mirror/bracket
1
0 Fork 0
mirror of https://github.com/evroon/bracket.git synced 2026-09-14 15:11:38 -04:00
Code Issues Packages Projects Releases Wiki Activity
1,459 Commits 11 Branches 41 Tags
master
Commit Graph
1459 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 0ec35fdda4 Bump next from 16.2.11 to 16.3.0 in /docs (#1816) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [next](https://github.com/vercel/next.js) from 16.2.11 to 16.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases">next's
releases</a>.</em></p>
<blockquote>
<h2>v16.3.0</h2>
<h3>Core Changes</h3>
<ul>
<li>Update vendored lodash to 4.17.23 to fix CVE-2025-13465: <a
href="https://redirect.github.com/vercel/next.js/issues/91558">#91558</a></li>
<li>Fix invalid HTML response for route-level RSC requests in deployment
adapter: <a
href="https://redirect.github.com/vercel/next.js/issues/91541">#91541</a></li>
<li>Normalize encoded dynamic placeholders in app routes: <a
href="https://redirect.github.com/vercel/next.js/issues/91603">#91603</a></li>
<li>Fix(pages-router): restore Content-Length and ETag for /_next/data/
JSON responses: <a
href="https://redirect.github.com/vercel/next.js/issues/90304">#90304</a></li>
<li>Update tokio from 1.43.0 to 1.47.3: <a
href="https://redirect.github.com/vercel/next.js/issues/90945">#90945</a></li>
<li>[turbopack] Simplify snapshotting logic: <a
href="https://redirect.github.com/vercel/next.js/issues/91178">#91178</a></li>
<li>Turbopack: enable server HMR for app route handlers: <a
href="https://redirect.github.com/vercel/next.js/issues/91466">#91466</a></li>
<li>turbo-tasks-backend: batch find_and_schedule_dirty using
for_each_task_meta: <a
href="https://redirect.github.com/vercel/next.js/issues/91497">#91497</a></li>
<li>[turbopack] Use bail! instead of panic! for duplicate module ident
error: <a
href="https://redirect.github.com/vercel/next.js/issues/91636">#91636</a></li>
<li>Skip loadBindings() Lightning CSS check during next start: <a
href="https://redirect.github.com/vercel/next.js/issues/91538">#91538</a></li>
<li>turbo-tasks-backend: batch schedule dirty tasks in
aggregation_update: <a
href="https://redirect.github.com/vercel/next.js/issues/91461">#91461</a></li>
<li>Turbopack: Add importModule() support to webpack loaders: <a
href="https://redirect.github.com/vercel/next.js/issues/89630">#89630</a></li>
<li>turbo-persistence: fix mmap page alignment and improve error context
in MetaFile::open_internal: <a
href="https://redirect.github.com/vercel/next.js/issues/91640">#91640</a></li>
<li>turbopack-css: demote recoverable CSS parse warnings to Warning
severity: <a
href="https://redirect.github.com/vercel/next.js/issues/91524">#91524</a></li>
<li>feat(node-streams): add config flag, define-env, and env precedence
test: <a
href="https://redirect.github.com/vercel/next.js/issues/90427">#90427</a></li>
<li>Rename /_next/webpack-hmr to /_next/hmr: <a
href="https://redirect.github.com/vercel/next.js/issues/91415">#91415</a></li>
<li>Add per-slot error attribution for instant validation using slot
markers and config depth preference: <a
href="https://redirect.github.com/vercel/next.js/issues/91610">#91610</a></li>
<li>Handle encoded params further: <a
href="https://redirect.github.com/vercel/next.js/issues/91627">#91627</a></li>
<li>[turbopack] Respect <code>{eval:true}</code> in worker_threads
constructors: <a
href="https://redirect.github.com/vercel/next.js/issues/91666">#91666</a></li>
<li>Fix missing route in otel spans without base-server: <a
href="https://redirect.github.com/vercel/next.js/issues/91665">#91665</a></li>
<li>[turbopack] Optimize compaction cpu usage: <a
href="https://redirect.github.com/vercel/next.js/issues/91468">#91468</a></li>
<li>Fix layout segment optimization: move app-page imports to
server-utility transition: <a
href="https://redirect.github.com/vercel/next.js/issues/91701">#91701</a></li>
<li>Fix server actions in standalone mode with
<code>cacheComponents</code>: <a
href="https://redirect.github.com/vercel/next.js/issues/91711">#91711</a></li>
<li>turbo-persistence: remove Unmergeable mmap advice: <a
href="https://redirect.github.com/vercel/next.js/issues/91713">#91713</a></li>
<li>turbopack: move &quot;compact database&quot; tracing span to backend
layer: <a
href="https://redirect.github.com/vercel/next.js/issues/91693">#91693</a></li>
<li>Turbopack: lazy require metadata and handle TLA: <a
href="https://redirect.github.com/vercel/next.js/issues/91705">#91705</a></li>
<li>Fix adapter outputs for dynamic metadata routes: <a
href="https://redirect.github.com/vercel/next.js/issues/91680">#91680</a></li>
<li>Turbopack: fix webpack loader runner layer: <a
href="https://redirect.github.com/vercel/next.js/issues/91727">#91727</a></li>
<li>[turbopack] Remove incorrect debug_assert in try_read_task_cell: <a
href="https://redirect.github.com/vercel/next.js/issues/91699">#91699</a></li>
<li>Add module count field to module graph tracing spans: <a
href="https://redirect.github.com/vercel/next.js/issues/91697">#91697</a></li>
<li>turbopack-cli: add --persistent-caching flag for filesystem-backed
cache: <a
href="https://redirect.github.com/vercel/next.js/issues/91657">#91657</a></li>
<li>Turbopack: pull in updated vercel/nft tests: <a
href="https://redirect.github.com/vercel/next.js/issues/91651">#91651</a></li>
<li>[turbopack] Improve regressed build speed on cross-compiled MUSL: <a
href="https://redirect.github.com/vercel/next.js/issues/91477">#91477</a></li>
<li>[Segment Bundling] [Scaffolding] Ensure inlining hint correctness:
<a
href="https://redirect.github.com/vercel/next.js/issues/91320">#91320</a></li>
<li>[Segment Bundling] [Scaffolding] Track which segments can be omitted
from prefetch: <a
href="https://redirect.github.com/vercel/next.js/issues/91438">#91438</a></li>
<li>Avoid deprecated TS node10 moduleResolution defaults: <a
href="https://redirect.github.com/vercel/next.js/issues/91847">#91847</a></li>
<li>[turbopack] Rebuild the docker build scripts: <a
href="https://redirect.github.com/vercel/next.js/issues/91799">#91799</a></li>
<li>Fix TS6 baseUrl deprecation for extended tsconfig: <a
href="https://redirect.github.com/vercel/next.js/issues/91855">#91855</a></li>
<li>Add <code>next internal post-build</code> CLI command for Turbopack
database compaction: <a
href="https://redirect.github.com/vercel/next.js/issues/91336">#91336</a></li>
<li>Turbopack: Define <code>Effect</code> as a trait instead of a
closure: <a
href="https://redirect.github.com/vercel/next.js/issues/89080">#89080</a></li>
<li>Turbopack: Implement TraceRawVcs and NonLocalValue correctly for
Effects: <a
href="https://redirect.github.com/vercel/next.js/issues/89133">#89133</a></li>
<li>turbo-tasks-backend: improve print_cache_item_size instrumentation:
<a
href="https://redirect.github.com/vercel/next.js/issues/91742">#91742</a></li>
<li>Turbopack: switch from base40 to base38 hash encoding (remove ~ and
. from charset): <a
href="https://redirect.github.com/vercel/next.js/issues/91832">#91832</a></li>
<li>Use charCodeAt for normalizePathTrailingSlash: <a
href="https://redirect.github.com/vercel/next.js/issues/91380">#91380</a></li>
<li>Turbopack: Only patch lockfile when bindings fails to load: <a
href="https://redirect.github.com/vercel/next.js/issues/91379">#91379</a></li>
<li>[create-next-app] Skip interactive prompts when CLI flags are
provided: <a
href="https://redirect.github.com/vercel/next.js/issues/91840">#91840</a></li>
<li>[devtools] Make instant navs panel draggable: <a
href="https://redirect.github.com/vercel/next.js/issues/91914">#91914</a></li>
<li>[Segment Bundling] Bundle static prefetches based on size: <a
href="https://redirect.github.com/vercel/next.js/issues/91439">#91439</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vercel/next.js/commit/d73f5622e226358dcef8cf7a8a373333ff265ae7"><code>d73f562</code></a>
v16.3.0</li>
<li><a
href="https://github.com/vercel/next.js/commit/2e0d4cbe5d54346012b560925c6a58440753e6d6"><code>2e0d4cb</code></a>
Edits to turbopackFileSystemCache (<a
href="https://redirect.github.com/vercel/next.js/issues/96531">#96531</a>)</li>
<li><a
href="https://github.com/vercel/next.js/commit/86df9c7588488355cdd6bd08f622efc32a4cb753"><code>86df9c7</code></a>
docs: cover direct visits and client navigations in the instant() e2e
example...</li>
<li><a
href="https://github.com/vercel/next.js/commit/47a52c0d6bc2b67648ba770972ec962219e68d4d"><code>47a52c0</code></a>
[turbopack / next.js] Add an end-to-end test for new root detection (<a
href="https://redirect.github.com/vercel/next.js/issues/96544">#96544</a>)</li>
<li><a
href="https://github.com/vercel/next.js/commit/8e878d484859c86c147f4a6f7adcec36889d3831"><code>8e878d4</code></a>
Remove implicit Partial Prefetching opt-in from <code>instant</code> (<a
href="https://redirect.github.com/vercel/next.js/issues/96539">#96539</a>)</li>
<li><a
href="https://github.com/vercel/next.js/commit/e37ddd19f5e80d0a856c41b503efa376f1e928b9"><code>e37ddd1</code></a>
Fix deploy test TypeScript exclusions (<a
href="https://redirect.github.com/vercel/next.js/issues/96545">#96545</a>)</li>
<li><a
href="https://github.com/vercel/next.js/commit/8a4920c15ab9418e8f967f186af9e76ee4f9ee76"><code>8a4920c</code></a>
docs: clarify first-party Skills workflows (<a
href="https://redirect.github.com/vercel/next.js/issues/96495">#96495</a>)</li>
<li><a
href="https://github.com/vercel/next.js/commit/4344b83a6beaf0541441c527c56fbce3dd07b202"><code>4344b83</code></a>
Flag newly disabled deploy tests (<a
href="https://redirect.github.com/vercel/next.js/issues/96505">#96505</a>)</li>
<li><a
href="https://github.com/vercel/next.js/commit/459617a12598de63c34cec4d5c267207c591d13f"><code>459617a</code></a>
fix: double fragment on navigation (<a
href="https://redirect.github.com/vercel/next.js/issues/93132">#93132</a>)</li>
<li><a
href="https://github.com/vercel/next.js/commit/cbf0cef687c9914a2cf9aa6a1ad1d461895a9069"><code>cbf0cef</code></a>
Enable TypeScript CLI by default (<a
href="https://redirect.github.com/vercel/next.js/issues/96497">#96497</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v16.2.11...v16.3.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:16:52 +00:00
dependabot[bot] 3ab0a25eb9 Bump oxfmt from 0.61.0 to 0.62.0 in /docs (#1813) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt)
from 0.61.0 to 0.62.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md">oxfmt's
changelog</a>.</em></p>
<blockquote>
<h2>[0.62.0] - 2026-08-03</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>e6e584b oxfmt: Type jsdoc. enum options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25008">#25008</a>)
(leaysgur)</li>
</ul>
<h2>[0.59.0] - 2026-07-13</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>415fe1e oxfmt: Error on ignorePatterns that cannot match files
outside the config directory (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24286">#24286</a>)
(leaysgur)</li>
</ul>
<h2>[0.55.0] - 2026-06-15</h2>
<h3>🚀 Features</h3>
<ul>
<li>9a2788b linter/unicorn: Implement <code>prefer-export-from</code>
rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22935">#22935</a>)
(AliceLanniste)</li>
</ul>
<h2>[0.54.0] - 2026-06-08</h2>
<h3>📚 Documentation</h3>
<ul>
<li>dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22965">#22965</a>)
(Boshen)</li>
<li>f88961a oxfmt: Annotate each config option with supported languages
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22953">#22953</a>)
(leaysgur)</li>
</ul>
<h2>[0.52.0] - 2026-05-26</h2>
<h3>🚀 Features</h3>
<ul>
<li>16b8058 oxfmt: Support <code>vite-plus/resolveConfig</code> for
vite.config.ts (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22454">#22454</a>)
(leaysgur)</li>
</ul>
<h2>[0.50.0] - 2026-05-15</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>43b9978 formatter/sort_imports: Treat subpath imports as internal
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22440">#22440</a>)
(leaysgur)</li>
</ul>
<h2>[0.49.0] - 2026-05-11</h2>
<h3>🚀 Features</h3>
<ul>
<li>6e8e818 oxfmt: Experimental .svelte support (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/21700">#21700</a>)
(leaysgur)</li>
</ul>
<h2>[0.45.0] - 2026-04-13</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>50c389b oxfmt: Support <code>.editorconfig</code>
<code>quote_type</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/20989">#20989</a>)
(leaysgur)</li>
</ul>
<h2>[0.44.0] - 2026-04-06</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/9a423f2f485b79c2353c49442c0c7f60f900261d"><code>9a423f2</code></a>
release(apps): oxlint v1.77.0 &amp;&amp; oxfmt v0.62.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25251">#25251</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/e6e584b9bee0f85f45874854c79dbf23ae6e527a"><code>e6e584b</code></a>
fix(oxfmt): type jsdoc. enum options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25008">#25008</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxfmt_v0.62.0/npm/oxfmt">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:16:23 +00:00
dependabot[bot] 25a68cab78 Bump oxfmt from 0.61.0 to 0.62.0 in /frontend (#1823) 
Bumps [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt)
from 0.61.0 to 0.62.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md">oxfmt's
changelog</a>.</em></p>
<blockquote>
<h2>[0.62.0] - 2026-08-03</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>e6e584b oxfmt: Type jsdoc. enum options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25008">#25008</a>)
(leaysgur)</li>
</ul>
<h2>[0.59.0] - 2026-07-13</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>415fe1e oxfmt: Error on ignorePatterns that cannot match files
outside the config directory (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24286">#24286</a>)
(leaysgur)</li>
</ul>
<h2>[0.55.0] - 2026-06-15</h2>
<h3>🚀 Features</h3>
<ul>
<li>9a2788b linter/unicorn: Implement <code>prefer-export-from</code>
rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22935">#22935</a>)
(AliceLanniste)</li>
</ul>
<h2>[0.54.0] - 2026-06-08</h2>
<h3>📚 Documentation</h3>
<ul>
<li>dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22965">#22965</a>)
(Boshen)</li>
<li>f88961a oxfmt: Annotate each config option with supported languages
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22953">#22953</a>)
(leaysgur)</li>
</ul>
<h2>[0.52.0] - 2026-05-26</h2>
<h3>🚀 Features</h3>
<ul>
<li>16b8058 oxfmt: Support <code>vite-plus/resolveConfig</code> for
vite.config.ts (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22454">#22454</a>)
(leaysgur)</li>
</ul>
<h2>[0.50.0] - 2026-05-15</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>43b9978 formatter/sort_imports: Treat subpath imports as internal
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22440">#22440</a>)
(leaysgur)</li>
</ul>
<h2>[0.49.0] - 2026-05-11</h2>
<h3>🚀 Features</h3>
<ul>
<li>6e8e818 oxfmt: Experimental .svelte support (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/21700">#21700</a>)
(leaysgur)</li>
</ul>
<h2>[0.45.0] - 2026-04-13</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>50c389b oxfmt: Support <code>.editorconfig</code>
<code>quote_type</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/20989">#20989</a>)
(leaysgur)</li>
</ul>
<h2>[0.44.0] - 2026-04-06</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/9a423f2f485b79c2353c49442c0c7f60f900261d"><code>9a423f2</code></a>
release(apps): oxlint v1.77.0 &amp;&amp; oxfmt v0.62.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25251">#25251</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/e6e584b9bee0f85f45874854c79dbf23ae6e527a"><code>e6e584b</code></a>
fix(oxfmt): type jsdoc. enum options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25008">#25008</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxfmt_v0.62.0/npm/oxfmt">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oxfmt&package-manager=npm_and_yarn&previous-version=0.61.0&new-version=0.62.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:15:09 +00:00
dependabot[bot] e513bf2464 Bump @mantine/form from 9.4.2 to 9.5.1 in /frontend (#1822) 
Bumps
[@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form)
from 9.4.2 to 9.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mantinedev/mantine/releases">@​mantine/form's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<ul>
<li><code>[@mantine/tiptap]</code> Fix controls being initially
disabledbefore element is focused</li>
<li><code>[@mantine/tiptap]</code> Fix source code control wrapping
content with extra p tag</li>
<li><code>[@mantine/hooks]</code> use-scroll-spy: Allow usage with refs
(<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9025">#9025</a>)</li>
<li><code>[@mantine/core]</code> ColorInput: Add support for fullWidth
prop (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9061">#9061</a>)</li>
<li><code>[@mantine/core]</code> Checkbox: Fix incottect indeterminate
aria attributes handling in Checkbox.Card (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9095">#9095</a>)</li>
<li><code>[@mantine/core]</code> FloatingIndicator: Fix position and
size calculation under scaled ancestors (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9071">#9071</a>)</li>
<li><code>[@mantine/core]</code> Tooltip: Add interactive prop support
(<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9072">#9072</a>)</li>
<li><code>[@mantine/core]</code> Cascader: Add safe area polygon
support</li>
<li><code>[@mantine/core]</code> PasswordInput: Add option to change
whether the visibility toggle is focusable (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9090">#9090</a>)</li>
<li><code>[@mantine/charts]</code> ScatterChart: Add option to add
second y axis</li>
<li><code>[@mantine/schedule]</code> YearView: Add
<code>renderDay</code> prop support</li>
<li><code>[@mantine/schedule]</code> YearView: Add option to hide
weekend days</li>
<li><code>[@mantine/core]</code> InputWrapper: Fix <code>component:
div</code> triggering typescript error if passed to
<code>descriptionProps</code></li>
<li><code>[@mantine/schedule]</code> ResourcesMonthView: Add option to
resize events</li>
<li><code>[@mantine/core]</code> FloatingWindow: Add support for
<code>onSizeChange</code> and <code>onResizeStart</code> props (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9085">#9085</a>)</li>
</ul>
<h2>9.5.0 🤖</h2>
<p><a href="https://mantine.dev/changelog/9-5-0">View changelog with
demos on mantine.dev website</a></p>
<h2>Support Mantine development</h2>
<p>You can now sponsor Mantine development with <a
href="https://opencollective.com/mantinedev">OpenCollective</a>.
All funds are used to improve Mantine and create new features and
components.</p>
<h2>Migration to oxc</h2>
<p>Mantine has migrated its linting and formatting toolchain from ESLint
and Prettier
to <a href="https://oxc.rs">oxc</a> – <a
href="https://www.npmjs.com/package/oxlint">oxlint</a> is now used
as the linter and <a
href="https://www.npmjs.com/package/oxfmt">oxfmt</a> as the formatter.
Both
tools are written in Rust and are significantly faster than their
predecessors, which
makes linting and formatting the entire codebase almost instant.</p>
<p>The shared configuration is available as a new
<a href="https://mantine.dev/oxc-config-mantine">oxc-config-mantine</a>
package (a replacement for the previous
<code>eslint-config-mantine</code>). You can use it in your own projects
to follow the same
code style and conventions as Mantine.</p>
<h2>Native level select in date pickers</h2>
<p><a href="https://mantine.dev/dates/date-picker">DatePicker</a> and
all other date picker components (<a
href="https://mantine.dev/dates/date-picker-input">DatePickerInput</a>,
<a href="https://mantine.dev/dates/month-picker">MonthPicker</a>, <a
href="https://mantine.dev/dates/year-picker">YearPicker</a>, <a
href="https://mantine.dev/dates/date-time-picker">DateTimePicker</a>,
etc.)
now support the <code>withNativeLevelSelect</code> prop. When enabled,
it replaces the calendar header level button
with native <code>&lt;select&gt;</code> elements, making it easy to
quickly navigate to a specific month and year.</p>
<pre lang="tsx"><code>import { DatePicker } from '@mantine/dates';
<p>function Demo() {
return &lt;DatePicker withNativeLevelSelect yearsSelectRange={[2020,
2035]} /&gt;;
&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mantinedev/mantine/commit/0f57eaf5ae90c9e870fbb2a4cdd61a1d58c4c01d"><code>0f57eaf</code></a>
[release] Version: 9.5.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/ca9bc6f156b63f1a10918d94ec31ec18e4e60546"><code>ca9bc6f</code></a>
[release] Version: 9.5.1-alpha.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/8f1ad1bbe545c9cafafc5aef5b059d3d48e676a6"><code>8f1ad1b</code></a>
[release] Version: 9.5.1-alpha.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/f1d330613f54dc9319d176e6d8ba5ebff233da18"><code>f1d3306</code></a>
[release] Version: 9.5.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/732056219a0283f5822001981d7f652e632c4c87"><code>7320562</code></a>
[release] Version: 9.4.3</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/de21a8203060ba29441ab7623244339748e4319d"><code>de21a82</code></a>
[release] Version: 9.4.3-alpha.0</li>
<li>See full diff in <a
href="https://github.com/mantinedev/mantine/commits/9.5.1/packages/@mantine/form">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​mantine/form</code> since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@mantine/form&package-manager=npm_and_yarn&previous-version=9.4.2&new-version=9.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:14:20 +00:00
dependabot[bot] ee59ae1686 Bump starlette from 1.3.1 to 1.6.0 in /backend (#1820) 
Bumps [starlette](https://github.com/Kludex/starlette) from 1.3.1 to
1.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/starlette/releases">starlette's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add <code>max_body_size</code> to <code>Starlette</code> and route
classes by <a href="https://github.com/Kludex"><code>@​Kludex</code></a>
in <a
href="https://redirect.github.com/Kludex/starlette/pull/3431">Kludex/starlette#3431</a></li>
<li>Expose <code>http.response.debug</code> info via response extensions
by <a href="https://github.com/y2kbugger"><code>@​y2kbugger</code></a>
in <a
href="https://redirect.github.com/Kludex/starlette/pull/3130">Kludex/starlette#3130</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/y2kbugger"><code>@​y2kbugger</code></a>
made their first contribution in <a
href="https://redirect.github.com/Kludex/starlette/pull/3130">Kludex/starlette#3130</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/starlette/compare/1.5.1...1.6.0">https://github.com/Kludex/starlette/compare/1.5.1...1.6.0</a></p>
<h2>Version 1.5.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Reject inverted single-byte Range like <code>bytes=5-4</code> by <a
href="https://github.com/nikolauspschuetz"><code>@​nikolauspschuetz</code></a>
in <a
href="https://redirect.github.com/encode/starlette/pull/3389">encode/starlette#3389</a></li>
<li>Limit <code>FileResponse</code> to 100 ranges by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/encode/starlette/pull/3430">encode/starlette#3430</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/encode/starlette/compare/1.5.0...1.5.1">https://github.com/encode/starlette/compare/1.5.0...1.5.1</a></p>
<h2>Version 1.5.0</h2>
<p>This release is all about giving <code>GZipMiddleware</code> some
love. 🗜️</p>
<h2>What's Changed</h2>
<ul>
<li>Add <code>exclude_content_types</code> parameter to
<code>GZipMiddleware</code> by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/encode/starlette/pull/3418">encode/starlette#3418</a></li>
<li>Flush GZip output for each streamed chunk by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/encode/starlette/pull/3419">encode/starlette#3419</a></li>
<li>Skip compression of partial responses in <code>GZipMiddleware</code>
by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/encode/starlette/pull/3420">encode/starlette#3420</a></li>
<li>Expand default excluded content types in <code>GZipMiddleware</code>
by <a href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/encode/starlette/pull/3421">encode/starlette#3421</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/encode/starlette/compare/1.4.1...1.5.0">https://github.com/encode/starlette/compare/1.4.1...1.5.0</a></p>
<h2>Version 1.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Default <code>thread_minimum_size</code> in
<code>GZipResponder</code> by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/Kludex/starlette/pull/3415">Kludex/starlette#3415</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/starlette/compare/1.4.0...1.4.1">https://github.com/Kludex/starlette/compare/1.4.0...1.4.1</a></p>
<h2>Version 1.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Lazily allocate GZipMiddleware compression resources by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/Kludex/starlette/pull/3407">Kludex/starlette#3407</a></li>
<li>Use <code>zlib.compressobj</code> instead of <code>GzipFile</code>
in <code>GZipMiddleware</code> by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/Kludex/starlette/pull/3411">Kludex/starlette#3411</a></li>
<li>Offload large GZip compression by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/Kludex/starlette/pull/3410">Kludex/starlette#3410</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/benberryallwood"><code>@​benberryallwood</code></a>
made their first contribution in <a
href="https://redirect.github.com/Kludex/starlette/pull/3334">Kludex/starlette#3334</a></li>
<li><a href="https://github.com/lkk7"><code>@​lkk7</code></a> made their
first contribution in <a
href="https://redirect.github.com/Kludex/starlette/pull/3359">Kludex/starlette#3359</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/starlette/compare/1.3.1...1.4.0">https://github.com/Kludex/starlette/compare/1.3.1...1.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/starlette/blob/main/docs/release-notes.md">starlette's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.0 (August 8, 2026)</h2>
<h4>Added</h4>
<ul>
<li>Add <code>max_body_size</code> to <code>Starlette</code> and route
classes <a
href="https://redirect.github.com/encode/starlette/pull/3431">#3431</a>.</li>
<li>Expose <code>http.response.debug</code> information via response
extensions <a
href="https://redirect.github.com/encode/starlette/pull/3130">#3130</a>.</li>
</ul>
<h2>1.5.1 (August 8, 2026)</h2>
<h4>Fixed</h4>
<ul>
<li>Reject inverted single-byte ranges in <code>FileResponse</code> <a
href="https://redirect.github.com/encode/starlette/pull/3389">#3389</a>.</li>
<li>Limit <code>FileResponse</code> to 100 ranges <a
href="https://redirect.github.com/encode/starlette/pull/3430">#3430</a>.</li>
</ul>
<h2>1.5.0 (August 8, 2026)</h2>
<h4>Added</h4>
<ul>
<li>Add <code>exclude_content_types</code> parameter to
<code>GZipMiddleware</code> <a
href="https://redirect.github.com/encode/starlette/pull/3418">#3418</a>.</li>
</ul>
<h4>Changed</h4>
<ul>
<li>Expand default excluded content types in <code>GZipMiddleware</code>
<a
href="https://redirect.github.com/encode/starlette/pull/3421">#3421</a>.</li>
</ul>
<h4>Fixed</h4>
<ul>
<li>Flush GZip output for each streamed chunk <a
href="https://redirect.github.com/encode/starlette/pull/3419">#3419</a>.</li>
<li>Skip compression of partial responses in <code>GZipMiddleware</code>
<a
href="https://redirect.github.com/encode/starlette/pull/3420">#3420</a>.</li>
</ul>
<h2>1.4.1 (August 5, 2026)</h2>
<h4>Fixed</h4>
<ul>
<li>Default <code>thread_minimum_size</code> to 128 KiB in
<code>GZipResponder</code>, keeping it usable without the new keyword
argument <a
href="https://redirect.github.com/encode/starlette/pull/3415">#3415</a>.</li>
</ul>
<h2>1.4.0 (August 5, 2026)</h2>
<h4>Added</h4>
<ul>
<li>Offload large GZip compression to a worker thread, keeping the event
loop responsive. <code>GZipMiddleware</code> accepts a new
<code>thread_minimum_size</code> parameter (default 128 KiB) controlling
the minimum body chunk size compressed in a thread <a
href="https://redirect.github.com/encode/starlette/pull/3410">#3410</a>.</li>
</ul>
<h4>Changed</h4>
<ul>
<li>Use <code>zlib.compressobj</code> instead of <code>GzipFile</code>
in <code>GZipMiddleware</code>, reducing memory usage during compression
<a
href="https://redirect.github.com/encode/starlette/pull/3411">#3411</a>.</li>
<li>Lazily allocate <code>GZipMiddleware</code> compression resources,
avoiding compressor allocation for responses that are never compressed
<a
href="https://redirect.github.com/encode/starlette/pull/3407">#3407</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Kludex/starlette/commit/4f250d6b814587e20c5365f0a5f0c4d42bcb929f"><code>4f250d6</code></a>
Version 1.6.0 (<a
href="https://redirect.github.com/Kludex/starlette/issues/3434">#3434</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/9eea41ad3c26ad21b9bdfe4578c1cdad6c9b9ac2"><code>9eea41a</code></a>
Expose <code>http.response.debug</code> info via response extensions (<a
href="https://redirect.github.com/Kludex/starlette/issues/3130">#3130</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/38f8999a229610b36f39d11f67d80515a15c6330"><code>38f8999</code></a>
Add <code>max_body_size</code> to <code>Starlette</code> and route
classes (<a
href="https://redirect.github.com/Kludex/starlette/issues/3431">#3431</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/c41236c03868fb3779a64101f4ea88cd47877e23"><code>c41236c</code></a>
Version 1.5.1 (<a
href="https://redirect.github.com/Kludex/starlette/issues/3432">#3432</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/9c500db197859dba4a8db13fa8e7d2c55de8152c"><code>9c500db</code></a>
Limit <code>FileResponse</code> to 100 ranges (<a
href="https://redirect.github.com/Kludex/starlette/issues/3430">#3430</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/78ae82cad482fe66a73fb1217f0a6609b3f998f6"><code>78ae82c</code></a>
Reject inverted single-byte Range like bytes=5-4 (<a
href="https://redirect.github.com/Kludex/starlette/issues/3389">#3389</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/c1d6edaf43920104d4389e983c3e0314f6af14cf"><code>c1d6eda</code></a>
chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 (<a
href="https://redirect.github.com/Kludex/starlette/issues/3429">#3429</a>)</li>
<li><a
href="https://github.com/Kludex/starlette/commit/ee66ca48418780d6415d231851b31464febc32de"><code>ee66ca4</code></a>
chore(deps): bump the python-packages group across 1 directory with 8
updates...</li>
<li><a
href="https://github.com/Kludex/starlette/commit/00d10167523f819d39d5ca36732348d58645a447"><code>00d1016</code></a>
fix(tests): skip test_staticfiles_filename_too_long on Windows where
os.pathc...</li>
<li><a
href="https://github.com/Kludex/starlette/commit/d96887ea7b49db3d1d15994be6438c7fe99936f4"><code>d96887e</code></a>
Add Pydantic Logfire banner to the docs (<a
href="https://redirect.github.com/Kludex/starlette/issues/3428">#3428</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Kludex/starlette/compare/1.3.1...1.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=starlette&package-manager=uv&previous-version=1.3.1&new-version=1.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:14:09 +00:00
dependabot[bot] 6ea6b474ba Bump swr from 2.4.1 to 2.5.0 in /frontend (#1819) 
Bumps [swr](https://github.com/vercel/swr) from 2.4.1 to 2.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/swr/releases">swr's
releases</a>.</em></p>
<blockquote>
<h2>v.2.5.0</h2>
<h2>Features</h2>
<h3>RSC cache preloading</h3>
<p>Preload data in React Server Components and pass it to client hooks
through <code>SWRConfig</code>. This avoids a duplicate initial browser
request and hydrates the result into the SWR cache. The new
<code>cacheData</code> option is experimental.</p>
<p><a
href="https://redirect.github.com/vercel/swr/pull/4275">vercel/swr#4275</a></p>
<h3>New <code>unload()</code> API</h3>
<p>Use <code>unload()</code> to clear the entire SWR cache and discard
in-flight requests and mutations. Mounted hooks revalidate by default,
or you can pass <code>{ revalidate: false }</code> to keep the cache
empty until the next revalidation.</p>
<p><a
href="https://redirect.github.com/vercel/swr/pull/4298">vercel/swr#4298</a></p>
<h2>Fixes</h2>
<ul>
<li>Fixed the <code>swr/_internal</code> React Server export so it
resolves correctly in the published package by <a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.4.2...v2.5.0">https://github.com/vercel/swr/compare/v2.4.2...v2.5.0</a></p>
<h2>v2.5.0-beta.1</h2>
<h2>Feature</h2>
<ul>
<li>feat: unload() api by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4298">vercel/swr#4298</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.5.0-beta.0...v2.5.0-beta.1">https://github.com/vercel/swr/compare/v2.5.0-beta.0...v2.5.0-beta.1</a></p>
<h2>v2.5.0-beta.0</h2>
<h2>Features</h2>
<ul>
<li>feat: rsc fetches and prefill swr cache by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4275">vercel/swr#4275</a></li>
</ul>
<h3>Patches</h3>
<ul>
<li>fix: point _internal react-server export at existing file by <a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.4.2...v2.5.0-beta.0">https://github.com/vercel/swr/compare/v2.4.2...v2.5.0-beta.0</a></p>
<h2>v2.4.2</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vercel/swr/commit/8b9bb976b21f4d06c777ea356a5ee0fef108456e"><code>8b9bb97</code></a>
2.5.0 (<a
href="https://redirect.github.com/vercel/swr/issues/4309">#4309</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/4a984f299de2254059e1789ebd03f9714656a3b7"><code>4a984f2</code></a>
chore: upgrade bunchee to 7.0.0 (<a
href="https://redirect.github.com/vercel/swr/issues/4307">#4307</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/6e68cdce11ba222e08b609b004967053fd8ea602"><code>6e68cdc</code></a>
chore: upgrade to TypeScript 7 (<a
href="https://redirect.github.com/vercel/swr/issues/4305">#4305</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/b7bb1e03077917dc16930310318a98826fe4b6bf"><code>b7bb1e0</code></a>
chore: bump bunchee to 6.12.2 (<a
href="https://redirect.github.com/vercel/swr/issues/4304">#4304</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/fc7ac116b2a2bfdfa43ec8b08753a77d6c3de93e"><code>fc7ac11</code></a>
2.5.0-beta.1 (<a
href="https://redirect.github.com/vercel/swr/issues/4299">#4299</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/723867fde8f0d0cfeb82362bc34d8971c61a1565"><code>723867f</code></a>
feat: unload() api (<a
href="https://redirect.github.com/vercel/swr/issues/4298">#4298</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/b58d7d06004b5f52d486c09ca6e9c2f62195d703"><code>b58d7d0</code></a>
2.5.0-beta.0 (<a
href="https://redirect.github.com/vercel/swr/issues/4291">#4291</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/46c9a736818f9fdeab7806b5ec47088502df7cde"><code>46c9a73</code></a>
re-organize e2e (<a
href="https://redirect.github.com/vercel/swr/issues/4289">#4289</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/c822a5df83837e55cb6f886c8381c274f506cfaf"><code>c822a5d</code></a>
chore: use oxfmt and oxlint (<a
href="https://redirect.github.com/vercel/swr/issues/4288">#4288</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/d2e2f2c0c0da98e049b0fdbb917aa7f4944d24ea"><code>d2e2f2c</code></a>
feat: rsc fetches and prefill swr cache (<a
href="https://redirect.github.com/vercel/swr/issues/4275">#4275</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/swr/compare/v2.4.1...v2.5.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for swr since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=swr&package-manager=npm_and_yarn&previous-version=2.4.1&new-version=2.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:13:56 +00:00
dependabot[bot] cbb1e15884 Bump @types/node from 26.1.1 to 26.2.0 in /frontend (#1821) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 26.1.1 to 26.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=26.1.1&new-version=26.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:13:54 +00:00
dependabot[bot] 538deee504 Bump pydantic-settings from 2.14.2 to 2.15.0 in /backend (#1818) 
Bumps [pydantic-settings](https://github.com/pydantic/pydantic-settings)
from 2.14.2 to 2.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pydantic/pydantic-settings/releases">pydantic-settings's
releases</a>.</em></p>
<blockquote>
<h2>v2.15.0</h2>
<h2>Highlights</h2>
<h3>Behavior changes</h3>
<ul>
<li><strong><code>case_sensitive</code> now applies to init kwargs and
config-file sources</strong> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/900">#900</a>).
<code>InitSettingsSource</code> and the JSON/TOML/YAML config sources
previously ignored <code>case_sensitive</code>. Since it defaults to
<code>False</code>, <strong>case-insensitive matching is now the
default</strong> for these sources — e.g.
<code>Settings(TeSt=...)</code> now populates a <code>test</code> field
where it previously did not. Nested keys are still matched
case-sensitively.</li>
<li><strong>Fields with unresolved forward references now emit a
warning</strong> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/901">#901</a>).
Settings sources can silently fail to resolve such fields; they now
raise <code>IncompleteFieldDefinitionWarning</code> telling you to call
<code>model_rebuild()</code>. If you have <code>filterwarnings =
error</code> configured, this may surface as a new failure.</li>
<li><strong>Non-JSON env values for strict fields now raise
<code>ValidationError</code></strong> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/926">#926</a>)
instead of a less specific error.</li>
</ul>
<h3>New features</h3>
<ul>
<li><strong>Show environment variable names in CLI help</strong> via
<code>cli_show_env_vars=True</code> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/860">#860</a>),
so generated <code>--help</code> output doubles as configuration
documentation.</li>
<li><strong><code>PYDANTIC_SETTINGS_DEBUG</code> for debugging settings
resolution</strong> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/906">#906</a>,
<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/913">#913</a>).
Set it to a truthy value with <code>DEBUG</code> logging enabled to see
each source's contribution in priority order, which source won for each
value, and which <code>env_file</code>/secret files were probed, loaded,
or skipped — the long-standing &quot;why isn't my <code>.env</code>
being picked up?&quot; question.</li>
<li><strong><code>toml_table_header</code> for regular TOML
files</strong> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/882">#882</a>,
<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/886">#886</a>,
<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/887">#887</a>),
letting you root settings at a nested table in any TOML file, not just
<code>pyproject.toml</code>.</li>
<li><strong><code>Traversable</code> support for JSON/TOML/YAML file
sources</strong> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/902">#902</a>),
so you can load config packaged inside a distribution — including files
inside a zip or wheel — via <code>importlib.resources.files(...)</code>
without casting to <code>Path</code>.</li>
<li><strong>GCP: <code>project_id</code> can come from an earlier
settings source</strong> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/878">#878</a>),
rather than only from the constructor or
<code>GOOGLE_CLOUD_PROJECT</code>.</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Fix env vars not loading on Windows with
<code>case_sensitive=True</code> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/894">#894</a>).
Windows upper-cases <code>os.environ</code> keys, so fields raised
<code>Field required</code> instead of picking up their values.</li>
<li>Read secret files as UTF-8 instead of the platform locale encoding
(<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/917">#917</a>).
On Windows code pages such as cp1252 this silently corrupted non-ASCII
secrets.</li>
<li>Fix <code>AliasPath</code> on nested model fields not JSON-decoding
env values (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/898">#898</a>).</li>
<li>Fix case-insensitive matching for <strong>optional</strong> nested
models (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/905">#905</a>).</li>
<li>Fix dotenv extras being wrongly claimed by a complex field sharing a
name prefix (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/912">#912</a>)
— e.g. <code>dbx_token</code> being swallowed by a <code>db: dict</code>
field.</li>
<li>Fix <code>nested_model_default_partial_update=True</code> corrupting
discriminated unions (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/876">#876</a>).</li>
<li>Fix <code>Secret</code> subclasses crashing when loaded from the
environment (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/920">#920</a>).</li>
<li>Fix enum names not parsing through nested annotations such as
<code>Optional[Annotated[MyEnum, ...]]</code> with
<code>env_parse_enums=True</code> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/910">#910</a>).</li>
<li>An empty <code>yaml_config_section</code> now falls back to defaults
instead of raising <code>AttributeError: 'NoneType' object has no
attribute 'keys'</code> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/914">#914</a>).</li>
<li><code>NestedSecretsSettingsSource</code> no longer follows symlinks
pointing outside <code>secrets_dir</code> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/889">#889</a>).</li>
<li>GCP: skip the <code>list_secrets</code> call when
<code>case_sensitive=True</code> (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/862">#862</a>),
lowering the required IAM permissions to just
<code>roles/secretmanager.secretAccessor</code>.</li>
<li>AWS: <code>types-boto3[secretsmanager]</code> is no longer required
at runtime (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/880">#880</a>).</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Document JSON parsing of complex env values, plus a
comma-separated-values recipe (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/919">#919</a>).</li>
<li>Recommend an async settings loading pattern (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/908">#908</a>).</li>
<li>Clarify behavior when an unprefixed value is present in a dotenv
file (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/895">#895</a>).</li>
<li>Clarify environment variable helper descriptions (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/867">#867</a>)
and fix assorted typos (<a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/904">#904</a>).</li>
</ul>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>Update documentation link for Pydantic settings by <a
href="https://github.com/hramezani"><code>@​hramezani</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/863">pydantic/pydantic-settings#863</a></li>
<li>Bump the python-packages group with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/865">pydantic/pydantic-settings#865</a></li>
<li>docs: clarify environment variable helper descriptions by <a
href="https://github.com/vip892766gma"><code>@​vip892766gma</code></a>
in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/867">pydantic/pydantic-settings#867</a></li>
<li>Bump the python-packages group with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/870">pydantic/pydantic-settings#870</a></li>
<li>Bump the python-packages group with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/875">pydantic/pydantic-settings#875</a></li>
<li>Skip list_secrets call when case_sensitive=True by <a
href="https://github.com/ecerulm"><code>@​ecerulm</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/862">pydantic/pydantic-settings#862</a></li>
<li>GoogleSecretManagerSettingsSource: read project_id from previous
sources by <a
href="https://github.com/ecerulm"><code>@​ecerulm</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/878">pydantic/pydantic-settings#878</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/f725ca187bee4212e9ef799eefa3cb25be788462"><code>f725ca1</code></a>
Prepare release 2.15.0 (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/930">#930</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/28f35c25fac5d61210d532c31a300d49c0b684a4"><code>28f35c2</code></a>
Bump the python-packages group with 4 updates (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/929">#929</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/9056db049560897229f2603493753bae27b6479f"><code>9056db0</code></a>
test: move function-local imports to the top of test modules (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/927">#927</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/f077e3ab3d9492838c7ef9275a88c95134688095"><code>f077e3a</code></a>
fix: raise ValidationError for non-JSON env values on strict fields (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/926">#926</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/ae25d703c458b57f5a9a425f6ec9a28ad868f980"><code>ae25d70</code></a>
fix: treat Secret subclasses as non-complex fields (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/716">#716</a>)
(<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/920">#920</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/798dcea2a23b08a3e9b37994014e036224f6dd18"><code>798dcea</code></a>
Bump the python-packages group with 4 updates (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/924">#924</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/a190041d353bda2d432ea1908de4c499ae89ee0a"><code>a190041</code></a>
Bump the github-actions group with 4 updates (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/925">#925</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/5d9333282b5c85d65a457c45e4476369b9949726"><code>5d93332</code></a>
Bump the python-packages group with 4 updates (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/921">#921</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/d2fdeda91157140d2ff0c05404f32a9b1218115a"><code>d2fdeda</code></a>
fix: read secret files as UTF-8 instead of the locale encoding (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/917">#917</a>)</li>
<li><a
href="https://github.com/pydantic/pydantic-settings/commit/2256a4e60f83f2da81e7654252562fc4841aa5d4"><code>2256a4e</code></a>
Bump the python-packages group with 3 updates (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/915">#915</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pydantic/pydantic-settings/compare/v2.14.2...v2.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pydantic-settings&package-manager=uv&previous-version=2.14.2&new-version=2.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:13:38 +00:00
dependabot[bot] c86362f1b6 Bump alembic from 1.18.0 to 1.19.1 in /backend (#1817) 
Bumps [alembic](https://github.com/sqlalchemy/alembic) from 1.18.0 to
1.19.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sqlalchemy/alembic/releases">alembic's
releases</a>.</em></p>
<blockquote>
<h1>1.19.1</h1>
<p>Released: August 8, 2026</p>
<h2>bug</h2>
<ul>
<li>
<p><strong>[bug] [autogenerate]</strong> Fixed bug in the check
constraint detection implemented in <a
href="https://redirect.github.com/sqlalchemy/alembic/issues/508">#508</a>
that failed to take into account column bound check constraints,
leading to wrong autogenerate detections.</p>
<p>References: <a
href="https://redirect.github.com/sqlalchemy/alembic/issues/1842">#1842</a></p>
</li>
</ul>
<h1>1.19.0</h1>
<p>Released: August 4, 2026</p>
<h2>changed</h2>
<ul>
<li>
<p><strong>[changed] [installation]</strong> Environmental updates:</p>
<pre><code>- Trove classifiers now include Python 3.15 which is now part
of CI
    integration
<ul>
<li>
<p>Python 3.14 is also added to trove classifiers which had been
previously
omitted</p>
</li>
<li>
<p>Implemented <a href="https://peps.python.org/pep-0604">PEP 604</a>
style unions in type annotations
</code></pre></p>
</li>
</ul>
</li>
</ul>
<h2>feature</h2>
<ul>
<li>
<p><strong>[feature] [autogenerate]</strong> Autogenerate now detects
the addition and removal of named CHECK
constraints, as part of the default autogenerate behavior. Detection is
name-based only; a constraint whose name is unchanged is presumed
equivalent regardless of its expression text, as reliably normalizing
SQL expressions across backends for comparison purposes is not generally
feasible. This behavior is implemented as a plugin named
<code>alembic.autogenerate.checkconstraint_byname</code>, and may be
disabled if not
desired by excluding it from the
<code>EnvironmentContext.configure.autogenerate_plugins</code> list.
Pull request courtesy Francois van Kempen.</p>
<p>References: <a
href="https://redirect.github.com/sqlalchemy/alembic/issues/508">#508</a></p>
</li>
</ul>
<h2>bug</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/sqlalchemy/alembic/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=alembic&package-manager=uv&previous-version=1.18.0&new-version=1.19.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:13:02 +00:00
dependabot[bot] 4561ff7975 Bump lucide-react from 1.28.0 to 1.30.0 in /docs (#1815) 
Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 1.28.0 to 1.30.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.30.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(icons): refine &amp; rename various emoji icons by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4606">lucide-icons/lucide#4606</a></li>
<li>fix(scripts): removed toBeRemovedInVersion from all scripts and
tools by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4674">lucide-icons/lucide#4674</a></li>
<li>feat(icons): added <code>audio-lines-x</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4590">lucide-icons/lucide#4590</a></li>
<li>feat(lab): added <code>chinese-character</code> icon to lab by <a
href="https://github.com/congemcd"><code>@​congemcd</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4212">lucide-icons/lucide#4212</a></li>
<li>test(packages): updates unit test snapshots with
face-slightly-smiling by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4676">lucide-icons/lucide#4676</a></li>
<li>ci(dev): fix post-release job by downloading lucide-font artifact by
name by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4675">lucide-icons/lucide#4675</a></li>
<li>feat(icons): add shield-lock icon by <a
href="https://github.com/Caisere"><code>@​Caisere</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3508">lucide-icons/lucide#3508</a></li>
<li>ci(security): Pin sha actions by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4678">lucide-icons/lucide#4678</a></li>
<li>feat(icons): added <code>broom</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4683">lucide-icons/lucide#4683</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/congemcd"><code>@​congemcd</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4212">lucide-icons/lucide#4212</a></li>
<li><a href="https://github.com/Caisere"><code>@​Caisere</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3508">lucide-icons/lucide#3508</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.29.0...1.30.0">https://github.com/lucide-icons/lucide/compare/1.29.0...1.30.0</a></p>
<h2>Version 1.29.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(<code>@​lucide/lab</code>): Fix lab build by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4618">lucide-icons/lucide#4618</a></li>
<li>feat(copilot): remove incorrect spaces clause from copilot
instructions by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4623">lucide-icons/lucide#4623</a></li>
<li>feat(docs): remove Super and Noodle from showcase by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4626">lucide-icons/lucide#4626</a></li>
<li>chore(deps-dev): bump <code>@​angular/platform-server</code> from
21.2.18 to 21.2.19 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4629">lucide-icons/lucide#4629</a></li>
<li>ci(security): improve security with adding permissions by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4619">lucide-icons/lucide#4619</a></li>
<li>feat(dependabot): added dependabot config, grouping PRs for each
package by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4633">lucide-icons/lucide#4633</a></li>
<li>fix(ci): limit certain github workflows to main repository by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4628">lucide-icons/lucide#4628</a></li>
<li>fix(dependabot): Revert dependabot groups by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4665">lucide-icons/lucide#4665</a></li>
<li>chore(dependabot): Group by dependency group by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4666">lucide-icons/lucide#4666</a></li>
<li>chore(deps-dev): bump the svelte-deps group with 3 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4671">lucide-icons/lucide#4671</a></li>
<li>chore(deps): bump the vue-deps group with 3 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4670">lucide-icons/lucide#4670</a></li>
<li>chore(deps): bump the github-actions group with 13 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4668">lucide-icons/lucide#4668</a></li>
<li>feat(icons): added layer reordering icons by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4617">lucide-icons/lucide#4617</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.28.0...1.29.0">https://github.com/lucide-icons/lucide/compare/1.28.0...1.29.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/lucide-icons/lucide/commit/0f8d48b266e7af1e2bab49ff12ab6ec0795ed204"><code>0f8d48b</code></a>
test(packages): updates unit test snapshots with face-slightly-smiling
(<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4676">#4676</a>)</li>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/1.30.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lucide-react&package-manager=npm_and_yarn&previous-version=1.28.0&new-version=1.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:12:23 +00:00
dependabot[bot] ea3b4e9b3f Bump @types/node from 26.1.0 to 26.2.0 in /docs (#1814) 
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 26.1.0 to 26.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=26.1.0&new-version=26.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:12:06 +00:00
dependabot[bot] 91cf2cd0ee Bump oxlint from 1.76.0 to 1.77.0 in /docs (#1812) 
Bumps [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint)
from 1.76.0 to 1.77.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/releases">oxlint's
releases</a>.</em></p>
<blockquote>
<h2>oxlint v1.77.0 &amp; oxfmt v0.62.0</h2>
<h2>Table of Contents</h2>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/blob/HEAD/#oxlint-v1.77.0">Oxlint
v1.77.0</a></li>
<li><a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/blob/HEAD/#oxfmt-v0.62.0">Oxfmt
v0.62.0</a></li>
</ul>
<h2>Oxlint v1.77.0</h2>
<h3>💥 BREAKING CHANGES</h3>
<ul>
<li>4120da0 semantic: [<strong>BREAKING</strong>] Return borrowed JSDoc
so the parse cache works (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25186">#25186</a>)
(Connor Shea)</li>
<li>067da8c ast: [<strong>BREAKING</strong>] Store single parameter in
<code>TSIndexSignature::parameter</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25154">#25154</a>)
(camc314)</li>
<li>1bdedd1 ast: [<strong>BREAKING</strong>] Introduce
<code>ExportDeclaration</code>, <code>ExportFromDeclaration</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25095">#25095</a>)
(camc314)</li>
<li>c917f20 ast: [<strong>BREAKING</strong>] Introduce
<code>ArrowFunctionBody</code> enum (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24987">#24987</a>)
(camc314)</li>
</ul>
<h3>🚀 Features</h3>
<ul>
<li>0b9f83c linter/oxc/bad-char-at-comparison: Expand coverage (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25001">#25001</a>)
(Mikhail Baev)</li>
<li>1fb3d70 oxlint: Show file:line:col in github format annotation
messages (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25020">#25020</a>)
(Faris Tristan Fabian)</li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>a64b65d linter/unicorn/new-for-builtins: Detect parenthesized member
expression object (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25249">#25249</a>)
(tanakalucky)</li>
<li>9d4592c linter: Reject duplicate JS plugin names (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25243">#25243</a>)
(camc314)</li>
<li>3213e7a linter: Ignore unsigned shifts in prefer-math-trunc (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25240">#25240</a>)
(camc314)</li>
<li>06579da linter/eslint/prefer-promise-reject-errors: Handle ambient
error variables (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25238">#25238</a>)
(camc314)</li>
<li>6a7cd90 linter/oxc/no-async-await: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25222">#25222</a>)
(camc314)</li>
<li>d8e390a linter/oxc/bad-bitwise-operator: Bound token lookups (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25220">#25220</a>)
(camc314)</li>
<li>351a777 linter/import/no-duplicates: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25219">#25219</a>)
(camc314)</li>
<li>4f70fb6 linter/import/consistent-type-specifier-style: Bound token
lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25218">#25218</a>)
(camc314)</li>
<li>b89113c linter/eslint/yoda: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25202">#25202</a>)
(camc314)</li>
<li>7c7cda7 linter/oxc/no-map-spread: Avoid recursive declaration
traversal (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25200">#25200</a>)
(camc314)</li>
<li>99efb30 linter/eslint/prefer-promise-reject-errors: Move category to
<code>pedantic</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25201">#25201</a>)
(camc314)</li>
<li>8edad2a linter/eslint/require-await: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25199">#25199</a>)
(camc314)</li>
<li>5aaec85 linter/eslint/prefer-template: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25197">#25197</a>)
(camc314)</li>
<li>0ea1af4 linter/unicorn/new-for-builtins: Align Date() diagnostic
message with upstream (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25166">#25166</a>)
(tanakalucky)</li>
<li>f6c8575 linter/eslint/prefer-object-spread: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25195">#25195</a>)
(camc314)</li>
<li>20f68e7 oxlint,oxfmt: Respect <code>.gitignore</code> for walk
targets and explicit paths (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25133">#25133</a>)
(leaysgur)</li>
<li>b83993b linter/eslint/prefer-const: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25194">#25194</a>)
(camc314)</li>
<li>aeabf63 linter/eslint/object-shorthand: Bound token lookups (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25193">#25193</a>)
(camc314)</li>
<li>48f302c linter/eslint/no-var: Bound token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25192">#25192</a>)
(camc314)</li>
<li>1f595de linter/eslint/no-unused-vars: Bound token lookups (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25191">#25191</a>)
(camc314)</li>
<li>e52f4c4 linter/eslint/no-unexpected-multiline: Use bounded token
lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25190">#25190</a>)
(camc314)</li>
<li>ca80338 linter/eslint/eqeqeq: Use bounded token lookup (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25189">#25189</a>)
(camc314)</li>
<li>df91684 linter: Make the remaining token lookups comment-aware (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25182">#25182</a>)
(connorshea)</li>
<li>2401bb8 linter/eslint/prefer-const: Skip Svelte and Vue files (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25148">#25148</a>)
(Pitiș Radu)</li>
<li>b870897 linter: Don't match tokens inside comments when locating
spans (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25181">#25181</a>)
(connorshea)</li>
<li>b474da1 linter/typescript/consistent-type-imports: Make token
lookups comment-aware (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25180">#25180</a>)
(connorshea)</li>
<li>81f82db linter: Don't insert an ASI semicolon into an unbraced
statement body (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25160">#25160</a>)
(Vladexy88x)</li>
<li>31333be linter/no-magic-array-flat-depth: Scan for <code>(</code> by
byte offset instead of character count (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25130">#25130</a>)
(connorshea)</li>
<li>56e9c83 linter: Index source text by byte offset instead of char
count (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25131">#25131</a>)
(connorshea)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md">oxlint's
changelog</a>.</em></p>
<blockquote>
<h2>[1.77.0] - 2026-08-03</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>5c0fa61 linter/eslint/no-warning-comments: Unify config structs and
remove manual options docs (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25151">#25151</a>)
(Mikhail Baev)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>9dc7756 linter/typescript/no-unnecessary-condition: Clarify options
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25110">#25110</a>)
(camc314)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/9a423f2f485b79c2353c49442c0c7f60f900261d"><code>9a423f2</code></a>
release(apps): oxlint v1.77.0 &amp;&amp; oxfmt v0.62.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25251">#25251</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/5c0fa61ddbd098fea5101dff356dc9b67adbee95"><code>5c0fa61</code></a>
fix(linter/eslint/no-warning-comments): unify config structs and remove
manua...</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/9dc77567291db6ebd0641284f80bf50163c6a257"><code>9dc7756</code></a>
docs(linter/typescript/no-unnecessary-condition): clarify options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/25110">#25110</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxlint_v1.77.0/npm/oxlint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oxlint&package-manager=npm_and_yarn&previous-version=1.76.0&new-version=1.77.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:11:31 +00:00
dependabot[bot]Copilotevroon
 		1550107777 Bump pyrefly from 1.1.1 to 1.2.0 in /backend (#1808) 
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 1.1.1 to
1.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/pyrefly/releases">pyrefly's
releases</a>.</em></p>
<blockquote>
<h2>Pyrefly v1.2.0</h2>
<p><em>Release date: July 31, 2026</em></p>
<p>Pyrefly v1.2.0 bundles <strong>901 commits</strong> from <strong>59
contributors</strong>.</p>
<hr />
<h2>✨ New &amp; Improved</h2>
<h3>Type Checking</h3>
<ul>
<li>Attrs classes are now fully supported with comprehensive field
synthesis, validation, and special-method generation. Pyrefly recognizes
<code>@attr.s</code>, <code>@define</code>, <code>@frozen</code>, and
their variants, handling field specifiers (<code>attr.ib()</code>,
<code>field()</code>), converters, validators, defaults, and
private-field aliasing. Converters are typed from their real input type
rather than <code>Any</code>, including the
<code>@&lt;field&gt;.converter</code> decorator,
<code>attrs.converters.pipe</code>,
<code>attrs.converters.default_if_none</code>, and generic converters
like <code>copy.deepcopy</code>. See the new <a
href="https://pyrefly.org/en/docs/attrs/">attrs documentation</a> for
details.</li>
<li><code>functools.partial</code> is now type-checked instead of
treated as opaque. Bound arguments are validated at construction and
Pyrefly synthesizes a precise residual signature for the remaining
parameters, so errors surface at both the <code>partial(...)</code> call
and the later invocation. Generic functions, overloads, constructors,
bound methods, and <code>**Unpack[TypedDict]</code> parameters are
supported, and results expose <code>.func</code>, <code>.args</code>,
and <code>.keywords</code>. Precise residual callable assignment is
enabled by the <code>strict</code> and <code>all</code> presets or
explicitly with <code>strict-partial-subtyping</code>.</li>
<li>Functions decorated with <code>functools.singledispatch</code> now
type-check calls using the signature of the function you decorated, and
registered implementations are checked against that function's first
parameter. Generic <code>singledispatch</code> functions infer from call
arguments instead of reporting <code>Unknown</code>.</li>
<li>Pyrefly can now warn when a function declared to return a concrete
type returns <code>Any</code>, with separate diagnostics for explicit
and inferred cases. Off by default, and migrated automatically from
mypy's <code>warn_return_any</code>.</li>
<li>Pattern matching is substantially more precise: positional class
patterns resolve attribute names from <code>__match_args__</code> at
solve time, sequence element captures read from the narrowed subject so
sibling constraints refine them, and <code>isinstance</code> on a facet
filters the parent union to matching members. Fully covered class and
sequence patterns now subtract their union member from later cases.</li>
<li>Unpacking a variadic tuple with a fixed prefix and suffix no longer
smears those elements into the starred capture, so <code>a, *rest, b =
t</code> where <code>t: tuple[int, *tuple[bool, ...], str]</code> types
<code>rest</code> as <code>list[bool]</code>.</li>
<li>TypedDict classes now synthesize <code>__required_keys__</code> and
<code>__optional_keys__</code>, so protocols requiring them (like those
in langgraph) satisfy structural checks. <code>.get()</code> and
<code>.pop()</code> with literal defaults preserve the field type.</li>
<li>Overload handling improved throughout: constrained TypeVar arguments
expand during resolution, rejected overloads no longer leak argument
errors into diagnostics, and exact callback-forwarding signatures
resolve overloaded callbacks against forwarded arguments for helpers
like <code>asyncio.to_thread</code>.</li>
<li>Enum <code>.value</code> on an enum type now infers as the union of
member literal values instead of widening to the mixed-in data
type.</li>
<li>Lambda parameters are contextually typed more thoroughly. Types are
stored directly rather than resolved through inference variables, and
<code>*args</code>/<code>**kwargs</code> resolve from callable hints to
<code>tuple[...]</code> and <code>dict[str, ...]</code> inside the body
while preserving element types in the signature.</li>
<li>All properties are now treated as data descriptors, and reflected
binary-operation dunders are tried first for proper subclasses, fixing a
class of incorrect attribute and operator results.</li>
<li>Cyclic type aliases reachable from an annotation are now detected
instead of hanging, and class finality is taken into account when
deciding whether a condition is redundant.</li>
<li>Continued basedpyright parity work: class instance truthiness is
recognized, code under <code>if TYPE_CHECKING</code> is handled
consistently, <code>typing_extensions.sentinel</code> is supported with
relaxed naming restrictions, and <code>super(cls, cls)</code> is
accepted.</li>
<li><code>copy.replace</code> is now type-checked like dataclass
replacement, and <code>isinstance(x, type)</code> preserves type
arguments when narrowing unions.</li>
<li>Narrowing a receiver typed as <code>Self</code> to a subclass now
preserves <code>Self</code>, eliminating false return errors in methods
that return the narrowed receiver.</li>
</ul>
<h3>Library Support</h3>
<ul>
<li>Pydantic constructor synthesis now honors
<code>populate_by_name</code> and built-in <code>alias_generator</code>
functions, ignores <code>Field(init=False)</code> to match runtime, and
treats <code>frozen</code> as a readonly field reason.</li>
<li>Django <code>ForeignKey</code> targets now resolve attribute
expressions and string references such as
<code>&quot;app_label.Model&quot;</code>, preserving the generated
relation and <code>&lt;field&gt;_id</code> types.</li>
<li>Bare factory-boy factory calls now return the model type via
<code>FactoryMetaClass</code>.</li>
<li>PEP 561 partial stub packages are now supported in imports. Pyrefly
reads the <code>partial</code> marker from <code>py.typed</code> and
merges the stubs with the runtime package, deferring to the runtime
package for omitted modules while preserving
<code>.pyi</code>-before-<code>.py</code> precedence for provided
ones.</li>
<li>A configured <code>typeshed-path</code> now supplies stdlib stubs as
well as third-party stubs, enabling complete custom-typeshed testing and
overrides.</li>
</ul>
<h3>Language Server</h3>
<ul>
<li>Hover now resolves keyword arguments, renders callable protocols as
their <code>__call__</code> signature, preserves overload docstrings at
call sites, shows enum fields, wraps nested callable and
<code>Concatenate[...]</code> signatures for readability, and covers
<code>and</code>/<code>or</code> operators, augmented assignments, and
union methods.</li>
<li>Auto-import completions respect
<code>python.analysis.autoImportCompletions</code>, rank deprecated
stdlib typing aliases below their modern equivalents, avoid duplicates
for already-imported modules, and preserve import aliases
correctly.</li>
<li>Rename now works on aliased imports and across files for keyword
arguments, and renaming a Protocol class targets the class rather than
<code>__init__</code>.</li>
<li>Go-to-definition now navigates directly to symbols in non-Python
files such as <code>.thrift</code>, including nested attribute and enum
access and intermediate components of multi-dotted imports.</li>
<li>Inlay hints debounce server-side (default 150ms), preventing width
jitter while typing. <code>NewType</code> values now use their callable
constructor signature instead of producing an invalid
<code>type[N]</code> annotation.</li>
<li>Notebook support improved: hover and type lookups work past the
first cell, and inlay hints, document symbols, references, and
diagnostic grouping work in cells following markdown cells.</li>
<li>Document symbols fall back to flat <code>SymbolInformation</code>
for clients such as Helix, semantic tokens cover <code>with ...
as</code> and <code>except ... as</code> bindings, and cross-file
diagnostics refresh on save in strict-spec clients such as Zed.</li>
<li><code>#region</code>/<code>#endregion</code> markers create folding
regions, and selection ranges now follow AST nesting from expression to
statement to scope to document.</li>
<li>Baselined errors now appear as hints instead of errors, making it
easier to distinguish new issues from known technical debt. Baselining
also now applies correctly to unused-ignore diagnostics.</li>
<li>Match captures receive consistent semantic highlighting and preserve
their declaration identity for go-to-definition.</li>
<li><code>lspArguments</code> defaults to <code>[&quot;lsp&quot;]</code>
when empty, preventing startup failures in dev containers and remote
environments.</li>
<li>The VSCode extension adds an &quot;Infer Types for Current
File&quot; command to the command palette.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/pyrefly/commit/1933169ad8ee9e4d4114112eb56ef0811fb0a094"><code>1933169</code></a>
cut 1.2.0</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/df11f5d1e2e5c1623659ed7b5b6cb36d33cada7e"><code>df11f5d</code></a>
Enforce call-boundary consumption in production</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/e67bc8e7a319e1c01abceed03f35a87ed3ae8cd0"><code>e67bc8e</code></a>
Transfer quantified handles to call boundaries</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/6ba516f98687c37ff72cb76118e2cae12fce3c9b"><code>6ba516f</code></a>
Move deferred call state into its boundary</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/8888e70c5342f24f18c2e2961e2fd68e8e20b7a1"><code>8888e70</code></a>
Scope call contexts to a lexical boundary</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/f8c9e7cf2e6dedcf521c8d6001d171d33fab3f27"><code>f8c9e7c</code></a>
LSP: default lspArguments to [&quot;lsp&quot;] when empty</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/3f0c2285c96579385d1fee8295cd669a76e9b592"><code>3f0c228</code></a>
Remove dead .hgignore</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/335510d760c4e8e8642c32e994886de7e9495519"><code>335510d</code></a>
improve Sandbox: link shortening <a
href="https://redirect.github.com/facebook/pyrefly/issues/1063">#1063</a>
(<a
href="https://redirect.github.com/facebook/pyrefly/issues/4327">#4327</a>)</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/41094b96c71e8da4506745157effeafe21e17e5a"><code>41094b9</code></a>
Keep lambda hint decomposition transactional</li>
<li><a
href="https://github.com/facebook/pyrefly/commit/3193b6a3a17a3995ea244e3cdc383cda227c06d9"><code>3193b6a</code></a>
fix behavior of init=False for pydantic.BaseModel (<a
href="https://redirect.github.com/facebook/pyrefly/issues/4352">#4352</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/1.1.1...1.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=1.1.1&new-version=1.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: evroon <11857441+evroon@users.noreply.github.com>
 2026-09-01 06:10:40 +00:00
dependabot[bot] bf31ad1564 Bump uvicorn from 0.51.0 to 0.52.1 in /backend (#1810) 
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.51.0 to
0.52.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/uvicorn/releases">uvicorn's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.52.1</h2>
<h3>Fixed</h3>
<ul>
<li>Complete the closing handshake on server-initiated WebSocket closes
in the <code>websockets-sansio</code> and <code>wsproto</code>
implementations, waiting for the client's close reply with a 10 second
timeout instead of resetting the connection (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3053">#3053</a>)</li>
<li>Add missing write flow control to the <code>websockets-sansio</code>
implementation, preventing data truncation on server-initiated closes
with large in-flight payloads (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3048">#3048</a>)</li>
<li>Handle connection loss while a WebSocket write is waiting on
backpressure (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3050">#3050</a>)</li>
<li>Remove duplicate <code>Content-Type</code> and
<code>Content-Length</code> headers from WebSocket denial responses on
the <code>websockets-sansio</code> implementation, and deliver non-UTF-8
denial bodies intact (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3041">#3041</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/uvicorn/compare/0.52.0...0.52.1">https://github.com/Kludex/uvicorn/compare/0.52.0...0.52.1</a></p>
<h2>Version 0.52.0</h2>
<p>This release adds an experimental HTTP/1.1 implementation backed by
<a href="https://zttp.marcelotryle.com/">zttp</a>, a sans-IO HTTP parser
I've been developing on the side: a core written in Zig, with bindings
to Python. It has been running under a fuzzer for some weeks now, and
has been through multiple rounds of security auditing.</p>
<p>It is still <strong>experimental</strong>, so don't put it in front
of production traffic yet. Try it with <code>--http zttp</code>, and
please send any feedback to the <a
href="https://github.com/Kludex/uvicorn/issues">issue tracker</a>.</p>
<h3>Added</h3>
<ul>
<li>Add an experimental <code>zttp</code> HTTP/1.1 implementation,
selectable with <code>--http zttp</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2979">#2979</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Keep non-ASCII WebSocket request headers intact with websockets
17.0, which encodes them with ISO-8859-1 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3036">#3036</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.0">https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's
changelog</a>.</em></p>
<blockquote>
<h2>0.52.1 (August 1, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Complete the closing handshake on server-initiated WebSocket closes
in the <code>websockets-sansio</code> and <code>wsproto</code>
implementations, waiting for the client's close reply with a 10 second
timeout instead of resetting the connection (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3053">#3053</a>)</li>
<li>Add missing write flow control to the <code>websockets-sansio</code>
implementation, preventing data truncation on server-initiated closes
with large in-flight payloads (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3048">#3048</a>)</li>
<li>Handle connection loss while a WebSocket write is waiting on
backpressure (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3050">#3050</a>)</li>
<li>Remove duplicate <code>Content-Type</code> and
<code>Content-Length</code> headers from WebSocket denial responses on
the <code>websockets-sansio</code> implementation, and deliver non-UTF-8
denial bodies intact (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3041">#3041</a>)</li>
</ul>
<h2>0.52.0 (July 29, 2026)</h2>
<p>This release adds an experimental HTTP/1.1 implementation backed by
<a href="https://zttp.marcelotryle.com/">zttp</a>, a sans-IO HTTP parser
I've been developing on the side: a core written in Zig, with bindings
to Python. It has been running under a fuzzer for some weeks now, and
has been through multiple rounds of security auditing.</p>
<p>It is still <strong>experimental</strong>, so don't put it in front
of production traffic yet. Try it with <code>--http zttp</code>, and
please send any feedback to the <a
href="https://github.com/Kludex/uvicorn/issues">issue tracker</a>.</p>
<h3>Added</h3>
<ul>
<li>Add an experimental <code>zttp</code> HTTP/1.1 implementation,
selectable with <code>--http zttp</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2979">#2979</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Keep non-ASCII WebSocket request headers intact with websockets
17.0, which encodes them with ISO-8859-1 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3036">#3036</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Kludex/uvicorn/commit/ee8e45ca472db17b4aef1d539f209539062d002e"><code>ee8e45c</code></a>
Version 0.52.1 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3056">#3056</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/b57926d3f46348b5773b184cdf53ae8588300b77"><code>b57926d</code></a>
Remove duplicate content headers from WebSocket denial responses on
websocket...</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/49de1b91d497d038d97a0475f7459fbf66b9b8f9"><code>49de1b9</code></a>
chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3042">#3042</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/2f3fa3ab55b945d34d3933ec267be5b6ca41fc14"><code>2f3fa3a</code></a>
Complete server-initiated closes in SansIO WebSocket protocols (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3053">#3053</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/8c59d55b92b94fd5bee5960d1456ff8cb3072a32"><code>8c59d55</code></a>
chore(deps): bump the github-actions group with 5 updates (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3054">#3054</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/e148451dd97c321b71abd029f01e6eabebe4958c"><code>e148451</code></a>
Handle connection loss during WebSocket write backpressure (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3050">#3050</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/e16a69b6c8f186d76ca45b08de2cacba8472edd8"><code>e16a69b</code></a>
Add missing write flow control to <code>websockets-sansio</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3048">#3048</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/ef1dd44319549de33079c0e69ef0d09c48c0a964"><code>ef1dd44</code></a>
Fold the zttp-only tests back into the HTTP test suite (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3046">#3046</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/8f1b884cd4a5298539ce77c44d96c7aebd512dff"><code>8f1b884</code></a>
Version 0.52.0 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3044">#3044</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/f6833dbac8c3923c6c2915fe996cd06ceecd125b"><code>f6833db</code></a>
Add experimental zttp HTTP/1.1 protocol (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2979">#2979</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uvicorn&package-manager=uv&previous-version=0.51.0&new-version=0.52.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:17:16 +00:00
dependabot[bot] f3920e7213 Bump fastapi from 0.140.0 to 0.141.1 in /backend (#1809) 
Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.140.0 to
0.141.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastapi/fastapi/releases">fastapi's
releases</a>.</em></p>
<blockquote>
<h2>0.141.1</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Fix support for background tasks and headers from dependencies in
<code>app.frontend()</code>. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16105">#16105</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h3>Docs</h3>
<ul>
<li>📝 Document <code>FASTAPI_ENV</code> in FastAPI CLI guide. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16104">#16104</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h2>0.141.0</h2>
<h3>Features</h3>
<ul>
<li>✨ Add <code>app.frontend(check_dir=&quot;auto&quot;)</code>, to make
local development more convenient with <code>fastapi dev</code>. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16102">#16102</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h2>0.140.13</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Fix <code>status_code</code> being ignored for SSE and JSONL
streaming endpoints. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15937">#15937</a>
by <a
href="https://github.com/SAURABHSALVE"><code>@​SAURABHSALVE</code></a>.</li>
</ul>
<h3>Docs</h3>
<ul>
<li>📝 Fix <code>format_sse_event</code> docstring rendering of
<code>\n\n</code> terminator. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15613">#15613</a>
by <a
href="https://github.com/AshNicolus"><code>@​AshNicolus</code></a>.</li>
<li>📝 Add API reference page for fastapi.sse. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15930">#15930</a>
by <a
href="https://github.com/SAURABHSALVE"><code>@​SAURABHSALVE</code></a>.</li>
</ul>
<h2>0.140.12</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Fix line splitting in <code>format_sse_event</code> to comply with
SSE spec. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15515">#15515</a>
by <a
href="https://github.com/Zawwarsami16"><code>@​Zawwarsami16</code></a>.</li>
</ul>
<h2>0.140.11</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Fix <code>response_model_*</code> params ignored for non-generator
endpoints with <code>Iterable[..]</code> return type. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15093">#15093</a>
by <a
href="https://github.com/YuriiMotov"><code>@​YuriiMotov</code></a>.</li>
</ul>
<h2>0.140.10</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Fix handling sequences with nested Annotated types. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/14874">#14874</a>
by <a
href="https://github.com/YuriiMotov"><code>@​YuriiMotov</code></a>.</li>
</ul>
<h3>Internal</h3>
<ul>
<li>🐛 Accept any base test failure as regression. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16092">#16092</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🐛 Preserve pytest exit code in regression check. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16091">#16091</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>✅ Test PR regressions against base code. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16090">#16090</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h2>0.140.9</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Fix <code>exclude_defaults</code> not propagated to dict keys and
values in <code>jsonable_encoder</code>. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16043">#16043</a>
by <a href="https://github.com/MBGrao"><code>@​MBGrao</code></a>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastapi/fastapi/commit/95f8322ee1dcda7ceace7b1c4f6c9915b36d748f"><code>95f8322</code></a>
🔖 Release version 0.141.1 (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16106">#16106</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/f137944c435cff4e4b30ea7d12855ea88ddb868c"><code>f137944</code></a>
📝 Update release notes</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/d62354434b2e508fe89024213b220ca8e67dea5e"><code>d623544</code></a>
🐛 Fix support for background tasks and headers from dependencies in
`app.fron...</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/1d211b9c1009d577f39fa2b19b10d9a93a72a0ed"><code>1d211b9</code></a>
📝 Update release notes</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/8a1f8768411e62093e70ce142ea10863a485643c"><code>8a1f876</code></a>
📝 Document <code>FASTAPI_ENV</code> in FastAPI CLI guide (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16104">#16104</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/c7e7b651d6946c07cc9f675f39c9501d08319e57"><code>c7e7b65</code></a>
🔖 Release version 0.141.0 (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16103">#16103</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/6bceb84053eb2405e9c000aad30ea13367b5ee32"><code>6bceb84</code></a>
📝 Update release notes</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/5429fed84e84e32672c25a953eca3429b841ce90"><code>5429fed</code></a>
✨ Add <code>app.frontend(check_dir=&quot;auto&quot;)</code>, to make
local development more conven...</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/628663f4f899c465da423bce681c7adf9a218948"><code>628663f</code></a>
🔖 Release version 0.140.13 (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16096">#16096</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/0b54fd00273019034dd30b120ac842e65d80690e"><code>0b54fd0</code></a>
📝 Update release notes</li>
<li>Additional commits viewable in <a
href="https://github.com/fastapi/fastapi/compare/0.140.0...0.141.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastapi&package-manager=uv&previous-version=0.140.0&new-version=0.141.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:17:01 +00:00
dependabot[bot] 7b6ba6ec86 Bump lucide-react from 1.27.0 to 1.28.0 in /docs (#1803) 
Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 1.27.0 to 1.28.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.28.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): improve calendar icons centre of gravity by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4614">lucide-icons/lucide#4614</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.27.0...1.28.0">https://github.com/lucide-icons/lucide/compare/1.27.0...1.28.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:16:17 +00:00
dependabot[bot] a4476c40ff Bump axios from 1.18.0 to 1.19.0 in /frontend (#1807) 
Bumps [axios](https://github.com/axios/axios) from 1.18.0 to 1.19.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.19.0 - July 22, 2026</h2>
<p>This release raises the form-data security floor, adds configuration
and type-system capabilities, and fixes NO_PROXY matching, interceptor
errors, progress reporting, and serialization edge cases.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Multipart Form Data: Raised the form-data dependency floor to
^4.0.6, preventing fresh installations from resolving versions affected
by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a
href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx</a>).
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li>Configuration Extensibility: Preserved own-enumerable symbol-keyed
fields through mergeConfig and added a generic params type across public
TypeScript declarations, responses, errors,
adapters, and serializers. (<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li>
<li>Header Parameter Parsing: Added the opt-in
AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP
parameter parsing while preserving legacy parsing behavior. (<a
href="https://redirect.github.com/axios/axios/issues/11051">#11051</a>)</li>
<li>HTTP Status Codes: Added the missing Cloudflare 520
WebServerReturnsAnUnknownError status and matching ESM/CJS declarations.
(<a
href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Form Data Conversion: Limited formDataToJSON path splitting to dot
and bracket notation, preserving literal punctuation in keys, and
removed browser-facing Buffer.from usage from toFormData to avoid
unnecessary polyfills. (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11018">#11018</a>)</li>
<li>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal
forms during NO_PROXY matching and honored * entries within comma- or
space-separated bypass lists. (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li>
<li>Cancellation: Propagated already-aborted input signals immediately
when composing abort signals. (<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li>
<li>Header Handling: Preserved empty first values for duplicate
singleton headers and made AxiosHeaders#getSetCookie() consistently
return arrays for present values. (<a
href="https://redirect.github.com/axios/axios/issues/11036">#11036</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11037">#11037</a>)</li>
<li>URL Handling: Included normalized, safely redacted offending URLs in
malformed-protocol errors and removed repeated trailing slashes when
combining base URLs. (<a
href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11038">#11038</a>)</li>
<li>Progress Events: Clamped malformed negative progress values to zero
and ensured final Node.js download progress events are delivered before
streamed responses close. (<a
href="https://redirect.github.com/axios/axios/issues/11039">#11039</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11040">#11040</a>)</li>
<li>Error and JSON Serialization: Serialized Set values as arrays in
JSON-compatible snapshots and synthesized useful AxiosError messages
from otherwise-empty AggregateError instances. (<a
href="https://redirect.github.com/axios/axios/issues/11044">#11044</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li>
<li>Content-Length Enforcement: Corrected base64 data: URL size
estimation so maxContentLength is enforced consistently by the HTTP and
Fetch adapters. (<a
href="https://redirect.github.com/axios/axios/issues/11061">#11061</a>)</li>
<li>Synchronous Interceptors: Prevented requests from being dispatched
after synchronous request interceptors fail unless their paired
rejection handler resolves successfully. (<a
href="https://redirect.github.com/axios/axios/issues/11071">#11071</a>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>Dependencies: Updated development and test tooling, the docs
fixture's Axios version, and GitHub Actions integrations including
Checkout, Setup Node, Setup Deno, and Zizmor. (<a
href="https://redirect.github.com/axios/axios/issues/11031">#11031</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11055">#11055</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11056">#11056</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11058">#11058</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11079">#11079</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11080">#11080</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11090">#11090</a>)</li>
<li>Build Outputs: Limited sourcemap generation to published minified
bundles, removing broken map references from non-minified builds. (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li>Form Data Internals: Centralized FormData header handling and made
the Node.js adapter tolerate getHeaders() returning undefined under the
content-only policy. (<a
href="https://redirect.github.com/axios/axios/issues/11062">#11062</a>)</li>
<li>Developer Experience: Ignored common local AI-tooling directories
and fixed a constant-reassignment crash when the development sandbox
serves its root path. (<a
href="https://redirect.github.com/axios/axios/issues/11032">#11032</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li>
<li>Documentation: Updated sponsor information, clarified that baseURL
is not a path-security boundary, scoped provenance claims to attested
releases, and corrected the configuration-defaults documentation. (<a
href="https://redirect.github.com/axios/axios/issues/11041">#11041</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11068">#11068</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11076">#11076</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li>
<li>Publishing: Simplified v1 publishing to use the npm version bundled
with Node.js 26 and updated package metadata for the 1.19.0 release. (<a
href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><a
href="https://github.com/afonsojramos"><code>@​afonsojramos</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
<li><a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>)</li>
<li><a
href="https://github.com/yassertawfik4"><code>@​yassertawfik4</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>)</li>
<li><a
href="https://github.com/AnandSundar"><code>@​AnandSundar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>)</li>
<li><a
href="https://github.com/lin-hongkuan"><code>@​lin-hongkuan</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li>
<li><a
href="https://github.com/Wali007-lab"><code>@​Wali007-lab</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li><a href="https://github.com/magicdawn"><code>@​magicdawn</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>)</li>
<li><a
href="https://github.com/andrewkernel"><code>@​andrewkernel</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li>
<li><a
href="https://github.com/Sagargupta16"><code>@​Sagargupta16</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li>
<li><a
href="https://github.com/Rpaudel379"><code>@​Rpaudel379</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h2>v1.19.0 — July 22, 2026</h2>
<p>This release raises the form-data security floor, adds configuration
and type-system capabilities, and fixes NO_PROXY matching, interceptor
errors, progress reporting, and serialization edge cases.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Multipart Form Data: Raised the form-data dependency floor to
^4.0.6, preventing fresh installations from resolving versions affected
by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a
href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx</a>).
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li>Configuration Extensibility: Preserved own-enumerable symbol-keyed
fields through mergeConfig and added a generic params type across public
TypeScript declarations, responses, errors,
adapters, and serializers. (<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li>
<li>Header Parameter Parsing: Added the opt-in
AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP
parameter parsing while preserving legacy parsing behavior. (<a
href="https://redirect.github.com/axios/axios/issues/11051">#11051</a>)</li>
<li>HTTP Status Codes: Added the missing Cloudflare 520
WebServerReturnsAnUnknownError status and matching ESM/CJS declarations.
(<a
href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>
<p>Form Data Conversion: Limited formDataToJSON path splitting to dot
and bracket notation, preserving literal punctuation in keys, and
removed browser-facing Buffer.from usage from toFormData to avoid
unnecessary polyfills. (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11018">#11018</a>)</p>
</li>
<li>
<p>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal
forms during NO_PROXY matching and honored * entries within comma- or
space-separated bypass lists. (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</p>
</li>
<li>
<p>Cancellation: Propagated already-aborted input signals immediately
when composing abort signals. (<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</p>
</li>
<li>
<p>Header Handling: Preserved empty first values for duplicate singleton
headers and made AxiosHeaders#getSetCookie() consistently return arrays
for present values. (<a
href="https://redirect.github.com/axios/axios/issues/11036">#11036</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11037">#11037</a>)</p>
</li>
<li>
<p>URL Handling: Included normalized, safely redacted offending URLs in
malformed-protocol errors and removed repeated trailing slashes when
combining base URLs. (<a
href="https://redirect.github.com/axios/axios/issues/11008">#11008</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11038">#11038</a>)</p>
</li>
<li>
<p>Progress Events: Clamped malformed negative progress values to zero
and ensured final Node.js download progress events are delivered before
streamed responses close. (<a
href="https://redirect.github.com/axios/axios/issues/11039">#11039</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11040">#11040</a>)</p>
</li>
<li>
<p>Error and JSON Serialization: Serialized Set values as arrays in
JSON-compatible snapshots and synthesized useful AxiosError messages
from otherwise-empty AggregateError instances. (<a
href="https://redirect.github.com/axios/axios/issues/11044">#11044</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</p>
</li>
<li>
<p>Content-Length Enforcement: Corrected base64 data: URL size
estimation so maxContentLength is enforced consistently by the HTTP and
Fetch adapters. (<a
href="https://redirect.github.com/axios/axios/issues/11061">#11061</a>)</p>
</li>
<li>
<p>Synchronous Interceptors: Prevented requests from being dispatched
after synchronous request interceptors fail unless their paired
rejection handler resolves successfully. (<a
href="https://redirect.github.com/axios/axios/issues/11071">#11071</a>)</p>
</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>Dependencies: Updated development and test tooling, the docs
fixture's Axios version, and GitHub Actions integrations including
Checkout, Setup Node, Setup Deno, and Zizmor. (<a
href="https://redirect.github.com/axios/axios/issues/11031">#11031</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11055">#11055</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11056">#11056</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11058">#11058</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11079">#11079</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11080">#11080</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11090">#11090</a>)</li>
<li>Build Outputs: Limited sourcemap generation to published minified
bundles, removing broken map references from non-minified builds. (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li>Form Data Internals: Centralized FormData header handling and made
the Node.js adapter tolerate getHeaders() returning undefined under the
content-only policy. (<a
href="https://redirect.github.com/axios/axios/issues/11062">#11062</a>)</li>
<li>Developer Experience: Ignored common local AI-tooling directories
and fixed a constant-reassignment crash when the development sandbox
serves its root path. (<a
href="https://redirect.github.com/axios/axios/issues/11032">#11032</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li>
<li>Documentation: Updated sponsor information, clarified that baseURL
is not a path-security boundary, scoped provenance claims to attested
releases, and corrected the configuration-defaults documentation. (<a
href="https://redirect.github.com/axios/axios/issues/11041">#11041</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11068">#11068</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11076">#11076</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li>
<li>Publishing: Simplified v1 publishing to use the npm version bundled
with Node.js 26 and updated package metadata for the 1.19.0 release. (<a
href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><a
href="https://github.com/afonsojramos"><code>@​afonsojramos</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
<li><a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>)</li>
<li><a
href="https://github.com/yassertawfik4"><code>@​yassertawfik4</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>)</li>
<li><a
href="https://github.com/AnandSundar"><code>@​AnandSundar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>)</li>
<li><a
href="https://github.com/lin-hongkuan"><code>@​lin-hongkuan</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li>
<li><a
href="https://github.com/Wali007-lab"><code>@​Wali007-lab</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li><a href="https://github.com/magicdawn"><code>@​magicdawn</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>)</li>
<li><a
href="https://github.com/andrewkernel"><code>@​andrewkernel</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li>
<li><a
href="https://github.com/Sagargupta16"><code>@​Sagargupta16</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/311fcc5c8d989b7248f05d390bb83bfbfb009977"><code>311fcc5</code></a>
chore(release): prepare release 1.19.0 (<a
href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/cb4fd743abd1c595761c8eda25d1323fc62a3b93"><code>cb4fd74</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.1 in /docs (<a
href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/004c93a9d2acd0561c498eff7bb4431c6bad78af"><code>004c93a</code></a>
chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the
github-action...</li>
<li><a
href="https://github.com/axios/axios/commit/122edde91b1183572f4ba399b5b6bc4e3b989718"><code>122edde</code></a>
chore(deps-dev): bump the development_dependencies group with 3 updates
(<a
href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/c44f8d0a910df99486da9175584b99f56a94a73b"><code>c44f8d0</code></a>
ci: use bundled npm for v1 publish (<a
href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/878bb29de570765b0d4c0970e30400d9ea9399f7"><code>878bb29</code></a>
fix(sandbox): resolve TypeError on constant variable path assignment (<a
href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/a092bae50d1884782151b2fcea12974d6da6e376"><code>a092bae</code></a>
fix(core): synchronous interceptors swallow errors and proceed with
request (...</li>
<li><a
href="https://github.com/axios/axios/commit/3041b8fd1daf17404d1bad1f9d94026ea5ab400b"><code>3041b8f</code></a>
feat(HttpStatusCode): add missing 520 status code (<a
href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/58b16c88f0bddf1fadb321aed58ba3f49a90481b"><code>58b16c8</code></a>
refactor(helpers): extract duplicated setFormDataHeaders into a shared
helper...</li>
<li><a
href="https://github.com/axios/axios/commit/3077e62097726d22ba30f1cb847d7a07050e339a"><code>3077e62</code></a>
feat(types): Allow the Params property to be typed, instead of
<code>any</code> (<a
href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.18.0...v1.19.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.18.0&new-version=1.19.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:14:13 +00:00
dependabot[bot] c0078f2757 Bump @tabler/icons-react from 3.45.0 to 3.46.0 in /frontend (#1806) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.45.0 to 3.46.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases">@​tabler/icons-react's
releases</a>.</em></p>
<blockquote>
<h2>Release 3.46.0</h2>
<!-- raw HTML omitted -->
<h3>18 new icons:</h3>
<ul>
<li><code>outline/play-bug</code></li>
<li><code>outline/play-bugs</code></li>
<li><code>outline/remote-control</code></li>
<li><code>outline/rocking-chair</code></li>
<li><code>outline/run-sprint</code></li>
<li><code>outline/sparkles-2-off</code></li>
<li><code>outline/tabs</code></li>
<li><code>outline/tags-chevron-down</code></li>
<li><code>outline/tags-chevron-left</code></li>
<li><code>outline/tags-chevron-right</code></li>
<li><code>outline/tags-chevron-up</code></li>
<li><code>outline/thinking-high</code></li>
<li><code>outline/thinking-low</code></li>
<li><code>outline/thinking-medium</code></li>
<li><code>outline/treasure-chest</code></li>
<li><code>outline/twig</code></li>
<li><code>outline/vault</code></li>
<li><code>outline/yarn</code></li>
</ul>
<p>Fixed icons: <code>outline/credits</code>,
<code>outline/currency-tether</code>,
<code>outline/device-3d-camera</code>,
<code>outline/device-screen</code>, <code>outline/home-lock</code>,
<code>outline/map-lock</code>, <code>outline/notdef</code>,
<code>outline/queue-pop-in</code>, <code>outline/server-bolt</code>,
<code>outline/server</code>, <code>outline/sparkles-2</code>,
<code>outline/transform-point-bottom-left</code>,
<code>outline/transform-point-bottom-right</code>,
<code>outline/transform-point-top-left</code>,
<code>outline/transform-point-top-right</code></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/8ac7d81b72ece11072ef25ea9fd92e80c6f3c9fc"><code>8ac7d81</code></a>
Release 3.46.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/fe319f05d943a17efb29c5089e21364d3975843c"><code>fe319f0</code></a>
Add publishConfig for public access in all icon packages (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1562">#1562</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.45.0&new-version=3.46.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:13:39 +00:00
dependabot[bot] 39a9d164cf Bump npm-check-updates from 22.2.9 to 23.0.0 in /frontend (#1805) 
Bumps
[npm-check-updates](https://github.com/raineorshine/npm-check-updates)
from 22.2.9 to 23.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/releases">npm-check-updates's
releases</a>.</em></p>
<blockquote>
<h2>v23.0.0</h2>
<h3>⚠️ Breaking changes &amp; migration</h3>
<p><strong>1. Node.js 22+ required</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1844">#1844</a>)
The minimum supported Node.js is now <strong>22</strong>. Supported
versions: <code>^22.22.2 || ^24.15.0 || &gt;=26.0.0</code> (and npm
<code>&gt;=10</code>).</p>
<ul>
<li><em>Migration:</em> Upgrade Node before installing. On older Node,
stay on v22.x.</li>
</ul>
<p><strong>2. Pure ESM package — CJS build dropped, default export is
now callable</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1916">#1916</a>,
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1894">#1894</a>)
The package is now pure ESM (no more CommonJS build), and the default
export is now callable directly. <code>ncu.run()</code> and
<code>ncu.defineConfig()</code> still work as namespaced properties.</p>
<ul>
<li><em>Migration (ESM):</em>
<pre lang="js"><code>// before
import * as ncu from 'npm-check-updates'
const upgraded = await ncu.run({ /* ... */ })
// after
import ncu from 'npm-check-updates'
const upgraded = await ncu({ /* ... */ }) // ncu.run({...}) also still
works
</code></pre>
</li>
<li><em>Migration (CommonJS):</em> Still usable via Node's native
<code>require()</code> of ESM (Node 22+), but the import shape changed:
<pre lang="js"><code>// before
const ncu = require('npm-check-updates')
// after
const { default: ncu } = require('npm-check-updates')
ncu({ /* ... */ }).then(upgraded =&gt; console.log(upgraded))
</code></pre>
</li>
</ul>
<p><strong>3. <code>filterVersion</code> / <code>rejectVersion</code> no
longer accept a predicate function. Use <code>filter</code> /
<code>reject</code> instead.</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1933">#1933</a>)
These options now accept only a string, wildcard, glob,
comma/space-delimited list, or <code>/regex/</code>. (CLI usage is
unchanged — the CLI never supported functions.)</p>
<ul>
<li><em>Migration:</em> If you passed a function to
<code>filterVersion</code>/<code>rejectVersion</code> in
<code>.ncurc.js</code> or via the module API, move it to
<code>filter</code> / <code>reject</code> instead. Those receive the
package name <strong>and</strong> the parsed current version, so they
can match on both:
<pre lang="js"><code>// before
filterVersion: (name, semver) =&gt; !(name.startsWith('@myorg/')
&amp;&amp; +semver[0].major &gt; 5)
// after
filter: (name, semver) =&gt; !(name.startsWith('@myorg/') &amp;&amp;
+semver[0].major &gt; 5)
</code></pre>
</li>
</ul>
<p><strong>4. Output is now grouped by default</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1937">#1937</a>)
<code>--format</code> now defaults to <code>[&quot;group&quot;]</code>,
so upgrades are grouped by major / minor / patch out of the box. This is
a better default for most users.</p>
<ul>
<li><em>Migration:</em> To get the old flat output, use:
<pre lang="bash"><code>ncu --format no-group
</code></pre>
The new <code>no-</code> prefix removes a value from the default list
instead of replacing the whole list, so <code>--format
no-group,time</code> disables grouping while adding publish times.</li>
</ul>
<p><strong>5. <code>--target semver</code> now respects explicit upper
bounds</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1920">#1920</a>)
An explicit upper bound in a range is now preserved and never exceeded,
e.g. <code>^9.5.0 &lt;10</code> → <code>^9.7.0 &lt;10</code> (previously
the bound could be overrun). This can change which versions are selected
for ranges with explicit upper bounds.</p>
<h3>✨ Other improvements</h3>
<ul>
<li>Native TypeScript loading (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1888">#1888</a>),
lazy-loaded <code>npm-registry-fetch</code> for faster startup (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1898">#1898</a>),
and reduced dependencies for a lighter install.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md">npm-check-updates's
changelog</a>.</em></p>
<blockquote>
<h2>[23.0.0] - 2026-07-26</h2>
<h3>⚠️ Breaking changes &amp; migration</h3>
<p><strong>1. Node.js 22+ required</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1844">#1844</a>)
The minimum supported Node.js is now <strong>22</strong>. Supported
versions: <code>^22.22.2 || ^24.15.0 || &gt;=26.0.0</code> (and npm
<code>&gt;=10</code>).</p>
<ul>
<li><em>Migration:</em> Upgrade Node before installing. On older Node,
stay on v22.x.</li>
</ul>
<p><strong>2. Pure ESM package — CJS build dropped, default export is
now callable</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1916">#1916</a>,
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1894">#1894</a>)
The package is now pure ESM (no more CommonJS build), and the default
export is now callable directly. <code>ncu.run()</code> and
<code>ncu.defineConfig()</code> still work as namespaced properties.</p>
<ul>
<li>
<p><em>Migration (ESM):</em></p>
<pre lang="js"><code>// before
import * as ncu from 'npm-check-updates'
const upgraded = await ncu.run({/* ... */})
// after
import ncu from 'npm-check-updates'
const upgraded = await ncu({/* ... */}) // ncu.run({...}) also still
works
</code></pre>
</li>
<li>
<p><em>Migration (CommonJS):</em> Still usable via Node's native
<code>require()</code> of ESM (Node 22+), but the import shape
changed:</p>
<pre lang="js"><code>// before
const ncu = require('npm-check-updates')
// after
const { default: ncu } = require('npm-check-updates')
ncu({/* ... */}).then(upgraded =&gt; console.log(upgraded))
</code></pre>
</li>
</ul>
<p><strong>3. <code>filterVersion</code> / <code>rejectVersion</code> no
longer accept a predicate function. Use <code>filter</code> /
<code>reject</code> instead.</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1933">#1933</a>)
These options now accept only a string, wildcard, glob,
comma/space-delimited list, or <code>/regex/</code>. (CLI usage is
unchanged — the CLI never supported functions.)</p>
<ul>
<li>
<p><em>Migration:</em> If you passed a function to
<code>filterVersion</code>/<code>rejectVersion</code> in
<code>.ncurc.js</code> or via the module API, move it to
<code>filter</code> / <code>reject</code> instead. Those receive the
package name <strong>and</strong> the parsed current version, so they
can match on both:</p>
<pre lang="js"><code>// before
filterVersion: (name, semver) =&gt; !(name.startsWith('@myorg/')
&amp;&amp; +semver[0].major &gt; 5)
// after
filter: (name, semver) =&gt; !(name.startsWith('@myorg/') &amp;&amp;
+semver[0].major &gt; 5)
</code></pre>
</li>
</ul>
<p><strong>4. Output is now grouped by default</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1937">#1937</a>)
<code>--format</code> now defaults to <code>[&quot;group&quot;]</code>,
so upgrades are grouped by major / minor / patch out of the box. This is
a better default for most users.</p>
<ul>
<li><em>Migration:</em> To get the old flat output, use:</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/2417fe3b0ce0356deefa22f1b650afe37e8b5ead"><code>2417fe3</code></a>
23.0.0</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/61b8818b28dddd2b3810225275d54905677e4ee9"><code>61b8818</code></a>
Update deps (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1948">#1948</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/548c6e3969865b5c8a5f57ad475617978c343534"><code>548c6e3</code></a>
Merge pull request <a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1943">#1943</a>
from raineorshine/xmr/test-doctor</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/d31677a3fe9110b0233b5075141ee4464d2c33a3"><code>d31677a</code></a>
test/doctor: run fixtures from a temp copy instead of mutating tracked
files</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/31c7e85a8ba37a1a1c26154c1f00a2f1aefdec9b"><code>31c7e85</code></a>
Fix and clean up skipped tests (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1941">#1941</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/c7c968f71aaf67cfc6aefd04ffd16b6c7a97f6a1"><code>c7c968f</code></a>
Merge pull request <a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1935">#1935</a>
from raineorshine/xmr/fix-regex</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/e42e613794eb89f25c2b32ba6aee9711755edbf6"><code>e42e613</code></a>
Update dependencies (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1940">#1940</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/5c7b4225ff4a299b6bb0c10b3afca6ef5da3d897"><code>5c7b422</code></a>
Add regression test for single-character override keys that are not
'.'</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/8d0d4be47363891b4362519f64629f12fa8a8609"><code>8d0d4be</code></a>
Move override tests into upgradePackageData.test.ts</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/21b8f539eb64db2c7156deb8afb51b4e26312ff5"><code>21b8f53</code></a>
Use jsonc-parser for packageManager and JSON catalog upgrades</li>
<li>Additional commits viewable in <a
href="https://github.com/raineorshine/npm-check-updates/compare/v22.2.9...v23.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=npm-check-updates&package-manager=npm_and_yarn&previous-version=22.2.9&new-version=23.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:13:30 +00:00
dependabot[bot] 1bc2d8b4ae Bump vite from 8.1.5 to 8.2.0 in /frontend (#1804) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.1.5 to 8.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>create-vite@8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.2.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.2.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.2.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.2.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.2.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/vitejs/vite/compare/v8.2.0-beta.0...v8.2.0">8.2.0</a>
(2026-07-30)</h2>
<h3>Features</h3>
<ul>
<li>add <code>input</code> to <code>server.fs.allow</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23035">#23035</a>)
(<a
href="https://github.com/vitejs/vite/commit/95a3cdab83e1125b03d2e8dd942fb6b64209e5fa">95a3cda</a>)</li>
<li><strong>bundled-dev:</strong> reload once after rebuild instead of
via the fallback page (<a
href="https://redirect.github.com/vitejs/vite/issues/23106">#23106</a>)
(<a
href="https://github.com/vitejs/vite/commit/b24381d741941b9ce2b1c07db62cc5f4d7bad981">b24381d</a>)</li>
<li><strong>bundled-dev:</strong> support worker file update accepted by
HMR (<a
href="https://redirect.github.com/vitejs/vite/issues/23068">#23068</a>)
(<a
href="https://github.com/vitejs/vite/commit/0d04351fdc12258c75b9f1cda5780fdb836ed0ef">0d04351</a>)</li>
<li><strong>config:</strong> include column in config incompatibility
location (<a
href="https://redirect.github.com/vitejs/vite/issues/23064">#23064</a>)
(<a
href="https://github.com/vitejs/vite/commit/8a245726944ed29225920d49be77c33c6e03afc8">8a24572</a>)</li>
<li><strong>dev:</strong> resolve interface name for explicit host in
network URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/22965">#22965</a>)
(<a
href="https://github.com/vitejs/vite/commit/3ac77d9dd742968961af38a5a91ed6b061ceda7d">3ac77d9</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bundledDev:</strong> print build errors to the terminal when
an HMR update fails (<a
href="https://redirect.github.com/vitejs/vite/issues/23024">#23024</a>)
(<a
href="https://github.com/vitejs/vite/commit/41c465896e8b11b1eb9c5fbdafbdcc528e189a2c">41c4658</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23069">#23069</a>)
(<a
href="https://github.com/vitejs/vite/commit/4c07b74416f859d7e8bdace13409ef2d080edf76">4c07b74</a>)</li>
<li><strong>hmr:</strong> preserve environment snapshot during server
restart (<a
href="https://redirect.github.com/vitejs/vite/issues/22992">#22992</a>)
(<a
href="https://github.com/vitejs/vite/commit/b1186c36d06bb94941c58e8272fc4acb8512c93b">b1186c3</a>)</li>
<li><strong>importAnalysis:</strong> interop imports injected into
optimized dep files by plugins (<a
href="https://redirect.github.com/vitejs/vite/issues/23029">#23029</a>)
(<a
href="https://github.com/vitejs/vite/commit/8c2a87d41fb24536e59643351758084cde4d0dd7">8c2a87d</a>)</li>
<li><strong>module-runner:</strong> keep stack trace interception
working when <code>Object.prototype</code> is frozen (<a
href="https://redirect.github.com/vitejs/vite/issues/23073">#23073</a>)
(<a
href="https://github.com/vitejs/vite/commit/599c5b02a8b6879b05ede988020f1331e877aaea">599c5b0</a>)</li>
<li><strong>server:</strong> strip base in indexHtml module graph lookup
(<a
href="https://redirect.github.com/vitejs/vite/issues/22932">#22932</a>)
(<a
href="https://github.com/vitejs/vite/commit/fa005d19af5d847931c6dbefc63841c137383e6c">fa005d1</a>)</li>
<li>support resolving top-level input option with plugins (<a
href="https://redirect.github.com/vitejs/vite/issues/23101">#23101</a>)
(<a
href="https://github.com/vitejs/vite/commit/41df81a6a4c3eef08f7a9a8ac9530cd136c0eafa">41df81a</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>config:</strong> correct cacheDir default fallback
description (<a
href="https://redirect.github.com/vitejs/vite/issues/23060">#23060</a>)
(<a
href="https://github.com/vitejs/vite/commit/aafa103af5d71fb59d7c3dd617d0cbef3b222f1f">aafa103</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li>config CJS module vars in ESM case (<a
href="https://redirect.github.com/vitejs/vite/issues/23010">#23010</a>)
(<a
href="https://github.com/vitejs/vite/commit/d8cd38830251b95fd7dddcd0eee0ce94cc61c2f4">d8cd388</a>)</li>
</ul>
<h2><a
href="https://github.com/vitejs/vite/compare/v8.1.5...v8.2.0-beta.0">8.2.0-beta.0</a>
(2026-07-22)</h2>
<h3>Features</h3>
<ul>
<li>add <code>input</code> option (<a
href="https://redirect.github.com/vitejs/vite/issues/22642">#22642</a>)
(<a
href="https://github.com/vitejs/vite/commit/9beae37d7221b25463a011feb40b0303ca328d87">9beae37</a>)</li>
<li><strong>config:</strong> warn features incompatible with native
loader in bundle loader (<a
href="https://redirect.github.com/vitejs/vite/issues/22850">#22850</a>)
(<a
href="https://github.com/vitejs/vite/commit/05302b07267f6b4f9dbeac5b1d73fcc3dc06d730">05302b0</a>)</li>
<li><strong>css:</strong> export PostCSS config type for type-safe
configs (<a
href="https://redirect.github.com/vitejs/vite/issues/22792">#22792</a>)
(<a
href="https://github.com/vitejs/vite/commit/302c755a8125b9a26214e3b413922b5513e41981">302c755</a>)</li>
<li><strong>dev:</strong> label network URLs with their interface name
(<a
href="https://redirect.github.com/vitejs/vite/issues/22830">#22830</a>)
(<a
href="https://github.com/vitejs/vite/commit/78accc42a5b8887d9df624f7d4a934d3ead677d1">78accc4</a>)</li>
<li><strong>optimizer:</strong> support aube lockfile (<a
href="https://redirect.github.com/vitejs/vite/issues/22813">#22813</a>)
(<a
href="https://github.com/vitejs/vite/commit/6319827116c5be2a19c1b91c84ba3d38ad26a41c">6319827</a>)</li>
<li><strong>optimizer:</strong> support nub lockfile (<a
href="https://redirect.github.com/vitejs/vite/issues/22891">#22891</a>)
(<a
href="https://github.com/vitejs/vite/commit/65d3604f6fdbfcf6e86244d7fe3c1ca86acae701">65d3604</a>)</li>
<li>update rolldown-related dependencies and use client-side HMR in
bundled-dev (<a
href="https://redirect.github.com/vitejs/vite/issues/22961">#22961</a>)
(<a
href="https://github.com/vitejs/vite/commit/960e9efbc1372000caac46cc2f123cef4824e2bb">960e9ef</a>)</li>
<li><strong>wasm:</strong> expand test suite, unwrap WebAssembly.Global
and enable js-string builtins (<a
href="https://redirect.github.com/vitejs/vite/issues/22674">#22674</a>)
(<a
href="https://github.com/vitejs/vite/commit/9e79b51579457a9af4fa623b68a0bfabbf38010b">9e79b51</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> map CSS chunks in chunk import maps (fix <a
href="https://redirect.github.com/vitejs/vite/issues/22946">#22946</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/22947">#22947</a>)
(<a
href="https://github.com/vitejs/vite/commit/e16ff3a1199293ac9cdfa6132c08fdea162215f3">e16ff3a</a>)</li>
<li><strong>config:</strong> exclude virtual modules from native config
compat check (<a
href="https://redirect.github.com/vitejs/vite/issues/22979">#22979</a>)
(<a
href="https://github.com/vitejs/vite/commit/2ced1fe4e4e480ed78cb7aa5c78319e57bfa7783">2ced1fe</a>)</li>
<li><strong>css:</strong> rewrite urls in OnceExit-injected content (<a
href="https://redirect.github.com/vitejs/vite/issues/22983">#22983</a>)
(<a
href="https://github.com/vitejs/vite/commit/abb793e18c92592c21fbb8e1f3fc450b5839f04f">abb793e</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22985">#22985</a>)
(<a
href="https://github.com/vitejs/vite/commit/04f345b37064cd0bba6447eb5c32be5c22162f3d">04f345b</a>)</li>
<li><strong>deps:</strong> update dependency magic-string to v1 (<a
href="https://redirect.github.com/vitejs/vite/issues/22998">#22998</a>)
(<a
href="https://github.com/vitejs/vite/commit/c60b4d7cdb85b7d4f78671cdcfb863e5f8b66bb7">c60b4d7</a>)</li>
<li><strong>hmr:</strong> remove hot data after prune (<a
href="https://redirect.github.com/vitejs/vite/issues/23002">#23002</a>)
(<a
href="https://github.com/vitejs/vite/commit/be9631658f5191ee5c5665e780239d42a330280a">be96316</a>)</li>
<li>resolve root to real path (<a
href="https://redirect.github.com/vitejs/vite/issues/22832">#22832</a>)
(<a
href="https://github.com/vitejs/vite/commit/55bba7bbd9de40d031360e4408fe91bff5b29ec9">55bba7b</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/24a611f1c83a976d32262628d42f683609746635"><code>24a611f</code></a>
release: v7.2.4</li>
<li><a
href="https://github.com/vitejs/vite/commit/2d66b7b14aa6dfd62f3d6a59ee8382ed5ca6fd32"><code>2d66b7b</code></a>
fix: revert &quot;perf(deps): replace debug with obug (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)&quot;</li>
<li><a
href="https://github.com/vitejs/vite/commit/a668014dba377c2b82a32d8124f1761e9ea74f82"><code>a668014</code></a>
release: v7.2.3</li>
<li><a
href="https://github.com/vitejs/vite/commit/acfe939e1f7c303c34b0b39b883cc302da767fa2"><code>acfe939</code></a>
perf(deps): replace debug with obug (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/4f8171eb3046bd70c83964689897dab4c6b58bc0"><code>4f8171e</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21128">#21128</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/50297208452241061cb44d09a4bbdf77a11ac01e"><code>5029720</code></a>
chore(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21127">#21127</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/5909efd8fbfd1bf1eab65427aea0613124b2797a"><code>5909efd</code></a>
fix: allow multiple <code>bindCLIShortcuts</code> calls with shortcut
merging (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21103">#21103</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/39a0a15fd24ed37257c48b795097a3794e54d255"><code>39a0a15</code></a>
chore(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21095">#21095</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/6a34ac3422686e7cf7cc9a25d299cb8e5a8d92a0"><code>6a34ac3</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21096">#21096</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/02ceaec45e17bef19159188a28d9196fed1761be"><code>02ceaec</code></a>
chore(deps): update dependency <code>@​rollup/plugin-commonjs</code> to
v29 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21099">#21099</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.1.5&new-version=8.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:12:57 +00:00
dependabot[bot] ce5be51d2d Bump @tabler/icons-react from 3.45.0 to 3.46.0 in /docs (#1802) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.45.0 to 3.46.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases">@​tabler/icons-react's
releases</a>.</em></p>
<blockquote>
<h2>Release 3.46.0</h2>
<!-- raw HTML omitted -->
<h3>18 new icons:</h3>
<ul>
<li><code>outline/play-bug</code></li>
<li><code>outline/play-bugs</code></li>
<li><code>outline/remote-control</code></li>
<li><code>outline/rocking-chair</code></li>
<li><code>outline/run-sprint</code></li>
<li><code>outline/sparkles-2-off</code></li>
<li><code>outline/tabs</code></li>
<li><code>outline/tags-chevron-down</code></li>
<li><code>outline/tags-chevron-left</code></li>
<li><code>outline/tags-chevron-right</code></li>
<li><code>outline/tags-chevron-up</code></li>
<li><code>outline/thinking-high</code></li>
<li><code>outline/thinking-low</code></li>
<li><code>outline/thinking-medium</code></li>
<li><code>outline/treasure-chest</code></li>
<li><code>outline/twig</code></li>
<li><code>outline/vault</code></li>
<li><code>outline/yarn</code></li>
</ul>
<p>Fixed icons: <code>outline/credits</code>,
<code>outline/currency-tether</code>,
<code>outline/device-3d-camera</code>,
<code>outline/device-screen</code>, <code>outline/home-lock</code>,
<code>outline/map-lock</code>, <code>outline/notdef</code>,
<code>outline/queue-pop-in</code>, <code>outline/server-bolt</code>,
<code>outline/server</code>, <code>outline/sparkles-2</code>,
<code>outline/transform-point-bottom-left</code>,
<code>outline/transform-point-bottom-right</code>,
<code>outline/transform-point-top-left</code>,
<code>outline/transform-point-top-right</code></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/8ac7d81b72ece11072ef25ea9fd92e80c6f3c9fc"><code>8ac7d81</code></a>
Release 3.46.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/fe319f05d943a17efb29c5089e21364d3975843c"><code>fe319f0</code></a>
Add publishConfig for public access in all icon packages (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1562">#1562</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.45.0&new-version=3.46.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:11:50 +00:00
dependabot[bot] f35729c089 Bump oxlint from 1.75.0 to 1.76.0 in /docs (#1801) 
Bumps [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint)
from 1.75.0 to 1.76.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/releases">oxlint's
releases</a>.</em></p>
<blockquote>
<h2>oxlint v1.76.0 &amp; oxfmt v0.61.0</h2>
<h2>Table of Contents</h2>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/blob/HEAD/#oxlint-v1.76.0">Oxlint
v1.76.0</a></li>
<li><a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/blob/HEAD/#oxfmt-v0.61.0">Oxfmt
v0.61.0</a></li>
</ul>
<h2>Oxlint v1.76.0</h2>
<h3>🚀 Features</h3>
<ul>
<li>8d31dfa linter: Verify eslint/no-restricted-globals config schema
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>)
(vigneshwar)</li>
<li>7069621 linter: Verify jest/vitest prefer-lowercase-title config
schema (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>)
(Bartok)</li>
<li>016cf2a linter/oxc: Add bad-match-all-arg rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>)
(camc314)</li>
<li>cdc941e linter/n: Implement <code>exports-style</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>)
(Mikhail Baev)</li>
<li>1ad6f6c linter/eslint: Implement <code>id-denylist</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>)
(Mikhail Baev)</li>
<li>678bbb5 linter/typescript-eslint: Implement suggestion for
<code>class-literal-property-style</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24766">#24766</a>)
(Mikhail Baev)</li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>a5f3a0e linter: Mark missing suggestions as pending (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24956">#24956</a>)
(Mikhail Baev)</li>
<li>a065946 oxlint: Absolutize explicit CLI paths even with --no-ignore
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24646">#24646</a>)
(Bez Sahara)</li>
<li>17688bb linter/jsx-a11y/interactive-supports-focus: Match eslint
behavior for custom components (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24780">#24780</a>)
(Cole Ellison)</li>
<li>0aef19e linter/typescript/no-confusing-non-null-assertion: Report
<code>in</code> and <code>instanceof</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24825">#24825</a>)
(Mikhail Baev)</li>
<li>361dce9 linter: Unicorn/no-array-reverse and no-array-sort
replacements should be suggestions (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24848">#24848</a>)
(klem)</li>
<li>9213560 config: Preserve defineConfig field JSDoc (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24326">#24326</a>)
(周星星同学)</li>
<li>334d884 linter/node/no-top-level-await: Clarify diagnostic (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24803">#24803</a>)
(camc314)</li>
<li>b9fc6af linter/eslint/func-names: Ignore overloads (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24801">#24801</a>)
(camc314)</li>
<li>e80574f estree: Handle empty spans serializing
<code>ImportMeta</code> and <code>NewTarget</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24775">#24775</a>)
(overlookmotel)</li>
</ul>
<h3>⚡ Performance</h3>
<ul>
<li>e9de5a1 linter/jest-vitest/no-test-return-statement: Only run on
return statements (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24167">#24167</a>)
(Cam McHenry)</li>
<li>aea459d linter/eslint/func-style: Rewrite rule to not iterate over
all nodes (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24156">#24156</a>)
(Cam McHenry)</li>
<li>fb4398c linter/eslint/no-new-func: Only run on new and call
expressions (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24166">#24166</a>)
(Cam McHenry)</li>
<li>c75dc60 linter: Avoid <code>Vec</code> allocations via
<code>bound_names</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24959">#24959</a>)
(connorshea)</li>
<li>9f9f39d linter/eslint/no-const-assign: Avoid <code>Vec</code>
allocation per <code>const</code> declarator (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24953">#24953</a>)
(connorshea)</li>
<li>10a621e linter/typescript/adjacent-overload-signatures: Avoid
collecting vec in some cases (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24874">#24874</a>)
(connorshea)</li>
<li>ed167e1 linter/node/exports-style: Iterate once over global
references (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24877">#24877</a>)
(connorshea)</li>
<li>69908fe linter: Avoid allocations in jest/no-deprecated-functions
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24866">#24866</a>)
(Connor Shea)</li>
<li>a3585d7 linter: Speed up jest/vitest prefer-each (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24872">#24872</a>)
(Connor Shea)</li>
<li>62fe640 linter/eslint/prefer-rest-params: Run once per file (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24873">#24873</a>)
(Connor Shea)</li>
<li>7a7aa54 linter/eslint/no-this-before-super: Skip files without
classes (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24869">#24869</a>)
(Connor Shea)</li>
<li>4ad0c94 linter/plugins: Faster copying comments to JS allocator (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24858">#24858</a>)
(overlookmotel)</li>
<li>4c25b91 linter/plugins: Test booleans with explicit <code>===
false</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24830">#24830</a>)
(overlookmotel)</li>
<li>b7add00 linter/plugins: Remove check in loop in
<code>getDisableDirectives</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24833">#24833</a>)
(overlookmotel)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>3ff2e0e linter: Clarify config extends types (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>)
(Boshen)</li>
</ul>
<h2>Oxfmt v0.61.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md">oxlint's
changelog</a>.</em></p>
<blockquote>
<h2>[1.76.0] - 2026-07-27</h2>
<h3>🚀 Features</h3>
<ul>
<li>8d31dfa linter: Verify eslint/no-restricted-globals config schema
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>)
(vigneshwar)</li>
<li>7069621 linter: Verify jest/vitest prefer-lowercase-title config
schema (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>)
(Bartok)</li>
<li>016cf2a linter/oxc: Add bad-match-all-arg rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>)
(camc314)</li>
<li>cdc941e linter/n: Implement <code>exports-style</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>)
(Mikhail Baev)</li>
<li>1ad6f6c linter/eslint: Implement <code>id-denylist</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>)
(Mikhail Baev)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>3ff2e0e linter: Clarify config extends types (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>)
(Boshen)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/65fe65d8429e1d1bdf86c517ff08bd119ee87660"><code>65fe65d</code></a>
release(apps): oxlint v1.76.0 &amp;&amp; oxfmt v0.61.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24976">#24976</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/3ff2e0e6fa1670d2300b2fb44dddc08c2df50a00"><code>3ff2e0e</code></a>
docs(linter): clarify config extends types (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24936">#24936</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/8d31dfa3934b0c8d276e022ad546836ee6d1dcd7"><code>8d31dfa</code></a>
feat(linter): verify eslint/no-restricted-globals config schema (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24598">#24598</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/7069621199a47158b853743ab6664126ec7b24b4"><code>7069621</code></a>
feat(linter): verify jest/vitest prefer-lowercase-title config schema
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24724">#24724</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/016cf2acd64e4f6d34226aecc84e69d342708858"><code>016cf2a</code></a>
feat(linter/oxc): add bad-match-all-arg rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24900">#24900</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/cdc941e5f81d00dfca63cc17cc39eb6d1462a9ed"><code>cdc941e</code></a>
feat(linter/n): implement <code>exports-style</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24087">#24087</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/1ad6f6c823da92a9b70a9f8c23d355d1b99f9e75"><code>1ad6f6c</code></a>
feat(linter/eslint): implement <code>id-denylist</code> rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint/issues/24632">#24632</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxlint_v1.76.0/npm/oxlint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oxlint&package-manager=npm_and_yarn&previous-version=1.75.0&new-version=1.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:11:43 +00:00
dependabot[bot] 203a98b838 Bump docker/login-action from 4.5.1 to 4.6.0 (#1800) 
Bumps [docker/login-action](https://github.com/docker/login-action) from
4.5.1 to 4.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.0</h2>
<ul>
<li>Harden buildx scoped config path handling by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1059">docker/login-action#1059</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1095.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1051">docker/login-action#1051</a></li>
<li>Bump js-yaml from 5.2.1 to 5.2.2 in <a
href="https://redirect.github.com/docker/login-action/pull/1057">docker/login-action#1057</a></li>
<li>Bump postcss from 8.5.10 to 8.5.22 in <a
href="https://redirect.github.com/docker/login-action/pull/1056">docker/login-action#1056</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.5.2...v4.6.0">https://github.com/docker/login-action/compare/v4.5.2...v4.6.0</a></p>
<h2>v4.5.2</h2>
<ul>
<li>Surface Docker Hub OIDC error responses by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1058">docker/login-action#1058</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.5.1...v4.5.2">https://github.com/docker/login-action/compare/v4.5.1...v4.5.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/dbcb813823bdd20940b903addbd779551569679f"><code>dbcb813</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1051">#1051</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li>
<li><a
href="https://github.com/docker/login-action/commit/5bcb015ee6ec720ecdeaef2dc1164122e9b209fc"><code>5bcb015</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/b30b2f2d3196c1714318ba0c3c3bec211d949752"><code>b30b2f2</code></a>
build(deps): bump the aws-sdk-dependencies group across 1 directory with
2 up...</li>
<li><a
href="https://github.com/docker/login-action/commit/9087f1e6d666fe0292409e3c819680c18526e108"><code>9087f1e</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1057">#1057</a>
from docker/dependabot/npm_and_yarn/js-yaml-5.2.2</li>
<li><a
href="https://github.com/docker/login-action/commit/0009830ea169ca16c24c0ea4cac1c325bfa3aee4"><code>0009830</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/23255232d3e43c8f0052d9a0dba82a515a88ce92"><code>2325523</code></a>
build(deps): bump js-yaml from 5.2.1 to 5.2.2</li>
<li><a
href="https://github.com/docker/login-action/commit/4ec1d4a769e8b05a89a7396551dc38b329211688"><code>4ec1d4a</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1056">#1056</a>
from docker/dependabot/npm_and_yarn/postcss-8.5.22</li>
<li><a
href="https://github.com/docker/login-action/commit/5fc99ba47bca274c5a499688f71c7ea79c0ea1b3"><code>5fc99ba</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1053">#1053</a>
from docker/dependabot/github_actions/aws-actions/co...</li>
<li><a
href="https://github.com/docker/login-action/commit/e512bd59d16c53d79ea5c0f0e345fe554453c4bb"><code>e512bd5</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1052">#1052</a>
from docker/dependabot/github_actions/codeql-actions...</li>
<li><a
href="https://github.com/docker/login-action/commit/a146c91b8f371700d323bae808af7cbdc2766ed5"><code>a146c91</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1059">#1059</a>
from crazy-max/harden-buildx-scope-paths</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/v4.5.1...v4.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.5.1&new-version=4.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:05:35 +00:00
github-actions[bot] fcd82fe580 Update contributors in readme (#1799) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-08-31 14:43:16 +00:00
dependabot[bot] 5ce2024b19 Bump @types/node from 26.0.1 to 26.1.1 in /frontend (#1798) 
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 26.0.1 to 26.1.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:15:27 +00:00
dependabot[bot] 44885368e1 Bump date-fns from 4.1.0 to 4.4.0 in /frontend (#1797) 
Bumps [date-fns](https://github.com/date-fns/date-fns) from 4.1.0 to
4.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/date-fns/date-fns/releases">date-fns's
releases</a>.</em></p>
<blockquote>
<h2>v4.4.0</h2>
<p>This release revisits the approach to CDN usage and introduces a new
package, <code>@date-fns/cdn</code> and deprecates the
<code>date-fns</code> CDN scripts. It allowed reducing the zipped
package size from <code>5.83 MB</code> down to <code>3.96 MB</code>
without introducing any breaking changes.</p>
<p>In <code>v5.0.0-alpha.0</code> where CDN scripts are completely
removed from <code>date-fns</code> the change is more significant and
brings the zipped package size down to <code>2.89 MB</code>.</p>
<p>It is just the first step in optimizing the package size. Expect
further size reduction in the future v4 and v5 versions.</p>
<h3>Changed</h3>
<ul>
<li>
<p><strong>DEPRECATED</strong>: The <code>date-fns</code> CDN scripts
are now deprecated and will be removed in the next major release. Please
switch to the new <code>@date-fns/cdn</code> package for CDN usage.</p>
</li>
<li>
<p>Removed CDN source maps to reduce the package size. If you rely on
them, please switch to the new <code>@date-fns/cdn</code> package that
still includes them.</p>
</li>
</ul>
<h2>v4.3.0</h2>
<p>Kudos to <a
href="https://github.com/ImRodry"><code>@​ImRodry</code></a> and <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>
for their contributions.</p>
<h3>Fixed</h3>
<ul>
<li>
<p>Fixed missing modularized optimization fallback (<a
href="https://x.com/kossnocorp/status/1731181274579325260">for Next.js
and others</a>). See <a
href="https://x.com/kossnocorp/status/1731181274579325260">#4193</a>.</p>
</li>
<li>
<p>Fixed <code>pt</code> locale first day of week to be Sunday. See <a
href="https://redirect.github.com/date-fns/date-fns/pull/4195">#4195</a>
by <a href="https://github.com/ImRodry"><code>@​ImRodry</code></a>.</p>
</li>
<li>
<p>Fixed <code>zh-CN</code>, <code>zh-HK</code>, and <code>zh-TW</code>
locale month parsing for October, November, and December. See <a
href="https://redirect.github.com/date-fns/date-fns/pull/4194">#4194</a>
by <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>.</p>
</li>
</ul>
<h2>v4.2.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fixed type definitions missing in v4.2.0 due to TypeScript
misconfiguration.</li>
</ul>
<h2>v4.2.0</h2>
<p>This is a minor release in all senses, it only includes documentation
updates (first of many) that points to the new <a
href="https://date-fns.org/you-dont-need-date-fns">You Don't Need
date-fns*</a> page.</p>
<p>* Not really</p>
<h3>Changed</h3>
<ul>
<li>Added Temporal API references to the JSDoc annotations of
<code>add</code>, <code>addBusinessDays</code>, and
<code>addDays</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/date-fns/date-fns/commit/cd53d2538cfa318404eff7ade6449b49bf34562e"><code>cd53d25</code></a>
Promote to v4.4.0</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/d948ec151d395096de8a45fbcd9b1e79c26fda25"><code>d948ec1</code></a>
Preserve but deprecate CDN versions for v4, set up v5 with
polyfills</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/ee65753cfc5d73cc9acd43aaa8012b3b233ddf32"><code>ee65753</code></a>
Add root <code>mise :format</code> task</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/9f5bdf5d5a944772aa9668c4fa6567d89ca01fa9"><code>9f5bdf5</code></a>
Add positional argument to <code>test/smoke.sh</code> script</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/651ead6faf331515814803faf457f5b9db7c9729"><code>651ead6</code></a>
Split CDN bundles into separate <code>@​date-fns/cdn</code> package</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/224c1a209967dad359a2c2adc9a5b0ef72e4fe7b"><code>224c1a2</code></a>
Deprecate type tests as attw hangs on date-fns package</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/7bb2842dac3d579f84b2de62f015335fb3ac734a"><code>7bb2842</code></a>
Switch <code>PACKAGE_OUTPUT_PATH</code> to <code>--dist</code> flag in
the package build script</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/b6ad5acc5ab0b40777a2695ec074c2ffcd982763"><code>b6ad5ac</code></a>
Add flags to control package build script</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/424a783de1fd974bcdbe907c9c5eb5154e9db29f"><code>424a783</code></a>
Fix docs release after moving to monorepo setup</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/f95bcf18b53e6832b2c575c24c98654a24f52699"><code>f95bcf1</code></a>
(docs): Add missing <code>tsx</code> dependency</li>
<li>Additional commits viewable in <a
href="https://github.com/date-fns/date-fns/compare/v4.1.0...v4.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=date-fns&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:12:19 +00:00
dependabot[bot] 61d7893e64 Bump vite from 8.0.16 to 8.1.5 in /frontend (#1795) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.0.16 to 8.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.1.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.1.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.1.4...v8.1.5">8.1.5</a>
(2026-07-16)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bundled-dev:</strong> avoid duplicated <code>buildEnd</code>
(<a
href="https://redirect.github.com/vitejs/vite/issues/22931">#22931</a>)
(<a
href="https://github.com/vitejs/vite/commit/810032097079be1a7da0e2b09ec9d92dd07ec13f">8100320</a>)</li>
<li><strong>client:</strong> overlay error message format align rolldown
(<a
href="https://redirect.github.com/vitejs/vite/issues/22869">#22869</a>)
(<a
href="https://github.com/vitejs/vite/commit/5a72b8780705b575026617e86b0b92dea63a56a5">5a72b87</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22921">#22921</a>)
(<a
href="https://github.com/vitejs/vite/commit/fef682d3f067d534a559faf6fd9baedda2e9f8f1">fef682d</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22922">#22922</a>)
(<a
href="https://github.com/vitejs/vite/commit/3c345e475a5546a1cc6374682af89caebfe9c593">3c345e4</a>)</li>
<li><strong>module-runner:</strong> don't crash stack-trace source
mapping when globalThis.Buffer is absent (<a
href="https://redirect.github.com/vitejs/vite/issues/22945">#22945</a>)
(<a
href="https://github.com/vitejs/vite/commit/f8b38e316bcefbf29f762f90ee49c88cd52c43b5">f8b38e3</a>)</li>
<li><strong>optimizer:</strong> respect importer module format for
dynamic import interop with CJS deps (<a
href="https://redirect.github.com/vitejs/vite/issues/22951">#22951</a>)
(<a
href="https://github.com/vitejs/vite/commit/6c08c39ac4fb5868d080a51ff976a44693fc56ab">6c08c39</a>)</li>
<li><strong>ssr:</strong> scope switch-case declarations to the switch,
not the function (<a
href="https://redirect.github.com/vitejs/vite/issues/22893">#22893</a>)
(<a
href="https://github.com/vitejs/vite/commit/b59a73f76f5557492d83d097bb33b3dd02f27d51">b59a73f</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>build:</strong> fix incorrect <code>@default</code> for
build.cssMinify (<a
href="https://redirect.github.com/vitejs/vite/issues/22948">#22948</a>)
(<a
href="https://github.com/vitejs/vite/commit/c88c236186d8e2384653e382dd0960ca1ff5b24c">c88c236</a>)</li>
<li><strong>build:</strong> fix incorrect <code>@default</code> for
build.lib.formats (<a
href="https://redirect.github.com/vitejs/vite/issues/22911">#22911</a>)
(<a
href="https://github.com/vitejs/vite/commit/369ed609a4aace3aee4e4194a54990694aa4e7ac">369ed60</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li>avoid scanner scanning all files under <code>__tests__</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22912">#22912</a>)
(<a
href="https://github.com/vitejs/vite/commit/c961cae2868cc1521457ec60583867f0440e6949">c961cae</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.1.3...v8.1.4">8.1.4</a>
(2026-07-09)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li><strong>legacy:</strong> prefer oxc as minifier (fix <a
href="https://redirect.github.com/vitejs/vite/issues/21973">#21973</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/22468">#22468</a>)
(<a
href="https://github.com/vitejs/vite/commit/ab5dafa8e66296ef201f615489fb57954bb740ce">ab5dafa</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> add workaround for building on stackblitz
(<a
href="https://redirect.github.com/vitejs/vite/issues/22840">#22840</a>)
(<a
href="https://github.com/vitejs/vite/commit/575c32c29925c554f4ef4068738ab89c6878f615">575c32c</a>)</li>
<li><strong>build:</strong> keep <code>import.meta.url</code> in preload
function as-is (<a
href="https://redirect.github.com/vitejs/vite/issues/22839">#22839</a>)
(<a
href="https://github.com/vitejs/vite/commit/f1f90ed4742b3cf453428c7e581a6016a4d47321">f1f90ed</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22865">#22865</a>)
(<a
href="https://github.com/vitejs/vite/commit/d4295a9ffce428c0e51892373e00c07fccc0498a">d4295a9</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22866">#22866</a>)
(<a
href="https://github.com/vitejs/vite/commit/7cf07e4c5f7a6af276012e0c2ec06e08499e951e">7cf07e4</a>)</li>
<li><strong>html:</strong> avoid backtracking in import-only check (<a
href="https://redirect.github.com/vitejs/vite/issues/22848">#22848</a>)
(<a
href="https://github.com/vitejs/vite/commit/b5868c01a124d345664450aaebd677bfba964c05">b5868c0</a>)</li>
<li><strong>optimizer:</strong> avoid optimizer run for transform
request before init (<a
href="https://redirect.github.com/vitejs/vite/issues/22852">#22852</a>)
(<a
href="https://github.com/vitejs/vite/commit/72a5e2192506f51a5efd09c059815a5c43a9eacb">72a5e21</a>)</li>
<li><strong>ssr:</strong> align named export function call stacktrace
column with Node (<a
href="https://redirect.github.com/vitejs/vite/issues/22829">#22829</a>)
(<a
href="https://github.com/vitejs/vite/commit/173a1b648c321e0f836e5a94fc47c4fa9b081bfc">173a1b6</a>)</li>
<li>strip pure CSS chunk imports when chunkImportMap is enabled (<a
href="https://redirect.github.com/vitejs/vite/issues/22841">#22841</a>)
(<a
href="https://github.com/vitejs/vite/commit/648bd04933093d0aac9565f21a49811437776886">648bd04</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>fix incorrect <code>@default</code> for <code>server.cors</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22859">#22859</a>)
(<a
href="https://github.com/vitejs/vite/commit/70435b2551ee4fe3a0d55c8a3bb61b96f44d2763">70435b2</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update dependency postcss-modules to v9 (<a
href="https://redirect.github.com/vitejs/vite/issues/22867">#22867</a>)
(<a
href="https://github.com/vitejs/vite/commit/a9539d69efc7a4ccf988bbf5da31c2b416ba990e">a9539d6</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li>eliminate ineffectiveDynamicImport warn (<a
href="https://redirect.github.com/vitejs/vite/issues/22876">#22876</a>)
(<a
href="https://github.com/vitejs/vite/commit/ea22fb352aad9a42c0a9d08f39d8a0bae8c111a5">ea22fb3</a>)</li>
</ul>
<h3>Tests</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/5e7fe129a4dde4f41934083b25e490059985f4e6"><code>5e7fe12</code></a>
release: v8.1.5</li>
<li><a
href="https://github.com/vitejs/vite/commit/6c08c39ac4fb5868d080a51ff976a44693fc56ab"><code>6c08c39</code></a>
fix(optimizer): respect importer module format for dynamic import
interop wit...</li>
<li><a
href="https://github.com/vitejs/vite/commit/5a72b8780705b575026617e86b0b92dea63a56a5"><code>5a72b87</code></a>
fix(client): overlay error message format align rolldown (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22869">#22869</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/f8b38e316bcefbf29f762f90ee49c88cd52c43b5"><code>f8b38e3</code></a>
fix(module-runner): don't crash stack-trace source mapping when
globalThis.Bu...</li>
<li><a
href="https://github.com/vitejs/vite/commit/810032097079be1a7da0e2b09ec9d92dd07ec13f"><code>8100320</code></a>
fix(bundled-dev): avoid duplicated <code>buildEnd</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22931">#22931</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/c88c236186d8e2384653e382dd0960ca1ff5b24c"><code>c88c236</code></a>
docs(build): fix incorrect <code>@default</code> for build.cssMinify (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22948">#22948</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/b59a73f76f5557492d83d097bb33b3dd02f27d51"><code>b59a73f</code></a>
fix(ssr): scope switch-case declarations to the switch, not the function
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22">#22</a>...</li>
<li><a
href="https://github.com/vitejs/vite/commit/fef682d3f067d534a559faf6fd9baedda2e9f8f1"><code>fef682d</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22921">#22921</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/3c345e475a5546a1cc6374682af89caebfe9c593"><code>3c345e4</code></a>
fix(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22922">#22922</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/369ed609a4aace3aee4e4194a54990694aa4e7ac"><code>369ed60</code></a>
docs(build): fix incorrect <code>@default</code> for build.lib.formats
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22911">#22911</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.1.5/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.0.16&new-version=8.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:12:06 +00:00
dependabot[bot] 5169542733 Bump ruff from 0.15.0 to 0.16.0 in /backend (#1794) 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.0 to 0.16.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/releases">ruff's
releases</a>.</em></p>
<blockquote>
<h2>0.16.0</h2>
<h2>Release Notes</h2>
<p>Released on 2026-07-23.</p>
<p>Check out the <a href="https://astral.sh/blog/ruff-v0.16.0">blog
post</a> for a migration guide and overview of the changes!</p>
<h3>Breaking changes</h3>
<ul>
<li>
<p>Ruff now enables a much larger set of rules by default (413, up from
59). See the blog post for more details and the new <a
href="https://docs.astral.sh/ruff/default-rules/">Default Rules</a> page
for a full listing of the enabled rules. Note that this is primarily an
expansion, but 18 of the more opinionated pycodestyle (<code>E</code>)
and pyflakes (<code>F</code>) rules have been removed from the default
set: <code>E401</code>, <code>E402</code>, <code>E701</code>,
<code>E702</code>, <code>E703</code>, <code>E711</code>,
<code>E712</code>, <code>E713</code>, <code>E714</code>,
<code>E721</code>, <code>E731</code>, <code>E741</code>,
<code>E742</code>, <code>E743</code>, <code>F403</code>,
<code>F405</code>, <code>F406</code>, and <code>F722</code>.</p>
</li>
<li>
<p>Ruff can now format Python code blocks in Markdown files and will do
this by default. See the <a
href="https://docs.astral.sh/ruff/formatter/#markdown-code-formatting">documentation</a>
for more details.</p>
</li>
<li>
<p>Ruff now supports <code>ruff: ignore</code> comments at the ends of
lines, like <code>noqa</code> comments, or on the line preceding a
diagnostic. For example, these both suppress an <a
href="https://docs.astral.sh/ruff/rules/unused-import/"><code>unused-import</code></a>
(<code>F401</code>) diagnostic:</p>
<pre lang="py"><code>import math  # ruff: ignore[F401]
<h1>ruff: ignore[F401]</h1>
<p>import os
</code></pre></p>
</li>
<li>
<p>Fixes are now shown in <code>check</code> and <code>format
--check</code> output:</p>
<pre lang="console"><code>❯ ruff format --check .
unformatted: File would be reformatted
 --&gt; try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
<p>1 file would be reformatted
</code></pre></p>
<p>This example also shows off the Markdown formatting.</p>
</li>
<li>
<p><code>format --check</code> now supports the same output formats as
the linter, including the <code>github</code> and <code>gitlab</code>
outputs for rendering annotations in CI:</p>
<pre lang="console"><code>❯ ruff format --check --output-format github .
::error title=ruff
(unformatted),file=try.md,line=2,col=8,endLine=2,endColumn=10::try.md:2:8:
unformatted: File would be reformatted
</code></pre>
<p>See the CLI help or <a
href="https://docs.astral.sh/ruff/settings/#output-format">documentation</a>
for the full list of supported formats.</p>
</li>
<li>
<p>The <code>filename</code>, <code>location</code>,
<code>end_location</code>, <code>fix.edits[].location</code>, and
<code>fix.edits[].end_location</code> fields in the JSON output format
may now be <code>null</code> rather than defaulting to the empty string
and row 1, column 1, respectively.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's
changelog</a>.</em></p>
<blockquote>
<h2>0.16.0</h2>
<p>Released on 2026-07-23.</p>
<p>Check out the <a href="https://astral.sh/blog/ruff-v0.16.0">blog
post</a> for a migration
guide and overview of the changes!</p>
<h3>Breaking changes</h3>
<ul>
<li>
<p>Ruff now enables a much larger set of rules by default (413, up from
59). See the blog post for
more details and the new <a
href="https://docs.astral.sh/ruff/default-rules/">Default Rules</a> page
for a
full listing of the enabled rules. Note that this is primarily an
expansion, but 18 of the more
opinionated pycodestyle (<code>E</code>) and pyflakes (<code>F</code>)
rules have been removed from the default set:
<code>E401</code>, <code>E402</code>, <code>E701</code>,
<code>E702</code>, <code>E703</code>, <code>E711</code>,
<code>E712</code>, <code>E713</code>, <code>E714</code>,
<code>E721</code>, <code>E731</code>, <code>E741</code>,
<code>E742</code>, <code>E743</code>, <code>F403</code>,
<code>F405</code>, <code>F406</code>, and <code>F722</code>.</p>
</li>
<li>
<p>Ruff can now format Python code blocks in Markdown files and will do
this by default. See the
<a
href="https://docs.astral.sh/ruff/formatter/#markdown-code-formatting">documentation</a>
for more details.</p>
</li>
<li>
<p>Ruff now supports <code>ruff: ignore</code> comments at the ends of
lines, like <code>noqa</code> comments, or on the line preceding a
diagnostic. For example, these both suppress an <a
href="https://docs.astral.sh/ruff/rules/unused-import/"><code>unused-import</code></a>
(<code>F401</code>) diagnostic:</p>
<pre lang="py"><code>import math  # ruff: ignore[F401]
<h1>ruff: ignore[F401]</h1>
<p>import os
</code></pre></p>
</li>
<li>
<p>Fixes are now shown in <code>check</code> and <code>format
--check</code> output:</p>
<pre lang="console"><code>❯ ruff format --check .
unformatted: File would be reformatted
 --&gt; try.md:1:1
  |
1 | ```python
  - import   math
2 + import math
3 | ```
  |
<p>1 file would be reformatted
</code></pre></p>
<p>This example also shows off the Markdown formatting.</p>
</li>
<li>
<p><code>format --check</code> now supports the same output formats as
the linter, including the <code>github</code> and
<code>gitlab</code> outputs for rendering annotations in CI:</p>
<pre lang="console"><code></code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/ruff/commit/a2635fd8f39e1d34ce8074cb486809426148f3e9"><code>a2635fd</code></a>
Bump 0.16.0 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27136">#27136</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/34334491652f8ceca5246d15c5c5afe0d6bc77ae"><code>3433449</code></a>
[ty] Reuse full call diagnostics for implicit setter calls (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27115">#27115</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/22400709220931375e072ad5d7460b9fc781af78"><code>2240070</code></a>
Reflect <code>ruff: ignore</code> and <code>--add-ignore</code>
stabilization in documentation (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27">#27</a>...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/17ef71142c52230b923dad46ee5554140fc3fd2e"><code>17ef711</code></a>
Stabilize <code>--add-ignore</code> (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27125">#27125</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/ef912bbbe466856aa4aac10ad2a8856eb3d5aef3"><code>ef912bb</code></a>
Add newly stabilized rules to defaults (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27055">#27055</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/b30f04023281b46f12011f13ce6b45c247e0d2e3"><code>b30f040</code></a>
Stabilize new default rules (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27035">#27035</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/bcd70c5f10ea97ed52a785d70e7f33b83b7c697a"><code>bcd70c5</code></a>
Exclude Markdown files from <code>format-dev</code> runs (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27052">#27052</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/87e51e2cbbaed376fc13dead40fd772361fa07c0"><code>87e51e2</code></a>
Fix <code>format --check</code> spans for syntax errors (<a
href="https://redirect.github.com/astral-sh/ruff/issues/27045">#27045</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/afe2723a348364ac7f4b9abd76fc67779490c05e"><code>afe2723</code></a>
[<code>flake8-gettext</code>] Stabilize qualified-name and built-in
binding resolution (...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/a9702d8928344f77a41dbe535f655a69fb04e2df"><code>a9702d8</code></a>
[<code>flake8-bandit</code>] Stabilize string literal binding resolution
(<code>S310</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/issues/26944">#26944</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff/compare/0.15.0...0.16.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ruff&package-manager=uv&previous-version=0.15.0&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:11:52 +00:00
dependabot[bot] 5dad55b44a Bump @tabler/icons-react from 3.44.0 to 3.45.0 in /frontend (#1796) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.44.0 to 3.45.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases">@​tabler/icons-react's
releases</a>.</em></p>
<blockquote>
<h2>Release 3.45.0</h2>
<!-- raw HTML omitted -->
<h3>20 new icons:</h3>
<ul>
<li><code>filled/brand-signal</code></li>
<li><code>outline/app-window-bottom-left</code></li>
<li><code>outline/app-window-bottom-right</code></li>
<li><code>outline/app-window-bottom</code></li>
<li><code>outline/app-window-center</code></li>
<li><code>outline/arrow-fork-triple</code></li>
<li><code>outline/brand-signal</code></li>
<li><code>outline/device-vision-pro-wifi</code></li>
<li><code>outline/device-workstation</code></li>
<li><code>outline/dragon</code></li>
<li><code>outline/italic-off</code></li>
<li><code>outline/tab-close</code></li>
<li><code>outline/text-outline</code></li>
<li><code>outline/text-regex-asterisk</code></li>
<li><code>outline/text-regex-end</code></li>
<li><code>outline/text-regex-plus</code></li>
<li><code>outline/text-regex-question</code></li>
<li><code>outline/text-regex-start</code></li>
<li><code>outline/underline-off</code></li>
<li><code>outline/virtual-space</code></li>
</ul>
<h2>New features</h2>
<ul>
<li>New package: <code>@tabler/icons-astro</code> — Astro support</li>
<li>Added <code>sideEffects: false</code> for better tree-shaking in Vue
package</li>
<li>Spelling fixes: corrected misspelled icon names</li>
</ul>
<p>Fixed icons: <code>outline/flip-horizontal</code>,
<code>outline/flip-vertical</code></p>
<p>Renamed icons:</p>
<ul>
<li><code>filled/mood-confuzed</code> renamed to
<code>filled/mood-confused</code></li>
<li><code>outline/brand-adobe-after-effect</code> renamed to
<code>outline/brand-adobe-after-effects</code></li>
<li><code>outline/brand-kako-talk</code> renamed to
<code>outline/brand-kakao-talk</code></li>
<li><code>outline/currency-rubel</code> renamed to
<code>outline/currency-ruble</code></li>
<li><code>outline/foodsteps</code> renamed to
<code>outline/footsteps</code></li>
<li><code>outline/gender-trasvesti</code> renamed to
<code>outline/gender-travesti</code></li>
<li><code>outline/ikosaedr</code> renamed to
<code>outline/icosahedron</code></li>
<li><code>outline/mood-confuzed</code> renamed to
<code>outline/mood-confused</code></li>
<li><code>outline/physotherapist</code> renamed to
<code>outline/physiotherapist</code></li>
<li><code>outline/sport-billard</code> renamed to
<code>outline/sport-billiard</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/975920ff99c12c4dc9e3fe61a03738330600f9b2"><code>975920f</code></a>
Release 3.45.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/4a4b287666235d2dd371f5cf02f96cfbeea235f1"><code>4a4b287</code></a>
Add Astro support for Tabler Icons (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1559">#1559</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.45.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.44.0&new-version=3.45.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:11:18 +00:00
dependabot[bot] cedc711154 Bump @mantine/form from 9.0.1 to 9.4.2 in /frontend (#1793) 
Bumps
[@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form)
from 9.0.1 to 9.4.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mantinedev/mantine/releases">@​mantine/form's
releases</a>.</em></p>
<blockquote>
<h2>9.4.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>[@mantine/schedule]</code> Fix 1-3 minutes events not aligning
correctly in ResourcesWeekView and ResourcesDayView (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9057">#9057</a>)</li>
<li><code>[@mantine/form]</code> Fix async validation with debounce on
initial keystroke of empty input (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9068">#9068</a>)</li>
<li><code>[@mantine/core]</code> Add <code>keepMountedMode</code> prop
to Modal and Drawer components (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9056">#9056</a>)</li>
<li><code>[@mantine/core]</code> Menubar: Fix menu requiring two clicks
to dismiss after switching menus with hover (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9050">#9050</a>)</li>
<li><code>[@mantine/core]</code> AppShell: Fix
<code>breakpoint={0}</code> not working correctly (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9042">#9042</a>)</li>
<li><code>[@mantine/core]</code> Tree: Fix keyboard navigation not
working on Safari (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9049">#9049</a>)</li>
<li><code>[@mantine/notifications]</code> NotificationContainer: Fix
<code>autoClose</code> leak (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9048">#9048</a>)</li>
<li><code>[@mantine/core]</code> Collapse: Add
<code>keepMountedMode</code> prop (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9021">#9021</a>)</li>
<li><code>[@mantine/dates]</code> TimePicker: Fix incorrect
<code>withSeconds</code> handling when pasting partial values (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9041">#9041</a>)</li>
<li><code>[@mantine/schedule]</code> Add option to customize current
time in ResourcesDayView and ResourcesWeekView components</li>
<li><code>[@mantine/core]</code> TreeSelect: Add <code>expand</code>
callback to <code>renderNode</code> payload</li>
<li><code>[@mantine/core]</code> Fix incorrect empty children arrays
handling in Tree and TreeSelect</li>
<li><code>[@mantine/hooks]</code> Fix unstable
<code>scrollIntoView</code> for some bundlers (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9035">#9035</a>)</li>
<li><code>[@mantine/schedule]</code> Add <code>intervalMinutes</code>
more than 60 support to ResourcesDayView and ResourcesWeekView</li>
<li><code>[@mantine/schedule]</code> ResourcesWeekView: Fix incorrect
handling of events with small duration</li>
<li><code>[@mantine/schedule]</code> ResourcesDayView: Fix events with
small durations not being visible</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/saadpocalypse"><code>@​saadpocalypse</code></a>
made their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9021">mantinedev/mantine#9021</a></li>
<li><a
href="https://github.com/Arman-Luthra"><code>@​Arman-Luthra</code></a>
made their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9050">mantinedev/mantine#9050</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mantinedev/mantine/compare/9.4.1...9.4.2">https://github.com/mantinedev/mantine/compare/9.4.1...9.4.2</a></p>
<h2>9.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li><code>[@mantine/form]</code> Fix some functions not working
correctly with react compiler (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9007">#9007</a>)</li>
<li><code>[@mantine/charts]</code> Heatmap: Fix values outside the
provided domain rendering with no fill (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8982">#8982</a>)</li>
<li><code>[@mantine/core]</code> RollingNumber: Fix rendering
<code>-0</code> for values that round to zero (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8983">#8983</a>)</li>
<li><code>[@mantine/core]</code> Slider: Fix incorrect marks labels
position in RTL layouts (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8996">#8996</a>)</li>
<li><code>[@mantine/hooks]</code> Fix use-set and use-map hooks using
stale values when used with React compiler (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9008">#9008</a>)</li>
<li><code>[@mantine/form]</code> Add <code>FormProviderProps</code> type
export (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9009">#9009</a>)</li>
<li><code>[@mantine/schedule]</code> ResourcesDayView: Fix incorrect
multiday events rendering (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9014">#9014</a>)</li>
<li><code>[@mantine/dates]</code> TimePicker: Fix duration values
greater than 9999 hours not working (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9002">#9002</a>)</li>
<li><code>[@mantine/core]</code> Menu: Mark <code>non-menuitem</code>
dropdown children as presentational (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9004">#9004</a>)</li>
<li><code>[@mantine/core]</code> Collapse: Fix <code>ref</code> and
<code>style</code> props not working when <code>transitionDuration:
0</code> (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9013">#9013</a>)</li>
<li><code>[@mantine/core]</code> Textarea: Fix autosize not working
correctly with <code>minRows</code> on initial render</li>
<li><code>[@mantine/schedule]</code> ResourcesWeekView: Add events
resizing support</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayu3456"><code>@​ayu3456</code></a> made
their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9013">mantinedev/mantine#9013</a></li>
<li><a
href="https://github.com/Sanjays2402"><code>@​Sanjays2402</code></a>
made their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9004">mantinedev/mantine#9004</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mantinedev/mantine/compare/9.4.0...9.4.1">https://github.com/mantinedev/mantine/compare/9.4.0...9.4.1</a></p>
<h2>9.4.0 🥵</h2>
<p><a href="https://mantine.dev/changelog/9-4-0">View changelog with
demos on mantine.dev website</a></p>
<h2>Support Mantine development</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mantinedev/mantine/commit/e5752de4067bd58f6cdd970660b3c8469a56d4e5"><code>e5752de</code></a>
[release] Version: 9.4.2</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/1d68be7025ceca3619eda9db00b9395c53b75c0a"><code>1d68be7</code></a>
[<code>@​mantine/form</code>] Fix async validation with debounce on
initial keystroke of em...</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/d709e0bc277255c2a857f138cc694028273d8697"><code>d709e0b</code></a>
[release] Version: 9.4.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/f53d726d4f7e32381cc3723e2f547e5136b151ae"><code>f53d726</code></a>
[<code>@​mantine/form</code>] Fix some functions not working correctly
with react compiler ...</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/61a8d3508c8bb296d24058407e2c584fe2e38a3c"><code>61a8d35</code></a>
[<code>@​mantine/form</code>] Add <code>FormProviderProps</code> type
export (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9009">#9009</a>)</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/75d5ab5b419f3aa560bb56fc1d75d7815c5fb2f8"><code>75d5ab5</code></a>
[release] Version: 9.4.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/73a04e07abd340d9e11cb956e04e8ee8dd105560"><code>73a04e0</code></a>
[release] Version: 9.3.2</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/33b8c0f3c1ce6dbdd692d4c2ecc805875aad3d26"><code>33b8c0f</code></a>
[release] Version: 9.3.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/bf03b9a0d9a5ece7ddf834532dcaf323907255ec"><code>bf03b9a</code></a>
[release] Version: 9.3.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/4685c4195a855641fcf0331dc6e0857bd03fdad8"><code>4685c41</code></a>
[release] Version: 9.2.2</li>
<li>Additional commits viewable in <a
href="https://github.com/mantinedev/mantine/commits/9.4.2/packages/@mantine/form">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@mantine/form&package-manager=npm_and_yarn&previous-version=9.0.1&new-version=9.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:11:02 +00:00
dependabot[bot] 29f4154e32 Bump fastapi from 0.139.0 to 0.140.0 in /backend (#1792) 
Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.139.0 to
0.140.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastapi/fastapi/releases">fastapi's
releases</a>.</em></p>
<blockquote>
<h2>0.140.0</h2>
<h3>Refactors</h3>
<ul>
<li>⚡️ Reduce memory usage in dependencies. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16049">#16049</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h3>Docs</h3>
<ul>
<li>📝 Fix links in docs. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15967">#15967</a>
by <a
href="https://github.com/YuriiMotov"><code>@​YuriiMotov</code></a>.</li>
<li>📝 Add Library Skills documentation. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16041">#16041</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>📝 Update docs to use uv projects by default. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16032">#16032</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>📝 Restructure FastAPI People and related pages. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16015">#16015</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h3>Internal</h3>
<ul>
<li>👷 Add CI memory benchmark. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16046">#16046</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>👥 Update FastAPI People - Sponsors. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16027">#16027</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🔥 Remove now-obsolete scripts to generate data for FastAPI People.
PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16016">#16016</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h2>0.139.2</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Refactor router route building to make it thread-safe, mainly
relevant for tests running in parallel threads (uncommon). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16013">#16013</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h2>0.139.1</h2>
<h3>Fixes</h3>
<ul>
<li>🐛 Fix frontend fallback support for doted paths like
<code>/users/john.doe</code>. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16011">#16011</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
</ul>
<h3>Docs</h3>
<ul>
<li>📝 Fix topic repository list not being displayed and
<code>skip_users</code> not being applied. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15995">#15995</a>
by <a
href="https://github.com/YuriiMotov"><code>@​YuriiMotov</code></a>.</li>
</ul>
<h3>Translations</h3>
<ul>
<li>🌐 Update translations for tr (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16005">#16005</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for zh-hant (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15996">#15996</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for fr (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16006">#16006</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for de (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15999">#15999</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for ko (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16004">#16004</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for zh (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16001">#16001</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for uk (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16003">#16003</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for ja (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15998">#15998</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for pt (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16000">#16000</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for es (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15997">#15997</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for ru (update-outdated). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/16002">#16002</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for hi (add-missing). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15990">#15990</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for hi (add-missing). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15925">#15925</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update translations for hi (add-missing). PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15797">#15797</a>
by <a
href="https://github.com/tiangolo"><code>@​tiangolo</code></a>.</li>
<li>🌐 Update <code>llm-prompt.md</code> for Hindi. PR <a
href="https://redirect.github.com/fastapi/fastapi/pull/15810">#15810</a>
by <a
href="https://github.com/YuriiMotov"><code>@​YuriiMotov</code></a>.</li>
<li>🌐 Fix language-specific translation prompt for Russian language. PR
<a
href="https://redirect.github.com/fastapi/fastapi/pull/15924">#15924</a>
by <a
href="https://github.com/YuriiMotov"><code>@​YuriiMotov</code></a>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastapi/fastapi/commit/255b912928904e3ba5980425a54d6837c8bd1a1c"><code>255b912</code></a>
🔖 Release version 0.140.0 (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16050">#16050</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/892eacd27dcdcfe6c5ea114543ff473cbbfd7c6f"><code>892eacd</code></a>
📝 Update release notes</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/027082950068d6e3897b5422ab6cde3168f7d8b0"><code>0270829</code></a>
⚡️ Reduce memory usage in dependencies (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16049">#16049</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/ae031be7b5a2df589f63f4d25389cf07b7b8fc86"><code>ae031be</code></a>
📝 Update release notes</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/f3644b33cdaf1b14868d77f1c309e0a455c6bac8"><code>f3644b3</code></a>
📝 Fix links in docs (<a
href="https://redirect.github.com/fastapi/fastapi/issues/15967">#15967</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/1e24ca0e12e9a66cecb1e42780b9116374e2618d"><code>1e24ca0</code></a>
📝 Update release notes</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/513c396322664bcb3bdcb3946c440a8ed8ef080b"><code>513c396</code></a>
👷 Add CI memory benchmark (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16046">#16046</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/a64dfbbd21a445288ff583d58e1f646fe6baf3af"><code>a64dfbb</code></a>
📝 Update release notes</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/4f155486f0c1465c5e1f8701544acc10cb8a78bb"><code>4f15548</code></a>
📝 Add Library Skills documentation (<a
href="https://redirect.github.com/fastapi/fastapi/issues/16041">#16041</a>)</li>
<li><a
href="https://github.com/fastapi/fastapi/commit/704fbe1439341994100622853f515a8af7ccc2eb"><code>704fbe1</code></a>
📝 Update release notes</li>
<li>Additional commits viewable in <a
href="https://github.com/fastapi/fastapi/compare/0.139.0...0.140.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastapi&package-manager=uv&previous-version=0.139.0&new-version=0.140.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:10:40 +00:00
dependabot[bot] 02ab76eeea Bump types-simplejson from 3.20.0.20250218 to 4.1.0.20260724 in /backend (#1791) 
Bumps [types-simplejson](https://github.com/python/typeshed) from
3.20.0.20250218 to 4.1.0.20260724.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/python/typeshed/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=types-simplejson&package-manager=uv&previous-version=3.20.0.20250218&new-version=4.1.0.20260724)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:10:27 +00:00
dependabot[bot] b2a0209ca4 Bump react-qr-code from 2.0.18 to 2.2.0 in /frontend (#1790) 
Bumps [react-qr-code](https://github.com/rosskhanas/react-qr-code) from
2.0.18 to 2.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rosskhanas/react-qr-code/releases">react-qr-code's
releases</a>.</em></p>
<blockquote>
<h2>Release 2.2.0</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.1...2.2.0">2.2.0</a>
(2026-06-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add types to package.json exports (<a
href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593">19158d2</a>)</li>
</ul>
<h2>Release 2.1.1</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.0...2.1.1">2.1.1</a>
(2026-06-08)</h2>
<h2>Release 2.0.21</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.20...2.0.21">2.0.21</a>
(2026-04-29)</h2>
<h2>Release 2.0.20</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.19...2.0.20">2.0.20</a>
(2026-04-29)</h2>
<h2>Release 2.0.19</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.0.19">2.0.19</a>
(2026-04-29)</h2>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rosskhanas/react-qr-code/blob/master/CHANGELOG.md">react-qr-code's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.1...2.2.0">2.2.0</a>
(2026-06-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add types to package.json exports (<a
href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593">19158d2</a>)</li>
</ul>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.0...2.1.1">2.1.1</a>
(2026-06-08)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.21...2.1.0">2.1.0</a>
(2026-06-08)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.20...2.0.21">2.0.21</a>
(2026-04-29)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.19...2.0.20">2.0.20</a>
(2026-04-29)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.0.19">2.0.19</a>
(2026-04-29)</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/821cb672ea8db747e75593d90d04c245f83dd2fa"><code>821cb67</code></a>
chore: release 2.2.0</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/a658bff4fe05d29c25c3d8be56b9aedf8dbf4529"><code>a658bff</code></a>
migrate from qr.js to qrcode-generator</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/fbf8bfd21f7063a372ba6be96cf0971d80e372bd"><code>fbf8bfd</code></a>
Merge pull request <a
href="https://redirect.github.com/rosskhanas/react-qr-code/issues/290">#290</a>
from Fleny113/fix/types</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593"><code>19158d2</code></a>
fix: add types to package.json exports</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/f2213b73d140e18950f61476c9ab702aacb56f44"><code>f2213b7</code></a>
chore: release 2.1.1</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/c0174ec975b2634c2992cda1a25bae64e02374ef"><code>c0174ec</code></a>
fix rn import</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/f08e7320aeb9c71cdfe9d674155eb19d68d3c77f"><code>f08e732</code></a>
chore: release 2.1.0</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/f48bdf2b0bdb7e84ec48cbc964342b3489b9e610"><code>f48bdf2</code></a>
build mjs with rollup</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/a2ac3f549bef3a5b5b92d4c6d4fcb4ca8b60ec82"><code>a2ac3f5</code></a>
refactor src</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/d95d7a3ba534d8115fe7eeebf9cb75478134f6e8"><code>d95d7a3</code></a>
upgrade babel &amp; other deps</li>
<li>Additional commits viewable in <a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-qr-code&package-manager=npm_and_yarn&previous-version=2.0.18&new-version=2.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:10:17 +00:00
dependabot[bot] ab7b2a1ad4 Bump lucide-react from 1.24.0 to 1.27.0 in /docs (#1789) 
Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 1.24.0 to 1.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.27.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): removed brand names from tags &amp; revised brand
stopwords by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4575">lucide-icons/lucide#4575</a></li>
<li>fix(docs): Fix site build by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4582">lucide-icons/lucide#4582</a></li>
<li>fix(icons): optimised <code>square-scissors</code> icons by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4581">lucide-icons/lucide#4581</a></li>
<li>fix(packages/angular): add more supported attributes for SVG nodes
by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4570">lucide-icons/lucide#4570</a></li>
<li>feat(icons): added <code>pending-cw</code> icon by <a
href="https://github.com/NielsLazaroms"><code>@​NielsLazaroms</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4439">lucide-icons/lucide#4439</a></li>
<li>fix(icons): changed <code>zap</code> and <code>zap-off</code> icons
by <a href="https://github.com/kapowaz"><code>@​kapowaz</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4536">lucide-icons/lucide#4536</a></li>
<li>feat(icons): add <code>square-off</code> icon by <a
href="https://github.com/october-learns"><code>@​october-learns</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4496">lucide-icons/lucide#4496</a></li>
<li>chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4572">lucide-icons/lucide#4572</a></li>
<li>fix(icons): changed <code>toolbox</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4571">lucide-icons/lucide#4571</a></li>
<li>feat(icons): add scan-square by <a
href="https://github.com/samuelalake"><code>@​samuelalake</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4550">lucide-icons/lucide#4550</a></li>
<li>feat(icons): added <code>user-shield</code> icon by <a
href="https://github.com/MArtytraM99"><code>@​MArtytraM99</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/3099">lucide-icons/lucide#3099</a></li>
<li>feat(icons): added <code>mosque</code> icon by <a
href="https://github.com/iskepr"><code>@​iskepr</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4494">lucide-icons/lucide#4494</a></li>
<li>fix(request-review): Remove pull_request_target by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4593">lucide-icons/lucide#4593</a></li>
<li>fix(icons): changed <code>feather</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4584">lucide-icons/lucide#4584</a></li>
<li>feat(ci): added custom prettier plugin for icon SVG files by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4576">lucide-icons/lucide#4576</a></li>
<li>ci(ci.yml): Remove concurrency in ci.yml by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4595">lucide-icons/lucide#4595</a></li>
<li>fix(icons): changed <code>barrel</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4592">lucide-icons/lucide#4592</a></li>
<li>feat(lab): Migrate lab to main repo. by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4521">lucide-icons/lucide#4521</a></li>
<li>fix(icons): changed <code>trophy</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4591">lucide-icons/lucide#4591</a></li>
<li>feat(analytics): add utm source and medium by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4596">lucide-icons/lucide#4596</a></li>
<li>feat(docs): Add lab requirement in pull_request_template.md by <a
href="https://github.com/danielbayley"><code>@​danielbayley</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3651">lucide-icons/lucide#3651</a></li>
<li>feat(icons): replaces <code>podcast</code> icon with new
<code>mic-*</code> icons by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4583">lucide-icons/lucide#4583</a></li>
<li>feat(icons): add layout-freeform by <a
href="https://github.com/samuelalake"><code>@​samuelalake</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4543">lucide-icons/lucide#4543</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/NielsLazaroms"><code>@​NielsLazaroms</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4439">lucide-icons/lucide#4439</a></li>
<li><a href="https://github.com/kapowaz"><code>@​kapowaz</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4536">lucide-icons/lucide#4536</a></li>
<li><a
href="https://github.com/october-learns"><code>@​october-learns</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4496">lucide-icons/lucide#4496</a></li>
<li><a
href="https://github.com/samuelalake"><code>@​samuelalake</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4550">lucide-icons/lucide#4550</a></li>
<li><a href="https://github.com/iskepr"><code>@​iskepr</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4494">lucide-icons/lucide#4494</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.26.0...1.27.0">https://github.com/lucide-icons/lucide/compare/1.26.0...1.27.0</a></p>
<h2>Version 1.26.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(docs): fix home page package links &amp; accessible labels by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4540">lucide-icons/lucide#4540</a></li>
<li>fix(icons): changed <code>columns-3-cog</code> icon by <a
href="https://github.com/kamilasw"><code>@​kamilasw</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4578">lucide-icons/lucide#4578</a></li>
<li>fix(icons): extended metadata of <code>ad</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4579">lucide-icons/lucide#4579</a></li>
<li>fix(icons): changed <code>book-open</code> icons by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4565">lucide-icons/lucide#4565</a></li>
<li>feat(icons): added <code>shield-keyhole</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4580">lucide-icons/lucide#4580</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/kamilasw"><code>@​kamilasw</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4578">lucide-icons/lucide#4578</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.25.0...1.26.0">https://github.com/lucide-icons/lucide/compare/1.25.0...1.26.0</a></p>
<h2>Version 1.25.0</h2>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/lucide-icons/lucide/commit/f229f83f0c42f46befeac3cfd8ef7aaa82a71325"><code>f229f83</code></a>
chore(depedencies): Update dependencies (<a
href="https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react/issues/4553">#4553</a>)</li>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lucide-react&package-manager=npm_and_yarn&previous-version=1.24.0&new-version=1.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:09:56 +00:00
dependabot[bot] 5317467706 Bump @tabler/icons-react from 3.44.0 to 3.45.0 in /docs (#1788) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.44.0 to 3.45.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases">@​tabler/icons-react's
releases</a>.</em></p>
<blockquote>
<h2>Release 3.45.0</h2>
<!-- raw HTML omitted -->
<h3>20 new icons:</h3>
<ul>
<li><code>filled/brand-signal</code></li>
<li><code>outline/app-window-bottom-left</code></li>
<li><code>outline/app-window-bottom-right</code></li>
<li><code>outline/app-window-bottom</code></li>
<li><code>outline/app-window-center</code></li>
<li><code>outline/arrow-fork-triple</code></li>
<li><code>outline/brand-signal</code></li>
<li><code>outline/device-vision-pro-wifi</code></li>
<li><code>outline/device-workstation</code></li>
<li><code>outline/dragon</code></li>
<li><code>outline/italic-off</code></li>
<li><code>outline/tab-close</code></li>
<li><code>outline/text-outline</code></li>
<li><code>outline/text-regex-asterisk</code></li>
<li><code>outline/text-regex-end</code></li>
<li><code>outline/text-regex-plus</code></li>
<li><code>outline/text-regex-question</code></li>
<li><code>outline/text-regex-start</code></li>
<li><code>outline/underline-off</code></li>
<li><code>outline/virtual-space</code></li>
</ul>
<h2>New features</h2>
<ul>
<li>New package: <code>@tabler/icons-astro</code> — Astro support</li>
<li>Added <code>sideEffects: false</code> for better tree-shaking in Vue
package</li>
<li>Spelling fixes: corrected misspelled icon names</li>
</ul>
<p>Fixed icons: <code>outline/flip-horizontal</code>,
<code>outline/flip-vertical</code></p>
<p>Renamed icons:</p>
<ul>
<li><code>filled/mood-confuzed</code> renamed to
<code>filled/mood-confused</code></li>
<li><code>outline/brand-adobe-after-effect</code> renamed to
<code>outline/brand-adobe-after-effects</code></li>
<li><code>outline/brand-kako-talk</code> renamed to
<code>outline/brand-kakao-talk</code></li>
<li><code>outline/currency-rubel</code> renamed to
<code>outline/currency-ruble</code></li>
<li><code>outline/foodsteps</code> renamed to
<code>outline/footsteps</code></li>
<li><code>outline/gender-trasvesti</code> renamed to
<code>outline/gender-travesti</code></li>
<li><code>outline/ikosaedr</code> renamed to
<code>outline/icosahedron</code></li>
<li><code>outline/mood-confuzed</code> renamed to
<code>outline/mood-confused</code></li>
<li><code>outline/physotherapist</code> renamed to
<code>outline/physiotherapist</code></li>
<li><code>outline/sport-billard</code> renamed to
<code>outline/sport-billiard</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/975920ff99c12c4dc9e3fe61a03738330600f9b2"><code>975920f</code></a>
Release 3.45.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/4a4b287666235d2dd371f5cf02f96cfbeea235f1"><code>4a4b287</code></a>
Add Astro support for Tabler Icons (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1559">#1559</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.45.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.44.0&new-version=3.45.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:09:35 +00:00
dependabot[bot] cfc288fff2 Bump @radix-ui/react-avatar from 1.1.11 to 1.2.6 in /docs (#1787) 
Bumps
[@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar)
from 1.1.11 to 1.2.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md">@​radix-ui/react-avatar's
changelog</a>.</em></p>
<blockquote>
<h2>1.2.6</h2>
<ul>
<li>Reverted breaking changes that caused compatibility issues with
React Server Components.</li>
<li>Updated dependencies: <code>@radix-ui/react-context@1.2.2</code>,
<code>@radix-ui/react-primitive@2.1.10</code>,
<code>@radix-ui/react-use-callback-ref@1.1.4</code>,
<code>@radix-ui/react-use-is-hydrated@0.1.3</code>,
<code>@radix-ui/react-use-layout-effect@1.1.4</code></li>
</ul>
<h2>1.2.5</h2>
<ul>
<li>Updated dependencies:
<code>@radix-ui/react-primitive@2.1.9</code></li>
</ul>
<h2>1.2.4</h2>
<ul>
<li>Republish through CI to attach provenance attestations. The previous
versions of these packages were published manually outside of CI and
therefore shipped without provenance; this patch re-releases the same
code through the CI pipeline so every package includes an
attestation.</li>
<li>Updated dependencies: <code>@radix-ui/primitive@1.1.7</code>,
<code>@radix-ui/react-context@1.2.1</code>,
<code>@radix-ui/react-primitive@2.1.8</code>,
<code>@radix-ui/react-use-callback-ref@1.1.3</code>,
<code>@radix-ui/react-use-is-hydrated@0.1.2</code>,
<code>@radix-ui/react-use-layout-effect@1.1.3</code></li>
</ul>
<h2>1.2.3</h2>
<ul>
<li>Improved tree-shaking so bundlers can drop unused components.
Component parts are now marked <code>/* @__PURE__ */</code> and use
named render functions instead of <code>Component.displayName =
...</code> assignments, which previously prevented dead-code elimination
with some bundlers.</li>
<li>Fix dev-only checks with conditional exports to drop dev-warnings
from production builds.</li>
<li>Updated dependencies: <code>@radix-ui/primitive@1.1.6</code>,
<code>@radix-ui/react-context@1.2.0</code>,
<code>@radix-ui/react-primitive@2.1.7</code>,
<code>@radix-ui/react-use-callback-ref@1.1.2</code>,
<code>@radix-ui/react-use-is-hydrated@0.1.1</code>,
<code>@radix-ui/react-use-layout-effect@1.1.2</code></li>
</ul>
<h2>1.2.2</h2>
<ul>
<li>Updated dependencies:
<code>@radix-ui/react-context@1.2.0</code></li>
</ul>
<h2>1.2.1</h2>
<ul>
<li>Updated dependencies:
<code>@radix-ui/react-primitive@2.1.7</code></li>
</ul>
<h2>1.2.0</h2>
<ul>
<li>Fixed several edge cases with Avatar's loading state
<ul>
<li>An avatar's fallback would not be displayed again if its image
component unmounted. This is now fixed.</li>
<li>Rendering multiple <code>Avatar.Image</code> components per
<code>Avatar.Root</code> was never supported and results in buggy,
unpredictable behavior. We now warn about this in development.</li>
<li>Zero-sized images were treated as <code>loading</code>, meaning that
<code>onLoadingStatusChange</code> is never called once loaded. A
zero-sized image now triggers an <code>error</code> status on load.</li>
</ul>
</li>
</ul>
<h3>Other updates</h3>
<ul>
<li>Fixed console warnings to show in test environments.</li>
<li>Updated dependencies:
<code>@radix-ui/react-primitive@2.1.6</code></li>
</ul>
<h2>1.1.12</h2>
<ul>
<li>Added repository.directory to all package.json files</li>
<li>Updated dependencies: <code>@radix-ui/react-context@1.1.4</code>,
<code>@radix-ui/react-primitive@2.1.5</code>,
<code>@radix-ui/react-use-callback-ref@1.1.2</code>,
<code>@radix-ui/react-use-is-hydrated@0.1.1</code>,
<code>@radix-ui/react-use-layout-effect@1.1.2</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​radix-ui/react-avatar</code> since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@radix-ui/react-avatar&package-manager=npm_and_yarn&previous-version=1.1.11&new-version=1.2.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:09:17 +00:00
dependabot[bot] 1c7ab4199d Bump autoprefixer from 10.4.22 to 10.5.4 in /docs (#1786) 
Bumps [autoprefixer](https://github.com/postcss/autoprefixer) from
10.4.22 to 10.5.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/autoprefixer/releases">autoprefixer's
releases</a>.</em></p>
<blockquote>
<h2>10.5.4</h2>
<ul>
<li>Fixed prefixed rule duplication (by <a
href="https://github.com/xianjianlf2"><code>@​xianjianlf2</code></a>).</li>
</ul>
<h2>10.5.3</h2>
<ul>
<li>Fixed brackets and gradient parser (<a
href="https://github.com/alanturing881"><code>@​alanturing881</code></a>).</li>
</ul>
<h2>10.5.2</h2>
<ul>
<li>Moved <code>-webkit-fill-available</code> before
<code>-moz-available</code>, so Firefox
will use <code>-webkit-</code> version which is closer to
<code>stretch</code>.</li>
</ul>
<h2>10.5.1</h2>
<ul>
<li>Fixed <code>grid-area</code> span reset for overriding areas (by <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>).</li>
</ul>
<h2>10.5.0 “Each Endeavouring, All Achieving”</h2>
<!-- raw HTML omitted -->
<ul>
<li>Added <code>mask-position-x</code> and <code>mask-position-y</code>
support (by <a
href="https://github.com/toporek"><code>@​toporek</code></a>).</li>
</ul>
<h2>10.4.27</h2>
<ul>
<li>Removed development key from <code>package.json</code>.</li>
</ul>
<h2>10.4.26</h2>
<ul>
<li>Reduced package size.</li>
</ul>
<h2>10.4.25</h2>
<ul>
<li>Fixed broken gradients on CSS Custom Properties (by <a
href="https://github.com/serger777"><code>@​serger777</code></a>).</li>
</ul>
<h2>10.4.24</h2>
<ul>
<li>Made Autoprefixer a little faster (by <a
href="https://github.com/Cherry"><code>@​Cherry</code></a>).</li>
</ul>
<h2>10.4.23</h2>
<ul>
<li>Reduced dependencies (by <a
href="https://github.com/hyperz111"><code>@​hyperz111</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md">autoprefixer's
changelog</a>.</em></p>
<blockquote>
<h2>10.5.4</h2>
<ul>
<li>Fixed prefixed rule duplication (by <a
href="https://github.com/xianjianlf2"><code>@​xianjianlf2</code></a>).</li>
</ul>
<h2>10.5.3</h2>
<ul>
<li>Fixed brackets and gradient parser (<a
href="https://github.com/alanturing881"><code>@​alanturing881</code></a>).</li>
</ul>
<h2>10.5.2</h2>
<ul>
<li>Moved <code>-webkit-fill-available</code> before
<code>-moz-available</code>, so Firefox
will use <code>-webkit-</code> version which is closer to
<code>stretch</code>.</li>
</ul>
<h2>10.5.1</h2>
<ul>
<li>Fixed <code>grid-area</code> span reset for overriding areas (by <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>).</li>
</ul>
<h2>10.5.0 “Each Endeavouring, All Achieving”</h2>
<ul>
<li>Added <code>mask-position-x</code> and <code>mask-position-y</code>
support (by <a
href="https://github.com/toporek"><code>@​toporek</code></a>).</li>
</ul>
<h2>10.4.27</h2>
<ul>
<li>Removed development key from <code>package.json</code>.</li>
</ul>
<h2>10.4.26</h2>
<ul>
<li>Reduced package size.</li>
</ul>
<h2>10.4.25</h2>
<ul>
<li>Fixed broken gradients on CSS Custom Properties (by <a
href="https://github.com/serger777"><code>@​serger777</code></a>).</li>
</ul>
<h2>10.4.24</h2>
<ul>
<li>Made Autoprefixer a little faster (by <a
href="https://github.com/Cherry"><code>@​Cherry</code></a>).</li>
</ul>
<h2>10.4.23</h2>
<ul>
<li>Reduced dependencies (by <a
href="https://github.com/hyperz111"><code>@​hyperz111</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/autoprefixer/commit/4cad00f0e839f3d7bbcdcc00b7df6fc448fb28f3"><code>4cad00f</code></a>
Release 10.5.4 version</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/e62a4b1782f4ece51070feba79b0ff19f4305c68"><code>e62a4b1</code></a>
Update CI config</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/c8f0d0ae00f5bb28bbcc3413f70b088020007469"><code>c8f0d0a</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/cae35771dc4a4dfeda637a31dc1795ace6d9d28b"><code>cae3577</code></a>
Move back to latest pnpm 11</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/fd31eb33b56ab9663d298b5bf08ae4ff47f76878"><code>fd31eb3</code></a>
Fix duplicated prefixed selectors on reformatted CSS (<a
href="https://redirect.github.com/postcss/autoprefixer/issues/1552">#1552</a>)</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/958d390787c31c3044c1fb68ec37efc29637e26b"><code>958d390</code></a>
Release 10.5.3 version</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/21d2adb4d1fc6103c1e3cc39c991de59fdb5496e"><code>21d2adb</code></a>
Fix gradient parser</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/f7ddae99f0ebfa3961a5c14bd9ecb7d4310601a6"><code>f7ddae9</code></a>
Fix bracket parser</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/10ea5e7b8511a3e07aeb8a0f50f61496bc3faf4f"><code>10ea5e7</code></a>
Update dependencies and remove patch</li>
<li><a
href="https://github.com/postcss/autoprefixer/commit/b6e8a2a4672cafafcb3bb2c72cd0027a31b1a320"><code>b6e8a2a</code></a>
Update Dev Container</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/autoprefixer/compare/10.4.22...10.5.4">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for autoprefixer since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=autoprefixer&package-manager=npm_and_yarn&previous-version=10.4.22&new-version=10.5.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:09:11 +00:00
dependabot[bot] 9b89792a79 Bump docker/login-action from 4.4.0 to 4.5.1 (#1785) 
Bumps [docker/login-action](https://github.com/docker/login-action) from
4.4.0 to 4.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.5.1</h2>
<ul>
<li>Support <code>dhi.io</code> as Docker Hub OIDC registry by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1054">docker/login-action#1054</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.5.0...v4.5.1">https://github.com/docker/login-action/compare/v4.5.0...v4.5.1</a></p>
<h2>v4.5.0</h2>
<ul>
<li><a href="https://github.com/docker/login-action#docker-hub">Docker
Hub OIDC</a> login support by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1048">docker/login-action#1048</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1091.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1037">docker/login-action#1037</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.92.0 to 0.94.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/1044">docker/login-action#1044</a>
<a
href="https://redirect.github.com/docker/login-action/pull/1050">docker/login-action#1050</a></li>
<li>Bump brace-expansion from 1.1.13 to 1.1.16 in <a
href="https://redirect.github.com/docker/login-action/pull/1046">docker/login-action#1046</a></li>
<li>Bump js-yaml from 5.2.0 to 5.2.1 in <a
href="https://redirect.github.com/docker/login-action/pull/1038">docker/login-action#1038</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.4.0...v4.5.0">https://github.com/docker/login-action/compare/v4.4.0...v4.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/abd2ef45e78c5afb21d64d4ca52ee8550d9572c7"><code>abd2ef4</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1055">#1055</a>
from crazy-max/test-registry-auth-oidc</li>
<li><a
href="https://github.com/docker/login-action/commit/d49d3a9839fef51322fa44989a44fdc43fccfc22"><code>d49d3a9</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1054">#1054</a>
from crazy-max/oidc-missing-dhi</li>
<li><a
href="https://github.com/docker/login-action/commit/b58b17c30b4db92a4ed049b213cae512b12e460b"><code>b58b17c</code></a>
test: cover Docker Hub OIDC with registry-auth</li>
<li><a
href="https://github.com/docker/login-action/commit/be646c21cec26cea303e29290d5f6ba6fde8e606"><code>be646c2</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/d77c059cb9956cedaa427dc022d89f39acba678f"><code>d77c059</code></a>
support dhi.io as Docker Hub OIDC registry</li>
<li><a
href="https://github.com/docker/login-action/commit/06fb636fac595d6fb4b28a5dfcb21a6f5091859c"><code>06fb636</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1037">#1037</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li>
<li><a
href="https://github.com/docker/login-action/commit/a8bc9539118a762b0e5788b53a50907977cc1b8d"><code>a8bc953</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/f54b9019bf5074f6e3480a3ac4b834f5f4b90aab"><code>f54b901</code></a>
build(deps): bump the aws-sdk-dependencies group across 1 directory with
2 up...</li>
<li><a
href="https://github.com/docker/login-action/commit/77f18f6713512f90ac35aaf21db0d3710f1b85a6"><code>77f18f6</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1049">#1049</a>
from docker/dependabot/github_actions/codeql-actions...</li>
<li><a
href="https://github.com/docker/login-action/commit/ec0bf287fb1e2e051c56b2f6e6a3eed487b9fe52"><code>ec0bf28</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1050">#1050</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/v4.4.0...v4.5.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.4.0&new-version=4.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:05:47 +00:00
dependabot[bot] 6295b1f49a Bump sentry-sdk from 2.64.0 to 2.66.0 in /backend (#1784) 
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.64.0 to 2.66.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.66.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(tracing) Promote trace_lifecycle and ignore_spans to top-level
options by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6821">#6821</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Tracing</h4>
<ul>
<li>Skip child span creation in streaming path when no current span
(HTTP clients) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6811">#6811</a></li>
<li>Skip child span creation in streaming path when no current span
(task queues) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6814">#6814</a></li>
<li>Skip child span creation in streaming path when no current span
(misc) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6815">#6815</a></li>
<li>Skip child span creation in streaming path when no current span
(databases) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6808">#6808</a></li>
<li>Skip child span creation in streaming path when no current span (web
frameworks) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6810">#6810</a></li>
<li>Skip child span creation in streaming path when no current span
(django) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6809">#6809</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>(logging) Fix flaky test_logging_captured_warnings by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6824">#6824</a></li>
<li>Remove flaky no cyclic garbage test by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6817">#6817</a></li>
<li>Remove Claude permission settings by <a
href="https://github.com/cleptric"><code>@​cleptric</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6806">#6806</a></li>
<li>Move <code>nullcontext</code> to <code>sentry_sdk.utils</code> by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6805">#6805</a></li>
</ul>
<h2>2.65.0</h2>
<h3>New Features ✨</h3>
<h4>Huey</h4>
<ul>
<li>Set <code>messaging.destination.name</code> on consumer spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6779">#6779</a></li>
<li>Set <code>messaging.destination.name</code> on producer spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6778">#6778</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>(arq) Set <code>messaging.destination.name</code> on consumer spans
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6767">#6767</a></li>
<li>(dramatiq) Set <code>messaging.destination.name</code> on consumer
spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6776">#6776</a></li>
<li>(rq) Set <code>messaging.destination.name</code> on consumer spans
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6774">#6774</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Tracing</h4>
<ul>
<li>Take first sentry-trace header in case multiple are supplied by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6722">#6722</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>(django) Avoid <code>ValueError</code> in async middleware
<code>process_*</code> hooks by <a
href="https://github.com/r0ro"><code>@​r0ro</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6698">#6698</a></li>
<li>(scope) Drop None user attribute values in set_user by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6692">#6692</a></li>
<li>(starlette) Don't overwrite user set during request in
AuthenticationMiddleware by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6760">#6760</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.66.0</h2>
<h3>New Features ✨</h3>
<ul>
<li>(tracing) Promote trace_lifecycle and ignore_spans to top-level
options by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6821">#6821</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Tracing</h4>
<ul>
<li>Skip child span creation in streaming path when no current span
(HTTP clients) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6811">#6811</a></li>
<li>Skip child span creation in streaming path when no current span
(task queues) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6814">#6814</a></li>
<li>Skip child span creation in streaming path when no current span
(misc) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6815">#6815</a></li>
<li>Skip child span creation in streaming path when no current span
(databases) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6808">#6808</a></li>
<li>Skip child span creation in streaming path when no current span (web
frameworks) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6810">#6810</a></li>
<li>Skip child span creation in streaming path when no current span
(django) by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6809">#6809</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>(logging) Fix flaky test_logging_captured_warnings by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6824">#6824</a></li>
<li>Remove flaky no cyclic garbage test by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6817">#6817</a></li>
<li>Remove Claude permission settings by <a
href="https://github.com/cleptric"><code>@​cleptric</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6806">#6806</a></li>
<li>Move <code>nullcontext</code> to <code>sentry_sdk.utils</code> by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6805">#6805</a></li>
</ul>
<h2>2.65.0</h2>
<h3>New Features ✨</h3>
<h4>Huey</h4>
<ul>
<li>Set <code>messaging.destination.name</code> on consumer spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6779">#6779</a></li>
<li>Set <code>messaging.destination.name</code> on producer spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6778">#6778</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>(arq) Set <code>messaging.destination.name</code> on consumer spans
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6767">#6767</a></li>
<li>(dramatiq) Set <code>messaging.destination.name</code> on consumer
spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6776">#6776</a></li>
<li>(rq) Set <code>messaging.destination.name</code> on consumer spans
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6774">#6774</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Tracing</h4>
<ul>
<li>Take first sentry-trace header in case multiple are supplied by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6722">#6722</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>(django) Avoid <code>ValueError</code> in async middleware
<code>process_*</code> hooks by <a
href="https://github.com/r0ro"><code>@​r0ro</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/6698">#6698</a></li>
<li>(scope) Drop None user attribute values in set_user by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6692">#6692</a></li>
<li>(starlette) Don't overwrite user set during request in
AuthenticationMiddleware by <a
href="https://github.com/ericapisani"><code>@​ericapisani</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/6760">#6760</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/getsentry/sentry-python/commit/5179f60b025693f381d6d93cd69817f32931825b"><code>5179f60</code></a>
update changelog with docs link</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/e4bcb59e5a87772b1a9dee6189889a2dcee8d776"><code>e4bcb59</code></a>
release: 2.66.0</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/5ba869c03908edde69b2c6526bdd5f03a37bfef4"><code>5ba869c</code></a>
fix(tracing): Skip child span creation in streaming path when no current
span...</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/efddaab9211769982e0c1874e2fb77b0db88b4cd"><code>efddaab</code></a>
fix(tracing): Skip child span creation in streaming path when no current
span...</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/b199a9eea34d7107d81714ca2d1c759f3a6e7e0e"><code>b199a9e</code></a>
fix(tracing): Skip child span creation in streaming path when no current
span...</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/d695a6eb6ab6a81251d1abec12b61456b786a566"><code>d695a6e</code></a>
fix(tracing): Skip child span creation in streaming path when no current
span...</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/dbf5d03f30d97cffd12116e09a34df7b4c2fdafe"><code>dbf5d03</code></a>
fix(tracing): Skip child span creation in streaming path when no current
span...</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/5c1403440a25999f7d6ce69fcb106205be0b8322"><code>5c14034</code></a>
fix(tracing): Skip child span creation in streaming path when no current
span...</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/e0d2c4a4c5e01452865d06d4cdcafb5823fef164"><code>e0d2c4a</code></a>
feat(tracing): Promote trace_lifecycle and ignore_spans to top-level
options ...</li>
<li><a
href="https://github.com/getsentry/sentry-python/commit/baa423fa766a5ba990ad27b1d3b1231f4b265182"><code>baa423f</code></a>
test(logging): Fix flaky test_logging_captured_warnings (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/6824">#6824</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.64.0...2.66.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.64.0&new-version=2.66.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-18 04:11:24 +00:00
dependabot[bot] 70286f2375 Bump mypy from 2.2.0 to 2.3.0 in /backend (#1783) 
Bumps [mypy](https://github.com/python/mypy) from 2.2.0 to 2.3.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's
changelog</a>.</em></p>
<blockquote>
<h1>Mypy Release Notes</h1>
<h2>Next Release</h2>
<h3>Packaging changes</h3>
<ul>
<li>No longer provide mypyc-accelerated wheels for macOS x86_64
[mypyc-wheels <a
href="https://redirect.github.com/python/mypy/issues/119">#119</a>](<a
href="https://redirect.github.com/mypyc/mypy_mypyc-wheels/pull/119">mypyc/mypy_mypyc-wheels#119</a>)</li>
</ul>
<h2>Mypy 2.3</h2>
<p>We've just uploaded mypy 2.3.0 to the Python Package Index (<a
href="https://pypi.org/project/mypy/">PyPI</a>).
Mypy is a static type checker for Python. This release includes new
features, performance
improvements and bug fixes. You can install it as follows:</p>
<pre><code>python3 -m pip install -U mypy
</code></pre>
<p>You can read the full documentation for this release on <a
href="http://mypy.readthedocs.io">Read the Docs</a>.</p>
<h3>The Upcoming Switch to the New Native Parser</h3>
<p>We are planning to enable the new native parser
(<code>--native-parser</code>) by
default soon. We recommend that you test the native parser in your
projects and report
any issues in the <a href="https://github.com/python/mypy/issues">mypy
issue tracker</a>.</p>
<h3>Mypyc Free-threading Memory Safety</h3>
<p>Free-threaded Python builds that don't have the GIL require
additional synchronization
primitives or lock-free algorithms to ensure memory safety when there
are race conditions
(for example, when a thread reads a list item while another thread
writes the same list
item concurrently). This release greatly improves memory safety of free
threading.</p>
<p>List operations are now memory-safe on free threaded Python builds,
even in the presence of
race conditions. This has some performance cost. For list-heavy
workloads, using
<code>librt.vecs.vec</code> instead of list is often significantly
faster, but note that <code>vec</code> is not
(and likely won't be) fully memory safe, and the user is expected to
avoid race conditions.
The newly introduced <code>librt.threading.Lock</code> helps with this.
Using variable-length tuples
can also be more efficient than lists, since tuples are immutable and
don't require
expensive synchronization to ensure memory safety.</p>
<p>Instance attribute access is also (mostly) memory safe now on
free-threaded builds in
the presence of race conditions. We are planning to fix the remaining
unsafe cases in a
future release.</p>
<p>Full list of changes:</p>
<ul>
<li>Make attribute access memory safe on free-threaded builds (Jukka
Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21705">21705</a>)</li>
<li>Fix unsafe borrowing of instance attributes with free-threading
(Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21688">21688</a>)</li>
<li>Make list get/set item more memory safe on free-threaded builds
(Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21683">21683</a>)</li>
<li>Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR
<a
href="https://redirect.github.com/python/mypy/pull/21679">21679</a>)</li>
<li>Make multiple assignment from list memory-safe on free-threaded
builds (Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21684">21684</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python/mypy/commit/8aabf8435357eaffceca7237f371e293b8168e54"><code>8aabf84</code></a>
Drop +dev from version</li>
<li><a
href="https://github.com/python/mypy/commit/4d8ad2ab5e86c99581b73775f2c00b9b8265b589"><code>4d8ad2a</code></a>
Update changelog for 2.3 release (<a
href="https://redirect.github.com/python/mypy/issues/21728">#21728</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/2c2154672040c52e481f423854d104e6cf172585"><code>2c21546</code></a>
[mypyc] Update documentation of race conditions under free threading (<a
href="https://redirect.github.com/python/mypy/issues/21726">#21726</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/a9f62a3cf98a58a7a2607b7c81695802b39f5edc"><code>a9f62a3</code></a>
[mypyc] Make attribute access memory safe on free-threaded builds (<a
href="https://redirect.github.com/python/mypy/issues/21705">#21705</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/0faa413ebf7c924a864ef5dabd70303d898e7766"><code>0faa413</code></a>
Use <code>PYODIDE</code> environment variable for Emscripten
cross-compilation detection...</li>
<li><a
href="https://github.com/python/mypy/commit/3d75cdb09f0928fa8b83e5ef03572ed878ac8d09"><code>3d75cdb</code></a>
[mypyc] Borrow final attributes more aggressively (<a
href="https://redirect.github.com/python/mypy/issues/21702">#21702</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/24c237d85b48f618e655ffff1dc0f19089d9b599"><code>24c237d</code></a>
[mypyc] Improve documentation of Final (<a
href="https://redirect.github.com/python/mypy/issues/21713">#21713</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/b5be217392b9b2771d1764066b9d600bf93ce7a8"><code>b5be217</code></a>
[mypyc] Update free threading Python compatibility docs (<a
href="https://redirect.github.com/python/mypy/issues/21711">#21711</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/cbcb51add3094ec91b29cdd4c624943bf251b63f"><code>cbcb51a</code></a>
Narrow for frozendict membership check (<a
href="https://redirect.github.com/python/mypy/issues/21709">#21709</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/af2bc0f3cc7f2f129f0c11294158d0c292692c3d"><code>af2bc0f</code></a>
Sync typeshed (<a
href="https://redirect.github.com/python/mypy/issues/21707">#21707</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python/mypy/compare/v2.2.0...v2.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mypy&package-manager=uv&previous-version=2.2.0&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-18 04:10:50 +00:00
dependabot[bot] d91d635abd Bump actions/setup-python from 6.3.0 to 7.0.0 (#1782) 
Bumps [actions/setup-python](https://github.com/actions/setup-python)
from 6.3.0 to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases">actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1330">actions/setup-python#1330</a></li>
<li>Pin SHA commits and update docs with latest versions by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1338">actions/setup-python#1338</a></li>
<li>Remove the pip-install input by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1336">actions/setup-python#1336</a></li>
</ul>
<h3>Bug Fix</h3>
<ul>
<li>Fix to Classify stderr warning messages as warnings instead of
errors in annotations by <a
href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li>Validate and retry manifest fetch to prevent silent failures by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1332">actions/setup-python#1332</a></li>
</ul>
<h3>Dependency Upgrade</h3>
<ul>
<li>Bump certifi from 2020.6.20 to 2024.7.4 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1328">actions/setup-python#1328</a></li>
<li>Remove EOL Python versions and Bumps numpy text fixture by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1333">actions/setup-python#1333</a></li>
<li>Upgrade <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li><a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6...v7.0.0">https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97"><code>5fda3b9</code></a>
Pin SHA commits and update docs with latest versions (<a
href="https://redirect.github.com/actions/setup-python/issues/1338">#1338</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e"><code>4ab7e95</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-python/issues/1337">#1337</a>
from actions/philip-gai/bump-actions-cache-6-2-0</li>
<li><a
href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c"><code>0f3a009</code></a>
Remove the pip-install input (<a
href="https://redirect.github.com/actions/setup-python/issues/1336">#1336</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932"><code>f8cf429</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-python/issues/1330">#1330</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5"><code>54baeea</code></a>
Validate and retry manifest fetch to prevent silent failures (<a
href="https://redirect.github.com/actions/setup-python/issues/1332">#1332</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5"><code>c709277</code></a>
Annotation code fix (<a
href="https://redirect.github.com/actions/setup-python/issues/1335">#1335</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a"><code>6849080</code></a>
remove EOL Python versions and Bumps numpy text fixture (<a
href="https://redirect.github.com/actions/setup-python/issues/1333">#1333</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e"><code>0903b46</code></a>
Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data
(<a
href="https://redirect.github.com/actions/setup-python/issues/1328">#1328</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-python/compare/v6.3.0...v7.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=6.3.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-18 04:06:01 +00:00
dependabot[bot] 1e002609e9 Bump actions/setup-node from 6.4.0 to 7.0.0 (#1781) 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from
6.4.0 to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga"><code>@​deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga"><code>@​deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a>
Strict equality</li>
<li><a
href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v7.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=6.4.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-18 04:05:15 +00:00
dependabot[bot] 28a2cb2329 Bump i18next-http-backend from 3.0.5 to 4.0.0 in /frontend (#1780) 
Bumps
[i18next-http-backend](https://github.com/i18next/i18next-http-backend)
from 3.0.5 to 4.0.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md">i18next-http-backend's
changelog</a>.</em></p>
<blockquote>
<h3>4.0.0</h3>
<ul>
<li>BREAKING: drop <code>cross-fetch</code> dependency.
<code>i18next-http-backend</code> now requires a host-provided
<code>fetch</code>. This is available in Node ≥ 18 (stable since Node
21), all modern browsers, Deno, and Bun. For runtimes without native
<code>fetch</code>, install a ponyfill yourself and inject it via
<code>options.alternateFetch</code>, or stay on v3.x.</li>
<li>BREAKING: minimum Node version is now 18 (<code>engines.node =
&quot;&gt;=18&quot;</code>).</li>
<li>chore: simplified environment detection in
<code>lib/request.js</code> — uses <code>globalThis</code> (with
<code>global</code> / <code>window</code> fallbacks for legacy embedded
runtimes) instead of separate <code>global.*</code> /
<code>window.*</code> branches per API. XHR / ActiveXObject are still
picked up if the host provides them, but no longer polyfilled.</li>
<li>chore: declared <code>&quot;sideEffects&quot;: false</code> for
better tree-shaking by downstream bundlers.</li>
<li>build: replaced babel + browserify + uglify-js with <a
href="https://tsdown.dev"><code>tsdown</code></a> (rolldown + oxc). One
config produces ESM, CJS, and the IIFE browser bundles. Drops
<code>@babel/cli</code>, <code>@babel/core</code>,
<code>@babel/preset-env</code>,
<code>babel-plugin-add-module-exports</code>, <code>browserify</code>,
<code>uglify-js</code>, the <code>fixcjs</code> rewrite hack, and the
<code>--ignore cross-fetch</code> browserify flag. Side benefit:
minified browser bundle shrinks from ~13 KB to ~6.8 KB (oxc minifier +
no babel runtime helpers).</li>
<li>build: ESM and CJS outputs are now bundled into a single
<code>index.js</code> per format (previously one file per
<code>lib/*.js</code> module). The package's <code>exports</code> map is
unchanged, so this is invisible to consumers using documented entry
points.</li>
<li>lint: replaced <code>eslint-config-standard</code> (+ five plugins)
with <a
href="https://github.com/neostandard/neostandard"><code>neostandard</code></a>
and migrated to ESLint 9 flat config (<code>eslint.config.mjs</code>).
Removed deprecated <code>tslint</code> and <code>dtslint</code> —
<code>test:typescript</code> now runs <code>tsc --noEmit</code> plus
<code>tsd</code>.</li>
<li>chore: tightened <code>.npmignore</code> — published tarball no
longer includes the source <code>lib/</code>, the build configs
(<code>tsdown.config.ts</code>, <code>eslint.config.mjs</code>,
<code>tsconfig.json</code>), or the root <code>index.js</code> re-export
shim. Drops from 21.3 KB → ~17 KB packed.</li>
<li>docs: <code>alternateFetch</code> is now documented in the README
options block as the supported escape hatch for fetch ponyfills, test
mocking, and request interception. v4 migration note added to
&quot;Getting started&quot;.</li>
</ul>
<h3>3.0.6</h3>
<ul>
<li>fix: allow forward slashes in <code>ns</code> values so nested
namespace names (mapping to URL layouts such as
<code>/locales/en/a/b.json</code>) fetch correctly again. 3.0.5's
security fix applied the same strict URL-segment check to both
<code>lng</code> and <code>ns</code>, which was correct for
<code>lng</code> (no BCP-47 shape contains <code>/</code>) but
over-strict for <code>ns</code> — nested namespaces containing
<code>/</code> were never officially supported, but the behaviour fell
out of the implicit string-substitution semantics of
<code>loadPath</code> and is common enough in the wild to be worth
accommodating. <code>isSafeUrlSegment</code> is now split into
<code>isSafeLangUrlSegment</code> (strict — still rejects
<code>/</code>) and <code>isSafeNsUrlSegment</code> (loose — allows
<code>/</code> but still rejects <code>..</code>, <code>\</code>,
URL-structure characters, control chars, prototype keys, and oversized
inputs). <code>isSafeUrlSegment</code> is kept as a backwards-compatible
alias for the strict check. The 3.0.5 security fix remains in force for
every concrete attack pattern from the original advisory.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/a4d4a83c53f024cdea912e157e5fb1ef5c6adf3b"><code>a4d4a83</code></a>
4.0.0</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/fdf4f986e146059152537f169f434cb28e160e8c"><code>fdf4f98</code></a>
feat!: v4 — drop cross-fetch, switch build to tsdown, lint to
neostandard</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/d8dafd88aedf732b81aacb0e40012d2f86cf6d90"><code>d8dafd8</code></a>
docs: clarify that nested-ns with slashes was never officially
supported</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/e534a6267ea231408d3dff0045b1aa55b9682206"><code>e534a62</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/ddf104807729437c11c0cc25a059b0aac1a1dab6"><code>ddf1048</code></a>
3.0.6</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/d73cfdc23d397a7d978e03bf6541852da08ae1e2"><code>d73cfdc</code></a>
fix: allow forward slashes in ns values</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/9abbdee14e28f2a055251a51e7f238bb2bd1e696"><code>9abbdee</code></a>
Bump i18next-http-backend from 1.4.0 to 3.0.5 in /example/i18next-vue
(<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/184">#184</a>)</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/b4ca8bb3d207d53f8f35100126a4a8f686a0ab8e"><code>b4ca8bb</code></a>
Bump i18next-http-backend from 3.0.1 to 3.0.5 in /example/fallback (<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/183">#183</a>)</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/dffddd494145419f00901aed4ad67b34eb13fbda"><code>dffddd4</code></a>
Bump i18next-http-backend from 3.0.2 to 3.0.5 in /example/next (<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/182">#182</a>)</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/fd29b400e3ead7ccd1caebc55027aeb4f4c43c1f"><code>fd29b40</code></a>
Bump i18next-http-backend from 1.3.2 to 3.0.5 in /example/vue (<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/181">#181</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next-http-backend/compare/v3.0.5...v4.0.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:17:59 +00:00
dependabot[bot] 170f16dddd Bump the npm_and_yarn group across 2 directories with 1 update (#1752) 
Bumps the npm_and_yarn group with 1 update in the /docs directory:
[postcss](https://github.com/postcss/postcss).
Bumps the npm_and_yarn group with 1 update in the /frontend directory:
[postcss](https://github.com/postcss/postcss).

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:14:16 +00:00
dependabot[bot] 1329ef4aa1 Bump nuqs from 2.8.9 to 2.9.0 in /frontend (#1779) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) from
2.8.9 to 2.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/47ng/nuqs/releases">nuqs's
releases</a>.</em></p>
<blockquote>
<h2>v2.9.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437">#1437</a>
- add support for react-router v8, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451">#1451</a>
- add history to adapters <!-- raw HTML omitted -->defaultOptions<!--
raw HTML omitted -->, by <a
href="https://github.com/manojVivek"><code>@​manojVivek</code></a></li>
</ul>
<h2>Bug fixes</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318">#1318</a>
- cross-page transitions in TanStack Router, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1433">#1433</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1334">#1334</a>
- stale URL value when revisiting a page under Next.js cacheComponents,
by <a href="https://github.com/franky47"><code>@​franky47</code></a>
(closes <a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1273">#1273</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1366">#1366</a>
- prevent infinite re-renders with TSR viewport preloading, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1363">#1363</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1368">#1368</a>
- wrong transient state in next/app when updating in useEffect, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1365">#1365</a>,
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1428">#1428</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445">#1445</a>
- stale value under Activity, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1444">#1444</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450">#1450</a>
- stale search params leaking across React Router navigation, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1358">#1358</a>)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1222">#1222</a>
- add registry metadata, by <a
href="https://github.com/taro-yanagiya"><code>@​taro-yanagiya</code></a>
(closes <a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1221">#1221</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1256">#1256</a>
- add changelog page, by <a
href="https://github.com/rajanarahul93"><code>@​rajanarahul93</code></a>
(closes <a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1251">#1251</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1351">#1351</a>
- strip Fumadocs inline code syntax highlighting hints from LLM
markdown, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1353">#1353</a>
- update recharts &amp; replace partialLine implementation, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1356">#1356</a>
- add Sentry and Syntax.fm as sponsors 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1357">#1357</a>
- add 1771 Technologies as a sponsor 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1362">#1362</a>
- update images alt attributes, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1364">#1364</a>
- extrapolate missing NPM stats data, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1376">#1376</a>
- add attribution footer in LLM docs, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1383">#1383</a>
- add 1771 Technologies as sidebar sponsor, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1400">#1400</a>
- add redirect from /changelog to /docs/changelog, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1406">#1406</a>
- add brand assets context menu, by <a
href="https://github.com/TheOrcDev"><code>@​TheOrcDev</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1409">#1409</a>
- add TradingGoose as a sponsor 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1414">#1414</a>
- add Upstash as a sponsor 💖, by <a
href="https://github.com/mezotv"><code>@​mezotv</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1415">#1415</a>
- add CodeRabbit as a sponsor 💖, by <a
href="https://github.com/mezotv"><code>@​mezotv</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1416">#1416</a>
- use <a href="http://www.usenotra.com">www.usenotra.com</a> for Notra
sponsor link, by <a
href="https://github.com/mezotv"><code>@​mezotv</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1418">#1418</a>
- tighter sponsors grid, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1432">#1432</a>
- changelog reads DTO from releases, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1438">#1438</a>
- add Deno &amp; other package managers to install instructions, by <a
href="https://github.com/bartlomieju"><code>@​bartlomieju</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1441">#1441</a>
- theme-aware shieldcn badges + wordmark header, by <a
href="https://github.com/jal-co"><code>@​jal-co</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1447">#1447</a>
- trim down llm content, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1456">#1456</a>
- add Loops as a sponsor 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1457">#1457</a>
- strip unreleased headings from the production ToC, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1461">#1461</a>
- fix shallow updates &quot;Invalid URL&quot; crash, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1460">#1460</a>)</li>
<li>9cb051fc - reorder &amp; tweak readme badges, by François Best</li>
<li>e9cd8f7c - fix contributors link in README, by François Best</li>
<li>f48b3908 - fix wordmark on npmx.dev &amp; npmjs.com, by François
Best</li>
<li>6722fe05 - fix react router logos in README, by François Best</li>
</ul>
<h2>Other changes</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1154">#1154</a>
- add Knip for upkeeping, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176">#1176</a>
- split debug logs to reduce bundle size, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1149">#1149</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/47ng/nuqs/commit/692687ba358e56fb78b887448392a54a22397559"><code>692687b</code></a>
fix: stale search params leaking across React Router navigation (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450">#1450</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/8b2dee5eab9a53aab772fe4ba9bf9c965b3d2897"><code>8b2dee5</code></a>
feat: add history to adapter's <code>defaultOptions</code> (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451">#1451</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/95dcb8309dd4e78c1e0d4c66bbd91f12754ec3ee"><code>95dcb83</code></a>
fix: stale URL value when revisiting a page under Next.js
cacheComponents (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1">#1</a>...</li>
<li><a
href="https://github.com/47ng/nuqs/commit/af8ce38a2546ede9f421edaf9d9c94caea86bf1a"><code>af8ce38</code></a>
ref: scope nullable useSearchParams defence to Next.js specific adapter
(<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1446">#1446</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/06be94ff1d2fa8dd5474570d30244350026c3f70"><code>06be94f</code></a>
ref: split debug logs to reduce bundle size (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176">#1176</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/2d5fa8eed3b0911902e64c5b8034520fcaad2940"><code>2d5fa8e</code></a>
fix: stale value under Activity (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445">#1445</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/84ee2dfe11be1dbaa76b34519b4e2683da51d00c"><code>84ee2df</code></a>
feat: add support for react-router v8 (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437">#1437</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/54cbbd882cd0b125a98692b14ea0e501da243469"><code>54cbbd8</code></a>
fix: cross-page transitions in TanStack Router (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318">#1318</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/f57551f31fc6b00350a83eab7f6856850f51f849"><code>f57551f</code></a>
chore: pnpm dedupe (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1436">#1436</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/281a0f04fa0e5490ae2eae5b328cc6585613ba25"><code>281a0f0</code></a>
chore(ci): keep npm --json stdout clean and harden stage-id parsing</li>
<li>Additional commits viewable in <a
href="https://github.com/47ng/nuqs/commits/v2.9.0/packages/nuqs">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nuqs&package-manager=npm_and_yarn&previous-version=2.8.9&new-version=2.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:13:06 +00:00
dependabot[bot] ef6e0e9f37 Bump npm-check-updates from 20.0.0 to 22.2.9 in /frontend (#1778) 
Bumps
[npm-check-updates](https://github.com/raineorshine/npm-check-updates)
from 20.0.0 to 22.2.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/releases">npm-check-updates's
releases</a>.</em></p>
<blockquote>
<h2>v22.2.9</h2>
<h2>What's Changed</h2>
<ul>
<li>Dockerfile: use lts-alpine image by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1862">raineorshine/npm-check-updates#1862</a></li>
<li>Rename variable and test file by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1884">raineorshine/npm-check-updates#1884</a></li>
<li>eslint.config.js: drop moot jest globals by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1887">raineorshine/npm-check-updates#1887</a></li>
<li>replace zod with valibot to reduce bundle size by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1885">raineorshine/npm-check-updates#1885</a></li>
<li>CI: add prettier in lint workflow by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1889">raineorshine/npm-check-updates#1889</a></li>
<li>Use async glob instead of glob.sync in getAllPackages by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1891">raineorshine/npm-check-updates#1891</a></li>
<li>Minor type tweaks by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1892">raineorshine/npm-check-updates#1892</a></li>
<li>Switch mocha tests to parallel by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1886">raineorshine/npm-check-updates#1886</a></li>
<li>Replace markdownlint-cli with markdownlint-cli2 by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1893">raineorshine/npm-check-updates#1893</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/raineorshine/npm-check-updates/compare/v22.2.8...v22.2.9">https://github.com/raineorshine/npm-check-updates/compare/v22.2.8...v22.2.9</a></p>
<h2>v22.2.8</h2>
<h2>What's Changed</h2>
<ul>
<li>CI: remove concurrency by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1846">raineorshine/npm-check-updates#1846</a></li>
<li>build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the
github-actions group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1872">raineorshine/npm-check-updates#1872</a></li>
<li>Downgrade ts-json-schema-generator to v2.4.0 for Node.js 20 support
by <a href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1848">raineorshine/npm-check-updates#1848</a></li>
<li>prepare: add exit 0 as an extra guard by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1850">raineorshine/npm-check-updates#1850</a></li>
<li>ESLint: bump to es2023 globals by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1854">raineorshine/npm-check-updates#1854</a></li>
<li>package.json: remove redundant tests from files by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1855">raineorshine/npm-check-updates#1855</a></li>
<li>tsconfig: enable verbatimModuleSyntax by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1860">raineorshine/npm-check-updates#1860</a></li>
<li>Remove the unused libnpmconfig.d.ts by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1857">raineorshine/npm-check-updates#1857</a></li>
<li>Clean up <code>run()</code> return type JSDoc by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1868">raineorshine/npm-check-updates#1868</a></li>
<li>cache test: remove any previous stale cache file to prevent failures
by <a href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1865">raineorshine/npm-check-updates#1865</a></li>
<li>package.json: remove duplicate typecheck script by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1856">raineorshine/npm-check-updates#1856</a></li>
<li>Doctor tests cleanup by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1869">raineorshine/npm-check-updates#1869</a></li>
<li>fix: skip cache write when cooldown is active by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1871">raineorshine/npm-check-updates#1871</a></li>
<li>Fix stale <a
href="https://github.com/param"><code>@​param</code></a> names in JSDoc
by <a href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1874">raineorshine/npm-check-updates#1874</a></li>
<li>Simplify tsconfig.json by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1858">raineorshine/npm-check-updates#1858</a></li>
<li>Add a .npmrc file enabling engine-strict by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1847">raineorshine/npm-check-updates#1847</a></li>
<li>Enforce node: protocol and dedupe imports by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1842">raineorshine/npm-check-updates#1842</a></li>
<li>Fix verbose log printing local yarn config under &quot;user yarn
config&quot; header by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1875">raineorshine/npm-check-updates#1875</a></li>
<li>lint: add --continue-on-error by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1859">raineorshine/npm-check-updates#1859</a></li>
<li>test: cover <code>$</code> override references by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1877">raineorshine/npm-check-updates#1877</a></li>
<li>CI updates by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1870">raineorshine/npm-check-updates#1870</a></li>
<li>More shell tweaks by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1853">raineorshine/npm-check-updates#1853</a></li>
<li>Update interactive hint for q button by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1879">raineorshine/npm-check-updates#1879</a></li>
<li>Vite config cleanup by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1861">raineorshine/npm-check-updates#1861</a></li>
<li>package.json: remove unneeded overrides by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1849">raineorshine/npm-check-updates#1849</a></li>
<li>build: stub unused iconv-lite out of the bundle by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1881">raineorshine/npm-check-updates#1881</a></li>
<li>package.json: specify allowScripts by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1878">raineorshine/npm-check-updates#1878</a></li>
<li>build(deps): bump softprops/action-gh-release by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1880">raineorshine/npm-check-updates#1880</a></li>
<li>refactor prettifyCooldown and share the cooldown regex by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1883">raineorshine/npm-check-updates#1883</a></li>
<li>build(deps-dev): bump the development-dependencies group across 1
directory with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1876">raineorshine/npm-check-updates#1876</a></li>
<li>fix(cooldown): scope auto-cooldown config to active package manager
only by <a
href="https://github.com/raineorshine"><code>@​raineorshine</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1882">raineorshine/npm-check-updates#1882</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md">npm-check-updates's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p><strong>This file is no longer maintained.</strong> Release notes are
published on the <a
href="https://github.com/raineorshine/npm-check-updates/releases">GitHub
releases page</a>.</p>
<hr />
<h2>[22.0.0] - 2026-04-25</h2>
<h2>Breaking Changes</h2>
<p><code>--cooldown</code> now falls back to the greatest non-prerelease
version rather than skipping the upgrade entirely when the latest
version falls within the cooldown window.</p>
<ul>
<li>This <em>only</em> affects <code>--cooldown</code> (or inferred
cooldown from
<code>min-release-age</code>/<code>minimumReleaseAge</code>/<code>npmMinimalAgeGate</code>).</li>
<li>This <em>only</em> affects <code>--target latest</code> (which is
the default).</li>
</ul>
<h3>⚠️ WARNING</h3>
<p>In rare circumstances, it is now possible for <code>ncu --cooldown
10</code> to install a version <strong>that was never published to
latest</strong>. This is because the npm registry does not store a
history of versions published to the <code>latest</code> dist-tag. It is
<em>impossible</em> to fall back to an earlier <code>latest</code>
version, because there is no record of it. However, we do have a list of
all published versions, and it's <em>likely</em> that a boring version
like <code>1.0.1</code> was published to <code>latest</code> at some
point. Versions like <code>1.0.1-pre.0</code>, <code>1.0.1-beta</code>,
<code>1.0.1-build.58157394</code>, etc will be ignored, as you would
expect.</p>
<p>While npm-check-updates typically takes a conservative approach to
version upgrades, following semver exactly and only upgrading to the
<code>latest</code> version, falling back to the highest version outside
the cooldown window is clearly the more intuitive behavior, and this
outweighs the few cases where the results would be undesirable. The
discussion in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1556">#1556</a>
and the large amount of confusion since the initial release of
<code>--cooldown</code> attest to this.</p>
<h3>How to opt out of the new behavior</h3>
<p>You can opt out of the new behavior by using <code>--target
&quot;@latest&quot;</code>. This forces a strict upgrade (or downgrade)
to the <code>latest</code> tag only, without any fallback behavior.</p>
<p>For granular control, use a custom ncurc function to set the <a
href="https://github.com/raineorshine/npm-check-updates#target">target</a>
or disable <a
href="https://github.com/raineorshine/npm-check-updates#cooldown">cooldown</a>
for a single package.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/raineorshine/npm-check-updates/compare/v21.0.3...v22.0.0">https://github.com/raineorshine/npm-check-updates/compare/v21.0.3...v22.0.0</a></p>
<h2>[21.0.0] - 2026-04-14</h2>
<h3>⚠️ Breaking Changes</h3>
<p>This is a <strong>major breaking change</strong> with significant
architectural updates.</p>
<h4>ESM Migration &amp; Module System</h4>
<ul>
<li><strong>Pure ESM:</strong> Converted to pure ESM with dual-build
support (ESM/CJS) via Vite 8.</li>
<li><strong>Import Syntax:</strong> Programmatic usage now requires
named imports or namespace imports.
<ul>
<li><strong>Old:</strong> <code>import ncu from
'npm-check-updates'</code></li>
<li><strong>New:</strong> <code>import * as ncu from
'npm-check-updates'</code> or <code>import { run } from
'npm-check-updates'</code></li>
</ul>
</li>
<li><strong>Node.js Requirements:</strong> Now requires <code>^20.19.0
|| ^22.12.0 || &gt;=24.0.0</code>. This is required for native
<code>require(esm)</code> support and the Rolldown engine.</li>
<li><strong>npm Requirements:</strong> Minimum version increased to
<code>&gt;=10.0.0</code>.</li>
</ul>
<h4>Configuration Files (<code>.ncurc.js</code>)</h4>
<ul>
<li>Files named <code>.ncurc.js</code> that use
<code>module.exports</code> will now fail in projects that are
<code>&quot;type&quot;: &quot;module&quot;</code>.</li>
<li><strong>Fix:</strong> Rename these files to <code>.ncurc.cjs</code>
or convert them to use <code>export default</code>.</li>
</ul>
<h4>Dependency Updates (Pure ESM versions)</h4>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/5ad831bd29963c3d7d4435603f043ec0fd2cc38c"><code>5ad831b</code></a>
22.2.9</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/2653ab6e94fc425b3a9d872a5efbd64fe091bfa8"><code>2653ab6</code></a>
Replace markdownlint-cli with markdownlint-cli2 (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1893">#1893</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/75a6a92549b9da24560f8658a5bce14ebd23df0b"><code>75a6a92</code></a>
Switch mocha tests to parallel (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1886">#1886</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/bf7285b72d2ae26ae54a87b4b486623b1ccbe5bb"><code>bf7285b</code></a>
Minor type tweaks (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1892">#1892</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/3231f230e540b4581bae161ea1aa896380cccfe5"><code>3231f23</code></a>
Use async glob instead of glob.sync in getAllPackages (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1891">#1891</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/8a37479348bb035758905a39acffb28d893649c4"><code>8a37479</code></a>
CI: add prettier in lint workflow (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1889">#1889</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/0409e7739b6c355953468cea649365468b64207f"><code>0409e77</code></a>
replace zod with valibot to reduce bundle size (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1885">#1885</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/02b4218b926d2fd433f98d23de4c66df989599f6"><code>02b4218</code></a>
eslint.config.js: drop moot jest globals (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1887">#1887</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/c4435d0800386ad3eae29f3416074ef2c35123ad"><code>c4435d0</code></a>
Rename variable and test file (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1884">#1884</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/e849b1d75948aba5f5e7f2f0c56dc96030b61608"><code>e849b1d</code></a>
Dockerfile: use lts-alpine image (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1862">#1862</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v22.2.9">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=npm-check-updates&package-manager=npm_and_yarn&previous-version=20.0.0&new-version=22.2.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:12:29 +00:00
dependabot[bot] 76f3054446 Bump mypy from 2.1.0 to 2.2.0 in /backend (#1777) 
Bumps [mypy](https://github.com/python/mypy) from 2.1.0 to 2.2.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's
changelog</a>.</em></p>
<blockquote>
<h1>Mypy Release Notes</h1>
<h2>Next Release</h2>
<h3>Packaging changes</h3>
<ul>
<li>No longer provide mypyc-accelerated wheels for macOS x86_64
[mypyc-wheels <a
href="https://redirect.github.com/python/mypy/issues/119">#119</a>](<a
href="https://redirect.github.com/mypyc/mypy_mypyc-wheels/pull/119">mypyc/mypy_mypyc-wheels#119</a>)</li>
</ul>
<h2>Mypy 2.3</h2>
<p>We've just uploaded mypy 2.3.0 to the Python Package Index (<a
href="https://pypi.org/project/mypy/">PyPI</a>).
Mypy is a static type checker for Python. This release includes new
features, performance
improvements and bug fixes. You can install it as follows:</p>
<pre><code>python3 -m pip install -U mypy
</code></pre>
<p>You can read the full documentation for this release on <a
href="http://mypy.readthedocs.io">Read the Docs</a>.</p>
<h3>The Upcoming Switch to the New Native Parser</h3>
<p>We are planning to enable the new native parser
(<code>--native-parser</code>) by
default soon. We recommend that you test the native parser in your
projects and report
any issues in the <a href="https://github.com/python/mypy/issues">mypy
issue tracker</a>.</p>
<h3>Mypyc Free-threading Memory Safety</h3>
<p>Free-threaded Python builds that don't have the GIL require
additional synchronization
primitives or lock-free algorithms to ensure memory safety when there
are race conditions
(for example, when a thread reads a list item while another thread
writes the same list
item concurrently). This release greatly improves memory safety of free
threading.</p>
<p>List operations are now memory-safe on free threaded Python builds,
even in the presence of
race conditions. This has some performance cost. For list-heavy
workloads, using
<code>librt.vecs.vec</code> instead of list is often significantly
faster, but note that <code>vec</code> is not
(and likely won't be) fully memory safe, and the user is expected to
avoid race conditions.
The newly introduced <code>librt.threading.Lock</code> helps with this.
Using variable-length tuples
can also be more efficient than lists, since tuples are immutable and
don't require
expensive synchronization to ensure memory safety.</p>
<p>Instance attribute access is also (mostly) memory safe now on
free-threaded builds in
the presence of race conditions. We are planning to fix the remaining
unsafe cases in a
future release.</p>
<p>Full list of changes:</p>
<ul>
<li>Make attribute access memory safe on free-threaded builds (Jukka
Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21705">21705</a>)</li>
<li>Fix unsafe borrowing of instance attributes with free-threading
(Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21688">21688</a>)</li>
<li>Make list get/set item more memory safe on free-threaded builds
(Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21683">21683</a>)</li>
<li>Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR
<a
href="https://redirect.github.com/python/mypy/pull/21679">21679</a>)</li>
<li>Make multiple assignment from list memory-safe on free-threaded
builds (Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/21684">21684</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python/mypy/commit/b3c4a5b93adb49f979ab553fffebae7179cefa74"><code>b3c4a5b</code></a>
Mark release</li>
<li><a
href="https://github.com/python/mypy/commit/396f5082ac677a5115fbd6a0122328a6711f73dd"><code>396f508</code></a>
[Chore] Update changelog for 2.2 (<a
href="https://redirect.github.com/python/mypy/issues/21691">#21691</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/9592a9ea65a9502b14ac3094b28f9e0e3a2e500a"><code>9592a9e</code></a>
Upload wasm wheels to PyPI (<a
href="https://redirect.github.com/python/mypy/issues/21671">#21671</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/1dc69620d9e827b015e6486114e0aaff7ec2d990"><code>1dc6962</code></a>
Bump ast-serialize to 0.6.0 (<a
href="https://redirect.github.com/python/mypy/issues/21664">#21664</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/96a791310d47575827e44d10360505d8e23807b0"><code>96a7913</code></a>
Bump librt to 0.12.0 (<a
href="https://redirect.github.com/python/mypy/issues/21663">#21663</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/5ef090270579013c337a9bcc79e2c58417f09538"><code>5ef0902</code></a>
Fix the exportjson tool (.ff cache to .json conversion) (<a
href="https://redirect.github.com/python/mypy/issues/21628">#21628</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/8d621adb954731ba76b25bf7130275f3cadbb81a"><code>8d621ad</code></a>
Support --shadow-file with --native-parser (<a
href="https://redirect.github.com/python/mypy/issues/21623">#21623</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/74ecdd8ecc9bee271eab49948436af63751ed1ff"><code>74ecdd8</code></a>
Sync typeshed (<a
href="https://redirect.github.com/python/mypy/issues/21612">#21612</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/0cd154158ab2829a2f8c7a2728c7d4ed55e8f193"><code>0cd1541</code></a>
[mypyc] Make function wrappers thread-safe on free-threaded builds (<a
href="https://redirect.github.com/python/mypy/issues/21620">#21620</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/22a9cfd1595798810e27ef145ea4c989ccdcc883"><code>22a9cfd</code></a>
[mypyc] Make list remove and index thread-safe on free-threaded builds
(<a
href="https://redirect.github.com/python/mypy/issues/21614">#21614</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python/mypy/compare/v2.1.0...v2.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mypy&package-manager=uv&previous-version=2.1.0&new-version=2.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:11:54 +00:00
dependabot[bot] 3063b5ed6f Bump uvicorn from 0.50.0 to 0.51.0 in /backend (#1776) 
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.50.0 to
0.51.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/uvicorn/releases">uvicorn's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.51.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Restart workers with overlap on SIGHUP for near-zero-downtime
reloads by <a href="https://github.com/Kludex"><code>@​Kludex</code></a>
in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/3025">Kludex/uvicorn#3025</a></li>
<li>Remove colorama from the standard extra by <a
href="https://github.com/Kludex"><code>@​Kludex</code></a> in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/3027">Kludex/uvicorn#3027</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/uvicorn/compare/0.50.2...0.51.0">https://github.com/Kludex/uvicorn/compare/0.50.2...0.51.0</a></p>
<h2>Version 0.50.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Split comma-separated <code>Sec-WebSocket-Protocol</code> values in
the websockets-sansio implementation by <a
href="https://github.com/Aayush7352"><code>@​Aayush7352</code></a> in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/3019">Kludex/uvicorn#3019</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Aayush7352"><code>@​Aayush7352</code></a> made
their first contribution in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/3019">Kludex/uvicorn#3019</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/uvicorn/compare/0.50.0...0.50.1">https://github.com/Kludex/uvicorn/compare/0.50.0...0.50.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's
changelog</a>.</em></p>
<blockquote>
<h2>0.51.0 (July 8, 2026)</h2>
<h3>Added</h3>
<ul>
<li>Restart workers one at a time on <code>SIGHUP</code>, bringing each
replacement up before retiring the old worker, so reloads no longer drop
requests (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3025">#3025</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove <code>colorama</code> from the <code>standard</code> extra
(<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3027">#3027</a>)</li>
</ul>
<h2>0.50.2 (July 6, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Require <code>websockets&gt;=13.0</code>, which the default
<code>websockets-sansio</code> implementation needs (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3021">#3021</a>)</li>
</ul>
<h2>0.50.1 (July 6, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>Split comma-separated <code>Sec-WebSocket-Protocol</code> values in
the <code>websockets-sansio</code> implementation (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3019">#3019</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Kludex/uvicorn/commit/e4d0b05eb8c6459b7ba27ad13a2c2f4f8d4ece50"><code>e4d0b05</code></a>
Version 0.51.0 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3028">#3028</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/944e43ddbf715aea7c587f2738cd94c3f9106110"><code>944e43d</code></a>
Remove colorama from the standard extra (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3027">#3027</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/2e787704f2610133059e76d56bbd60f48edd34a3"><code>2e78770</code></a>
Restart workers with overlap on SIGHUP for near-zero-downtime reloads
(<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3025">#3025</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/a1b570cf577d512bfd396b64d72313233e9c3325"><code>a1b570c</code></a>
Version 0.50.2 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3022">#3022</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/83c7da7332ac3100171c258071de40d5dde35e13"><code>83c7da7</code></a>
Require websockets&gt;=13.0 for the default sansio implementation (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3021">#3021</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/b4d011668a75d02370353f34de6dea59692dcad2"><code>b4d0116</code></a>
Version 0.50.1 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3020">#3020</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/2a9151d0e763df2c56da2bfe8c5dcead4fe5a276"><code>2a9151d</code></a>
Split comma-separated <code>Sec-WebSocket-Protocol</code> values in the
websockets-sansi...</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/1bf3ab42e3aba1cf4acd1ef0c29d8ad9a599d333"><code>1bf3ab4</code></a>
Cover the excluded-directory branch in <code>FileFilter</code> with a
direct test (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/3014">#3014</a>)</li>
<li><a
href="https://github.com/Kludex/uvicorn/commit/837b5f960dbe2f03e9f12feb9955ce2217211ad8"><code>837b5f9</code></a>
Deflake multiprocess, reload, and signal supervisor tests (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2975">#2975</a>)</li>
<li>See full diff in <a
href="https://github.com/Kludex/uvicorn/compare/0.50.0...0.51.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uvicorn&package-manager=uv&previous-version=0.50.0&new-version=0.51.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:11:40 +00:00
dependabot[bot] 15700b46c0 Bump @hey-api/openapi-ts from 0.97.3 to 0.99.0 in /frontend (#1775) 
Bumps
[@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts)
from 0.97.3 to 0.99.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md">@​hey-api/openapi-ts's
changelog</a>.</em></p>
<blockquote>
<h2>0.99.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><strong>BREAKING</strong> <strong>plugin</strong>: rename
<code>.symbols</code> to <code>.imports</code> (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4052">#4052</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/57fac5ef22bca2b4ac47c8df136270f967f85ed1"><code>57fac5e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<p>To better represent its functionality, the
<code>plugin.symbols</code> property has been renamed to
<code>plugin.imports</code>.</p>
<ul>
<li><strong>BREAKING</strong> <strong>config</strong>: merge duplicate
plugin configurations (<a
href="https://github.com/hey-api/hey-api/commit/089ed2ed065ff92accb7d98cdeb95c66cf88f2f6"><code>089ed2e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Plugin duplicates behavior</h3>
<p>If you specified the same plugin multiple times, only the last
instance would be used. We eventually added a warning for this behavior,
but that didn't treat the root issue. This release changes that by
merging duplicate plugin configurations.</p>
<ul>
<li>
<p><strong>BREAKING</strong>
<strong>plugin(<code>@​hey-api/schemas</code>)</strong>: widen
<code>schema</code> type in <code>nameBuilder</code> to unknown (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4076">#4076</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/98ce35e3b51bd4d4fd58ebe9b81b6632ca654416"><code>98ce35e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>BREAKING</strong> <strong>plugin</strong>: remove
<code>.external()</code> method (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4052">#4052</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/57fac5ef22bca2b4ac47c8df136270f967f85ed1"><code>57fac5e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
</ul>
<h3>Removed <code>plugin.external()</code> function</h3>
<p>This function was used to reference external symbols. All plugins now
use the Imports API, which allows you to reference external symbols in a
type-safe way through <code>plugin.imports</code>.</p>
<h3>Patch Changes</h3>
<ul>
<li>
<p><strong>api</strong>: replace <code>~</code> fields with
<code>$</code> (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4086">#4086</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/d5ca286729e8b881387d5a7ac9234512af58dcd4"><code>d5ca286</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>config</strong>: add Presets API (<a
href="https://github.com/hey-api/hey-api/commit/3b4ee7a5d3fd454aa8416ad1ed4a565119632be1"><code>3b4ee7a</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-angular</code>)</strong>: fix:
send an empty object request body when explicitly provided in flat
parameters mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/ab522ef77953ccb2c55cbdcc369a27eed90de3d3"><code>ab522ef</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
<li>
<p><strong>client</strong>: use <code>getBaseUrl()</code> function to
determine default value (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3772">#3772</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/4026955318aed9282b46464b15a75ab1cdc7243a"><code>4026955</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(zod)</strong>: improve discriminator handling (<a
href="https://github.com/hey-api/hey-api/commit/680b94766855232fdfe8cf34029224c3900821f8"><code>680b947</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/preact-query</code>)</strong>: fix:
strip <code>initialData</code> from the inferred result types for
infinite query options (<a
href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/solid-query</code>)</strong>: fix:
strip <code>initialData</code> from the inferred result types for
infinite query options (<a
href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(valibot)</strong>: support custom regular expression
error messages with <code>x-pattern-message</code> (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4117">#4117</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/3ed3afbe785d9a79f9eec02ab6240d2041d4f49a"><code>3ed3afb</code></a>)
by <a
href="https://github.com/apps/pullfrog"><code>@​pullfrog</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-next</code>)</strong>: fix:
send an empty object request body when explicitly provided in flat
parameters mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-axios</code>)</strong>: fix:
send an empty object request body when explicitly provided in flat
parameters mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
<li>
<p><strong>plugin(zod)</strong>: support creating optional request
schemas (<a
href="https://github.com/hey-api/hey-api/commit/11315c763a6a8ba9f7b2396466bfaf5a9e257fee"><code>11315c7</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/react-query</code>)</strong>: fix:
strip <code>initialData</code> from the inferred result types for
infinite query options (<a
href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-ky</code>)</strong>: fix: send
an empty object request body when explicitly provided in flat parameters
mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hey-api/hey-api/commit/8f3eb72dd7dc52908a81cefc841d9d6f7416bbdf"><code>8f3eb72</code></a>
ci: release</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/3ed3afbe785d9a79f9eec02ab6240d2041d4f49a"><code>3ed3afb</code></a>
docs: add changesets</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/66bc2b759d4ad7ddde61b39b956675eac63e0b1e"><code>66bc2b7</code></a>
feat: support x-pattern-message extension in Zod and Valibot validator
plugins</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/7b83c97e0eb7305b4a9eb54c81ae76ea9bb91e34"><code>7b83c97</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/020df93fb0d756bcbe93e246a82b566da0fcf6b8"><code>020df93</code></a>
feat(faker): first implementation</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/a3338ac5df8cbb14d78eaab8e5fbabc0bd25a253"><code>a3338ac</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/307e020bbb851bc3ab10aae08319e2b9676c0405"><code>307e020</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/835c2304843be396e1e799b260868af56239d5ba"><code>835c230</code></a>
chore: more cleanup</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/1490b058b59a244d908b6e1fe8680bf82e21cd94"><code>1490b05</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/9e6bddeb71990cd5f6c8e0ef9ee872cbf2f42c14"><code>9e6bdde</code></a>
chore: clean up</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.99.0/packages/openapi-ts">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hey-api/openapi-ts&package-manager=npm_and_yarn&previous-version=0.97.3&new-version=0.99.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:11:37 +00:00
dependabot[bot] e66421df13 Bump @tailwindcss/postcss from 4.2.1 to 4.3.2 in /docs (#1773) 
Bumps
[@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss)
from 4.2.1 to 4.3.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/releases">@​tailwindcss/postcss's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.2</h2>
<h3>Fixed</h3>
<ul>
<li>Support bare spacing values for <code>auto-rows-*</code> and
<code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and
<code>auto-cols-16</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229">#20229</a>)</li>
<li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode
from crashing on Windows when <code>@source</code> points to a directory
that doesn't exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242">#20242</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x
when <code>context.parentURL</code> is not a valid URL (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245">#20245</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
rebuilds when the input CSS file changes in an ignored directory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246">#20246</a>)</li>
<li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to
use custom variants defined later (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247">#20247</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when
scanned files or directories are deleted (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259">#20259</a>)</li>
<li>Generate <code>font-size</code> instead of <code>color</code>
declarations for <code>text-[--spacing(…)]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260">#20260</a>)</li>
<li>Prevent <code>@source</code> patterns from scanning unrelated
sibling files and folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263">#20263</a>)</li>
<li>Extract class candidates adjacent to Template Toolkit delimiters
like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and
<code>.tx</code> files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li>
<li>Extract class candidates from conditional Maud syntax like
<code>p.text-black[condition]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li>
<li>Prevent <code>@position-try</code> rules from triggering unknown
at-rule warnings when optimizing CSS (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277">#20277</a>)</li>
<li>Support class suggestions for named opacity modifiers from
<code>--opacity</code> theme values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287">#20287</a>)</li>
<li>Prevent type errors in <code>@tailwindcss/postcss</code> when used
with newer PostCSS patch releases (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289">#20289</a>)</li>
</ul>
<h2>v4.3.1</h2>
<h3>Added</h3>
<ul>
<li>Add <code>--silent</code> option to suppress output in
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100">#20100</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Remove deprecation warnings by using
<code>Module#registerHooks</code> instead of
<code>Module#register</code> on Node 26+ (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028">#20028</a>)</li>
<li>Canonicalization: don't crash when plugin utilities throw for
unsupported values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052">#20052</a>)</li>
<li>Allow <code>@apply</code> to be used with CSS mixins (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427">#19427</a>)</li>
<li>Ensure <code>not-*</code> correctly negates <code>@container</code>
queries, including <code>style(…)</code> queries (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059">#20059</a>)</li>
<li>Ensure <code>drop-shadow-*</code> color utilities work with custom
shadow values containing <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080">#20080</a>)</li>
<li>Fix 'Sourcemap is likely to be incorrect' warnings when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103">#20103</a>)</li>
<li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack
projects without requiring <code>webpack</code> as a peer dependency (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027">#20027</a>)</li>
<li>Canonicalization: don't suggest invalid <code>calc(…)</code>
expressions (e.g. <code>px-[calc(1rem+0px)]</code> →
<code>px-[calc(1rem+0)]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127">#20127</a>)</li>
<li>Canonicalization: avoid suggesting large spacing-scale values for
arbitrary lengths (e.g. <code>left-[99999px]</code> →
<code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130">#20130</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
recovers when a tracked dependency is deleted and restored (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137">#20137</a>)</li>
<li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored
when scanning for class candidates (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139">#20139</a>)</li>
<li>Ensure class candidates are extracted from Twig
<code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198">#20198</a>)</li>
<li>Don't crash in the Ruby or Vue preprocessors when scanning files
containing invalid UTF-8 bytes (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588">#19588</a>)</li>
<li>Allow <code>@variant</code> to be used inside <code>addBase</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480">#19480</a>)</li>
<li>Ensure <code>@source</code> globs with symlinks are preserved (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li>
<li>Ensure later <code>@source</code> rules can re-include files
excluded by earlier <code>@source not</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li>
<li>Upgrade: don't migrate empty class rules to invalid
<code>@utility</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205">#20205</a>)</li>
<li>Ensure transitions between <code>inset-shadow-none</code> and other
inset shadows work correctly (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208">#20208</a>)</li>
<li>Ensure explicitly referenced <code>@source</code> directories are
scanned even when ignored by git (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214">#20214</a>)</li>
<li>Ensure <code>@source</code> globs ending in <code>**/*</code>
preserve dynamic path segments to avoid scanning too many files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217">#20217</a>)</li>
<li>Canonicalization: don't fold <code>calc(…)</code> divisions when the
result would require high precision (e.g.
<code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not
<code>w-[28.571428571428573%]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221">#20221</a>)</li>
<li>Serve ESM type declarations to ESM importers of
<code>@tailwindcss/postcss</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228">#20228</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Generate <code>0</code> instead of <code>calc(var(--spacing) *
0)</code> for spacing utilities like <code>m-0</code> and
<code>left-0</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20196">#20196</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md">@​tailwindcss/postcss's
changelog</a>.</em></p>
<blockquote>
<h2>[4.3.2] - 2026-06-26</h2>
<h3>Fixed</h3>
<ul>
<li>Support bare spacing values for <code>auto-rows-*</code> and
<code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and
<code>auto-cols-16</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229">#20229</a>)</li>
<li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode
from crashing on Windows when <code>@source</code> points to a directory
that doesn't exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242">#20242</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x
when <code>context.parentURL</code> is not a valid URL (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245">#20245</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
rebuilds when the input CSS file changes in an ignored directory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246">#20246</a>)</li>
<li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to
use custom variants defined later (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247">#20247</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when
scanned files or directories are deleted (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259">#20259</a>)</li>
<li>Generate <code>font-size</code> instead of <code>color</code>
declarations for <code>text-[--spacing(…)]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260">#20260</a>)</li>
<li>Prevent <code>@source</code> patterns from scanning unrelated
sibling files and folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263">#20263</a>)</li>
<li>Extract class candidates adjacent to Template Toolkit delimiters
like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and
<code>.tx</code> files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li>
<li>Extract class candidates from conditional Maud syntax like
<code>p.text-black[condition]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269">#20269</a>)</li>
<li>Prevent <code>@position-try</code> rules from triggering unknown
at-rule warnings when optimizing CSS (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277">#20277</a>)</li>
<li>Support class suggestions for named opacity modifiers from
<code>--opacity</code> theme values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287">#20287</a>)</li>
<li>Prevent type errors in <code>@tailwindcss/postcss</code> when used
with newer PostCSS patch releases (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289">#20289</a>)</li>
</ul>
<h2>[4.3.1] - 2026-06-12</h2>
<h3>Added</h3>
<ul>
<li>Add <code>--silent</code> option to suppress output in
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100">#20100</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Remove deprecation warnings by using
<code>Module#registerHooks</code> instead of
<code>Module#register</code> on Node 26+ (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028">#20028</a>)</li>
<li>Canonicalization: don't crash when plugin utilities throw for
unsupported values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052">#20052</a>)</li>
<li>Allow <code>@apply</code> to be used with CSS mixins (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427">#19427</a>)</li>
<li>Ensure <code>not-*</code> correctly negates <code>@container</code>
queries, including <code>style(…)</code> queries (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059">#20059</a>)</li>
<li>Ensure <code>drop-shadow-*</code> color utilities work with custom
shadow values containing <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080">#20080</a>)</li>
<li>Fix 'Sourcemap is likely to be incorrect' warnings when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103">#20103</a>)</li>
<li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack
projects without requiring <code>webpack</code> as a peer dependency (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027">#20027</a>)</li>
<li>Canonicalization: don't suggest invalid <code>calc(…)</code>
expressions (e.g. <code>px-[calc(1rem+0px)]</code> →
<code>px-[calc(1rem+0)]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127">#20127</a>)</li>
<li>Canonicalization: avoid suggesting large spacing-scale values for
arbitrary lengths (e.g. <code>left-[99999px]</code> →
<code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130">#20130</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
recovers when a tracked dependency is deleted and restored (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137">#20137</a>)</li>
<li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored
when scanning for class candidates (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139">#20139</a>)</li>
<li>Ensure class candidates are extracted from Twig
<code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198">#20198</a>)</li>
<li>Don't crash in the Ruby or Vue preprocessors when scanning files
containing invalid UTF-8 bytes (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588">#19588</a>)</li>
<li>Allow <code>@variant</code> to be used inside <code>addBase</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480">#19480</a>)</li>
<li>Ensure <code>@source</code> globs with symlinks are preserved (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li>
<li>Ensure later <code>@source</code> rules can re-include files
excluded by earlier <code>@source not</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203">#20203</a>)</li>
<li>Upgrade: don't migrate empty class rules to invalid
<code>@utility</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205">#20205</a>)</li>
<li>Ensure transitions between <code>inset-shadow-none</code> and other
inset shadows work correctly (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208">#20208</a>)</li>
<li>Ensure explicitly referenced <code>@source</code> directories are
scanned even when ignored by git (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214">#20214</a>)</li>
<li>Ensure <code>@source</code> globs ending in <code>**/*</code>
preserve dynamic path segments to avoid scanning too many files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217">#20217</a>)</li>
<li>Canonicalization: don't fold <code>calc(…)</code> divisions when the
result would require high precision (e.g.
<code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not
<code>w-[28.571428571428573%]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221">#20221</a>)</li>
<li>Serve ESM type declarations to ESM importers of
<code>@tailwindcss/postcss</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228">#20228</a>)</li>
</ul>
<h3>Changed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/056a1550721d4bf79ff732d5ab9414fa83f7064f"><code>056a155</code></a>
4.3.2 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20281">#20281</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/8a14a710102cae195f6811e8578bef9477bc6be9"><code>8a14a71</code></a>
4.3.1 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20226">#20226</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/522288ca08c7ed0e7e9d3256f40fd36981d451a3"><code>522288c</code></a>
Serve ESM type declarations to ESM importers of
<code>@tailwindcss/postcss</code> (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20228">#20228</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/8dcdb66e8a58b9df621ed1a9cb59396e0ddb6dd7"><code>8dcdb66</code></a>
Bump dependencies (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20095">#20095</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/588bd7371f4cae96426e1387819b7fd1d99765f9"><code>588bd73</code></a>
4.3.0 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20023">#20023</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/12eb5ae7b6026ff64c04f889b2221418d772da72"><code>12eb5ae</code></a>
Cleanup noisy test output (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20015">#20015</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/4255671c5f792c42808ecd6b2dec27c16e3c559e"><code>4255671</code></a>
Improve snapshot tests (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20013">#20013</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/52f94c74bb491e9c3641ce322a0ef90fb3c45de6"><code>52f94c7</code></a>
Improve codebase quality (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19999">#19999</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/d194d4c3e656313421f1cfa1954db8f58eec0fcd"><code>d194d4c</code></a>
docs: fix various typos in comments and documentation (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19878">#19878</a>)</li>
<li><a
href="https://github.com/tailwindlabs/tailwindcss/commit/bfb5732b0b948d89c6803cb537bca168ec8e0a46"><code>bfb5732</code></a>
Fall back to the plugin <code>base</code> when PostCSS has no
<code>from</code> option (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19980">#19980</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-postcss">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​tailwindcss/postcss</code> since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tailwindcss/postcss&package-manager=npm_and_yarn&previous-version=4.2.1&new-version=4.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:10:51 +00:00