#1504)
Bumps [prettier](https://github.com/prettier/prettier) from 3.6.2 to
3.7.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/releases">prettier's
releases</a>.</em></p>
<blockquote>
<h2>3.7.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix comment in union type gets duplicated by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18393">prettier/prettier#18393</a></li>
<li>Fix unstable comment print in union type by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18395">prettier/prettier#18395</a></li>
<li>Avoid quote around LWC interpolations by <a
href="https://github.com/kovsu"><code>@​kovsu</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18383">prettier/prettier#18383</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#374">Changelog</a></p>
<h2>3.7.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix <code>prettier.getFileInfo()</code> change that breaks VSCode
extension by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18375">prettier/prettier#18375</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#373">Changelog</a></p>
<h2>3.7.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix string print when switching quotes by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18351">prettier/prettier#18351</a></li>
<li>Preserve quote for embedded HTML attribute values by <a
href="https://github.com/kovsu"><code>@​kovsu</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18352">prettier/prettier#18352</a></li>
<li>Fix comment in empty type literal by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18364">prettier/prettier#18364</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#372">Changelog</a></p>
<h2>3.7.1</h2>
<ul>
<li>Fix performance regression in doc printer (<a
href="https://redirect.github.com/prettier/prettier/pull/18342">#18342</a>
by <a href="https://github.com/fisker"><code>@​fisker</code></a>)</li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#371">Changelog</a></p>
<h2>3.7.0</h2>
<p><a
href="https://github.com/prettier/prettier/compare/3.6.2...3.7.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2025/11/27/3.7.0">Release
note</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md">prettier's
changelog</a>.</em></p>
<blockquote>
<h1>3.7.4</h1>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.3...3.7.4">diff</a></p>
<h4>LWC: Avoid quote around interpolations (<a
href="https://redirect.github.com/prettier/prettier/pull/18383">#18383</a>
by <a href="https://github.com/kovsu"><code>@​kovsu</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="html"><code>&lt;!-- Input --&gt;
&lt;div foo={bar}&gt;   &lt;/div&gt;
<p>&lt;!-- Prettier 3.7.3 (--embedded-language-formatting off) --&gt;
&lt;div foo=&quot;{bar}&quot;&gt;&lt;/div&gt;</p>
<p>&lt;!-- Prettier 3.7.4 (--embedded-language-formatting off) --&gt;
&lt;div foo={bar}&gt;&lt;/div&gt;
</code></pre></p>
<h4>TypeScript: Fix comment inside union type gets duplicated (<a
href="https://redirect.github.com/prettier/prettier/pull/18393">#18393</a>
by <a href="https://github.com/fisker"><code>@​fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="tsx"><code>// Input
type Foo = (/** comment */ a | b) | c;
<p>// Prettier 3.7.3
type Foo = /** comment <em>/ (/</em>* comment */ a | b) | c;</p>
<p>// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;
</code></pre></p>
<h4>TypeScript: Fix unstable comment print in union type comments (<a
href="https://redirect.github.com/prettier/prettier/pull/18395">#18395</a>
by <a href="https://github.com/fisker"><code>@​fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="tsx"><code>// Input
type X = (A | B) &amp; (
  // comment
  A | B
);
<p>// Prettier 3.7.3 (first format)
type X = (A | B) &amp;
(// comment
A | B);</p>
<p>// Prettier 3.7.3 (second format)
type X = (
| A
&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7848357af6"><code>7848357</code></a>
Release 3.7.4</li>
<li><a
href="7686c59d51"><code>7686c59</code></a>
Release <code>@​prettier/plugin-hermes</code> &amp;
<code>@​prettier/plugin-oxc</code> v0.1.3</li>
<li><a
href="fe494348a0"><code>fe49434</code></a>
Remove dead code checking union/intersection types length (<a
href="https://redirect.github.com/prettier/prettier/issues/18396">#18396</a>)</li>
<li><a
href="ca02b37489"><code>ca02b37</code></a>
Fix unstable comment print (<a
href="https://redirect.github.com/prettier/prettier/issues/18395">#18395</a>)</li>
<li><a
href="7efb988c67"><code>7efb988</code></a>
Fix comment in union type get duplicated (<a
href="https://redirect.github.com/prettier/prettier/issues/18393">#18393</a>)</li>
<li><a
href="cfa92c1b6d"><code>cfa92c1</code></a>
Update dependency <code>@​angular/compiler</code> to v21.0.2 (<a
href="https://redirect.github.com/prettier/prettier/issues/18392">#18392</a>)</li>
<li><a
href="1de273770b"><code>1de2737</code></a>
Update dependency yaml to v2.8.2 (<a
href="https://redirect.github.com/prettier/prettier/issues/18391">#18391</a>)</li>
<li><a
href="706aa4ef90"><code>706aa4e</code></a>
Switch js parse postprocess to <code>onEnter</code> (<a
href="https://redirect.github.com/prettier/prettier/issues/18382">#18382</a>)</li>
<li><a
href="d3eb2b2d08"><code>d3eb2b2</code></a>
Reuse arrays in visitor keys (<a
href="https://redirect.github.com/prettier/prettier/issues/18386">#18386</a>)</li>
<li><a
href="c45fef106e"><code>c45fef1</code></a>
Fix LWC attribute with <code>--embedded-language-formatting off</code>
(<a
href="https://redirect.github.com/prettier/prettier/issues/18383">#18383</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/prettier/prettier/compare/3.6.2...3.7.4">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for prettier since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=3.6.2&new-version=3.7.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Erik Vroon <erik.vroon@channable.com>
2025-12-31 13:29:48 +00:00
dependabot[bot]
f0b1abf077 Bump next from 16.0.10 to 16.1.1 in /docs (#1506)
Bumps [next](https://github.com/vercel/next.js) from 16.0.10 to 16.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases">next's
releases</a>.</em></p>
<blockquote>
<h2>v16.1.1</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Turbopack: Create junction points instead of symlinks on Windows (<a
href="https://redirect.github.com/vercel/next.js/issues/87606">#87606</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/sokra"><code>@​sokra</code></a> and <a
href="https://github.com/ztanner"><code>@​ztanner</code></a> for
helping!</p>
<h2>v16.1.1-canary.10</h2>
<h3>Misc Changes</h3>
<ul>
<li>chore(turbo-tasks-malloc): replace mimalloc-rspack to mimalloc: <a
href="https://redirect.github.com/vercel/next.js/issues/87815">#87815</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/xusd320"><code>@​xusd320</code></a> for
helping!</p>
<h2>v16.1.1-canary.9</h2>
<h3>Core Changes</h3>
<ul>
<li>misc: fix type check log for CI envs: <a
href="https://redirect.github.com/vercel/next.js/issues/87838">#87838</a></li>
</ul>
<h3>Misc Changes</h3>
<ul>
<li>Update Rspack production test manifest: <a
href="https://redirect.github.com/vercel/next.js/issues/87889">#87889</a></li>
<li>Update Rspack development test manifest: <a
href="https://redirect.github.com/vercel/next.js/issues/87888">#87888</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/feedthejim"><code>@​feedthejim</code></a> and
<a
href="https://github.com/vercel-release-bot"><code>@​vercel-release-bot</code></a>
for helping!</p>
<h2>v16.1.1-canary.8</h2>
<h3>Core Changes</h3>
<ul>
<li>[strict-route-types] Add <code>experimental.strictRouteTypes</code>
config: <a
href="https://redirect.github.com/vercel/next.js/issues/87378">#87378</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a> for
helping!</p>
<h2>v16.1.1-canary.7</h2>
<h3>Core Changes</h3>
<ul>
<li>Add experimental routing package for resolving adapter routes: <a
href="https://redirect.github.com/vercel/next.js/issues/86404">#86404</a></li>
<li>Ensure outputs are correct with cache components in deployment
adapters: <a
href="https://redirect.github.com/vercel/next.js/issues/87018">#87018</a></li>
<li>Move off of deprecated url.parse: <a
href="https://redirect.github.com/vercel/next.js/issues/87257">#87257</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3aa53984e9"><code>3aa5398</code></a>
v16.1.1</li>
<li><a
href="d1bd5b5810"><code>d1bd5b5</code></a>
Turbopack: Create junction points instead of symlinks on Windows (<a
href="https://redirect.github.com/vercel/next.js/issues/87606">#87606</a>)</li>
<li><a
href="a67ee72788"><code>a67ee72</code></a>
setup release branch</li>
<li><a
href="34916762cd"><code>3491676</code></a>
v16.1.0</li>
<li><a
href="58e8f8c7e5"><code>58e8f8c</code></a>
v16.1.0-canary.34</li>
<li><a
href="8a8a00d5d0"><code>8a8a00d</code></a>
Revert &quot;Move next-env.d.ts to dist dir&quot; (<a
href="https://redirect.github.com/vercel/next.js/issues/87311">#87311</a>)</li>
<li><a
href="3284587f8e"><code>3284587</code></a>
v16.1.0-canary.33</li>
<li><a
href="25da5f0426"><code>25da5f0</code></a>
Move next-env.d.ts to dist dir (<a
href="https://redirect.github.com/vercel/next.js/issues/86752">#86752</a>)</li>
<li><a
href="aa8a243e72"><code>aa8a243</code></a>
feat: use Rspack persistent cache by default (<a
href="https://redirect.github.com/vercel/next.js/issues/81399">#81399</a>)</li>
<li><a
href="754db28e52"><code>754db28</code></a>
bundle analyzer: remove geist font in favor of system ui fonts (<a
href="https://redirect.github.com/vercel/next.js/issues/87292">#87292</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v16.0.10...v16.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=next&package-manager=npm_and_yarn&previous-version=16.0.10&new-version=16.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 13:23:09 +00:00
dependabot[bot]
9eb74da12c Bump @tabler/icons-react from 3.35.0 to 3.36.0 in /docs (#1507)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.35.0 to 3.36.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases"><code>@​tabler/icons-react</code>'s
releases</a>.</em></p>
<blockquote>
<h2>Release 3.36.0</h2>
<!-- raw HTML omitted -->
<h3>18 new icons:</h3>
<ul>
<li><code>outline/alphabet-polish</code></li>
<li><code>outline/alphabet-runes</code></li>
<li><code>outline/blind</code></li>
<li><code>outline/brand-tabnine</code></li>
<li><code>outline/circle-asterisk</code></li>
<li><code>outline/deaf</code></li>
<li><code>outline/hexagon-asterisk</code></li>
<li><code>outline/ripple-down</code></li>
<li><code>outline/ripple-up</code></li>
<li><code>outline/rosette-asterisk</code></li>
<li><code>outline/settings-ai</code></li>
<li><code>outline/sparkles-2</code></li>
<li><code>outline/square-rotated-asterisk</code></li>
<li><code>outline/subtitles-ai</code></li>
<li><code>outline/subtitles-edit</code></li>
<li><code>outline/subtitles-off</code></li>
<li><code>outline/subtitles</code></li>
<li><code>outline/whisk</code></li>
</ul>
<h3>Fixed icons</h3>
<p>Fixed over 2000 icons with improved category formatting, consistent
newline usage, and enhanced accessibility tags.</p>
<h3>New features</h3>
<ul>
<li><strong>Svelte 5 (Runes) support</strong>: Added new
<code>@tabler/icons-svelte-runes</code> package for Svelte 5 with Runes
syntax</li>
<li><strong>GitHub Actions workflow</strong>: Added automated workflow
to sync icons to CDN</li>
<li><strong>Enhanced accessibility</strong>: All outline icons now have
proper categories and tags for improved accessibility</li>
</ul>
<h3>Performance improvements</h3>
<ul>
<li><strong>Optimized build process</strong>: Refactored
<code>build-outline.mjs</code> with:
<ul>
<li>Increased concurrency from 32 to 64 for faster processing</li>
<li>Parallel file processing and copying</li>
<li>Improved cache handling and error management</li>
<li>Better progress tracking and logging</li>
</ul>
</li>
<li><strong>Removed Python dependency</strong>: Replaced
<code>fix-outline.py</code> with JavaScript implementation
(<code>fix-outline.mjs</code>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>Fixed ref types in <code>icons-react</code> package</li>
<li>Improved TypeScript configuration for better type checking</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f76e44c631"><code>f76e44c</code></a>
Release 3.36.0</li>
<li><a
href="a6f86a05d1"><code>a6f86a0</code></a>
Fix ref types in icons-react (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1394">#1394</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.36.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.35.0&new-version=3.36.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 13:20:31 +00:00
dependabot[bot]
7d3a89df91 Bump lucide-react from 0.424.0 to 0.562.0 in /docs (#1505)
Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 0.424.0 to 0.562.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.562.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(icons): changed <code>paint-bucket</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3880">lucide-icons/lucide#3880</a></li>
<li>fix(site): Fix and unify color-picker font-size by <a
href="https://github.com/taimar"><code>@​taimar</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3889">lucide-icons/lucide#3889</a></li>
<li>fix(react-native-web): only add className prop to parent Icon
component by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3892">lucide-icons/lucide#3892</a></li>
<li>fix(lucide-react-native): remove icons namespace export to enable
tree-shaking by <a
href="https://github.com/jtomaszewski"><code>@​jtomaszewski</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3868">lucide-icons/lucide#3868</a></li>
<li>feat(icons): added <code>toolbox</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3871">lucide-icons/lucide#3871</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/taimar"><code>@​taimar</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3889">lucide-icons/lucide#3889</a></li>
<li><a
href="https://github.com/jtomaszewski"><code>@​jtomaszewski</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3868">lucide-icons/lucide#3868</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.561.0...0.562.0">https://github.com/lucide-icons/lucide/compare/0.561.0...0.562.0</a></p>
<h2>Version 0.561.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(site): Small adjustments color picker and add clear button
search bar by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3851">lucide-icons/lucide#3851</a></li>
<li>feat(icons): added <code>stone</code> icon by <a
href="https://github.com/Alportan"><code>@​Alportan</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3850">lucide-icons/lucide#3850</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.560.0...0.561.0">https://github.com/lucide-icons/lucide/compare/0.560.0...0.561.0</a></p>
<h2>Version 0.560.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): added <code>cannabis-off</code> icon by <a
href="https://github.com/NickVeles"><code>@​NickVeles</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3748">lucide-icons/lucide#3748</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/NickVeles"><code>@​NickVeles</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3748">lucide-icons/lucide#3748</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.559.0...0.560.0">https://github.com/lucide-icons/lucide/compare/0.559.0...0.560.0</a></p>
<h2>Version 0.559.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): added <code>fishing-hook</code> icon by <a
href="https://github.com/7ender"><code>@​7ender</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3837">lucide-icons/lucide#3837</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/7ender"><code>@​7ender</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3837">lucide-icons/lucide#3837</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.558.0...0.559.0">https://github.com/lucide-icons/lucide/compare/0.558.0...0.559.0</a></p>
<h2>Version 0.558.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): added <code>hd</code> icon by <a
href="https://github.com/jamiemlaw"><code>@​jamiemlaw</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2958">lucide-icons/lucide#2958</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.557.0...0.558.0">https://github.com/lucide-icons/lucide/compare/0.557.0...0.558.0</a></p>
<h2>Version 0.557.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(github/workflows/ci): fixes linting issues by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3858">lucide-icons/lucide#3858</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="076e0bbcd9"><code>076e0bb</code></a>
chore(dependencies): Update dependencies (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/3809">#3809</a>)</li>
<li><a
href="80d6f737e0"><code>80d6f73</code></a>
fix(icons): Rename fingerprint icon to fingerprint-pattern (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/3767">#3767</a>)</li>
<li><a
href="1cfb3ff70e"><code>1cfb3ff</code></a>
chore(deps-dev): bump vite from 6.3.5 to 6.3.6 (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/3611">#3611</a>)</li>
<li><a
href="e71198d9b3"><code>e71198d</code></a>
chore: icon alias improvements (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/2861">#2861</a>)</li>
<li><a
href="3e644fda2d"><code>3e644fd</code></a>
chore(scripts): Refactor scripts to typescript (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/3316">#3316</a>)</li>
<li><a
href="19fa01b5fc"><code>19fa01b</code></a>
build(deps-dev): bump vite from 6.3.2 to 6.3.4 (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/3181">#3181</a>)</li>
<li><a
href="03eb86287a"><code>03eb862</code></a>
use implicit return in react package (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/2325">#2325</a>)</li>
<li><a
href="0fccc276c3"><code>0fccc27</code></a>
Bump dependencies (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/3096">#3096</a>)</li>
<li><a
href="7b954807da"><code>7b95480</code></a>
Added periods (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/3065">#3065</a>)</li>
<li><a
href="e4988bc1df"><code>e4988bc</code></a>
build(deps-dev): bump vite from 5.4.15 to 5.4.17 (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/2993">#2993</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/lucide-icons/lucide/commits/0.562.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for lucide-react since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lucide-react&package-manager=npm_and_yarn&previous-version=0.424.0&new-version=0.562.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 13:19:44 +00:00
dependabot[bot]
e473c565b7 Bump eslint-config-next from 16.0.0 to 16.1.1 in /docs (#1503)
Bumps
[eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next)
from 16.0.0 to 16.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases">eslint-config-next's
releases</a>.</em></p>
<blockquote>
<h2>v16.1.1</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Turbopack: Create junction points instead of symlinks on Windows (<a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87606">#87606</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/sokra"><code>@​sokra</code></a> and <a
href="https://github.com/ztanner"><code>@​ztanner</code></a> for
helping!</p>
<h2>v16.1.1-canary.10</h2>
<h3>Misc Changes</h3>
<ul>
<li>chore(turbo-tasks-malloc): replace mimalloc-rspack to mimalloc: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87815">#87815</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/xusd320"><code>@​xusd320</code></a> for
helping!</p>
<h2>v16.1.1-canary.9</h2>
<h3>Core Changes</h3>
<ul>
<li>misc: fix type check log for CI envs: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87838">#87838</a></li>
</ul>
<h3>Misc Changes</h3>
<ul>
<li>Update Rspack production test manifest: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87889">#87889</a></li>
<li>Update Rspack development test manifest: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87888">#87888</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/feedthejim"><code>@​feedthejim</code></a> and
<a
href="https://github.com/vercel-release-bot"><code>@​vercel-release-bot</code></a>
for helping!</p>
<h2>v16.1.1-canary.8</h2>
<h3>Core Changes</h3>
<ul>
<li>[strict-route-types] Add <code>experimental.strictRouteTypes</code>
config: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87378">#87378</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a> for
helping!</p>
<h2>v16.1.1-canary.7</h2>
<h3>Core Changes</h3>
<ul>
<li>Add experimental routing package for resolving adapter routes: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/86404">#86404</a></li>
<li>Ensure outputs are correct with cache components in deployment
adapters: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87018">#87018</a></li>
<li>Move off of deprecated url.parse: <a
href="https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next/issues/87257">#87257</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3aa53984e9"><code>3aa5398</code></a>
v16.1.1</li>
<li><a
href="34916762cd"><code>3491676</code></a>
v16.1.0</li>
<li><a
href="58e8f8c7e5"><code>58e8f8c</code></a>
v16.1.0-canary.34</li>
<li><a
href="3284587f8e"><code>3284587</code></a>
v16.1.0-canary.33</li>
<li><a
href="04290ab7c4"><code>04290ab</code></a>
v16.1.0-canary.32</li>
<li><a
href="d36c03ed1b"><code>d36c03e</code></a>
v16.1.0-canary.31</li>
<li><a
href="b174155e8b"><code>b174155</code></a>
v16.1.0-canary.30</li>
<li><a
href="20da8eadc0"><code>20da8ea</code></a>
v16.1.0-canary.29</li>
<li><a
href="7a856fcb9e"><code>7a856fc</code></a>
v16.1.0-canary.28</li>
<li><a
href="80fb15cea6"><code>80fb15c</code></a>
v16.1.0-canary.27</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/commits/v16.1.1/packages/eslint-config-next">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint-config-next&package-manager=npm_and_yarn&previous-version=16.0.0&new-version=16.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 13:18:58 +00:00
dependabot[bot]
6a5f098073 Bump node from 24-alpine to 25-alpine in /frontend (#1501)
Bumps node from 24-alpine to 25-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node&package-manager=docker&previous-version=24-alpine&new-version=25-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 13:18:20 +00:00
dependabot[bot]
b766b2eab9 Bump node from 24-alpine to 25-alpine (#1500)
Bumps node from 24-alpine to 25-alpine.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node&package-manager=docker&previous-version=24-alpine&new-version=25-alpine)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 13:18:09 +00:00
Erik Vroon
e988b9b6a5 Modify Dependabot config for weekly updates and new ecosystems (#1499)
Updated Dependabot configuration to change update intervals to weekly
and added support for Docker and Docker Compose ecosystems.
2025-12-31 13:15:58 +00:00
Erik Vroon
1522734d2c Update docs to include serve_frontend env var (#1496) v3.0.0-rc1 2025-12-29 19:54:42 +00:00
Erik Vroon
4537a37d17 Use new combined docker image in docker compose (#1497) 2025-12-29 20:52:49 +01:00
Erik Vroon
25262a59f9 Allow running backend on prefixed url (#1495) 2025-12-29 20:28:17 +01:00
Erik Vroon
f760d6d685 Build new docker image (#1494)
Build the new combined Docker image that serves both backend and
frontend
2025-12-29 19:48:15 +01:00
Erik Vroon
bf8e4f0f05 Unignore uv.lock file (#1493) 2025-12-29 18:41:10 +00:00