mirror/bracket
1
0 Fork 0
mirror of https://github.com/evroon/bracket.git synced 2026-09-15 07:29:41 -04:00
Code Issues Packages Projects Releases Wiki Activity
1,466 Commits 10 Branches 41 Tags
master
Commit Graph
768 Commits
Author SHA1 Message Date
dependabot[bot] 95c0a9ecc0 Bump @hcaptcha/react-hcaptcha from 2.0.2 to 2.1.0 in /frontend (#1831) 
Bumps
[@hcaptcha/react-hcaptcha](https://github.com/hCaptcha/react-hcaptcha)
from 2.0.2 to 2.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hCaptcha/react-hcaptcha/releases">@​hcaptcha/react-hcaptcha's
releases</a>.</em></p>
<blockquote>
<h2>2.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>change loader error handling to clarify script error cases</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/2.0.2...2.1.0">https://github.com/hCaptcha/react-hcaptcha/compare/2.0.2...2.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/da6b076772c058c91db05cbaa50035734b2c884b"><code>da6b076</code></a>
chore(package): Bump version to 2.1.0 (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/416">#416</a>)</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/1f4b9294b2cdf2c5ae16b35024bb70d48eabdecd"><code>1f4b929</code></a>
change loader error handling (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/415">#415</a>)</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/d3e28807a0fbc13ec6dfc435141a792675b4cbbb"><code>d3e2880</code></a>
Add best practices note for uncommon scenarios</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/e095a4f232caefe28c4351825d4b646dadaac739"><code>e095a4f</code></a>
chore(deps): bump diff from 4.0.2 to 4.0.4 (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/395">#395</a>)</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/a935ca737e53b74ce623afa2e3235dcb2274357b"><code>a935ca7</code></a>
chore(deps): bump minimatch from 3.1.2 to 9.0.9 (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/394">#394</a>)</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/94af070b3f4336fb26c3a6a9a6ed200691bbdbf6"><code>94af070</code></a>
chore(deps): bump picomatch from 2.3.1 to 4.0.4 (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/393">#393</a>)</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/2c288056348421109c165e705d9ad6d665ff879b"><code>2c28805</code></a>
chore(deps-dev): bump webpack-dev-server from 5.2.2 to 5.2.4 (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/392">#392</a>)</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/c4bb408701c508a1208055444963f8ed5a6dc3ed"><code>c4bb408</code></a>
chore(deps-dev): bump esbuild from 0.17.18 to 0.25.0 (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/360">#360</a>)</li>
<li><a
href="https://github.com/hCaptcha/react-hcaptcha/commit/c90dd06eb3a95304f19bfebba893debd6a70e84b"><code>c90dd06</code></a>
feat(actions): Switch to using NPM OIDC (<a
href="https://redirect.github.com/hCaptcha/react-hcaptcha/issues/372">#372</a>)</li>
<li>See full diff in <a
href="https://github.com/hCaptcha/react-hcaptcha/compare/2.0.2...2.1.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​hcaptcha/react-hcaptcha</code> since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hcaptcha/react-hcaptcha&package-manager=npm_and_yarn&previous-version=2.0.2&new-version=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-15 04:11:07 +00:00
dependabot[bot] 7182b802b1 Bump oxfmt from 0.62.0 to 0.63.0 in /frontend (#1829) 
Bumps [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt)
from 0.62.0 to 0.63.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md">oxfmt's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this package will be documented in this
file.</p>
<p>The format is based on <a
href="https://keepachangelog.com/en/1.0.0">Keep a Changelog</a>.</p>
<h2>[0.67.0] - 2026-09-07</h2>
<h3>🛡️ Security</h3>
<ul>
<li>9a612d5 deps: Update npm packages (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/26178">#26178</a>)
(renovate[bot])</li>
</ul>
<h2>[0.64.0] - 2026-08-18</h2>
<h3>🚀 Features</h3>
<ul>
<li>c07fe7c oxfmt: Support <code>experimentalOperatorPosition</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25643">#25643</a>)
(leaysgur)</li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>fed6681 oxfmt: Skip expanding overrides options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25572">#25572</a>)
(leaysgur)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/c42d6397eab5b2d5bb2bd6746c57bc2a9cad21bd"><code>c42d639</code></a>
release(apps): oxlint v1.78.0 &amp;&amp; oxfmt v0.63.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25473">#25473</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/00f490d7f72d43ec88b1afe28de153e376caf8ed"><code>00f490d</code></a>
refactor(oxfmt,formatter): split <code>sortImports</code> validation and
use type enum (...</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxfmt_v0.63.0/npm/oxfmt">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oxfmt&package-manager=npm_and_yarn&previous-version=0.62.0&new-version=0.63.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-15 04:10:32 +00:00
dependabot[bot] 25a68cab78 Bump oxfmt from 0.61.0 to 0.62.0 in /frontend (#1823) 
Bumps [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt)
from 0.61.0 to 0.62.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md">oxfmt's
changelog</a>.</em></p>
<blockquote>
<h2>[0.62.0] - 2026-08-03</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>e6e584b oxfmt: Type jsdoc. enum options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25008">#25008</a>)
(leaysgur)</li>
</ul>
<h2>[0.59.0] - 2026-07-13</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>415fe1e oxfmt: Error on ignorePatterns that cannot match files
outside the config directory (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/24286">#24286</a>)
(leaysgur)</li>
</ul>
<h2>[0.55.0] - 2026-06-15</h2>
<h3>🚀 Features</h3>
<ul>
<li>9a2788b linter/unicorn: Implement <code>prefer-export-from</code>
rule (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22935">#22935</a>)
(AliceLanniste)</li>
</ul>
<h2>[0.54.0] - 2026-06-08</h2>
<h3>📚 Documentation</h3>
<ul>
<li>dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22965">#22965</a>)
(Boshen)</li>
<li>f88961a oxfmt: Annotate each config option with supported languages
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22953">#22953</a>)
(leaysgur)</li>
</ul>
<h2>[0.52.0] - 2026-05-26</h2>
<h3>🚀 Features</h3>
<ul>
<li>16b8058 oxfmt: Support <code>vite-plus/resolveConfig</code> for
vite.config.ts (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22454">#22454</a>)
(leaysgur)</li>
</ul>
<h2>[0.50.0] - 2026-05-15</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>43b9978 formatter/sort_imports: Treat subpath imports as internal
(<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/22440">#22440</a>)
(leaysgur)</li>
</ul>
<h2>[0.49.0] - 2026-05-11</h2>
<h3>🚀 Features</h3>
<ul>
<li>6e8e818 oxfmt: Experimental .svelte support (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/21700">#21700</a>)
(leaysgur)</li>
</ul>
<h2>[0.45.0] - 2026-04-13</h2>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>50c389b oxfmt: Support <code>.editorconfig</code>
<code>quote_type</code> (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/20989">#20989</a>)
(leaysgur)</li>
</ul>
<h2>[0.44.0] - 2026-04-06</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/oxc-project/oxc/commit/9a423f2f485b79c2353c49442c0c7f60f900261d"><code>9a423f2</code></a>
release(apps): oxlint v1.77.0 &amp;&amp; oxfmt v0.62.0 (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25251">#25251</a>)</li>
<li><a
href="https://github.com/oxc-project/oxc/commit/e6e584b9bee0f85f45874854c79dbf23ae6e527a"><code>e6e584b</code></a>
fix(oxfmt): type jsdoc. enum options (<a
href="https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt/issues/25008">#25008</a>)</li>
<li>See full diff in <a
href="https://github.com/oxc-project/oxc/commits/oxfmt_v0.62.0/npm/oxfmt">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oxfmt&package-manager=npm_and_yarn&previous-version=0.61.0&new-version=0.62.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:15:09 +00:00
dependabot[bot] e513bf2464 Bump @mantine/form from 9.4.2 to 9.5.1 in /frontend (#1822) 
Bumps
[@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form)
from 9.4.2 to 9.5.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mantinedev/mantine/releases">@​mantine/form's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<ul>
<li><code>[@mantine/tiptap]</code> Fix controls being initially
disabledbefore element is focused</li>
<li><code>[@mantine/tiptap]</code> Fix source code control wrapping
content with extra p tag</li>
<li><code>[@mantine/hooks]</code> use-scroll-spy: Allow usage with refs
(<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9025">#9025</a>)</li>
<li><code>[@mantine/core]</code> ColorInput: Add support for fullWidth
prop (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9061">#9061</a>)</li>
<li><code>[@mantine/core]</code> Checkbox: Fix incottect indeterminate
aria attributes handling in Checkbox.Card (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9095">#9095</a>)</li>
<li><code>[@mantine/core]</code> FloatingIndicator: Fix position and
size calculation under scaled ancestors (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9071">#9071</a>)</li>
<li><code>[@mantine/core]</code> Tooltip: Add interactive prop support
(<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9072">#9072</a>)</li>
<li><code>[@mantine/core]</code> Cascader: Add safe area polygon
support</li>
<li><code>[@mantine/core]</code> PasswordInput: Add option to change
whether the visibility toggle is focusable (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9090">#9090</a>)</li>
<li><code>[@mantine/charts]</code> ScatterChart: Add option to add
second y axis</li>
<li><code>[@mantine/schedule]</code> YearView: Add
<code>renderDay</code> prop support</li>
<li><code>[@mantine/schedule]</code> YearView: Add option to hide
weekend days</li>
<li><code>[@mantine/core]</code> InputWrapper: Fix <code>component:
div</code> triggering typescript error if passed to
<code>descriptionProps</code></li>
<li><code>[@mantine/schedule]</code> ResourcesMonthView: Add option to
resize events</li>
<li><code>[@mantine/core]</code> FloatingWindow: Add support for
<code>onSizeChange</code> and <code>onResizeStart</code> props (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9085">#9085</a>)</li>
</ul>
<h2>9.5.0 🤖</h2>
<p><a href="https://mantine.dev/changelog/9-5-0">View changelog with
demos on mantine.dev website</a></p>
<h2>Support Mantine development</h2>
<p>You can now sponsor Mantine development with <a
href="https://opencollective.com/mantinedev">OpenCollective</a>.
All funds are used to improve Mantine and create new features and
components.</p>
<h2>Migration to oxc</h2>
<p>Mantine has migrated its linting and formatting toolchain from ESLint
and Prettier
to <a href="https://oxc.rs">oxc</a> – <a
href="https://www.npmjs.com/package/oxlint">oxlint</a> is now used
as the linter and <a
href="https://www.npmjs.com/package/oxfmt">oxfmt</a> as the formatter.
Both
tools are written in Rust and are significantly faster than their
predecessors, which
makes linting and formatting the entire codebase almost instant.</p>
<p>The shared configuration is available as a new
<a href="https://mantine.dev/oxc-config-mantine">oxc-config-mantine</a>
package (a replacement for the previous
<code>eslint-config-mantine</code>). You can use it in your own projects
to follow the same
code style and conventions as Mantine.</p>
<h2>Native level select in date pickers</h2>
<p><a href="https://mantine.dev/dates/date-picker">DatePicker</a> and
all other date picker components (<a
href="https://mantine.dev/dates/date-picker-input">DatePickerInput</a>,
<a href="https://mantine.dev/dates/month-picker">MonthPicker</a>, <a
href="https://mantine.dev/dates/year-picker">YearPicker</a>, <a
href="https://mantine.dev/dates/date-time-picker">DateTimePicker</a>,
etc.)
now support the <code>withNativeLevelSelect</code> prop. When enabled,
it replaces the calendar header level button
with native <code>&lt;select&gt;</code> elements, making it easy to
quickly navigate to a specific month and year.</p>
<pre lang="tsx"><code>import { DatePicker } from '@mantine/dates';
<p>function Demo() {
return &lt;DatePicker withNativeLevelSelect yearsSelectRange={[2020,
2035]} /&gt;;
&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mantinedev/mantine/commit/0f57eaf5ae90c9e870fbb2a4cdd61a1d58c4c01d"><code>0f57eaf</code></a>
[release] Version: 9.5.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/ca9bc6f156b63f1a10918d94ec31ec18e4e60546"><code>ca9bc6f</code></a>
[release] Version: 9.5.1-alpha.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/8f1ad1bbe545c9cafafc5aef5b059d3d48e676a6"><code>8f1ad1b</code></a>
[release] Version: 9.5.1-alpha.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/f1d330613f54dc9319d176e6d8ba5ebff233da18"><code>f1d3306</code></a>
[release] Version: 9.5.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/732056219a0283f5822001981d7f652e632c4c87"><code>7320562</code></a>
[release] Version: 9.4.3</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/de21a8203060ba29441ab7623244339748e4319d"><code>de21a82</code></a>
[release] Version: 9.4.3-alpha.0</li>
<li>See full diff in <a
href="https://github.com/mantinedev/mantine/commits/9.5.1/packages/@mantine/form">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​mantine/form</code> since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@mantine/form&package-manager=npm_and_yarn&previous-version=9.4.2&new-version=9.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:14:20 +00:00
dependabot[bot] 6ea6b474ba Bump swr from 2.4.1 to 2.5.0 in /frontend (#1819) 
Bumps [swr](https://github.com/vercel/swr) from 2.4.1 to 2.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/swr/releases">swr's
releases</a>.</em></p>
<blockquote>
<h2>v.2.5.0</h2>
<h2>Features</h2>
<h3>RSC cache preloading</h3>
<p>Preload data in React Server Components and pass it to client hooks
through <code>SWRConfig</code>. This avoids a duplicate initial browser
request and hydrates the result into the SWR cache. The new
<code>cacheData</code> option is experimental.</p>
<p><a
href="https://redirect.github.com/vercel/swr/pull/4275">vercel/swr#4275</a></p>
<h3>New <code>unload()</code> API</h3>
<p>Use <code>unload()</code> to clear the entire SWR cache and discard
in-flight requests and mutations. Mounted hooks revalidate by default,
or you can pass <code>{ revalidate: false }</code> to keep the cache
empty until the next revalidation.</p>
<p><a
href="https://redirect.github.com/vercel/swr/pull/4298">vercel/swr#4298</a></p>
<h2>Fixes</h2>
<ul>
<li>Fixed the <code>swr/_internal</code> React Server export so it
resolves correctly in the published package by <a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.4.2...v2.5.0">https://github.com/vercel/swr/compare/v2.4.2...v2.5.0</a></p>
<h2>v2.5.0-beta.1</h2>
<h2>Feature</h2>
<ul>
<li>feat: unload() api by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4298">vercel/swr#4298</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.5.0-beta.0...v2.5.0-beta.1">https://github.com/vercel/swr/compare/v2.5.0-beta.0...v2.5.0-beta.1</a></p>
<h2>v2.5.0-beta.0</h2>
<h2>Features</h2>
<ul>
<li>feat: rsc fetches and prefill swr cache by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4275">vercel/swr#4275</a></li>
</ul>
<h3>Patches</h3>
<ul>
<li>fix: point _internal react-server export at existing file by <a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pengshenghai"><code>@​pengshenghai</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4272">vercel/swr#4272</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.4.2...v2.5.0-beta.0">https://github.com/vercel/swr/compare/v2.4.2...v2.5.0-beta.0</a></p>
<h2>v2.4.2</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vercel/swr/commit/8b9bb976b21f4d06c777ea356a5ee0fef108456e"><code>8b9bb97</code></a>
2.5.0 (<a
href="https://redirect.github.com/vercel/swr/issues/4309">#4309</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/4a984f299de2254059e1789ebd03f9714656a3b7"><code>4a984f2</code></a>
chore: upgrade bunchee to 7.0.0 (<a
href="https://redirect.github.com/vercel/swr/issues/4307">#4307</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/6e68cdce11ba222e08b609b004967053fd8ea602"><code>6e68cdc</code></a>
chore: upgrade to TypeScript 7 (<a
href="https://redirect.github.com/vercel/swr/issues/4305">#4305</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/b7bb1e03077917dc16930310318a98826fe4b6bf"><code>b7bb1e0</code></a>
chore: bump bunchee to 6.12.2 (<a
href="https://redirect.github.com/vercel/swr/issues/4304">#4304</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/fc7ac116b2a2bfdfa43ec8b08753a77d6c3de93e"><code>fc7ac11</code></a>
2.5.0-beta.1 (<a
href="https://redirect.github.com/vercel/swr/issues/4299">#4299</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/723867fde8f0d0cfeb82362bc34d8971c61a1565"><code>723867f</code></a>
feat: unload() api (<a
href="https://redirect.github.com/vercel/swr/issues/4298">#4298</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/b58d7d06004b5f52d486c09ca6e9c2f62195d703"><code>b58d7d0</code></a>
2.5.0-beta.0 (<a
href="https://redirect.github.com/vercel/swr/issues/4291">#4291</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/46c9a736818f9fdeab7806b5ec47088502df7cde"><code>46c9a73</code></a>
re-organize e2e (<a
href="https://redirect.github.com/vercel/swr/issues/4289">#4289</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/c822a5df83837e55cb6f886c8381c274f506cfaf"><code>c822a5d</code></a>
chore: use oxfmt and oxlint (<a
href="https://redirect.github.com/vercel/swr/issues/4288">#4288</a>)</li>
<li><a
href="https://github.com/vercel/swr/commit/d2e2f2c0c0da98e049b0fdbb917aa7f4944d24ea"><code>d2e2f2c</code></a>
feat: rsc fetches and prefill swr cache (<a
href="https://redirect.github.com/vercel/swr/issues/4275">#4275</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/swr/compare/v2.4.1...v2.5.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for swr since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=swr&package-manager=npm_and_yarn&previous-version=2.4.1&new-version=2.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:13:56 +00:00
dependabot[bot] cbb1e15884 Bump @types/node from 26.1.1 to 26.2.0 in /frontend (#1821) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 26.1.1 to 26.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=26.1.1&new-version=26.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-08 04:13:54 +00:00
dependabot[bot] a4476c40ff Bump axios from 1.18.0 to 1.19.0 in /frontend (#1807) 
Bumps [axios](https://github.com/axios/axios) from 1.18.0 to 1.19.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.19.0 - July 22, 2026</h2>
<p>This release raises the form-data security floor, adds configuration
and type-system capabilities, and fixes NO_PROXY matching, interceptor
errors, progress reporting, and serialization edge cases.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Multipart Form Data: Raised the form-data dependency floor to
^4.0.6, preventing fresh installations from resolving versions affected
by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a
href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx</a>).
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li>Configuration Extensibility: Preserved own-enumerable symbol-keyed
fields through mergeConfig and added a generic params type across public
TypeScript declarations, responses, errors,
adapters, and serializers. (<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li>
<li>Header Parameter Parsing: Added the opt-in
AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP
parameter parsing while preserving legacy parsing behavior. (<a
href="https://redirect.github.com/axios/axios/issues/11051">#11051</a>)</li>
<li>HTTP Status Codes: Added the missing Cloudflare 520
WebServerReturnsAnUnknownError status and matching ESM/CJS declarations.
(<a
href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>Form Data Conversion: Limited formDataToJSON path splitting to dot
and bracket notation, preserving literal punctuation in keys, and
removed browser-facing Buffer.from usage from toFormData to avoid
unnecessary polyfills. (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11018">#11018</a>)</li>
<li>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal
forms during NO_PROXY matching and honored * entries within comma- or
space-separated bypass lists. (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li>
<li>Cancellation: Propagated already-aborted input signals immediately
when composing abort signals. (<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li>
<li>Header Handling: Preserved empty first values for duplicate
singleton headers and made AxiosHeaders#getSetCookie() consistently
return arrays for present values. (<a
href="https://redirect.github.com/axios/axios/issues/11036">#11036</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11037">#11037</a>)</li>
<li>URL Handling: Included normalized, safely redacted offending URLs in
malformed-protocol errors and removed repeated trailing slashes when
combining base URLs. (<a
href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11038">#11038</a>)</li>
<li>Progress Events: Clamped malformed negative progress values to zero
and ensured final Node.js download progress events are delivered before
streamed responses close. (<a
href="https://redirect.github.com/axios/axios/issues/11039">#11039</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11040">#11040</a>)</li>
<li>Error and JSON Serialization: Serialized Set values as arrays in
JSON-compatible snapshots and synthesized useful AxiosError messages
from otherwise-empty AggregateError instances. (<a
href="https://redirect.github.com/axios/axios/issues/11044">#11044</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li>
<li>Content-Length Enforcement: Corrected base64 data: URL size
estimation so maxContentLength is enforced consistently by the HTTP and
Fetch adapters. (<a
href="https://redirect.github.com/axios/axios/issues/11061">#11061</a>)</li>
<li>Synchronous Interceptors: Prevented requests from being dispatched
after synchronous request interceptors fail unless their paired
rejection handler resolves successfully. (<a
href="https://redirect.github.com/axios/axios/issues/11071">#11071</a>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>Dependencies: Updated development and test tooling, the docs
fixture's Axios version, and GitHub Actions integrations including
Checkout, Setup Node, Setup Deno, and Zizmor. (<a
href="https://redirect.github.com/axios/axios/issues/11031">#11031</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11055">#11055</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11056">#11056</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11058">#11058</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11079">#11079</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11080">#11080</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11090">#11090</a>)</li>
<li>Build Outputs: Limited sourcemap generation to published minified
bundles, removing broken map references from non-minified builds. (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li>Form Data Internals: Centralized FormData header handling and made
the Node.js adapter tolerate getHeaders() returning undefined under the
content-only policy. (<a
href="https://redirect.github.com/axios/axios/issues/11062">#11062</a>)</li>
<li>Developer Experience: Ignored common local AI-tooling directories
and fixed a constant-reassignment crash when the development sandbox
serves its root path. (<a
href="https://redirect.github.com/axios/axios/issues/11032">#11032</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li>
<li>Documentation: Updated sponsor information, clarified that baseURL
is not a path-security boundary, scoped provenance claims to attested
releases, and corrected the configuration-defaults documentation. (<a
href="https://redirect.github.com/axios/axios/issues/11041">#11041</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11068">#11068</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11076">#11076</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li>
<li>Publishing: Simplified v1 publishing to use the npm version bundled
with Node.js 26 and updated package metadata for the 1.19.0 release. (<a
href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><a
href="https://github.com/afonsojramos"><code>@​afonsojramos</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
<li><a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>)</li>
<li><a
href="https://github.com/yassertawfik4"><code>@​yassertawfik4</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>)</li>
<li><a
href="https://github.com/AnandSundar"><code>@​AnandSundar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>)</li>
<li><a
href="https://github.com/lin-hongkuan"><code>@​lin-hongkuan</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li>
<li><a
href="https://github.com/Wali007-lab"><code>@​Wali007-lab</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li><a href="https://github.com/magicdawn"><code>@​magicdawn</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>)</li>
<li><a
href="https://github.com/andrewkernel"><code>@​andrewkernel</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li>
<li><a
href="https://github.com/Sagargupta16"><code>@​Sagargupta16</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li>
<li><a
href="https://github.com/Rpaudel379"><code>@​Rpaudel379</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h2>v1.19.0 — July 22, 2026</h2>
<p>This release raises the form-data security floor, adds configuration
and type-system capabilities, and fixes NO_PROXY matching, interceptor
errors, progress reporting, and serialization edge cases.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Multipart Form Data: Raised the form-data dependency floor to
^4.0.6, preventing fresh installations from resolving versions affected
by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a
href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx</a>).
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li>Configuration Extensibility: Preserved own-enumerable symbol-keyed
fields through mergeConfig and added a generic params type across public
TypeScript declarations, responses, errors,
adapters, and serializers. (<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li>
<li>Header Parameter Parsing: Added the opt-in
AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP
parameter parsing while preserving legacy parsing behavior. (<a
href="https://redirect.github.com/axios/axios/issues/11051">#11051</a>)</li>
<li>HTTP Status Codes: Added the missing Cloudflare 520
WebServerReturnsAnUnknownError status and matching ESM/CJS declarations.
(<a
href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>
<p>Form Data Conversion: Limited formDataToJSON path splitting to dot
and bracket notation, preserving literal punctuation in keys, and
removed browser-facing Buffer.from usage from toFormData to avoid
unnecessary polyfills. (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11018">#11018</a>)</p>
</li>
<li>
<p>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal
forms during NO_PROXY matching and honored * entries within comma- or
space-separated bypass lists. (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</p>
</li>
<li>
<p>Cancellation: Propagated already-aborted input signals immediately
when composing abort signals. (<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</p>
</li>
<li>
<p>Header Handling: Preserved empty first values for duplicate singleton
headers and made AxiosHeaders#getSetCookie() consistently return arrays
for present values. (<a
href="https://redirect.github.com/axios/axios/issues/11036">#11036</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11037">#11037</a>)</p>
</li>
<li>
<p>URL Handling: Included normalized, safely redacted offending URLs in
malformed-protocol errors and removed repeated trailing slashes when
combining base URLs. (<a
href="https://redirect.github.com/axios/axios/issues/11008">#11008</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11038">#11038</a>)</p>
</li>
<li>
<p>Progress Events: Clamped malformed negative progress values to zero
and ensured final Node.js download progress events are delivered before
streamed responses close. (<a
href="https://redirect.github.com/axios/axios/issues/11039">#11039</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11040">#11040</a>)</p>
</li>
<li>
<p>Error and JSON Serialization: Serialized Set values as arrays in
JSON-compatible snapshots and synthesized useful AxiosError messages
from otherwise-empty AggregateError instances. (<a
href="https://redirect.github.com/axios/axios/issues/11044">#11044</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</p>
</li>
<li>
<p>Content-Length Enforcement: Corrected base64 data: URL size
estimation so maxContentLength is enforced consistently by the HTTP and
Fetch adapters. (<a
href="https://redirect.github.com/axios/axios/issues/11061">#11061</a>)</p>
</li>
<li>
<p>Synchronous Interceptors: Prevented requests from being dispatched
after synchronous request interceptors fail unless their paired
rejection handler resolves successfully. (<a
href="https://redirect.github.com/axios/axios/issues/11071">#11071</a>)</p>
</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>Dependencies: Updated development and test tooling, the docs
fixture's Axios version, and GitHub Actions integrations including
Checkout, Setup Node, Setup Deno, and Zizmor. (<a
href="https://redirect.github.com/axios/axios/issues/11031">#11031</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11055">#11055</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11056">#11056</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11058">#11058</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11079">#11079</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11080">#11080</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11090">#11090</a>)</li>
<li>Build Outputs: Limited sourcemap generation to published minified
bundles, removing broken map references from non-minified builds. (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li>Form Data Internals: Centralized FormData header handling and made
the Node.js adapter tolerate getHeaders() returning undefined under the
content-only policy. (<a
href="https://redirect.github.com/axios/axios/issues/11062">#11062</a>)</li>
<li>Developer Experience: Ignored common local AI-tooling directories
and fixed a constant-reassignment crash when the development sandbox
serves its root path. (<a
href="https://redirect.github.com/axios/axios/issues/11032">#11032</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li>
<li>Documentation: Updated sponsor information, clarified that baseURL
is not a path-security boundary, scoped provenance claims to attested
releases, and corrected the configuration-defaults documentation. (<a
href="https://redirect.github.com/axios/axios/issues/11041">#11041</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11068">#11068</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11076">#11076</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li>
<li>Publishing: Simplified v1 publishing to use the npm version bundled
with Node.js 26 and updated package metadata for the 1.19.0 release. (<a
href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><a
href="https://github.com/afonsojramos"><code>@​afonsojramos</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
<li><a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>)</li>
<li><a
href="https://github.com/yassertawfik4"><code>@​yassertawfik4</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>)</li>
<li><a
href="https://github.com/AnandSundar"><code>@​AnandSundar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>)</li>
<li><a
href="https://github.com/lin-hongkuan"><code>@​lin-hongkuan</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li>
<li><a
href="https://github.com/Wali007-lab"><code>@​Wali007-lab</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li><a href="https://github.com/magicdawn"><code>@​magicdawn</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>)</li>
<li><a
href="https://github.com/andrewkernel"><code>@​andrewkernel</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</li>
<li><a
href="https://github.com/Sagargupta16"><code>@​Sagargupta16</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/311fcc5c8d989b7248f05d390bb83bfbfb009977"><code>311fcc5</code></a>
chore(release): prepare release 1.19.0 (<a
href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/cb4fd743abd1c595761c8eda25d1323fc62a3b93"><code>cb4fd74</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.1 in /docs (<a
href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/004c93a9d2acd0561c498eff7bb4431c6bad78af"><code>004c93a</code></a>
chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the
github-action...</li>
<li><a
href="https://github.com/axios/axios/commit/122edde91b1183572f4ba399b5b6bc4e3b989718"><code>122edde</code></a>
chore(deps-dev): bump the development_dependencies group with 3 updates
(<a
href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/c44f8d0a910df99486da9175584b99f56a94a73b"><code>c44f8d0</code></a>
ci: use bundled npm for v1 publish (<a
href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/878bb29de570765b0d4c0970e30400d9ea9399f7"><code>878bb29</code></a>
fix(sandbox): resolve TypeError on constant variable path assignment (<a
href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/a092bae50d1884782151b2fcea12974d6da6e376"><code>a092bae</code></a>
fix(core): synchronous interceptors swallow errors and proceed with
request (...</li>
<li><a
href="https://github.com/axios/axios/commit/3041b8fd1daf17404d1bad1f9d94026ea5ab400b"><code>3041b8f</code></a>
feat(HttpStatusCode): add missing 520 status code (<a
href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/58b16c88f0bddf1fadb321aed58ba3f49a90481b"><code>58b16c8</code></a>
refactor(helpers): extract duplicated setFormDataHeaders into a shared
helper...</li>
<li><a
href="https://github.com/axios/axios/commit/3077e62097726d22ba30f1cb847d7a07050e339a"><code>3077e62</code></a>
feat(types): Allow the Params property to be typed, instead of
<code>any</code> (<a
href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.18.0...v1.19.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.18.0&new-version=1.19.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:14:13 +00:00
dependabot[bot] c0078f2757 Bump @tabler/icons-react from 3.45.0 to 3.46.0 in /frontend (#1806) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.45.0 to 3.46.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases">@​tabler/icons-react's
releases</a>.</em></p>
<blockquote>
<h2>Release 3.46.0</h2>
<!-- raw HTML omitted -->
<h3>18 new icons:</h3>
<ul>
<li><code>outline/play-bug</code></li>
<li><code>outline/play-bugs</code></li>
<li><code>outline/remote-control</code></li>
<li><code>outline/rocking-chair</code></li>
<li><code>outline/run-sprint</code></li>
<li><code>outline/sparkles-2-off</code></li>
<li><code>outline/tabs</code></li>
<li><code>outline/tags-chevron-down</code></li>
<li><code>outline/tags-chevron-left</code></li>
<li><code>outline/tags-chevron-right</code></li>
<li><code>outline/tags-chevron-up</code></li>
<li><code>outline/thinking-high</code></li>
<li><code>outline/thinking-low</code></li>
<li><code>outline/thinking-medium</code></li>
<li><code>outline/treasure-chest</code></li>
<li><code>outline/twig</code></li>
<li><code>outline/vault</code></li>
<li><code>outline/yarn</code></li>
</ul>
<p>Fixed icons: <code>outline/credits</code>,
<code>outline/currency-tether</code>,
<code>outline/device-3d-camera</code>,
<code>outline/device-screen</code>, <code>outline/home-lock</code>,
<code>outline/map-lock</code>, <code>outline/notdef</code>,
<code>outline/queue-pop-in</code>, <code>outline/server-bolt</code>,
<code>outline/server</code>, <code>outline/sparkles-2</code>,
<code>outline/transform-point-bottom-left</code>,
<code>outline/transform-point-bottom-right</code>,
<code>outline/transform-point-top-left</code>,
<code>outline/transform-point-top-right</code></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/8ac7d81b72ece11072ef25ea9fd92e80c6f3c9fc"><code>8ac7d81</code></a>
Release 3.46.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/fe319f05d943a17efb29c5089e21364d3975843c"><code>fe319f0</code></a>
Add publishConfig for public access in all icon packages (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1562">#1562</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.45.0&new-version=3.46.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:13:39 +00:00
dependabot[bot] 39a9d164cf Bump npm-check-updates from 22.2.9 to 23.0.0 in /frontend (#1805) 
Bumps
[npm-check-updates](https://github.com/raineorshine/npm-check-updates)
from 22.2.9 to 23.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/releases">npm-check-updates's
releases</a>.</em></p>
<blockquote>
<h2>v23.0.0</h2>
<h3>⚠️ Breaking changes &amp; migration</h3>
<p><strong>1. Node.js 22+ required</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1844">#1844</a>)
The minimum supported Node.js is now <strong>22</strong>. Supported
versions: <code>^22.22.2 || ^24.15.0 || &gt;=26.0.0</code> (and npm
<code>&gt;=10</code>).</p>
<ul>
<li><em>Migration:</em> Upgrade Node before installing. On older Node,
stay on v22.x.</li>
</ul>
<p><strong>2. Pure ESM package — CJS build dropped, default export is
now callable</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1916">#1916</a>,
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1894">#1894</a>)
The package is now pure ESM (no more CommonJS build), and the default
export is now callable directly. <code>ncu.run()</code> and
<code>ncu.defineConfig()</code> still work as namespaced properties.</p>
<ul>
<li><em>Migration (ESM):</em>
<pre lang="js"><code>// before
import * as ncu from 'npm-check-updates'
const upgraded = await ncu.run({ /* ... */ })
// after
import ncu from 'npm-check-updates'
const upgraded = await ncu({ /* ... */ }) // ncu.run({...}) also still
works
</code></pre>
</li>
<li><em>Migration (CommonJS):</em> Still usable via Node's native
<code>require()</code> of ESM (Node 22+), but the import shape changed:
<pre lang="js"><code>// before
const ncu = require('npm-check-updates')
// after
const { default: ncu } = require('npm-check-updates')
ncu({ /* ... */ }).then(upgraded =&gt; console.log(upgraded))
</code></pre>
</li>
</ul>
<p><strong>3. <code>filterVersion</code> / <code>rejectVersion</code> no
longer accept a predicate function. Use <code>filter</code> /
<code>reject</code> instead.</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1933">#1933</a>)
These options now accept only a string, wildcard, glob,
comma/space-delimited list, or <code>/regex/</code>. (CLI usage is
unchanged — the CLI never supported functions.)</p>
<ul>
<li><em>Migration:</em> If you passed a function to
<code>filterVersion</code>/<code>rejectVersion</code> in
<code>.ncurc.js</code> or via the module API, move it to
<code>filter</code> / <code>reject</code> instead. Those receive the
package name <strong>and</strong> the parsed current version, so they
can match on both:
<pre lang="js"><code>// before
filterVersion: (name, semver) =&gt; !(name.startsWith('@myorg/')
&amp;&amp; +semver[0].major &gt; 5)
// after
filter: (name, semver) =&gt; !(name.startsWith('@myorg/') &amp;&amp;
+semver[0].major &gt; 5)
</code></pre>
</li>
</ul>
<p><strong>4. Output is now grouped by default</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1937">#1937</a>)
<code>--format</code> now defaults to <code>[&quot;group&quot;]</code>,
so upgrades are grouped by major / minor / patch out of the box. This is
a better default for most users.</p>
<ul>
<li><em>Migration:</em> To get the old flat output, use:
<pre lang="bash"><code>ncu --format no-group
</code></pre>
The new <code>no-</code> prefix removes a value from the default list
instead of replacing the whole list, so <code>--format
no-group,time</code> disables grouping while adding publish times.</li>
</ul>
<p><strong>5. <code>--target semver</code> now respects explicit upper
bounds</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1920">#1920</a>)
An explicit upper bound in a range is now preserved and never exceeded,
e.g. <code>^9.5.0 &lt;10</code> → <code>^9.7.0 &lt;10</code> (previously
the bound could be overrun). This can change which versions are selected
for ranges with explicit upper bounds.</p>
<h3>✨ Other improvements</h3>
<ul>
<li>Native TypeScript loading (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1888">#1888</a>),
lazy-loaded <code>npm-registry-fetch</code> for faster startup (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1898">#1898</a>),
and reduced dependencies for a lighter install.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md">npm-check-updates's
changelog</a>.</em></p>
<blockquote>
<h2>[23.0.0] - 2026-07-26</h2>
<h3>⚠️ Breaking changes &amp; migration</h3>
<p><strong>1. Node.js 22+ required</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1844">#1844</a>)
The minimum supported Node.js is now <strong>22</strong>. Supported
versions: <code>^22.22.2 || ^24.15.0 || &gt;=26.0.0</code> (and npm
<code>&gt;=10</code>).</p>
<ul>
<li><em>Migration:</em> Upgrade Node before installing. On older Node,
stay on v22.x.</li>
</ul>
<p><strong>2. Pure ESM package — CJS build dropped, default export is
now callable</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1916">#1916</a>,
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1894">#1894</a>)
The package is now pure ESM (no more CommonJS build), and the default
export is now callable directly. <code>ncu.run()</code> and
<code>ncu.defineConfig()</code> still work as namespaced properties.</p>
<ul>
<li>
<p><em>Migration (ESM):</em></p>
<pre lang="js"><code>// before
import * as ncu from 'npm-check-updates'
const upgraded = await ncu.run({/* ... */})
// after
import ncu from 'npm-check-updates'
const upgraded = await ncu({/* ... */}) // ncu.run({...}) also still
works
</code></pre>
</li>
<li>
<p><em>Migration (CommonJS):</em> Still usable via Node's native
<code>require()</code> of ESM (Node 22+), but the import shape
changed:</p>
<pre lang="js"><code>// before
const ncu = require('npm-check-updates')
// after
const { default: ncu } = require('npm-check-updates')
ncu({/* ... */}).then(upgraded =&gt; console.log(upgraded))
</code></pre>
</li>
</ul>
<p><strong>3. <code>filterVersion</code> / <code>rejectVersion</code> no
longer accept a predicate function. Use <code>filter</code> /
<code>reject</code> instead.</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1933">#1933</a>)
These options now accept only a string, wildcard, glob,
comma/space-delimited list, or <code>/regex/</code>. (CLI usage is
unchanged — the CLI never supported functions.)</p>
<ul>
<li>
<p><em>Migration:</em> If you passed a function to
<code>filterVersion</code>/<code>rejectVersion</code> in
<code>.ncurc.js</code> or via the module API, move it to
<code>filter</code> / <code>reject</code> instead. Those receive the
package name <strong>and</strong> the parsed current version, so they
can match on both:</p>
<pre lang="js"><code>// before
filterVersion: (name, semver) =&gt; !(name.startsWith('@myorg/')
&amp;&amp; +semver[0].major &gt; 5)
// after
filter: (name, semver) =&gt; !(name.startsWith('@myorg/') &amp;&amp;
+semver[0].major &gt; 5)
</code></pre>
</li>
</ul>
<p><strong>4. Output is now grouped by default</strong> (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1937">#1937</a>)
<code>--format</code> now defaults to <code>[&quot;group&quot;]</code>,
so upgrades are grouped by major / minor / patch out of the box. This is
a better default for most users.</p>
<ul>
<li><em>Migration:</em> To get the old flat output, use:</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/2417fe3b0ce0356deefa22f1b650afe37e8b5ead"><code>2417fe3</code></a>
23.0.0</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/61b8818b28dddd2b3810225275d54905677e4ee9"><code>61b8818</code></a>
Update deps (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1948">#1948</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/548c6e3969865b5c8a5f57ad475617978c343534"><code>548c6e3</code></a>
Merge pull request <a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1943">#1943</a>
from raineorshine/xmr/test-doctor</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/d31677a3fe9110b0233b5075141ee4464d2c33a3"><code>d31677a</code></a>
test/doctor: run fixtures from a temp copy instead of mutating tracked
files</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/31c7e85a8ba37a1a1c26154c1f00a2f1aefdec9b"><code>31c7e85</code></a>
Fix and clean up skipped tests (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1941">#1941</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/c7c968f71aaf67cfc6aefd04ffd16b6c7a97f6a1"><code>c7c968f</code></a>
Merge pull request <a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1935">#1935</a>
from raineorshine/xmr/fix-regex</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/e42e613794eb89f25c2b32ba6aee9711755edbf6"><code>e42e613</code></a>
Update dependencies (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1940">#1940</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/5c7b4225ff4a299b6bb0c10b3afca6ef5da3d897"><code>5c7b422</code></a>
Add regression test for single-character override keys that are not
'.'</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/8d0d4be47363891b4362519f64629f12fa8a8609"><code>8d0d4be</code></a>
Move override tests into upgradePackageData.test.ts</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/21b8f539eb64db2c7156deb8afb51b4e26312ff5"><code>21b8f53</code></a>
Use jsonc-parser for packageManager and JSON catalog upgrades</li>
<li>Additional commits viewable in <a
href="https://github.com/raineorshine/npm-check-updates/compare/v22.2.9...v23.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=npm-check-updates&package-manager=npm_and_yarn&previous-version=22.2.9&new-version=23.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:13:30 +00:00
dependabot[bot] 1bc2d8b4ae Bump vite from 8.1.5 to 8.2.0 in /frontend (#1804) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.1.5 to 8.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>create-vite@8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.2.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.2.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.2.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.2.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.2.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/vitejs/vite/compare/v8.2.0-beta.0...v8.2.0">8.2.0</a>
(2026-07-30)</h2>
<h3>Features</h3>
<ul>
<li>add <code>input</code> to <code>server.fs.allow</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23035">#23035</a>)
(<a
href="https://github.com/vitejs/vite/commit/95a3cdab83e1125b03d2e8dd942fb6b64209e5fa">95a3cda</a>)</li>
<li><strong>bundled-dev:</strong> reload once after rebuild instead of
via the fallback page (<a
href="https://redirect.github.com/vitejs/vite/issues/23106">#23106</a>)
(<a
href="https://github.com/vitejs/vite/commit/b24381d741941b9ce2b1c07db62cc5f4d7bad981">b24381d</a>)</li>
<li><strong>bundled-dev:</strong> support worker file update accepted by
HMR (<a
href="https://redirect.github.com/vitejs/vite/issues/23068">#23068</a>)
(<a
href="https://github.com/vitejs/vite/commit/0d04351fdc12258c75b9f1cda5780fdb836ed0ef">0d04351</a>)</li>
<li><strong>config:</strong> include column in config incompatibility
location (<a
href="https://redirect.github.com/vitejs/vite/issues/23064">#23064</a>)
(<a
href="https://github.com/vitejs/vite/commit/8a245726944ed29225920d49be77c33c6e03afc8">8a24572</a>)</li>
<li><strong>dev:</strong> resolve interface name for explicit host in
network URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/22965">#22965</a>)
(<a
href="https://github.com/vitejs/vite/commit/3ac77d9dd742968961af38a5a91ed6b061ceda7d">3ac77d9</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bundledDev:</strong> print build errors to the terminal when
an HMR update fails (<a
href="https://redirect.github.com/vitejs/vite/issues/23024">#23024</a>)
(<a
href="https://github.com/vitejs/vite/commit/41c465896e8b11b1eb9c5fbdafbdcc528e189a2c">41c4658</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23069">#23069</a>)
(<a
href="https://github.com/vitejs/vite/commit/4c07b74416f859d7e8bdace13409ef2d080edf76">4c07b74</a>)</li>
<li><strong>hmr:</strong> preserve environment snapshot during server
restart (<a
href="https://redirect.github.com/vitejs/vite/issues/22992">#22992</a>)
(<a
href="https://github.com/vitejs/vite/commit/b1186c36d06bb94941c58e8272fc4acb8512c93b">b1186c3</a>)</li>
<li><strong>importAnalysis:</strong> interop imports injected into
optimized dep files by plugins (<a
href="https://redirect.github.com/vitejs/vite/issues/23029">#23029</a>)
(<a
href="https://github.com/vitejs/vite/commit/8c2a87d41fb24536e59643351758084cde4d0dd7">8c2a87d</a>)</li>
<li><strong>module-runner:</strong> keep stack trace interception
working when <code>Object.prototype</code> is frozen (<a
href="https://redirect.github.com/vitejs/vite/issues/23073">#23073</a>)
(<a
href="https://github.com/vitejs/vite/commit/599c5b02a8b6879b05ede988020f1331e877aaea">599c5b0</a>)</li>
<li><strong>server:</strong> strip base in indexHtml module graph lookup
(<a
href="https://redirect.github.com/vitejs/vite/issues/22932">#22932</a>)
(<a
href="https://github.com/vitejs/vite/commit/fa005d19af5d847931c6dbefc63841c137383e6c">fa005d1</a>)</li>
<li>support resolving top-level input option with plugins (<a
href="https://redirect.github.com/vitejs/vite/issues/23101">#23101</a>)
(<a
href="https://github.com/vitejs/vite/commit/41df81a6a4c3eef08f7a9a8ac9530cd136c0eafa">41df81a</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>config:</strong> correct cacheDir default fallback
description (<a
href="https://redirect.github.com/vitejs/vite/issues/23060">#23060</a>)
(<a
href="https://github.com/vitejs/vite/commit/aafa103af5d71fb59d7c3dd617d0cbef3b222f1f">aafa103</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li>config CJS module vars in ESM case (<a
href="https://redirect.github.com/vitejs/vite/issues/23010">#23010</a>)
(<a
href="https://github.com/vitejs/vite/commit/d8cd38830251b95fd7dddcd0eee0ce94cc61c2f4">d8cd388</a>)</li>
</ul>
<h2><a
href="https://github.com/vitejs/vite/compare/v8.1.5...v8.2.0-beta.0">8.2.0-beta.0</a>
(2026-07-22)</h2>
<h3>Features</h3>
<ul>
<li>add <code>input</code> option (<a
href="https://redirect.github.com/vitejs/vite/issues/22642">#22642</a>)
(<a
href="https://github.com/vitejs/vite/commit/9beae37d7221b25463a011feb40b0303ca328d87">9beae37</a>)</li>
<li><strong>config:</strong> warn features incompatible with native
loader in bundle loader (<a
href="https://redirect.github.com/vitejs/vite/issues/22850">#22850</a>)
(<a
href="https://github.com/vitejs/vite/commit/05302b07267f6b4f9dbeac5b1d73fcc3dc06d730">05302b0</a>)</li>
<li><strong>css:</strong> export PostCSS config type for type-safe
configs (<a
href="https://redirect.github.com/vitejs/vite/issues/22792">#22792</a>)
(<a
href="https://github.com/vitejs/vite/commit/302c755a8125b9a26214e3b413922b5513e41981">302c755</a>)</li>
<li><strong>dev:</strong> label network URLs with their interface name
(<a
href="https://redirect.github.com/vitejs/vite/issues/22830">#22830</a>)
(<a
href="https://github.com/vitejs/vite/commit/78accc42a5b8887d9df624f7d4a934d3ead677d1">78accc4</a>)</li>
<li><strong>optimizer:</strong> support aube lockfile (<a
href="https://redirect.github.com/vitejs/vite/issues/22813">#22813</a>)
(<a
href="https://github.com/vitejs/vite/commit/6319827116c5be2a19c1b91c84ba3d38ad26a41c">6319827</a>)</li>
<li><strong>optimizer:</strong> support nub lockfile (<a
href="https://redirect.github.com/vitejs/vite/issues/22891">#22891</a>)
(<a
href="https://github.com/vitejs/vite/commit/65d3604f6fdbfcf6e86244d7fe3c1ca86acae701">65d3604</a>)</li>
<li>update rolldown-related dependencies and use client-side HMR in
bundled-dev (<a
href="https://redirect.github.com/vitejs/vite/issues/22961">#22961</a>)
(<a
href="https://github.com/vitejs/vite/commit/960e9efbc1372000caac46cc2f123cef4824e2bb">960e9ef</a>)</li>
<li><strong>wasm:</strong> expand test suite, unwrap WebAssembly.Global
and enable js-string builtins (<a
href="https://redirect.github.com/vitejs/vite/issues/22674">#22674</a>)
(<a
href="https://github.com/vitejs/vite/commit/9e79b51579457a9af4fa623b68a0bfabbf38010b">9e79b51</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> map CSS chunks in chunk import maps (fix <a
href="https://redirect.github.com/vitejs/vite/issues/22946">#22946</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/22947">#22947</a>)
(<a
href="https://github.com/vitejs/vite/commit/e16ff3a1199293ac9cdfa6132c08fdea162215f3">e16ff3a</a>)</li>
<li><strong>config:</strong> exclude virtual modules from native config
compat check (<a
href="https://redirect.github.com/vitejs/vite/issues/22979">#22979</a>)
(<a
href="https://github.com/vitejs/vite/commit/2ced1fe4e4e480ed78cb7aa5c78319e57bfa7783">2ced1fe</a>)</li>
<li><strong>css:</strong> rewrite urls in OnceExit-injected content (<a
href="https://redirect.github.com/vitejs/vite/issues/22983">#22983</a>)
(<a
href="https://github.com/vitejs/vite/commit/abb793e18c92592c21fbb8e1f3fc450b5839f04f">abb793e</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22985">#22985</a>)
(<a
href="https://github.com/vitejs/vite/commit/04f345b37064cd0bba6447eb5c32be5c22162f3d">04f345b</a>)</li>
<li><strong>deps:</strong> update dependency magic-string to v1 (<a
href="https://redirect.github.com/vitejs/vite/issues/22998">#22998</a>)
(<a
href="https://github.com/vitejs/vite/commit/c60b4d7cdb85b7d4f78671cdcfb863e5f8b66bb7">c60b4d7</a>)</li>
<li><strong>hmr:</strong> remove hot data after prune (<a
href="https://redirect.github.com/vitejs/vite/issues/23002">#23002</a>)
(<a
href="https://github.com/vitejs/vite/commit/be9631658f5191ee5c5665e780239d42a330280a">be96316</a>)</li>
<li>resolve root to real path (<a
href="https://redirect.github.com/vitejs/vite/issues/22832">#22832</a>)
(<a
href="https://github.com/vitejs/vite/commit/55bba7bbd9de40d031360e4408fe91bff5b29ec9">55bba7b</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/24a611f1c83a976d32262628d42f683609746635"><code>24a611f</code></a>
release: v7.2.4</li>
<li><a
href="https://github.com/vitejs/vite/commit/2d66b7b14aa6dfd62f3d6a59ee8382ed5ca6fd32"><code>2d66b7b</code></a>
fix: revert &quot;perf(deps): replace debug with obug (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)&quot;</li>
<li><a
href="https://github.com/vitejs/vite/commit/a668014dba377c2b82a32d8124f1761e9ea74f82"><code>a668014</code></a>
release: v7.2.3</li>
<li><a
href="https://github.com/vitejs/vite/commit/acfe939e1f7c303c34b0b39b883cc302da767fa2"><code>acfe939</code></a>
perf(deps): replace debug with obug (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/4f8171eb3046bd70c83964689897dab4c6b58bc0"><code>4f8171e</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21128">#21128</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/50297208452241061cb44d09a4bbdf77a11ac01e"><code>5029720</code></a>
chore(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21127">#21127</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/5909efd8fbfd1bf1eab65427aea0613124b2797a"><code>5909efd</code></a>
fix: allow multiple <code>bindCLIShortcuts</code> calls with shortcut
merging (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21103">#21103</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/39a0a15fd24ed37257c48b795097a3794e54d255"><code>39a0a15</code></a>
chore(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21095">#21095</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/6a34ac3422686e7cf7cc9a25d299cb8e5a8d92a0"><code>6a34ac3</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21096">#21096</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/02ceaec45e17bef19159188a28d9196fed1761be"><code>02ceaec</code></a>
chore(deps): update dependency <code>@​rollup/plugin-commonjs</code> to
v29 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21099">#21099</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.1.5&new-version=8.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-01 04:12:57 +00:00
dependabot[bot] 5ce2024b19 Bump @types/node from 26.0.1 to 26.1.1 in /frontend (#1798) 
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 26.0.1 to 26.1.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:15:27 +00:00
dependabot[bot] 44885368e1 Bump date-fns from 4.1.0 to 4.4.0 in /frontend (#1797) 
Bumps [date-fns](https://github.com/date-fns/date-fns) from 4.1.0 to
4.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/date-fns/date-fns/releases">date-fns's
releases</a>.</em></p>
<blockquote>
<h2>v4.4.0</h2>
<p>This release revisits the approach to CDN usage and introduces a new
package, <code>@date-fns/cdn</code> and deprecates the
<code>date-fns</code> CDN scripts. It allowed reducing the zipped
package size from <code>5.83 MB</code> down to <code>3.96 MB</code>
without introducing any breaking changes.</p>
<p>In <code>v5.0.0-alpha.0</code> where CDN scripts are completely
removed from <code>date-fns</code> the change is more significant and
brings the zipped package size down to <code>2.89 MB</code>.</p>
<p>It is just the first step in optimizing the package size. Expect
further size reduction in the future v4 and v5 versions.</p>
<h3>Changed</h3>
<ul>
<li>
<p><strong>DEPRECATED</strong>: The <code>date-fns</code> CDN scripts
are now deprecated and will be removed in the next major release. Please
switch to the new <code>@date-fns/cdn</code> package for CDN usage.</p>
</li>
<li>
<p>Removed CDN source maps to reduce the package size. If you rely on
them, please switch to the new <code>@date-fns/cdn</code> package that
still includes them.</p>
</li>
</ul>
<h2>v4.3.0</h2>
<p>Kudos to <a
href="https://github.com/ImRodry"><code>@​ImRodry</code></a> and <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>
for their contributions.</p>
<h3>Fixed</h3>
<ul>
<li>
<p>Fixed missing modularized optimization fallback (<a
href="https://x.com/kossnocorp/status/1731181274579325260">for Next.js
and others</a>). See <a
href="https://x.com/kossnocorp/status/1731181274579325260">#4193</a>.</p>
</li>
<li>
<p>Fixed <code>pt</code> locale first day of week to be Sunday. See <a
href="https://redirect.github.com/date-fns/date-fns/pull/4195">#4195</a>
by <a href="https://github.com/ImRodry"><code>@​ImRodry</code></a>.</p>
</li>
<li>
<p>Fixed <code>zh-CN</code>, <code>zh-HK</code>, and <code>zh-TW</code>
locale month parsing for October, November, and December. See <a
href="https://redirect.github.com/date-fns/date-fns/pull/4194">#4194</a>
by <a
href="https://github.com/puneetdixit200"><code>@​puneetdixit200</code></a>.</p>
</li>
</ul>
<h2>v4.2.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fixed type definitions missing in v4.2.0 due to TypeScript
misconfiguration.</li>
</ul>
<h2>v4.2.0</h2>
<p>This is a minor release in all senses, it only includes documentation
updates (first of many) that points to the new <a
href="https://date-fns.org/you-dont-need-date-fns">You Don't Need
date-fns*</a> page.</p>
<p>* Not really</p>
<h3>Changed</h3>
<ul>
<li>Added Temporal API references to the JSDoc annotations of
<code>add</code>, <code>addBusinessDays</code>, and
<code>addDays</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/date-fns/date-fns/commit/cd53d2538cfa318404eff7ade6449b49bf34562e"><code>cd53d25</code></a>
Promote to v4.4.0</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/d948ec151d395096de8a45fbcd9b1e79c26fda25"><code>d948ec1</code></a>
Preserve but deprecate CDN versions for v4, set up v5 with
polyfills</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/ee65753cfc5d73cc9acd43aaa8012b3b233ddf32"><code>ee65753</code></a>
Add root <code>mise :format</code> task</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/9f5bdf5d5a944772aa9668c4fa6567d89ca01fa9"><code>9f5bdf5</code></a>
Add positional argument to <code>test/smoke.sh</code> script</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/651ead6faf331515814803faf457f5b9db7c9729"><code>651ead6</code></a>
Split CDN bundles into separate <code>@​date-fns/cdn</code> package</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/224c1a209967dad359a2c2adc9a5b0ef72e4fe7b"><code>224c1a2</code></a>
Deprecate type tests as attw hangs on date-fns package</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/7bb2842dac3d579f84b2de62f015335fb3ac734a"><code>7bb2842</code></a>
Switch <code>PACKAGE_OUTPUT_PATH</code> to <code>--dist</code> flag in
the package build script</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/b6ad5acc5ab0b40777a2695ec074c2ffcd982763"><code>b6ad5ac</code></a>
Add flags to control package build script</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/424a783de1fd974bcdbe907c9c5eb5154e9db29f"><code>424a783</code></a>
Fix docs release after moving to monorepo setup</li>
<li><a
href="https://github.com/date-fns/date-fns/commit/f95bcf18b53e6832b2c575c24c98654a24f52699"><code>f95bcf1</code></a>
(docs): Add missing <code>tsx</code> dependency</li>
<li>Additional commits viewable in <a
href="https://github.com/date-fns/date-fns/compare/v4.1.0...v4.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=date-fns&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:12:19 +00:00
dependabot[bot] 61d7893e64 Bump vite from 8.0.16 to 8.1.5 in /frontend (#1795) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.0.16 to 8.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.1.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.1.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.1.4...v8.1.5">8.1.5</a>
(2026-07-16)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bundled-dev:</strong> avoid duplicated <code>buildEnd</code>
(<a
href="https://redirect.github.com/vitejs/vite/issues/22931">#22931</a>)
(<a
href="https://github.com/vitejs/vite/commit/810032097079be1a7da0e2b09ec9d92dd07ec13f">8100320</a>)</li>
<li><strong>client:</strong> overlay error message format align rolldown
(<a
href="https://redirect.github.com/vitejs/vite/issues/22869">#22869</a>)
(<a
href="https://github.com/vitejs/vite/commit/5a72b8780705b575026617e86b0b92dea63a56a5">5a72b87</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22921">#22921</a>)
(<a
href="https://github.com/vitejs/vite/commit/fef682d3f067d534a559faf6fd9baedda2e9f8f1">fef682d</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22922">#22922</a>)
(<a
href="https://github.com/vitejs/vite/commit/3c345e475a5546a1cc6374682af89caebfe9c593">3c345e4</a>)</li>
<li><strong>module-runner:</strong> don't crash stack-trace source
mapping when globalThis.Buffer is absent (<a
href="https://redirect.github.com/vitejs/vite/issues/22945">#22945</a>)
(<a
href="https://github.com/vitejs/vite/commit/f8b38e316bcefbf29f762f90ee49c88cd52c43b5">f8b38e3</a>)</li>
<li><strong>optimizer:</strong> respect importer module format for
dynamic import interop with CJS deps (<a
href="https://redirect.github.com/vitejs/vite/issues/22951">#22951</a>)
(<a
href="https://github.com/vitejs/vite/commit/6c08c39ac4fb5868d080a51ff976a44693fc56ab">6c08c39</a>)</li>
<li><strong>ssr:</strong> scope switch-case declarations to the switch,
not the function (<a
href="https://redirect.github.com/vitejs/vite/issues/22893">#22893</a>)
(<a
href="https://github.com/vitejs/vite/commit/b59a73f76f5557492d83d097bb33b3dd02f27d51">b59a73f</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>build:</strong> fix incorrect <code>@default</code> for
build.cssMinify (<a
href="https://redirect.github.com/vitejs/vite/issues/22948">#22948</a>)
(<a
href="https://github.com/vitejs/vite/commit/c88c236186d8e2384653e382dd0960ca1ff5b24c">c88c236</a>)</li>
<li><strong>build:</strong> fix incorrect <code>@default</code> for
build.lib.formats (<a
href="https://redirect.github.com/vitejs/vite/issues/22911">#22911</a>)
(<a
href="https://github.com/vitejs/vite/commit/369ed609a4aace3aee4e4194a54990694aa4e7ac">369ed60</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li>avoid scanner scanning all files under <code>__tests__</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22912">#22912</a>)
(<a
href="https://github.com/vitejs/vite/commit/c961cae2868cc1521457ec60583867f0440e6949">c961cae</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.1.3...v8.1.4">8.1.4</a>
(2026-07-09)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li><strong>legacy:</strong> prefer oxc as minifier (fix <a
href="https://redirect.github.com/vitejs/vite/issues/21973">#21973</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/22468">#22468</a>)
(<a
href="https://github.com/vitejs/vite/commit/ab5dafa8e66296ef201f615489fb57954bb740ce">ab5dafa</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> add workaround for building on stackblitz
(<a
href="https://redirect.github.com/vitejs/vite/issues/22840">#22840</a>)
(<a
href="https://github.com/vitejs/vite/commit/575c32c29925c554f4ef4068738ab89c6878f615">575c32c</a>)</li>
<li><strong>build:</strong> keep <code>import.meta.url</code> in preload
function as-is (<a
href="https://redirect.github.com/vitejs/vite/issues/22839">#22839</a>)
(<a
href="https://github.com/vitejs/vite/commit/f1f90ed4742b3cf453428c7e581a6016a4d47321">f1f90ed</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22865">#22865</a>)
(<a
href="https://github.com/vitejs/vite/commit/d4295a9ffce428c0e51892373e00c07fccc0498a">d4295a9</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22866">#22866</a>)
(<a
href="https://github.com/vitejs/vite/commit/7cf07e4c5f7a6af276012e0c2ec06e08499e951e">7cf07e4</a>)</li>
<li><strong>html:</strong> avoid backtracking in import-only check (<a
href="https://redirect.github.com/vitejs/vite/issues/22848">#22848</a>)
(<a
href="https://github.com/vitejs/vite/commit/b5868c01a124d345664450aaebd677bfba964c05">b5868c0</a>)</li>
<li><strong>optimizer:</strong> avoid optimizer run for transform
request before init (<a
href="https://redirect.github.com/vitejs/vite/issues/22852">#22852</a>)
(<a
href="https://github.com/vitejs/vite/commit/72a5e2192506f51a5efd09c059815a5c43a9eacb">72a5e21</a>)</li>
<li><strong>ssr:</strong> align named export function call stacktrace
column with Node (<a
href="https://redirect.github.com/vitejs/vite/issues/22829">#22829</a>)
(<a
href="https://github.com/vitejs/vite/commit/173a1b648c321e0f836e5a94fc47c4fa9b081bfc">173a1b6</a>)</li>
<li>strip pure CSS chunk imports when chunkImportMap is enabled (<a
href="https://redirect.github.com/vitejs/vite/issues/22841">#22841</a>)
(<a
href="https://github.com/vitejs/vite/commit/648bd04933093d0aac9565f21a49811437776886">648bd04</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>fix incorrect <code>@default</code> for <code>server.cors</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22859">#22859</a>)
(<a
href="https://github.com/vitejs/vite/commit/70435b2551ee4fe3a0d55c8a3bb61b96f44d2763">70435b2</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update dependency postcss-modules to v9 (<a
href="https://redirect.github.com/vitejs/vite/issues/22867">#22867</a>)
(<a
href="https://github.com/vitejs/vite/commit/a9539d69efc7a4ccf988bbf5da31c2b416ba990e">a9539d6</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li>eliminate ineffectiveDynamicImport warn (<a
href="https://redirect.github.com/vitejs/vite/issues/22876">#22876</a>)
(<a
href="https://github.com/vitejs/vite/commit/ea22fb352aad9a42c0a9d08f39d8a0bae8c111a5">ea22fb3</a>)</li>
</ul>
<h3>Tests</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/5e7fe129a4dde4f41934083b25e490059985f4e6"><code>5e7fe12</code></a>
release: v8.1.5</li>
<li><a
href="https://github.com/vitejs/vite/commit/6c08c39ac4fb5868d080a51ff976a44693fc56ab"><code>6c08c39</code></a>
fix(optimizer): respect importer module format for dynamic import
interop wit...</li>
<li><a
href="https://github.com/vitejs/vite/commit/5a72b8780705b575026617e86b0b92dea63a56a5"><code>5a72b87</code></a>
fix(client): overlay error message format align rolldown (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22869">#22869</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/f8b38e316bcefbf29f762f90ee49c88cd52c43b5"><code>f8b38e3</code></a>
fix(module-runner): don't crash stack-trace source mapping when
globalThis.Bu...</li>
<li><a
href="https://github.com/vitejs/vite/commit/810032097079be1a7da0e2b09ec9d92dd07ec13f"><code>8100320</code></a>
fix(bundled-dev): avoid duplicated <code>buildEnd</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22931">#22931</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/c88c236186d8e2384653e382dd0960ca1ff5b24c"><code>c88c236</code></a>
docs(build): fix incorrect <code>@default</code> for build.cssMinify (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22948">#22948</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/b59a73f76f5557492d83d097bb33b3dd02f27d51"><code>b59a73f</code></a>
fix(ssr): scope switch-case declarations to the switch, not the function
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22">#22</a>...</li>
<li><a
href="https://github.com/vitejs/vite/commit/fef682d3f067d534a559faf6fd9baedda2e9f8f1"><code>fef682d</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22921">#22921</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/3c345e475a5546a1cc6374682af89caebfe9c593"><code>3c345e4</code></a>
fix(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22922">#22922</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/369ed609a4aace3aee4e4194a54990694aa4e7ac"><code>369ed60</code></a>
docs(build): fix incorrect <code>@default</code> for build.lib.formats
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22911">#22911</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.1.5/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.0.16&new-version=8.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:12:06 +00:00
dependabot[bot] 5dad55b44a Bump @tabler/icons-react from 3.44.0 to 3.45.0 in /frontend (#1796) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.44.0 to 3.45.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases">@​tabler/icons-react's
releases</a>.</em></p>
<blockquote>
<h2>Release 3.45.0</h2>
<!-- raw HTML omitted -->
<h3>20 new icons:</h3>
<ul>
<li><code>filled/brand-signal</code></li>
<li><code>outline/app-window-bottom-left</code></li>
<li><code>outline/app-window-bottom-right</code></li>
<li><code>outline/app-window-bottom</code></li>
<li><code>outline/app-window-center</code></li>
<li><code>outline/arrow-fork-triple</code></li>
<li><code>outline/brand-signal</code></li>
<li><code>outline/device-vision-pro-wifi</code></li>
<li><code>outline/device-workstation</code></li>
<li><code>outline/dragon</code></li>
<li><code>outline/italic-off</code></li>
<li><code>outline/tab-close</code></li>
<li><code>outline/text-outline</code></li>
<li><code>outline/text-regex-asterisk</code></li>
<li><code>outline/text-regex-end</code></li>
<li><code>outline/text-regex-plus</code></li>
<li><code>outline/text-regex-question</code></li>
<li><code>outline/text-regex-start</code></li>
<li><code>outline/underline-off</code></li>
<li><code>outline/virtual-space</code></li>
</ul>
<h2>New features</h2>
<ul>
<li>New package: <code>@tabler/icons-astro</code> — Astro support</li>
<li>Added <code>sideEffects: false</code> for better tree-shaking in Vue
package</li>
<li>Spelling fixes: corrected misspelled icon names</li>
</ul>
<p>Fixed icons: <code>outline/flip-horizontal</code>,
<code>outline/flip-vertical</code></p>
<p>Renamed icons:</p>
<ul>
<li><code>filled/mood-confuzed</code> renamed to
<code>filled/mood-confused</code></li>
<li><code>outline/brand-adobe-after-effect</code> renamed to
<code>outline/brand-adobe-after-effects</code></li>
<li><code>outline/brand-kako-talk</code> renamed to
<code>outline/brand-kakao-talk</code></li>
<li><code>outline/currency-rubel</code> renamed to
<code>outline/currency-ruble</code></li>
<li><code>outline/foodsteps</code> renamed to
<code>outline/footsteps</code></li>
<li><code>outline/gender-trasvesti</code> renamed to
<code>outline/gender-travesti</code></li>
<li><code>outline/ikosaedr</code> renamed to
<code>outline/icosahedron</code></li>
<li><code>outline/mood-confuzed</code> renamed to
<code>outline/mood-confused</code></li>
<li><code>outline/physotherapist</code> renamed to
<code>outline/physiotherapist</code></li>
<li><code>outline/sport-billard</code> renamed to
<code>outline/sport-billiard</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/975920ff99c12c4dc9e3fe61a03738330600f9b2"><code>975920f</code></a>
Release 3.45.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/4a4b287666235d2dd371f5cf02f96cfbeea235f1"><code>4a4b287</code></a>
Add Astro support for Tabler Icons (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1559">#1559</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.45.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.44.0&new-version=3.45.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:11:18 +00:00
dependabot[bot] cedc711154 Bump @mantine/form from 9.0.1 to 9.4.2 in /frontend (#1793) 
Bumps
[@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form)
from 9.0.1 to 9.4.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mantinedev/mantine/releases">@​mantine/form's
releases</a>.</em></p>
<blockquote>
<h2>9.4.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>[@mantine/schedule]</code> Fix 1-3 minutes events not aligning
correctly in ResourcesWeekView and ResourcesDayView (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9057">#9057</a>)</li>
<li><code>[@mantine/form]</code> Fix async validation with debounce on
initial keystroke of empty input (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9068">#9068</a>)</li>
<li><code>[@mantine/core]</code> Add <code>keepMountedMode</code> prop
to Modal and Drawer components (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9056">#9056</a>)</li>
<li><code>[@mantine/core]</code> Menubar: Fix menu requiring two clicks
to dismiss after switching menus with hover (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9050">#9050</a>)</li>
<li><code>[@mantine/core]</code> AppShell: Fix
<code>breakpoint={0}</code> not working correctly (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9042">#9042</a>)</li>
<li><code>[@mantine/core]</code> Tree: Fix keyboard navigation not
working on Safari (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9049">#9049</a>)</li>
<li><code>[@mantine/notifications]</code> NotificationContainer: Fix
<code>autoClose</code> leak (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9048">#9048</a>)</li>
<li><code>[@mantine/core]</code> Collapse: Add
<code>keepMountedMode</code> prop (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9021">#9021</a>)</li>
<li><code>[@mantine/dates]</code> TimePicker: Fix incorrect
<code>withSeconds</code> handling when pasting partial values (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9041">#9041</a>)</li>
<li><code>[@mantine/schedule]</code> Add option to customize current
time in ResourcesDayView and ResourcesWeekView components</li>
<li><code>[@mantine/core]</code> TreeSelect: Add <code>expand</code>
callback to <code>renderNode</code> payload</li>
<li><code>[@mantine/core]</code> Fix incorrect empty children arrays
handling in Tree and TreeSelect</li>
<li><code>[@mantine/hooks]</code> Fix unstable
<code>scrollIntoView</code> for some bundlers (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9035">#9035</a>)</li>
<li><code>[@mantine/schedule]</code> Add <code>intervalMinutes</code>
more than 60 support to ResourcesDayView and ResourcesWeekView</li>
<li><code>[@mantine/schedule]</code> ResourcesWeekView: Fix incorrect
handling of events with small duration</li>
<li><code>[@mantine/schedule]</code> ResourcesDayView: Fix events with
small durations not being visible</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/saadpocalypse"><code>@​saadpocalypse</code></a>
made their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9021">mantinedev/mantine#9021</a></li>
<li><a
href="https://github.com/Arman-Luthra"><code>@​Arman-Luthra</code></a>
made their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9050">mantinedev/mantine#9050</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mantinedev/mantine/compare/9.4.1...9.4.2">https://github.com/mantinedev/mantine/compare/9.4.1...9.4.2</a></p>
<h2>9.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li><code>[@mantine/form]</code> Fix some functions not working
correctly with react compiler (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9007">#9007</a>)</li>
<li><code>[@mantine/charts]</code> Heatmap: Fix values outside the
provided domain rendering with no fill (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8982">#8982</a>)</li>
<li><code>[@mantine/core]</code> RollingNumber: Fix rendering
<code>-0</code> for values that round to zero (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8983">#8983</a>)</li>
<li><code>[@mantine/core]</code> Slider: Fix incorrect marks labels
position in RTL layouts (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8996">#8996</a>)</li>
<li><code>[@mantine/hooks]</code> Fix use-set and use-map hooks using
stale values when used with React compiler (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9008">#9008</a>)</li>
<li><code>[@mantine/form]</code> Add <code>FormProviderProps</code> type
export (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9009">#9009</a>)</li>
<li><code>[@mantine/schedule]</code> ResourcesDayView: Fix incorrect
multiday events rendering (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9014">#9014</a>)</li>
<li><code>[@mantine/dates]</code> TimePicker: Fix duration values
greater than 9999 hours not working (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9002">#9002</a>)</li>
<li><code>[@mantine/core]</code> Menu: Mark <code>non-menuitem</code>
dropdown children as presentational (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9004">#9004</a>)</li>
<li><code>[@mantine/core]</code> Collapse: Fix <code>ref</code> and
<code>style</code> props not working when <code>transitionDuration:
0</code> (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9013">#9013</a>)</li>
<li><code>[@mantine/core]</code> Textarea: Fix autosize not working
correctly with <code>minRows</code> on initial render</li>
<li><code>[@mantine/schedule]</code> ResourcesWeekView: Add events
resizing support</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ayu3456"><code>@​ayu3456</code></a> made
their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9013">mantinedev/mantine#9013</a></li>
<li><a
href="https://github.com/Sanjays2402"><code>@​Sanjays2402</code></a>
made their first contribution in <a
href="https://redirect.github.com/mantinedev/mantine/pull/9004">mantinedev/mantine#9004</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mantinedev/mantine/compare/9.4.0...9.4.1">https://github.com/mantinedev/mantine/compare/9.4.0...9.4.1</a></p>
<h2>9.4.0 🥵</h2>
<p><a href="https://mantine.dev/changelog/9-4-0">View changelog with
demos on mantine.dev website</a></p>
<h2>Support Mantine development</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mantinedev/mantine/commit/e5752de4067bd58f6cdd970660b3c8469a56d4e5"><code>e5752de</code></a>
[release] Version: 9.4.2</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/1d68be7025ceca3619eda9db00b9395c53b75c0a"><code>1d68be7</code></a>
[<code>@​mantine/form</code>] Fix async validation with debounce on
initial keystroke of em...</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/d709e0bc277255c2a857f138cc694028273d8697"><code>d709e0b</code></a>
[release] Version: 9.4.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/f53d726d4f7e32381cc3723e2f547e5136b151ae"><code>f53d726</code></a>
[<code>@​mantine/form</code>] Fix some functions not working correctly
with react compiler ...</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/61a8d3508c8bb296d24058407e2c584fe2e38a3c"><code>61a8d35</code></a>
[<code>@​mantine/form</code>] Add <code>FormProviderProps</code> type
export (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/9009">#9009</a>)</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/75d5ab5b419f3aa560bb56fc1d75d7815c5fb2f8"><code>75d5ab5</code></a>
[release] Version: 9.4.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/73a04e07abd340d9e11cb956e04e8ee8dd105560"><code>73a04e0</code></a>
[release] Version: 9.3.2</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/33b8c0f3c1ce6dbdd692d4c2ecc805875aad3d26"><code>33b8c0f</code></a>
[release] Version: 9.3.1</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/bf03b9a0d9a5ece7ddf834532dcaf323907255ec"><code>bf03b9a</code></a>
[release] Version: 9.3.0</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/4685c4195a855641fcf0331dc6e0857bd03fdad8"><code>4685c41</code></a>
[release] Version: 9.2.2</li>
<li>Additional commits viewable in <a
href="https://github.com/mantinedev/mantine/commits/9.4.2/packages/@mantine/form">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@mantine/form&package-manager=npm_and_yarn&previous-version=9.0.1&new-version=9.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:11:02 +00:00
dependabot[bot] b2a0209ca4 Bump react-qr-code from 2.0.18 to 2.2.0 in /frontend (#1790) 
Bumps [react-qr-code](https://github.com/rosskhanas/react-qr-code) from
2.0.18 to 2.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rosskhanas/react-qr-code/releases">react-qr-code's
releases</a>.</em></p>
<blockquote>
<h2>Release 2.2.0</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.1...2.2.0">2.2.0</a>
(2026-06-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add types to package.json exports (<a
href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593">19158d2</a>)</li>
</ul>
<h2>Release 2.1.1</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.0...2.1.1">2.1.1</a>
(2026-06-08)</h2>
<h2>Release 2.0.21</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.20...2.0.21">2.0.21</a>
(2026-04-29)</h2>
<h2>Release 2.0.20</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.19...2.0.20">2.0.20</a>
(2026-04-29)</h2>
<h2>Release 2.0.19</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.0.19">2.0.19</a>
(2026-04-29)</h2>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rosskhanas/react-qr-code/blob/master/CHANGELOG.md">react-qr-code's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.1...2.2.0">2.2.0</a>
(2026-06-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add types to package.json exports (<a
href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593">19158d2</a>)</li>
</ul>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.1.0...2.1.1">2.1.1</a>
(2026-06-08)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.21...2.1.0">2.1.0</a>
(2026-06-08)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.20...2.0.21">2.0.21</a>
(2026-04-29)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.19...2.0.20">2.0.20</a>
(2026-04-29)</h2>
<h2><a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.0.19">2.0.19</a>
(2026-04-29)</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/821cb672ea8db747e75593d90d04c245f83dd2fa"><code>821cb67</code></a>
chore: release 2.2.0</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/a658bff4fe05d29c25c3d8be56b9aedf8dbf4529"><code>a658bff</code></a>
migrate from qr.js to qrcode-generator</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/fbf8bfd21f7063a372ba6be96cf0971d80e372bd"><code>fbf8bfd</code></a>
Merge pull request <a
href="https://redirect.github.com/rosskhanas/react-qr-code/issues/290">#290</a>
from Fleny113/fix/types</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/19158d2b48398a7c2fd046b267daf67ac1c29593"><code>19158d2</code></a>
fix: add types to package.json exports</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/f2213b73d140e18950f61476c9ab702aacb56f44"><code>f2213b7</code></a>
chore: release 2.1.1</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/c0174ec975b2634c2992cda1a25bae64e02374ef"><code>c0174ec</code></a>
fix rn import</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/f08e7320aeb9c71cdfe9d674155eb19d68d3c77f"><code>f08e732</code></a>
chore: release 2.1.0</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/f48bdf2b0bdb7e84ec48cbc964342b3489b9e610"><code>f48bdf2</code></a>
build mjs with rollup</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/a2ac3f549bef3a5b5b92d4c6d4fcb4ca8b60ec82"><code>a2ac3f5</code></a>
refactor src</li>
<li><a
href="https://github.com/rosskhanas/react-qr-code/commit/d95d7a3ba534d8115fe7eeebf9cb75478134f6e8"><code>d95d7a3</code></a>
upgrade babel &amp; other deps</li>
<li>Additional commits viewable in <a
href="https://github.com/rosskhanas/react-qr-code/compare/2.0.18...2.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-qr-code&package-manager=npm_and_yarn&previous-version=2.0.18&new-version=2.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-25 04:10:17 +00:00
dependabot[bot] 28a2cb2329 Bump i18next-http-backend from 3.0.5 to 4.0.0 in /frontend (#1780) 
Bumps
[i18next-http-backend](https://github.com/i18next/i18next-http-backend)
from 3.0.5 to 4.0.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md">i18next-http-backend's
changelog</a>.</em></p>
<blockquote>
<h3>4.0.0</h3>
<ul>
<li>BREAKING: drop <code>cross-fetch</code> dependency.
<code>i18next-http-backend</code> now requires a host-provided
<code>fetch</code>. This is available in Node ≥ 18 (stable since Node
21), all modern browsers, Deno, and Bun. For runtimes without native
<code>fetch</code>, install a ponyfill yourself and inject it via
<code>options.alternateFetch</code>, or stay on v3.x.</li>
<li>BREAKING: minimum Node version is now 18 (<code>engines.node =
&quot;&gt;=18&quot;</code>).</li>
<li>chore: simplified environment detection in
<code>lib/request.js</code> — uses <code>globalThis</code> (with
<code>global</code> / <code>window</code> fallbacks for legacy embedded
runtimes) instead of separate <code>global.*</code> /
<code>window.*</code> branches per API. XHR / ActiveXObject are still
picked up if the host provides them, but no longer polyfilled.</li>
<li>chore: declared <code>&quot;sideEffects&quot;: false</code> for
better tree-shaking by downstream bundlers.</li>
<li>build: replaced babel + browserify + uglify-js with <a
href="https://tsdown.dev"><code>tsdown</code></a> (rolldown + oxc). One
config produces ESM, CJS, and the IIFE browser bundles. Drops
<code>@babel/cli</code>, <code>@babel/core</code>,
<code>@babel/preset-env</code>,
<code>babel-plugin-add-module-exports</code>, <code>browserify</code>,
<code>uglify-js</code>, the <code>fixcjs</code> rewrite hack, and the
<code>--ignore cross-fetch</code> browserify flag. Side benefit:
minified browser bundle shrinks from ~13 KB to ~6.8 KB (oxc minifier +
no babel runtime helpers).</li>
<li>build: ESM and CJS outputs are now bundled into a single
<code>index.js</code> per format (previously one file per
<code>lib/*.js</code> module). The package's <code>exports</code> map is
unchanged, so this is invisible to consumers using documented entry
points.</li>
<li>lint: replaced <code>eslint-config-standard</code> (+ five plugins)
with <a
href="https://github.com/neostandard/neostandard"><code>neostandard</code></a>
and migrated to ESLint 9 flat config (<code>eslint.config.mjs</code>).
Removed deprecated <code>tslint</code> and <code>dtslint</code> —
<code>test:typescript</code> now runs <code>tsc --noEmit</code> plus
<code>tsd</code>.</li>
<li>chore: tightened <code>.npmignore</code> — published tarball no
longer includes the source <code>lib/</code>, the build configs
(<code>tsdown.config.ts</code>, <code>eslint.config.mjs</code>,
<code>tsconfig.json</code>), or the root <code>index.js</code> re-export
shim. Drops from 21.3 KB → ~17 KB packed.</li>
<li>docs: <code>alternateFetch</code> is now documented in the README
options block as the supported escape hatch for fetch ponyfills, test
mocking, and request interception. v4 migration note added to
&quot;Getting started&quot;.</li>
</ul>
<h3>3.0.6</h3>
<ul>
<li>fix: allow forward slashes in <code>ns</code> values so nested
namespace names (mapping to URL layouts such as
<code>/locales/en/a/b.json</code>) fetch correctly again. 3.0.5's
security fix applied the same strict URL-segment check to both
<code>lng</code> and <code>ns</code>, which was correct for
<code>lng</code> (no BCP-47 shape contains <code>/</code>) but
over-strict for <code>ns</code> — nested namespaces containing
<code>/</code> were never officially supported, but the behaviour fell
out of the implicit string-substitution semantics of
<code>loadPath</code> and is common enough in the wild to be worth
accommodating. <code>isSafeUrlSegment</code> is now split into
<code>isSafeLangUrlSegment</code> (strict — still rejects
<code>/</code>) and <code>isSafeNsUrlSegment</code> (loose — allows
<code>/</code> but still rejects <code>..</code>, <code>\</code>,
URL-structure characters, control chars, prototype keys, and oversized
inputs). <code>isSafeUrlSegment</code> is kept as a backwards-compatible
alias for the strict check. The 3.0.5 security fix remains in force for
every concrete attack pattern from the original advisory.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/a4d4a83c53f024cdea912e157e5fb1ef5c6adf3b"><code>a4d4a83</code></a>
4.0.0</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/fdf4f986e146059152537f169f434cb28e160e8c"><code>fdf4f98</code></a>
feat!: v4 — drop cross-fetch, switch build to tsdown, lint to
neostandard</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/d8dafd88aedf732b81aacb0e40012d2f86cf6d90"><code>d8dafd8</code></a>
docs: clarify that nested-ns with slashes was never officially
supported</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/e534a6267ea231408d3dff0045b1aa55b9682206"><code>e534a62</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/ddf104807729437c11c0cc25a059b0aac1a1dab6"><code>ddf1048</code></a>
3.0.6</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/d73cfdc23d397a7d978e03bf6541852da08ae1e2"><code>d73cfdc</code></a>
fix: allow forward slashes in ns values</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/9abbdee14e28f2a055251a51e7f238bb2bd1e696"><code>9abbdee</code></a>
Bump i18next-http-backend from 1.4.0 to 3.0.5 in /example/i18next-vue
(<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/184">#184</a>)</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/b4ca8bb3d207d53f8f35100126a4a8f686a0ab8e"><code>b4ca8bb</code></a>
Bump i18next-http-backend from 3.0.1 to 3.0.5 in /example/fallback (<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/183">#183</a>)</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/dffddd494145419f00901aed4ad67b34eb13fbda"><code>dffddd4</code></a>
Bump i18next-http-backend from 3.0.2 to 3.0.5 in /example/next (<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/182">#182</a>)</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/fd29b400e3ead7ccd1caebc55027aeb4f4c43c1f"><code>fd29b40</code></a>
Bump i18next-http-backend from 1.3.2 to 3.0.5 in /example/vue (<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/181">#181</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next-http-backend/compare/v3.0.5...v4.0.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:17:59 +00:00
dependabot[bot] 170f16dddd Bump the npm_and_yarn group across 2 directories with 1 update (#1752) 
Bumps the npm_and_yarn group with 1 update in the /docs directory:
[postcss](https://github.com/postcss/postcss).
Bumps the npm_and_yarn group with 1 update in the /frontend directory:
[postcss](https://github.com/postcss/postcss).

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Updates `postcss` from 8.5.18 to 8.5.23
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker"><code>@​isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eb9e1fe793740bb3280bdf5bf98147f857f011bd"><code>eb9e1fe</code></a>
Release 8.5.23 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d19c78ac91108b3f7d7130e55c6fa806c0efb84"><code>9d19c78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"><code>7beca13</code></a>
Does no load source map file without opts.from</li>
<li><a
href="https://github.com/postcss/postcss/commit/decea51421682341401575b3740709fda0e12930"><code>decea51</code></a>
Typo</li>
<li><a
href="https://github.com/postcss/postcss/commit/c18e30d126395d42a0726aa00e03a8f1088985ae"><code>c18e30d</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/98a39ad73d163a90be924d5126c771262110f1fc"><code>98a39ad</code></a>
Update EM banner</li>
<li><a
href="https://github.com/postcss/postcss/commit/a3e48c492ddec0e4879d513b8b995fee887af352"><code>a3e48c4</code></a>
Release 8.5.22 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f49d6911795f53b2cfe023bb686bf1144ec30618"><code>f49d691</code></a>
Fix custom property losing its semicolon before a comment (<a
href="https://redirect.github.com/postcss/postcss/issues/2117">#2117</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/28e0daf8f2fe5ba9e19ea3f8c27c8fe176f9419e"><code>28e0daf</code></a>
Release 8.5.21 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/3d2b4e43e38274f233b5609d09687cadad8215d9"><code>3d2b4e4</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.18...8.5.23">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:14:16 +00:00
dependabot[bot] 1329ef4aa1 Bump nuqs from 2.8.9 to 2.9.0 in /frontend (#1779) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [nuqs](https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs) from
2.8.9 to 2.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/47ng/nuqs/releases">nuqs's
releases</a>.</em></p>
<blockquote>
<h2>v2.9.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437">#1437</a>
- add support for react-router v8, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451">#1451</a>
- add history to adapters <!-- raw HTML omitted -->defaultOptions<!--
raw HTML omitted -->, by <a
href="https://github.com/manojVivek"><code>@​manojVivek</code></a></li>
</ul>
<h2>Bug fixes</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318">#1318</a>
- cross-page transitions in TanStack Router, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1433">#1433</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1334">#1334</a>
- stale URL value when revisiting a page under Next.js cacheComponents,
by <a href="https://github.com/franky47"><code>@​franky47</code></a>
(closes <a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1273">#1273</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1366">#1366</a>
- prevent infinite re-renders with TSR viewport preloading, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1363">#1363</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1368">#1368</a>
- wrong transient state in next/app when updating in useEffect, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1365">#1365</a>,
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1428">#1428</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445">#1445</a>
- stale value under Activity, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1444">#1444</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450">#1450</a>
- stale search params leaking across React Router navigation, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1358">#1358</a>)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1222">#1222</a>
- add registry metadata, by <a
href="https://github.com/taro-yanagiya"><code>@​taro-yanagiya</code></a>
(closes <a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1221">#1221</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1256">#1256</a>
- add changelog page, by <a
href="https://github.com/rajanarahul93"><code>@​rajanarahul93</code></a>
(closes <a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1251">#1251</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1351">#1351</a>
- strip Fumadocs inline code syntax highlighting hints from LLM
markdown, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1353">#1353</a>
- update recharts &amp; replace partialLine implementation, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1356">#1356</a>
- add Sentry and Syntax.fm as sponsors 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1357">#1357</a>
- add 1771 Technologies as a sponsor 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1362">#1362</a>
- update images alt attributes, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1364">#1364</a>
- extrapolate missing NPM stats data, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1376">#1376</a>
- add attribution footer in LLM docs, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1383">#1383</a>
- add 1771 Technologies as sidebar sponsor, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1400">#1400</a>
- add redirect from /changelog to /docs/changelog, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1406">#1406</a>
- add brand assets context menu, by <a
href="https://github.com/TheOrcDev"><code>@​TheOrcDev</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1409">#1409</a>
- add TradingGoose as a sponsor 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1414">#1414</a>
- add Upstash as a sponsor 💖, by <a
href="https://github.com/mezotv"><code>@​mezotv</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1415">#1415</a>
- add CodeRabbit as a sponsor 💖, by <a
href="https://github.com/mezotv"><code>@​mezotv</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1416">#1416</a>
- use <a href="http://www.usenotra.com">www.usenotra.com</a> for Notra
sponsor link, by <a
href="https://github.com/mezotv"><code>@​mezotv</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1418">#1418</a>
- tighter sponsors grid, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1432">#1432</a>
- changelog reads DTO from releases, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1438">#1438</a>
- add Deno &amp; other package managers to install instructions, by <a
href="https://github.com/bartlomieju"><code>@​bartlomieju</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1441">#1441</a>
- theme-aware shieldcn badges + wordmark header, by <a
href="https://github.com/jal-co"><code>@​jal-co</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1447">#1447</a>
- trim down llm content, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1456">#1456</a>
- add Loops as a sponsor 💖, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1457">#1457</a>
- strip unreleased headings from the production ToC, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1461">#1461</a>
- fix shallow updates &quot;Invalid URL&quot; crash, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1460">#1460</a>)</li>
<li>9cb051fc - reorder &amp; tweak readme badges, by François Best</li>
<li>e9cd8f7c - fix contributors link in README, by François Best</li>
<li>f48b3908 - fix wordmark on npmx.dev &amp; npmjs.com, by François
Best</li>
<li>6722fe05 - fix react router logos in README, by François Best</li>
</ul>
<h2>Other changes</h2>
<ul>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1154">#1154</a>
- add Knip for upkeeping, by <a
href="https://github.com/franky47"><code>@​franky47</code></a></li>
<li><a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176">#1176</a>
- split debug logs to reduce bundle size, by <a
href="https://github.com/franky47"><code>@​franky47</code></a> (closes
<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1149">#1149</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/47ng/nuqs/commit/692687ba358e56fb78b887448392a54a22397559"><code>692687b</code></a>
fix: stale search params leaking across React Router navigation (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1450">#1450</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/8b2dee5eab9a53aab772fe4ba9bf9c965b3d2897"><code>8b2dee5</code></a>
feat: add history to adapter's <code>defaultOptions</code> (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1451">#1451</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/95dcb8309dd4e78c1e0d4c66bbd91f12754ec3ee"><code>95dcb83</code></a>
fix: stale URL value when revisiting a page under Next.js
cacheComponents (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1">#1</a>...</li>
<li><a
href="https://github.com/47ng/nuqs/commit/af8ce38a2546ede9f421edaf9d9c94caea86bf1a"><code>af8ce38</code></a>
ref: scope nullable useSearchParams defence to Next.js specific adapter
(<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1446">#1446</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/06be94ff1d2fa8dd5474570d30244350026c3f70"><code>06be94f</code></a>
ref: split debug logs to reduce bundle size (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1176">#1176</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/2d5fa8eed3b0911902e64c5b8034520fcaad2940"><code>2d5fa8e</code></a>
fix: stale value under Activity (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1445">#1445</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/84ee2dfe11be1dbaa76b34519b4e2683da51d00c"><code>84ee2df</code></a>
feat: add support for react-router v8 (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1437">#1437</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/54cbbd882cd0b125a98692b14ea0e501da243469"><code>54cbbd8</code></a>
fix: cross-page transitions in TanStack Router (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1318">#1318</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/f57551f31fc6b00350a83eab7f6856850f51f849"><code>f57551f</code></a>
chore: pnpm dedupe (<a
href="https://github.com/47ng/nuqs/tree/HEAD/packages/nuqs/issues/1436">#1436</a>)</li>
<li><a
href="https://github.com/47ng/nuqs/commit/281a0f04fa0e5490ae2eae5b328cc6585613ba25"><code>281a0f0</code></a>
chore(ci): keep npm --json stdout clean and harden stage-id parsing</li>
<li>Additional commits viewable in <a
href="https://github.com/47ng/nuqs/commits/v2.9.0/packages/nuqs">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nuqs&package-manager=npm_and_yarn&previous-version=2.8.9&new-version=2.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:13:06 +00:00
dependabot[bot] ef6e0e9f37 Bump npm-check-updates from 20.0.0 to 22.2.9 in /frontend (#1778) 
Bumps
[npm-check-updates](https://github.com/raineorshine/npm-check-updates)
from 20.0.0 to 22.2.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/releases">npm-check-updates's
releases</a>.</em></p>
<blockquote>
<h2>v22.2.9</h2>
<h2>What's Changed</h2>
<ul>
<li>Dockerfile: use lts-alpine image by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1862">raineorshine/npm-check-updates#1862</a></li>
<li>Rename variable and test file by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1884">raineorshine/npm-check-updates#1884</a></li>
<li>eslint.config.js: drop moot jest globals by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1887">raineorshine/npm-check-updates#1887</a></li>
<li>replace zod with valibot to reduce bundle size by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1885">raineorshine/npm-check-updates#1885</a></li>
<li>CI: add prettier in lint workflow by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1889">raineorshine/npm-check-updates#1889</a></li>
<li>Use async glob instead of glob.sync in getAllPackages by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1891">raineorshine/npm-check-updates#1891</a></li>
<li>Minor type tweaks by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1892">raineorshine/npm-check-updates#1892</a></li>
<li>Switch mocha tests to parallel by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1886">raineorshine/npm-check-updates#1886</a></li>
<li>Replace markdownlint-cli with markdownlint-cli2 by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1893">raineorshine/npm-check-updates#1893</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/raineorshine/npm-check-updates/compare/v22.2.8...v22.2.9">https://github.com/raineorshine/npm-check-updates/compare/v22.2.8...v22.2.9</a></p>
<h2>v22.2.8</h2>
<h2>What's Changed</h2>
<ul>
<li>CI: remove concurrency by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1846">raineorshine/npm-check-updates#1846</a></li>
<li>build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the
github-actions group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1872">raineorshine/npm-check-updates#1872</a></li>
<li>Downgrade ts-json-schema-generator to v2.4.0 for Node.js 20 support
by <a href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1848">raineorshine/npm-check-updates#1848</a></li>
<li>prepare: add exit 0 as an extra guard by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1850">raineorshine/npm-check-updates#1850</a></li>
<li>ESLint: bump to es2023 globals by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1854">raineorshine/npm-check-updates#1854</a></li>
<li>package.json: remove redundant tests from files by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1855">raineorshine/npm-check-updates#1855</a></li>
<li>tsconfig: enable verbatimModuleSyntax by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1860">raineorshine/npm-check-updates#1860</a></li>
<li>Remove the unused libnpmconfig.d.ts by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1857">raineorshine/npm-check-updates#1857</a></li>
<li>Clean up <code>run()</code> return type JSDoc by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1868">raineorshine/npm-check-updates#1868</a></li>
<li>cache test: remove any previous stale cache file to prevent failures
by <a href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1865">raineorshine/npm-check-updates#1865</a></li>
<li>package.json: remove duplicate typecheck script by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1856">raineorshine/npm-check-updates#1856</a></li>
<li>Doctor tests cleanup by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1869">raineorshine/npm-check-updates#1869</a></li>
<li>fix: skip cache write when cooldown is active by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1871">raineorshine/npm-check-updates#1871</a></li>
<li>Fix stale <a
href="https://github.com/param"><code>@​param</code></a> names in JSDoc
by <a href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1874">raineorshine/npm-check-updates#1874</a></li>
<li>Simplify tsconfig.json by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1858">raineorshine/npm-check-updates#1858</a></li>
<li>Add a .npmrc file enabling engine-strict by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1847">raineorshine/npm-check-updates#1847</a></li>
<li>Enforce node: protocol and dedupe imports by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1842">raineorshine/npm-check-updates#1842</a></li>
<li>Fix verbose log printing local yarn config under &quot;user yarn
config&quot; header by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1875">raineorshine/npm-check-updates#1875</a></li>
<li>lint: add --continue-on-error by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1859">raineorshine/npm-check-updates#1859</a></li>
<li>test: cover <code>$</code> override references by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1877">raineorshine/npm-check-updates#1877</a></li>
<li>CI updates by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1870">raineorshine/npm-check-updates#1870</a></li>
<li>More shell tweaks by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1853">raineorshine/npm-check-updates#1853</a></li>
<li>Update interactive hint for q button by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1879">raineorshine/npm-check-updates#1879</a></li>
<li>Vite config cleanup by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1861">raineorshine/npm-check-updates#1861</a></li>
<li>package.json: remove unneeded overrides by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1849">raineorshine/npm-check-updates#1849</a></li>
<li>build: stub unused iconv-lite out of the bundle by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1881">raineorshine/npm-check-updates#1881</a></li>
<li>package.json: specify allowScripts by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1878">raineorshine/npm-check-updates#1878</a></li>
<li>build(deps): bump softprops/action-gh-release by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1880">raineorshine/npm-check-updates#1880</a></li>
<li>refactor prettifyCooldown and share the cooldown regex by <a
href="https://github.com/XhmikosR"><code>@​XhmikosR</code></a> in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1883">raineorshine/npm-check-updates#1883</a></li>
<li>build(deps-dev): bump the development-dependencies group across 1
directory with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1876">raineorshine/npm-check-updates#1876</a></li>
<li>fix(cooldown): scope auto-cooldown config to active package manager
only by <a
href="https://github.com/raineorshine"><code>@​raineorshine</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1882">raineorshine/npm-check-updates#1882</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md">npm-check-updates's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p><strong>This file is no longer maintained.</strong> Release notes are
published on the <a
href="https://github.com/raineorshine/npm-check-updates/releases">GitHub
releases page</a>.</p>
<hr />
<h2>[22.0.0] - 2026-04-25</h2>
<h2>Breaking Changes</h2>
<p><code>--cooldown</code> now falls back to the greatest non-prerelease
version rather than skipping the upgrade entirely when the latest
version falls within the cooldown window.</p>
<ul>
<li>This <em>only</em> affects <code>--cooldown</code> (or inferred
cooldown from
<code>min-release-age</code>/<code>minimumReleaseAge</code>/<code>npmMinimalAgeGate</code>).</li>
<li>This <em>only</em> affects <code>--target latest</code> (which is
the default).</li>
</ul>
<h3>⚠️ WARNING</h3>
<p>In rare circumstances, it is now possible for <code>ncu --cooldown
10</code> to install a version <strong>that was never published to
latest</strong>. This is because the npm registry does not store a
history of versions published to the <code>latest</code> dist-tag. It is
<em>impossible</em> to fall back to an earlier <code>latest</code>
version, because there is no record of it. However, we do have a list of
all published versions, and it's <em>likely</em> that a boring version
like <code>1.0.1</code> was published to <code>latest</code> at some
point. Versions like <code>1.0.1-pre.0</code>, <code>1.0.1-beta</code>,
<code>1.0.1-build.58157394</code>, etc will be ignored, as you would
expect.</p>
<p>While npm-check-updates typically takes a conservative approach to
version upgrades, following semver exactly and only upgrading to the
<code>latest</code> version, falling back to the highest version outside
the cooldown window is clearly the more intuitive behavior, and this
outweighs the few cases where the results would be undesirable. The
discussion in <a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1556">#1556</a>
and the large amount of confusion since the initial release of
<code>--cooldown</code> attest to this.</p>
<h3>How to opt out of the new behavior</h3>
<p>You can opt out of the new behavior by using <code>--target
&quot;@latest&quot;</code>. This forces a strict upgrade (or downgrade)
to the <code>latest</code> tag only, without any fallback behavior.</p>
<p>For granular control, use a custom ncurc function to set the <a
href="https://github.com/raineorshine/npm-check-updates#target">target</a>
or disable <a
href="https://github.com/raineorshine/npm-check-updates#cooldown">cooldown</a>
for a single package.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/raineorshine/npm-check-updates/compare/v21.0.3...v22.0.0">https://github.com/raineorshine/npm-check-updates/compare/v21.0.3...v22.0.0</a></p>
<h2>[21.0.0] - 2026-04-14</h2>
<h3>⚠️ Breaking Changes</h3>
<p>This is a <strong>major breaking change</strong> with significant
architectural updates.</p>
<h4>ESM Migration &amp; Module System</h4>
<ul>
<li><strong>Pure ESM:</strong> Converted to pure ESM with dual-build
support (ESM/CJS) via Vite 8.</li>
<li><strong>Import Syntax:</strong> Programmatic usage now requires
named imports or namespace imports.
<ul>
<li><strong>Old:</strong> <code>import ncu from
'npm-check-updates'</code></li>
<li><strong>New:</strong> <code>import * as ncu from
'npm-check-updates'</code> or <code>import { run } from
'npm-check-updates'</code></li>
</ul>
</li>
<li><strong>Node.js Requirements:</strong> Now requires <code>^20.19.0
|| ^22.12.0 || &gt;=24.0.0</code>. This is required for native
<code>require(esm)</code> support and the Rolldown engine.</li>
<li><strong>npm Requirements:</strong> Minimum version increased to
<code>&gt;=10.0.0</code>.</li>
</ul>
<h4>Configuration Files (<code>.ncurc.js</code>)</h4>
<ul>
<li>Files named <code>.ncurc.js</code> that use
<code>module.exports</code> will now fail in projects that are
<code>&quot;type&quot;: &quot;module&quot;</code>.</li>
<li><strong>Fix:</strong> Rename these files to <code>.ncurc.cjs</code>
or convert them to use <code>export default</code>.</li>
</ul>
<h4>Dependency Updates (Pure ESM versions)</h4>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/5ad831bd29963c3d7d4435603f043ec0fd2cc38c"><code>5ad831b</code></a>
22.2.9</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/2653ab6e94fc425b3a9d872a5efbd64fe091bfa8"><code>2653ab6</code></a>
Replace markdownlint-cli with markdownlint-cli2 (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1893">#1893</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/75a6a92549b9da24560f8658a5bce14ebd23df0b"><code>75a6a92</code></a>
Switch mocha tests to parallel (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1886">#1886</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/bf7285b72d2ae26ae54a87b4b486623b1ccbe5bb"><code>bf7285b</code></a>
Minor type tweaks (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1892">#1892</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/3231f230e540b4581bae161ea1aa896380cccfe5"><code>3231f23</code></a>
Use async glob instead of glob.sync in getAllPackages (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1891">#1891</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/8a37479348bb035758905a39acffb28d893649c4"><code>8a37479</code></a>
CI: add prettier in lint workflow (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1889">#1889</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/0409e7739b6c355953468cea649365468b64207f"><code>0409e77</code></a>
replace zod with valibot to reduce bundle size (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1885">#1885</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/02b4218b926d2fd433f98d23de4c66df989599f6"><code>02b4218</code></a>
eslint.config.js: drop moot jest globals (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1887">#1887</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/c4435d0800386ad3eae29f3416074ef2c35123ad"><code>c4435d0</code></a>
Rename variable and test file (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1884">#1884</a>)</li>
<li><a
href="https://github.com/raineorshine/npm-check-updates/commit/e849b1d75948aba5f5e7f2f0c56dc96030b61608"><code>e849b1d</code></a>
Dockerfile: use lts-alpine image (<a
href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1862">#1862</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/raineorshine/npm-check-updates/compare/v20.0.0...v22.2.9">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=npm-check-updates&package-manager=npm_and_yarn&previous-version=20.0.0&new-version=22.2.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:12:29 +00:00
dependabot[bot] 15700b46c0 Bump @hey-api/openapi-ts from 0.97.3 to 0.99.0 in /frontend (#1775) 
Bumps
[@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts)
from 0.97.3 to 0.99.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md">@​hey-api/openapi-ts's
changelog</a>.</em></p>
<blockquote>
<h2>0.99.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><strong>BREAKING</strong> <strong>plugin</strong>: rename
<code>.symbols</code> to <code>.imports</code> (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4052">#4052</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/57fac5ef22bca2b4ac47c8df136270f967f85ed1"><code>57fac5e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<p>To better represent its functionality, the
<code>plugin.symbols</code> property has been renamed to
<code>plugin.imports</code>.</p>
<ul>
<li><strong>BREAKING</strong> <strong>config</strong>: merge duplicate
plugin configurations (<a
href="https://github.com/hey-api/hey-api/commit/089ed2ed065ff92accb7d98cdeb95c66cf88f2f6"><code>089ed2e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Plugin duplicates behavior</h3>
<p>If you specified the same plugin multiple times, only the last
instance would be used. We eventually added a warning for this behavior,
but that didn't treat the root issue. This release changes that by
merging duplicate plugin configurations.</p>
<ul>
<li>
<p><strong>BREAKING</strong>
<strong>plugin(<code>@​hey-api/schemas</code>)</strong>: widen
<code>schema</code> type in <code>nameBuilder</code> to unknown (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4076">#4076</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/98ce35e3b51bd4d4fd58ebe9b81b6632ca654416"><code>98ce35e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>BREAKING</strong> <strong>plugin</strong>: remove
<code>.external()</code> method (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4052">#4052</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/57fac5ef22bca2b4ac47c8df136270f967f85ed1"><code>57fac5e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
</ul>
<h3>Removed <code>plugin.external()</code> function</h3>
<p>This function was used to reference external symbols. All plugins now
use the Imports API, which allows you to reference external symbols in a
type-safe way through <code>plugin.imports</code>.</p>
<h3>Patch Changes</h3>
<ul>
<li>
<p><strong>api</strong>: replace <code>~</code> fields with
<code>$</code> (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4086">#4086</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/d5ca286729e8b881387d5a7ac9234512af58dcd4"><code>d5ca286</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>config</strong>: add Presets API (<a
href="https://github.com/hey-api/hey-api/commit/3b4ee7a5d3fd454aa8416ad1ed4a565119632be1"><code>3b4ee7a</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-angular</code>)</strong>: fix:
send an empty object request body when explicitly provided in flat
parameters mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/ab522ef77953ccb2c55cbdcc369a27eed90de3d3"><code>ab522ef</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
<li>
<p><strong>client</strong>: use <code>getBaseUrl()</code> function to
determine default value (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3772">#3772</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/4026955318aed9282b46464b15a75ab1cdc7243a"><code>4026955</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(zod)</strong>: improve discriminator handling (<a
href="https://github.com/hey-api/hey-api/commit/680b94766855232fdfe8cf34029224c3900821f8"><code>680b947</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/preact-query</code>)</strong>: fix:
strip <code>initialData</code> from the inferred result types for
infinite query options (<a
href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/solid-query</code>)</strong>: fix:
strip <code>initialData</code> from the inferred result types for
infinite query options (<a
href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(valibot)</strong>: support custom regular expression
error messages with <code>x-pattern-message</code> (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4117">#4117</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/3ed3afbe785d9a79f9eec02ab6240d2041d4f49a"><code>3ed3afb</code></a>)
by <a
href="https://github.com/apps/pullfrog"><code>@​pullfrog</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-next</code>)</strong>: fix:
send an empty object request body when explicitly provided in flat
parameters mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-axios</code>)</strong>: fix:
send an empty object request body when explicitly provided in flat
parameters mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
<li>
<p><strong>plugin(zod)</strong>: support creating optional request
schemas (<a
href="https://github.com/hey-api/hey-api/commit/11315c763a6a8ba9f7b2396466bfaf5a9e257fee"><code>11315c7</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/react-query</code>)</strong>: fix:
strip <code>initialData</code> from the inferred result types for
infinite query options (<a
href="https://github.com/hey-api/hey-api/commit/7a4b0cf9687adc6ad80531b4eadf90825d4366e7"><code>7a4b0cf</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-ky</code>)</strong>: fix: send
an empty object request body when explicitly provided in flat parameters
mode (<a
href="https://redirect.github.com/hey-api/hey-api/pull/4070">#4070</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/f6d45122223ac91996907a0e7e188712bfea741c"><code>f6d4512</code></a>)
by <a
href="https://github.com/matthewjamesadam"><code>@​matthewjamesadam</code></a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hey-api/hey-api/commit/8f3eb72dd7dc52908a81cefc841d9d6f7416bbdf"><code>8f3eb72</code></a>
ci: release</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/3ed3afbe785d9a79f9eec02ab6240d2041d4f49a"><code>3ed3afb</code></a>
docs: add changesets</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/66bc2b759d4ad7ddde61b39b956675eac63e0b1e"><code>66bc2b7</code></a>
feat: support x-pattern-message extension in Zod and Valibot validator
plugins</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/7b83c97e0eb7305b4a9eb54c81ae76ea9bb91e34"><code>7b83c97</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/020df93fb0d756bcbe93e246a82b566da0fcf6b8"><code>020df93</code></a>
feat(faker): first implementation</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/a3338ac5df8cbb14d78eaab8e5fbabc0bd25a253"><code>a3338ac</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/307e020bbb851bc3ab10aae08319e2b9676c0405"><code>307e020</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/835c2304843be396e1e799b260868af56239d5ba"><code>835c230</code></a>
chore: more cleanup</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/1490b058b59a244d908b6e1fe8680bf82e21cd94"><code>1490b05</code></a>
test: update snapshots</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/9e6bddeb71990cd5f6c8e0ef9ee872cbf2f42c14"><code>9e6bdde</code></a>
chore: clean up</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.99.0/packages/openapi-ts">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hey-api/openapi-ts&package-manager=npm_and_yarn&previous-version=0.97.3&new-version=0.99.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-11 04:11:37 +00:00
dependabot[bot] e35a1cb37c Bump @tabler/icons-react from 3.41.0 to 3.44.0 in /frontend (#1771) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.41.0 to 3.44.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases">@​tabler/icons-react's
releases</a>.</em></p>
<blockquote>
<h2>Release 3.44.0</h2>
<!-- raw HTML omitted -->
<h3>18 new icons:</h3>
<ul>
<li><code>outline/code-ai</code></li>
<li><code>outline/email-stamp</code></li>
<li><code>outline/foodsteps</code></li>
<li><code>outline/git-pull-request-conflict</code></li>
<li><code>outline/noise-reduction</code></li>
<li><code>outline/photo-alt</code></li>
<li><code>outline/pointer-2</code></li>
<li><code>outline/pointer-collaboration-2</code></li>
<li><code>outline/pointer-collaboration</code></li>
<li><code>outline/roulette</code></li>
<li><code>outline/scan-cube</code></li>
<li><code>outline/sketching</code></li>
<li><code>outline/sparkle-2</code></li>
<li><code>outline/sparkle-highlight</code></li>
<li><code>outline/sparkle</code></li>
<li><code>outline/sphere-2</code></li>
<li><code>outline/text-scan-ai</code></li>
<li><code>outline/vignette</code></li>
</ul>
<p>Fixed icons: <code>outline/air-balloon</code>,
<code>outline/body-scan</code>, <code>outline/chart-sankey</code>,
<code>outline/ear-scan</code>, <code>outline/grid-scan</code>,
<code>outline/line-scan</code>, <code>outline/object-scan</code>,
<code>outline/photo-scan</code>, <code>outline/route-scan</code>,
<code>outline/scan-eye</code>, <code>outline/scan-letter-a</code>,
<code>outline/scan-letter-t</code>, <code>outline/scan-position</code>,
<code>outline/scan-traces</code>, <code>outline/scan</code>,
<code>outline/text-scan-2</code>, <code>outline/user-scan</code>,
<code>outline/zoom-scan</code></p>
<h2>Release 3.43.0</h2>
<!-- raw HTML omitted -->
<h3>18 new icons:</h3>
<ul>
<li><code>outline/acorn</code></li>
<li><code>outline/acrobatic</code></li>
<li><code>outline/banana</code></li>
<li><code>outline/brand-audible</code></li>
<li><code>outline/building-eiffel-tower</code></li>
<li><code>outline/car-door</code></li>
<li><code>outline/car-lifter</code></li>
<li><code>outline/chocolate</code></li>
<li><code>outline/dumbbell</code></li>
<li><code>outline/exercise-ball</code></li>
<li><code>outline/flood</code></li>
<li><code>outline/hula-hoop</code></li>
<li><code>outline/leaf-maple</code></li>
<li><code>outline/notdef</code></li>
<li><code>outline/rugby</code></li>
<li><code>outline/taiwan-dollar</code></li>
<li><code>outline/target-2</code></li>
<li><code>outline/unicycle</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/6d128ed935d4546607b1e4d5d08c8b27bdbe7758"><code>6d128ed</code></a>
Release 3.44.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/e40738b64486f857128ae58335354681e4e9dc9b"><code>e40738b</code></a>
Release 3.43.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/076f4a9e4d705d6f2cb6fc7f1417501117de12e8"><code>076f4a9</code></a>
Release 3.42.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/9b27b65e3d2e72ff4fd219b2dc21da81ea9cbab8"><code>9b27b65</code></a>
Release 3.41.1</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/ebad60b50af5ba521245ab982a3fe69df0e5efd9"><code>ebad60b</code></a>
Update homepage links in documentation and package files to point to the
new ...</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/8ed617b1b7153d1d35910cda09861077a6f649b9"><code>8ed617b</code></a>
Update README files to wrap images in anchor tags linking to the Tabler
Icons...</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/ef6e875bbef5252b3627fd1281421b10ddd04a16"><code>ef6e875</code></a>
Update dependencies in pnpm-lock.yaml and package.json files (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1497">#1497</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.44.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.41.0&new-version=3.44.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-04 04:14:45 +00:00
dependabot[bot] 87e8f01f2b Bump react-icons from 5.6.0 to 5.7.0 in /frontend (#1770) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [react-icons](https://github.com/react-icons/react-icons) from
5.6.0 to 5.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react-icons/react-icons/releases">react-icons's
releases</a>.</em></p>
<blockquote>
<h2>v5.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>update packages by <a
href="https://github.com/kamijin-fanta"><code>@​kamijin-fanta</code></a>
in <a
href="https://redirect.github.com/react-icons/react-icons/pull/1153">react-icons/react-icons#1153</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0">https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0</a></p>
<table>
<thead>
<tr>
<th>Icon Library</th>
<th>License</th>
<th>Version</th>
<th align="right">Count</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https://circumicons.com/">Circum Icons</a></td>
<td><a
href="https://github.com/Klarr-Agency/Circum-Icons/blob/main/LICENSE">MPL-2.0
license</a></td>
<td>1.0.0</td>
<td align="right">288</td>
</tr>
<tr>
<td><a href="https://fontawesome.com/">Font Awesome 5</a></td>
<td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0
License</a></td>
<td>5.15.4-3-gafecf2a</td>
<td align="right">1612</td>
</tr>
<tr>
<td><a href="https://fontawesome.com/">Font Awesome 6</a></td>
<td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0
License</a></td>
<td>6.7.2-1-g840c215</td>
<td align="right">2060</td>
</tr>
<tr>
<td><a href="https://ionicons.com/">Ionicons 4</a></td>
<td><a
href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td>
<td>4.6.3</td>
<td align="right">696</td>
</tr>
<tr>
<td><a href="https://ionicons.com/">Ionicons 5</a></td>
<td><a
href="https://github.com/ionic-team/ionicons/blob/master/LICENSE">MIT</a></td>
<td>5.5.4</td>
<td align="right">1332</td>
</tr>
<tr>
<td><a href="http://google.github.io/material-design-icons/">Material
Design icons</a></td>
<td><a
href="https://github.com/google/material-design-icons/blob/master/LICENSE">Apache
License Version 2.0</a></td>
<td>4.0.0-161-gf3fb4442b2</td>
<td align="right">4341</td>
</tr>
<tr>
<td><a href="http://s-ings.com/typicons/">Typicons</a></td>
<td><a href="https://creativecommons.org/licenses/by-sa/3.0/">CC BY-SA
3.0</a></td>
<td>2.1.2</td>
<td align="right">336</td>
</tr>
<tr>
<td><a href="https://octicons.github.com/">Github Octicons
icons</a></td>
<td><a
href="https://github.com/primer/octicons/blob/master/LICENSE">MIT</a></td>
<td>18.3.0</td>
<td align="right">264</td>
</tr>
<tr>
<td><a href="https://feathericons.com/">Feather</a></td>
<td><a
href="https://github.com/feathericons/feather/blob/master/LICENSE">MIT</a></td>
<td>4.29.2</td>
<td align="right">287</td>
</tr>
<tr>
<td><a href="https://lucide.dev/">Lucide</a></td>
<td><a
href="https://github.com/lucide-icons/lucide/blob/main/LICENSE">ISC</a></td>
<td>0.462.0</td>
<td align="right">1541</td>
</tr>
<tr>
<td><a href="https://game-icons.net/">Game Icons</a></td>
<td><a href="https://creativecommons.org/licenses/by/3.0/">CC BY
3.0</a></td>
<td>12920d6565588f0512542a3cb0cdfd36a497f910</td>
<td align="right">4040</td>
</tr>
<tr>
<td><a href="https://erikflowers.github.io/weather-icons/">Weather
Icons</a></td>
<td><a href="http://scripts.sil.org/OFL">SIL OFL 1.1</a></td>
<td>2.0.12</td>
<td align="right">219</td>
</tr>
<tr>
<td><a href="https://vorillaz.github.io/devicons/">Devicons</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>1.8.0</td>
<td align="right">192</td>
</tr>
<tr>
<td><a href="https://github.com/ant-design/ant-design-icons">Ant Design
Icons</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>4.4.2</td>
<td align="right">831</td>
</tr>
<tr>
<td><a href="https://github.com/twbs/icons">Bootstrap Icons</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>1.13.1</td>
<td align="right">2754</td>
</tr>
<tr>
<td><a href="https://github.com/Remix-Design/RemixIcon">Remix
Icon</a></td>
<td><a href="http://www.apache.org/licenses/">Apache License Version
2.0</a></td>
<td>4.9.1</td>
<td align="right">3229</td>
</tr>
<tr>
<td><a href="https://github.com/icons8/flat-color-icons">Flat Color
Icons</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>1.0.2</td>
<td align="right">329</td>
</tr>
<tr>
<td><a
href="https://github.com/grommet/grommet-icons">Grommet-Icons</a></td>
<td><a href="http://www.apache.org/licenses/">Apache License Version
2.0</a></td>
<td>4.14.0</td>
<td align="right">637</td>
</tr>
<tr>
<td><a
href="https://github.com/tailwindlabs/heroicons">Heroicons</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>1.0.6</td>
<td align="right">460</td>
</tr>
<tr>
<td><a href="https://github.com/tailwindlabs/heroicons">Heroicons
2</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>2.2.0</td>
<td align="right">972</td>
</tr>
<tr>
<td><a href="https://simpleicons.org/">Simple Icons</a></td>
<td><a href="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0
Universal</a></td>
<td>16.24.0</td>
<td align="right">3446</td>
</tr>
<tr>
<td><a href="https://thesabbir.github.io/simple-line-icons/">Simple Line
Icons</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>2.5.5</td>
<td align="right">189</td>
</tr>
<tr>
<td><a href="https://github.com/Keyamoon/IcoMoon-Free">IcoMoon
Free</a></td>
<td><a
href="https://github.com/Keyamoon/IcoMoon-Free/blob/master/License.txt">CC
BY 4.0 License</a></td>
<td>d006795ede82361e1bac1ee76f215cf1dc51e4ca</td>
<td align="right">491</td>
</tr>
<tr>
<td><a href="https://github.com/atisawd/boxicons">BoxIcons</a></td>
<td><a
href="https://github.com/atisawd/boxicons/blob/master/LICENSE">MIT</a></td>
<td>2.1.4</td>
<td align="right">1634</td>
</tr>
<tr>
<td><a href="https://github.com/astrit/css.gg">css.gg</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>2.1.4</td>
<td align="right">704</td>
</tr>
<tr>
<td><a href="https://github.com/microsoft/vscode-codicons">VS Code
Icons</a></td>
<td><a href="https://creativecommons.org/licenses/by/4.0/">CC BY
4.0</a></td>
<td>0.0.0</td>
<td align="right">612</td>
</tr>
<tr>
<td><a href="https://github.com/tabler/tabler-icons">Tabler
Icons</a></td>
<td><a href="https://opensource.org/licenses/MIT">MIT</a></td>
<td>3.44.0</td>
<td align="right">6146</td>
</tr>
<tr>
<td><a href="https://github.com/lykmapipo/themify-icons">Themify
Icons</a></td>
<td><a
href="https://github.com/thecreation/standard-icons/blob/master/modules/themify-icons/LICENSE">MIT</a></td>
<td>v0.1.2-2-g9600186</td>
<td align="right">352</td>
</tr>
<tr>
<td><a href="https://icons.radix-ui.com">Radix Icons</a></td>
<td><a
href="https://github.com/radix-ui/icons/blob/master/LICENSE">MIT</a></td>
<td><code>@​radix-ui/react-icons</code><a
href="https://github.com/1"><code>@​1</code></a>.3.2-35-g112af91</td>
<td align="right">332</td>
</tr>
<tr>
<td><a href="https://github.com/phosphor-icons/core">Phosphor
Icons</a></td>
<td><a
href="https://github.com/phosphor-icons/core/blob/main/LICENSE">MIT</a></td>
<td>2.1.1</td>
<td align="right">9072</td>
</tr>
<tr>
<td><a href="https://icons8.com/line-awesome">Icons8 Line
Awesome</a></td>
<td><a
href="https://github.com/icons8/line-awesome/blob/master/LICENSE.md">MIT</a></td>
<td>1.3.1</td>
<td align="right">1544</td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react-icons/react-icons/commit/87470d588c5624bf3e291f17527c3ecd1419c8ae"><code>87470d5</code></a>
v5.7.0</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/e1cb06116df395109208fa4786b5e6ae4cc20187"><code>e1cb061</code></a>
fix ci publish</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/bffaab7c0f90d78b240bd06be1c40953be89a992"><code>bffaab7</code></a>
Revert &quot;v5.7.0&quot;</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/2cde989e0d3637fa39471e3f24df99ffb88cb1d1"><code>2cde989</code></a>
v5.7.0</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/dac95ccf8126f41dc068f17fb09573fd86b6a0e9"><code>dac95cc</code></a>
update npm in ci workflow</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/21fcd0452250a30cde4827b83bff3e086b106369"><code>21fcd04</code></a>
Revert &quot;v5.7.0&quot;</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/3a05518a3b8b1fe147c915aea1ca6db6cd212ae8"><code>3a05518</code></a>
v5.7.0</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/c8b5050f417e08a270fc74393d36a7ea844a1977"><code>c8b5050</code></a>
fix github pages deploy</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/2f78ae43254f217c132078956848f257b72ec6cb"><code>2f78ae4</code></a>
Update CI actions, Pages deploy, and staged npm publishing</li>
<li><a
href="https://github.com/react-icons/react-icons/commit/11f5a06ff937287537590bd165ccbd24e9f800e4"><code>11f5a06</code></a>
update packages (<a
href="https://redirect.github.com/react-icons/react-icons/issues/1153">#1153</a>)</li>
<li>See full diff in <a
href="https://github.com/react-icons/react-icons/compare/v5.6.0...v5.7.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for react-icons since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-icons&package-manager=npm_and_yarn&previous-version=5.6.0&new-version=5.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-04 04:14:14 +00:00
dependabot[bot] 2c28ac3089 Bump i18next from 26.0.3 to 26.3.4 in /frontend (#1769) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.0.3 to
26.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.3.4</h2>
<ul>
<li>fix(security): <code>deepExtend</code> (used by
<code>addResourceBundle(..., deep, overwrite)</code>) no longer recurses
into inherited properties. It checked key existence with the
<code>in</code> operator, which walks the prototype chain, so a source
key matching an inherited built-in (e.g. <code>hasOwnProperty</code>,
<code>toString</code>) caused recursion into the shared
<code>Object.prototype</code> function and, with <code>overwrite:
true</code>, could overwrite e.g.
<code>Object.prototype.hasOwnProperty.call</code> with a non-callable
value — corrupting a shared built-in process-wide (DoS). Existence is
now checked with <code>Object.prototype.hasOwnProperty.call</code>, so
such keys are copied as plain own data instead. This complements the
existing <code>__proto__</code>/<code>constructor</code> guard and is
also strictly more correct for an own-property merge. Only affects
applications that pass attacker-controlled data with <code>deep:
true</code> and <code>overwrite: true</code>; no standard
backend/integration does this. Distinct from CVE-2026-48713 /
CVE-2026-48714 (different packages, <code>setPath</code> mechanism).
Thanks to zx (Jace) for the responsible disclosure.</li>
</ul>
<h2>v26.3.3</h2>
<ul>
<li>fix(types): selector <code>t($ =&gt; $.arr, { returnObjects: true,
context })</code> on a JSON array of <strong>heterogeneous</strong>
objects now preserves each element's full shape (e.g. <code>{ transKey1:
string; transKey2: string }[]</code>) instead of collapsing to a union
of partial element types. Two type-level causes: (1)
<code>FilterKeys</code> evaluated the whole array element type at once,
so <code>keyof (A | B)</code> only saw the keys common to every element
— it now distributes over the object union and filters each element
independently; (2) when TypeScript merges mismatched array element types
it injects phantom optional <code>undefined</code> keys (e.g.
<code>transKey1_withContext?: undefined</code> on elements that don't
define it), which the context-detection helpers mistook for real context
variants — they now skip keys typed as <code>undefined</code>. Also adds
a dedicated <code>context</code> + <code>returnObjects: true</code>
selector overload using <code>const Fn</code> +
<code>ReturnType&lt;Fn&gt;</code>, so <code>Target</code> is no longer
collapsed to <code>unknown</code> via <code>ApplyTarget</code>. Resolves
Problem 1 of <a
href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a>
(Problem 2 was already fixed on master). Thanks <a
href="https://github.com/sauravgupta-dotcom"><code>@​sauravgupta-dotcom</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2438">#2438</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a>.</li>
</ul>
<h2>v26.3.2</h2>
<ul>
<li>fix: chained formatters with a parenthesised option that contains
the format separator (e.g. <code>join(separator: ', ')</code>) now work
at <strong>any</strong> position in the chain, not just first.
Previously the comma-in-parens reassembly only repaired
<code>formats[0]</code>, so <code>{{v, uppercase, join(separator: ',
')}}</code> split the <code>join(...)</code> option on the inner comma
and never rejoined it, producing corrupt output. Replaced the
first-position-only repair with a position-independent pass that
re-joins fragments until each open paren closes. Thanks <a
href="https://github.com/spokodev"><code>@​spokodev</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2437">#2437</a>).</li>
</ul>
<h2>v26.3.1</h2>
<ul>
<li>fix(types): <code>t()</code> with a <code>keyPrefix</code> no longer
pollutes its return type with sibling keys' values. A regression in
26.3.0 — the <code>[Res] extends [never]</code> guards added to
<code>KeysBuilderWithReturnObjects</code> /
<code>KeysBuilderWithoutReturnObjects</code> turned the builders into
deferred conditional types, so <code>KeyPrefix&lt;Ns&gt;</code> stopped
resolving to a literal union and <code>keyPrefix</code> inference
widened to the whole namespace. Symptom: <code>useTranslation(ns, {
keyPrefix: 'a.b' })</code> then <code>t('title')</code> would resolve to
<code>'&lt;a.b&gt;.title' | '&lt;other.path&gt;.title' | ...</code>
instead of just the scoped value. Affected every
<code>react-i18next</code> user using <code>keyPrefix</code>. Restored
to the eager 26.2.0 form. The same-namespace conflict handling from <a
href="https://redirect.github.com/i18next/i18next/issues/2434">#2434</a>
still works via <code>_DropConflictKeys</code> at the merge layer (in
<code>options.d.ts</code>). Thanks <a
href="https://github.com/aaronrosenthal"><code>@​aaronrosenthal</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2436">#2436</a>).</li>
</ul>
<h2>v26.3.0</h2>
<ul>
<li>feat(types): introduce <code>ResourceNamespaceMap</code> — a
separate mergeable augmentation surface for namespace resource types,
designed for monorepos where multiple packages each want to contribute
their own namespaces. Previously, every package had to coordinate on a
single <code>CustomTypeOptions.resources</code> declaration (or fall
back to typing dependency namespaces as <code>any</code>) because
<code>resources</code> is a single property of an interface and
TypeScript reports TS2717 when two declarations of the same property
disagree. The new interface merges naturally across <code>declare module
'i18next'</code> blocks, so each package can ship its own
<code>i18next.d.ts</code> independently. Per-property merge handles
same-namespace contributions from multiple packages, and
same-key/different-literal conflicts are silently dropped to avoid
poisoning <code>t()</code> overload resolution. Fully
backwards-compatible — existing <code>CustomTypeOptions.resources</code>
augmentations continue to work, and both surfaces can coexist. Scalar
options (<code>defaultNS</code>, <code>returnNull</code>,
<code>enableSelector</code>, etc.) still belong on
<code>CustomTypeOptions</code>. Thanks <a
href="https://github.com/sh3xu"><code>@​sh3xu</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2434">#2434</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2409">#2409</a>.</li>
</ul>
<h2>v26.2.0</h2>
<ul>
<li>feat(types): new <code>parseInterpolation</code> TypeOption (default
<code>true</code>). When set to <code>false</code> in
<code>CustomTypeOptions</code>, the type-level extractor stops parsing
translation strings for <code>{{variable}}</code> patterns. Required by
<code>i18next-icu</code> users — the default extractor mistakes ICU
MessageFormat nested-brace plurals like <code>{count, plural, one
{{count} row} other {{count} rows}}</code> for an interpolation block
and demands a phantom variable name. The flag is type-only; runtime
interpolation is governed by <code>InterpolationOptions</code> and is
unaffected. Fixes <a
href="https://redirect.github.com/i18next/i18next-icu/issues/85">i18next-icu#85</a>.</li>
<li>fix(types): expose <code>enableSelector</code> on
<code>InitOptions</code> so <code>i18next.init({ enableSelector:
'strict' })</code> typechecks without a module augmentation. The runtime
already reads <code>opts?.enableSelector</code> from init options; this
lands the matching type declaration next to the other
selector-resolution knobs. Accepts <code>false | true | 'optimize' |
'strict'</code>. Thanks <a
href="https://github.com/Faithfinder"><code>@​Faithfinder</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2431">#2431</a>)</li>
</ul>
<h2>v26.1.0</h2>
<ul>
<li>feat: <code>enableSelector: 'strict'</code> (TypeOptions + runtime
option). Opt-in mode that drops the flattened-primary form from
<code>NsResource</code> at the type level — every namespace (primary
included) is exposed only under its own key on <code>$</code>, uniformly
across single- and multi-ns hooks. At runtime, a leading selector path
segment matching the scope's namespace list is always rewritten as a
namespace prefix, including the primary. Eliminates the silent-miss
surface area where <code>t($ =&gt; $.primary.foo)</code> typechecks but
doesn't resolve under the default mode (see <a
href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a>).
Backward-compatible: default <code>enableSelector: false | true |
'optimize'</code> behavior is unchanged. Note: strict mode is
incompatible with the <a
href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a>
pattern (keys whose names match sibling namespaces) — those users should
stay on default mode.</li>
</ul>
<h2>v26.0.10</h2>
<ul>
<li>feat: <code>getFixedT</code> accepts a fourth optional
<code>fixedOpts</code> argument carrying <code>scopeNs</code> — the full
namespace list the bound <code>t</code> was created for. The selector
API uses <code>scopeNs</code> to detect when a path's first segment is a
namespace prefix, <strong>without</strong> changing resolution scope.
Resolution still uses the bound <code>ns</code> (a single primary string
in the typical react-i18next setup), so plain <code>t('key')</code>
lookups stay isolated to the primary namespace exactly as before — only
<code>t($ =&gt; $.secondaryNs.foo)</code> selectors now route correctly
under <code>useTranslation([nsA, nsB])</code>. Fixes the runtime side of
<a
href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a>
for the <code>react-i18next</code> default-<code>nsMode</code> case. The
4th argument is opt-in: existing 3-arg <code>getFixedT(lng, ns,
keyPrefix)</code> callers see no behavior change.</li>
</ul>
<h2>v26.0.9</h2>
<ul>
<li>fix(types): unformatted interpolation values are now typed as
<code>string | number</code> (was <code>string</code>). i18next
stringifies values at runtime, so requiring callers to wrap numbers in
<code>String(...)</code> for plain <code>{{var}}</code> placeholders was
unnecessary friction — and could mask the real problem when a non-string
value was passed alongside multiple interpolation slots (the
<code>t()</code> overload resolution would fall through to the 3-arg
form and report a confusing &quot;not assignable to string&quot; error
against the options object). Typed format specifiers like <code>{{x,
number}}</code>, <code>{{x, currency}}</code>, <code>{{x,
datetime}}</code>, etc. keep their precise types; this only relaxes the
no-format default. The <code>count</code> variable remains
<code>number</code>-only</li>
</ul>
<h2>v26.0.8</h2>
<ul>
<li>fix(types): restore the pre-v25.10.4 <code>ExistsFunction</code>
shape so plain arrow functions can again be assigned to
<code>ExistsFunction</code>-typed variables (TypeScript cannot infer
type predicates through multi-overload assignment). Direct
<code>i18next.exists(key)</code> calls still narrow <code>key</code> to
<code>SelectorKey</code> — the predicate is now declared inline on
<code>i18n.exists</code>. Custom wrappers that want the narrowing can
type themselves as <code>typeof i18next.exists</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2425">2425</a></li>
</ul>
<h2>v26.0.7</h2>
<ul>
<li>fix: when a plural lookup misses, the <code>missingKey</code> debug
log now shows the actual plural-resolved key (e.g.
<code>foo.bar_many</code> for Polish <code>count: 14</code>) instead of
the base key — making it obvious which plural category was expected and
missing <a
href="https://redirect.github.com/i18next/i18next/issues/2423">2423</a></li>
<li>chore: drop <code>@babel/runtime</code> runtime dependency. The
build no longer generates any <code>@babel/runtime</code> imports, so
the package is unused by consumers. Rollup now uses <code>babelHelpers:
'bundled'</code> so any helpers that are ever needed in the future will
be inlined rather than imported externally <a
href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li>
<li>chore: stop emitting <code>dist/esm/i18next.bundled.js</code>. It
was byte-identical to <code>dist/esm/i18next.js</code> because no
helpers were being imported <a
href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li>
</ul>
<h2>v26.0.6</h2>
<p>Security release — all issues found via an internal audit. GHSA
advisory filed after release.</p>
<ul>
<li>security: warn when a translation string combines <code>escapeValue:
false</code> with interpolated variables inside a <code>$t(key, { ...
&quot;{{var}}&quot; ... })</code> nesting-options block. In that narrow
combination, attacker-controlled string values containing
<code>&quot;</code> can break out of the JSON options literal and inject
additional nesting options (e.g. redirect
<code>lng</code>/<code>ns</code>). The default <code>escapeValue:
true</code> configuration is unaffected because HTML-escaping
neutralises the quote before <code>JSON.parse</code>. See the security
docs for mitigation guidance (GHSA-TBD)</li>
<li>security: apply <code>regexEscape</code> to
<code>unescapePrefix</code> / <code>unescapeSuffix</code> on par with
the other interpolation delimiters. Prevents ReDoS
(catastrophic-backtracking) when a misconfigured delimiter contains
regex metacharacters, and fixes silent breakage of the <code>{{-
var}}</code> syntax when the delimiter contains characters like
<code>(</code>, <code>[</code>, <code>.</code></li>
<li>security: strip CR/LF/NUL and other C0/C1 control characters from
string log arguments to prevent log forging via user-controlled
translation keys, language codes, namespaces, or interpolation variable
names (CWE-117)</li>
<li>chore: ignore <code>.env*</code> and
<code>*.pem</code>/<code>*.key</code> files in
<code>.gitignore</code></li>
</ul>
<h2>v26.0.5</h2>
<ul>
<li>fix: <code>cloneInstance().changeLanguage()</code> no longer fails
to update language state when the target language is not yet loaded — a
race between <code>init()</code>'s deferred <code>load()</code> and the
user's <code>changeLanguage()</code> could overwrite
<code>isLanguageChangingTo</code>, causing <code>setLngProps</code> to
be skipped <a
href="https://redirect.github.com/i18next/i18next/issues/2422">2422</a></li>
</ul>
<h2>v26.0.4</h2>
<ul>
<li>fix(types): inline formatting options like <code>{{price,
currency(EUR)}}</code> are now correctly resolved to their base format
type (e.g. <code>number</code> for <code>currency</code>) instead of
falling back to <code>string</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2378">2378</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.3.4</h2>
<ul>
<li>fix(security): <code>deepExtend</code> (used by
<code>addResourceBundle(..., deep, overwrite)</code>) no longer recurses
into inherited properties. It checked key existence with the
<code>in</code> operator, which walks the prototype chain, so a source
key matching an inherited built-in (e.g. <code>hasOwnProperty</code>,
<code>toString</code>) caused recursion into the shared
<code>Object.prototype</code> function and, with <code>overwrite:
true</code>, could overwrite e.g.
<code>Object.prototype.hasOwnProperty.call</code> with a non-callable
value — corrupting a shared built-in process-wide (DoS). Existence is
now checked with <code>Object.prototype.hasOwnProperty.call</code>, so
such keys are copied as plain own data instead. This complements the
existing <code>__proto__</code>/<code>constructor</code> guard and is
also strictly more correct for an own-property merge. Only affects
applications that pass attacker-controlled data with <code>deep:
true</code> and <code>overwrite: true</code>; no standard
backend/integration does this. Distinct from CVE-2026-48713 /
CVE-2026-48714 (different packages, <code>setPath</code> mechanism). See
advisory <a
href="https://github.com/i18next/i18next/security/advisories/GHSA-6jcc-5g8w-32mx">GHSA-6jcc-5g8w-32mx</a>,
CVSS 5.9 (<code>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H</code>).
Thanks to zx (Jace) <a
href="https://github.com/manus-use"><code>@​manus-use</code></a> for the
responsible disclosure.</li>
</ul>
<h2>26.3.3</h2>
<ul>
<li>fix(types): selector <code>t($ =&gt; $.arr, { returnObjects: true,
context })</code> on a JSON array of <strong>heterogeneous</strong>
objects now preserves each element's full shape (e.g. <code>{ transKey1:
string; transKey2: string }[]</code>) instead of collapsing to a union
of partial element types. Two type-level causes: (1)
<code>FilterKeys</code> evaluated the whole array element type at once,
so <code>keyof (A | B)</code> only saw the keys common to every element
— it now distributes over the object union and filters each element
independently; (2) when TypeScript merges mismatched array element types
it injects phantom optional <code>undefined</code> keys (e.g.
<code>transKey1_withContext?: undefined</code> on elements that don't
define it), which the context-detection helpers mistook for real context
variants — they now skip keys typed as <code>undefined</code>. Also adds
a dedicated <code>context</code> + <code>returnObjects: true</code>
selector overload using <code>const Fn</code> +
<code>ReturnType&lt;Fn&gt;</code>, so <code>Target</code> is no longer
collapsed to <code>unknown</code> via <code>ApplyTarget</code>. Resolves
Problem 1 of <a
href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a>
(Problem 2 was already fixed on master). Thanks <a
href="https://github.com/sauravgupta-dotcom"><code>@​sauravgupta-dotcom</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2438">#2438</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2398">#2398</a>.</li>
</ul>
<h2>26.3.2</h2>
<ul>
<li>fix: chained formatters with a parenthesised option that contains
the format separator (e.g. <code>join(separator: ', ')</code>) now work
at <strong>any</strong> position in the chain, not just first.
Previously the comma-in-parens reassembly only repaired
<code>formats[0]</code>, so <code>{{v, uppercase, join(separator: ',
')}}</code> split the <code>join(...)</code> option on the inner comma
and never rejoined it, producing corrupt output. Replaced the
first-position-only repair with a position-independent pass that
re-joins fragments until each open paren closes. Thanks <a
href="https://github.com/spokodev"><code>@​spokodev</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2437">#2437</a>).</li>
</ul>
<h2>26.3.1</h2>
<ul>
<li>fix(types): <code>t()</code> with a <code>keyPrefix</code> no longer
pollutes its return type with sibling keys' values. A regression in
26.3.0 — the <code>[Res] extends [never]</code> guards added to
<code>KeysBuilderWithReturnObjects</code> /
<code>KeysBuilderWithoutReturnObjects</code> turned the builders into
deferred conditional types, so <code>KeyPrefix&lt;Ns&gt;</code> stopped
resolving to a literal union and <code>keyPrefix</code> inference
widened to the whole namespace. Symptom: <code>useTranslation(ns, {
keyPrefix: 'a.b' })</code> then <code>t('title')</code> would resolve to
<code>'&lt;a.b&gt;.title' | '&lt;other.path&gt;.title' | ...</code>
instead of just the scoped value. Affected every
<code>react-i18next</code> user using <code>keyPrefix</code>. Restored
to the eager 26.2.0 form. The same-namespace conflict handling from <a
href="https://redirect.github.com/i18next/i18next/issues/2434">#2434</a>
still works via <code>_DropConflictKeys</code> at the merge layer (in
<code>options.d.ts</code>). Thanks <a
href="https://github.com/aaronrosenthal"><code>@​aaronrosenthal</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2436">#2436</a>).</li>
</ul>
<h2>26.3.0</h2>
<ul>
<li>feat(types): introduce <code>ResourceNamespaceMap</code> — a
separate mergeable augmentation surface for namespace resource types,
designed for monorepos where multiple packages each want to contribute
their own namespaces. Previously, every package had to coordinate on a
single <code>CustomTypeOptions.resources</code> declaration (or fall
back to typing dependency namespaces as <code>any</code>) because
<code>resources</code> is a single property of an interface and
TypeScript reports TS2717 when two declarations of the same property
disagree. The new interface merges naturally across <code>declare module
'i18next'</code> blocks, so each package can ship its own
<code>i18next.d.ts</code> independently. Per-property merge handles
same-namespace contributions from multiple packages, and
same-key/different-literal conflicts are silently dropped to avoid
poisoning <code>t()</code> overload resolution. Fully
backwards-compatible — existing <code>CustomTypeOptions.resources</code>
augmentations continue to work, and both surfaces can coexist. Scalar
options (<code>defaultNS</code>, <code>returnNull</code>,
<code>enableSelector</code>, etc.) still belong on
<code>CustomTypeOptions</code>. Thanks <a
href="https://github.com/sh3xu"><code>@​sh3xu</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2434">#2434</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2409">#2409</a>.</li>
</ul>
<h2>26.2.0</h2>
<ul>
<li>feat(types): new <code>parseInterpolation</code> TypeOption (default
<code>true</code>). When set to <code>false</code> in
<code>CustomTypeOptions</code>, the type-level extractor stops parsing
translation strings for <code>{{variable}}</code> patterns. Required by
<code>i18next-icu</code> users — the default extractor mistakes ICU
MessageFormat nested-brace plurals like <code>{count, plural, one
{{count} row} other {{count} rows}}</code> for an interpolation block
and demands a phantom variable name. The flag is type-only; runtime
interpolation is governed by <code>InterpolationOptions</code> and is
unaffected. Fixes <a
href="https://redirect.github.com/i18next/i18next-icu/issues/85">i18next-icu#85</a>.</li>
<li>fix(types): expose <code>enableSelector</code> on
<code>InitOptions</code> so <code>i18next.init({ enableSelector:
'strict' })</code> typechecks without a module augmentation. The runtime
already reads <code>opts?.enableSelector</code> from init options; this
lands the matching type declaration next to the other
selector-resolution knobs. Accepts <code>false | true | 'optimize' |
'strict'</code>. Thanks <a
href="https://github.com/Faithfinder"><code>@​Faithfinder</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2431">#2431</a>)</li>
</ul>
<h2>26.1.0</h2>
<ul>
<li>feat: <code>enableSelector: 'strict'</code> (TypeOptions + runtime
option). Opt-in mode that drops the flattened-primary form from
<code>NsResource</code> at the type level — every namespace (primary
included) is exposed only under its own key on <code>$</code>, uniformly
across single- and multi-ns hooks. At runtime, a leading selector path
segment matching the scope's namespace list is always rewritten as a
namespace prefix, including the primary. Eliminates the silent-miss
surface area where <code>t($ =&gt; $.primary.foo)</code> typechecks but
doesn't resolve under the default mode (see <a
href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a>).
Backward-compatible: default <code>enableSelector: false | true |
'optimize'</code> behavior is unchanged. Note: strict mode is
incompatible with the <a
href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a>
pattern (keys whose names match sibling namespaces) — those users should
stay on default mode.</li>
</ul>
<h2>26.0.10</h2>
<ul>
<li>feat: <code>getFixedT</code> accepts a fourth optional
<code>fixedOpts</code> argument carrying <code>scopeNs</code> — the full
namespace list the bound <code>t</code> was created for. The selector
API uses <code>scopeNs</code> to detect when a path's first segment is a
namespace prefix, <strong>without</strong> changing resolution scope.
Resolution still uses the bound <code>ns</code> (a single primary string
in the typical react-i18next setup), so plain <code>t('key')</code>
lookups stay isolated to the primary namespace exactly as before — only
<code>t($ =&gt; $.secondaryNs.foo)</code> selectors now route correctly
under <code>useTranslation([nsA, nsB])</code>. Fixes the runtime side of
<a
href="https://redirect.github.com/i18next/i18next/issues/2429">#2429</a>
for the <code>react-i18next</code> default-<code>nsMode</code> case. The
4th argument is opt-in: existing 3-arg <code>getFixedT(lng, ns,
keyPrefix)</code> callers see no behavior change.</li>
</ul>
<h2>26.0.9</h2>
<ul>
<li>fix(types): unformatted interpolation values are now typed as
<code>string | number</code> (was <code>string</code>). i18next
stringifies values at runtime, so requiring callers to wrap numbers in
<code>String(...)</code> for plain <code>{{var}}</code> placeholders was
unnecessary friction — and could mask the real problem when a non-string
value was passed alongside multiple interpolation slots (the
<code>t()</code> overload resolution would fall through to the 3-arg
form and report a confusing &quot;not assignable to string&quot; error
against the options object). Typed format specifiers like <code>{{x,
number}}</code>, <code>{{x, currency}}</code>, <code>{{x,
datetime}}</code>, etc. keep their precise types; this only relaxes the
no-format default. The <code>count</code> variable remains
<code>number</code>-only</li>
</ul>
<h2>26.0.8</h2>
<ul>
<li>fix(types): restore the pre-v25.10.4 <code>ExistsFunction</code>
shape so plain arrow functions can again be assigned to
<code>ExistsFunction</code>-typed variables (TypeScript cannot infer
type predicates through multi-overload assignment). Direct
<code>i18next.exists(key)</code> calls still narrow <code>key</code> to
<code>SelectorKey</code> — the predicate is now declared inline on
<code>i18n.exists</code>. Custom wrappers that want the narrowing can
type themselves as <code>typeof i18next.exists</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2425">2425</a></li>
</ul>
<h2>26.0.7</h2>
<ul>
<li>fix: when a plural lookup misses, the <code>missingKey</code> debug
log now shows the actual plural-resolved key (e.g.
<code>foo.bar_many</code> for Polish <code>count: 14</code>) instead of
the base key — making it obvious which plural category was expected and
missing <a
href="https://redirect.github.com/i18next/i18next/issues/2423">2423</a></li>
<li>chore: drop <code>@babel/runtime</code> runtime dependency. The
build no longer generates any <code>@babel/runtime</code> imports, so
the package is unused by consumers. Rollup now uses <code>babelHelpers:
'bundled'</code> so any helpers that are ever needed in the future will
be inlined rather than imported externally <a
href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li>
<li>chore: stop emitting <code>dist/esm/i18next.bundled.js</code>. It
was byte-identical to <code>dist/esm/i18next.js</code> because no
helpers were being imported <a
href="https://redirect.github.com/i18next/i18next/issues/2424">2424</a></li>
</ul>
<h2>26.0.6</h2>
<p>Security release — all issues found via an internal audit.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/817ede5146e6d366645982885b0a729861d10a3a"><code>817ede5</code></a>
26.3.4</li>
<li><a
href="https://github.com/i18next/i18next/commit/46d0dd80b505b6b69feccebbe7d9c4fd66c8f85c"><code>46d0dd8</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/642137b7786d83661ec3ee53027798dc4b81d30a"><code>642137b</code></a>
fix(security): prevent deepExtend from recursing into inherited
built-ins</li>
<li><a
href="https://github.com/i18next/i18next/commit/cf7080d363c0bc775681215bba6513a3610dee8b"><code>cf7080d</code></a>
26.3.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/05fd7be281a3c2175da16c9e867a91d95e034889"><code>05fd7be</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/cc0bd80943eae4f45867abbd78c0ae8dd964bb82"><code>cc0bd80</code></a>
changelog: 26.3.3 entry for <a
href="https://redirect.github.com/i18next/i18next/issues/2438">#2438</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/9cbfa6353b6ab726c42be1e6ed52aab5b0601612"><code>9cbfa63</code></a>
fix(types): preserve selector returnObjects shape with context (<a
href="https://redirect.github.com/i18next/i18next/issues/2438">#2438</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/3b047122f5ad5b99a29f9138bb8542de125c8783"><code>3b04712</code></a>
26.3.2</li>
<li><a
href="https://github.com/i18next/i18next/commit/fc20f5dd5ae9744045942e135e93dd787e4bc869"><code>fc20f5d</code></a>
changelog: 26.3.2 entry for <a
href="https://redirect.github.com/i18next/i18next/issues/2437">#2437</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/6901e04f07f0eec1848242d8af26509ab5438920"><code>6901e04</code></a>
fix: reassemble comma-in-parens formatters at any chain position (<a
href="https://redirect.github.com/i18next/i18next/issues/2437">#2437</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v26.0.3...v26.3.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.0.3&new-version=26.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-04 04:12:52 +00:00
CopilotErik VroonCopilot Autofix powered by AI
 		3606868b98 frontend: replace Prettier stack with oxfmt (#1750) 
This PR migrates formatting in `frontend/` from Prettier to `oxfmt`,
including script wiring and dependency cleanup. It removes the Prettier
plugin/config path so formatting is handled by a single tool.

- **Script migration**
  - Renamed/rewired formatting scripts in `frontend/package.json`:
    - `prettier:check` → `format:check` (`oxfmt --check .`)
    - `prettier:write` → `format:write` (`oxfmt .`)
  - Updated dependent scripts:
    - `test` now runs `pnpm run format:write`
    - `openapi-ts` now runs `pnpm run format:write` after generation

- **Dependency cleanup**
  - Removed `prettier-plugin-organize-imports` from `dependencies`
  - Removed `prettier` from `devDependencies`
  - Added `oxfmt` (latest stable at update time)

- **Config removal**
  - Deleted `frontend/.prettierrc.js` (no longer used after migration)

- **Lockfile alignment**
- Updated `frontend/pnpm-lock.yaml` to reflect the dependency and script
ecosystem change

```json
{
  "scripts": {
    "format:check": "oxfmt --check .",
    "format:write": "oxfmt .",
    "openapi-ts": "openapi-ts && pnpm run format:write",
    "test": "tsc && pnpm run format:write"
  }
}
```

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Erik Vroon <11857441+evroon@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
 2026-07-28 18:38:17 +00:00
dependabot[bot] 986d1ff836 Bump postcss from 8.5.10 to 8.5.18 in /frontend (#1746) 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to
8.5.18.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media"><code>@​chatman-media</code></a>).</li>
</ul>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra"><code>@​mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.15</h2>
<ul>
<li>Fixed declaration parsing performance (by <a
href="https://github.com/homanp"><code>@​homanp</code></a>).</li>
</ul>
<h2>8.5.14</h2>
<ul>
<li>Fixed custom syntax regression (by <a
href="https://github.com/43081j"><code>@​43081j</code></a>).</li>
</ul>
<h2>8.5.13</h2>
<ul>
<li>Fixed <code>postcss-scss</code> commend regression.</li>
</ul>
<h2>8.5.12</h2>
<ul>
<li>Fixed reading any file via user-generated CSS.</li>
<li>Added <code>opts.unsafeMap</code> to disable checks.</li>
</ul>
<h2>8.5.11</h2>
<ul>
<li>Fixed nested brackets parsing performance (by <a
href="https://github.com/offset"><code>@​offset</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media"><code>@​chatman-media</code></a>).</li>
</ul>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra"><code>@​mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp"><code>@​greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.15</h2>
<ul>
<li>Fixed declaration parsing performance (by <a
href="https://github.com/homanp"><code>@​homanp</code></a>).</li>
</ul>
<h2>8.5.14</h2>
<ul>
<li>Fixed custom syntax regression (by <a
href="https://github.com/43081j"><code>@​43081j</code></a>).</li>
</ul>
<h2>8.5.13</h2>
<ul>
<li>Fixed <code>postcss-scss</code> commend regression.</li>
</ul>
<h2>8.5.12</h2>
<ul>
<li>Fixed reading any file via user-generated CSS.</li>
<li>Added <code>opts.unsafeMap</code> to disable checks.</li>
</ul>
<h2>8.5.11</h2>
<ul>
<li>Fixed nested brackets parsing performance (by <a
href="https://github.com/offset"><code>@​offset</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/4c0d194c136fd374495d0993c890d794cab65b81"><code>4c0d194</code></a>
Release 8.5.18 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/92b4e7891ec7b811821d01acc8aa0f010caf41e2"><code>92b4e78</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/95663d3eb7ba26f4854dd19d3b4f4425760cf56c"><code>95663d3</code></a>
Limit where source map can be loaded for security reasons</li>
<li><a
href="https://github.com/postcss/postcss/commit/74e25ae9f4efaa56a41a449064a655d7da78072c"><code>74e25ae</code></a>
Release 8.5.17 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/d1518afd5a88f42728b30b87f8917210f363f9f1"><code>d1518af</code></a>
Fix Maximum call stack size exceeded error</li>
<li><a
href="https://github.com/postcss/postcss/commit/2421312ffea96ba77b35ce24a1b2d9c2e22b5e83"><code>2421312</code></a>
Fix linter</li>
<li><a
href="https://github.com/postcss/postcss/commit/a50352c583df991710f92ccac25b36304695161a"><code>a50352c</code></a>
Fix CI</li>
<li><a
href="https://github.com/postcss/postcss/commit/33948f0969bb858acdd52c9692e3a785a3ed0a73"><code>33948f0</code></a>
Prevent prototype hijacking in fromJSON</li>
<li><a
href="https://github.com/postcss/postcss/commit/2131909351161cd2c5fc2be58b14919a873ea824"><code>2131909</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/93440abcca92793b31c5d1fdf5f2da7b58b27599"><code>93440ab</code></a>
Fix non-closed <code>\&lt;div align=&quot;center&quot;&gt;</code> in
README (<a
href="https://redirect.github.com/postcss/postcss/issues/2110">#2110</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.10...8.5.18">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for postcss since your current version.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-28 15:52:07 +00:00
dependabot[bot] cfdc741478 Bump axios from 1.15.2 to 1.18.0 in /frontend (#1738) 
Bumps [axios](https://github.com/axios/axios) from 1.15.2 to 1.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.18.0 — June 13, 2026</h2>
<p>This release hardens redirect and URL handling, improves the
validateStatus configuration semantics, and includes updates to
documentation, dependencies, and release metadata.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>
<p><strong>Redirect Header Safety:</strong> Added Node HTTP adapter
support for stripping caller-specified sensitive headers on cross-origin
redirects, helping prevent custom auth headers such as API keys from
leaking to another origin. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10892">#10892</a></strong>)</p>
</li>
<li>
<p><strong>URL And Request Hardening:</strong> Rejects malformed
<code>http:</code> and <code>https:</code> URLs that omit
<code>//</code> with <code>ERR_INVALID_URL</code>, while tightening
prototype-pollution-safe config reads, stream size limits, FormData
depth handling, data URL sizing, and local <code>NO_PROXY</code>
matching. (<strong><a
href="https://redirect.github.com/axios/axios/issues/11000">#11000</a></strong>)</p>
</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Status Validation:</strong> Added
<code>transitional.validateStatusUndefinedResolves</code> so
applications can opt in to treating <code>validateStatus:
undefined</code> like the option was omitted, while
<code>validateStatus: null</code> remains the explicit way to accept
every status. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>
<p><strong>Documentation:</strong> Published the v1.17.0 release notes,
fixed a changelog typo, clarified the package update PR policy, and
marked the <code>proxy</code> request config as Node.js-only in the
advanced docs. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10988">#10988</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10992">#10992</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</p>
</li>
<li>
<p><strong>Dependencies:</strong> Bumped <code>@babel/core</code>,
<code>@babel/preset-env</code>, <code>@commitlint/cli</code>,
<code>@commitlint/config-conventional</code>,
<code>@rollup/plugin-babel</code>, <code>@rollup/plugin-commonjs</code>,
<code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>,
<code>eslint</code>, <code>lint-staged</code>, <code>rollup</code>,
<code>vitest</code>, and <code>actions/checkout</code>. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10989">#10989</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10996">#10996</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10997">#10997</a></strong>)</p>
</li>
<li>
<p><strong>Release Metadata:</strong> Prepared the 1.18.0 release by
updating package metadata and the runtime <code>VERSION</code> value.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/11003">#11003</a></strong>)</p>
</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a
href="https://github.com/drori12"><code>@​drori12</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>)</li>
<li><strong><a
href="https://github.com/eyupcanakman"><code>@​eyupcanakman</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li>
<li><strong><a
href="https://github.com/Adi-Beker"><code>@​Adi-Beker</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</li>
</ul>
<p><a
href="https://github.com/axios/axios/compare/v1.17.0...v1.18.0">Full
Changelog</a></p>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and
release workflows, and fixes authentication, header, proxy, and
type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>,
<code>params</code>, and <code>paramsSerializer</code> reads with
own-property checks to prevent inherited prototype values from affecting
request behavior, including SSRF-sensitive paths. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow
to npm staged publishing for safer, auditable package releases with
provenance. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support
for zstd response decompression, with
<code>transitional.advertiseZstdAcceptEncoding</code> controlling
whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on
same-origin Node redirects while continuing to strip credentials
cross-origin, and aligned the fetch adapter with HTTP adapter behavior
for URL-embedded Basic auth. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code>
TLS options when tunneling HTTPS requests through HTTP CONNECT proxies.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default
<code>Content-Type</code> for React Native <code>FormData</code> so
multipart boundaries can be generated correctly. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h2>v1.18.0 — June 13, 2026</h2>
<p>This release hardens redirect and URL handling, improves the
validateStatus configuration semantics, and includes updates to
documentation, dependencies, and release metadata.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>
<p><strong>Redirect Header Safety:</strong> Added Node HTTP adapter
support for stripping caller-specified sensitive headers on cross-origin
redirects, helping prevent custom auth headers such as API keys from
leaking to another origin. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10892">#10892</a></strong>)</p>
</li>
<li>
<p><strong>URL And Request Hardening:</strong> Rejects malformed
<code>http:</code> and <code>https:</code> URLs that omit
<code>//</code> with <code>ERR_INVALID_URL</code>, while tightening
prototype-pollution-safe config reads, stream size limits, FormData
depth handling, data URL sizing, and local <code>NO_PROXY</code>
matching. (<strong><a
href="https://redirect.github.com/axios/axios/issues/11000">#11000</a></strong>)</p>
</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Status Validation:</strong> Added
<code>transitional.validateStatusUndefinedResolves</code> so
applications can opt in to treating <code>validateStatus:
undefined</code> like the option was omitted, while
<code>validateStatus: null</code> remains the explicit way to accept
every status. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>
<p><strong>Documentation:</strong> Published the v1.17.0 release notes,
fixed a changelog typo, clarified the package update PR policy, and
marked the <code>proxy</code> request config as Node.js-only in the
advanced docs. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10988">#10988</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10992">#10992</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</p>
</li>
<li>
<p><strong>Dependencies:</strong> Bumped <code>@babel/core</code>,
<code>@babel/preset-env</code>, <code>@commitlint/cli</code>,
<code>@commitlint/config-conventional</code>,
<code>@rollup/plugin-babel</code>, <code>@rollup/plugin-commonjs</code>,
<code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>,
<code>eslint</code>, <code>lint-staged</code>, <code>rollup</code>,
<code>vitest</code>, and <code>actions/checkout</code>. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10989">#10989</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10996">#10996</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10997">#10997</a></strong>)</p>
</li>
<li>
<p><strong>Release Metadata:</strong> Prepared the 1.18.0 release by
updating package metadata and the runtime <code>VERSION</code> value.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/11003">#11003</a></strong>)</p>
</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a
href="https://github.com/drori12"><code>@​drori12</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>)</li>
<li><strong><a
href="https://github.com/eyupcanakman"><code>@​eyupcanakman</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li>
<li><strong><a
href="https://github.com/Adi-Beker"><code>@​Adi-Beker</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</li>
</ul>
<p><a
href="https://github.com/axios/axios/compare/v1.17.0...v1.18.0">Full
Changelog</a></p>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and
release workflows, and fixes authentication, header, proxy, and
type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>,
<code>params</code>, and <code>paramsSerializer</code> reads with
own-property checks to prevent inherited prototype values from affecting
request behavior, including SSRF-sensitive paths. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow
to npm staged publishing for safer, auditable package releases with
provenance. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support
for zstd response decompression, with
<code>transitional.advertiseZstdAcceptEncoding</code> controlling
whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on
same-origin Node redirects while continuing to strip credentials
cross-origin, and aligned the fetch adapter with HTTP adapter behavior
for URL-embedded Basic auth. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code>
TLS options when tunneling HTTPS requests through HTTP CONNECT proxies.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default
<code>Content-Type</code> for React Native <code>FormData</code> so
multipart boundaries can be generated correctly. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/2d06f96e8602c2db13b65a26340ee4a1bbc0b61f"><code>2d06f96</code></a>
chore(release): prepare release 1.18.0 (<a
href="https://redirect.github.com/axios/axios/issues/11003">#11003</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/32fc489632377d214db55bfa4e2c48486a7d7ce2"><code>32fc489</code></a>
fix: malformed http urls (<a
href="https://redirect.github.com/axios/axios/issues/11000">#11000</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/b40ce498abfa10d90b873b4fd08f520afa5d2545"><code>b40ce49</code></a>
chore(deps-dev): bump the development_dependencies group with 10 updates
(<a
href="https://redirect.github.com/axios/axios/issues/10">#10</a>...</li>
<li><a
href="https://github.com/axios/axios/commit/fe964f960ecb52c3e1155b0daf7be77541956b01"><code>fe964f9</code></a>
docs: mark proxy config as Node.js only (<a
href="https://redirect.github.com/axios/axios/issues/10995">#10995</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/5f229d2d1f018d1db3dab6bbe034dbf3f9041b99"><code>5f229d2</code></a>
chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the
github-actions ...</li>
<li><a
href="https://github.com/axios/axios/commit/fae9d4e7db6a858c407c75e607a071c533c5c4f6"><code>fae9d4e</code></a>
docs: clarify package update PR policy (<a
href="https://redirect.github.com/axios/axios/issues/10992">#10992</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/28ab2ced820e55192806c53472ab3eb0cbb68dc2"><code>28ab2ce</code></a>
chore(deps-dev): bump the development_dependencies group with 2 updates
(<a
href="https://redirect.github.com/axios/axios/issues/10989">#10989</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/a8e4f13aeecc45a3b8fab3ecfd9ddb5d70fb772b"><code>a8e4f13</code></a>
fix(core): keep default validateStatus when request passes undefined (<a
href="https://redirect.github.com/axios/axios/issues/10899">#10899</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/614f4552a17de757d4171ad7c3bd38c9c1025fd8"><code>614f455</code></a>
docs: publish v1.17.0 release notes (<a
href="https://redirect.github.com/axios/axios/issues/10988">#10988</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/6bb12c191f5380fad321322fb90216ae0dc36985"><code>6bb12c1</code></a>
fix: custom auth headers not stripped on cross-origin redirects (<a
href="https://redirect.github.com/axios/axios/issues/10892">#10892</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.15.2...v1.18.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-28 15:51:51 +00:00
dependabot[bot]andcopilot-swe-agent[bot] 79120544ab Bump vite from 8.0.8 to 8.0.16 in /frontend (#1711) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.0.8 to 8.0.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.16</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.15</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.13</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.12</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.11</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.10</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.10/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.9</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.9/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.15...v8.0.16">8.0.16</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> reject UNC paths for launch-editor-middleware
(<a
href="https://redirect.github.com/vitejs/vite/issues/22571">#22571</a>)
(<a
href="https://github.com/vitejs/vite/commit/50b951225bbf6151eb84a3ad5a454908ab4a76c9">50b9512</a>)</li>
<li>reject windows alternate paths (<a
href="https://redirect.github.com/vitejs/vite/issues/22572">#22572</a>)
(<a
href="https://github.com/vitejs/vite/commit/dc245c71e5007ea4d891a025e2d69ac96c736546">dc245c7</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.14...v8.0.15">8.0.15</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>send 408 on request timeout (<a
href="https://redirect.github.com/vitejs/vite/issues/22476">#22476</a>)
(<a
href="https://github.com/vitejs/vite/commit/c85c9eeb9aaf41f477b48b057146887bd5620797">c85c9ee</a>)</li>
<li>update rolldown to 1.0.3 (<a
href="https://redirect.github.com/vitejs/vite/issues/22538">#22538</a>)
(<a
href="https://github.com/vitejs/vite/commit/646dbedd2870f8ec48df0321177d8aa64bbd1575">646dbed</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>capitalize error messages and remove spurious space in parse error
(<a
href="https://redirect.github.com/vitejs/vite/issues/22488">#22488</a>)
(<a
href="https://github.com/vitejs/vite/commit/85a0eff1c82bbb7c99a0fe8e63704316578a40d3">85a0eff</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22511">#22511</a>)
(<a
href="https://github.com/vitejs/vite/commit/2686d7d0b722402204d3bcc687a87adea1bcf9fa">2686d7d</a>)</li>
<li><strong>dev:</strong> fix html-proxy cache key mismatch for /@fs/
HTML paths (<a
href="https://redirect.github.com/vitejs/vite/issues/21762">#21762</a>)
(<a
href="https://github.com/vitejs/vite/commit/47c4213f134f562c41ed7c031e4788510cf7e31e">47c4213</a>)</li>
<li><strong>glob:</strong> error on relative glob in virtual module when
no files match (<a
href="https://redirect.github.com/vitejs/vite/issues/22497">#22497</a>)
(<a
href="https://github.com/vitejs/vite/commit/5c8e98f8b584ac5d42f0f9b8580c49792213b13c">5c8e98f</a>)</li>
<li><strong>optimizer:</strong> close the rolldown bundle when write()
rejects (<a
href="https://redirect.github.com/vitejs/vite/issues/22528">#22528</a>)
(<a
href="https://github.com/vitejs/vite/commit/e3cfb9deecff563550fa1b8abd27656b8b292815">e3cfb9d</a>)</li>
<li><strong>resolve:</strong> provide onWarn for viteResolvePlugin in JS
plugin containers (<a
href="https://redirect.github.com/vitejs/vite/issues/22509">#22509</a>)
(<a
href="https://github.com/vitejs/vite/commit/40985f1c09b7696e594e6c5695fbc315d2da2c83">40985f1</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22566">#22566</a>)
(<a
href="https://github.com/vitejs/vite/commit/3052a67d9350f4c5076ab1c222c4a21a589cbcdd">3052a67</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li>correct logic in <code>collectAllModules</code> function (<a
href="https://redirect.github.com/vitejs/vite/issues/22562">#22562</a>)
(<a
href="https://github.com/vitejs/vite/commit/6978a9ceb942c4f5e211d52b8a1e569f8a65c80c">6978a9c</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.13...v8.0.14">8.0.14</a>
(2026-05-21)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>update rolldown to 1.0.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/22484">#22484</a>)
(<a
href="https://github.com/vitejs/vite/commit/96efc88570b6a6ddf1a910f106920cbac07b3cf0">96efc88</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22471">#22471</a>)
(<a
href="https://github.com/vitejs/vite/commit/98b81632139d51820f82036e58d6fbbf122b77b3">98b8163</a>)</li>
<li><strong>dev:</strong> handle errors when sending messages to vite
server (<a
href="https://redirect.github.com/vitejs/vite/issues/22450">#22450</a>)
(<a
href="https://github.com/vitejs/vite/commit/e8e9a34dcf2540139de558a10187630884d10217">e8e9a34</a>)</li>
<li><strong>html:</strong> handle trailing slash paths in
transformIndexHtml (<a
href="https://redirect.github.com/vitejs/vite/issues/22480">#22480</a>)
(<a
href="https://github.com/vitejs/vite/commit/5d94d1bffdb2a15de9341194d89baec86ce1f693">5d94d1b</a>)</li>
<li><strong>optimizer:</strong> pass oxc jsx options to transformSync in
dependency scan (<a
href="https://redirect.github.com/vitejs/vite/issues/22342">#22342</a>)
(<a
href="https://github.com/vitejs/vite/commit/b3132dacea9c6e0cf526cd9f0f09d850f577c262">b3132da</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22470">#22470</a>)
(<a
href="https://github.com/vitejs/vite/commit/7cb728eb629cc677661f1bc52a044ffc0b87fc7f">7cb728e</a>)</li>
<li>remove irrelevant commits from changelog (<a
href="https://github.com/vitejs/vite/commit/2c69495f250edf01132d4a20128de19dbe836086">2c69495</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>glob:</strong> do not rewrite import path for absolute base
(<a
href="https://redirect.github.com/vitejs/vite/issues/22310">#22310</a>)
(<a
href="https://github.com/vitejs/vite/commit/0ae2844ab6d6d1ccf78a2975b8132769fc35b302">0ae2844</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/f94df87ff03b40b65e29bacdc04cc18c7bccaa4a"><code>f94df87</code></a>
release: v8.0.16</li>
<li><a
href="https://github.com/vitejs/vite/commit/dc245c71e5007ea4d891a025e2d69ac96c736546"><code>dc245c7</code></a>
fix: reject windows alternate paths (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572">#22572</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/50b951225bbf6151eb84a3ad5a454908ab4a76c9"><code>50b9512</code></a>
fix(deps): reject UNC paths for launch-editor-middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571">#22571</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/8d1b0195fd186d0b3297d7cd17acff6c96797420"><code>8d1b019</code></a>
release: v8.0.15</li>
<li><a
href="https://github.com/vitejs/vite/commit/2686d7d0b722402204d3bcc687a87adea1bcf9fa"><code>2686d7d</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22511">#22511</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/3052a67d9350f4c5076ab1c222c4a21a589cbcdd"><code>3052a67</code></a>
chore(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22566">#22566</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/e3cfb9deecff563550fa1b8abd27656b8b292815"><code>e3cfb9d</code></a>
fix(optimizer): close the rolldown bundle when write() rejects (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22528">#22528</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/6978a9ceb942c4f5e211d52b8a1e569f8a65c80c"><code>6978a9c</code></a>
refactor: correct logic in <code>collectAllModules</code> function (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22562">#22562</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/646dbedd2870f8ec48df0321177d8aa64bbd1575"><code>646dbed</code></a>
feat: update rolldown to 1.0.3 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22538">#22538</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/85a0eff1c82bbb7c99a0fe8e63704316578a40d3"><code>85a0eff</code></a>
fix: capitalize error messages and remove spurious space in parse error
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22488">#22488</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.0.16/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 2026-07-28 15:48:14 +00:00
dependabot[bot]andcopilot-swe-agent[bot] 6b397d0016 Bump @types/node from 25.5.0 to 26.0.1 in /frontend (#1685) 
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 25.5.0 to 26.0.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 2026-07-28 14:58:49 +00:00
dependabot[bot]andcopilot-swe-agent[bot] b012edc365 Bump @hey-api/openapi-ts from 0.95.0 to 0.97.3 in /frontend (#1727) 
Bumps
[@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts)
from 0.95.0 to 0.97.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md">@​hey-api/openapi-ts's
changelog</a>.</em></p>
<blockquote>
<h2>0.97.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><strong>plugin(<code>@​hey-api/client-axios</code>)</strong>: fix:
correct return type in SSE (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>)
by <a
href="https://github.com/kitlangton"><code>@​kitlangton</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/preact-query</code>)</strong>: add
<code>getQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-ofetch</code>)</strong>: fix:
correct return type in SSE (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>)
by <a
href="https://github.com/kitlangton"><code>@​kitlangton</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/svelte-query</code>)</strong>: add
<code>getQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>

<p><strong>plugin(<code>@​tanstack/angular-query-experimental</code>)</strong>:
add <code>getQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/react-query</code>)</strong>: add
<code>getQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-fetch</code>)</strong>: fix:
correct return type in SSE (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>)
by <a
href="https://github.com/kitlangton"><code>@​kitlangton</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/react-query</code>)</strong>: add
<code>useGetQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-ky</code>)</strong>: fix:
correct return type in SSE (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>)
by <a
href="https://github.com/kitlangton"><code>@​kitlangton</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/solid-query</code>)</strong>: add
<code>getQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-next</code>)</strong>: fix:
correct return type in SSE (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/a19b3a472f2480592f3cbe518ea5e7f02fe4a550"><code>a19b3a4</code></a>)
by <a
href="https://github.com/kitlangton"><code>@​kitlangton</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/preact-query</code>)</strong>: add
<code>useGetQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-angular</code>)</strong>: fix:
correct return type in SSE (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3919">#3919</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/58962a055b19c61ea5721d01f7ba2589bbbcb1ad"><code>58962a0</code></a>)
by <a
href="https://github.com/kitlangton"><code>@​kitlangton</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/transformers</code>)</strong>: add
support for Temporal API via <a
href="https://github.com/fullcalendar/temporal-polyfill">temporal-polyfill</a>
in <code>dates</code> (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3916">#3916</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/bfa457a3da2bebad46f6c621cfd8a0f22aa6b9d8"><code>bfa457a</code></a>)
by <a
href="https://github.com/OptoCloud"><code>@​OptoCloud</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​tanstack/vue-query</code>)</strong>: add
<code>getQueryData</code> option (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3827">#3827</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/1aa47851422dece48d103ad018759fea8151cb38"><code>1aa4785</code></a>)
by <a
href="https://github.com/inas-sirhan"><code>@​inas-sirhan</code></a></p>
</li>
<li>
<p><strong>plugin(zod)</strong>: fix: avoid invalid
<code>.extend()</code> on <code>z.record()</code> when a discriminated
union member is an empty object (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3915">#3915</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/8fa9f3ae0932401c097ccdd542d08b092f13873c"><code>8fa9f3a</code></a>)
by <a
href="https://github.com/apps/pullfrog"><code>@​pullfrog</code></a></p>
</li>
</ul>
<h3>Updated Dependencies:</h3>
<ul>
<li><code>@​hey-api/shared</code><a
href="https://github.com/0"><code>@​0</code></a>.4.5</li>
<li><code>@​hey-api/codegen-core</code><a
href="https://github.com/0"><code>@​0</code></a>.8.2</li>
</ul>
<h2>0.97.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><strong>plugin(zod)</strong>: use enums from TypeScript if available
(<a
href="https://redirect.github.com/hey-api/hey-api/pull/3884">#3884</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/abc8ceb43f37e7c9739fe010d3fcdb3be0bb5290"><code>abc8ceb</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/client-next</code>)</strong>: fix:
preserve query auth when when there are no other query parameters (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3853">#3853</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/a6ee7eb11cc6e8f1d5093d2c211d77874f337bbe"><code>a6ee7eb</code></a>)
by <a
href="https://github.com/apps/copilot-swe-agent"><code>@​copilot-swe-agent</code></a></p>
</li>
<li>
<p><strong>plugin(<code>@​hey-api/sdk</code>)</strong>: support
<code>valibot</code> as response transformer (<a
href="https://redirect.github.com/hey-api/hey-api/pull/3847">#3847</a>)
(<a
href="https://github.com/hey-api/hey-api/commit/6770f78dec53b1bf8f37c361c7b9c2e2eb4157fa"><code>6770f78</code></a>)
by <a href="https://github.com/SukkaW"><code>@​SukkaW</code></a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hey-api/hey-api/commit/d833f735fdb3c850800b7668ddb058f17aa62ab9"><code>d833f73</code></a>
ci: release</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/4987bc3c32ea2c585f4f2400b7d22154dceccfb8"><code>4987bc3</code></a>
docs: add changesets</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/30498ceff194c855cb81cca652739cbe3d924c28"><code>30498ce</code></a>
Merge branch 'main' of <a
href="https://github.com/hey-api/openapi-ts">https://github.com/hey-api/openapi-ts</a>
into feat/tansta...</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/9be7e7f181995158e9c41ab70ca62c47c35f62f6"><code>9be7e7f</code></a>
chore: one more try</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/4c5916d59384a5e9075463808fca1047856757a4"><code>4c5916d</code></a>
chore: one more try</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/83b4464cd8535a779aab1743fa1f16aa68f1a0e4"><code>83b4464</code></a>
chore: one more try</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/597e151a282b4ca7fa41f162c35f94e8728df8c7"><code>597e151</code></a>
Merge branch 'main' into
pullfrog/3914-zod-discriminated-union-empty-object</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/462c2e9432bc42d1c75267130472de89a3219634"><code>462c2e9</code></a>
Merge branch 'main' into feat/transformers-temporal</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/3367e64f071df30e4824e7c8b1e21040cae6f2d7"><code>3367e64</code></a>
Merge branch 'main' into fix/sse-iterator-treturn-miswiring</li>
<li><a
href="https://github.com/hey-api/hey-api/commit/e6d4416ff6f0a5f28009a7181001c2fc31bfd3b0"><code>e6d4416</code></a>
refactor: valibot plugin</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.97.3/packages/openapi-ts">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 2026-07-28 12:20:09 +00:00
dependabot[bot]andcopilot-swe-agent[bot] c9733d2ecc Bump react-router from 7.14.0 to 8.3.0 in /frontend (#1743) 
Bumps
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router)
from 7.14.0 to 8.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases">react-router's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830</a></p>
<h2>v8.2.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820</a></p>
<h2>v8.1.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810</a></p>
<h2>v8.0.1</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801</a></p>
<h2>v8.0.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800</a></p>
<h2>v7.18.1</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181">https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181</a></p>
<h2>v7.18.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180</a></p>
<h2>v7.17.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170</a></p>
<h2>v7.16.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160</a></p>
<h2>v7.15.1</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7151</a></p>
<h2>v7.15.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7150</a></p>
<h2>v7.14.2</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7142</a></p>
<h2>v7.14.1</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md">react-router's
changelog</a>.</em></p>
<blockquote>
<h2>v8.3.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Encode path params in <code>href</code>/<code>generatePath</code>
per RFC 3986 path-segment rules instead of
<code>encodeURIComponent</code> (<a
href="https://redirect.github.com/remix-run/react-router/pull/15310">#15310</a>)
<ul>
<li>Characters that are valid literally in a path segment (<code>$ &amp;
+ , ; = : @</code> — RFC 3986 <code>pchar</code>) are no longer
percent-encoded, so values like a semver build <code>1.0.0+1</code>
interpolate unchanged instead of becoming <code>1.0.0%2B1</code></li>
<li>Structural/unsafe characters (<code>/ ? # %</code>, whitespace,
non-ASCII) are still escaped exactly as before</li>
</ul>
</li>
<li>Use <code>crypto.randomUUID()</code> for
<code>createMemorySessionStorage</code> session ids (<a
href="https://redirect.github.com/remix-run/react-router/pull/15302">#15302</a>)
<ul>
<li><code>createMemorySessionStorage</code> is only intended for local
development and testing - sessions are lost when the server
restarts</li>
</ul>
</li>
<li>Fix <code>NavLink</code> not applying its <code>pending</code> state
when <code>to</code> has a trailing slash (<a
href="https://redirect.github.com/remix-run/react-router/pull/15300">#15300</a>)</li>
<li>Preserve RSC route component metadata so routes with a
<code>clientLoader</code> can skip unnecessary server requests once
their components have rendered while still fetching missing
server-rendered elements (<a
href="https://redirect.github.com/remix-run/react-router/pull/15323">#15323</a>)</li>
<li>Harden RSC CSRF code paths (<a
href="https://redirect.github.com/remix-run/react-router/pull/15311">#15311</a>)</li>
<li>Fix server crash (<code>TypeError: Invalid state: Unable to
enqueue</code>) when a request is aborted while the RSC HTML stream has
a pending flush (<a
href="https://redirect.github.com/remix-run/react-router/pull/15286">#15286</a>)
<ul>
<li>Handle cancellation of the <code>injectRSCPayload</code> readable
side, clear the pending flush, and cancel the underlying RSC payload
stream</li>
</ul>
</li>
</ul>
<h3>Unstable Changes</h3>
<p>⚠️ <em><a
href="https://reactrouter.com/community/api-development-strategy#unstable-flags">Unstable
features</a> are not recommended for production use</em></p>
<ul>
<li>
<p>Detect stale RSC clients during lazy route discovery and reload the
destination document (<a
href="https://redirect.github.com/remix-run/react-router/pull/15318">#15318</a>)</p>
<h4>Migration</h4>
<p>Apps using the default RSC Framework entry do not need to make any
changes. Apps with a custom <code>entry.rsc.tsx</code> should import the
generated client version and pass it to
<code>unstable_matchRSCServerRequest</code>:</p>
<pre lang="tsx"><code>import clientVersion from
&quot;virtual:react-router/unstable_rsc/client-version&quot;;
<p>return unstable_matchRSCServerRequest({<br />
// ...<br />
clientVersion,<br />
});<br />
</code></pre></p>
</li>
<li>
<p>Add CSP nonce support to RSC document rendering (<a
href="https://redirect.github.com/remix-run/react-router/pull/15320">#15320</a>)</p>
<ul>
<li>Add <code>nonce</code> options to
<code>unstable_routeRSCServerRequest</code> and
<code>unstable_RSCStaticRouter</code></li>
<li>Forward the nonce to the HTML renderer and apply it to injected RSC
payload scripts and nonce-aware framework components</li>
</ul>
<p>To adopt nonce-based CSP, update your <code>entry.ssr.tsx</code> (run
<code>react-router reveal entry.ssr</code> first in RSC Framework Mode)
to generate a fresh nonce for each request. Pass it to
<code>routeRSCServerRequest</code>, spread the <code>renderHTML</code>
options into React's HTML renderer, pass <code>options.nonce</code> to
<code>RSCStaticRouter</code>, and use the same nonce in the
<code>Content-Security-Policy</code> response header:</p>
<pre lang="tsx"><code>const nonce = crypto.randomUUID();
const response = await routeRSCServerRequest({
  request,
  serverResponse,
  createFromReadableStream,
  nonce,
  async renderHTML(getPayload, options) {
    const payload = getPayload();
    return renderHTMLToReadableStream(
</code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remix-run/react-router/commit/2edaca7a4f12a50cad002d55d84f73b0cdd462b6"><code>2edaca7</code></a>
Release v8.3.0 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15294">#15294</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/687ab72dddcc19d2fc749f992fe29789ba13daad"><code>687ab72</code></a>
Prep release notes</li>
<li><a
href="https://github.com/remix-run/react-router/commit/d2f1f1baa5f7f75def8e07bac3c37fb185c04e1f"><code>d2f1f1b</code></a>
update changes files to use h4 instead of h3 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15334">#15334</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/8186207e4773958a3e124a76de5565256b248134"><code>8186207</code></a>
fix(rsc): preserve component metadata for client loader revalidation (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15323">#15323</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/c26e431c608c68580841e7c156ed986919c60630"><code>c26e431</code></a>
feat(rsc): support CSP nonces in document rendering (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15320">#15320</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/6286f904855afc245513a47ba5e4e4ffa3d63a15"><code>6286f90</code></a>
feat(rsc): reload stale clients after new deployments (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15318">#15318</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/3d83ad4ac2d19768bf7b9f80962b76c52c1f777a"><code>3d83ad4</code></a>
docs: fix useLinkClickHandler defaultShouldRevalidate default
description (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/1">#1</a>...</li>
<li><a
href="https://github.com/remix-run/react-router/commit/f75c89fd9cf76177c22d008265d78ee9184c483e"><code>f75c89f</code></a>
Update docs links to v8 API reference (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15316">#15316</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/baa9ba617b9df1114359439013462cc3486d5b72"><code>baa9ba6</code></a>
fix: encode path params per RFC 3986 path-segment rules in
href/generatePath ...</li>
<li><a
href="https://github.com/remix-run/react-router/commit/69debd1a33aa87924740ec199c4a598d4d1ebcae"><code>69debd1</code></a>
fix: apply NavLink pending state when the to prop has a trailing slash
(<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15300">#15300</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/remix-run/react-router/commits/react-router@8.3.0/packages/react-router">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-router&package-manager=npm_and_yarn&previous-version=7.14.0&new-version=8.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 2026-07-28 11:56:16 +00:00
dependabot[bot] 06da3d3598 Bump axios from 1.15.0 to 1.15.2 in /frontend (#1678) 
Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.15.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.15.2</h2>
<p>This release delivers prototype-pollution hardening for the Node HTTP
adapter, adds an opt-in <code>allowedSocketPaths</code> allowlist to
mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory
leak, and ships supply-chain hardening across CI and security docs.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Prototype Pollution Hardening (HTTP Adapter):</strong>
Hardened the Node HTTP adapter and
<code>resolveConfig</code>/<code>mergeConfig</code>/validator paths to
read only own properties and use null-prototype config objects,
preventing polluted <code>auth</code>, <code>baseURL</code>,
<code>socketPath</code>, <code>beforeRedirect</code>, and
<code>insecureHTTPParser</code> from influencing requests. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10779">#10779</a></strong>)</li>
<li><strong>SSRF via <code>socketPath</code>:</strong> Rejects
non-string <code>socketPath</code> values and adds an opt-in
<code>allowedSocketPaths</code> config option to restrict permitted Unix
domain socket paths, returning <code>AxiosError</code>
<code>ERR_BAD_OPTION_VALUE</code> on mismatch. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li>
<li><strong>Supply-chain Hardening:</strong> Added <code>.npmrc</code>
with <code>ignore-scripts=true</code>, lockfile lint CI, non-blocking
reproducible build diff, scoped CODEOWNERS, expanded
<code>SECURITY.md</code>/<code>THREATMODEL.md</code> with provenance
verification (<code>npm audit signatures</code>), 60-day resolution
policy, and maintainer incident-response runbook. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10776">#10776</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong><code>allowedSocketPaths</code> Config Option:</strong> New
request config option (and TypeScript types) to allowlist Unix domain
socket paths used by the Node http adapter; backwards compatible when
unset. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Keep-alive Socket Memory Leak:</strong> Installs a single
per-socket <code>error</code> listener tracking the active request via
<code>kAxiosSocketListener</code>/<code>kAxiosCurrentReq</code>,
eliminating per-request listener accumulation,
<code>MaxListenersExceededWarning</code>, and linear heap growth under
concurrent or long-running keep-alive workloads (fixes <a
href="https://redirect.github.com/axios/axios/issues/10780">#10780</a>).
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10788">#10788</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>Changelog:</strong> Updated <code>CHANGELOG.md</code> with
v1.15.1 release notes. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10781">#10781</a></strong>)</li>
</ul>
<p><a
href="https://github.com/axios/axios/compare/v1.15.1...v1.15.2">Full
Changelog</a></p>
<h2>v1.15.1</h2>
<p>This release ships a coordinated set of security hardening fixes
across headers, body/redirect limits, multipart handling, and
XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes,
test migrations, and threat-model documentation updates.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Header Injection Hardening:</strong> Tightened validation
and sanitisation across request header construction to close the
header-injection attack surface. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10749">#10749</a></strong>)</li>
<li><strong>CRLF Stripping in Multipart Headers:</strong> Correctly
strips CR/LF from multipart header values to prevent injection via field
names and filenames. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10758">#10758</a></strong>)</li>
<li><strong>Prototype Pollution / Auth Bypass:</strong> Replaced unsafe
<code>in</code> checks with <code>hasOwnProperty</code> to prevent
authentication bypass via prototype pollution on config objects, with
additional regression tests. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10761">#10761</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10760">#10760</a></strong>)</li>
<li><strong><code>withXSRFToken</code> Truthy Bypass:</strong>
Short-circuits on any truthy non-boolean value, so an ambiguous config
no longer silently leaks the XSRF token cross-origin. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10762">#10762</a></strong>)</li>
<li><strong><code>maxBodyLength</code> With Zero Redirects:</strong>
Enforces <code>maxBodyLength</code> even when <code>maxRedirects</code>
is set to <code>0</code>, closing a bypass path for oversized request
bodies. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10753">#10753</a></strong>)</li>
<li><strong>Streamed Response <code>maxContentLength</code>
Bypass:</strong> Applies <code>maxContentLength</code> to streamed
responses that previously bypassed the cap. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10754">#10754</a></strong>)</li>
<li><strong>Follow-up CVE Completion:</strong> Completes an earlier
incomplete CVE fix to fully close the regression window. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10755">#10755</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>AI-Based Docs Translations:</strong> Initial scaffold for
AI-assisted translations of the documentation site. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10705">#10705</a></strong>)</li>
<li><strong><code>Location</code> Request Header Type:</strong> Adds
<code>Location</code> to <code>CommonRequestHeadersList</code> for
accurate typing of redirect-aware requests. (<strong><a
href="https://redirect.github.com/axios/axios/issues/7528">#7528</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>FormData Handling:</strong> Removes
<code>Content-Type</code> when no boundary is present on
<code>FormData</code> fetch requests, supports multi-select fields,
cancels <code>request.body</code> instead of the source stream on fetch
abort, and fixes a recursion bug in form-data serialisation. (<strong><a
href="https://redirect.github.com/axios/axios/issues/7314">#7314</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10676">#10676</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10702">#10702</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10726">#10726</a></strong>)</li>
<li><strong>HTTP Adapter:</strong> Handles socket-only request errors
without leaking keep-alive listeners. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10576">#10576</a></strong>)</li>
<li><strong>Progress Events:</strong> Clamps <code>loaded</code> to
<code>total</code> for computable upload/download progress events.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/7458">#7458</a></strong>)</li>
<li><strong>Types:</strong> Aligns <code>runWhen</code> type with the
runtime behaviour in <code>InterceptorManager</code> and makes response
header keys case-insensitive. (<strong><a
href="https://redirect.github.com/axios/axios/issues/7529">#7529</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10677">#10677</a></strong>)</li>
<li><strong><code>buildFullPath</code>:</strong> Uses strict equality in
the base/relative URL check. (<strong><a
href="https://redirect.github.com/axios/axios/issues/7252">#7252</a></strong>)</li>
<li><strong><code>AxiosURLSearchParams</code> Regex:</strong> Improves
the regex used for param serialisation to avoid edge-case mismatches.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10736">#10736</a></strong>)</li>
<li><strong>Resilient Value Parsing:</strong> Parses out header/config
values instead of throwing on malformed input. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10687">#10687</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h2>v1.15.2 - April 21, 2026</h2>
<p>This release delivers prototype-pollution hardening for the Node HTTP
adapter, adds an opt-in <code>allowedSocketPaths</code> allowlist to
mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory
leak, and ships supply-chain hardening across CI and security docs.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Prototype Pollution Hardening (HTTP Adapter):</strong>
Hardened the Node HTTP adapter and
<code>resolveConfig</code>/<code>mergeConfig</code>/validator paths to
read only own properties and use null-prototype config objects,
preventing polluted <code>auth</code>, <code>baseURL</code>,
<code>socketPath</code>, <code>beforeRedirect</code>, and
<code>insecureHTTPParser</code> from influencing requests. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10779">#10779</a></strong>)</li>
<li><strong>SSRF via <code>socketPath</code>:</strong> Rejects
non-string <code>socketPath</code> values and adds an opt-in
<code>allowedSocketPaths</code> config option to restrict permitted Unix
domain socket paths, returning <code>AxiosError</code>
<code>ERR_BAD_OPTION_VALUE</code> on mismatch. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li>
<li><strong>Supply-chain Hardening:</strong> Added <code>.npmrc</code>
with <code>ignore-scripts=true</code>, lockfile lint CI, non-blocking
reproducible build diff, scoped CODEOWNERS, expanded
<code>SECURITY.md</code>/<code>THREATMODEL.md</code> with provenance
verification (<code>npm audit signatures</code>), 60-day resolution
policy, and maintainer incident-response runbook. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10776">#10776</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong><code>allowedSocketPaths</code> Config Option:</strong> New
request config option (and TypeScript types) to allowlist Unix domain
socket paths used by the Node http adapter; backwards compatible when
unset. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10777">#10777</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Keep-alive Socket Memory Leak:</strong> Installs a single
per-socket <code>error</code> listener tracking the active request via
<code>kAxiosSocketListener</code>/<code>kAxiosCurrentReq</code>,
eliminating per-request listener accumulation,
<code>MaxListenersExceededWarning</code>, and linear heap growth under
concurrent or long-running keep-alive workloads (fixes <a
href="https://redirect.github.com/axios/axios/issues/10780">#10780</a>).
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10788">#10788</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>Changelog:</strong> Updated <code>CHANGELOG.md</code> with
v1.15.1 release notes. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10781">#10781</a></strong>)</li>
</ul>
<p><a
href="https://github.com/axios/axios/compare/v1.15.1...v1.15.2">Full
Changelog</a></p>
<hr />
<h2>v1.15.1 - April 19, 2026</h2>
<p>This release ships a coordinated set of security hardening fixes
across headers, body/redirect limits, multipart handling, and
XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes,
test migrations, and threat-model documentation updates.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>
<p><strong>Header Injection Hardening:</strong> Tightened validation and
sanitisation across request header construction to close the
header-injection attack surface. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10749">#10749</a></strong>)</p>
</li>
<li>
<p><strong>CRLF Stripping in Multipart Headers:</strong> Correctly
strips CR/LF from multipart header values to prevent injection via field
names and filenames. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10758">#10758</a></strong>)</p>
</li>
<li>
<p><strong>Prototype Pollution / Auth Bypass:</strong> Replaced unsafe
<code>in</code> checks with <code>hasOwnProperty</code> to prevent
authentication bypass via prototype pollution on config objects, with
additional regression tests. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10761">#10761</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10760">#10760</a></strong>)</p>
</li>
<li>
<p><strong><code>withXSRFToken</code> Truthy Bypass:</strong>
Short-circuits on any truthy non-boolean value, so an ambiguous config
no longer silently leaks the XSRF token cross-origin. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10762">#10762</a></strong>)</p>
</li>
<li>
<p><strong><code>maxBodyLength</code> With Zero Redirects:</strong>
Enforces <code>maxBodyLength</code> even when <code>maxRedirects</code>
is set to <code>0</code>, closing a bypass path for oversized request
bodies. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10753">#10753</a></strong>)</p>
</li>
<li>
<p><strong>Streamed Response <code>maxContentLength</code>
Bypass:</strong> Applies <code>maxContentLength</code> to streamed
responses that previously bypassed the cap. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10754">#10754</a></strong>)</p>
</li>
<li>
<p><strong>Follow-up CVE Completion:</strong> Completes an earlier
incomplete CVE fix to fully close the regression window. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10755">#10755</a></strong>)</p>
</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>AI-Based Docs Translations:</strong> Initial scaffold for
AI-assisted translations of the documentation site. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10705">#10705</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/582934382e4e0e0bcb679c628071a4203e93cf57"><code>5829343</code></a>
chore(release): prepare release 1.15.2 (<a
href="https://redirect.github.com/axios/axios/issues/10789">#10789</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/4709a48fa2717ba97f43f5432d48ca4e26c2d326"><code>4709a48</code></a>
fix: added fix for memory leak in sockets (<a
href="https://redirect.github.com/axios/axios/issues/10788">#10788</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/be3336014e01f9a4fc1f8aef15303cf7daaf58db"><code>be33360</code></a>
chore: update changelog (<a
href="https://redirect.github.com/axios/axios/issues/10781">#10781</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"><code>4791514</code></a>
fix: more header pollutions (<a
href="https://redirect.github.com/axios/axios/issues/10779">#10779</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/6feafcff6c2dbafe206161c5d09e38e1d36af66f"><code>6feafcf</code></a>
fix: socket issue (<a
href="https://redirect.github.com/axios/axios/issues/10777">#10777</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/302e2739c602f00e323d4f3f5c79500647633a73"><code>302e273</code></a>
docs: update docs, add a couple actions etc (<a
href="https://redirect.github.com/axios/axios/issues/10776">#10776</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/ac42446be51300fe214ba3c6e40cc95f34fd6871"><code>ac42446</code></a>
chore(release): prepare release 1.15.1 (<a
href="https://redirect.github.com/axios/axios/issues/10767">#10767</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/908f2206b6bfeff67236784abce85935698ac1d9"><code>908f220</code></a>
docs: update threatmodel (<a
href="https://redirect.github.com/axios/axios/issues/10765">#10765</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/f93f8155250c2e066205521eda05ae22983a1f6d"><code>f93f815</code></a>
docs: added docs around potential decompressions bomb (<a
href="https://redirect.github.com/axios/axios/issues/10763">#10763</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/1728aa1b15b8857f970611fd8983c06b423fc486"><code>1728aa1</code></a>
fix: short-circuits on any truthy non-boolean in withXSRFToken (<a
href="https://redirect.github.com/axios/axios/issues/10762">#10762</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.15.0...v1.15.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.15.0&new-version=1.15.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-05 05:09:58 +00:00
dependabot[bot] 3a59b5e4bb Bump @typescript-eslint/eslint-plugin from 8.57.0 to 8.58.0 in /frontend (#1677) 
Bumps
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
from 8.57.0 to 8.58.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/eslint-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v8.58.0</h2>
<h2>8.58.0 (2026-03-30)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support TypeScript 6 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> crash in
<code>no-unnecessary-type-arguments</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li>
<li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index
signatures (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing
unknown RegExp flags (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>ej shafran <a
href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>GG ZIBLAKING</li>
<li>milkboy2564 <a
href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li>
<li>teee32 <a
href="https://github.com/teee32"><code>@​teee32</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>v8.57.2</h2>
<h2>8.57.2 (2026-03-23)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove
dangling closing parenthesis (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li>
<li><strong>eslint-plugin:</strong> [array-type] ignore Array and
ReadonlyArray without type arguments (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned
generics in extends or implements (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on
unwrapping generic (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on
unwrapping generic (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip
reporting false positives for unresolved type parameters (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types]
preserve type alias infomation (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li>
<li><strong>typescript-estree:</strong> skip createIsolatedProgram
fallback for projectService (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>Konv Suu</li>
<li>mdm317</li>
<li>Newton Yuan <a
href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li>
<li>RyoheiYamamoto</li>
<li>SungHyun627 <a
href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li>
<li>Tamashoo <a
href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub
Releases</a> for more information.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@​typescript-eslint/eslint-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>8.58.0 (2026-03-30)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support TypeScript 6 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing
unknown RegExp flags (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li>
<li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index
signatures (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li>
<li><strong>eslint-plugin:</strong> crash in
<code>no-unnecessary-type-arguments</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>ej shafran <a
href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>GG ZIBLAKING</li>
<li>milkboy2564 <a
href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li>
<li>teee32 <a
href="https://github.com/teee32"><code>@​teee32</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.57.2 (2026-03-23)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types]
preserve type alias infomation (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip
reporting false positives for unresolved type parameters (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on
unwrapping generic (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned
generics in extends or implements (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li>
<li><strong>eslint-plugin:</strong> [array-type] ignore Array and
ReadonlyArray without type arguments (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove
dangling closing parenthesis (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>Konv Suu</li>
<li>mdm317</li>
<li>Newton Yuan <a
href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li>
<li>SungHyun627 <a
href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li>
<li>Tamashoo <a
href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.57.1 (2026-03-16)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a>
chore(release): publish 8.58.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/5a9bd366139c8e306dd78ae906d4389972de42b6"><code>5a9bd36</code></a>
fix(eslint-plugin): [prefer-regexp-exec] avoid fixing unknown RegExp
flags (#...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/edb90ebf7c75a71065bed719f3e72d18b830c6a0"><code>edb90eb</code></a>
fix(eslint-plugin): [no-extraneous-class] handle index signatures (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12142">#12142</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a>
feat: support TypeScript 6 (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12124">#12124</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/1bf86c9f5c799916d12079c037c79e10b29cdc9c"><code>1bf86c9</code></a>
fix(eslint-plugin): crash in <code>no-unnecessary-type-arguments</code>
(<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12163">#12163</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/e9cc25a794dbf82a241807f394489a2aad39ffae"><code>e9cc25a</code></a>
docs(eslint-plugin): fix typo (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12155">#12155</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a>
chore(release): publish 8.57.2</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/f68c8e4baca096281b458ccb6ff16ca6c5a1d199"><code>f68c8e4</code></a>
fix(eslint-plugin): [prefer-readonly-parameter-types] preserve type
alias inf...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/73acd2e6833c4757d2743a8dbb979154d31a1e98"><code>73acd2e</code></a>
fix(eslint-plugin): [no-useless-default-assignment] skip reporting false
posi...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/3d21482030e4fd220f466cea7036e07695277364"><code>3d21482</code></a>
fix(eslint-plugin): [no-unsafe-return] false positive on unwrapping
generic (...</li>
<li>Additional commits viewable in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/eslint-plugin">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@typescript-eslint/eslint-plugin&package-manager=npm_and_yarn&previous-version=8.57.0&new-version=8.58.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-05 05:07:04 +00:00
dependabot[bot] 17f0b797af Bump react-i18next from 16.6.2 to 17.0.1 in /frontend (#1674) 
Bumps [react-i18next](https://github.com/i18next/react-i18next) from
16.6.2 to 17.0.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.1</h2>
<ul>
<li>chore: bump minimum i18next peer dependency to <code>&gt;=
26.0.1</code> <em>(forgot to do it in last version)</em></li>
<li>fix: migrate test setup from removed legacy
<code>interpolation.format</code> to
<code>i18n.services.formatter.add()</code> (i18next v26)</li>
</ul>
<h2>17.0.0</h2>
<h3>Potentially breaking changes</h3>
<ul>
<li>fix: <code>transKeepBasicHtmlNodesFor</code> now correctly preserves
HTML tag names when children contain interpolations or mixed content <a
href="https://redirect.github.com/i18next/i18next-cli/issues/230">230</a>
<ul>
<li>Previously, <code>&lt;strong&gt;{{name}}&lt;/strong&gt;</code> was
incorrectly serialized as <code>&lt;1&gt;{{name}}&lt;/1&gt;</code> — the
tag name was only preserved for plain string children</li>
<li>This bug existed since the feature was introduced and affects
auto-generated keys (when no explicit <code>i18nKey</code> is
provided)</li>
<li>If you rely on auto-generated Trans keys containing indexed tags for
kept HTML elements with interpolation children, you will need to update
your translation files</li>
</ul>
</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>updated dev dependencies (vitest, rollup plugins, happy-dom,
typescript, etc.)</li>
</ul>
<h3>16.6.6</h3>
<ul>
<li>fix(peer-deps): bump i18next peer dependency to <code>&gt;=
25.10.9</code> to match required type exports
(<code>ConstrainTarget</code>, <code>ApplyTarget</code>,
<code>GetSource</code>) used by <code>TransSelector</code> <a
href="https://redirect.github.com/i18next/react-i18next/issues/1911">1911</a></li>
</ul>
<h3>16.6.5</h3>
<ul>
<li>fix(types): selector keyPrefix overload in
<code>useTranslation</code> no longer matches when
<code>keyPrefix</code> is absent, fixing <code>defaultNS: false</code>
with explicit <code>ns</code> option <a
href="https://redirect.github.com/i18next/i18next/issues/2412">2412</a></li>
</ul>
<h3>16.6.4</h3>
<ul>
<li>allow TypeScript 6 as peer dependency <a
href="https://redirect.github.com/i18next/react-i18next/issues/1910">1910</a></li>
</ul>
<h3>16.6.3</h3>
<ul>
<li>fix(types): merge <code>TransSelector</code> overloads into a single
signature so <code>typeof Trans</code> remains extendable <a
href="https://redirect.github.com/i18next/react-i18next/issues/1909">1909</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/23214960e3ead0b6774a1a0cb40387d41868da60"><code>2321496</code></a>
17.0.1</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/7e656b567125b059738ccd6f79b45de3767a8df4"><code>7e656b5</code></a>
chore: bump minimum i18next peer dependency</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/dfc350b2c465a7e0283c4fa5c6d83e3d447fc87a"><code>dfc350b</code></a>
upate github actions</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/7fe2620326e3027ecf4654ae739c4f74f83a5482"><code>7fe2620</code></a>
17.0.0</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/f4ada4c38c0d0fb5a992a8e76d5b510df69b257d"><code>f4ada4c</code></a>
fix: <code>transKeepBasicHtmlNodesFor</code> now correctly preserves
HTML tag names when...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/eb02c6305a9252222179bd6272c09f3e4ff9ad6a"><code>eb02c63</code></a>
16.6.6</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/76f98cdd00e12d36b99bccb18614d647f6f9ce30"><code>76f98cd</code></a>
fix(peer-deps): bump i18next peer dependency to <code>&gt;=
25.10.9</code> to match require...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/9f830e1df1f12e77365579ba0c25a814aa988493"><code>9f830e1</code></a>
16.6.5</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/9f0005f8585b2132c69f706d6fe4adf6da1d5025"><code>9f0005f</code></a>
fix(types): selector keyPrefix overload in <code>useTranslation</code>
no longer matches...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/f820b806d793f9a5bfe9c79adb6dd52527975cfa"><code>f820b80</code></a>
16.6.4</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/react-i18next/compare/v16.6.2...v17.0.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=16.6.2&new-version=17.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-28 04:48:28 +00:00
dependabot[bot] b6591d7a92 Bump @tabler/icons-react from 3.40.0 to 3.41.0 in /frontend (#1673) 
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.40.0 to 3.41.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases"><code>@​tabler/icons-react</code>'s
releases</a>.</em></p>
<blockquote>
<h2>Release 3.41.0</h2>
<!-- raw HTML omitted -->
<h3>18 new icons:</h3>
<ul>
<li><code>outline/brand-jira</code></li>
<li><code>outline/car-off-road</code></li>
<li><code>outline/car-suspension</code></li>
<li><code>outline/credit-card-hand</code></li>
<li><code>outline/device-3d-camera</code></li>
<li><code>outline/device-3d-lens</code></li>
<li><code>outline/device-screen</code></li>
<li><code>outline/iceberg</code></li>
<li><code>outline/jetski</code></li>
<li><code>outline/olympic-torch</code></li>
<li><code>outline/parking-meter</code></li>
<li><code>outline/pillow</code></li>
<li><code>outline/pipeline</code></li>
<li><code>outline/quote-open</code></li>
<li><code>outline/scan-letter-a</code></li>
<li><code>outline/scan-letter-t</code></li>
<li><code>outline/segway</code></li>
<li><code>outline/x-mark</code></li>
</ul>
<h3>New features</h3>
<ul>
<li><strong>Angular support</strong>: new
<code>@tabler/icons-angular</code> package with components, build
pipeline, unit tests, and <code>test/test-angular</code> sample app (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1091">#1091</a>).</li>
<li><strong>SVG validation</strong>: validation for
<code>&lt;g&gt;</code> elements; broader SVG icon validation
improvements (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1487">#1487</a>);
more consistent SVG path syntax (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1488">#1488</a>).</li>
<li><strong><code>icons-react</code></strong>: JSDoc with icon previews
in generated output (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1472">#1472</a>).</li>
<li><strong><code>icons-react-native</code></strong>:
<code>react-native-svg</code> added as a <strong>peer
dependency</strong> (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1475">#1475</a>).</li>
<li><strong><code>icons-solidjs</code></strong>: SSR support via
<code>rollup-preset-solid</code> and JSX/TSX component refactor (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1493">#1493</a>).</li>
</ul>
<h3>Fixed icons</h3>
<ul>
<li><strong><code>outline/brand-kbin</code></strong> and
<strong><code>outline/volume-4</code></strong>: adjusted for
compatibility with <code>buildJsIcons</code> (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1469">#1469</a>).</li>
<li><strong><code>outline/number-35-small</code></strong> through
<strong><code>outline/number-50-small</code></strong>: updated Unicode
values (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1494">#1494</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tabler/tabler-icons/commit/6cbe8857c8baa758383bb0a9e0f6922cf82da01c"><code>6cbe885</code></a>
Release 3.41.0</li>
<li><a
href="https://github.com/tabler/tabler-icons/commit/19d735e6206997fe06a42f6546188b9678ad57de"><code>19d735e</code></a>
Add JSDoc with previews in icons-react (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1472">#1472</a>)</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.41.0/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.40.0&new-version=3.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-28 04:48:07 +00:00
dependabot[bot] a158f25616 Bump postcss from 8.5.0 to 8.5.10 in /frontend (#1672) 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.0 to
8.5.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.10</h2>
<ul>
<li>Fixed XSS via unescaped <code>&lt;/style&gt;</code> in non-bundler
cases (by <a
href="https://github.com/TharVid"><code>@​TharVid</code></a>).</li>
</ul>
<h2>8.5.9</h2>
<ul>
<li>Speed up source map encoding paring in case of the error.</li>
</ul>
<h2>8.5.8</h2>
<ul>
<li>Fixed <code>Processor#version</code>.</li>
</ul>
<h2>8.5.7</h2>
<ul>
<li>Improved source map annotation cleaning performance (by CodeAnt
AI).</li>
</ul>
<h2>8.5.6</h2>
<ul>
<li>Fixed <code>ContainerWithChildren</code> type discriminating (by <a
href="https://github.com/Goodwine"><code>@​Goodwine</code></a>).</li>
</ul>
<h2>8.5.5</h2>
<ul>
<li>Fixed <code>package.json</code>→<code>exports</code> compatibility
with some tools (by <a
href="https://github.com/JounQin"><code>@​JounQin</code></a>).</li>
</ul>
<h2>8.5.4</h2>
<ul>
<li>Fixed Parcel compatibility issue (by <a
href="https://github.com/git-sumitchaudhary"><code>@​git-sumitchaudhary</code></a>).</li>
</ul>
<h2>8.5.3</h2>
<ul>
<li>Added more details to <code>Unknown word</code> error (by <a
href="https://github.com/hiepxanh"><code>@​hiepxanh</code></a>).</li>
<li>Fixed types (by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/catnipan"><code>@​catnipan</code></a>).</li>
</ul>
<h2>8.5.2</h2>
<ul>
<li>Fixed end position of rules with semicolon (by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
</ul>
<h2>8.5.1</h2>
<ul>
<li>Fixed backwards compatibility for complex cases (by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.10</h2>
<ul>
<li>Fixed XSS via unescaped <code>&lt;/style&gt;</code> in non-bundler
cases (by <a
href="https://github.com/TharVid"><code>@​TharVid</code></a>).</li>
</ul>
<h2>8.5.9</h2>
<ul>
<li>Speed up source map encoding paring in case of the error.</li>
</ul>
<h2>8.5.8</h2>
<ul>
<li>Fixed <code>Processor#version</code>.</li>
</ul>
<h2>8.5.7</h2>
<ul>
<li>Improved source map annotation cleaning performance (by CodeAnt
AI).</li>
</ul>
<h2>8.5.6</h2>
<ul>
<li>Fixed <code>ContainerWithChildren</code> type discriminating (by <a
href="https://github.com/Goodwine"><code>@​Goodwine</code></a>).</li>
</ul>
<h2>8.5.5</h2>
<ul>
<li>Fixed <code>package.json</code>→<code>exports</code> compatibility
with some tools (by <a
href="https://github.com/JounQin"><code>@​JounQin</code></a>).</li>
</ul>
<h2>8.5.4</h2>
<ul>
<li>Fixed Parcel compatibility issue (by <a
href="https://github.com/git-sumitchaudhary"><code>@​git-sumitchaudhary</code></a>).</li>
</ul>
<h2>8.5.3</h2>
<ul>
<li>Added more details to <code>Unknown word</code> error (by <a
href="https://github.com/hiepxanh"><code>@​hiepxanh</code></a>).</li>
<li>Fixed types (by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/catnipan"><code>@​catnipan</code></a>).</li>
</ul>
<h2>8.5.2</h2>
<ul>
<li>Fixed end position of rules with semicolon (by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
</ul>
<h2>8.5.1</h2>
<ul>
<li>Fixed backwards compatibility for complex cases (by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
</ul>
<h2>8.5 “Duke Alloces”</h2>
<ul>
<li>Added <code>Input#document</code> for sources like CSS-in-JS or HTML
(by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
</ul>
<h2>8.4.49</h2>
<ul>
<li>Fixed custom syntax without <code>source.offset</code> (by <a
href="https://github.com/romainmenke"><code>@​romainmenke</code></a>).</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/33b9790263dc1562a46ce45d9532bd63e95b7986"><code>33b9790</code></a>
Release 8.5.10 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/536c79e4b01e58a3a56b09c3c0cf2323f4b9a28b"><code>536c79e</code></a>
Escape &lt;/style&gt; in CSS output (<a
href="https://redirect.github.com/postcss/postcss/issues/2074">#2074</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/afa96b2a139ce625c4d27973313479c7c85f39d4"><code>afa96b2</code></a>
Update dependencies (<a
href="https://redirect.github.com/postcss/postcss/issues/2073">#2073</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/effe88bb87cabdc1876e02adbdd30f392f19f40d"><code>effe88b</code></a>
Typo (<a
href="https://redirect.github.com/postcss/postcss/issues/2072">#2072</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/3ee79a2c4a11e41d52db50b444eebe38299495ad"><code>3ee79a2</code></a>
Thread model (<a
href="https://redirect.github.com/postcss/postcss/issues/2071">#2071</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/2e0683daca4dc2919211b03774f6b2d137136c01"><code>2e0683d</code></a>
Create incident response docs (<a
href="https://redirect.github.com/postcss/postcss/issues/2070">#2070</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/fe88ac29c06b7b218be32994cdc6ca1525bdf2c9"><code>fe88ac2</code></a>
Release 8.5.9 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/c551632496b87ab3f1965bfda5dc386b6c71963e"><code>c551632</code></a>
Avoid RegExp when we can use simple JS</li>
<li><a
href="https://github.com/postcss/postcss/commit/89a6b744060eb8dee743351c785a9fbe37d4525a"><code>89a6b74</code></a>
Move SECURITY.txt for docs folder to keep GitHub page cleaner</li>
<li><a
href="https://github.com/postcss/postcss/commit/6ceb8a46af9f9de821faee98f861bdf84617347b"><code>6ceb8a4</code></a>
Create SECURITY.md</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.0...8.5.10">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.0&new-version=8.5.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-24 23:54:18 +00:00
dependabot[bot] 6cb1ffffb3 Bump i18next-http-backend from 3.0.2 to 3.0.5 in /frontend (#1669) 
Bumps
[i18next-http-backend](https://github.com/i18next/i18next-http-backend)
from 3.0.2 to 3.0.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md">i18next-http-backend's
changelog</a>.</em></p>
<blockquote>
<h3>3.0.5</h3>
<p>Security release — all issues found via an internal audit. See
published advisory <a
href="https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-q89c-q3h5-w34g">GHSA-q89c-q3h5-w34g</a>.</p>
<ul>
<li>security: refuse to build request URLs when <code>lng</code> or
<code>ns</code> values contain path-traversal, URL-structure
(<code>?</code>, <code>#</code>, <code>%</code>, <code>@</code>,
whitespace), path separators, control characters, prototype keys, or
exceed 128 chars. Prevents path traversal / SSRF / URL injection via
attacker-controlled language-code values. <code>isSafeUrlSegment</code>
is permissive for legitimate i18next language codes (any BCP-47-like
shape, underscores, hyphens, dots, <code>+</code>-joined multi-language
requests) (<a
href="https://github.com/i18next/i18next-http-backend/security/advisories/GHSA-q89c-q3h5-w34g">GHSA-q89c-q3h5-w34g</a>)</li>
<li>security: per-instance <code>omitFetchOptions</code> — the
fetch-options-stripping fallback is now scoped to a single backend
instance via <code>options._omitFetchOptions</code> instead of a
module-level boolean. One instance hitting a &quot;not implemented&quot;
fetch error no longer permanently strips <code>requestOptions</code>
(including <code>credentials</code>, <code>mode</code>,
<code>cache</code>) from every other backend instance in the same
process</li>
<li>security: strip CR/LF/NUL and other C0/C1 control characters from
<code>lng</code>/<code>ns</code> / URL values before they appear in
error-callback strings (CWE-117 log forging)</li>
<li>security: redact <code>user:password</code> credentials from URLs
before including them in error-callback strings — prevents leaking
basic-auth credentials embedded in <code>loadPath</code> /
<code>addPath</code></li>
<li>security: iterate own enumerable keys only (<code>Object.keys</code>
+ prototype-key guard) in <code>addQueryString</code> and in the
<code>customHeaders</code> loop in XHR mode — prevents
prototype-pollution amplification into the URL and request headers</li>
<li>chore: ignore <code>.env*</code> and
<code>*.pem</code>/<code>*.key</code> files in
<code>.gitignore</code></li>
</ul>
<h3>3.0.4</h3>
<ul>
<li>use own interpolation function for loadPath and addPath instead of
relying on i18next's interpolator <a
href="https://redirect.github.com/i18next/i18next/issues/2420">i18next#2420</a>
— this means only <code>{{lng}}</code> and <code>{{ns}}</code>
placeholders are supported; custom interpolation prefix/suffix from
i18next config no longer applies to backend paths</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/5757fa3283bff31bd75e75598c3bcb44179bd892"><code>5757fa3</code></a>
3.0.5</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/4cee84f229c637b9c182366d3156f726d407a621"><code>4cee84f</code></a>
security: hardening for 3.0.5</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/4cbc48741128d9b1f6cceb43edabfbec84c92615"><code>4cbc487</code></a>
Bump next from 16.2.1 to 16.2.3 in /example/next (<a
href="https://redirect.github.com/i18next/i18next-http-backend/issues/180">#180</a>)</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/0d7dcbb09989d358b3af9a67658469ae8ed361dc"><code>0d7dcbb</code></a>
make last change more clear</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/c740e013ab5ff4ea3a71f9e0842a302bdf4147ae"><code>c740e01</code></a>
year</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/e1dc72b3fb016932959d2bf796d94985baca7050"><code>e1dc72b</code></a>
changelog fix</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/4dbb4851ff53b0058d8f0a254779b45c839e6c24"><code>4dbb485</code></a>
3.0.4</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/5f33a0c2d72f8f9c1e0add30b9b75a0c2edeb7b6"><code>5f33a0c</code></a>
use own interpolation function for loadPath and addPath instead of
relying on...</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/681c09d12ebfafef09351b784d2e7b250328879f"><code>681c09d</code></a>
update ci actions</li>
<li><a
href="https://github.com/i18next/i18next-http-backend/commit/e63ff163717ba02c589e27fa81cc881add892fbd"><code>e63ff16</code></a>
adjust deno test</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next-http-backend/compare/v3.0.2...v3.0.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-http-backend&package-manager=npm_and_yarn&previous-version=3.0.2&new-version=3.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-22 18:11:49 +00:00
Erik Vroon aa5ff361a7 Update deps (#1663) 2026-04-16 12:49:05 +02:00
dependabot[bot] 737ba642f3 Bump @vitejs/plugin-react from 5.2.0 to 6.0.1 in /frontend (#1658) 
Bumps
[@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react)
from 5.2.0 to 6.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/releases"><code>@​vitejs/plugin-react</code>'s
releases</a>.</em></p>
<blockquote>
<h2>plugin-react@6.0.1</h2>
<h3>Expand <code>@rolldown/plugin-babel</code> peer dep range (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1146">#1146</a>)</h3>
<p>Expanded <code>@rolldown/plugin-babel</code> peer dep range to
include <code>^0.2.0</code>.</p>
<h2>plugin-react@6.0.0</h2>
<h3>Remove Babel Related Features (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1123">#1123</a>)</h3>
<p>Vite 8+ can handle React Refresh Transform by Oxc and doesn't need
Babel for it. With that, there are no transform applied that requires
Babel. To reduce the installation size of this plugin, babel is no
longer a dependency of this plugin and the related features are
removed.</p>
<p>If you are using Babel, you can use
<code>@rolldown/plugin-babel</code> together with this plugin:</p>
<pre lang="diff"><code> import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
<p>export default defineConfig({
plugins: [</p>
<ul>
<li>
<pre><code>react({
</code></pre>
</li>
<li>
<pre><code>  babel: {
</code></pre>
</li>
<li>
<pre><code>    plugins: ['@babel/plugin-proposal-throw-expressions'],
</code></pre>
</li>
<li>
<pre><code>  },
</code></pre>
</li>
<li>
<pre><code>}),
</code></pre>
</li>
</ul>
<ul>
<li>
<pre><code>react(),
</code></pre>
</li>
<li>
<pre><code>babel({
</code></pre>
</li>
<li>
<pre><code>  plugins: ['@babel/plugin-proposal-throw-expressions'],
</code></pre>
</li>
<li>
<pre><code>}),
</code></pre>
]
})
</code></pre></li>
</ul>
<p>For React compiler users, you can use
<code>reactCompilerPreset</code> for easier setup with preconfigured
filter to improve build performance:</p>
<pre lang="diff"><code> import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
<p>export default defineConfig({
plugins: [</p>
<ul>
<li>react({</li>
<li>
<pre><code> babel: {
</code></pre>
</li>
<li>
<pre><code>   plugins: ['babel-plugin-react-compiler'],
</code></pre>
</li>
<li>
<pre><code> },
</code></pre>
</li>
<li>}),</li>
</ul>
<ul>
<li>react(),</li>
<li>babel({</li>
<li>
<pre><code> presets: [reactCompilerPreset()]
</code></pre>
</li>
</ul>
<p>&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md"><code>@​vitejs/plugin-react</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>6.0.1 (2026-03-13)</h2>
<h3>Expand <code>@rolldown/plugin-babel</code> peer dep range (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1146">#1146</a>)</h3>
<p>Expanded <code>@rolldown/plugin-babel</code> peer dep range to
include <code>^0.2.0</code>.</p>
<h2>6.0.0 (2026-03-12)</h2>
<h2>6.0.0-beta.0 (2026-03-03)</h2>
<h3>Remove Babel Related Features (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1123">#1123</a>)</h3>
<p>Vite 8+ can handle React Refresh Transform by Oxc and doesn't need
Babel for it. With that, there are no transform applied that requires
Babel. To reduce the installation size of this plugin, babel is no
longer a dependency of this plugin and the related features are
removed.</p>
<p>If you are using Babel, you can use
<code>@rolldown/plugin-babel</code> together with this plugin:</p>
<pre lang="diff"><code> import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
<p>export default defineConfig({
plugins: [</p>
<ul>
<li>
<pre><code>react({
</code></pre>
</li>
<li>
<pre><code>  babel: {
</code></pre>
</li>
<li>
<pre><code>    plugins: ['@babel/plugin-proposal-throw-expressions'],
</code></pre>
</li>
<li>
<pre><code>  },
</code></pre>
</li>
<li>
<pre><code>}),
</code></pre>
</li>
</ul>
<ul>
<li>
<pre><code>react(),
</code></pre>
</li>
<li>
<pre><code>babel({
</code></pre>
</li>
<li>
<pre><code>  plugins: ['@babel/plugin-proposal-throw-expressions'],
</code></pre>
</li>
<li>
<pre><code>}),
</code></pre>
]
})
</code></pre></li>
</ul>
<p>For React compiler users, you can use
<code>reactCompilerPreset</code> for easier setup with preconfigured
filter to improve build performance:</p>
<pre lang="diff"><code> import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
<p>export default defineConfig({
plugins: [</p>
<ul>
<li>react({</li>
<li>
<pre><code> babel: {
</code></pre>
</li>
<li>
<pre><code>   plugins: ['babel-plugin-react-compiler'],
</code></pre>
</li>
<li>
<pre><code> },
</code></pre>
</li>
</ul>
<p>&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/1e94c06995c2afe2d1fee5aea2ef9720d35a7e02"><code>1e94c06</code></a>
release: plugin-react@6.0.1</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/77c00c007263e963dc7f6f108d1add8afb3f1d4a"><code>77c00c0</code></a>
feat(plugin-react): expand <code>@rolldown/plugin-babel</code> peer dep
range (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1146">#1146</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/dcc901236079ef7fa99139f7ba7beebac583f301"><code>dcc9012</code></a>
release: plugin-react@6.0.0</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/3a17886073e4f44fb039981492d982d36481b176"><code>3a17886</code></a>
docs: add a link to the Oxlint rule for component exports alongside the
ESLin...</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/f812135f84907947406cab5913b6d868685db585"><code>f812135</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1140">#1140</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/a0329a082450b3d2293f43fc9fed224506a131b4"><code>a0329a0</code></a>
docs(react): clarify react compiler preset filter (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1137">#1137</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/704e0d388b3ecf56d08d3c7aa128c832d38f497e"><code>704e0d3</code></a>
release: plugin-react@6.0.0-beta.0</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/ac16acc03798aa5f1cb8dc766106b2c34eaeb06c"><code>ac16acc</code></a>
feat(react)!: remove babel (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1123">#1123</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/f01b30cd09ea3bf758993aaa29fda7f588f76ab9"><code>f01b30c</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1127">#1127</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/b1014bd5582627aaa38a0bef8aaab1ef2522769b"><code>b1014bd</code></a>
chore(react): add changelog for <a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1124">#1124</a></li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@vitejs/plugin-react&package-manager=npm_and_yarn&previous-version=5.2.0&new-version=6.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-12 14:07:28 +00:00
dependabot[bot]copilot-swe-agent[bot]evroon
 		3754040f22 Bump vite from 7.3.2 to 8.0.5 in /frontend (#1641) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 7.3.2 to 8.0.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@8.0.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.0.3/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.3/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@8.0.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.0.2/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@8.0.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.0.1/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.0.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.0.1/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@8.0.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.0.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.0.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.0.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.0-beta.18</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.0-beta.18/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.0-beta.17</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.0-beta.17/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.0-beta.16</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.0-beta.16/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.0-beta.15</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.0-beta.15/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.0-beta.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.0-beta.14/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.4...v8.0.5">8.0.5</a>
(2026-04-06)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li>apply server.fs check to env transport (<a
href="https://redirect.github.com/vitejs/vite/issues/22159">#22159</a>)
(<a
href="https://github.com/vitejs/vite/commit/f02d9fde0b195afe3ea2944414186962fbbe41e0">f02d9fd</a>)</li>
<li>avoid path traversal with optimize deps sourcemap handler (<a
href="https://redirect.github.com/vitejs/vite/issues/22161">#22161</a>)
(<a
href="https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694">79f002f</a>)</li>
<li>check <code>server.fs</code> after stripping query as well (<a
href="https://redirect.github.com/vitejs/vite/issues/22160">#22160</a>)
(<a
href="https://github.com/vitejs/vite/commit/a9a3df299378d9cbc5f069e3536a369f8188c8ff">a9a3df2</a>)</li>
<li>disallow referencing files outside the package from sourcemap (<a
href="https://redirect.github.com/vitejs/vite/issues/22158">#22158</a>)
(<a
href="https://github.com/vitejs/vite/commit/f05f50173461789e0f1323fe06b51f18ca41c132">f05f501</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.3...v8.0.4">8.0.4</a>
(2026-04-06)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>allow esbuild 0.28 as peer deps (<a
href="https://redirect.github.com/vitejs/vite/issues/22155">#22155</a>)
(<a
href="https://github.com/vitejs/vite/commit/b0da97372f5dba73e78035d1cc7680466ff6cf7f">b0da973</a>)</li>
<li><strong>hmr:</strong> truncate list of files on hmr update (<a
href="https://redirect.github.com/vitejs/vite/issues/21535">#21535</a>)
(<a
href="https://github.com/vitejs/vite/commit/d00e806d7be15ebbfe7875e9244963d80ee8b142">d00e806</a>)</li>
<li><strong>optimizer:</strong> log when dependency scanning or bundling
takes over 1s (<a
href="https://redirect.github.com/vitejs/vite/issues/21797">#21797</a>)
(<a
href="https://github.com/vitejs/vite/commit/f61a1ab33b05dc6f6a7eda6e8bc9c4c5b9aab133">f61a1ab</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><code>hasBothRollupOptionsAndRolldownOptions</code> should return
<code>false</code> for proxy case (<a
href="https://redirect.github.com/vitejs/vite/issues/22043">#22043</a>)
(<a
href="https://github.com/vitejs/vite/commit/99897d27b44dd73307fa03e2f11f0baa1a1dc939">99897d2</a>)</li>
<li>add types for <code>vite/modulepreload-polyfill</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22126">#22126</a>)
(<a
href="https://github.com/vitejs/vite/commit/17330d2b9e132460f194d6d4b547cfee7e25c788">17330d2</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22073">#22073</a>)
(<a
href="https://github.com/vitejs/vite/commit/6daa10ff1e8d15a90f49d8dd909ff208da85d6d8">6daa10f</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22143">#22143</a>)
(<a
href="https://github.com/vitejs/vite/commit/22b016612703320db45c64a2fe44472051ef5ec5">22b0166</a>)</li>
<li><strong>resolve:</strong> resolve tsconfig paths starting with
<code>#</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/22038">#22038</a>)
(<a
href="https://github.com/vitejs/vite/commit/3460fc55aa89aef4103d2c05ac2e446032511a6d">3460fc5</a>)</li>
<li><strong>ssr:</strong> use browser platform for webworker SSR builds
(fix <a
href="https://redirect.github.com/vitejs/vite/issues/21969">#21969</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/21963">#21963</a>)
(<a
href="https://github.com/vitejs/vite/commit/364c2273a121dad4d93ec3b9ec87ffbe0d6e860b">364c227</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>add <code>environment.fetchModule</code> documentation (<a
href="https://redirect.github.com/vitejs/vite/issues/22035">#22035</a>)
(<a
href="https://github.com/vitejs/vite/commit/54229e78631ebf10d1db767b51ea85f3cf06718a">54229e7</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/21989">#21989</a>)
(<a
href="https://github.com/vitejs/vite/commit/0ded6274579e8bda6b22a7ba93b15d15b4c28b78">0ded627</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li>upgrade to typescript 6 (<a
href="https://redirect.github.com/vitejs/vite/issues/22110">#22110</a>)
(<a
href="https://github.com/vitejs/vite/commit/cc41398c2cf0bb5061cf0ca5dc3b408ae7e41191">cc41398</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.2...v8.0.3">8.0.3</a>
(2026-03-26)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>update rolldown to 1.0.0-rc.12 (<a
href="https://redirect.github.com/vitejs/vite/issues/22024">#22024</a>)
(<a
href="https://github.com/vitejs/vite/commit/84164ef47b24b1de114f1c29446a9e650825d4ea">84164ef</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>html:</strong> cache unfiltered CSS list to prevent missing
styles across entries (<a
href="https://redirect.github.com/vitejs/vite/issues/22017">#22017</a>)
(<a
href="https://github.com/vitejs/vite/commit/5464190a3ee8f23db20004e7818186fbcc32b0e5">5464190</a>)</li>
<li><strong>module-runner:</strong> handle non-ascii characters in
base64 sourcemaps (<a
href="https://redirect.github.com/vitejs/vite/issues/21985">#21985</a>)
(<a
href="https://github.com/vitejs/vite/commit/77c95bff834c43f8be9fe513c10b5393805a7487">77c95bf</a>)</li>
<li><strong>module-runner:</strong> skip re-import if the runner is
closed (<a
href="https://redirect.github.com/vitejs/vite/issues/22020">#22020</a>)
(<a
href="https://github.com/vitejs/vite/commit/ee2c2cd2c2ce3f53088bd2313fa23e9d52a49b4f">ee2c2cd</a>)</li>
<li><strong>optimizer:</strong> scan is not resolving sub path import if
used in a glob import (<a
href="https://redirect.github.com/vitejs/vite/issues/22018">#22018</a>)
(<a
href="https://github.com/vitejs/vite/commit/ddfe20d19e95a323fa3c8d2c19a02c4e02f93824">ddfe20d</a>)</li>
<li><strong>ssr:</strong> ssrTransform incorrectly rewrites
<code>meta</code> identifier inside <code>import.meta</code> when a
binding named <code>meta</code> exists (<a
href="https://redirect.github.com/vitejs/vite/issues/22019">#22019</a>)
(<a
href="https://github.com/vitejs/vite/commit/cff5f0cca5f08c2ce50f233441485e10b6e115e9">cff5f0c</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/1a12d4ca4c62eedaeaf734d722b27ab17b5b1dd0"><code>1a12d4c</code></a>
release: v8.0.5</li>
<li><a
href="https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694"><code>79f002f</code></a>
fix: avoid path traversal with optimize deps sourcemap handler (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161">#22161</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/a9a3df299378d9cbc5f069e3536a369f8188c8ff"><code>a9a3df2</code></a>
fix: check <code>server.fs</code> after stripping query as well (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22160">#22160</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/f02d9fde0b195afe3ea2944414186962fbbe41e0"><code>f02d9fd</code></a>
fix: apply server.fs check to env transport (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159">#22159</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/f05f50173461789e0f1323fe06b51f18ca41c132"><code>f05f501</code></a>
fix: disallow referencing files outside the package from sourcemap (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22158">#22158</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/7339bdc915c297e16e6530f6ebcbb2509cb57f24"><code>7339bdc</code></a>
release: v8.0.4</li>
<li><a
href="https://github.com/vitejs/vite/commit/54229e78631ebf10d1db767b51ea85f3cf06718a"><code>54229e7</code></a>
docs: add <code>environment.fetchModule</code> documentation (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22035">#22035</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/b0da97372f5dba73e78035d1cc7680466ff6cf7f"><code>b0da973</code></a>
feat: allow esbuild 0.28 as peer deps (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22155">#22155</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/22b016612703320db45c64a2fe44472051ef5ec5"><code>22b0166</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22143">#22143</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/17330d2b9e132460f194d6d4b547cfee7e25c788"><code>17330d2</code></a>
fix: add types for <code>vite/modulepreload-polyfill</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22126">#22126</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.0.5/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=7.3.2&new-version=8.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: evroon <11857441+evroon@users.noreply.github.com>
 2026-04-12 07:21:12 +00:00
dependabot[bot] cbee85a53d Bump axios from 1.14.0 to 1.15.0 in /frontend (#1655) 
Bumps [axios](https://github.com/axios/axios) from 1.14.0 to 1.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.15.0</h2>
<p>This release delivers two critical security patches, adds runtime
support for Deno and Bun, and includes significant CI hardening,
documentation improvements, and routine dependency updates.</p>
<h2>⚠️ Important Changes</h2>
<ul>
<li><strong>Deprecation:</strong> <code>url.parse()</code> usage has
been replaced to address Node.js deprecation warnings. If you are on a
recent version of Node.js, this resolves console warnings you may have
been seeing. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10625">#10625</a></strong>)</li>
</ul>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Proxy Handling:</strong> Fixed a <code>no_proxy</code>
hostname normalisation bypass that could lead to Server-Side Request
Forgery (SSRF). (<strong><a
href="https://redirect.github.com/axios/axios/issues/10661">#10661</a></strong>)</li>
<li><strong>Header Injection:</strong> Fixed an unrestricted cloud
metadata exfiltration vulnerability via a header injection chain.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10660">#10660</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>Runtime Support:</strong> Added compatibility checks and
documentation for Deno and Bun environments. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10652">#10652</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10653">#10653</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>CI Security:</strong> Hardened workflow permissions to least
privilege, added the <code>zizmor</code> security scanner, pinned action
versions, and gated npm publishing with OIDC and environment protection.
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10618">#10618</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10619">#10619</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10627">#10627</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10637">#10637</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10666">#10666</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped
<code>serialize-javascript</code>, <code>handlebars</code>,
<code>picomatch</code>, <code>vite</code>, and
<code>denoland/setup-deno</code> to latest versions. Added a 7-day
Dependabot cooldown period. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10574">#10574</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10572">#10572</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10568">#10568</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10663">#10663</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10664">#10664</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10665">#10665</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10669">#10669</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10670">#10670</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10616">#10616</a></strong>)</li>
<li><strong>Documentation:</strong> Unified docs, improved
<code>beforeRedirect</code> credential leakage example, clarified
<code>withCredentials</code>/<code>withXSRFToken</code> behaviour,
HTTP/2 support notes, async/await timeout error handling, header case
preservation, and various typo fixes. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10649">#10649</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10624">#10624</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/7452">#7452</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/7471">#7471</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10654">#10654</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10644">#10644</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10589">#10589</a></strong>)</li>
<li><strong>Housekeeping:</strong> Removed stale files, regenerated
lockfile, and updated sponsor scripts and blocks. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10584">#10584</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10650">#10650</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10582">#10582</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10640">#10640</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10659">#10659</a></strong>,
<strong><a
href="https://redirect.github.com/axios/axios/issues/10668">#10668</a></strong>)</li>
<li><strong>Tests:</strong> Added regression coverage for urlencoded
<code>Content-Type</code> casing. (<strong><a
href="https://redirect.github.com/axios/axios/issues/10573">#10573</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><strong><a
href="https://github.com/raashish1601"><code>@​raashish1601</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10573">#10573</a></strong>)</li>
<li><strong><a
href="https://github.com/Kilros0817"><code>@​Kilros0817</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10625">#10625</a></strong>)</li>
<li><strong><a
href="https://github.com/ashstrc"><code>@​ashstrc</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10624">#10624</a></strong>)</li>
<li><strong><a
href="https://github.com/Abhi3975"><code>@​Abhi3975</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/10589">#10589</a></strong>)</li>
<li><strong><a
href="https://github.com/theamodhshetty"><code>@​theamodhshetty</code></a></strong>
(<strong><a
href="https://redirect.github.com/axios/axios/issues/7452">#7452</a></strong>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2><a
href="https://github.com/axios/axios/compare/v1.13.2...v1.13.3">1.13.3</a>
(2026-01-20)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http2:</strong> Use port 443 for HTTPS connections by
default. (<a
href="https://redirect.github.com/axios/axios/issues/7256">#7256</a>)
(<a
href="https://github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e">d7e6065</a>)</li>
<li><strong>interceptor:</strong> handle the error in the same
interceptor (<a
href="https://redirect.github.com/axios/axios/issues/6269">#6269</a>)
(<a
href="https://github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89">5945e40</a>)</li>
<li>main field in package.json should correspond to cjs artifacts (<a
href="https://redirect.github.com/axios/axios/issues/5756">#5756</a>)
(<a
href="https://github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04">7373fbf</a>)</li>
<li><strong>package.json:</strong> add 'bun' package.json 'exports'
condition. Load the Node.js build in Bun instead of the browser build
(<a
href="https://redirect.github.com/axios/axios/issues/5754">#5754</a>)
(<a
href="https://github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8">b89217e</a>)</li>
<li>silentJSONParsing=false should throw on invalid JSON (<a
href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/7257">#7257</a>)
(<a
href="https://github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf">7d19335</a>)</li>
<li>turn AxiosError into a native error (<a
href="https://redirect.github.com/axios/axios/issues/5394">#5394</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/5558">#5558</a>)
(<a
href="https://github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b">1c6a86d</a>)</li>
<li><strong>types:</strong> add handlers to AxiosInterceptorManager
interface (<a
href="https://redirect.github.com/axios/axios/issues/5551">#5551</a>)
(<a
href="https://github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a">8d1271b</a>)</li>
<li><strong>types:</strong> restore AxiosError.cause type from unknown
to Error (<a
href="https://redirect.github.com/axios/axios/issues/7327">#7327</a>)
(<a
href="https://github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b">d8233d9</a>)</li>
<li>unclear error message is thrown when specifying an empty proxy
authorization (<a
href="https://redirect.github.com/axios/axios/issues/6314">#6314</a>)
(<a
href="https://github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29">6ef867e</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>add <code>undefined</code> as a value in AxiosRequestConfig (<a
href="https://redirect.github.com/axios/axios/issues/5560">#5560</a>)
(<a
href="https://github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd">095033c</a>)</li>
<li>add automatic minor and patch upgrades to dependabot (<a
href="https://redirect.github.com/axios/axios/issues/6053">#6053</a>)
(<a
href="https://github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed">65a7584</a>)</li>
<li>add Node.js coverage script using c8 (closes <a
href="https://redirect.github.com/axios/axios/issues/7289">#7289</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/7294">#7294</a>)
(<a
href="https://github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a">ec9d94e</a>)</li>
<li>added copilot instructions (<a
href="https://github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26">3f83143</a>)</li>
<li>compatibility with frozen prototypes (<a
href="https://redirect.github.com/axios/axios/issues/6265">#6265</a>)
(<a
href="https://github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012">860e033</a>)</li>
<li>enhance pipeFileToResponse with error handling (<a
href="https://redirect.github.com/axios/axios/issues/7169">#7169</a>)
(<a
href="https://github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552">88d7884</a>)</li>
<li><strong>types:</strong> Intellisense for string literals in a
widened union (<a
href="https://redirect.github.com/axios/axios/issues/6134">#6134</a>)
(<a
href="https://github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5">f73474d</a>),
closes <a
href="https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329">microsoft/TypeScript#33471</a></li>
</ul>
<h3>Reverts</h3>
<ul>
<li>Revert &quot;fix: silentJSONParsing=false should throw on invalid
JSON (<a
href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/7">#7</a>…&quot;
(<a
href="https://redirect.github.com/axios/axios/issues/7298">#7298</a>)
(<a
href="https://github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a">a4230f5</a>),
closes <a
href="https://redirect.github.com/axios/axios/issues/7253">#7253</a> <a
href="https://redirect.github.com/axios/axios/issues/7">#7</a> <a
href="https://redirect.github.com/axios/axios/issues/7298">#7298</a></li>
<li><strong>deps:</strong> bump peter-evans/create-pull-request from 7
to 8 in the github-actions group (<a
href="https://redirect.github.com/axios/axios/issues/7334">#7334</a>)
(<a
href="https://github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a">2d6ad5e</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li><!-- raw HTML omitted --> <a href="https://github.com/ashvin2005"
title="+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218)
[#7218](https://github.com/axios/axios/issues/7218) )">Ashvin
Tiwari</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/mochinikunj"
title="+940/-12 ([#7294](https://github.com/axios/axios/issues/7294)
[#7294](https://github.com/axios/axios/issues/7294) )">Nikunj
Mochi</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/imanchalsingh"
title="+544/-102 ([#7169](https://github.com/axios/axios/issues/7169)
[#7185](https://github.com/axios/axios/issues/7185) )">Anchal
Singh</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/jasonsaayman"
title="+317/-73 ([#7334](https://github.com/axios/axios/issues/7334)
[#7298](https://github.com/axios/axios/issues/7298)
)">jasonsaayman</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/brodo"
title="+99/-120 ([#5558](https://github.com/axios/axios/issues/5558)
)">Julian Dax</a></li>
<li><!-- raw HTML omitted --> <a
href="https://github.com/AKASHDHARDUBEY" title="+167/-0
([#7287](https://github.com/axios/axios/issues/7287)
[#7288](https://github.com/axios/axios/issues/7288) )">Akash Dhar
Dubey</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/madhumitaaa"
title="+20/-68 ([#7198](https://github.com/axios/axios/issues/7198)
)">Madhumita</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/Tackoil"
title="+80/-2 ([#6269](https://github.com/axios/axios/issues/6269)
)">Tackoil</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/justindhillon"
title="+41/-41 ([#6324](https://github.com/axios/axios/issues/6324)
[#6315](https://github.com/axios/axios/issues/6315) )">Justin
Dhillon</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/Rudrxxx"
title="+71/-2 ([#7257](https://github.com/axios/axios/issues/7257)
)">Rudransh</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/WuMingDao"
title="+36/-36 ([#7215](https://github.com/axios/axios/issues/7215)
)">WuMingDao</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/codenomnom"
title="+70/-0 ([#7201](https://github.com/axios/axios/issues/7201)
[#7201](https://github.com/axios/axios/issues/7201)
)">codenomnom</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/Nandann018-ux"
title="+60/-10 ([#7272](https://github.com/axios/axios/issues/7272)
)">Nandan Acharya</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/KernelDeimos"
title="+22/-40 ([#7042](https://github.com/axios/axios/issues/7042)
)">Eric Dubé</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/tiborpilz"
title="+40/-4 ([#5551](https://github.com/axios/axios/issues/5551)
)">Tibor Pilz</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/joaoGabriel55"
title="+31/-4 ([#6314](https://github.com/axios/axios/issues/6314)
)">Gabriel Quaresma</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/turadg"
title="+23/-6 ([#6265](https://github.com/axios/axios/issues/6265)
)">Turadg Aleahmad</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/772a4e54ecc4cc2421e2b746daff0aca10f359d7"><code>772a4e5</code></a>
chore(release): prepare release 1.15.0 (<a
href="https://redirect.github.com/axios/axios/issues/10671">#10671</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/4b071371be2f810b4bc7797a13838e0f806ebb22"><code>4b07137</code></a>
chore(deps-dev): bump vite from 8.0.0 to 8.0.5 in /tests/smoke/esm (<a
href="https://redirect.github.com/axios/axios/issues/10663">#10663</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/51e57b39db251bfe3d34af5c943dfea18e06c8b6"><code>51e57b3</code></a>
chore(deps-dev): bump vite from 8.0.2 to 8.0.5 (<a
href="https://redirect.github.com/axios/axios/issues/10664">#10664</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/fba1a77930f0c459677b729161627234b88c90aa"><code>fba1a77</code></a>
chore(deps-dev): bump vite from 8.0.2 to 8.0.5 in /tests/module/esm (<a
href="https://redirect.github.com/axios/axios/issues/10665">#10665</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/0bf6e28eac86e87da2b60bbf5ea4237910e1a08e"><code>0bf6e28</code></a>
chore(deps): bump denoland/setup-deno in the github-actions group (<a
href="https://redirect.github.com/axios/axios/issues/10669">#10669</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/8107157c572ee4a54cb28c01ab7f7f3d895ba661"><code>8107157</code></a>
chore(deps-dev): bump the development_dependencies group with 4 updates
(<a
href="https://redirect.github.com/axios/axios/issues/10670">#10670</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/e66530e3302d56176befd0778155dafea2487542"><code>e66530e</code></a>
ci: require npm-publish environment for releases (<a
href="https://redirect.github.com/axios/axios/issues/10666">#10666</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/49f23cbfe4d308a075281c5f798d4c68f648cbe2"><code>49f23cb</code></a>
chore(sponsor): update sponsor block (<a
href="https://redirect.github.com/axios/axios/issues/10668">#10668</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"><code>3631854</code></a>
fix: unrestricted cloud metadata exfiltration via header injection chain
(<a
href="https://redirect.github.com/axios/axios/issues/10">#10</a>...</li>
<li><a
href="https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"><code>fb3befb</code></a>
fix: no_proxy hostname normalization bypass leads to ssrf (<a
href="https://redirect.github.com/axios/axios/issues/10661">#10661</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.14.0...v1.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.14.0&new-version=1.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-10 23:30:22 +00:00
dependabot[bot] 9654bfdaa8 Bump react-router from 7.13.0 to 7.14.0 in /frontend (#1645) 
Bumps
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router)
from 7.13.0 to 7.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases">react-router's
releases</a>.</em></p>
<blockquote>
<h2>v7.14.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7140</a></p>
<h2>v7.13.2</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7132</a></p>
<h2>v7.13.1</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md">react-router's
changelog</a>.</em></p>
<blockquote>
<h2>7.14.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>UNSTABLE RSC FRAMEWORK MODE BREAKING CHANGE - Existing route module
exports remain unchanged from stable v7 non-RSC mode, but new exports
are added for RSC mode. If you want to use RSC features, you will need
to update your route modules to export the new annotations. (<a
href="https://redirect.github.com/remix-run/react-router/pull/14901">#14901</a>)</p>
<p>If you are using RSC framework mode currently, you will need to
update your route modules to the new conventions. The following route
module components have their own mutually exclusive server component
counterparts:</p>
<table>
<thead>
<tr>
<th>Server Component Export</th>
<th>Client Component</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>ServerComponent</code></td>
<td><code>default</code></td>
</tr>
<tr>
<td><code>ServerErrorBoundary</code></td>
<td><code>ErrorBoundary</code></td>
</tr>
<tr>
<td><code>ServerLayout</code></td>
<td><code>Layout</code></td>
</tr>
<tr>
<td><code>ServerHydrateFallback</code></td>
<td><code>HydrateFallback</code></td>
</tr>
</tbody>
</table>
<p>If you were previously exporting a <code>ServerComponent</code>, your
<code>ErrorBoundary</code>, <code>Layout</code>, and
<code>HydrateFallback</code> were also server components. If you want to
keep those as server components, you can rename them and prefix them
with <code>Server</code>. If you were previously importing the
implementations of those components from a client module, you can simply
inline them.</p>
<p>Example:</p>
<p>Before</p>
<pre lang="tsx"><code>import { ErrorBoundary as ClientErrorBoundary }
from &quot;./client&quot;;
<p>export function ServerComponent() {<br />
// ...<br />
}</p>
<p>export function ErrorBoundary() {<br />
return &lt;ClientErrorBoundary /&gt;;<br />
}</p>
<p>export function Layout() {<br />
// ...<br />
}</p>
<p>export function HydrateFallback() {<br />
// ...<br />
}<br />
</code></pre></p>
<p>After</p>
<pre lang="tsx"><code>export function ServerComponent() {
  // ...
}
<p>export function ErrorBoundary() {<br />
// previous implementation of ClientErrorBoundary, this is now a client
component<br />
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remix-run/react-router/commit/e31077b0c380d9764dbced4c753e9ff99387045d"><code>e31077b</code></a>
chore: Update version for release (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14945">#14945</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/6683e85a9d7d607a45a3f6374afcc598a474f602"><code>6683e85</code></a>
chore: Update version for release (pre) (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14943">#14943</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/49a2ed5b482af282536baa394f5ade1e1d3f703f"><code>49a2ed5</code></a>
Merge branch 'main' into release-next</li>
<li><a
href="https://github.com/remix-run/react-router/commit/e8b3c3aea21e3a6740d9fb34f1686071d04dcc65"><code>e8b3c3a</code></a>
feat: RSC framework mode prerender (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14907">#14907</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/82eca19e1762eb9b4ae83e4eb2bdf279e63c60ee"><code>82eca19</code></a>
docs: clarify useViewTransitionState matches to or from path (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14922">#14922</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/d4391881e2c9610fe9081582c7bb2c7c05313cf3"><code>d439188</code></a>
feat:! new RSC framework mode module API (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14901">#14901</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/98641e215cfd52b78dde04133d844836331b1aa7"><code>98641e2</code></a>
feat: rsc prefetch (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14902">#14902</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/903d924db565506f29552adc83332c9adb799092"><code>903d924</code></a>
chore: format</li>
<li><a
href="https://github.com/remix-run/react-router/commit/0d577486af9e79628debfddabf3aad9f9de272e5"><code>0d57748</code></a>
Merge branch 'release-next' into dev</li>
<li><a
href="https://github.com/remix-run/react-router/commit/921db15de3b7026b992df08929488b68fe6b9885"><code>921db15</code></a>
chore: format</li>
<li>Additional commits viewable in <a
href="https://github.com/remix-run/react-router/commits/react-router@7.14.0/packages/react-router">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-router&package-manager=npm_and_yarn&previous-version=7.13.0&new-version=7.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-07 04:22:50 +00:00
dependabot[bot] d53799db05 Bump @typescript-eslint/parser from 8.57.0 to 8.58.0 in /frontend (#1644) 
Bumps
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
from 8.57.0 to 8.58.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v8.58.0</h2>
<h2>8.58.0 (2026-03-30)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support TypeScript 6 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> crash in
<code>no-unnecessary-type-arguments</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12163">#12163</a>)</li>
<li><strong>eslint-plugin:</strong> [no-extraneous-class] handle index
signatures (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12142">#12142</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-regexp-exec] avoid fixing
unknown RegExp flags (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12161">#12161</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>ej shafran <a
href="https://github.com/ej-shafran"><code>@​ej-shafran</code></a></li>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>GG ZIBLAKING</li>
<li>milkboy2564 <a
href="https://github.com/SeolJaeHyeok"><code>@​SeolJaeHyeok</code></a></li>
<li>teee32 <a
href="https://github.com/teee32"><code>@​teee32</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>v8.57.2</h2>
<h2>8.57.2 (2026-03-23)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] remove
dangling closing parenthesis (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11865">#11865</a>)</li>
<li><strong>eslint-plugin:</strong> [array-type] ignore Array and
ReadonlyArray without type arguments (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11971">#11971</a>)</li>
<li><strong>eslint-plugin:</strong> [no-restricted-types] flag banned
generics in extends or implements (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12120">#12120</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on
unwrapping generic (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-return] false positive on
unwrapping generic (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12125">#12125</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment] skip
reporting false positives for unresolved type parameters (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12127">#12127</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types]
preserve type alias infomation (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11954">#11954</a>)</li>
<li><strong>typescript-estree:</strong> skip createIsolatedProgram
fallback for projectService (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12066">#12066</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12065">#12065</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>Konv Suu</li>
<li>mdm317</li>
<li>Newton Yuan <a
href="https://github.com/NewtonYuan"><code>@​NewtonYuan</code></a></li>
<li>RyoheiYamamoto</li>
<li>SungHyun627 <a
href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li>
<li>Tamashoo <a
href="https://github.com/Tamashoo"><code>@​Tamashoo</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub
Releases</a> for more information.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>8.58.0 (2026-03-30)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support TypeScript 6 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12124">#12124</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.57.2 (2026-03-23)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.57.1 (2026-03-16)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/493341709fe7d1d6433332b7bd2724e3332c7cdf"><code>4933417</code></a>
chore(release): publish 8.58.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/8cde2d06fb9bc591a4c93452509ddbd600c76a35"><code>8cde2d0</code></a>
feat: support TypeScript 6 (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12124">#12124</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/be4d54d26e695cc93605ffcca67dd75848e95c6f"><code>be4d54d</code></a>
chore(release): publish 8.57.2</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a>
chore(release): publish 8.57.1</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@typescript-eslint/parser&package-manager=npm_and_yarn&previous-version=8.57.0&new-version=8.58.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-07 04:22:21 +00:00
dependabot[bot] eeebb5316a Bump @hey-api/openapi-ts from 0.94.0 to 0.95.0 in /frontend (#1643) 
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from
0.94.0 to 0.95.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/openapi-ts/releases"><code>@​hey-api/openapi-ts</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.95.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><strong>plugin(valibot)</strong>: remove request data schema (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3671">#3671</a>)
(<a
href="https://github.com/hey-api/openapi-ts/commit/96f60adb6af144e39133884e97e74a6693b6c059"><code>96f60ad</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Validator request schemas</h3>
<p>Valibot plugin no longer exports composite request <code>Data</code>
schemas. Instead, each layer is exported as a separate schema. If you're
using validators with SDKs, you can preserve the composite schema with
<code>shouldExtract</code>:</p>
<pre lang="js"><code>export default {
  input: &quot;hey-api/backend&quot;, // sign up at app.heyapi.dev
  output: &quot;src/client&quot;,
  plugins: [
    // ...other plugins
    {
      name: &quot;sdk&quot;,
      validator: &quot;valibot&quot;,
    },
    {
      name: &quot;valibot&quot;,
      requests: {
        shouldExtract: true,
      },
    },
  ],
};
</code></pre>
<ul>
<li><strong>internal</strong>: remove <code>plugin.getSymbol()</code>
function (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3671">#3671</a>)
(<a
href="https://github.com/hey-api/openapi-ts/commit/96f60adb6af144e39133884e97e74a6693b6c059"><code>96f60ad</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Removed <code>plugin.getSymbol()</code> function</h3>
<p>This function has been removed. You can use
<code>plugin.querySymbol()</code> instead. It accepts the same arguments
and returns the same result.</p>
<ul>
<li><strong>plugin(zod)</strong>: remove request data schema (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3671">#3671</a>)
(<a
href="https://github.com/hey-api/openapi-ts/commit/96f60adb6af144e39133884e97e74a6693b6c059"><code>96f60ad</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Validator request schemas</h3>
<p>Zod plugin no longer exports composite request <code>Data</code>
schemas. Instead, each layer is exported as a separate schema. If you're
using validators with SDKs, you can preserve the composite schema with
<code>shouldExtract</code>:</p>
<pre lang="js"><code>export default {
  input: &quot;hey-api/backend&quot;, // sign up at app.heyapi.dev
  output: &quot;src/client&quot;,
  plugins: [
    // ...other plugins
    {
      name: &quot;sdk&quot;,
      validator: &quot;zod&quot;,
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/5e1eaea77beffc56273619988494bf826514fb28"><code>5e1eaea</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3664">#3664</a>
from hey-api/changeset-release/main</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/acd0e9d4b1bdeb0c2e8b44d60c36b8dfc466d071"><code>acd0e9d</code></a>
ci: release</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/632638ffe258a452d858321ba7585c196ec42c6a"><code>632638f</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3675">#3675</a>
from hey-api/refactor/dsl-from-value</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/8aa4698e5eb9e12906c715da14da518d45e72fe6"><code>8aa4698</code></a>
refactor: rename fromValue file to from-value</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/11db9af9d60a47a6da428ad3010071c7ddedd205"><code>11db9af</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3674">#3674</a>
from hey-api/docs/sponsors-mintlify-3</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/a32e70b5a456ff8650ccaf2c20673adbf746b685"><code>a32e70b</code></a>
docs: remove Mintlify from sponsors</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/3efbe9ba0d6c4142aaec7adac2cdbc7b19b2ab55"><code>3efbe9b</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3673">#3673</a>
from hey-api/docs/sponsors-mintlify-2</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/bd2bf6eb3d1e82086f43f08b77ce1c626b0e6d7b"><code>bd2bf6e</code></a>
docs: remove Mintlify from sponsors</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/1162b4a9f54dc15df8aad0076aaf679e938fe53b"><code>1162b4a</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3672">#3672</a>
from hey-api/docs/soon-to-vote</li>
<li><a
href="https://github.com/hey-api/openapi-ts/commit/5f696b7494dd32d1de24ca1830b38793c97a7332"><code>5f696b7</code></a>
docs: update soon label to vote</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.94.0...@hey-api/openapi-ts@0.95.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hey-api/openapi-ts&package-manager=npm_and_yarn&previous-version=0.94.0&new-version=0.95.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-07 04:22:02 +00:00
dependabot[bot] 9d01188714 Bump axios from 1.13.5 to 1.14.0 in /frontend (#1642) 
Bumps [axios](https://github.com/axios/axios) from 1.13.5 to 1.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.14.0</h2>
<p>This release focuses on compatibility fixes, adapter stability
improvements, and test/tooling modernisation.</p>
<h2>⚠️ Important Changes</h2>
<ul>
<li><strong>Breaking Changes:</strong> None identified in this
release.</li>
<li><strong>Action Required:</strong> If you rely on env-based proxy
behaviour or CJS resolution edge-cases, validate your integration after
upgrade (notably <code>proxy-from-env</code> v2 alignment and
<code>main</code> entry compatibility fix).</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>Runtime Features:</strong> No new end-user features were
introduced in this release.</li>
<li><strong>Test Coverage Expansion:</strong> Added broader smoke/module
test coverage for CJS and ESM package usage. (<a
href="https://redirect.github.com/axios/axios/pull/7510">#7510</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Headers:</strong> Trim trailing CRLF in normalised header
values. (<a
href="https://redirect.github.com/axios/axios/pull/7456">#7456</a>)</li>
<li><strong>HTTP/2:</strong> Close detached HTTP/2 sessions on timeout
to avoid lingering sessions. (<a
href="https://redirect.github.com/axios/axios/pull/7457">#7457</a>)</li>
<li><strong>Fetch Adapter:</strong> Cancel <code>ReadableStream</code>
created during request-stream capability probing to prevent async
resource leaks. (<a
href="https://redirect.github.com/axios/axios/pull/7515">#7515</a>)</li>
<li><strong>Proxy Handling:</strong> Fixed env proxy behavior with
<code>proxy-from-env</code> v2 usage. (<a
href="https://redirect.github.com/axios/axios/pull/7499">#7499</a>)</li>
<li><strong>CommonJS Compatibility:</strong> Fixed package
<code>main</code> entry regression affecting CJS consumers. (<a
href="https://redirect.github.com/axios/axios/pull/7532">#7532</a>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>Security/Dependencies:</strong> Updated
<code>formidable</code> and refreshed package set to newer versions. (<a
href="https://redirect.github.com/axios/axios/pull/7533">#7533</a>, <a
href="https://redirect.github.com/axios/axios/pull/10556">#10556</a>)</li>
<li><strong>Tooling:</strong> Continued migration to Vitest and
modernised CI/test harnesses. (<a
href="https://redirect.github.com/axios/axios/pull/7484">#7484</a>, <a
href="https://redirect.github.com/axios/axios/pull/7489">#7489</a>, <a
href="https://redirect.github.com/axios/axios/pull/7498">#7498</a>)</li>
<li><strong>Build/Lint Stack:</strong> Rollup, ESLint, TypeScript, and
related dev-dependency updates. (<a
href="https://redirect.github.com/axios/axios/pull/7508">#7508</a>, <a
href="https://redirect.github.com/axios/axios/pull/7509">#7509</a>, <a
href="https://redirect.github.com/axios/axios/pull/7522">#7522</a>)</li>
<li><strong>Documentation:</strong> Clarified JSON parsing and
adapter-related docs/comments. (<a
href="https://redirect.github.com/axios/axios/pull/7398">#7398</a>, <a
href="https://redirect.github.com/axios/axios/pull/7460">#7460</a>, <a
href="https://redirect.github.com/axios/axios/pull/7478">#7478</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><a href="https://github.com/aviu16"><code>@​aviu16</code></a> (<a
href="https://redirect.github.com/axios/axios/pull/7456">#7456</a>)</li>
<li><a
href="https://github.com/NETIZEN-11"><code>@​NETIZEN-11</code></a> (<a
href="https://redirect.github.com/axios/axios/pull/7460">#7460</a>)</li>
<li><a href="https://github.com/fedotov"><code>@​fedotov</code></a> (<a
href="https://redirect.github.com/axios/axios/pull/7457">#7457</a>)</li>
<li><a href="https://github.com/nthbotast"><code>@​nthbotast</code></a>
(<a
href="https://redirect.github.com/axios/axios/pull/7478">#7478</a>)</li>
<li><a href="https://github.com/veeceey"><code>@​veeceey</code></a> (<a
href="https://redirect.github.com/axios/axios/pull/7398">#7398</a>)</li>
<li><a href="https://github.com/penkzhou"><code>@​penkzhou</code></a>
(<a
href="https://redirect.github.com/axios/axios/pull/7515">#7515</a>)</li>
</ul>
<p><em>Full Changelog: <a
href="https://github.com/axios/axios/compare/v1.13.6...v1.14.0">v1.13.6...v1.14.0</a></em></p>
<h2>v1.13.6</h2>
<p>This release focuses on platform compatibility, error handling
improvements, and code quality maintenance.</p>
<h2>⚠️ Important Changes</h2>
<ul>
<li><strong>Breaking Changes:</strong> None identified in this
release.</li>
<li><strong>Action Required:</strong> Users targeting React Native
should verify their integration, particularly if relying on specific
Blob or FormData behaviours, as improvements have been made to support
these objects.</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>React Native Blob Support:</strong> Axios now includes
support for React Native Blob objects. Thanks to <a
href="https://github.com/moh3n9595"><code>@​moh3n9595</code></a> for the
initial implementation. (<a
href="https://redirect.github.com/axios/axios/pull/5764">#5764</a>)</li>
<li><strong>Code Quality:</strong> Implemented prettier across the
codebase and resolved associated formatting issues. (<a
href="https://redirect.github.com/axios/axios/pull/7385">#7385</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Environment Compatibility:</strong>
<ul>
<li>Fixed module exports for React Native and Browserify environments.
(<a
href="https://redirect.github.com/axios/axios/pull/7386">#7386</a>)</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/46bee3dea75ef53a8eae49f3b7487e6341de6074"><code>46bee3d</code></a>
chore(release): prepare release 1.14.0 (<a
href="https://redirect.github.com/axios/axios/issues/10563">#10563</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/518aff569043116c87ce78e3d83877d5251f2a16"><code>518aff5</code></a>
chore: add AI Moderator workflow for spam detection (<a
href="https://redirect.github.com/axios/axios/issues/10551">#10551</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/b7dfda3e7cf9e85f6063d90334318f82842b42d0"><code>b7dfda3</code></a>
chore(sponsor): update sponsor block (<a
href="https://redirect.github.com/axios/axios/issues/10557">#10557</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/9aa34d52918c13eaa445d884a24e9e20e71a7a93"><code>9aa34d5</code></a>
fix: updated release flow to match the current flows (<a
href="https://redirect.github.com/axios/axios/issues/10562">#10562</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/e9e5ebe483b3f0cecbb5a4c9fa95a316ea5d0645"><code>e9e5ebe</code></a>
Update packages to latest version (<a
href="https://redirect.github.com/axios/axios/issues/10556">#10556</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/4d8931ca8a92e53c5dcf02cf46d1016a10e60ec0"><code>4d8931c</code></a>
fix: formidable dependency vulnerable to arbitrary (<a
href="https://redirect.github.com/axios/axios/issues/7533">#7533</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/3a6f5c1ae1f9b58198e9f3109896a2c11d017c58"><code>3a6f5c1</code></a>
chore(deps-dev): bump <code>@​babel/preset-env</code> (<a
href="https://redirect.github.com/axios/axios/issues/7531">#7531</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/bcfd2997dc93b56669dd03b29b83d8a868797937"><code>bcfd299</code></a>
fix: bug axios breaks commonjs compatibility main entry (<a
href="https://redirect.github.com/axios/axios/issues/7532">#7532</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/d6dcbfd53e9506d9c8c0b1fd09c4d960bea9b9f0"><code>d6dcbfd</code></a>
fix: dependabot uses the correct labels (<a
href="https://redirect.github.com/axios/axios/issues/7530">#7530</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/5dd7ba78b8960fb29e39b6918ee5cb9a2130f15c"><code>5dd7ba7</code></a>
chore: upgrade to latest ts (<a
href="https://redirect.github.com/axios/axios/issues/7522">#7522</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.13.5...v1.14.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.13.5&new-version=1.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-07 04:21:32 +00:00
dependabot[bot] 072becd123 Bump @mantine/form from 8.3.7 to 9.0.1 in /frontend (#1640) 
Bumps
[@mantine/form](https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form)
from 8.3.7 to 9.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mantinedev/mantine/releases"><code>@​mantine/form</code>'s
releases</a>.</em></p>
<blockquote>
<h2>9.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li><code>[@mantine/core]</code> LoadingOverlay: Fix double overlay
visible with dark color scheme (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8811">#8811</a>)</li>
<li><code>[@mantine/core]</code> RingProgress: Add missing viewBox (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8806">#8806</a>)</li>
<li><code>[@mantine/core]</code> Input: Add <code>rootRef</code> prop
support</li>
<li><code>[@mantine/core]</code> Combobox: Fix <code>refProp</code> not
working on <code>Combobox.Target</code> (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8798">#8798</a>)</li>
<li><code>[@mantine/mcp-server]</code> Fix stdio transport to comply
with MCP spec (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8792">#8792</a>)</li>
<li><code>[@mantine/core]</code> Input: Fix
<code>aria-invalid=&quot;false&quot;</code> attribute being set (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8785">#8785</a>)</li>
<li><code>[@mantine/core]</code> Slider: Fix incorrect orientation
inheritance from the parent markup (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8791">#8791</a>)</li>
<li><code>[@mantine/core]</code> Fix incorrect default placeholder size
in PasswordInput and other components (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8793">#8793</a>)</li>
<li><code>[@mantine/core]</code> Badge: Fix text being cut off with some
fonts (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8788">#8788</a>)</li>
<li><code>[@mantine/hooks]</code> use-scroller: Fix element dynamic
resizing not being handled correctly (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8800">#8800</a>)</li>
<li><code>[@mantine/core]</code> Fix <code>Checkbox.Group</code>,
<code>Switch.Group</code>, <code>Radio.Group</code> and
<code>Chip.Group</code> not working with generic primitive values (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8801">#8801</a>)</li>
<li><code>[@mantine/core]</code> Popover: Fix missing
<code>withProps</code> (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8802">#8802</a>)</li>
<li><code>[@mantine/core]</code> Accordion: Fix focus ring being cut off
(<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8797">#8797</a>)</li>
<li><code>[@mantine/charts]</code> Add option to fully customize
reference lines label (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8790">#8790</a>)</li>
<li><code>[@mantine/core]</code> Fix <code>loading</code> prop not being
handled correctly in TagsInput and MultiSelect (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8803">#8803</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mantinedev/mantine/compare/9.0.0...9.0.1">https://github.com/mantinedev/mantine/compare/9.0.0...9.0.1</a></p>
<h2>9.0.0 🤩</h2>
<p><a href="https://mantine.dev/changelog/9-0-0">View changelog with
demos on mantine.dev website</a></p>
<h2>Migration guide</h2>
<p>This changelog covers breaking changes and new features in Mantine
9.0.
To migrate your application to Mantine 9.0, follow <a
href="https://mantine.dev/guides/8x-to-9x">8.x → 9.x migration
guide</a>.</p>
<h2>Peer dependencies requirements updates</h2>
<p>Starting from Mantine 9.0, the following dependencies are
required:</p>
<ul>
<li>React 19.2+ for all <code>@mantine/*</code> packages</li>
<li>Tiptap 3+ for <code>@mantine/tiptap</code> (<a
href="https://mantine.dev/guides/tiptap-3-migration">migration
guide</a>)</li>
<li>Recharts 3+ for <code>@mantine/charts</code> (no migration
required)</li>
</ul>
<h2>New <code>@​mantine/schedule</code> package</h2>
<p>New <a
href="https://mantine.dev/schedule/getting-started"><code>@mantine/schedule</code></a>
package provides a complete set of
calendar scheduling components for React applications. It includes
multiple view levels,
drag-and-drop event management, and extensive customization options.</p>
<h3>Schedule</h3>
<p><a href="https://mantine.dev/schedule/schedule">Schedule</a> is a
unified container component that combines all views with built-in
navigation and view switching. Drag events to reschedule them:</p>
<pre lang="tsx"><code>import { useState } from 'react';
import dayjs from 'dayjs';
import { Schedule, ScheduleEventData } from '@mantine/schedule';
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mantinedev/mantine/commit/b90d9b81031f45f5d15e75f25138ed6477f65bce"><code>b90d9b8</code></a>
[core] Fix typos, update versions</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/79cfa90f2e1165355916c7d1e6e680a6b3c9915f"><code>79cfa90</code></a>
[refactor] Fix failing tests</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/0fabf4e0b9e42d7bef766ed2a0baf7a29ca53694"><code>0fabf4e</code></a>
[<code>@​mantine/form</code>] Fix <code>form.watch</code> not working
with arrays (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/6996">#6996</a>)</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/ac4aeb8b0cf0f4f5fd8d33cdfca86ec01527bdbe"><code>ac4aeb8</code></a>
[<code>@​mantine/form</code>] Update types to use new React 19
features</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/7aeb1ad848830004789d92f04508b9661d9b5151"><code>7aeb1ad</code></a>
[<code>@​mantine/form</code>] Make Values and TransformedValues
covariant (<a
href="https://github.com/mantinedev/mantine/tree/HEAD/packages/@mantine/form/issues/8198">#8198</a>)</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/a097b0cbe3341d7bdaf4fb05e3aba296f122e90b"><code>a097b0c</code></a>
[release] Version: 9.0.0-alpha.6</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/81d8a5433dee0f04eb66c7366e5bd7c62bcd4872"><code>81d8a54</code></a>
[refactor] Fix tests</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/0bf0b44549224afc9a63bedcaa8d4605be3405c5"><code>0bf0b44</code></a>
[<code>@​mantine/form</code>] Add standard schema resolvers support</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/53c9a802a74d9ddec381ee133930d436ebda71c2"><code>53c9a80</code></a>
[release] Version: 9.0.0-alpha.5</li>
<li><a
href="https://github.com/mantinedev/mantine/commit/0cab72dacb56f536eb473f641e991eb559a04784"><code>0cab72d</code></a>
[core] Update peer requirements to use React 19.2</li>
<li>Additional commits viewable in <a
href="https://github.com/mantinedev/mantine/commits/9.0.1/packages/@mantine/form">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@mantine/form&package-manager=npm_and_yarn&previous-version=8.3.7&new-version=9.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-07 04:20:11 +00:00
dependabot[bot] d5b6102f5a Bump i18next from 25.10.5 to 26.0.3 in /frontend (#1639) 
Bumps [i18next](https://github.com/i18next/i18next) from 25.10.5 to
26.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.0.3</h2>
<ul>
<li>fix(types): <code>addResourceBundle</code> now accepts an optional
6th <code>options</code> parameter (<code>{ silent?: boolean; skipCopy?:
boolean }</code>) matching the runtime API <a
href="https://redirect.github.com/i18next/i18next/issues/2419">2419</a></li>
</ul>
<h2>v26.0.2</h2>
<ul>
<li>fix(types): <code>t(&quot;key&quot;, {} as TOptions)</code> no
longer produces a type error — the context constraint now bypasses
strict checking when <code>context</code> is <code>unknown</code> (e.g.
from <code>TOptions</code>) <a
href="https://redirect.github.com/i18next/i18next/issues/2418">2418</a></li>
</ul>
<h2>v26.0.1</h2>
<ul>
<li>fix: Formatter no longer crashes when <code>alwaysFormat</code> is
<code>true</code> and no format specifier is present
(<code>format</code> is <code>undefined</code>)</li>
<li>fix: Formatter now returns <code>undefined</code>/<code>null</code>
values as-is instead of producing <code>NaN</code> when the value is
missing</li>
</ul>
<h2>v26.0.0</h2>
<p><strong>This is a major breaking release:</strong></p>
<h3>Breaking Changes</h3>
<ul>
<li><strong>Remove deprecated <code>initImmediate</code> option</strong>
— the backward-compatibility mapping from <code>initImmediate</code> to
<code>initAsync</code> (introduced in v24) has been removed. Use
<code>initAsync</code> instead.</li>
<li><strong>Remove legacy <code>interpolation.format</code>
function</strong> — the old monolithic format function
(<code>interpolation: { format: (value, format, lng) =&gt; ... }</code>)
is no longer supported. The built-in Formatter (or a custom Formatter
module via <code>.use()</code>) is now always used. Migrate to the <a
href="https://www.i18next.com/translation-function/formatting">new
formatting approach</a> using
<code>i18next.services.formatter.add()</code> or
<code>.addCached()</code> for custom formatters.</li>
<li><strong>Remove console support notice</strong> — the console support
notice introduced in v25.8.0 has been removed, along with the
<code>showSupportNotice</code> option and all related internal
suppression logic (<code>globalThis.__i18next_supportNoticeShown</code>,
<code>I18NEXT_NO_SUPPORT_NOTICE</code> env var). See our blog post for
the <a href="https://www.locize.com/blog/i18next-support-notice">full
story</a>.</li>
<li><strong>Remove <code>simplifyPluralSuffix</code> option</strong> —
this option was unused by the core PluralResolver (which relies entirely
on <code>Intl.PluralRules</code>). It only had an effect in the old
v1/v2/v3 compatibility layer. The v4 test compatibility layer now
defaults to <code>true</code> internally.</li>
<li><strong>Remove deprecated <code>@babel/polyfill</code></strong> from
devDependencies.</li>
</ul>
<h3>Improvements</h3>
<ul>
<li><strong>Code modernization</strong> across all source files:
<ul>
<li>Replace <code>indexOf() &gt; -1</code> / <code>indexOf() &lt;
0</code> with <code>.includes()</code> (~40+ occurrences)</li>
<li>Replace <code>indexOf() === 0</code> with <code>.startsWith()</code>
where appropriate</li>
<li>Replace <code>var</code> with <code>const</code>, <code>'' +
object</code> with <code>String(object)</code>,
<code>.substring()</code> with <code>.slice()</code></li>
<li>Replace <code>.apply(observer, [event, ...args])</code> with direct
call <code>observer(event, ...args)</code></li>
<li>Remove unnecessary <code>.call(this, ...)</code> in BackendConnector
retry logic</li>
<li>Fix <code>array-callback-return</code> in LanguageUtils
<code>getBestMatchFromCodes</code></li>
<li>Clean up all stale <code>eslint-disable</code> comments from source
files</li>
</ul>
</li>
<li><strong>EventEmitter</strong>: add <code>once()</code> method for
one-time event subscriptions</li>
<li><strong>Memory leak fix</strong>: move module-level
<code>checkedLoadedFor</code> cache to Translator instance, preventing
cross-instance state leakage</li>
<li><strong>TypeScript</strong>: fix <code>BackendModule</code> generic
parameter naming inconsistency between CJS and ESM type definitions</li>
<li><strong>TypeScript</strong>: add <code>once()</code> method to
<code>i18n</code> and <code>ResourceStore</code> type interfaces</li>
<li><strong>ESLint 9</strong>: migrate from ESLint 8 (airbnb-base) to
ESLint 9 flat config with <a
href="https://github.com/neostandard/neostandard">neostandard</a></li>
<li><strong>Vitest 4</strong>: upgrade from vitest 3 to vitest 4,
migrate workspace files to <code>test.projects</code> config</li>
</ul>
<h2>v25.10.10</h2>
<ul>
<li>feat: suppress support notice automatically in production
environments (<code>NODE_ENV=production</code>)</li>
</ul>
<h2>v25.10.9</h2>
<ul>
<li>feat(types): export <code>SelectorParam&lt;Ns, KPrefix&gt;</code>
helper type — a stable, readable alternative to
<code>Parameters&lt;TFunction&lt;Ns&gt;&gt;[0]</code> for typing
selector function props <a
href="https://redirect.github.com/i18next/i18next/issues/2414">2414</a></li>
</ul>
<h2>v25.10.8</h2>
<ul>
<li>fix(types): reorder <code>TFunctionSelector</code> overloads so
<code>Parameters&lt;TFunction&gt;</code> resolves to the general
selector signature instead of the branded <code>SelectorKey</code> type
<a
href="https://redirect.github.com/i18next/i18next/issues/2412">2412</a></li>
</ul>
<h2>v25.10.7</h2>
<ul>
<li>feat(types): support typescript 6 to address <a
href="https://redirect.github.com/i18next/react-i18next/issues/1910">i18next/react-i18next#1910</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.0.3</h2>
<ul>
<li>fix(types): <code>addResourceBundle</code> now accepts an optional
6th <code>options</code> parameter (<code>{ silent?: boolean; skipCopy?:
boolean }</code>) matching the runtime API <a
href="https://redirect.github.com/i18next/i18next/issues/2419">2419</a></li>
</ul>
<h2>26.0.2</h2>
<ul>
<li>fix(types): <code>t(&quot;key&quot;, {} as TOptions)</code> no
longer produces a type error — the context constraint now bypasses
strict checking when <code>context</code> is <code>unknown</code> (e.g.
from <code>TOptions</code>) <a
href="https://redirect.github.com/i18next/i18next/issues/2418">2418</a></li>
</ul>
<h2>26.0.1</h2>
<ul>
<li>fix: Formatter no longer crashes when <code>alwaysFormat</code> is
<code>true</code> and no format specifier is present
(<code>format</code> is <code>undefined</code>)</li>
<li>fix: Formatter now returns <code>undefined</code>/<code>null</code>
values as-is instead of producing <code>NaN</code> when the value is
missing</li>
</ul>
<h2>26.0.0</h2>
<p><strong>This is a major breaking release:</strong></p>
<h3>Breaking Changes</h3>
<ul>
<li><strong>Remove deprecated <code>initImmediate</code> option</strong>
— the backward-compatibility mapping from <code>initImmediate</code> to
<code>initAsync</code> (introduced in v24) has been removed. Use
<code>initAsync</code> instead.</li>
<li><strong>Remove legacy <code>interpolation.format</code>
function</strong> — the old monolithic format function
(<code>interpolation: { format: (value, format, lng) =&gt; ... }</code>)
is no longer supported. The built-in Formatter (or a custom Formatter
module via <code>.use()</code>) is now always used. Migrate to the <a
href="https://www.i18next.com/translation-function/formatting">new
formatting approach</a> using
<code>i18next.services.formatter.add()</code> or
<code>.addCached()</code> for custom formatters.</li>
<li><strong>Remove console support notice</strong> — the console support
notice introduced in v25.8.0 has been removed, along with the
<code>showSupportNotice</code> option and all related internal
suppression logic (<code>globalThis.__i18next_supportNoticeShown</code>,
<code>I18NEXT_NO_SUPPORT_NOTICE</code> env var). See our blog post for
the <a href="https://www.locize.com/blog/i18next-support-notice">full
story</a>.</li>
<li><strong>Remove <code>simplifyPluralSuffix</code> option</strong> —
this option was unused by the core PluralResolver (which relies entirely
on <code>Intl.PluralRules</code>). It only had an effect in the old
v1/v2/v3 compatibility layer. The v4 test compatibility layer now
defaults to <code>true</code> internally.</li>
<li><strong>Remove deprecated <code>@babel/polyfill</code></strong> from
devDependencies.</li>
</ul>
<h3>Improvements</h3>
<ul>
<li><strong>Code modernization</strong> across all source files:
<ul>
<li>Replace <code>indexOf() &gt; -1</code> / <code>indexOf() &lt;
0</code> with <code>.includes()</code> (~40+ occurrences)</li>
<li>Replace <code>indexOf() === 0</code> with <code>.startsWith()</code>
where appropriate</li>
<li>Replace <code>var</code> with <code>const</code>, <code>'' +
object</code> with <code>String(object)</code>,
<code>.substring()</code> with <code>.slice()</code></li>
<li>Replace <code>.apply(observer, [event, ...args])</code> with direct
call <code>observer(event, ...args)</code></li>
<li>Remove unnecessary <code>.call(this, ...)</code> in BackendConnector
retry logic</li>
<li>Fix <code>array-callback-return</code> in LanguageUtils
<code>getBestMatchFromCodes</code></li>
<li>Clean up all stale <code>eslint-disable</code> comments from source
files</li>
</ul>
</li>
<li><strong>EventEmitter</strong>: add <code>once()</code> method for
one-time event subscriptions</li>
<li><strong>Memory leak fix</strong>: move module-level
<code>checkedLoadedFor</code> cache to Translator instance, preventing
cross-instance state leakage</li>
<li><strong>TypeScript</strong>: fix <code>BackendModule</code> generic
parameter naming inconsistency between CJS and ESM type definitions</li>
<li><strong>TypeScript</strong>: add <code>once()</code> method to
<code>i18n</code> and <code>ResourceStore</code> type interfaces</li>
<li><strong>ESLint 9</strong>: migrate from ESLint 8 (airbnb-base) to
ESLint 9 flat config with <a
href="https://github.com/neostandard/neostandard">neostandard</a></li>
<li><strong>Vitest 4</strong>: upgrade from vitest 3 to vitest 4,
migrate workspace files to <code>test.projects</code> config</li>
</ul>
<h2>25.10.10</h2>
<ul>
<li>feat: suppress support notice automatically in production
environments (<code>NODE_ENV=production</code>)</li>
</ul>
<h2>25.10.9</h2>
<ul>
<li>feat(types): export <code>SelectorParam&lt;Ns, KPrefix&gt;</code>
helper type — a stable, readable alternative to
<code>Parameters&lt;TFunction&lt;Ns&gt;&gt;[0]</code> for typing
selector function props <a
href="https://redirect.github.com/i18next/i18next/issues/2414">2414</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/ea8391c875ed663038fb5fb0db89aaead9f6fff6"><code>ea8391c</code></a>
26.0.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/5da85e09afe0f53033840666e13ee954d87e89e9"><code>5da85e0</code></a>
fix(types): <code>addResourceBundle</code> now accepts an optional 6th
<code>options</code> paramet...</li>
<li><a
href="https://github.com/i18next/i18next/commit/3db098f72a40b108123c1200234707934d9e03ac"><code>3db098f</code></a>
26.0.2</li>
<li><a
href="https://github.com/i18next/i18next/commit/6ece798338e6e96d37a6148c20e4ca7279fa9897"><code>6ece798</code></a>
fix(types): <code>t(&quot;key&quot;, {} as TOptions)</code> no longer
produces a type error — the ...</li>
<li><a
href="https://github.com/i18next/i18next/commit/18b3dbb4734dc25dba1c21ea05df0315c73f6bc0"><code>18b3dbb</code></a>
26.0.1</li>
<li><a
href="https://github.com/i18next/i18next/commit/c829f91a2af9d227b35be3025d4ce8866f5c25c1"><code>c829f91</code></a>
fix: Formater crashes etc.</li>
<li><a
href="https://github.com/i18next/i18next/commit/1593d1125ef7890ef294aa5fef39dd70e11ca537"><code>1593d11</code></a>
remove node v18 from github actions</li>
<li><a
href="https://github.com/i18next/i18next/commit/d85c23da8615c0f0fdbeaae588a741a6c6149eb4"><code>d85c23d</code></a>
26.0.0</li>
<li><a
href="https://github.com/i18next/i18next/commit/fad19d59cf4d2acd512981d2cc41a0033d6cf672"><code>fad19d5</code></a>
feat!: v26.0.0 — major version with breaking changes</li>
<li><a
href="https://github.com/i18next/i18next/commit/780aa9170f4ed5b645aa35bb9ef1832d38f7b5d8"><code>780aa91</code></a>
jsr update</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v25.10.5...v26.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=25.10.5&new-version=26.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-07 04:19:16 +00:00
dependabot[bot] adedd52705 Bump vite from 7.3.0 to 7.3.2 in /frontend (#1635) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 7.3.0 to 7.3.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v7.3.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v7.3.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v7.3.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v7.3.1...v7.3.2">7.3.2</a>
(2026-04-06)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li>avoid path traversal with optimize deps sourcemap handler (<a
href="https://redirect.github.com/vitejs/vite/issues/22161">#22161</a>)
(<a
href="https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7">09d8c90</a>)</li>
<li>backport <a
href="https://redirect.github.com/vitejs/vite/issues/22159">#22159</a>,
apply server.fs check to env transport (<a
href="https://redirect.github.com/vitejs/vite/issues/22162">#22162</a>)
(<a
href="https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1">19db0f2</a>)</li>
<li>check <code>server.fs</code> after stripping query as well (<a
href="https://redirect.github.com/vitejs/vite/issues/22160">#22160</a>)
(<a
href="https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6">f8103cc</a>)</li>
</ul>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v7.3.0...v7.3.1">7.3.1</a>
(2026-01-07)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>add <code>ignoreOutdatedRequests</code> option to
<code>optimizeDeps</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/21364">#21364</a>)
(<a
href="https://github.com/vitejs/vite/commit/9d39d373a7b4e0a93322b70b9dbeb202af06af3e">9d39d37</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/cc383e07b66d4c5a9768fcb570e0af812cb8d999"><code>cc383e0</code></a>
release: v7.3.2</li>
<li><a
href="https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7"><code>09d8c90</code></a>
fix: avoid path traversal with optimize deps sourcemap handler (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161">#22161</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6"><code>f8103cc</code></a>
fix: check <code>server.fs</code> after stripping query as well (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22160">#22160</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1"><code>19db0f2</code></a>
fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159">#22159</a>,
apply server.fs check to env transport (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22162">#22162</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/95e8923f35d0252c9f6eb2d5e358c084542706f1"><code>95e8923</code></a>
release: v7.3.1</li>
<li><a
href="https://github.com/vitejs/vite/commit/9d39d373a7b4e0a93322b70b9dbeb202af06af3e"><code>9d39d37</code></a>
feat: add <code>ignoreOutdatedRequests</code> option to
<code>optimizeDeps</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21364">#21364</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v7.3.2/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=7.3.0&new-version=7.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-06 21:42:26 +00:00
dependabot[bot] 7537b653c0 Bump i18next from 25.8.0 to 25.10.5 in /frontend (#1624) 
Bumps [i18next](https://github.com/i18next/i18next) from 25.8.0 to
25.10.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v25.10.5</h2>
<ul>
<li>feat(types): selector functions as <code>keyPrefix</code> in
<code>getFixedT</code> now provide full type-safe key narrowing — the
returned <code>t</code> function is scoped to the prefix subtree <a
href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li>
</ul>
<h2>v25.10.4</h2>
<ul>
<li>feat(types): i18nKey of <code>&lt;Trans i18nKey={sk} /&gt;</code> to
accept a <code>SelectorKey</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li>
</ul>
<h2>v25.10.3</h2>
<ul>
<li>check also for I18NEXT_NO_SUPPORT_NOTICE env variable</li>
</ul>
<h2>v25.10.2</h2>
<ul>
<li>feat(types): <code>keyFromSelector</code> is now type-safe — the
selector callback is constrained against your resource definitions,
catching invalid keys at compile time. Supports optional <code>ns</code>
and <code>keyPrefix</code> options for non-default namespace/prefix
contexts <a
href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li>
</ul>
<h2>v25.10.1</h2>
<ul>
<li>fix(types): <code>FilterKeys</code> now correctly excludes base keys
that have context variants when the provided context doesn't match any
of them (e.g. key <code>some</code> with variant <code>some_me</code> is
no longer accessible with <code>context=&quot;one&quot;</code>)</li>
</ul>
<h2>v25.10.0</h2>
<ul>
<li>feat(types): <code>keyFromSelector</code> now returns a branded
<code>SelectorKey</code> type that <code>t()</code> accepts directly,
enabling pre-computed and reusable translation keys <a
href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li>
<li>feat: support selector syntax for <code>keyPrefix</code> in
<code>getFixedT</code> and per-call options <a
href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li>
<li>feat(types): interpolation values are now automatically typed based
on built-in format specifiers — <code>{{val, number}}</code> requires
<code>number</code>, <code>{{val, datetime}}</code> requires
<code>Date</code>, <code>{{name}}</code> requires <code>string</code>,
etc. Custom formatters can be typed via
<code>interpolationFormatTypeMap</code> in
<code>CustomTypeOptions</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2378">2378</a></li>
<li>fix(types): <code>FilterKeys</code> in selector mode now preserves
non-context, non-plural leaf keys when <code>context</code> is provided,
fixing incorrect type narrowing when combining <code>returnObjects:
true</code> with <code>context</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2398">2398</a></li>
</ul>
<h2>v25.9.0</h2>
<ul>
<li>feat(types): selector API now enforces <code>{ count: number
}</code> when a key resolves to plural forms <a
href="https://redirect.github.com/i18next/i18next/issues/2373">2373</a></li>
<li>fix(types): string unions with invalid members are now correctly
detected as type errors when used as context option <a
href="https://redirect.github.com/i18next/i18next/issues/2172">2172</a></li>
</ul>
<h2>v25.8.20</h2>
<ul>
<li>
<ul>
<li>fix: <code>getFixedT()</code> selector now resolves namespaces
against the effective <code>ns</code> rather than the global init
options <a
href="https://redirect.github.com/i18next/i18next/issues/2406">#2406</a></li>
</ul>
</li>
</ul>
<h2>v25.8.19</h2>
<ul>
<li>fix: selector API namespace resolution regression for single-string
<code>ns</code> and primary namespace in array <a
href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a>.
Reverts the broad namespace-prefix rewrite from v25.8.15 and replaces it
with a targeted fix that only rewrites paths starting with a secondary
namespace in a multi-namespace array, matching the type-level contract
of <code>GetSource</code></li>
</ul>
<h2>v25.8.18</h2>
<ul>
<li>improve selector api to accept array of selector functions,
analogous to array of keys <a
href="https://redirect.github.com/i18next/i18next/issues/2404">2404</a></li>
</ul>
<h2>v25.8.17</h2>
<ul>
<li>update deps</li>
</ul>
<h2>v25.8.16</h2>
<ul>
<li>fix(types): <code>on()</code> method now correctly returns
<code>this</code> instead of <code>void</code>, matching the runtime
behavior and enabling proper method chaining in TypeScript</li>
</ul>
<h2>v25.8.15</h2>
<ul>
<li>fix: Selector API unable to resolve namespaces <a
href="https://redirect.github.com/i18next/i18next/issues/2402">#2402</a></li>
</ul>
<h2>v25.8.14</h2>
<ul>
<li>fix: getCleanedCode now replaces all underscores</li>
</ul>
<h2>v25.8.13</h2>
<ul>
<li>improve support notice shown logic</li>
</ul>
<h2>v25.8.12</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>25.10.5</h2>
<ul>
<li>feat(types): selector functions as <code>keyPrefix</code> in
<code>getFixedT</code> now provide full type-safe key narrowing — the
returned <code>t</code> function is scoped to the prefix subtree <a
href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li>
</ul>
<h2>25.10.4</h2>
<ul>
<li>feat(types): <code>exists()</code> is now a type guard that narrows
the key to <code>SelectorKey</code>, so a validated key can be passed
directly to <code>t()</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li>
</ul>
<h2>25.10.3</h2>
<ul>
<li>check also for I18NEXT_NO_SUPPORT_NOTICE env variable</li>
</ul>
<h2>25.10.2</h2>
<ul>
<li>feat(types): <code>keyFromSelector</code> is now type-safe — the
selector callback is constrained against your resource definitions,
catching invalid keys at compile time. Supports optional <code>ns</code>
and <code>keyPrefix</code> options for non-default namespace/prefix
contexts <a
href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li>
</ul>
<h2>25.10.1</h2>
<ul>
<li>fix(types): <code>FilterKeys</code> now correctly excludes base keys
that have context variants when the provided context doesn't match any
of them (e.g. key <code>some</code> with variant <code>some_me</code> is
no longer accessible with <code>context=&quot;one&quot;</code>)</li>
</ul>
<h2>25.10.0</h2>
<ul>
<li>feat(types): <code>keyFromSelector</code> now returns a branded
<code>SelectorKey</code> type that <code>t()</code> accepts directly,
enabling pre-computed and reusable translation keys <a
href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li>
<li>feat: support selector syntax for <code>keyPrefix</code> in
<code>getFixedT</code> and per-call options <a
href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li>
<li>feat(types): interpolation values are now automatically typed based
on built-in format specifiers — <code>{{val, number}}</code> requires
<code>number</code>, <code>{{val, datetime}}</code> requires
<code>Date</code>, <code>{{name}}</code> requires <code>string</code>,
etc. Custom formatters can be typed via
<code>interpolationFormatTypeMap</code> in
<code>CustomTypeOptions</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2378">2378</a></li>
<li>fix(types): <code>FilterKeys</code> in selector mode now preserves
non-context, non-plural leaf keys when <code>context</code> is provided,
fixing incorrect type narrowing when combining <code>returnObjects:
true</code> with <code>context</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2398">2398</a></li>
</ul>
<h2>25.9.0</h2>
<ul>
<li>feat(types): selector API now enforces <code>{ count: number
}</code> when a key resolves to plural forms <a
href="https://redirect.github.com/i18next/i18next/issues/2373">2373</a></li>
<li>fix(types): string unions with invalid members are now correctly
detected as type errors when used as context option <a
href="https://redirect.github.com/i18next/i18next/issues/2172">2172</a></li>
</ul>
<h2>25.8.20</h2>
<ul>
<li>
<ul>
<li>fix: <code>getFixedT()</code> selector now resolves namespaces
against the effective <code>ns</code> rather than the global init
options <a
href="https://redirect.github.com/i18next/i18next/issues/2406">2406</a></li>
</ul>
</li>
</ul>
<h2>25.8.19</h2>
<ul>
<li>fix: selector API namespace resolution regression for single-string
<code>ns</code> and primary namespace in array <a
href="https://redirect.github.com/i18next/i18next/issues/2405">2405</a>.
Reverts the broad namespace-prefix rewrite from v25.8.15 and replaces it
with a targeted fix that only rewrites paths starting with a secondary
namespace in a multi-namespace array, matching the type-level contract
of <code>GetSource</code></li>
</ul>
<h2>25.8.18</h2>
<ul>
<li>improve selector api to accept array of selector functions,
analogous to array of keys <a
href="https://redirect.github.com/i18next/i18next/issues/2404">2404</a></li>
</ul>
<h2>25.8.17</h2>
<ul>
<li>update deps</li>
</ul>
<h2>25.8.16</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/83230b8f485b416931cbb8a2a0b6bc9290eaff66"><code>83230b8</code></a>
25.10.5</li>
<li><a
href="https://github.com/i18next/i18next/commit/79aa4d624510004bd45f6277f967d248a53921a4"><code>79aa4d6</code></a>
address <a
href="https://redirect.github.com/i18next/i18next/issues/2367">#2367</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/06f4ef70f242be8fa207f274f7fcadc3bd4d6457"><code>06f4ef7</code></a>
address <a
href="https://redirect.github.com/i18next/i18next/issues/2367">#2367</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/7902915328a899a6dc7680cc2563631b315ec8bc"><code>7902915</code></a>
fix changelog</li>
<li><a
href="https://github.com/i18next/i18next/commit/640ae9a2b2d8d3291889ce1576b43fffbfb874ee"><code>640ae9a</code></a>
jsr update</li>
<li><a
href="https://github.com/i18next/i18next/commit/de429ab17d9dbb230aef89996adc5a0b3ebd0436"><code>de429ab</code></a>
25.10.4</li>
<li><a
href="https://github.com/i18next/i18next/commit/3eb1b35b912bd8a656affa787b6d95ebf44c9d16"><code>3eb1b35</code></a>
feat(types): i18nKey of <code>\&lt;Trans i18nKey={sk} /&gt;</code> to
accept a <code>SelectorKey</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2364">#2364</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/53220b7fb80cbe22275c3b7cdbab6d91f12d2ceb"><code>53220b7</code></a>
jsr update</li>
<li><a
href="https://github.com/i18next/i18next/commit/908d0376bb72f731df9d65a219c7fc472db01b66"><code>908d037</code></a>
25.10.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/4e0b5da2971d404f85cf45a618dc249864b5243a"><code>4e0b5da</code></a>
check also for I18NEXT_NO_SUPPORT_NOTICE env variable <a
href="https://redirect.github.com/i18next/i18next/issues/2407">#2407</a></li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v25.8.0...v25.10.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=25.8.0&new-version=25.10.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-24 04:15:51 +00:00
dependabot[bot] 0cabe48233 Bump react-i18next from 16.5.0 to 16.6.2 in /frontend (#1621) 
Bumps [react-i18next](https://github.com/i18next/react-i18next) from
16.5.0 to 16.6.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h3>16.6.2</h3>
<ul>
<li>feat(types): <code>useTranslation</code> now accepts selector
functions as <code>keyPrefix</code> with full type-safe key narrowing
when <code>enableSelector</code> is enabled <a
href="https://redirect.github.com/i18next/i18next/issues/2367">2367</a></li>
</ul>
<h3>16.6.1</h3>
<ul>
<li>feat(types): i18nKey of <code>&lt;Trans i18nKey={sk} /&gt;</code> to
accept a <code>SelectorKey</code> <a
href="https://redirect.github.com/i18next/i18next/issues/2364">2364</a></li>
</ul>
<h3>16.6.0</h3>
<ul>
<li>warn when <code>t</code> is called before <code>ready</code> with
<code>useSuspense: false</code> <a
href="https://redirect.github.com/i18next/react-i18next/issues/1896">1896</a></li>
<li>type-safe <code>values</code> prop on <code>&lt;Trans /&gt;</code>
component — interpolation variables are now inferred from the
translation string when custom types are configured <a
href="https://redirect.github.com/i18next/react-i18next/issues/1772">1772</a></li>
</ul>
<h3>16.5.8</h3>
<ul>
<li>A selector function cannot be resolved without an i18n instance...
returning empty string is safer than leaking the raw function reference.
<a
href="https://redirect.github.com/i18next/react-i18next/issues/1907">1907</a></li>
</ul>
<h3>16.5.7</h3>
<ul>
<li>fix: <code>&lt;Trans&gt;</code> component with <code>enableSelector:
true</code> does not support multiple selectors for fallbacks <a
href="https://redirect.github.com/i18next/react-i18next/issues/1907">1907</a></li>
</ul>
<h3>16.5.6</h3>
<ul>
<li>fix: prevent crash in <code>useSSR</code> when <code>init()</code>
hasn't been called before <code>useSSR</code> — now logs a warning
instead of throwing <a
href="https://github.com/i18next/react-i18next/discussions/1604">1604</a></li>
</ul>
<h3>16.5.5</h3>
<ul>
<li>fix: prevent crash in <code>useSSR</code>,
<code>getInitialProps</code> and <code>Translation</code> when no
i18next instance is available (e.g. in monorepo setups with duplicate
<code>react-i18next</code> copies) — now logs a clear warning instead of
throwing <a
href="https://github.com/i18next/react-i18next/discussions/1604">1604</a></li>
</ul>
<h3>16.5.4</h3>
<ul>
<li>fix: Overriding React component props not working <a
href="https://redirect.github.com/i18next/react-i18next/pull/1902">1902</a></li>
</ul>
<h3>16.5.3</h3>
<ul>
<li>fix: Trans named tags with underscore <a
href="https://redirect.github.com/i18next/react-i18next/pull/1901">1901</a></li>
</ul>
<h3>16.5.2</h3>
<ul>
<li>fix: Type errors when you've declared a resources type <a
href="https://redirect.github.com/i18next/react-i18next/issues/1899">1899</a>
via <a
href="https://redirect.github.com/i18next/react-i18next/pull/1900">1900</a></li>
</ul>
<h3>16.5.1</h3>
<ul>
<li>fix: export <code>nodesToString</code> (runtime + TypeScript
typings) to support <code>i18next-cli</code> (<a
href="https://redirect.github.com/i18next/i18next-cli/pull/155">i18next/i18next-cli#155</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/5190452b9954915a5e62dde6ed8b0ee5591fe8ac"><code>5190452</code></a>
16.6.2</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/598dd8e0d7c9bf3b20d903acbb46cfa5302f9d26"><code>598dd8e</code></a>
address: <a
href="https://redirect.github.com/i18next/i18next/issues/2367">i18next/i18next#2367</a></li>
<li><a
href="https://github.com/i18next/react-i18next/commit/683156b25cd7bb94be4132b96b73fe27562ba618"><code>683156b</code></a>
16.6.1</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/723d84bbcbc152f3b2e07f3aa704859978860335"><code>723d84b</code></a>
feat(types): i18nKey of <code>\&lt;Trans i18nKey={sk} /&gt;</code> to
accept a <code>SelectorKey</code></li>
<li><a
href="https://github.com/i18next/react-i18next/commit/5c9f9f04e2ac665f2575c2bc7f783a368ab83c52"><code>5c9f9f0</code></a>
update i18next dep</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/3a68a0bcc0a61fc21cec8762acdfcab9025d9ba4"><code>3a68a0b</code></a>
16.6.0</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/87eac5f84b79819fb268ee936fe9d9e282c6543f"><code>87eac5f</code></a>
type-safe <code>values</code> prop on <code>\&lt;Trans /&gt;</code>
component — interpolation variables ar...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/522885581d57ea481a40bce22239d550aaa3f426"><code>5228855</code></a>
warn when <code>t</code> is called before <code>ready</code> with
<code>useSuspense: false</code> <a
href="https://redirect.github.com/i18next/react-i18next/issues/1896">#1896</a></li>
<li><a
href="https://github.com/i18next/react-i18next/commit/a75ef78d50ba4643575c2d0f48e73d6e2d9961dc"><code>a75ef78</code></a>
update deps and adjust tests</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/b00adfad4296543ab637d87a6af2b2faec119fcb"><code>b00adfa</code></a>
16.5.8</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/react-i18next/compare/v16.5.0...v16.6.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=16.5.0&new-version=16.6.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-24 04:10:34 +00:00