Commit Graph

1237 Commits

Author SHA1 Message Date
dependabot[bot]
eeae907b0a Bump lucide-react from 0.564.0 to 0.575.0 in /docs (#1572)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 0.564.0 to 0.575.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.575.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): added <code>message-square-check</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4076">lucide-icons/lucide#4076</a></li>
<li>fix(lucide): Fix ESM Module output path in build by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4084">lucide-icons/lucide#4084</a></li>
<li>feat(icons): added <code>metronome</code> icon by <a
href="https://github.com/edwloef"><code>@​edwloef</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4063">lucide-icons/lucide#4063</a></li>
<li>fix(icons): remove execution permission of SVG files by <a
href="https://github.com/duckafire"><code>@​duckafire</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4053">lucide-icons/lucide#4053</a></li>
<li>fix(icons): changed <code>file-pen-line</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3970">lucide-icons/lucide#3970</a></li>
<li>feat(icons): added <code>square-arrow-right-exit</code> and
<code>square-arrow-right-enter</code> icons by <a
href="https://github.com/EthanHazel"><code>@​EthanHazel</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3958">lucide-icons/lucide#3958</a></li>
<li>fix(icons): renamed <code>flip-*</code> to
<code>square-centerline-dashed-*</code> by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3945">lucide-icons/lucide#3945</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/edwloef"><code>@​edwloef</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4063">lucide-icons/lucide#4063</a></li>
<li><a href="https://github.com/duckafire"><code>@​duckafire</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4053">lucide-icons/lucide#4053</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.573.0...0.575.0">https://github.com/lucide-icons/lucide/compare/0.573.0...0.575.0</a></p>
<h2>Version 0.574.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(icons): changed <code>rocking-chair</code> icon by <a
href="https://github.com/jamiemlaw"><code>@​jamiemlaw</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3445">lucide-icons/lucide#3445</a></li>
<li>fix(icons): flipped <code>coins</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3158">lucide-icons/lucide#3158</a></li>
<li>feat(icons): added <code>x-line-top</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2838">lucide-icons/lucide#2838</a></li>
<li>feat(icons): added <code>mouse-left</code> icon by <a
href="https://github.com/marvfash"><code>@​marvfash</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2788">lucide-icons/lucide#2788</a></li>
<li>feat(icons): added <code>mouse-right</code> icon by <a
href="https://github.com/marvfash"><code>@​marvfash</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2787">lucide-icons/lucide#2787</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/marvfash"><code>@​marvfash</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2788">lucide-icons/lucide#2788</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.572.0...0.574.0">https://github.com/lucide-icons/lucide/compare/0.572.0...0.574.0</a></p>
<h2>Version 0.573.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(icons): changed <code>rocking-chair</code> icon by <a
href="https://github.com/jamiemlaw"><code>@​jamiemlaw</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3445">lucide-icons/lucide#3445</a></li>
<li>fix(icons): flipped <code>coins</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3158">lucide-icons/lucide#3158</a></li>
<li>feat(icons): added <code>x-line-top</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2838">lucide-icons/lucide#2838</a></li>
<li>feat(icons): added <code>mouse-left</code> icon by <a
href="https://github.com/marvfash"><code>@​marvfash</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2788">lucide-icons/lucide#2788</a></li>
<li>feat(icons): added <code>mouse-right</code> icon by <a
href="https://github.com/marvfash"><code>@​marvfash</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2787">lucide-icons/lucide#2787</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/marvfash"><code>@​marvfash</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2788">lucide-icons/lucide#2788</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.572.0...0.573.0">https://github.com/lucide-icons/lucide/compare/0.572.0...0.573.0</a></p>
<h2>Version 0.572.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): added <code>message-circle-check</code> icon by <a
href="https://github.com/Shrinks99"><code>@​Shrinks99</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3770">lucide-icons/lucide#3770</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Shrinks99"><code>@​Shrinks99</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3770">lucide-icons/lucide#3770</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.571.0...0.572.0">https://github.com/lucide-icons/lucide/compare/0.571.0...0.572.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/0.575.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lucide-react&package-manager=npm_and_yarn&previous-version=0.564.0&new-version=0.575.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-24 04:10:36 +00:00
dependabot[bot]
4424ad7dda Bump @tabler/icons-react from 3.36.0 to 3.37.1 in /docs (#1571)
Bumps
[@tabler/icons-react](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react)
from 3.36.0 to 3.37.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tabler/tabler-icons/releases"><code>@​tabler/icons-react</code>'s
releases</a>.</em></p>
<blockquote>
<h2>Release 3.37.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fixed icon: <code>credit-card-off</code></li>
<li>Added missing icon versions metadata</li>
</ul>
<h2>Release 3.37.0</h2>
<!-- raw HTML omitted -->
<h3>20 new icons:</h3>
<ul>
<li><code>filled/ball-bowling</code></li>
<li><code>filled/crown</code></li>
<li><code>filled/folder</code></li>
<li><code>filled/leaf</code></li>
<li><code>filled/pacman</code></li>
<li><code>filled/phone-call</code></li>
<li><code>filled/phone-calling</code></li>
<li><code>filled/phone-check</code></li>
<li><code>filled/phone-x</code></li>
<li><code>filled/plane-arrival</code></li>
<li><code>filled/plane-departure</code></li>
<li><code>filled/plane-tilt</code></li>
<li><code>filled/plane</code></li>
<li><code>filled/play-card</code></li>
<li><code>filled/playlist</code></li>
<li><code>filled/report-analytics</code></li>
<li><code>filled/report-money</code></li>
<li><code>filled/satellite</code></li>
<li><code>filled/sparkles-2</code></li>
<li><code>filled/sparkles</code></li>
</ul>
<p>Fixed icon: <code>outline/pacman</code></p>
<h2>Releace 3.36.1</h2>
<h3>Changed</h3>
<ul>
<li><strong>2,433 icons</strong> have been optimized and fixed</li>
<li><code>outline/brand-adobe-premier</code> →
<code>outline/brand-adobe-premiere</code> (typo fix)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li><strong>React</strong> (<code>@tabler/icons-react</code>): Fixed
TypeScript type definition for <code>TablerIcon</code> to properly
handle ref forwarding</li>
<li><strong>Webfont</strong> (<code>@tabler/icons-webfont</code>): Fixed
font generation - icons now render correctly in webfont format</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f4b74b4f49"><code>f4b74b4</code></a>
Release 3.37.1</li>
<li><a
href="5f64612d54"><code>5f64612</code></a>
Release 3.37.0</li>
<li><a
href="0094572ac2"><code>0094572</code></a>
Release 3.36.1</li>
<li><a
href="7358779979"><code>7358779</code></a>
Remove eleventy-sass dependency and update <code>@​tabler/icons</code>
references to use wo...</li>
<li><a
href="2702274bfa"><code>2702274</code></a>
Update package dependencies and configurations (<a
href="https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-react/issues/1447">#1447</a>)</li>
<li><a
href="78e46e478d"><code>78e46e4</code></a>
Added type checks in <code>icons-react</code> tests and ensured
consistent dependency ma...</li>
<li>See full diff in <a
href="https://github.com/tabler/tabler-icons/commits/v3.37.1/packages/icons-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tabler/icons-react&package-manager=npm_and_yarn&previous-version=3.36.0&new-version=3.37.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-24 04:10:19 +00:00
dependabot[bot]
1e7e27b3d7 Bump @tailwindcss/postcss from 4.1.17 to 4.2.1 in /docs (#1570)
Bumps
[@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss)
from 4.1.17 to 4.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/releases"><code>@​tailwindcss/postcss</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v4.2.1</h2>
<h3>Fixed</h3>
<ul>
<li>Allow trailing dash in functional utility names for backwards
compatibility (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19696">#19696</a>)</li>
<li>Properly detect classes containing <code>.</code> characters within
curly braces in MDX files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19711">#19711</a>)</li>
</ul>
<h2>v4.2.0</h2>
<h3>Added</h3>
<ul>
<li>Add mauve, olive, mist, and taupe color palettes to the default
theme (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19627">#19627</a>)</li>
<li>Add <code>@tailwindcss/webpack</code> package to run Tailwind CSS as
a webpack plugin (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19610">#19610</a>)</li>
<li>Add <code>pbs-*</code> and <code>pbe-*</code> utilities for
<code>padding-block-start</code> and <code>padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>mbs-*</code> and <code>mbe-*</code> utilities for
<code>margin-block-start</code> and <code>margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-pbs-*</code> and <code>scroll-pbe-*</code>
utilities for <code>scroll-padding-block-start</code> and
<code>scroll-padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-mbs-*</code> and <code>scroll-mbe-*</code>
utilities for <code>scroll-margin-block-start</code> and
<code>scroll-margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>border-bs-*</code> and <code>border-be-*</code> utilities
for <code>border-block-start</code> and <code>border-block-end</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>inline-*</code>, <code>min-inline-*</code>,
<code>max-inline-*</code> utilities for <code>inline-size</code>,
<code>min-inline-size</code>, and <code>max-inline-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>block-*</code>, <code>min-block-*</code>,
<code>max-block-*</code> utilities for <code>block-size</code>,
<code>min-block-size</code>, and <code>max-block-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>inset-s-*</code>, <code>inset-e-*</code>,
<code>inset-bs-*</code>, <code>inset-be-*</code> utilities for
<code>inset-inline-start</code>, <code>inset-inline-end</code>,
<code>inset-block-start</code>, and <code>inset-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
<li>Add <code>font-features-*</code> utility for
<code>font-feature-settings</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19623">#19623</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Prevent double <code>@supports</code> wrapper for
<code>color-mix</code> values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19450">#19450</a>)</li>
<li>Allow whitespace around <code>@source inline()</code> argument (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19461">#19461</a>)</li>
<li>Emit comment when source maps are saved to files when using
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19447">#19447</a>)</li>
<li>Detect utilities containing capital letters followed by numbers (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19465">#19465</a>)</li>
<li>Fix class extraction for Rails' strict locals (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19525">#19525</a>)</li>
<li>Align <code>@utility</code> name validation with Oxide scanner rules
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19524">#19524</a>)</li>
<li>Fix infinite loop when using <code>@variant</code> inside
<code>@custom-variant</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19633">#19633</a>)</li>
<li>Allow multiples of <code>.25</code> in <code>aspect-*</code>
fractions (e.g. <code>aspect-8.5/11</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19688">#19688</a>)</li>
<li>Ensure changes to external files listed via <code>@source</code>
trigger a full page reload when using <code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19670">#19670</a>)</li>
<li>Improve performance of Oxide scanner in bigger projects by reducing
file system walks (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19632">#19632</a>)</li>
<li>Ensure import aliases in Astro v5 work without crashing when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/issues/19677">#19677</a>)</li>
<li>Allow escape characters in <code>@utility</code> names to improve
support with formatters such as Biome (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19626">#19626</a>)</li>
<li>Fix incorrect canonicalization results when canonicalizing multiple
times (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19675">#19675</a>)</li>
<li>Add <code>.jj</code> to default ignored content directories (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19687">#19687</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>start-*</code> and <code>end-*</code> utilities in
favor of <code>inset-s-*</code> and <code>inset-e-*</code> utilities (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
</ul>
<h2>v4.1.18</h2>
<h3>Fixed</h3>
<ul>
<li>Ensure validation of <code>source(…)</code> happens relative to the
file it is in (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19274">#19274</a>)</li>
<li>Include filename and line numbers in CSS parse errors (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19282">#19282</a>)</li>
<li>Skip comments in Ruby files when checking for class names (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19243">#19243</a>)</li>
<li>Skip over arbitrary property utilities with a top-level
<code>!</code> in the value (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19243">#19243</a>)</li>
<li>Support environment API in <code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/18970">#18970</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md"><code>@​tailwindcss/postcss</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>[4.2.1] - 2026-02-23</h2>
<h3>Fixed</h3>
<ul>
<li>Allow trailing dash in functional utility names for backwards
compatibility (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19696">#19696</a>)</li>
<li>Properly detect classes containing <code>.</code> characters within
curly braces in MDX files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19711">#19711</a>)</li>
</ul>
<h2>[4.2.0] - 2026-02-18</h2>
<h3>Added</h3>
<ul>
<li>Add mauve, olive, mist, and taupe color palettes to the default
theme (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19627">#19627</a>)</li>
<li>Add <code>@tailwindcss/webpack</code> package to run Tailwind CSS as
a webpack plugin (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19610">#19610</a>)</li>
<li>Add <code>pbs-*</code> and <code>pbe-*</code> utilities for
<code>padding-block-start</code> and <code>padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>mbs-*</code> and <code>mbe-*</code> utilities for
<code>margin-block-start</code> and <code>margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-pbs-*</code> and <code>scroll-pbe-*</code>
utilities for <code>scroll-padding-block-start</code> and
<code>scroll-padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-mbs-*</code> and <code>scroll-mbe-*</code>
utilities for <code>scroll-margin-block-start</code> and
<code>scroll-margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>border-bs-*</code> and <code>border-be-*</code> utilities
for <code>border-block-start</code> and <code>border-block-end</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>inline-*</code>, <code>min-inline-*</code>,
<code>max-inline-*</code> utilities for <code>inline-size</code>,
<code>min-inline-size</code>, and <code>max-inline-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>block-*</code>, <code>min-block-*</code>,
<code>max-block-*</code> utilities for <code>block-size</code>,
<code>min-block-size</code>, and <code>max-block-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>inset-s-*</code>, <code>inset-e-*</code>,
<code>inset-bs-*</code>, <code>inset-be-*</code> utilities for
<code>inset-inline-start</code>, <code>inset-inline-end</code>,
<code>inset-block-start</code>, and <code>inset-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
<li>Add <code>font-features-*</code> utility for
<code>font-feature-settings</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19623">#19623</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Prevent double <code>@supports</code> wrapper for
<code>color-mix</code> values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19450">#19450</a>)</li>
<li>Allow whitespace around <code>@source inline()</code> argument (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19461">#19461</a>)</li>
<li>Emit comment when source maps are saved to files when using
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19447">#19447</a>)</li>
<li>Detect utilities containing capital letters followed by numbers (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19465">#19465</a>)</li>
<li>Fix class extraction for Rails' strict locals (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19525">#19525</a>)</li>
<li>Align <code>@utility</code> name validation with Oxide scanner rules
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19524">#19524</a>)</li>
<li>Fix infinite loop when using <code>@variant</code> inside
<code>@custom-variant</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19633">#19633</a>)</li>
<li>Allow multiples of <code>.25</code> in <code>aspect-*</code>
fractions (e.g. <code>aspect-8.5/11</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19688">#19688</a>)</li>
<li>Ensure changes to external files listed via <code>@source</code>
trigger a full page reload when using <code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19670">#19670</a>)</li>
<li>Improve performance of Oxide scanner in bigger projects by reducing
file system walks (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19632">#19632</a>)</li>
<li>Ensure import aliases in Astro v5 work without crashing when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/issues/19677">#19677</a>)</li>
<li>Allow escape characters in <code>@utility</code> names to improve
support with formatters such as Biome (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19626">#19626</a>)</li>
<li>Fix incorrect canonicalization results when canonicalizing multiple
times (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19675">#19675</a>)</li>
<li>Add <code>.jj</code> to default ignored content directories (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19687">#19687</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>start-*</code> and <code>end-*</code> utilities in
favor of <code>inset-s-*</code> and <code>inset-e-*</code> utilities (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
</ul>
<h2>[4.1.18] - 2025-12-11</h2>
<h3>Fixed</h3>
<ul>
<li>Ensure validation of <code>source(…)</code> happens relative to the
file it is in (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19274">#19274</a>)</li>
<li>Include filename and line numbers in CSS parse errors (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19282">#19282</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1dce64ee7e"><code>1dce64e</code></a>
4.2.1 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19714">#19714</a>)</li>
<li><a
href="1b16411919"><code>1b16411</code></a>
4.2.0 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19695">#19695</a>)</li>
<li><a
href="d9fff9f595"><code>d9fff9f</code></a>
docs: update package README CI badge to main (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19692">#19692</a>)</li>
<li><a
href="8ed67bf551"><code>8ed67bf</code></a>
Fix Tailwind CSS package README GitHub links (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19644">#19644</a>)</li>
<li><a
href="1638f35c3a"><code>1638f35</code></a>
Bump dependencies (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19608">#19608</a>)</li>
<li><a
href="bccf4bbfbd"><code>bccf4bb</code></a>
Add <code>@​tailwindcss/webpack</code> loader for Tailwind CSS v4 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19610">#19610</a>)</li>
<li><a
href="8d5e955058"><code>8d5e955</code></a>
Update dedent 1.7.0 → 1.7.1 (patch) (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19484">#19484</a>)</li>
<li><a
href="9b32f7cb2f"><code>9b32f7c</code></a>
Release v4.1.18 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19431">#19431</a>)</li>
<li><a
href="9c8cf8ac19"><code>9c8cf8a</code></a>
Fix formatting of path in README.md (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19407">#19407</a>)</li>
<li>See full diff in <a
href="https://github.com/tailwindlabs/tailwindcss/commits/v4.2.1/packages/@tailwindcss-postcss">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@tailwindcss/postcss&package-manager=npm_and_yarn&previous-version=4.1.17&new-version=4.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-24 04:10:03 +00:00
dependabot[bot]
4fb24db2e7 Bump tailwindcss from 4.1.17 to 4.2.1 in /docs (#1569)
Bumps
[tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss)
from 4.1.17 to 4.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/releases">tailwindcss's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.1</h2>
<h3>Fixed</h3>
<ul>
<li>Allow trailing dash in functional utility names for backwards
compatibility (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19696">#19696</a>)</li>
<li>Properly detect classes containing <code>.</code> characters within
curly braces in MDX files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19711">#19711</a>)</li>
</ul>
<h2>v4.2.0</h2>
<h3>Added</h3>
<ul>
<li>Add mauve, olive, mist, and taupe color palettes to the default
theme (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19627">#19627</a>)</li>
<li>Add <code>@tailwindcss/webpack</code> package to run Tailwind CSS as
a webpack plugin (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19610">#19610</a>)</li>
<li>Add <code>pbs-*</code> and <code>pbe-*</code> utilities for
<code>padding-block-start</code> and <code>padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>mbs-*</code> and <code>mbe-*</code> utilities for
<code>margin-block-start</code> and <code>margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-pbs-*</code> and <code>scroll-pbe-*</code>
utilities for <code>scroll-padding-block-start</code> and
<code>scroll-padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-mbs-*</code> and <code>scroll-mbe-*</code>
utilities for <code>scroll-margin-block-start</code> and
<code>scroll-margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>border-bs-*</code> and <code>border-be-*</code> utilities
for <code>border-block-start</code> and <code>border-block-end</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>inline-*</code>, <code>min-inline-*</code>,
<code>max-inline-*</code> utilities for <code>inline-size</code>,
<code>min-inline-size</code>, and <code>max-inline-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>block-*</code>, <code>min-block-*</code>,
<code>max-block-*</code> utilities for <code>block-size</code>,
<code>min-block-size</code>, and <code>max-block-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>inset-s-*</code>, <code>inset-e-*</code>,
<code>inset-bs-*</code>, <code>inset-be-*</code> utilities for
<code>inset-inline-start</code>, <code>inset-inline-end</code>,
<code>inset-block-start</code>, and <code>inset-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
<li>Add <code>font-features-*</code> utility for
<code>font-feature-settings</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19623">#19623</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Prevent double <code>@supports</code> wrapper for
<code>color-mix</code> values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19450">#19450</a>)</li>
<li>Allow whitespace around <code>@source inline()</code> argument (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19461">#19461</a>)</li>
<li>Emit comment when source maps are saved to files when using
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19447">#19447</a>)</li>
<li>Detect utilities containing capital letters followed by numbers (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19465">#19465</a>)</li>
<li>Fix class extraction for Rails' strict locals (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19525">#19525</a>)</li>
<li>Align <code>@utility</code> name validation with Oxide scanner rules
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19524">#19524</a>)</li>
<li>Fix infinite loop when using <code>@variant</code> inside
<code>@custom-variant</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19633">#19633</a>)</li>
<li>Allow multiples of <code>.25</code> in <code>aspect-*</code>
fractions (e.g. <code>aspect-8.5/11</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19688">#19688</a>)</li>
<li>Ensure changes to external files listed via <code>@source</code>
trigger a full page reload when using <code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19670">#19670</a>)</li>
<li>Improve performance of Oxide scanner in bigger projects by reducing
file system walks (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19632">#19632</a>)</li>
<li>Ensure import aliases in Astro v5 work without crashing when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/issues/19677">#19677</a>)</li>
<li>Allow escape characters in <code>@utility</code> names to improve
support with formatters such as Biome (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19626">#19626</a>)</li>
<li>Fix incorrect canonicalization results when canonicalizing multiple
times (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19675">#19675</a>)</li>
<li>Add <code>.jj</code> to default ignored content directories (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19687">#19687</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>start-*</code> and <code>end-*</code> utilities in
favor of <code>inset-s-*</code> and <code>inset-e-*</code> utilities (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
</ul>
<h2>v4.1.18</h2>
<h3>Fixed</h3>
<ul>
<li>Ensure validation of <code>source(…)</code> happens relative to the
file it is in (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19274">#19274</a>)</li>
<li>Include filename and line numbers in CSS parse errors (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19282">#19282</a>)</li>
<li>Skip comments in Ruby files when checking for class names (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19243">#19243</a>)</li>
<li>Skip over arbitrary property utilities with a top-level
<code>!</code> in the value (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19243">#19243</a>)</li>
<li>Support environment API in <code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/18970">#18970</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md">tailwindcss's
changelog</a>.</em></p>
<blockquote>
<h2>[4.2.1] - 2026-02-23</h2>
<h3>Fixed</h3>
<ul>
<li>Allow trailing dash in functional utility names for backwards
compatibility (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19696">#19696</a>)</li>
<li>Properly detect classes containing <code>.</code> characters within
curly braces in MDX files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19711">#19711</a>)</li>
</ul>
<h2>[4.2.0] - 2026-02-18</h2>
<h3>Added</h3>
<ul>
<li>Add mauve, olive, mist, and taupe color palettes to the default
theme (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19627">#19627</a>)</li>
<li>Add <code>@tailwindcss/webpack</code> package to run Tailwind CSS as
a webpack plugin (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19610">#19610</a>)</li>
<li>Add <code>pbs-*</code> and <code>pbe-*</code> utilities for
<code>padding-block-start</code> and <code>padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>mbs-*</code> and <code>mbe-*</code> utilities for
<code>margin-block-start</code> and <code>margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-pbs-*</code> and <code>scroll-pbe-*</code>
utilities for <code>scroll-padding-block-start</code> and
<code>scroll-padding-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>scroll-mbs-*</code> and <code>scroll-mbe-*</code>
utilities for <code>scroll-margin-block-start</code> and
<code>scroll-margin-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>border-bs-*</code> and <code>border-be-*</code> utilities
for <code>border-block-start</code> and <code>border-block-end</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19601">#19601</a>)</li>
<li>Add <code>inline-*</code>, <code>min-inline-*</code>,
<code>max-inline-*</code> utilities for <code>inline-size</code>,
<code>min-inline-size</code>, and <code>max-inline-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>block-*</code>, <code>min-block-*</code>,
<code>max-block-*</code> utilities for <code>block-size</code>,
<code>min-block-size</code>, and <code>max-block-size</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19612">#19612</a>)</li>
<li>Add <code>inset-s-*</code>, <code>inset-e-*</code>,
<code>inset-bs-*</code>, <code>inset-be-*</code> utilities for
<code>inset-inline-start</code>, <code>inset-inline-end</code>,
<code>inset-block-start</code>, and <code>inset-block-end</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
<li>Add <code>font-features-*</code> utility for
<code>font-feature-settings</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19623">#19623</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Prevent double <code>@supports</code> wrapper for
<code>color-mix</code> values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19450">#19450</a>)</li>
<li>Allow whitespace around <code>@source inline()</code> argument (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19461">#19461</a>)</li>
<li>Emit comment when source maps are saved to files when using
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19447">#19447</a>)</li>
<li>Detect utilities containing capital letters followed by numbers (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19465">#19465</a>)</li>
<li>Fix class extraction for Rails' strict locals (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19525">#19525</a>)</li>
<li>Align <code>@utility</code> name validation with Oxide scanner rules
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19524">#19524</a>)</li>
<li>Fix infinite loop when using <code>@variant</code> inside
<code>@custom-variant</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19633">#19633</a>)</li>
<li>Allow multiples of <code>.25</code> in <code>aspect-*</code>
fractions (e.g. <code>aspect-8.5/11</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19688">#19688</a>)</li>
<li>Ensure changes to external files listed via <code>@source</code>
trigger a full page reload when using <code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19670">#19670</a>)</li>
<li>Improve performance of Oxide scanner in bigger projects by reducing
file system walks (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19632">#19632</a>)</li>
<li>Ensure import aliases in Astro v5 work without crashing when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/issues/19677">#19677</a>)</li>
<li>Allow escape characters in <code>@utility</code> names to improve
support with formatters such as Biome (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19626">#19626</a>)</li>
<li>Fix incorrect canonicalization results when canonicalizing multiple
times (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19675">#19675</a>)</li>
<li>Add <code>.jj</code> to default ignored content directories (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19687">#19687</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>start-*</code> and <code>end-*</code> utilities in
favor of <code>inset-s-*</code> and <code>inset-e-*</code> utilities (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19613">#19613</a>)</li>
</ul>
<h2>[4.1.18] - 2025-12-11</h2>
<h3>Fixed</h3>
<ul>
<li>Ensure validation of <code>source(…)</code> happens relative to the
file it is in (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19274">#19274</a>)</li>
<li>Include filename and line numbers in CSS parse errors (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19282">#19282</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1dce64ee7e"><code>1dce64e</code></a>
4.2.1 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19714">#19714</a>)</li>
<li><a
href="d15d92ca60"><code>d15d92c</code></a>
Allow trailing dash in functional utility names (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19696">#19696</a>)</li>
<li><a
href="1b16411919"><code>1b16411</code></a>
4.2.0 (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19695">#19695</a>)</li>
<li><a
href="6118f4f6a7"><code>6118f4f</code></a>
Fix/misc docs and tests (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19652">#19652</a>)</li>
<li><a
href="5a4a7eba3a"><code>5a4a7eb</code></a>
fix(canonicalize): prevent collapse cache pollution across calls (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19675">#19675</a>)</li>
<li><a
href="d0a5612872"><code>d0a5612</code></a>
Add mauve, olive, mist, and taupe color palettes (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19627">#19627</a>)</li>
<li><a
href="d9fff9f595"><code>d9fff9f</code></a>
docs: update package README CI badge to main (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19692">#19692</a>)</li>
<li><a
href="ed52d3e6c9"><code>ed52d3e</code></a>
feat: handle backslash in <code>@utility</code> name (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19626">#19626</a>)</li>
<li><a
href="6eb3b32434"><code>6eb3b32</code></a>
Allow multiples of <code>.25</code> in <code>aspect-*</code> fractions
(<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19688">#19688</a>)</li>
<li><a
href="8ed67bf551"><code>8ed67bf</code></a>
Fix Tailwind CSS package README GitHub links (<a
href="https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss/issues/19644">#19644</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tailwindlabs/tailwindcss/commits/v4.2.1/packages/tailwindcss">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for tailwindcss since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tailwindcss&package-manager=npm_and_yarn&previous-version=4.1.17&new-version=4.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-24 04:09:45 +00:00
dependabot[bot]
d5d4cde2ce Bump @typescript-eslint/parser from 8.55.0 to 8.56.0 in /frontend (#1563)
Bumps
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
from 8.55.0 to 8.56.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v8.56.0</h2>
<h2>8.56.0 (2026-02-16)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support ESLint v10 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12057">#12057</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li>use parser options from context.languageOptions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12043">#12043</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Brad Zacher <a
href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li>
<li>fnx <a
href="https://github.com/DMartens"><code>@​DMartens</code></a></li>
<li>Joshua Chen</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>8.56.0 (2026-02-16)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support ESLint v10 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12057">#12057</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Brad Zacher <a
href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li>
<li>Joshua Chen</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.56.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8b8b68f200"><code>8b8b68f</code></a>
chore(release): publish 8.56.0</li>
<li><a
href="68a074fb61"><code>68a074f</code></a>
feat: support ESLint v10 (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12057">#12057</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/parser">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@typescript-eslint/parser&package-manager=npm_and_yarn&previous-version=8.55.0&new-version=8.56.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:12:57 +00:00
dependabot[bot]
218b0471ab Bump uvicorn from 0.40.0 to 0.41.0 in /backend (#1567)
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.40.0 to
0.41.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/uvicorn/releases">uvicorn's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.41.0</h2>
<h2>Added</h2>
<ul>
<li>Add <code>--limit-max-requests-jitter</code> to stagger worker
restarts (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2707">#2707</a>)</li>
<li>Add socket path to <code>scope[&quot;server&quot;]</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2561">#2561</a>)</li>
</ul>
<h2>Changed</h2>
<ul>
<li>Rename <code>LifespanOn.error_occured</code> to
<code>error_occurred</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2776">#2776</a>)</li>
</ul>
<h2>Fixed</h2>
<ul>
<li>Ignore permission denied errors in watchfiles reloader (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2817">#2817</a>)</li>
<li>Ensure lifespan shutdown runs when <code>should_exit</code> is set
during startup (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2812">#2812</a>)</li>
<li>Reduce the log level of 'request limit exceeded' messages (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2788">#2788</a>)</li>
</ul>
<hr />
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/t-kawasumi"><code>@​t-kawasumi</code></a> made
their first contribution in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/2776">Kludex/uvicorn#2776</a></li>
<li><a href="https://github.com/fardyn"><code>@​fardyn</code></a> made
their first contribution in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/2800">Kludex/uvicorn#2800</a></li>
<li><a href="https://github.com/ewie"><code>@​ewie</code></a> made their
first contribution in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/2807">Kludex/uvicorn#2807</a></li>
<li><a href="https://github.com/shevron"><code>@​shevron</code></a> made
their first contribution in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/2788">Kludex/uvicorn#2788</a></li>
<li><a href="https://github.com/jonashaag"><code>@​jonashaag</code></a>
made their first contribution in <a
href="https://redirect.github.com/Kludex/uvicorn/pull/2707">Kludex/uvicorn#2707</a></li>
</ul>
<hr />
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/uvicorn/compare/0.40.0...0.41.0">https://github.com/Kludex/uvicorn/compare/0.40.0...0.41.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md">uvicorn's
changelog</a>.</em></p>
<blockquote>
<h2>0.41.0 (February 16, 2026)</h2>
<h3>Added</h3>
<ul>
<li>Add <code>--limit-max-requests-jitter</code> to stagger worker
restarts (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2707">#2707</a>)</li>
<li>Add socket path to <code>scope[&quot;server&quot;]</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2561">#2561</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>LifespanOn.error_occured</code> to
<code>error_occurred</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2776">#2776</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore permission denied errors in watchfiles reloader (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2817">#2817</a>)</li>
<li>Ensure lifespan shutdown runs when <code>should_exit</code> is set
during startup (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2812">#2812</a>)</li>
<li>Reduce the log level of 'request limit exceeded' messages (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2788">#2788</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9283c0f15c"><code>9283c0f</code></a>
Version 0.41.0 (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2821">#2821</a>)</li>
<li><a
href="a01a33eb8f"><code>a01a33e</code></a>
Add <code>--limit-max-requests-jitter</code> to stagger worker restarts
(<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2707">#2707</a>)</li>
<li><a
href="2ce65bde15"><code>2ce65bd</code></a>
Ignore permission denied errors in watchfiles reloader (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2817">#2817</a>)</li>
<li><a
href="654f2ed7d7"><code>654f2ed</code></a>
Ensure lifespan shutdown runs when <code>should_exit</code> is set
during startup (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2812">#2812</a>)</li>
<li><a
href="a03d9f6f0e"><code>a03d9f6</code></a>
Reduce the log level of 'request limit exceeded' messages (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2788">#2788</a>)</li>
<li><a
href="e377de40d0"><code>e377de4</code></a>
Add socket path to scope[&quot;server&quot;] (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2561">#2561</a>)</li>
<li><a
href="0779f7f8a4"><code>0779f7f</code></a>
Poll for readiness in <code>test_multiprocess_health_check</code> and
<code>run_server</code> (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2816">#2816</a>)</li>
<li><a
href="7e9ce2c974"><code>7e9ce2c</code></a>
Poll for PID changes in <code>test_multiprocess_sighup</code> instead of
fixed sleep (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2">#2</a>...</li>
<li><a
href="99f0d8734d"><code>99f0d87</code></a>
Fix grep warning in scripts/sync-version (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2807">#2807</a>)</li>
<li><a
href="7ae2e6375a"><code>7ae2e63</code></a>
chore(deps): bump the python-packages group with 18 updates (<a
href="https://redirect.github.com/Kludex/uvicorn/issues/2801">#2801</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Kludex/uvicorn/compare/0.40.0...0.41.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uvicorn&package-manager=uv&previous-version=0.40.0&new-version=0.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:12:50 +00:00
dependabot[bot]
cc6e5db260 Bump gunicorn from 25.0.1 to 25.1.0 in /backend (#1566)
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 25.0.1 to
25.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/benoitc/gunicorn/releases">gunicorn's
releases</a>.</em></p>
<blockquote>
<h2>Gunicorn 25.1.0</h2>
<h3>New Features</h3>
<ul>
<li>
<p><strong>Control Interface (gunicornc)</strong>: Add interactive
control interface for managing
running Gunicorn instances, similar to birdc for BIRD routing daemon
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3505">#3505</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3505">benoitc/gunicorn#3505</a>))</p>
<ul>
<li>Unix socket-based communication with JSON protocol</li>
<li>Interactive mode with readline support and command history</li>
<li>Commands: <code>show
all/workers/dirty/config/stats/listeners</code></li>
<li>Worker management: <code>worker add/remove/kill</code>, <code>dirty
add/remove</code></li>
<li>Server control: <code>reload</code>, <code>reopen</code>,
<code>shutdown</code></li>
<li>New settings: <code>--control-socket</code>,
<code>--control-socket-mode</code>,
<code>--no-control-socket</code></li>
<li>New CLI tool: <code>gunicornc</code> for connecting to control
socket</li>
<li>See <a href="https://gunicorn.org/guides/gunicornc/">Control
Interface Guide</a> for details</li>
</ul>
</li>
<li>
<p><strong>Dirty Stash</strong>: Add global shared state between workers
via <code>dirty.stash</code>
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3503">#3503</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3503">benoitc/gunicorn#3503</a>))</p>
<ul>
<li>In-memory key-value store accessible by all workers</li>
<li>Supports get, set, delete, clear, keys, and has operations</li>
<li>Useful for sharing state like feature flags, rate limits, or cached
data</li>
</ul>
</li>
<li>
<p><strong>Dirty Binary Protocol</strong>: Implement efficient binary
protocol for dirty arbiter IPC
using TLV (Type-Length-Value) encoding
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3500">#3500</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3500">benoitc/gunicorn#3500</a>))</p>
<ul>
<li>More efficient than JSON for binary data</li>
<li>Supports all Python types: str, bytes, int, float, bool, None, list,
dict</li>
<li>Better performance for large payloads</li>
</ul>
</li>
<li>
<p><strong>Dirty TTIN/TTOU Signals</strong>: Add dynamic worker scaling
for dirty arbiters
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3504">#3504</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3504">benoitc/gunicorn#3504</a>))</p>
<ul>
<li>Send SIGTTIN to increase dirty workers</li>
<li>Send SIGTTOU to decrease dirty workers</li>
<li>Respects minimum worker constraints from app configurations</li>
</ul>
</li>
</ul>
<h3>Changes</h3>
<ul>
<li><strong>ASGI Worker</strong>: Promoted from beta to stable</li>
<li><strong>Dirty Arbiters</strong>: Now marked as beta feature</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Fix Markdown formatting in /configure documentation</li>
</ul>
<h2>25.0.3</h2>
<h2>What's Changed</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Fix RuntimeError when StopIteration raised in ASGI coroutine (<a
href="https://redirect.github.com/benoitc/gunicorn/issues/3484">#3484</a>)</li>
<li>Fix passing maxsplit in re.split() as positional argument
(deprecated in Python 3.13)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2d4310116d"><code>2d43101</code></a>
docs: merge gunicornc into 25.1.0 release</li>
<li><a
href="bf4ad8d610"><code>bf4ad8d</code></a>
docs: update 25.1.0 release date to 2026-02-13</li>
<li><a
href="730350eb9f"><code>730350e</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3505">#3505</a>
from benoitc/feature/gunicornc-control-interface</li>
<li><a
href="63df19bd5c"><code>63df19b</code></a>
fix(tests): use process groups for reliable signal handling in PyPy</li>
<li><a
href="cd77bcc941"><code>cd77bcc</code></a>
fix(tests): increase wait time for all server tests</li>
<li><a
href="02ea9855c1"><code>02ea985</code></a>
fix(tests): improve server test reliability on FreeBSD</li>
<li><a
href="6d81c9ebcd"><code>6d81c9e</code></a>
fix: resolve pylint warnings</li>
<li><a
href="7486baa0ad"><code>7486baa</code></a>
fix: remove unused imports</li>
<li><a
href="3e60d2942d"><code>3e60d29</code></a>
docs: add gunicornc control interface guide</li>
<li><a
href="e05e40d19b"><code>e05e40d</code></a>
feat(ctl): add message-based dirty worker management</li>
<li>Additional commits viewable in <a
href="https://github.com/benoitc/gunicorn/compare/25.0.1...25.1.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gunicorn&package-manager=uv&previous-version=25.0.1&new-version=25.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:12:37 +00:00
dependabot[bot]
ae3e75764a Bump sentry-sdk from 2.52.0 to 2.53.0 in /backend (#1565)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.52.0 to 2.53.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.53.0</h2>
<h3>Bug Fixes 🐛</h3>
<h4>Openai Agents</h4>
<ul>
<li>Patch <code>execute_final_output()</code> functions following
library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5453">#5453</a></li>
<li>Patch <code>execute_handoffs()</code> functions following library
refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5452">#5452</a></li>
<li>Patch <code>run_single_turn_streamed()</code> functions following
library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5451">#5451</a></li>
<li>Patch <code>run_single_turn()</code> functions following library
refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5450">#5450</a></li>
<li>Patch models functions following library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5449">#5449</a></li>
<li>Patch tool functions following library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5445">#5445</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>Close the connection we're reading driver_type from by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5427">#5427</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>Document <code>openai-agents</code> control-flow by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5447">#5447</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<h4>Openai Agents</h4>
<ul>
<li>New tool field and library error log by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5454">#5454</a></li>
<li>Avoid calling SDK-internal functions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5437">#5437</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>Improve Craft config with title stripping and artifact filtering by
<a href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5444">#5444</a></li>
<li>Use fixed clickhouse action, remove aws-sam-cli dependency by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5457">#5457</a></li>
<li>Remove references to unsupported attribute types by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5425">#5425</a></li>
<li>Pin setuptools for linting and chalice tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5438">#5438</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.53.0</h2>
<h3>Bug Fixes 🐛</h3>
<h4>Openai Agents</h4>
<ul>
<li>Patch <code>execute_final_output()</code> functions following
library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5453">#5453</a></li>
<li>Patch <code>execute_handoffs()</code> functions following library
refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5452">#5452</a></li>
<li>Patch <code>run_single_turn_streamed()</code> functions following
library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5451">#5451</a></li>
<li>Patch <code>run_single_turn()</code> functions following library
refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5450">#5450</a></li>
<li>Patch models functions following library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5449">#5449</a></li>
<li>Patch tool functions following library refactor by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5445">#5445</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>Close the connection we're reading driver_type from by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5427">#5427</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>Document <code>openai-agents</code> control-flow by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5447">#5447</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<h4>Openai Agents</h4>
<ul>
<li>New tool field and library error log by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5454">#5454</a></li>
<li>Avoid calling SDK-internal functions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5437">#5437</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>Improve Craft config with title stripping and artifact filtering by
<a href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5444">#5444</a></li>
<li>Use fixed clickhouse action, remove aws-sam-cli dependency by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5457">#5457</a></li>
<li>Remove references to unsupported attribute types by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5425">#5425</a></li>
<li>Pin setuptools for linting and chalice tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5438">#5438</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f75a9ac105"><code>f75a9ac</code></a>
Update CHANGELOG.md</li>
<li><a
href="b700fa85d8"><code>b700fa8</code></a>
Update CHANGELOG.md</li>
<li><a
href="45379e206c"><code>45379e2</code></a>
release: 2.53.0</li>
<li><a
href="4d8faf347b"><code>4d8faf3</code></a>
test(openai-agents): New tool field and library error log (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5454">#5454</a>)</li>
<li><a
href="d3e2c88a9f"><code>d3e2c88</code></a>
fix(openai-agents): Patch <code>execute_final_output()</code> functions
following librar...</li>
<li><a
href="f71a60450a"><code>f71a604</code></a>
fix(openai-agents): Patch <code>execute_handoffs()</code> functions
following library re...</li>
<li><a
href="bea608c3aa"><code>bea608c</code></a>
fix(openai-agents): Patch <code>run_single_turn_streamed()</code>
functions following li...</li>
<li><a
href="14e3e0a0a0"><code>14e3e0a</code></a>
fix(openai-agents): Patch <code>run_single_turn()</code> functions
following library ref...</li>
<li><a
href="a5c2906a48"><code>a5c2906</code></a>
fix(openai-agents): Patch models functions following library refactor
(<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5449">#5449</a>)</li>
<li><a
href="f78df7c017"><code>f78df7c</code></a>
ci: Use fixed clickhouse action, remove aws-sam-cli dependency (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5457">#5457</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.52.0...2.53.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.52.0&new-version=2.53.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:12:23 +00:00
dependabot[bot]
8747e1727e Bump pydantic-settings from 2.12.0 to 2.13.0 in /backend (#1564)
Bumps [pydantic-settings](https://github.com/pydantic/pydantic-settings)
from 2.12.0 to 2.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pydantic/pydantic-settings/releases">pydantic-settings's
releases</a>.</em></p>
<blockquote>
<h2>v2.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Deterministic alias selection when using validate_by_name by <a
href="https://github.com/chbndrhnns"><code>@​chbndrhnns</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/707">pydantic/pydantic-settings#707</a></li>
<li>add deep merge functionality to config file sources by <a
href="https://github.com/pmeier"><code>@​pmeier</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/698">pydantic/pydantic-settings#698</a></li>
<li>Add support for AWS Secrets Manager VersionId parameter by <a
href="https://github.com/jcyamacho"><code>@​jcyamacho</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/708">pydantic/pydantic-settings#708</a></li>
<li>bugfix: Return <code>None</code> for inaccessible GCP Secret Manager
secrets by <a
href="https://github.com/zaphod72"><code>@​zaphod72</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/712">pydantic/pydantic-settings#712</a></li>
<li>Bugfix for cli_kebab_case=&quot;all&quot; and CliImplicitFlag[bool]
by <a href="https://github.com/Digity101"><code>@​Digity101</code></a>
in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/702">pydantic/pydantic-settings#702</a></li>
<li>Unpack type alisases when looking for <code>NoDecode</code> by <a
href="https://github.com/tselepakis"><code>@​tselepakis</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/695">pydantic/pydantic-settings#695</a></li>
<li>CliToggleFlag and CliDualFlag by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/717">pydantic/pydantic-settings#717</a></li>
<li>Fix for CLI duplicate enum field values. by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/722">pydantic/pydantic-settings#722</a></li>
<li>fixed load nested config from env by <a
href="https://github.com/Sube-py"><code>@​Sube-py</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/723">pydantic/pydantic-settings#723</a></li>
<li>Add non-Path files support (for example Traversable) and open files
using Path.open method by <a
href="https://github.com/mahenzon"><code>@​mahenzon</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/724">pydantic/pydantic-settings#724</a></li>
<li>add one more traversable test by <a
href="https://github.com/mahenzon"><code>@​mahenzon</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/725">pydantic/pydantic-settings#725</a></li>
<li>CLI fix fox external list args. by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/727">pydantic/pydantic-settings#727</a></li>
<li>fix: handle case-insensitive retrieval in
GoogleSecretManagerSettingsSource by <a
href="https://github.com/ezwiefel"><code>@​ezwiefel</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/730">pydantic/pydantic-settings#730</a></li>
<li>CLI test fixes for help text formatting. by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/735">pydantic/pydantic-settings#735</a></li>
<li>Avoid conflicts with the <code>NAME</code> environment variable in
WSL by <a href="https://github.com/kzrnm"><code>@​kzrnm</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/747">pydantic/pydantic-settings#747</a></li>
<li>fix: When restoring init kwargs, use deterministic order by <a
href="https://github.com/chbndrhnns"><code>@​chbndrhnns</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/746">pydantic/pydantic-settings#746</a></li>
<li>Add env_prefix_target by <a
href="https://github.com/kzrnm"><code>@​kzrnm</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/749">pydantic/pydantic-settings#749</a></li>
<li>Remove <code>(default: …)</code> in the help message for
<code>CliToggleFlag</code> by <a
href="https://github.com/kzrnm"><code>@​kzrnm</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/740">pydantic/pydantic-settings#740</a></li>
<li>Add support for CLI serialize styles. by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/755">pydantic/pydantic-settings#755</a></li>
<li>Add support for overriding default help on CLI internal parser. by
<a href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/758">pydantic/pydantic-settings#758</a></li>
<li>CLI format_help method support by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/759">pydantic/pydantic-settings#759</a></li>
<li>feat(gcp): support SecretVersion annotation for per-field secret
versioning by <a
href="https://github.com/ezwiefel"><code>@​ezwiefel</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/763">pydantic/pydantic-settings#763</a></li>
<li>Allow <code>snake_case_conversion</code> with
<code>env_prefix</code> for Azure Key Vault source by <a
href="https://github.com/cstarkers"><code>@​cstarkers</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/762">pydantic/pydantic-settings#762</a></li>
<li>fix: Only override preferred_key when no value was found by <a
href="https://github.com/chbndrhnns"><code>@​chbndrhnns</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/767">pydantic/pydantic-settings#767</a></li>
<li>Update deps by <a
href="https://github.com/hramezani"><code>@​hramezani</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/768">pydantic/pydantic-settings#768</a></li>
<li>CLI coerce numeric types. by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/769">pydantic/pydantic-settings#769</a></li>
<li>CLI Union Discriminator Choices in Help by <a
href="https://github.com/kschwab"><code>@​kschwab</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/764">pydantic/pydantic-settings#764</a></li>
<li>Add nested path support for yaml_config_section (fixes <a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/772">#772</a>)
by <a
href="https://github.com/hugo-romero-mm"><code>@​hugo-romero-mm</code></a>
in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/773">pydantic/pydantic-settings#773</a></li>
<li>Prepare release 2.13.0 by <a
href="https://github.com/hramezani"><code>@​hramezani</code></a> in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/777">pydantic/pydantic-settings#777</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/pmeier"><code>@​pmeier</code></a> made
their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/698">pydantic/pydantic-settings#698</a></li>
<li><a href="https://github.com/jcyamacho"><code>@​jcyamacho</code></a>
made their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/708">pydantic/pydantic-settings#708</a></li>
<li><a href="https://github.com/zaphod72"><code>@​zaphod72</code></a>
made their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/712">pydantic/pydantic-settings#712</a></li>
<li><a href="https://github.com/Digity101"><code>@​Digity101</code></a>
made their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/702">pydantic/pydantic-settings#702</a></li>
<li><a href="https://github.com/Sube-py"><code>@​Sube-py</code></a> made
their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/723">pydantic/pydantic-settings#723</a></li>
<li><a href="https://github.com/mahenzon"><code>@​mahenzon</code></a>
made their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/724">pydantic/pydantic-settings#724</a></li>
<li><a href="https://github.com/kzrnm"><code>@​kzrnm</code></a> made
their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/747">pydantic/pydantic-settings#747</a></li>
<li><a href="https://github.com/cstarkers"><code>@​cstarkers</code></a>
made their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/762">pydantic/pydantic-settings#762</a></li>
<li><a
href="https://github.com/hugo-romero-mm"><code>@​hugo-romero-mm</code></a>
made their first contribution in <a
href="https://redirect.github.com/pydantic/pydantic-settings/pull/773">pydantic/pydantic-settings#773</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pydantic/pydantic-settings/compare/v2.12.0...v2.13.0">https://github.com/pydantic/pydantic-settings/compare/v2.12.0...v2.13.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="198e71cf0c"><code>198e71c</code></a>
Prepare release 2.13.0 (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/777">#777</a>)</li>
<li><a
href="de71e84057"><code>de71e84</code></a>
Add nested path support for yaml_config_section (fixes <a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/772">#772</a>)
(<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/773">#773</a>)</li>
<li><a
href="0f8f951b89"><code>0f8f951</code></a>
CLI Union Discriminator Choices in Help (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/764">#764</a>)</li>
<li><a
href="ce9804c462"><code>ce9804c</code></a>
CLI coerce numeric types. (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/769">#769</a>)</li>
<li><a
href="e460f0b4d8"><code>e460f0b</code></a>
Update deps (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/768">#768</a>)</li>
<li><a
href="a04b03450e"><code>a04b034</code></a>
fix: Only override preferred_key when no value was found (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/767">#767</a>)</li>
<li><a
href="f6ddaee324"><code>f6ddaee</code></a>
Allow <code>snake_case_conversion</code> with <code>env_prefix</code>
for Azure Key Vault source (#...</li>
<li><a
href="6ce78bcfb7"><code>6ce78bc</code></a>
feat(gcp): support SecretVersion annotation for per-field secret
versioning (...</li>
<li><a
href="21c7093837"><code>21c7093</code></a>
CLI format_help method support (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/759">#759</a>)</li>
<li><a
href="0e96e9c27e"><code>0e96e9c</code></a>
Add support for overriding default help on CLI internal parser. (<a
href="https://redirect.github.com/pydantic/pydantic-settings/issues/758">#758</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pydantic/pydantic-settings/compare/v2.12.0...v2.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pydantic-settings&package-manager=uv&previous-version=2.12.0&new-version=2.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:12:12 +00:00
dependabot[bot]
dd9a159843 Bump @typescript-eslint/eslint-plugin from 7.18.0 to 8.55.0 in /frontend (#1562)
Bumps
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
from 7.18.0 to 8.55.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/eslint-plugin</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v8.55.0</h2>
<h2>8.55.0 (2026-02-09)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>utils:</strong> deprecate defaultOptions in favor of
meta.defaultOptions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11992">#11992</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unused-vars] remove trailing
newline when removing entire import (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11990">#11990</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
require strictNullChecks (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11966">#11966</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12000">#12000</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
report unnecessary defaults in ternary expressions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11984">#11984</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
reduce param index to ts this handling (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11949">#11949</a>)</li>
<li><strong>typescript-estree:</strong> forbid invalid modifier in
object expression (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11931">#11931</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Christian Rose <a
href="https://github.com/chrros95"><code>@​chrros95</code></a></li>
<li>fisker Cheung <a
href="https://github.com/fisker"><code>@​fisker</code></a></li>
<li>Josh Goldberg</li>
<li>Maria Solano <a
href="https://github.com/MariaSolOs"><code>@​MariaSolOs</code></a></li>
<li>Minyeong Kim <a
href="https://github.com/minyeong981"><code>@​minyeong981</code></a></li>
<li>SungHyun627 <a
href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li>
<li>Yukihiro Hasegawa <a
href="https://github.com/y-hsgw"><code>@​y-hsgw</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>v8.54.0</h2>
<h2>8.54.0 (2026-01-26)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin-internal:</strong> add prefer-tsutils-methods
rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11974">#11974</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11625">#11625</a>)</li>
<li><strong>scope-manager:</strong> support ScopeManager#addGlobals (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11914">#11914</a>)</li>
<li><strong>typescript-estree:</strong> add shortcut methods to
ParserServicesWithTypeInformation (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11965">#11965</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11955">#11955</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unused-private-class-members]
private destructured class member is defined but used (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11785">#11785</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
check both base constraint and actual type for non-null assertions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11967">#11967</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11559">#11559</a>)</li>
<li><strong>scope-manager:</strong> fix catch clause scopes
<code>def.name</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11982">#11982</a>)</li>
<li><strong>scope-manager:</strong> prevent misidentification of
<code>&quot;use strict&quot;</code> directives (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11995">#11995</a>)</li>
<li><strong>utils:</strong> handle missing <code>FlatESLint</code> and
<code>LegacyESLint</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11958">#11958</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Brad Zacher <a
href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li>
<li>fnx <a
href="https://github.com/DMartens"><code>@​DMartens</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md"><code>@​typescript-eslint/eslint-plugin</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>8.55.0 (2026-02-09)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>utils:</strong> deprecate defaultOptions in favor of
meta.defaultOptions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11992">#11992</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
reduce param index to ts this handling (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11949">#11949</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
report unnecessary defaults in ternary expressions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11984">#11984</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
require strictNullChecks (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11966">#11966</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12000">#12000</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unused-vars] remove trailing
newline when removing entire import (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11990">#11990</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Christian Rose <a
href="https://github.com/chrros95"><code>@​chrros95</code></a></li>
<li>Josh Goldberg</li>
<li>Maria Solano <a
href="https://github.com/MariaSolOs"><code>@​MariaSolOs</code></a></li>
<li>Minyeong Kim <a
href="https://github.com/minyeong981"><code>@​minyeong981</code></a></li>
<li>SungHyun627 <a
href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li>
<li>Yukihiro Hasegawa <a
href="https://github.com/y-hsgw"><code>@​y-hsgw</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.54.0 (2026-01-26)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin-internal:</strong> add prefer-tsutils-methods
rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11974">#11974</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11625">#11625</a>)</li>
<li><strong>typescript-estree:</strong> add shortcut methods to
ParserServicesWithTypeInformation (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11965">#11965</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11955">#11955</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
check both base constraint and actual type for non-null assertions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11967">#11967</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11559">#11559</a>)</li>
<li><strong>deps:</strong> update dependency prettier to v3.8.0 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11991">#11991</a>)</li>
<li><strong>scope-manager:</strong> fix catch clause scopes
<code>def.name</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11982">#11982</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unused-private-class-members]
private destructured class member is defined but used (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11785">#11785</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Brad Zacher <a
href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li>
<li>Josh Goldberg</li>
<li>MinJae <a
href="https://github.com/Ju-MINJAE"><code>@​Ju-MINJAE</code></a></li>
<li>Minyeong Kim <a
href="https://github.com/minyeong981"><code>@​minyeong981</code></a></li>
<li>overlookmotel</li>
<li>Yuya Yoshioka <a
href="https://github.com/YuyaYoshioka"><code>@​YuyaYoshioka</code></a></li>
<li>김현수 <a
href="https://github.com/Kimsoo0119"><code>@​Kimsoo0119</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fedfe8665a"><code>fedfe86</code></a>
chore(release): publish 8.55.0</li>
<li><a
href="8a95834bb5"><code>8a95834</code></a>
fix(eslint-plugin): [no-useless-default-assignment] reduce param index
to ts ...</li>
<li><a
href="4ba1e72cd7"><code>4ba1e72</code></a>
fix(eslint-plugin): [no-useless-default-assignment] report unnecessary
defaul...</li>
<li><a
href="a1f8617907"><code>a1f8617</code></a>
feat(utils): deprecate defaultOptions in favor of meta.defaultOptions
(<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/11992">#11992</a>)</li>
<li><a
href="3f0ce54da5"><code>3f0ce54</code></a>
fix(eslint-plugin): [no-useless-default-assignment] require
strictNullChecks ...</li>
<li><a
href="3df0002e86"><code>3df0002</code></a>
fix(eslint-plugin): [no-unused-vars] remove trailing newline when
removing en...</li>
<li><a
href="b931f8c706"><code>b931f8c</code></a>
chore: use workspace refs for workspace deps (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12018">#12018</a>)</li>
<li><a
href="1f17a7918c"><code>1f17a79</code></a>
chore: migrate to pnpm (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/11248">#11248</a>)</li>
<li><a
href="d423e57622"><code>d423e57</code></a>
chore(release): publish 8.54.0</li>
<li><a
href="80e33ff2fd"><code>80e33ff</code></a>
feat(eslint-plugin-internal): add prefer-tsutils-methods rule (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/11974">#11974</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.55.0/packages/eslint-plugin">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for
<code>@​typescript-eslint/eslint-plugin</code> since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@typescript-eslint/eslint-plugin&package-manager=npm_and_yarn&previous-version=7.18.0&new-version=8.55.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:10:39 +00:00
dependabot[bot]
6e7e1f3ab7 Bump markdownlint-cli2 from 0.20.0 to 0.21.0 in /docs (#1561)
Bumps
[markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2)
from 0.20.0 to 0.21.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md">markdownlint-cli2's
changelog</a>.</em></p>
<blockquote>
<h2>0.21.0</h2>
<ul>
<li>Refactor options/configuration file loading</li>
<li>Update dependencies</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5387279b3b"><code>5387279</code></a>
Update to version 0.21.0.</li>
<li><a
href="f981e1ebd3"><code>f981e1e</code></a>
Freshen list of external custom rules included with the
markdownlint-cli2-rul...</li>
<li><a
href="eb82717fee"><code>eb82717</code></a>
Bump cpy from 13.2.0 to 13.2.1</li>
<li><a
href="076392f2ed"><code>076392f</code></a>
Bump markdown-it from 14.1.0 to 14.1.1</li>
<li><a
href="9370c55f3e"><code>9370c55</code></a>
Bump eslint-plugin-unicorn from 62.0.0 to 63.0.0</li>
<li><a
href="c9e105d5d0"><code>c9e105d</code></a>
Update indirect playwright dependencies to 1.58.2.</li>
<li><a
href="8105a30821"><code>8105a30</code></a>
Bump <code>@​playwright/test</code> from 1.58.1 to 1.58.2</li>
<li><a
href="fdff78efd2"><code>fdff78e</code></a>
Bump <code>@​stylistic/eslint-plugin</code> from 5.7.1 to 5.8.0</li>
<li><a
href="e8829a5187"><code>e8829a5</code></a>
Bump eslint-plugin-jsdoc from 62.5.2 to 62.5.4</li>
<li><a
href="5198b10b44"><code>5198b10</code></a>
Bump eslint-plugin-jsdoc from 62.5.0 to 62.5.2</li>
<li>Additional commits viewable in <a
href="https://github.com/DavidAnson/markdownlint-cli2/compare/v0.20.0...v0.21.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdownlint-cli2&package-manager=npm_and_yarn&previous-version=0.20.0&new-version=0.21.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:10:19 +00:00
dependabot[bot]
72323149d1 Bump lucide-react from 0.563.0 to 0.564.0 in /docs (#1560)
Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 0.563.0 to 0.564.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.564.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(docs): Improve SEO icon detail pages by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4040">lucide-icons/lucide#4040</a></li>
<li>feat(icons): added <code>database-search</code> icon by <a
href="https://github.com/Spleefies"><code>@​Spleefies</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4003">lucide-icons/lucide#4003</a></li>
<li>fix(icons): changed <code>user-lock</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3971">lucide-icons/lucide#3971</a></li>
<li>fix(icons): changed <code>bug-off</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3972">lucide-icons/lucide#3972</a></li>
<li>fix(icons): changed <code>bell-dot</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3973">lucide-icons/lucide#3973</a></li>
<li>fix(icons): changed <code>bandage</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3967">lucide-icons/lucide#3967</a></li>
<li>fix(icons): changed <code>hard-drive</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3622">lucide-icons/lucide#3622</a></li>
<li>fix(icons): changed <code>git-branch</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3938">lucide-icons/lucide#3938</a></li>
<li>fix(icons): changed <code>file-cog</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3965">lucide-icons/lucide#3965</a></li>
<li>fix(icons): changed <code>cloud-alert</code> and
<code>cloud-check</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3976">lucide-icons/lucide#3976</a></li>
<li>feat(icons): adds <code>user-key</code> and
<code>user-round-key</code>, updates other <code>-key</code> icons to
match by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4044">lucide-icons/lucide#4044</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Spleefies"><code>@​Spleefies</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4003">lucide-icons/lucide#4003</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.563.1...0.564.0">https://github.com/lucide-icons/lucide/compare/0.563.1...0.564.0</a></p>
<h2>Hotfix <code>@lucide/svelte</code> hasA11yProp.js import</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(<code>@​lucide/svelte</code>): Fix build in by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4026">lucide-icons/lucide#4026</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.563.0...0.563.1">https://github.com/lucide-icons/lucide/compare/0.563.0...0.563.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/0.564.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lucide-react&package-manager=npm_and_yarn&previous-version=0.563.0&new-version=0.564.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-17 04:09:41 +00:00
dependabot[bot]
0220b1b7e3 Bump eslint-config-mantine from 3.2.0 to 4.0.3 in /frontend (#1544)
Bumps
[eslint-config-mantine](https://github.com/mantinedev/eslint-config-mantine)
from 3.2.0 to 4.0.3.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/mantinedev/eslint-config-mantine/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint-config-mantine&package-manager=npm_and_yarn&previous-version=3.2.0&new-version=4.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:13:12 +00:00
dependabot[bot]
b533d87634 Bump pyrefly from 0.51.0 to 0.52.0 in /backend (#1559)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.51.0 to
0.52.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb7a49086f"><code>fb7a490</code></a>
Update pyrefly version]</li>
<li><a
href="eda9e11b1a"><code>eda9e11</code></a>
fix stale config during indexing</li>
<li><a
href="ee77b4b497"><code>ee77b4b</code></a>
Avoid HashMap in bindings</li>
<li><a
href="6de02a9280"><code>6de02a9</code></a>
Rearrange code (no actual edits)</li>
<li><a
href="2b4f85ceff"><code>2b4f85c</code></a>
Express HasPlaceholder in the Scc state checks</li>
<li><a
href="4725cce2f2"><code>4725cce</code></a>
Bump proc-macro2 1.0.105 -&gt; 1.0.106</li>
<li><a
href="af7396b333"><code>af7396b</code></a>
Use UTF-8 encoding when exporting locations from Pyrefly</li>
<li><a
href="ab9e4d26b2"><code>ab9e4d2</code></a>
Add location test for special symbols in string literals</li>
<li><a
href="b1fe95d2c4"><code>b1fe95d</code></a>
cap concrete tuple size (<a
href="https://redirect.github.com/facebook/pyrefly/issues/2348">#2348</a>)</li>
<li><a
href="622f03b0d8"><code>622f03b</code></a>
cap literal string size (<a
href="https://redirect.github.com/facebook/pyrefly/issues/2347">#2347</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.51.0...0.52.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.51.0&new-version=0.52.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:13:03 +00:00
dependabot[bot]
8a99aef6e7 Bump ruff from 0.14.4 to 0.15.0 in /backend (#1557)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.4 to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/releases">ruff's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Release Notes</h2>
<p>Released on 2026-02-03.</p>
<p>Check out the <a href="https://astral.sh/blog/ruff-v0.15.0">blog
post</a> for a migration guide and overview of the changes!</p>
<h3>Breaking changes</h3>
<ul>
<li>
<p>Ruff now formats your code according to the 2026 style guide. See the
formatter section below or in the blog post for a detailed list of
changes.</p>
</li>
<li>
<p>The linter now supports block suppression comments. For example, to
suppress <code>N803</code> for all parameters in this function:</p>
<pre lang="python"><code># ruff: disable[N803]
def foo(
    legacyArg1,
    legacyArg2,
    legacyArg3,
    legacyArg4,
): ...
# ruff: enable[N803]
</code></pre>
<p>See the <a
href="https://docs.astral.sh/ruff/linter/#block-level">documentation</a>
for more details.</p>
</li>
<li>
<p>The <code>ruff:alpine</code> Docker image is now based on Alpine 3.23
(up from 3.21).</p>
</li>
<li>
<p>The <code>ruff:debian</code> and <code>ruff:debian-slim</code> Docker
images are now based on Debian 13 &quot;Trixie&quot; instead of Debian
12 &quot;Bookworm.&quot;</p>
</li>
<li>
<p>Binaries for the <code>ppc64</code> (64-bit big-endian PowerPC)
architecture are no longer included in our releases. It should still be
possible to build Ruff manually for this platform, if needed.</p>
</li>
<li>
<p>Ruff now resolves all <code>extend</code>ed configuration files
before falling back on a default Python version.</p>
</li>
</ul>
<h3>Stabilization</h3>
<p>The following rules have been stabilized and are no longer in
preview:</p>
<ul>
<li><a
href="https://docs.astral.sh/ruff/rules/blocking-http-call-httpx-in-async-function"><code>blocking-http-call-httpx-in-async-function</code></a>
(<code>ASYNC212</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/blocking-path-method-in-async-function"><code>blocking-path-method-in-async-function</code></a>
(<code>ASYNC240</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/blocking-input-in-async-function"><code>blocking-input-in-async-function</code></a>
(<code>ASYNC250</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/map-without-explicit-strict"><code>map-without-explicit-strict</code></a>
(<code>B912</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/if-exp-instead-of-or-operator"><code>if-exp-instead-of-or-operator</code></a>
(<code>FURB110</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/single-item-membership-test"><code>single-item-membership-test</code></a>
(<code>FURB171</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/missing-maxsplit-arg"><code>missing-maxsplit-arg</code></a>
(<code>PLC0207</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/unnecessary-lambda"><code>unnecessary-lambda</code></a>
(<code>PLW0108</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/unnecessary-empty-iterable-within-deque-call"><code>unnecessary-empty-iterable-within-deque-call</code></a>
(<code>RUF037</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/in-empty-collection"><code>in-empty-collection</code></a>
(<code>RUF060</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/legacy-form-pytest-raises"><code>legacy-form-pytest-raises</code></a>
(<code>RUF061</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/non-octal-permissions"><code>non-octal-permissions</code></a>
(<code>RUF064</code>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's
changelog</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<p>Released on 2026-02-03.</p>
<p>Check out the <a href="https://astral.sh/blog/ruff-v0.15.0">blog
post</a> for a migration
guide and overview of the changes!</p>
<h3>Breaking changes</h3>
<ul>
<li>
<p>Ruff now formats your code according to the 2026 style guide. See the
formatter section below or in the blog post for a detailed list of
changes.</p>
</li>
<li>
<p>The linter now supports block suppression comments. For example, to
suppress <code>N803</code> for all parameters in this function:</p>
<pre lang="python"><code># ruff: disable[N803]
def foo(
    legacyArg1,
    legacyArg2,
    legacyArg3,
    legacyArg4,
): ...
# ruff: enable[N803]
</code></pre>
<p>See the <a
href="https://docs.astral.sh/ruff/linter/#block-level">documentation</a>
for more details.</p>
</li>
<li>
<p>The <code>ruff:alpine</code> Docker image is now based on Alpine 3.23
(up from 3.21).</p>
</li>
<li>
<p>The <code>ruff:debian</code> and <code>ruff:debian-slim</code> Docker
images are now based on Debian 13 &quot;Trixie&quot; instead of Debian
12 &quot;Bookworm.&quot;</p>
</li>
<li>
<p>Binaries for the <code>ppc64</code> (64-bit big-endian PowerPC)
architecture are no longer included in our releases. It should still be
possible to build Ruff manually for this platform, if needed.</p>
</li>
<li>
<p>Ruff now resolves all <code>extend</code>ed configuration files
before falling back on a default Python version.</p>
</li>
</ul>
<h3>Stabilization</h3>
<p>The following rules have been stabilized and are no longer in
preview:</p>
<ul>
<li><a
href="https://docs.astral.sh/ruff/rules/blocking-http-call-httpx-in-async-function"><code>blocking-http-call-httpx-in-async-function</code></a>
(<code>ASYNC212</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/blocking-path-method-in-async-function"><code>blocking-path-method-in-async-function</code></a>
(<code>ASYNC240</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/blocking-input-in-async-function"><code>blocking-input-in-async-function</code></a>
(<code>ASYNC250</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/map-without-explicit-strict"><code>map-without-explicit-strict</code></a>
(<code>B912</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/if-exp-instead-of-or-operator"><code>if-exp-instead-of-or-operator</code></a>
(<code>FURB110</code>)</li>
<li><a
href="https://docs.astral.sh/ruff/rules/single-item-membership-test"><code>single-item-membership-test</code></a>
(<code>FURB171</code>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ce5f7b6127"><code>ce5f7b6</code></a>
Bump 0.15.0 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/23055">#23055</a>)</li>
<li><a
href="b4e40f539c"><code>b4e40f5</code></a>
[ty] Fix <code>__contains__</code> to respect descriptors (<a
href="https://redirect.github.com/astral-sh/ruff/issues/23056">#23056</a>)</li>
<li><a
href="848cb72dc1"><code>848cb72</code></a>
[ty] Fix narrowing of nonlocal variables with conditional assignments
(<a
href="https://redirect.github.com/astral-sh/ruff/issues/22966">#22966</a>)</li>
<li><a
href="da7f33af22"><code>da7f33a</code></a>
[ty] Add a diagnostic for <code>Final</code> without assignment (<a
href="https://redirect.github.com/astral-sh/ruff/issues/23001">#23001</a>)</li>
<li><a
href="e65f9a6b03"><code>e65f9a6</code></a>
Document markdown formatting feature (<a
href="https://redirect.github.com/astral-sh/ruff/issues/22990">#22990</a>)</li>
<li><a
href="c0c1b985c9"><code>c0c1b98</code></a>
Format markdown code blocks with line-by-line regex parse (<a
href="https://redirect.github.com/astral-sh/ruff/issues/22996">#22996</a>)</li>
<li><a
href="9f8f3e196b"><code>9f8f3e1</code></a>
Allow positional-only params with defaults in method overrides (<a
href="https://redirect.github.com/astral-sh/ruff/issues/23037">#23037</a>)</li>
<li><a
href="ef83810e11"><code>ef83810</code></a>
[ty] ecosystem-analyzer: Support bare git repositories (<a
href="https://redirect.github.com/astral-sh/ruff/issues/23054">#23054</a>)</li>
<li><a
href="54dfee4cb8"><code>54dfee4</code></a>
Customize where the <code>fix_title</code> sub-diagnostic appears (<a
href="https://redirect.github.com/astral-sh/ruff/issues/23044">#23044</a>)</li>
<li><a
href="b53460799b"><code>b534607</code></a>
2026 Ruff Formatter Style (<a
href="https://redirect.github.com/astral-sh/ruff/issues/22735">#22735</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff/compare/0.14.4...0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ruff&package-manager=uv&previous-version=0.14.4&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:12:50 +00:00
dependabot[bot]
47089d7ffa Bump fastapi-sso from 0.19.0 to 0.20.0 in /backend (#1558)
Bumps [fastapi-sso](https://github.com/tomasvotava/fastapi-sso) from
0.19.0 to 0.20.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tomasvotava/fastapi-sso/releases">fastapi-sso's
releases</a>.</em></p>
<blockquote>
<h2>0.20.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump the all group across 1 directory with 3 updates by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/270">tomasvotava/fastapi-sso#270</a></li>
<li>chore(deps): bump the all group across 1 directory with 5 updates by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/273">tomasvotava/fastapi-sso#273</a></li>
<li>feat: Add soundcloud provider by <a
href="https://github.com/john-9474"><code>@​john-9474</code></a> in <a
href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/272">tomasvotava/fastapi-sso#272</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/john-9474"><code>@​john-9474</code></a>
made their first contribution in <a
href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/272">tomasvotava/fastapi-sso#272</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tomasvotava/fastapi-sso/compare/0.19.0...0.20.0">https://github.com/tomasvotava/fastapi-sso/compare/0.19.0...0.20.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="60380bba7f"><code>60380bb</code></a>
bump: =&gt; v0.20.0</li>
<li><a
href="33d64d0024"><code>33d64d0</code></a>
feat: Add soundcloud provider (<a
href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/272">#272</a>)</li>
<li><a
href="89a1d9a641"><code>89a1d9a</code></a>
chore(deps): bump the all group across 1 directory with 5 updates (<a
href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/273">#273</a>)</li>
<li><a
href="079dc22aa7"><code>079dc22</code></a>
chore(deps): bump the all group across 1 directory with 3 updates (<a
href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/270">#270</a>)</li>
<li><a
href="0b6a2433e7"><code>0b6a243</code></a>
docs: fix security notice order</li>
<li>See full diff in <a
href="https://github.com/tomasvotava/fastapi-sso/compare/0.19.0...0.20.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastapi-sso&package-manager=uv&previous-version=0.19.0&new-version=0.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:12:32 +00:00
dependabot[bot]
2b45c6cb40 Bump sentry-sdk from 2.51.0 to 2.52.0 in /backend (#1556)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.51.0 to 2.52.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.52.0</h2>
<h3>New Features </h3>
<h4>Other</h4>
<ul>
<li>feat(integration): add <code>gen_ai.conversation.id</code> if
available by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5307">#5307</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Google Genai</h4>
<ul>
<li>fix(google-genai): Token reporting by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5404">#5404</a></li>
<li>fix(google-genai): deactivate google genai when langchain is used by
<a href="https://github.com/shellmayr"><code>@​shellmayr</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/5389">#5389</a></li>
</ul>
<h4>Mcp</h4>
<ul>
<li>fix(mcp): Nest MCP spans under HTTP transactions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5292">#5292</a></li>
<li>fix(mcp): Handle all awaitable return types by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5415">#5415</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>fix(anthropic): Token reporting by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5403">#5403</a></li>
<li>fix(arq): handle settings_cls passed as keyword argument by <a
href="https://github.com/nc9"><code>@​nc9</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5393">#5393</a></li>
<li>fix(dramatiq): cleanup isolated scope and transaction when message
is skipped by <a
href="https://github.com/frankie567"><code>@​frankie567</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5346">#5346</a></li>
<li>fix(openai): Token reporting by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5406">#5406</a></li>
<li>fix(openai-agents): Inject propagation headers for
<code>HostedMCPTool</code> when streaming by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5405">#5405</a></li>
<li>fix: Fix list attribute type by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5417">#5417</a></li>
<li>fix: Adapt to new packaging in toxgen by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5382">#5382</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<h4>Fastmcp</h4>
<ul>
<li>test(fastmcp): Wrap prompt in <code>Message</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5411">#5411</a></li>
<li>test(fastmcp): Remove
<code>test_fastmcp_without_request_context()</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5412">#5412</a></li>
<li>test(fastmcp): Use <code>AsyncClient</code> for SSE by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5400">#5400</a></li>
<li>test(fastmcp): Use <code>TestClient</code> for Streamable HTTP by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5384">#5384</a></li>
<li>test(fastmcp): Simulate stdio transport with memory streams by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5333">#5333</a></li>
</ul>
<h4>Mcp</h4>
<ul>
<li>test(mcp): Use <code>AsyncClient</code> for SSE by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5396">#5396</a></li>
<li>test(mcp): Use <code>TestClient</code> for Streamable HTTP by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5383">#5383</a></li>
<li>test(mcp): Remove unused stdio helpers by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5409">#5409</a></li>
<li>test(mcp): Simulate stdio transport with memory streams by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5329">#5329</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>ci: Fix lint step by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5418">#5418</a></li>
<li>ci: 🤖 Update test matrix with new releases (02/02) by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5413">#5413</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.52.0</h2>
<h3>New Features </h3>
<h4>Other</h4>
<ul>
<li>feat(integration): add <code>gen_ai.conversation.id</code> if
available by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5307">#5307</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Google Genai</h4>
<ul>
<li>fix(google-genai): Token reporting by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5404">#5404</a></li>
<li>fix(google-genai): deactivate google genai when langchain is used by
<a href="https://github.com/shellmayr"><code>@​shellmayr</code></a> in
<a
href="https://redirect.github.com/getsentry/sentry-python/pull/5389">#5389</a></li>
</ul>
<h4>Mcp</h4>
<ul>
<li>fix(mcp): Nest MCP spans under HTTP transactions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5292">#5292</a></li>
<li>fix(mcp): Handle all awaitable return types by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5415">#5415</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>fix(anthropic): Token reporting by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5403">#5403</a></li>
<li>fix(arq): handle settings_cls passed as keyword argument by <a
href="https://github.com/nc9"><code>@​nc9</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5393">#5393</a></li>
<li>fix(dramatiq): cleanup isolated scope and transaction when message
is skipped by <a
href="https://github.com/frankie567"><code>@​frankie567</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5346">#5346</a></li>
<li>fix(openai): Token reporting by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5406">#5406</a></li>
<li>fix(openai-agents): Inject propagation headers for
<code>HostedMCPTool</code> when streaming by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5405">#5405</a></li>
<li>fix: Fix list attribute type by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5417">#5417</a></li>
<li>fix: Adapt to new packaging in toxgen by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5382">#5382</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<h4>Fastmcp</h4>
<ul>
<li>test(fastmcp): Wrap prompt in <code>Message</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5411">#5411</a></li>
<li>test(fastmcp): Remove
<code>test_fastmcp_without_request_context()</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5412">#5412</a></li>
<li>test(fastmcp): Use <code>AsyncClient</code> for SSE by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5400">#5400</a></li>
<li>test(fastmcp): Use <code>TestClient</code> for Streamable HTTP by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5384">#5384</a></li>
<li>test(fastmcp): Simulate stdio transport with memory streams by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5333">#5333</a></li>
</ul>
<h4>Mcp</h4>
<ul>
<li>test(mcp): Use <code>AsyncClient</code> for SSE by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5396">#5396</a></li>
<li>test(mcp): Use <code>TestClient</code> for Streamable HTTP by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5383">#5383</a></li>
<li>test(mcp): Remove unused stdio helpers by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5409">#5409</a></li>
<li>test(mcp): Simulate stdio transport with memory streams by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5329">#5329</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>ci: Fix lint step by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5418">#5418</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bcec57806f"><code>bcec578</code></a>
Update CHANGELOG.md</li>
<li><a
href="3d2154ce57"><code>3d2154c</code></a>
release: 2.52.0</li>
<li><a
href="3bb163a77a"><code>3bb163a</code></a>
fix(mcp): Nest MCP spans under HTTP transactions (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5292">#5292</a>)</li>
<li><a
href="bf0a683137"><code>bf0a683</code></a>
fix(mcp): Handle all awaitable return types (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5415">#5415</a>)</li>
<li><a
href="656a5c26b8"><code>656a5c2</code></a>
Revert &quot;feat(ai): Add original input length meta attribute (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5375">#5375</a>)&quot;
(<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5419">#5419</a>)</li>
<li><a
href="78eca96e1d"><code>78eca96</code></a>
fix: Fix list attribute type (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5417">#5417</a>)</li>
<li><a
href="2ffa865672"><code>2ffa865</code></a>
ci: Fix lint step (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5418">#5418</a>)</li>
<li><a
href="d2b7d5eadf"><code>d2b7d5e</code></a>
feat(integration): add <code>gen_ai.conversation.id</code> if available
(<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5307">#5307</a>)</li>
<li><a
href="11d68ee48c"><code>11d68ee</code></a>
fix(google-genai): Token reporting (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5404">#5404</a>)</li>
<li><a
href="78c6011c76"><code>78c6011</code></a>
fix(anthropic): Token reporting (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5403">#5403</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.51.0...2.52.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.51.0&new-version=2.52.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:12:19 +00:00
dependabot[bot]
13e9c6e228 Bump axios from 1.13.0 to 1.13.5 in /frontend (#1555)
Bumps [axios](https://github.com/axios/axios) from 1.13.0 to 1.13.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.13.5</h2>
<h2>Release 1.13.5</h2>
<h3>Highlights</h3>
<ul>
<li><strong>Security:</strong> Fixed a potential <strong>Denial of
Service</strong> issue involving the <code>__proto__</code> key in
<code>mergeConfig</code>. (PR <a
href="https://redirect.github.com/axios/axios/pull/7369">#7369</a>)</li>
<li><strong>Bug fix:</strong> Resolved an issue where
<code>AxiosError</code> could be missing the <code>status</code> field
on and after <strong>v1.13.3</strong>. (PR <a
href="https://redirect.github.com/axios/axios/pull/7368">#7368</a>)</li>
</ul>
<h3>Changes</h3>
<h4>Security</h4>
<ul>
<li>Fix Denial of Service via <code>__proto__</code> key in
<code>mergeConfig</code>. (PR <a
href="https://redirect.github.com/axios/axios/pull/7369">#7369</a>)</li>
</ul>
<h4>Fixes</h4>
<ul>
<li>Fix/5657. (PR <a
href="https://redirect.github.com/axios/axios/pull/7313">#7313</a>)</li>
<li>Ensure <code>status</code> is present in <code>AxiosError</code> on
and after v1.13.3. (PR <a
href="https://redirect.github.com/axios/axios/pull/7368">#7368</a>)</li>
</ul>
<h4>Features / Improvements</h4>
<ul>
<li>Add input validation to <code>isAbsoluteURL</code>. (PR <a
href="https://redirect.github.com/axios/axios/pull/7326">#7326</a>)</li>
<li>Refactor: bump minor package versions. (PR <a
href="https://redirect.github.com/axios/axios/pull/7356">#7356</a>)</li>
</ul>
<h4>Documentation</h4>
<ul>
<li>Clarify object-check comment. (PR <a
href="https://redirect.github.com/axios/axios/pull/7323">#7323</a>)</li>
<li>Fix deprecated <code>Buffer</code> constructor usage and README
formatting. (PR <a
href="https://redirect.github.com/axios/axios/pull/7371">#7371</a>)</li>
</ul>
<h4>CI / Maintenance</h4>
<ul>
<li>Chore: fix issues with YAML. (PR <a
href="https://redirect.github.com/axios/axios/pull/7355">#7355</a>)</li>
<li>CI: update workflow YAMLs. (PR <a
href="https://redirect.github.com/axios/axios/pull/7372">#7372</a>)</li>
<li>CI: fix run condition. (PR <a
href="https://redirect.github.com/axios/axios/pull/7373">#7373</a>)</li>
<li>Dev deps: bump <code>karma-sourcemap-loader</code> from 0.3.8 to
0.4.0. (PR <a
href="https://redirect.github.com/axios/axios/pull/7360">#7360</a>)</li>
<li>Chore(release): prepare release 1.13.5. (PR <a
href="https://redirect.github.com/axios/axios/pull/7379">#7379</a>)</li>
</ul>
<h3>New Contributors</h3>
<ul>
<li><a
href="https://github.com/sachin11063"><code>@​sachin11063</code></a>
(first contribution — PR <a
href="https://redirect.github.com/axios/axios/pull/7323">#7323</a>)</li>
<li><a
href="https://github.com/asmitha-16"><code>@​asmitha-16</code></a>
(first contribution — PR <a
href="https://redirect.github.com/axios/axios/pull/7326">#7326</a>)</li>
</ul>
<p><strong>Full Changelog:</strong> <a
href="https://github.com/axios/axios/compare/v1.13.4...v1.13.5">https://github.com/axios/axios/compare/v1.13.4...v1.13.5</a></p>
<h2>v1.13.4</h2>
<h2>Overview</h2>
<p>The release addresses issues discovered in v1.13.3 and includes
significant CI/CD improvements.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/axios/axios/compare/v1.13.3...v1.13.4">v1.13.3...v1.13.4</a></p>
<h2>What's New in v1.13.4</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>fix: issues with version 1.13.3</strong> (<a
href="https://redirect.github.com/axios/axios/issues/7352">#7352</a>)
(<a
href="ee90dfc28a">ee90dfc</a>)
<ul>
<li>Fixed issues discovered in v1.13.3 release</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2><a
href="https://github.com/axios/axios/compare/v1.13.2...v1.13.3">1.13.3</a>
(2026-01-20)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http2:</strong> Use port 443 for HTTPS connections by
default. (<a
href="https://redirect.github.com/axios/axios/issues/7256">#7256</a>)
(<a
href="d7e6065346">d7e6065</a>)</li>
<li><strong>interceptor:</strong> handle the error in the same
interceptor (<a
href="https://redirect.github.com/axios/axios/issues/6269">#6269</a>)
(<a
href="5945e40bb1">5945e40</a>)</li>
<li>main field in package.json should correspond to cjs artifacts (<a
href="https://redirect.github.com/axios/axios/issues/5756">#5756</a>)
(<a
href="7373fbff24">7373fbf</a>)</li>
<li><strong>package.json:</strong> add 'bun' package.json 'exports'
condition. Load the Node.js build in Bun instead of the browser build
(<a
href="https://redirect.github.com/axios/axios/issues/5754">#5754</a>)
(<a
href="b89217e3e9">b89217e</a>)</li>
<li>silentJSONParsing=false should throw on invalid JSON (<a
href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/7257">#7257</a>)
(<a
href="7d19335e43">7d19335</a>)</li>
<li>turn AxiosError into a native error (<a
href="https://redirect.github.com/axios/axios/issues/5394">#5394</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/5558">#5558</a>)
(<a
href="1c6a86dd2c">1c6a86d</a>)</li>
<li><strong>types:</strong> add handlers to AxiosInterceptorManager
interface (<a
href="https://redirect.github.com/axios/axios/issues/5551">#5551</a>)
(<a
href="8d1271b49f">8d1271b</a>)</li>
<li><strong>types:</strong> restore AxiosError.cause type from unknown
to Error (<a
href="https://redirect.github.com/axios/axios/issues/7327">#7327</a>)
(<a
href="d8233d9e8e">d8233d9</a>)</li>
<li>unclear error message is thrown when specifying an empty proxy
authorization (<a
href="https://redirect.github.com/axios/axios/issues/6314">#6314</a>)
(<a
href="6ef867e684">6ef867e</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>add <code>undefined</code> as a value in AxiosRequestConfig (<a
href="https://redirect.github.com/axios/axios/issues/5560">#5560</a>)
(<a
href="095033c626">095033c</a>)</li>
<li>add automatic minor and patch upgrades to dependabot (<a
href="https://redirect.github.com/axios/axios/issues/6053">#6053</a>)
(<a
href="65a7584eda">65a7584</a>)</li>
<li>add Node.js coverage script using c8 (closes <a
href="https://redirect.github.com/axios/axios/issues/7289">#7289</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/7294">#7294</a>)
(<a
href="ec9d94e9f8">ec9d94e</a>)</li>
<li>added copilot instructions (<a
href="3f83143bfe">3f83143</a>)</li>
<li>compatibility with frozen prototypes (<a
href="https://redirect.github.com/axios/axios/issues/6265">#6265</a>)
(<a
href="860e03396a">860e033</a>)</li>
<li>enhance pipeFileToResponse with error handling (<a
href="https://redirect.github.com/axios/axios/issues/7169">#7169</a>)
(<a
href="88d7884254">88d7884</a>)</li>
<li><strong>types:</strong> Intellisense for string literals in a
widened union (<a
href="https://redirect.github.com/axios/axios/issues/6134">#6134</a>)
(<a
href="f73474d02c">f73474d</a>),
closes <a
href="https://redirect.github.com//redirect.github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329">microsoft/TypeScript#33471</a></li>
</ul>
<h3>Reverts</h3>
<ul>
<li>Revert &quot;fix: silentJSONParsing=false should throw on invalid
JSON (<a
href="https://redirect.github.com/axios/axios/issues/7253">#7253</a>)
(<a
href="https://redirect.github.com/axios/axios/issues/7">#7</a>…&quot;
(<a
href="https://redirect.github.com/axios/axios/issues/7298">#7298</a>)
(<a
href="a4230f5581">a4230f5</a>),
closes <a
href="https://redirect.github.com/axios/axios/issues/7253">#7253</a> <a
href="https://redirect.github.com/axios/axios/issues/7">#7</a> <a
href="https://redirect.github.com/axios/axios/issues/7298">#7298</a></li>
<li><strong>deps:</strong> bump peter-evans/create-pull-request from 7
to 8 in the github-actions group (<a
href="https://redirect.github.com/axios/axios/issues/7334">#7334</a>)
(<a
href="2d6ad5e48b">2d6ad5e</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li><!-- raw HTML omitted --> <a href="https://github.com/ashvin2005"
title="+1752/-4 ([#7218](https://github.com/axios/axios/issues/7218)
[#7218](https://github.com/axios/axios/issues/7218) )">Ashvin
Tiwari</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/mochinikunj"
title="+940/-12 ([#7294](https://github.com/axios/axios/issues/7294)
[#7294](https://github.com/axios/axios/issues/7294) )">Nikunj
Mochi</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/imanchalsingh"
title="+544/-102 ([#7169](https://github.com/axios/axios/issues/7169)
[#7185](https://github.com/axios/axios/issues/7185) )">Anchal
Singh</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/jasonsaayman"
title="+317/-73 ([#7334](https://github.com/axios/axios/issues/7334)
[#7298](https://github.com/axios/axios/issues/7298)
)">jasonsaayman</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/brodo"
title="+99/-120 ([#5558](https://github.com/axios/axios/issues/5558)
)">Julian Dax</a></li>
<li><!-- raw HTML omitted --> <a
href="https://github.com/AKASHDHARDUBEY" title="+167/-0
([#7287](https://github.com/axios/axios/issues/7287)
[#7288](https://github.com/axios/axios/issues/7288) )">Akash Dhar
Dubey</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/madhumitaaa"
title="+20/-68 ([#7198](https://github.com/axios/axios/issues/7198)
)">Madhumita</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/Tackoil"
title="+80/-2 ([#6269](https://github.com/axios/axios/issues/6269)
)">Tackoil</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/justindhillon"
title="+41/-41 ([#6324](https://github.com/axios/axios/issues/6324)
[#6315](https://github.com/axios/axios/issues/6315) )">Justin
Dhillon</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/Rudrxxx"
title="+71/-2 ([#7257](https://github.com/axios/axios/issues/7257)
)">Rudransh</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/WuMingDao"
title="+36/-36 ([#7215](https://github.com/axios/axios/issues/7215)
)">WuMingDao</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/codenomnom"
title="+70/-0 ([#7201](https://github.com/axios/axios/issues/7201)
[#7201](https://github.com/axios/axios/issues/7201)
)">codenomnom</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/Nandann018-ux"
title="+60/-10 ([#7272](https://github.com/axios/axios/issues/7272)
)">Nandan Acharya</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/KernelDeimos"
title="+22/-40 ([#7042](https://github.com/axios/axios/issues/7042)
)">Eric Dubé</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/tiborpilz"
title="+40/-4 ([#5551](https://github.com/axios/axios/issues/5551)
)">Tibor Pilz</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/joaoGabriel55"
title="+31/-4 ([#6314](https://github.com/axios/axios/issues/6314)
)">Gabriel Quaresma</a></li>
<li><!-- raw HTML omitted --> <a href="https://github.com/turadg"
title="+23/-6 ([#6265](https://github.com/axios/axios/issues/6265)
)">Turadg Aleahmad</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="29f75425f0"><code>29f7542</code></a>
chore(release): prepare release 1.13.5 (<a
href="https://redirect.github.com/axios/axios/issues/7379">#7379</a>)</li>
<li><a
href="431c3a3614"><code>431c3a3</code></a>
ci: fix run condition (<a
href="https://redirect.github.com/axios/axios/issues/7373">#7373</a>)</li>
<li><a
href="9ff3a78ad7"><code>9ff3a78</code></a>
ci: update ymls (<a
href="https://redirect.github.com/axios/axios/issues/7372">#7372</a>)</li>
<li><a
href="265b71234c"><code>265b712</code></a>
docs: fix deprecated Buffer constructor and formatting issues in README
(<a
href="https://redirect.github.com/axios/axios/issues/7371">#7371</a>)</li>
<li><a
href="475e75a260"><code>475e75a</code></a>
feat: add input validation to isAbsoluteURL (<a
href="https://redirect.github.com/axios/axios/issues/7326">#7326</a>)</li>
<li><a
href="28c721588c"><code>28c7215</code></a>
fix: Denial of Service via <strong>proto</strong> Key in mergeConfig (<a
href="https://redirect.github.com/axios/axios/issues/7369">#7369</a>)</li>
<li><a
href="04cf01969e"><code>04cf019</code></a>
docs: clarify object check comment (<a
href="https://redirect.github.com/axios/axios/issues/7323">#7323</a>)</li>
<li><a
href="696fa753c5"><code>696fa75</code></a>
fix: status is missing in AxiosError on and after v1.13.3 (<a
href="https://redirect.github.com/axios/axios/issues/7368">#7368</a>)</li>
<li><a
href="569f028a58"><code>569f028</code></a>
fix: added a option to choose between legacy and the new
request/response int...</li>
<li><a
href="44b7c9f0c4"><code>44b7c9f</code></a>
chore(deps-dev): bump karma-sourcemap-loader (<a
href="https://redirect.github.com/axios/axios/issues/7360">#7360</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.13.0...v1.13.5">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for axios since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.13.0&new-version=1.13.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:11:51 +00:00
dependabot[bot]
a9ffe60ae1 Bump vite-tsconfig-paths from 6.0.3 to 6.1.0 in /frontend (#1554)
Bumps
[vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths)
from 6.0.3 to 6.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aleclarson/vite-tsconfig-paths/releases">vite-tsconfig-paths's
releases</a>.</em></p>
<blockquote>
<h2>v6.1.0</h2>
<h3>Features</h3>
<ul>
<li><strong>New <code>importerFilter</code> option:</strong> Provides
fine-grained control over which files should have their imports resolved
by this plugin. (Closes <a
href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/175">#175</a>,
<a
href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/193">#193</a>)</li>
<li><strong>Ignore <code>.d.ts</code> overrides:</strong> The plugin now
ignores resolutions that point to <code>.d.ts</code> files, avoiding
issues when <code>tsconfig</code> is used for opt-in type overrides.
(Closes <a
href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/179">#179</a>,
<a
href="https://redirect.github.com/aleclarson/vite-tsconfig-paths/issues/180">#180</a>)</li>
</ul>
<h3>Performance</h3>
<ul>
<li>Hoisted regular expressions out of the hot path in the resolver for
better performance.</li>
</ul>
<h3>Internal</h3>
<ul>
<li>Added <code>resolvedToDeclarationFile</code> event to the debug log
file.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c5659ce858"><code>c5659ce</code></a>
chore: release v6.1.0</li>
<li><a
href="93dd8877ae"><code>93dd887</code></a>
chore: add &quot;resolvedToDeclarationFile&quot; event to log file</li>
<li><a
href="e1e76784d0"><code>e1e7678</code></a>
feat: ignore .d.ts-only overrides in tsconfig</li>
<li><a
href="c8e4ec308d"><code>c8e4ec3</code></a>
chore(perf): hoist regexes out of hot path</li>
<li><a
href="d0ad01cff6"><code>d0ad01c</code></a>
feat: add <code>importerFilter</code> option</li>
<li><a
href="0b47a6ab7e"><code>0b47a6a</code></a>
chore: release v6.0.5</li>
<li><a
href="14aa53b312"><code>14aa53b</code></a>
fix: change <code>vite</code> to a required peer dependency</li>
<li><a
href="f91de32e33"><code>f91de32</code></a>
chore: release v6.0.4</li>
<li><a
href="232f17ce43"><code>232f17c</code></a>
fix: move <code>vite</code> to dependencies</li>
<li><a
href="8ecf047a84"><code>8ecf047</code></a>
fix: initialize resolvers before dependency pre-bundling occurs</li>
<li>See full diff in <a
href="https://github.com/aleclarson/vite-tsconfig-paths/compare/v6.0.3...v6.1.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite-tsconfig-paths&package-manager=npm_and_yarn&previous-version=6.0.3&new-version=6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:11:12 +00:00
dependabot[bot]
595effb219 Bump @hey-api/openapi-ts from 0.91.1 to 0.92.3 in /frontend (#1553)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from
0.91.1 to 0.92.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/openapi-ts/releases"><code>@​hey-api/openapi-ts</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.92.3</h2>
<h3>Patch Changes</h3>
<ul>
<li><strong>plugin(zod)</strong>: use namespace import for zod v4 (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3325">#3325</a>)
(<a
href="e54db3e7e3"><code>e54db3e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.92.2</h2>
<h3>Minor Changes</h3>
<ul>
<li><strong>BREAKING:</strong> <strong>symbol</strong>: replace
<code>exportFrom</code> array with <code>getExportFromFilePath()</code>
function (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>)
(<a
href="cd44523b96"><code>cd44523</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Updated Symbol interface</h3>
<p>The <code>exportFrom</code> property has been replaced with the
<code>getExportFromFilePath()</code> function. This allows you to
dynamically determine export paths based on symbol properties. This is a
low-level feature, so you're most likely unaffected.</p>
<h3>Patch Changes</h3>
<ul>
<li>
<p><strong>config</strong>: rename <code>exportFromIndex</code> option
to <code>includeInEntry</code> (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>)
(<a
href="cd44523b96"><code>cd44523</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>config</strong>: <code>includeInEntry</code> accepts function
in addition to primitive value (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>)
(<a
href="cd44523b96"><code>cd44523</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>parser</strong>: add <code>getExportFromFilePath()</code>
hook (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>)
(<a
href="cd44523b96"><code>cd44523</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>plugin</strong>: add <code>comments</code> option to all
plugins (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3317">#3317</a>)
(<a
href="7b3c8f20a7"><code>7b3c8f2</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>types</strong>: improve <code>defineConfig()</code> types (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>)
(<a
href="cd44523b96"><code>cd44523</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>config</strong>: rename <code>output.indexFile</code> to
<code>output.entryFile</code> (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3312">#3312</a>)
(<a
href="cd44523b96"><code>cd44523</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></p>
</li>
<li>
<p><strong>fix</strong>: improve dev mode detection causing builds to
fail (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3300">#3300</a>)
(<a
href="be2f3fbaee"><code>be2f3fb</code></a>)
by <a
href="https://github.com/apps/copilot-swe-agent"><code>@​copilot-swe-agent</code></a></p>
</li>
</ul>
<h3>Updated Dependencies:</h3>
<ul>
<li><code>@​hey-api/shared</code><a
href="https://github.com/0"><code>@​0</code></a>.1.2</li>
<li><code>@​hey-api/codegen-core</code><a
href="https://github.com/0"><code>@​0</code></a>.7.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e223fa8241"><code>e223fa8</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3326">#3326</a>
from hey-api/changeset-release/main</li>
<li><a
href="3dc934476d"><code>3dc9344</code></a>
ci: release</li>
<li><a
href="a715512d8b"><code>a715512</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3325">#3325</a>
from hey-api/fix/zod-v4-asterisk</li>
<li><a
href="e54db3e7e3"><code>e54db3e</code></a>
fix: use namespace import for zod v4</li>
<li><a
href="1581c11b83"><code>1581c11</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3323">#3323</a>
from hey-api/changeset-release/main</li>
<li><a
href="9a7c46a623"><code>9a7c46a</code></a>
ci: release</li>
<li><a
href="e0c1453981"><code>e0c1453</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3324">#3324</a>
from hey-api/ci/fix-publish-2</li>
<li><a
href="734621e7b3"><code>734621e</code></a>
ci: add snapshot releases</li>
<li><a
href="0e7dd853ee"><code>0e7dd85</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3322">#3322</a>
from hey-api/revert-3319-changeset-release/main</li>
<li><a
href="bfd43ec6d6"><code>bfd43ec</code></a>
Revert &quot;ci: release&quot;</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.91.1...@hey-api/openapi-ts@0.92.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hey-api/openapi-ts&package-manager=npm_and_yarn&previous-version=0.91.1&new-version=0.92.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:11:01 +00:00
dependabot[bot]
9ef6e22c17 Bump @typescript-eslint/parser from 7.18.0 to 8.55.0 in /frontend (#1552)
Bumps
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
from 7.18.0 to 8.55.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases"><code>@​typescript-eslint/parser</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v8.55.0</h2>
<h2>8.55.0 (2026-02-09)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>utils:</strong> deprecate defaultOptions in favor of
meta.defaultOptions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11992">#11992</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unused-vars] remove trailing
newline when removing entire import (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11990">#11990</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
require strictNullChecks (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11966">#11966</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12000">#12000</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
report unnecessary defaults in ternary expressions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11984">#11984</a>)</li>
<li><strong>eslint-plugin:</strong> [no-useless-default-assignment]
reduce param index to ts this handling (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11949">#11949</a>)</li>
<li><strong>typescript-estree:</strong> forbid invalid modifier in
object expression (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11931">#11931</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Christian Rose <a
href="https://github.com/chrros95"><code>@​chrros95</code></a></li>
<li>fisker Cheung <a
href="https://github.com/fisker"><code>@​fisker</code></a></li>
<li>Josh Goldberg</li>
<li>Maria Solano <a
href="https://github.com/MariaSolOs"><code>@​MariaSolOs</code></a></li>
<li>Minyeong Kim <a
href="https://github.com/minyeong981"><code>@​minyeong981</code></a></li>
<li>SungHyun627 <a
href="https://github.com/SungHyun627"><code>@​SungHyun627</code></a></li>
<li>Yukihiro Hasegawa <a
href="https://github.com/y-hsgw"><code>@​y-hsgw</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>v8.54.0</h2>
<h2>8.54.0 (2026-01-26)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin-internal:</strong> add prefer-tsutils-methods
rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11974">#11974</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11625">#11625</a>)</li>
<li><strong>scope-manager:</strong> support ScopeManager#addGlobals (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11914">#11914</a>)</li>
<li><strong>typescript-estree:</strong> add shortcut methods to
ParserServicesWithTypeInformation (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11965">#11965</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11955">#11955</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unused-private-class-members]
private destructured class member is defined but used (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11785">#11785</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
check both base constraint and actual type for non-null assertions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11967">#11967</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/11559">#11559</a>)</li>
<li><strong>scope-manager:</strong> fix catch clause scopes
<code>def.name</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11982">#11982</a>)</li>
<li><strong>scope-manager:</strong> prevent misidentification of
<code>&quot;use strict&quot;</code> directives (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11995">#11995</a>)</li>
<li><strong>utils:</strong> handle missing <code>FlatESLint</code> and
<code>LegacyESLint</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/11958">#11958</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Brad Zacher <a
href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li>
<li>fnx <a
href="https://github.com/DMartens"><code>@​DMartens</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md"><code>@​typescript-eslint/parser</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>8.55.0 (2026-02-09)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.55.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.54.0 (2026-01-26)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.53.1 (2026-01-19)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.53.0 (2026-01-12)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.52.0 (2026-01-05)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.51.0 (2025-12-29)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.50.1 (2025-12-22)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<h2>8.50.0 (2025-12-15)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fedfe8665a"><code>fedfe86</code></a>
chore(release): publish 8.55.0</li>
<li><a
href="b931f8c706"><code>b931f8c</code></a>
chore: use workspace refs for workspace deps (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12018">#12018</a>)</li>
<li><a
href="1f17a7918c"><code>1f17a79</code></a>
chore: migrate to pnpm (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/11248">#11248</a>)</li>
<li><a
href="d423e57622"><code>d423e57</code></a>
chore(release): publish 8.54.0</li>
<li><a
href="9940e53a15"><code>9940e53</code></a>
chore(release): publish 8.53.1</li>
<li><a
href="3021ede961"><code>3021ede</code></a>
chore(release): publish 8.53.0</li>
<li><a
href="9ddd571268"><code>9ddd571</code></a>
chore(release): publish 8.52.0</li>
<li><a
href="95c7c730c2"><code>95c7c73</code></a>
chore: update deps to latest minor/patch (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/11921">#11921</a>)</li>
<li><a
href="e4c57f5996"><code>e4c57f5</code></a>
chore(release): publish 8.51.0</li>
<li><a
href="d520b88990"><code>d520b88</code></a>
chore(release): publish 8.50.1</li>
<li>Additional commits viewable in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.55.0/packages/parser">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for <code>@​typescript-eslint/parser</code>
since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@typescript-eslint/parser&package-manager=npm_and_yarn&previous-version=7.18.0&new-version=8.55.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:10:27 +00:00
dependabot[bot]
cc7a78efc5 Bump markdownlint-rule-relative-links from 4.2.0 to 5.0.1 in /docs (#1551)
Bumps
[markdownlint-rule-relative-links](https://github.com/theoludwig/markdownlint-rule-relative-links)
from 4.2.0 to 5.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/theoludwig/markdownlint-rule-relative-links/releases">markdownlint-rule-relative-links's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<h2><a
href="https://github.com/theoludwig/markdownlint-rule-relative-links/compare/v5.0.0...v5.0.1">5.0.1</a>
(2026-02-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>ignore external https image links (<a
href="c744c4872a">c744c48</a>)</li>
</ul>
<h2>v5.0.0</h2>
<h1><a
href="https://github.com/theoludwig/markdownlint-rule-relative-links/compare/v4.2.0...v5.0.0">5.0.0</a>
(2026-02-05)</h1>
<ul>
<li>feat!: stricter validation of image links (check if the file is an
image) (<a
href="211c71d75b">211c71d</a>)</li>
</ul>
<h3>BREAKING CHANGES</h3>
<ul>
<li>links like
<code>![Image](https://github.com/theoludwig/markdownlint-rule-relative-links/blob/HEAD/not-an-image.txt)</code>
will now report an error</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c744c4872a"><code>c744c48</code></a>
fix: ignore external https image links</li>
<li><a
href="211c71d75b"><code>211c71d</code></a>
feat!: stricter validation of image links (check if the file is an
image)</li>
<li><a
href="12a22980ce"><code>12a2298</code></a>
chore: migrate from ESLint/Prettier to Oxc</li>
<li><a
href="075742e867"><code>075742e</code></a>
build(deps): update latest</li>
<li><a
href="5c19f57f9d"><code>5c19f57</code></a>
ci: trusted npm package publishing (OIDC)</li>
<li><a
href="f404ffcd0e"><code>f404ffc</code></a>
build(deps): update markdownlint to v0.39.0 and markdownlint-cli2 to
…</li>
<li><a
href="257d65e6f5"><code>257d65e</code></a>
ci: pin GitHub Actions by commit-hash</li>
<li><a
href="bc89a30309"><code>bc89a30</code></a>
build(deps): update latest</li>
<li><a
href="3ebc40c2ad"><code>3ebc40c</code></a>
ci: run tests on Windows and macOS (<a
href="https://redirect.github.com/theoludwig/markdownlint-rule-relative-links/issues/15">#15</a>)</li>
<li>See full diff in <a
href="https://github.com/theoludwig/markdownlint-rule-relative-links/compare/v4.2.0...v5.0.1">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by [GitHub Actions](<a
href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a>
Actions), a new releaser for markdownlint-rule-relative-links since your
current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdownlint-rule-relative-links&package-manager=npm_and_yarn&previous-version=4.2.0&new-version=5.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 04:09:34 +00:00
dependabot[bot]
9552b2576c Bump @types/node from 25.0.0 to 25.2.0 in /frontend (#1546)
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 25.0.0 to 25.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=25.0.0&new-version=25.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:43:43 +00:00
dependabot[bot]
d217cb4e77 Bump pyrefly from 0.50.0 to 0.51.0 in /backend (#1549)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.50.0 to
0.51.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1877edc645"><code>1877edc</code></a>
Update pyrefly version]</li>
<li><a
href="cb5f5d7ba5"><code>cb5f5d7</code></a>
Make Unions take less space</li>
<li><a
href="8b5434f1c5"><code>8b5434f</code></a>
Add <code>openlibrary</code> back to the blocklist</li>
<li><a
href="87f0990a71"><code>87f0990</code></a>
Fix pyrefly buck/cargo config</li>
<li><a
href="ddd20cc2e9"><code>ddd20cc</code></a>
Remove old get() method from LookupExport trait</li>
<li><a
href="e2aed196e7"><code>e2aed19</code></a>
Convert alt/class/django.rs to use new LookupExport API</li>
<li><a
href="0dcfcaef77"><code>0dcfcae</code></a>
Convert alt/attr.rs to use new LookupExport API</li>
<li><a
href="bcf03acf00"><code>bcf03ac</code></a>
Convert binding/scope.rs to use new LookupExport API</li>
<li><a
href="7092671918"><code>7092671</code></a>
Convert binding/bindings.rs to use new LookupExport API</li>
<li><a
href="971a115480"><code>971a115</code></a>
Convert binding/stmt.rs to use new LookupExport API</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.50.0...0.51.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.50.0&new-version=0.51.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:41:14 +00:00
dependabot[bot]
3a4c227c3f Bump @hey-api/openapi-ts from 0.90.1 to 0.91.1 in /frontend (#1545)
Bumps [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) from
0.90.1 to 0.91.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/hey-api/openapi-ts/releases"><code>@​hey-api/openapi-ts</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.91.1</h2>
<h3>Patch Changes</h3>
<h3>Updated Dependencies:</h3>
<ul>
<li><code>@​hey-api/codegen-core</code><a
href="https://github.com/0"><code>@​0</code></a>.6.1</li>
<li><code>@​hey-api/shared</code><a
href="https://github.com/0"><code>@​0</code></a>.1.1</li>
</ul>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.91.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><strong>BREAKING</strong>: Drop CommonJS (CJS) support. This package
is now <strong>ESM-only</strong>. (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3251">#3251</a>)
(<a
href="7f19d5921d"><code>7f19d59</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<h3>Removed CommonJS (CJS) support</h3>
<p><code>@hey-api/openapi-ts</code> is now ESM-only. This change
simplifies the codebase, improves tree-shaking, and enables better
integration with modern bundlers and TypeScript tooling.</p>
<p>CommonJS entry points (<code>require()</code>,
<code>module.exports</code>) are no longer supported. If you are in a
CJS environment, you can still load the package dynamically using
<code>import()</code> like:</p>
<pre lang="js"><code>const { defineConfig } = await
import('@hey-api/openapi-ts');
</code></pre>
<p>If you have previously written:</p>
<pre lang="js"><code>const { defineConfig } =
require('@hey-api/openapi-ts');
</code></pre>
<p>Migrate by updating your static imports:</p>
<pre lang="js"><code>import { defineConfig } from '@hey-api/openapi-ts';
</code></pre>
<p>If your environment cannot use ESM, pin to a previous version.</p>
<h3>Patch Changes</h3>
<h3>Updated Dependencies:</h3>
<ul>
<li><code>@​hey-api/shared</code><a
href="https://github.com/0"><code>@​0</code></a>.1.0</li>
<li><code>@​hey-api/codegen-core</code><a
href="https://github.com/0"><code>@​0</code></a>.6.0</li>
<li><code>@​hey-api/types</code><a
href="https://github.com/0"><code>@​0</code></a>.1.3</li>
</ul>
<h2><code>@​hey-api/openapi-ts</code><a
href="https://github.com/0"><code>@​0</code></a>.90.10</h2>
<h3>Patch Changes</h3>
<ul>
<li><strong>plugin(<code>@​tanstack/solid-query</code>)</strong>: index
mutation options symbol (<a
href="https://redirect.github.com/hey-api/openapi-ts/pull/3253">#3253</a>)
(<a
href="c5f379ea55"><code>c5f379e</code></a>)
by <a href="https://github.com/mrlubos"><code>@​mrlubos</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ce5977e70c"><code>ce5977e</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3292">#3292</a>
from hey-api/changeset-release/main</li>
<li><a
href="1542a56c81"><code>1542a56</code></a>
chore: update lock file</li>
<li><a
href="dd988e99a4"><code>dd988e9</code></a>
ci: release</li>
<li><a
href="caabc9f93c"><code>caabc9f</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3291">#3291</a>
from hey-api/copilot/fix-duplicate-import-error</li>
<li><a
href="3c08e38b4d"><code>3c08e38</code></a>
Fix duplicate import error for symbols in planner</li>
<li><a
href="3f23cefb37"><code>3f23cef</code></a>
Remove unnecessary comments and add planner unit tests for import
deduplication</li>
<li><a
href="59efc7b343"><code>59efc7b</code></a>
Fix duplicate import error when same symbol is imported as both type and
value</li>
<li><a
href="6e7770d7cd"><code>6e7770d</code></a>
Initial plan</li>
<li><a
href="124dc28022"><code>124dc28</code></a>
Merge pull request <a
href="https://redirect.github.com/hey-api/openapi-ts/issues/3287">#3287</a>
from hey-api/chore/py-typecheck</li>
<li><a
href="c7ebec35ba"><code>c7ebec3</code></a>
chore: prepare Python typecheck</li>
<li>Additional commits viewable in <a
href="https://github.com/hey-api/openapi-ts/compare/@hey-api/openapi-ts@0.90.1...@hey-api/openapi-ts@0.91.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hey-api/openapi-ts&package-manager=npm_and_yarn&previous-version=0.90.1&new-version=0.91.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:41:08 +00:00
dependabot[bot]
49a82f349d Bump sentry-sdk from 2.50.0 to 2.51.0 in /backend (#1550)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.50.0 to 2.51.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.51.0</h2>
<h3>New Features </h3>
<h4>Openai</h4>
<ul>
<li>feat(openai): Set system instruction attribute for Responses API by
<a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5376">#5376</a></li>
<li>feat(openai): Set system instruction attribute for Completions API
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5358">#5358</a></li>
<li>feat(integrations): OpenAI/OpenAI Agents detect and report the time
to first token metric (TTFT) as
<code>gen_ai.response.time_to_first_token</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5348">#5348</a></li>
</ul>
<h4>Openai Agents</h4>
<ul>
<li>feat(openai-agents): Set system instruction attribute on
<code>gen_ai.chat</code> spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5370">#5370</a></li>
<li>feat(openai-agents): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5355">#5355</a></li>
<li>feat(integrations): openai-agents streaming support by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5291">#5291</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>feat(ai): Add original input length meta attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5375">#5375</a></li>
<li>feat(anthropic): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5353">#5353</a></li>
<li>feat(asyncio): Allow to turn task spans off by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5367">#5367</a></li>
<li>feat(gen_ai): add function <code>set_conversation_id</code> and
managing functions on the Scope and apply it on the Span on
<code>.finish()</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5362">#5362</a></li>
<li>feat(google-genai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5354">#5354</a></li>
<li>feat(langchain): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5357">#5357</a></li>
<li>feat(pydantic-ai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5356">#5356</a></li>
<li>feat(transport): Report 413 responses for oversized envelopes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5380">#5380</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(ai): Keep single content input message by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5345">#5345</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ci(release): Fix changelog-preview permissions by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5368">#5368</a></li>
<li>ref: Replace <code>set_data_normalized()</code> with
<code>Span.set_data()</code> for system instructions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5374">#5374</a></li>
<li>ci: Fix path in AI integration tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5347">#5347</a></li>
</ul>
<h2>2.51.0a1</h2>
<h3>New Features </h3>
<h4>Integrations</h4>
<ul>
<li>feat(integrations): OpenAI/OpenAI Agents detect and report the time
to first token metric (TTFT) as
<code>gen_ai.response.time_to_first_token</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5348">#5348</a></li>
<li>feat(integrations): openai-agents streaming support by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5291">#5291</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>feat(anthropic): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5353">#5353</a></li>
<li>feat(asyncio): Allow to turn task spans off by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5367">#5367</a></li>
<li>feat(gen_ai): add function <code>set_conversation_id</code> and
managing functions on the Scope and apply it on the Span on
<code>.finish()</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5362">#5362</a></li>
<li>feat(google-genai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5354">#5354</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.51.0</h2>
<h3>New Features </h3>
<h4>Openai</h4>
<ul>
<li>feat(openai): Set system instruction attribute for Responses API by
<a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5376">#5376</a></li>
<li>feat(openai): Set system instruction attribute for Completions API
by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5358">#5358</a></li>
<li>feat(integrations): OpenAI/OpenAI Agents detect and report the time
to first token metric (TTFT) as
<code>gen_ai.response.time_to_first_token</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5348">#5348</a></li>
</ul>
<h4>Openai Agents</h4>
<ul>
<li>feat(openai-agents): Set system instruction attribute on
<code>gen_ai.chat</code> spans by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5370">#5370</a></li>
<li>feat(openai-agents): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5355">#5355</a></li>
<li>feat(integrations): openai-agents streaming support by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5291">#5291</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>feat(ai): Add original input length meta attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5375">#5375</a></li>
<li>feat(anthropic): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5353">#5353</a></li>
<li>feat(asyncio): Allow to turn task spans off by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5367">#5367</a></li>
<li>feat(gen_ai): add function <code>set_conversation_id</code> and
managing functions on the Scope and apply it on the Span on
<code>.finish()</code> by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5362">#5362</a></li>
<li>feat(google-genai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5354">#5354</a></li>
<li>feat(langchain): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5357">#5357</a></li>
<li>feat(pydantic-ai): Set system instruction attribute by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5356">#5356</a></li>
<li>feat(transport): Report 413 responses for oversized envelopes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5380">#5380</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(ai): Keep single content input message by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5345">#5345</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ci(release): Fix changelog-preview permissions by <a
href="https://github.com/BYK"><code>@​BYK</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5368">#5368</a></li>
<li>ref: Replace <code>set_data_normalized()</code> with
<code>Span.set_data()</code> for system instructions by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5374">#5374</a></li>
<li>ci: Fix path in AI integration tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5347">#5347</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8517eb0a07"><code>8517eb0</code></a>
Update CHANGELOG.md</li>
<li><a
href="93e89e4c1b"><code>93e89e4</code></a>
release: 2.51.0</li>
<li><a
href="003cb73568"><code>003cb73</code></a>
feat(ai): Add original input length meta attribute (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5375">#5375</a>)</li>
<li><a
href="d4db6d32d6"><code>d4db6d3</code></a>
fix(ai): Keep single content input message (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5345">#5345</a>)</li>
<li><a
href="dafd62f0b5"><code>dafd62f</code></a>
ref: Replace <code>set_data_normalized()</code> with
<code>Span.set_data()</code> for system instru...</li>
<li><a
href="b3aa033dc1"><code>b3aa033</code></a>
feat(openai-agents): Set system instruction attribute on
<code>gen_ai.chat</code> spans ...</li>
<li><a
href="a6b4f2ea29"><code>a6b4f2e</code></a>
feat(openai): Set system instruction attribute for Responses API (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5376">#5376</a>)</li>
<li><a
href="6611957155"><code>6611957</code></a>
feat(openai): Set system instruction attribute for Completions API (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5358">#5358</a>)</li>
<li><a
href="0d424760b2"><code>0d42476</code></a>
feat(transport): Report 413 responses for oversized envelopes (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5380">#5380</a>)</li>
<li><a
href="0c81d3a450"><code>0c81d3a</code></a>
feat(integrations): OpenAI/OpenAI Agents detect and report the time to
first ...</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.50.0...2.51.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.50.0&new-version=2.51.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:59 +00:00
dependabot[bot]
505511b0e7 Bump pyjwt from 2.10.1 to 2.11.0 in /backend (#1547)
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.10.1 to 2.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/releases">pyjwt's
releases</a>.</em></p>
<blockquote>
<h2>2.11.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Fixed type error in comment by <a
href="https://github.com/shuhaib-aot"><code>@​shuhaib-aot</code></a> in
<a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1026">jpadilla/pyjwt#1026</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1018">jpadilla/pyjwt#1018</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1033">jpadilla/pyjwt#1033</a></li>
<li>Make note of use of leeway with nbf by <a
href="https://github.com/djw8605"><code>@​djw8605</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1034">jpadilla/pyjwt#1034</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1035">jpadilla/pyjwt#1035</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/964">#964</a>:
Validate key against allowed types for Algorithm family by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/985">jpadilla/pyjwt#985</a></li>
<li>Feat <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1024">#1024</a>:
Add iterator for PyJWKSet by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1041">jpadilla/pyjwt#1041</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1039">#1039</a>:
Add iss, issuer type checks by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1040">jpadilla/pyjwt#1040</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/660">#660</a>:
Improve typing/logic for <code>options</code> in decode,
decode_complete; Improve docs by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1045">jpadilla/pyjwt#1045</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1042">jpadilla/pyjwt#1042</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1052">jpadilla/pyjwt#1052</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1053">jpadilla/pyjwt#1053</a></li>
<li>Fix <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1022">#1022</a>:
Map <code>algorithm=None</code> to &quot;none&quot; by <a
href="https://github.com/qqii"><code>@​qqii</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1056">jpadilla/pyjwt#1056</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1055">jpadilla/pyjwt#1055</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1058">jpadilla/pyjwt#1058</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1060">jpadilla/pyjwt#1060</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1061">jpadilla/pyjwt#1061</a></li>
<li>Fixes <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1047">#1047</a>:
Correct <code>PyJWKClient.get_signing_key_from_jwt</code> annotation by
<a href="https://github.com/khvn26"><code>@​khvn26</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1048">jpadilla/pyjwt#1048</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1062">jpadilla/pyjwt#1062</a></li>
<li>Fixed doc string typo in _validate_jti() function <a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1063">#1063</a>
by <a
href="https://github.com/kuldeepkhatke"><code>@​kuldeepkhatke</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1064">jpadilla/pyjwt#1064</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1065">jpadilla/pyjwt#1065</a></li>
<li>Update SECURITY.md by <a
href="https://github.com/auvipy"><code>@​auvipy</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1057">jpadilla/pyjwt#1057</a></li>
<li>Typing fix: use <code>float</code> instead of <code>int</code> for
<code>lifespan</code> and <code>timeout</code> by <a
href="https://github.com/nikitagashkov"><code>@​nikitagashkov</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1068">jpadilla/pyjwt#1068</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1067">jpadilla/pyjwt#1067</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1071">jpadilla/pyjwt#1071</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1076">jpadilla/pyjwt#1076</a></li>
<li>Fix TYP header documentation by <a
href="https://github.com/fobiasmog"><code>@​fobiasmog</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1046">jpadilla/pyjwt#1046</a></li>
<li>doc: Document claims sub and jti by <a
href="https://github.com/cleder"><code>@​cleder</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1088">jpadilla/pyjwt#1088</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1077">jpadilla/pyjwt#1077</a></li>
<li>Bump actions/setup-python from 5 to 6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1089">jpadilla/pyjwt#1089</a></li>
<li>Bump actions/stale from 8 to 10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1090">jpadilla/pyjwt#1090</a></li>
<li>Bump actions/checkout from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1083">jpadilla/pyjwt#1083</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1091">jpadilla/pyjwt#1091</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1093">jpadilla/pyjwt#1093</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1096">jpadilla/pyjwt#1096</a></li>
<li>Resolve package build warnings by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1105">jpadilla/pyjwt#1105</a></li>
<li>Support Python 3.14, and test against PyPy 3.10+ by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1104">jpadilla/pyjwt#1104</a></li>
<li>Fix a <code>SyntaxWarning</code> caused by invalid escape sequences
by <a href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a>
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1103">jpadilla/pyjwt#1103</a></li>
<li>Standardize CHANGELOG links to PRs by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1110">jpadilla/pyjwt#1110</a></li>
<li>Migrate from <code>pep517</code>, which is deprecated, to
<code>build</code> by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1108">jpadilla/pyjwt#1108</a></li>
<li>Fix incorrectly-named test suite function by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1116">jpadilla/pyjwt#1116</a></li>
<li>Fix Read the Docs builds by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1111">jpadilla/pyjwt#1111</a></li>
<li>Bump actions/download-artifact from 4 to 6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1118">jpadilla/pyjwt#1118</a></li>
<li>Escalate test suite warnings to errors by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1107">jpadilla/pyjwt#1107</a></li>
<li>Add pyupgrade as a pre-commit hook by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1109">jpadilla/pyjwt#1109</a></li>
<li>Simplify the test suite decorators by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1113">jpadilla/pyjwt#1113</a></li>
<li>Improve coverage config and eliminate unused test suite code by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1115">jpadilla/pyjwt#1115</a></li>
<li>Build a shared wheel once in the test suite by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in <a
href="https://redirect.github.com/jpadilla/pyjwt/pull/1114">jpadilla/pyjwt#1114</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst">pyjwt's
changelog</a>.</em></p>
<blockquote>
<h2><code>v2.11.0
&lt;https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0&gt;</code>__</h2>
<p>Fixed</p>
<pre><code>
- Enforce ECDSA curve validation per RFC 7518 Section 3.4.
- Fix build system warnings by @kurtmckee in
`[#1105](https://github.com/jpadilla/pyjwt/issues/1105)
&lt;https://github.com/jpadilla/pyjwt/pull/1105&gt;`__
- Validate key against allowed types for Algorithm family in
`[#964](https://github.com/jpadilla/pyjwt/issues/964)
&lt;https://github.com/jpadilla/pyjwt/pull/964&gt;`__
- Add iterator for JWKSet in
`[#1041](https://github.com/jpadilla/pyjwt/issues/1041)
&lt;https://github.com/jpadilla/pyjwt/pull/1041&gt;`__
- Validate `iss` claim is a string during encoding and decoding by
@pachewise in `[#1040](https://github.com/jpadilla/pyjwt/issues/1040)
&lt;https://github.com/jpadilla/pyjwt/pull/1040&gt;`__
- Improve typing/logic for `options` in decode, decode_complete by
@pachewise in `[#1045](https://github.com/jpadilla/pyjwt/issues/1045)
&lt;https://github.com/jpadilla/pyjwt/pull/1045&gt;`__
- Declare float supported type for lifespan and timeout by
@nikitagashkov in
`[#1068](https://github.com/jpadilla/pyjwt/issues/1068)
&lt;https://github.com/jpadilla/pyjwt/pull/1068&gt;`__
- Fix ``SyntaxWarning``\s/``DeprecationWarning``\s caused by invalid
escape sequences by @kurtmckee in
`[#1103](https://github.com/jpadilla/pyjwt/issues/1103)
&lt;https://github.com/jpadilla/pyjwt/pull/1103&gt;`__
- Development: Build a shared wheel once to speed up test suite setup
times by @kurtmckee in
`[#1114](https://github.com/jpadilla/pyjwt/issues/1114)
&lt;https://github.com/jpadilla/pyjwt/pull/1114&gt;`__
- Development: Test type annotations across all supported Python
versions,
increase the strictness of the type checking, and remove the mypy
pre-commit hook
by @kurtmckee in `[#1112](https://github.com/jpadilla/pyjwt/issues/1112)
&lt;https://github.com/jpadilla/pyjwt/pull/1112&gt;`__
<p>Added
</code></pre></p>
<ul>
<li>Support Python 3.14, and test against PyPy 3.10 and 3.11 by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1104](https://github.com/jpadilla/pyjwt/issues/1104)
&lt;https://github.com/jpadilla/pyjwt/pull/1104&gt;</code>__</li>
<li>Development: Migrate to <code>build</code> to test package building
in CI by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1108](https://github.com/jpadilla/pyjwt/issues/1108)
&lt;https://github.com/jpadilla/pyjwt/pull/1108&gt;</code>__</li>
<li>Development: Improve coverage config and eliminate unused test suite
code by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1115](https://github.com/jpadilla/pyjwt/issues/1115)
&lt;https://github.com/jpadilla/pyjwt/pull/1115&gt;</code>__</li>
<li>Docs: Standardize CHANGELOG links to PRs by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1110](https://github.com/jpadilla/pyjwt/issues/1110)
&lt;https://github.com/jpadilla/pyjwt/pull/1110&gt;</code>__</li>
<li>Docs: Fix Read the Docs builds by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1111](https://github.com/jpadilla/pyjwt/issues/1111)
&lt;https://github.com/jpadilla/pyjwt/pull/1111&gt;</code>__</li>
<li>Docs: Add example of using leeway with nbf by <a
href="https://github.com/djw8605"><code>@​djw8605</code></a> in
<code>[#1034](https://github.com/jpadilla/pyjwt/issues/1034)
&lt;https://github.com/jpadilla/pyjwt/pull/1034&gt;</code>__</li>
<li>Docs: Refactored docs with <code>autodoc</code>; added
<code>PyJWS</code> and <code>jwt.algorithms</code> docs by <a
href="https://github.com/pachewise"><code>@​pachewise</code></a> in
<code>[#1045](https://github.com/jpadilla/pyjwt/issues/1045)
&lt;https://github.com/jpadilla/pyjwt/pull/1045&gt;</code>__</li>
<li>Docs: Documentation improvements for &quot;sub&quot; and
&quot;jti&quot; claims by <a
href="https://github.com/cleder"><code>@​cleder</code></a> in
<code>[#1088](https://github.com/jpadilla/pyjwt/issues/1088)
&lt;https://github.com/jpadilla/pyjwt/pull/1088&gt;</code>__</li>
<li>Development: Add pyupgrade as a pre-commit hook by <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a> in
<code>[#1109](https://github.com/jpadilla/pyjwt/issues/1109)
&lt;https://github.com/jpadilla/pyjwt/pull/1109&gt;</code>__</li>
<li>Add minimum key length validation for HMAC and RSA keys (CWE-326).
Warns by default via <code>InsecureKeyLengthWarning</code> when keys are
below
minimum recommended lengths per RFC 7518 Section 3.2 (HMAC) and
NIST SP 800-131A (RSA). Pass
<code>enforce_minimum_key_length=True</code> in
options to <code>PyJWT</code> or <code>PyJWS</code> to raise
<code>InvalidKeyError</code> instead.</li>
<li>Refactor <code>PyJWT</code> to own an internal <code>PyJWS</code>
instance instead of
calling global <code>api_jws</code> functions.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="697344d259"><code>697344d</code></a>
bump up version</li>
<li><a
href="e4d0aec024"><code>e4d0aec</code></a>
fix: pre-commit</li>
<li><a
href="df9a6a0c44"><code>df9a6a0</code></a>
fix: failing test</li>
<li><a
href="2b2e53cd23"><code>2b2e53c</code></a>
fix: docs</li>
<li><a
href="635c8d89dd"><code>635c8d8</code></a>
fix: failing mypy</li>
<li><a
href="96ae3563b9"><code>96ae356</code></a>
feat: add minimum key length validation for HMAC and RSA</li>
<li><a
href="5b86227733"><code>5b86227</code></a>
fix: enforce ECDSA curve validation per RFC 7518 Section 3.4</li>
<li><a
href="04947d75dc"><code>04947d7</code></a>
Bump actions/download-artifact from 6 to 7 (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1125">#1125</a>)</li>
<li><a
href="dd448344c3"><code>dd44834</code></a>
Fix leeway value in usage documentation (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1124">#1124</a>)</li>
<li><a
href="407f0bde99"><code>407f0bd</code></a>
Thoroughly test type annotations, and resolve errors (<a
href="https://redirect.github.com/jpadilla/pyjwt/issues/1112">#1112</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyjwt&package-manager=uv&previous-version=2.10.1&new-version=2.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:47 +00:00
dependabot[bot]
7053b2daec Bump gunicorn from 24.1.1 to 25.0.1 in /backend (#1548)
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.1.1 to
25.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/benoitc/gunicorn/releases">gunicorn's
releases</a>.</em></p>
<blockquote>
<h2>25.0.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li>Fix ASGI streaming responses (SSE) hanging: add chunked transfer
encoding for
HTTP/1.1 responses without Content-Length header. Without chunked
encoding,
clients wait for connection close to determine end-of-response.</li>
</ul>
<h2>Changes</h2>
<ul>
<li>Update celery_alternative example to use FastAPI with native ASGI
worker and
uvloop for async task execution</li>
</ul>
<h2>Testing</h2>
<ul>
<li>Add ASGI compliance test suite with Docker-based integration tests
covering HTTP,
WebSocket, streaming, lifespan, framework integration (Starlette,
FastAPI),
HTTP/2, and concurrency scenarios</li>
</ul>
<h2>Gunicorn 25.0.0</h2>
<h2>New Features</h2>
<ul>
<li>
<p><strong>Dirty Arbiters</strong>: Separate process pool for executing
long-running, blocking
operations (AI model loading, heavy computation) without blocking HTTP
workers
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3460">#3460</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3460">benoitc/gunicorn#3460</a>))</p>
<ul>
<li>Inspired by Erlang's dirty schedulers</li>
<li>Asyncio-based with Unix socket IPC</li>
<li>Stateful workers that persist loaded resources</li>
<li>New settings: <code>--dirty-app</code>,
<code>--dirty-workers</code>, <code>--dirty-timeout</code>,
<code>--dirty-threads</code>, <code>--dirty-graceful-timeout</code></li>
<li>Lifecycle hooks: <code>on_dirty_starting</code>,
<code>dirty_post_fork</code>,
<code>dirty_worker_init</code>, <code>dirty_worker_exit</code></li>
</ul>
</li>
<li>
<p><strong>Per-App Worker Allocation for Dirty Arbiters</strong>:
Control how many dirty workers
load each app for memory optimization with heavy models
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3473">#3473</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3473">benoitc/gunicorn#3473</a>))</p>
<ul>
<li>Set <code>workers</code> class attribute on DirtyApp (e.g.,
<code>workers = 2</code>)</li>
<li>Or use config format <code>module:class:N</code> (e.g.,
<code>myapp:HeavyModel:2</code>)</li>
<li>Requests automatically routed to workers with the target app</li>
<li>New exception <code>DirtyNoWorkersAvailableError</code> for graceful
error handling</li>
<li>Example: 8 workers × 10GB model = 80GB → with
<code>workers=2</code>: 20GB (75% savings)</li>
</ul>
</li>
<li>
<p><strong>HTTP/2 Support (Beta)</strong>: Native HTTP/2 (RFC 7540)
support for improved performance
with modern clients ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3468">#3468</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3468">benoitc/gunicorn#3468</a>))</p>
<ul>
<li>Multiplexed streams over a single connection</li>
<li>Header compression (HPACK)</li>
<li>Flow control and stream prioritization</li>
<li>Works with gthread, gevent, and ASGI workers</li>
<li>New settings: <code>--http-protocols</code>,
<code>--http2-max-concurrent-streams</code>,
<code>--http2-initial-window-size</code>,
<code>--http2-max-frame-size</code>,
<code>--http2-max-header-list-size</code></li>
<li>Requires SSL/TLS and h2 library: <code>pip install
gunicorn[http2]</code></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3bf529f6c2"><code>3bf529f</code></a>
docs: sync news.md with 2026-news.md</li>
<li><a
href="1f4f245d76"><code>1f4f245</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3478">#3478</a>
from benoitc/feature/asgi-compliance-testbed</li>
<li><a
href="e1519c0569"><code>e1519c0</code></a>
docs: add ASGI compliance test suite to changelog</li>
<li><a
href="0885005b08"><code>0885005</code></a>
fix(tests): correct assertions in ASGI compliance tests</li>
<li><a
href="658924c436"><code>658924c</code></a>
docs: update changelog for 25.0.1</li>
<li><a
href="c5b6e82277"><code>c5b6e82</code></a>
chore: bump version to 25.0.1</li>
<li><a
href="ce352dc230"><code>ce352dc</code></a>
fix(asgi): add chunked transfer encoding for streaming responses</li>
<li><a
href="29b8a3a763"><code>29b8a3a</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3476">#3476</a>
from benoitc/dependabot/github_actions/actions/check...</li>
<li><a
href="791ab46e1c"><code>791ab46</code></a>
chore(deps): bump actions/checkout from 4 to 6</li>
<li><a
href="9235b72ab8"><code>9235b72</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3475">#3475</a>
from benoitc/dependabot/github_actions/actions/uploa...</li>
<li>Additional commits viewable in <a
href="https://github.com/benoitc/gunicorn/compare/24.1.1...25.0.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gunicorn&package-manager=uv&previous-version=24.1.1&new-version=25.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:40 +00:00
dependabot[bot]
a3e836b083 Bump eslint-plugin-react-hooks from 4.6.0 to 7.0.1 in /frontend (#1543)
Bumps
[eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks)
from 4.6.0 to 7.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/releases">eslint-plugin-react-hooks's
releases</a>.</em></p>
<blockquote>
<h2>eslint-plugin-react-hooks@5.0.0 (Oct 11, 2024)</h2>
<p>This release only contains <code>eslint-plugin-react-hooks</code>.
Notably, new violations and support for ESLint v9 were added.</p>
<h2><code>eslint-plugin-react-hooks</code></h2>
<ul>
<li><strong>New Violations:</strong> Component names now need to start
with an uppercase letter instead of a non-lowercase letter. This means
<code>_Button</code> or <code>_component</code> are no longer valid. (<a
href="https://github.com/kassens"><code>@​kassens</code></a>) in <a
href="https://redirect.github.com/facebook/react/pull/25162">#25162</a>
For example, in
<pre lang="tsx"><code>function _Component() {
  useState()
^^^^^^^^ A React Hook &quot;useState&quot; is called in function
&quot;_Component&quot; which is neither a Component nor a custom React
Hook function.
}
</code></pre>
<code>_Component</code> should be renamed to
<code>Component</code>.</li>
</ul>
<ul>
<li>Add support for ESLint v9. (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28773">#28773</a>)</li>
<li>Consider dispatch from <code>useActionState</code> stable. (<a
href="https://github.com/eps1lon"><code>@​eps1lon</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/29665">#29665</a>)</li>
<li>Accept <code>as</code> expression in callback. (<a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28202">#28202</a>)</li>
<li>Accept <code>as</code> expressions in deps array. (<a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28189">#28189</a>)</li>
<li>Treat <code>React.use()</code> the same as <code>use()</code>. (<a
href="https://github.com/kassens"><code>@​kassens</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27769">#27769</a>)</li>
<li>Move <code>use()</code> lint to non-experimental. (<a
href="https://github.com/kassens"><code>@​kassens</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27768">#27768</a>)</li>
<li>Support Flow <code>as</code> expressions. (<a
href="https://github.com/cpojer"><code>@​cpojer</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27590">#27590</a>)</li>
<li>Allow <code>useEffect(fn, undefined)</code>. (<a
href="https://github.com/kassens"><code>@​kassens</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27525">#27525</a>)</li>
<li>Disallow hooks in async functions. (<a
href="https://github.com/acdlite"><code>@​acdlite</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/27045">#27045</a>)</li>
<li>Rename experimental <code>useEvent</code> to
<code>useEffectEvent</code>. (<a
href="https://github.com/sebmarkbage"><code>@​sebmarkbage</code></a> in
<a
href="https://redirect.github.com/facebook/react/pull/25881">#25881</a>)</li>
<li>Lint for presence of <code>useEvent</code> functions in dependency
lists. (<a href="https://github.com/poteto"><code>@​poteto</code></a> in
<a
href="https://redirect.github.com/facebook/react/pull/25512">#25512</a>)</li>
<li>Check <code>useEvent</code> references instead. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/25319">#25319</a>)</li>
<li>Update <code>RulesOfHooks</code> with <code>useEvent</code> rules.
(<a href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/25285">#25285</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md">eslint-plugin-react-hooks's
changelog</a>.</em></p>
<blockquote>
<h2>7.0.1</h2>
<ul>
<li>Disallowed passing inline <code>useEffectEvent</code> values as JSX
props to guard against accidental propagation. (<a
href="https://redirect.github.com/facebook/react/pull/34820">#34820</a>
by <a
href="https://github.com/jf-eirinha"><code>@​jf-eirinha</code></a>)</li>
<li>Switch to <code>export =</code> so eslint-plugin-react-hooks emits
correct types for consumers in Node16 ESM projects. (<a
href="https://redirect.github.com/facebook/react/pull/34949">#34949</a>
by <a
href="https://github.com/karlhorky"><code>@​karlhorky</code></a>)</li>
<li>Tightened the typing of <code>configs.flat</code> so the
<code>configs</code> export is always defined. (<a
href="https://redirect.github.com/facebook/react/pull/34950">#34950</a>
by <a href="https://github.com/poteto"><code>@​poteto</code></a>)</li>
<li>Fix named import runtime errors. (<a
href="https://redirect.github.com/facebook/react/pull/34951">#34951</a>,
<a
href="https://redirect.github.com/facebook/react/pull/34953">#34953</a>
by <a
href="https://github.com/karlhorky"><code>@​karlhorky</code></a>)</li>
</ul>
<h2>7.0.0</h2>
<p>This release slims down presets to just 2 configurations
(<code>recommended</code> and <code>recommended-latest</code>), and all
compiler rules are enabled by default.</p>
<ul>
<li><strong>Breaking:</strong> Removed
<code>recommended-latest-legacy</code> and <code>flat/recommended</code>
configs. The plugin now provides <code>recommended</code> (legacy and
flat configs with all recommended rules), and
<code>recommended-latest</code> (legacy and flat configs with all
recommended rules plus new bleeding edge experimental compiler rules).
(<a href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34757">#34757</a>)</li>
</ul>
<h2>6.1.1</h2>
<p><strong>Note:</strong> 6.1.0 accidentally allowed use of
<code>recommended</code> without flat config, causing errors when used
with ESLint v9's <code>defineConfig()</code> helper. This has been fixed
in 6.1.1.</p>
<ul>
<li>Fix <code>recommended</code> config for flat config compatibility.
The <code>recommended</code> config has been converted to flat config
format. Non-flat config users should use <code>recommended-legacy</code>
instead. (<a href="https://github.com/poteto"><code>@​poteto</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/34700">#34700</a>)</li>
<li>Add <code>recommended-latest</code> and
<code>recommended-latest-legacy</code> configs that include React
Compiler rules. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34675">#34675</a>)</li>
<li>Remove unused <code>NoUnusedOptOutDirectives</code> rule. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34703">#34703</a>)</li>
<li>Remove <code>hermes-parser</code> and dependency. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34719">#34719</a>)</li>
<li>Remove <code>@babel/plugin-proposal-private-methods</code>
dependency. (<a
href="https://github.com/ArnaudBarre"><code>@​ArnaudBarre</code></a> and
<a
href="https://github.com/josephsavona"><code>@​josephsavona</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/34715">#34715</a>)</li>
<li>Update for Zod v3/v4 compatibility. (<a
href="https://github.com/kolvian"><code>@​kolian</code></a> and <a
href="https://github.com/josephsavona"><code>@​josephsavona</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/34717">#34717</a>)</li>
</ul>
<h2>6.1.0</h2>
<p><strong>Note:</strong> Version 6.0.0 was mistakenly released and
immediately deprecated and untagged on npm. This is the first official
6.x major release and includes breaking changes.</p>
<ul>
<li><strong>Breaking:</strong> Require Node.js 18 or newer. (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/32458">#32458</a>)</li>
<li><strong>Breaking:</strong> Flat config is now the default
<code>recommended</code> preset. Legacy config moved to
<code>recommended-legacy</code>. (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/32457">#32457</a>)</li>
<li><strong>New Violations:</strong> Disallow calling <code>use</code>
within try/catch blocks. (<a
href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34040">#34040</a>)</li>
<li><strong>New Violations:</strong> Disallow calling
<code>useEffectEvent</code> functions in arbitrary closures. (<a
href="https://github.com/jbrown215"><code>@​jbrown215</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/33544">#33544</a>)</li>
<li>Handle <code>React.useEffect</code> in addition to
<code>useEffect</code> in rules-of-hooks. (<a
href="https://github.com/Ayc0"><code>@​Ayc0</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/34076">#34076</a>)</li>
<li>Added <code>react-hooks</code> settings config option that to accept
<code>additionalEffectHooks</code> that are used across exhaustive-deps
and rules-of-hooks rules. (<a
href="https://github.com/jbrown215"><code>@​jbrown215</code></a>) in <a
href="https://redirect.github.com/facebook/react/pull/34497">#34497</a></li>
</ul>
<h2>6.0.0</h2>
<p>Accidentally released. See 6.1.0 for the actual changes.</p>
<h2>5.2.0</h2>
<ul>
<li>Support flat config (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/30774">#30774</a>)</li>
<li>Convert the plugin to TypeScript and provide package type
declarations (<a
href="https://github.com/michaelfaith"><code>@​michaelfaith</code></a>
in <a
href="https://redirect.github.com/facebook/react/pull/32279">#32279</a>,
<a
href="https://redirect.github.com/facebook/react/pull/32283">#32283</a>,
<a
href="https://redirect.github.com/facebook/react/pull/32240">#32240</a>,
<a
href="https://redirect.github.com/facebook/react/pull/32400">#32400</a>
and <a href="https://github.com/poteto"><code>@​poteto</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/32420">#32420</a>)</li>
<li>Fix false positive error in components with
<code>do</code>/<code>while</code> loops (<a
href="https://github.com/tyxla"><code>@​tyxla</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/31720">#31720</a>)</li>
<li>Detect issues in class properties (<a
href="https://github.com/mjesun"><code>@​mjesun</code></a> &amp; <a
href="https://github.com/ecraig12345"><code>@​ecraig12345</code></a> in
<a
href="https://redirect.github.com/facebook/react/pull/31823">#31823</a>)</li>
</ul>
<h2>5.1.0</h2>
<ul>
<li>Add support for <code>do</code>/<code>while</code> loops (<a
href="https://github.com/tyxla"><code>@​tyxla</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/28714">#28714</a>)</li>
<li>Fix error when callback argument is an identifier with an
<code>as</code> expression (<a
href="https://github.com/mskelton"><code>@​mskelton</code></a> in <a
href="https://redirect.github.com/facebook/react/pull/31119">#31119</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~react-bot">react-bot</a>, a new releaser
for eslint-plugin-react-hooks since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint-plugin-react-hooks&package-manager=npm_and_yarn&previous-version=4.6.0&new-version=7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:40:26 +00:00
dependabot[bot]
88febd34cd Bump swr from 2.3.0 to 2.4.0 in /frontend (#1542)
Bumps [swr](https://github.com/vercel/swr) from 2.3.0 to 2.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/swr/releases">swr's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: Migrate suspense related tests to e2e by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4204">vercel/swr#4204</a></li>
<li>CI: add missing flag for canary test by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4206">vercel/swr#4206</a></li>
<li>fix: Ensure useSWRImmutable overrides global refreshInterval by <a
href="https://github.com/CODEAbhinav-art"><code>@​CODEAbhinav-art</code></a>
in <a
href="https://redirect.github.com/vercel/swr/pull/4208">vercel/swr#4208</a></li>
<li>fix: Extra render when changing to new key with useSWRImmutable by
<a href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4209">vercel/swr#4209</a></li>
<li>fix: isHydration will cause unnecessary rerender by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4212">vercel/swr#4212</a></li>
<li>fix: Ensure preload runs only on client by <a
href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4213">vercel/swr#4213</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/CODEAbhinav-art"><code>@​CODEAbhinav-art</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4208">vercel/swr#4208</a></li>
<li><a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4213">vercel/swr#4213</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.8...v2.4.0">https://github.com/vercel/swr/compare/v2.3.8...v2.4.0</a></p>
<h2>v2.3.8</h2>
<h2>What's Changed</h2>
<ul>
<li>deps: upgrade dev deps for build by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4188">vercel/swr#4188</a></li>
<li>update use-sync-external-store to latest by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4189">vercel/swr#4189</a></li>
<li>fix: cve-2025-55182 critical rce vulnerability by <a
href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4192">vercel/swr#4192</a></li>
<li>fix: cve-2025-55184 &amp; CVE-2025-55183 by <a
href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4198">vercel/swr#4198</a></li>
<li>upgrade dev dep nextjs by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4199">vercel/swr#4199</a></li>
<li>update dev dependencies to address cve by <a
href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4200">vercel/swr#4200</a></li>
<li>enhance: Improve TSDoc comments by <a
href="https://github.com/shuding"><code>@​shuding</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4203">vercel/swr#4203</a></li>
<li>test: Import <code>act</code> from React by <a
href="https://github.com/shuding"><code>@​shuding</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4202">vercel/swr#4202</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/PierreCrb"><code>@​PierreCrb</code></a>
made their first contribution in <a
href="https://redirect.github.com/vercel/swr/pull/4192">vercel/swr#4192</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.7...v2.3.8">https://github.com/vercel/swr/compare/v2.3.7...v2.3.8</a></p>
<h2>v2.3.7</h2>
<h2>What's Changed</h2>
<ul>
<li>deps: upgrade ci node version to 22 by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4184">vercel/swr#4184</a></li>
<li>deps: upgrade pnpm version by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4185">vercel/swr#4185</a></li>
<li>deps: upgrade playwright version by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4186">vercel/swr#4186</a></li>
<li>deps: upgrade eslint version and fix lint problem by <a
href="https://github.com/promer94"><code>@​promer94</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4187">vercel/swr#4187</a></li>
<li>feat: Add <code>strictServerPrefetchWarning</code> by <a
href="https://github.com/shuding"><code>@​shuding</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4183">vercel/swr#4183</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.6...v2.3.7">https://github.com/vercel/swr/compare/v2.3.6...v2.3.7</a></p>
<h2>v2.3.6</h2>
<h2>Patches</h2>
<ul>
<li>fix: do not error when not enabled during suspense by <a
href="https://github.com/huozhi"><code>@​huozhi</code></a> in <a
href="https://redirect.github.com/vercel/swr/pull/4156">vercel/swr#4156</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/vercel/swr/compare/v2.3.5...v2.3.6">https://github.com/vercel/swr/compare/v2.3.5...v2.3.6</a></p>
<h2>v2.3.5</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a029984bc"><code>9a02998</code></a>
2.4.0</li>
<li><a
href="f864770666"><code>f864770</code></a>
fix: Ensure preload runs only on client (<a
href="https://redirect.github.com/vercel/swr/issues/4213">#4213</a>)</li>
<li><a
href="1f93cc2c44"><code>1f93cc2</code></a>
fix: isHydration will cause unnecessary rerender (<a
href="https://redirect.github.com/vercel/swr/issues/4212">#4212</a>)</li>
<li><a
href="b75456a8ce"><code>b75456a</code></a>
fix: extra render when changing to new key with useSWRImmutable (<a
href="https://redirect.github.com/vercel/swr/issues/4209">#4209</a>)</li>
<li><a
href="de1dc5ac01"><code>de1dc5a</code></a>
fix: Ensure useSWRImmutable overrides global refreshInterval (<a
href="https://redirect.github.com/vercel/swr/issues/4208">#4208</a>)</li>
<li><a
href="a5214bf56e"><code>a5214bf</code></a>
ci: add missing flag for canary test (<a
href="https://redirect.github.com/vercel/swr/issues/4206">#4206</a>)</li>
<li><a
href="4acf8417b6"><code>4acf841</code></a>
migrate suspense related tests to e2e (<a
href="https://redirect.github.com/vercel/swr/issues/4204">#4204</a>)</li>
<li><a
href="e0426a90cd"><code>e0426a9</code></a>
2.3.8</li>
<li><a
href="ca6e11d4f9"><code>ca6e11d</code></a>
test: Import <code>act</code> from React (<a
href="https://redirect.github.com/vercel/swr/issues/4202">#4202</a>)</li>
<li><a
href="eff8fda1ca"><code>eff8fda</code></a>
enhance: Improve TSDoc comments (<a
href="https://redirect.github.com/vercel/swr/issues/4203">#4203</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/swr/compare/v2.3.0...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=swr&package-manager=npm_and_yarn&previous-version=2.3.0&new-version=2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:37:54 +00:00
dependabot[bot]
b00c865d85 Bump eslint from 9.26.0 to 9.39.2 in /frontend (#1541)
Bumps [eslint](https://github.com/eslint/eslint) from 9.26.0 to 9.39.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v9.39.2</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="5705833194"><code>5705833</code></a>
fix: warn when <code>eslint-env</code> configuration comments are found
(<a
href="https://redirect.github.com/eslint/eslint/issues/20381">#20381</a>)
(sethamus)</li>
</ul>
<h2>Build Related</h2>
<ul>
<li><a
href="506f1549a6"><code>506f154</code></a>
build: add .scss files entry to knip (<a
href="https://redirect.github.com/eslint/eslint/issues/20391">#20391</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="7ca0af7f9f"><code>7ca0af7</code></a>
chore: upgrade to <code>@eslint/js@9.39.2</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20394">#20394</a>)
(Francesco Trotta)</li>
<li><a
href="c43ce24ff0"><code>c43ce24</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="4c9858e47b"><code>4c9858e</code></a>
ci: add <code>v9.x-dev</code> branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20382">#20382</a>)
(Milos Djermanovic)</li>
</ul>
<h2>v9.39.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="650753ee39"><code>650753e</code></a>
fix: Only pass node to JS lang visitor methods (<a
href="https://redirect.github.com/eslint/eslint/issues/20283">#20283</a>)
(Nicholas C. Zakas)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="51b51f4f1c"><code>51b51f4</code></a>
docs: add a section on when to use extends vs cascading (<a
href="https://redirect.github.com/eslint/eslint/issues/20268">#20268</a>)
(Tanuj Kanti)</li>
<li><a
href="b44d42699d"><code>b44d426</code></a>
docs: Update README (GitHub Actions Bot)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="92db329211"><code>92db329</code></a>
chore: update <code>@eslint/js</code> version to 9.39.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/20284">#20284</a>)
(Francesco Trotta)</li>
<li><a
href="c7ebefc9ea"><code>c7ebefc</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="61778f6ca3"><code>61778f6</code></a>
chore: update eslint-config-eslint dependency <code>@​eslint/js</code>
to ^9.39.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/20275">#20275</a>)
(renovate[bot])</li>
<li><a
href="d9ca2fcd9a"><code>d9ca2fc</code></a>
ci: Add rangeStrategy to eslint group in renovate config (<a
href="https://redirect.github.com/eslint/eslint/issues/20266">#20266</a>)
(唯然)</li>
<li><a
href="009e5076ff"><code>009e507</code></a>
test: fix version tests for ESLint v10 (<a
href="https://redirect.github.com/eslint/eslint/issues/20274">#20274</a>)
(Milos Djermanovic)</li>
</ul>
<h2>v9.39.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="cc57d87a3f"><code>cc57d87</code></a>
feat: update error loc to key in <code>no-dupe-class-members</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20259">#20259</a>)
(Tanuj Kanti)</li>
<li><a
href="126552fcf3"><code>126552f</code></a>
feat: update error location in <code>for-direction</code> and
<code>no-dupe-args</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20258">#20258</a>)
(Tanuj Kanti)</li>
<li><a
href="167d0970d3"><code>167d097</code></a>
feat: update <code>complexity</code> rule to highlight only static block
header (<a
href="https://redirect.github.com/eslint/eslint/issues/20245">#20245</a>)
(jaymarvelz)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="15f5c7c168"><code>15f5c7c</code></a>
fix: forward traversal <code>step.args</code> to visitors (<a
href="https://redirect.github.com/eslint/eslint/issues/20253">#20253</a>)
(jaymarvelz)</li>
<li><a
href="5a1a534e87"><code>5a1a534</code></a>
fix: allow JSDoc comments in object-shorthand rule (<a
href="https://redirect.github.com/eslint/eslint/issues/20167">#20167</a>)
(Nitin Kumar)</li>
<li><a
href="e86b813eb6"><code>e86b813</code></a>
fix: Use more types from <code>@​eslint/core</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20257">#20257</a>)
(Nicholas C. Zakas)</li>
<li><a
href="927272d1f0"><code>927272d</code></a>
fix: correct <code>Scope</code> typings (<a
href="https://redirect.github.com/eslint/eslint/issues/20198">#20198</a>)
(jaymarvelz)</li>
<li><a
href="37f76d9c53"><code>37f76d9</code></a>
fix: use <code>AST.Program</code> type for Program node (<a
href="https://redirect.github.com/eslint/eslint/issues/20244">#20244</a>)
(Francesco Trotta)</li>
<li><a
href="ae07f0b333"><code>ae07f0b</code></a>
fix: unify timing report for concurrent linting (<a
href="https://redirect.github.com/eslint/eslint/issues/20188">#20188</a>)
(jaymarvelz)</li>
<li><a
href="b165d471be"><code>b165d47</code></a>
fix: correct <code>Rule</code> typings (<a
href="https://redirect.github.com/eslint/eslint/issues/20199">#20199</a>)
(jaymarvelz)</li>
<li><a
href="fb97cda70d"><code>fb97cda</code></a>
fix: improve error message for missing fix function in suggestions (<a
href="https://redirect.github.com/eslint/eslint/issues/20218">#20218</a>)
(jaymarvelz)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="d3e81e30ee"><code>d3e81e3</code></a>
docs: Always recommend to include a files property (<a
href="https://redirect.github.com/eslint/eslint/issues/20158">#20158</a>)
(Percy Ma)</li>
<li><a
href="0f0385f140"><code>0f0385f</code></a>
docs: use consistent naming recommendation (<a
href="https://redirect.github.com/eslint/eslint/issues/20250">#20250</a>)
(Alex M. Spieslechner)</li>
<li><a
href="a3b145609a"><code>a3b1456</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="cf5f2dd58d"><code>cf5f2dd</code></a>
docs: fix correct tag of <code>no-useless-constructor</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20255">#20255</a>)
(Tanuj Kanti)</li>
<li><a
href="10b995c8e5"><code>10b995c</code></a>
docs: add TS options and examples for <code>nofunc</code> in
<code>no-use-before-define</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20249">#20249</a>)
(Tanuj Kanti)</li>
<li><a
href="2584187e4a"><code>2584187</code></a>
docs: remove repetitive word in comment (<a
href="https://redirect.github.com/eslint/eslint/issues/20242">#20242</a>)
(reddaisyy)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9278324aa0"><code>9278324</code></a>
9.39.2</li>
<li><a
href="542266ad3c"><code>542266a</code></a>
Build: changelog update for 9.39.2</li>
<li><a
href="7ca0af7f9f"><code>7ca0af7</code></a>
chore: upgrade to <code>@eslint/js@9.39.2</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20394">#20394</a>)</li>
<li><a
href="c43ce24ff0"><code>c43ce24</code></a>
chore: package.json update for <code>@​eslint/js</code> release</li>
<li><a
href="5705833194"><code>5705833</code></a>
fix: warn when <code>eslint-env</code> configuration comments are found
(<a
href="https://redirect.github.com/eslint/eslint/issues/20381">#20381</a>)</li>
<li><a
href="506f1549a6"><code>506f154</code></a>
build: add .scss files entry to knip (<a
href="https://redirect.github.com/eslint/eslint/issues/20391">#20391</a>)</li>
<li><a
href="4c9858e47b"><code>4c9858e</code></a>
ci: add <code>v9.x-dev</code> branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20382">#20382</a>)</li>
<li><a
href="e2772811a8"><code>e277281</code></a>
9.39.1</li>
<li><a
href="4cdf397b30"><code>4cdf397</code></a>
Build: changelog update for 9.39.1</li>
<li><a
href="92db329211"><code>92db329</code></a>
chore: update <code>@eslint/js</code> version to 9.39.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/20284">#20284</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v9.26.0...v9.39.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=9.26.0&new-version=9.39.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:37:48 +00:00
dependabot[bot]
f7f525ae4a Bump @types/node from 25.0.0 to 25.2.0 in /docs (#1540)
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
from 25.0.0 to 25.2.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=25.0.0&new-version=25.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-03 06:37:27 +00:00
dependabot[bot]
29caadd925 Bump eslint from 8.57.0 to 9.26.0 in /frontend (#1537)
Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 9.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v9.26.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="e9754e7433"><code>e9754e7</code></a>
feat: add reportGlobalThis to no-shadow-restricted-names (<a
href="https://redirect.github.com/eslint/eslint/issues/19670">#19670</a>)
(sethamus)</li>
<li><a
href="0fa2b7a366"><code>0fa2b7a</code></a>
feat: add suggestions for <code>eqeqeq</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19640">#19640</a>)
(Nitin Kumar)</li>
<li><a
href="dcbdcc9c6b"><code>dcbdcc9</code></a>
feat: Add MCP server (<a
href="https://redirect.github.com/eslint/eslint/issues/19592">#19592</a>)
(Nicholas C. Zakas)</li>
<li><a
href="2dfd83ef4e"><code>2dfd83e</code></a>
feat: add <code>ignoreDirectives</code> option in
<code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19645">#19645</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="96e84de55a"><code>96e84de</code></a>
fix: check cache file existence before deletion (<a
href="https://redirect.github.com/eslint/eslint/issues/19648">#19648</a>)
(sethamus)</li>
<li><a
href="d683aebc8e"><code>d683aeb</code></a>
fix: don't crash on tests with circular references in
<code>RuleTester</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19664">#19664</a>)
(Milos Djermanovic)</li>
<li><a
href="9736d5d158"><code>9736d5d</code></a>
fix: add <code>namespace</code> to <code>Plugin.meta</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19661">#19661</a>)
(Milos Djermanovic)</li>
<li><a
href="17bae69e02"><code>17bae69</code></a>
fix: update <code>RuleTester.run()</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19634">#19634</a>)
(Nitin Kumar)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="dd98d63f09"><code>dd98d63</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="c25e858d2d"><code>c25e858</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="b2397e9bef"><code>b2397e9</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="addd0a6a62"><code>addd0a6</code></a>
docs: fix formatting of unordered lists in Markdown (<a
href="https://redirect.github.com/eslint/eslint/issues/19660">#19660</a>)
(Milos Djermanovic)</li>
<li><a
href="a21b38db02"><code>a21b38d</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="c0721a7f34"><code>c0721a7</code></a>
docs: fix double space in command (<a
href="https://redirect.github.com/eslint/eslint/issues/19657">#19657</a>)
(CamWass)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="5b247c859f"><code>5b247c8</code></a>
chore: upgrade to <code>@eslint/js@9.26.0</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19681">#19681</a>)
(Francesco Trotta)</li>
<li><a
href="d6fa4ac031"><code>d6fa4ac</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="09586905be"><code>0958690</code></a>
chore: disambiguate internal types <code>LanguageOptions</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19669">#19669</a>)
(Francesco Trotta)</li>
<li><a
href="f1c858e3c1"><code>f1c858e</code></a>
chore: fix internal type references to <code>Plugin</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19665">#19665</a>)
(Francesco Trotta)</li>
<li><a
href="40dd2998ce"><code>40dd299</code></a>
refactor: One-shot ESQuery selector analysis (<a
href="https://redirect.github.com/eslint/eslint/issues/19652">#19652</a>)
(Nicholas C. Zakas)</li>
<li><a
href="1cfd702422"><code>1cfd702</code></a>
chore: update dependency <code>@​eslint/json</code> to ^0.12.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/19656">#19656</a>)
(renovate[bot])</li>
</ul>
<h2>v9.25.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="cdc8e8c950"><code>cdc8e8c</code></a>
fix: revert directive detection in no-unused-expressions (<a
href="https://redirect.github.com/eslint/eslint/issues/19639">#19639</a>)
(sethamus)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="1f2b057ddc"><code>1f2b057</code></a>
chore: upgrade <code>@​eslint/js</code><a
href="https://github.com/9"><code>@​9</code></a>.25.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/19642">#19642</a>)
(Milos Djermanovic)</li>
<li><a
href="771317fa93"><code>771317f</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
</ul>
<h2>v9.25.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="dcd95aafa3"><code>dcd95aa</code></a>
feat: support TypeScript syntax in no-empty-function rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19551">#19551</a>)
(sethamus)</li>
<li><a
href="77d6d5bc49"><code>77d6d5b</code></a>
feat: support TS syntax in <code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19564">#19564</a>)
(Sweta Tanwar)</li>
<li><a
href="90228e5d57"><code>90228e5</code></a>
feat: support <code>JSRuleDefinition</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19604">#19604</a>)
(루밀LuMir)</li>
<li><a
href="59ba6b7378"><code>59ba6b7</code></a>
feat: add allowObjects option to no-restricted-properties (<a
href="https://redirect.github.com/eslint/eslint/issues/19607">#19607</a>)
(sethamus)</li>
<li><a
href="db650a036b"><code>db650a0</code></a>
feat: support TypeScript syntax in <code>no-invalid-this</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19532">#19532</a>)
(Tanuj Kanti)</li>
<li><a
href="9535cffe7b"><code>9535cff</code></a>
feat: support TS syntax in <code>no-loop-func</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19559">#19559</a>)
(Nitin Kumar)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="910bd13c4c"><code>910bd13</code></a>
fix: <code>nodeTypeKey</code> not being used in
<code>NodeEventGenerator</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19631">#19631</a>)
(StyleShit)</li>
</ul>
<h2>Documentation</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/blob/v9.26.0/CHANGELOG.md">eslint's
changelog</a>.</em></p>
<blockquote>
<p>v9.26.0 - May 2, 2025</p>
<ul>
<li><a
href="5b247c859f"><code>5b247c8</code></a>
chore: upgrade to <code>@eslint/js@9.26.0</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19681">#19681</a>)
(Francesco Trotta)</li>
<li><a
href="d6fa4ac031"><code>d6fa4ac</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="e9754e7433"><code>e9754e7</code></a>
feat: add reportGlobalThis to no-shadow-restricted-names (<a
href="https://redirect.github.com/eslint/eslint/issues/19670">#19670</a>)
(sethamus)</li>
<li><a
href="0fa2b7a366"><code>0fa2b7a</code></a>
feat: add suggestions for <code>eqeqeq</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19640">#19640</a>)
(Nitin Kumar)</li>
<li><a
href="dd98d63f09"><code>dd98d63</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="96e84de55a"><code>96e84de</code></a>
fix: check cache file existence before deletion (<a
href="https://redirect.github.com/eslint/eslint/issues/19648">#19648</a>)
(sethamus)</li>
<li><a
href="c25e858d2d"><code>c25e858</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="09586905be"><code>0958690</code></a>
chore: disambiguate internal types <code>LanguageOptions</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19669">#19669</a>)
(Francesco Trotta)</li>
<li><a
href="dcbdcc9c6b"><code>dcbdcc9</code></a>
feat: Add MCP server (<a
href="https://redirect.github.com/eslint/eslint/issues/19592">#19592</a>)
(Nicholas C. Zakas)</li>
<li><a
href="b2397e9bef"><code>b2397e9</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="d683aebc8e"><code>d683aeb</code></a>
fix: don't crash on tests with circular references in
<code>RuleTester</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19664">#19664</a>)
(Milos Djermanovic)</li>
<li><a
href="f1c858e3c1"><code>f1c858e</code></a>
chore: fix internal type references to <code>Plugin</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19665">#19665</a>)
(Francesco Trotta)</li>
<li><a
href="9736d5d158"><code>9736d5d</code></a>
fix: add <code>namespace</code> to <code>Plugin.meta</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19661">#19661</a>)
(Milos Djermanovic)</li>
<li><a
href="40dd2998ce"><code>40dd299</code></a>
refactor: One-shot ESQuery selector analysis (<a
href="https://redirect.github.com/eslint/eslint/issues/19652">#19652</a>)
(Nicholas C. Zakas)</li>
<li><a
href="addd0a6a62"><code>addd0a6</code></a>
docs: fix formatting of unordered lists in Markdown (<a
href="https://redirect.github.com/eslint/eslint/issues/19660">#19660</a>)
(Milos Djermanovic)</li>
<li><a
href="a21b38db02"><code>a21b38d</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="c0721a7f34"><code>c0721a7</code></a>
docs: fix double space in command (<a
href="https://redirect.github.com/eslint/eslint/issues/19657">#19657</a>)
(CamWass)</li>
<li><a
href="1cfd702422"><code>1cfd702</code></a>
chore: update dependency <code>@​eslint/json</code> to ^0.12.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/19656">#19656</a>)
(renovate[bot])</li>
<li><a
href="2dfd83ef4e"><code>2dfd83e</code></a>
feat: add <code>ignoreDirectives</code> option in
<code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19645">#19645</a>)
(sethamus)</li>
<li><a
href="17bae69e02"><code>17bae69</code></a>
fix: update <code>RuleTester.run()</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19634">#19634</a>)
(Nitin Kumar)</li>
</ul>
<p>v9.25.1 - April 21, 2025</p>
<ul>
<li><a
href="1f2b057ddc"><code>1f2b057</code></a>
chore: upgrade <code>@​eslint/js</code><a
href="https://github.com/9"><code>@​9</code></a>.25.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/19642">#19642</a>)
(Milos Djermanovic)</li>
<li><a
href="771317fa93"><code>771317f</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="cdc8e8c950"><code>cdc8e8c</code></a>
fix: revert directive detection in no-unused-expressions (<a
href="https://redirect.github.com/eslint/eslint/issues/19639">#19639</a>)
(sethamus)</li>
</ul>
<p>v9.25.0 - April 18, 2025</p>
<ul>
<li><a
href="88dc1965a4"><code>88dc196</code></a>
chore: upgrade <code>@​eslint/js</code><a
href="https://github.com/9"><code>@​9</code></a>.25.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/19636">#19636</a>)
(Milos Djermanovic)</li>
<li><a
href="345288d7b2"><code>345288d</code></a>
chore: package.json update for <code>@​eslint/js</code> release
(Jenkins)</li>
<li><a
href="910bd13c4c"><code>910bd13</code></a>
fix: <code>nodeTypeKey</code> not being used in
<code>NodeEventGenerator</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19631">#19631</a>)
(StyleShit)</li>
<li><a
href="ca7a735dde"><code>ca7a735</code></a>
docs: update <code>no-undef-init</code> when not to use section (<a
href="https://redirect.github.com/eslint/eslint/issues/19624">#19624</a>)
(Tanuj Kanti)</li>
<li><a
href="affe6be018"><code>affe6be</code></a>
chore: upgrade trunk (<a
href="https://redirect.github.com/eslint/eslint/issues/19628">#19628</a>)
(sethamus)</li>
<li><a
href="1b870c9da4"><code>1b870c9</code></a>
docs: use <code>eslint-config-xo</code> in the getting started guide (<a
href="https://redirect.github.com/eslint/eslint/issues/19629">#19629</a>)
(Nitin Kumar)</li>
<li><a
href="5d4af16ab1"><code>5d4af16</code></a>
docs: add types for multiple rule options (<a
href="https://redirect.github.com/eslint/eslint/issues/19616">#19616</a>)
(Tanuj Kanti)</li>
<li><a
href="e8f8d57bd6"><code>e8f8d57</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="a40348f1f6"><code>a40348f</code></a>
docs: no-use-before-define tweaks (<a
href="https://redirect.github.com/eslint/eslint/issues/19622">#19622</a>)
(Kirk Waiblinger)</li>
<li><a
href="0ba3ae3e5a"><code>0ba3ae3</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="865dbfed6c"><code>865dbfe</code></a>
docs: ensure &quot;learn more&quot; deprecation links point to useful
resource (<a
href="https://redirect.github.com/eslint/eslint/issues/19590">#19590</a>)
(Kirk Waiblinger)</li>
<li><a
href="dcd95aafa3"><code>dcd95aa</code></a>
feat: support TypeScript syntax in no-empty-function rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19551">#19551</a>)
(sethamus)</li>
<li><a
href="77d6d5bc49"><code>77d6d5b</code></a>
feat: support TS syntax in <code>no-unused-expressions</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19564">#19564</a>)
(Sweta Tanwar)</li>
<li><a
href="90228e5d57"><code>90228e5</code></a>
feat: support <code>JSRuleDefinition</code> type (<a
href="https://redirect.github.com/eslint/eslint/issues/19604">#19604</a>)
(루밀LuMir)</li>
<li><a
href="f80b746d85"><code>f80b746</code></a>
docs: add known limitations for no-self-compare (<a
href="https://redirect.github.com/eslint/eslint/issues/19612">#19612</a>)
(Nitin Kumar)</li>
<li><a
href="59ba6b7378"><code>59ba6b7</code></a>
feat: add allowObjects option to no-restricted-properties (<a
href="https://redirect.github.com/eslint/eslint/issues/19607">#19607</a>)
(sethamus)</li>
<li><a
href="db650a036b"><code>db650a0</code></a>
feat: support TypeScript syntax in <code>no-invalid-this</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19532">#19532</a>)
(Tanuj Kanti)</li>
<li><a
href="dd20cf274e"><code>dd20cf2</code></a>
test: fix <code>no-loop-func</code> test with duplicate variable reports
(<a
href="https://redirect.github.com/eslint/eslint/issues/19610">#19610</a>)
(Milos Djermanovic)</li>
<li><a
href="9535cffe7b"><code>9535cff</code></a>
feat: support TS syntax in <code>no-loop-func</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19559">#19559</a>)
(Nitin Kumar)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8bbabc4691"><code>8bbabc4</code></a>
9.26.0</li>
<li><a
href="16f5ff7991"><code>16f5ff7</code></a>
Build: changelog update for 9.26.0</li>
<li><a
href="5b247c859f"><code>5b247c8</code></a>
chore: upgrade to <code>@eslint/js@9.26.0</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19681">#19681</a>)</li>
<li><a
href="d6fa4ac031"><code>d6fa4ac</code></a>
chore: package.json update for <code>@​eslint/js</code> release</li>
<li><a
href="e9754e7433"><code>e9754e7</code></a>
feat: add reportGlobalThis to no-shadow-restricted-names (<a
href="https://redirect.github.com/eslint/eslint/issues/19670">#19670</a>)</li>
<li><a
href="0fa2b7a366"><code>0fa2b7a</code></a>
feat: add suggestions for <code>eqeqeq</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/19640">#19640</a>)</li>
<li><a
href="dd98d63f09"><code>dd98d63</code></a>
docs: Update README</li>
<li><a
href="96e84de55a"><code>96e84de</code></a>
fix: check cache file existence before deletion (<a
href="https://redirect.github.com/eslint/eslint/issues/19648">#19648</a>)</li>
<li><a
href="c25e858d2d"><code>c25e858</code></a>
docs: Update README</li>
<li><a
href="09586905be"><code>0958690</code></a>
chore: disambiguate internal types <code>LanguageOptions</code> and
<code>Rule</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/19669">#19669</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v8.57.0...v9.26.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=8.57.0&new-version=9.26.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-29 16:04:51 +00:00
dependabot[bot]
c5c09b4058 Bump next from 16.1.1 to 16.1.5 in /docs (#1536)
Bumps [next](https://github.com/vercel/next.js) from 16.1.1 to 16.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases">next's
releases</a>.</em></p>
<blockquote>
<h2>v16.1.5</h2>
<p>Please refer the following changelogs for more information about this
security release:</p>
<p><a
href="https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472">https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472</a>
<a
href="https://vercel.com/changelog/summary-of-cve-2026-23864">https://vercel.com/changelog/summary-of-cve-2026-23864</a></p>
<h2>v16.1.4</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Only filter next config if experimental flag is enabled (<a
href="https://redirect.github.com/vercel/next.js/issues/88733">#88733</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/mischnic"><code>@​mischnic</code></a> for
helping!</p>
<h2>v16.1.3</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Fix linked list bug in LRU deleteFromLru (<a
href="https://redirect.github.com/vercel/next.js/issues/88652">#88652</a>)</li>
<li>Fix relative same host redirects in node middleware (<a
href="https://redirect.github.com/vercel/next.js/issues/88253">#88253</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/acdlite"><code>@​acdlite</code></a> and <a
href="https://github.com/ijjk"><code>@​ijjk</code></a> for helping!</p>
<h2>v16.1.2</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Turbopack: Update to swc_core v50.2.3 (<a
href="https://redirect.github.com/vercel/next.js/issues/87841">#87841</a>)
(<a
href="https://redirect.github.com/vercel/next.js/issues/88296">#88296</a>)
<ul>
<li>Fixes a crash when processing mdx files with multibyte characters.
(<a
href="https://redirect.github.com/vercel/next.js/issues/87713">#87713</a>)</li>
</ul>
</li>
<li>Turbopack: <a
href="https://microsoft.github.io/mimalloc/">mimalloc</a> upgrade and
enabling it on musl (<a
href="https://redirect.github.com/vercel/next.js/issues/88503">#88503</a>)
(<a
href="https://redirect.github.com/vercel/next.js/issues/87815">#87815</a>)
(<a
href="https://redirect.github.com/vercel/next.js/issues/88426">#88426</a>)
<ul>
<li>Fixes <a
href="https://redirect.github.com/vercel/next.js/pull/88426">a
significant performance issue</a> on musl-based Linux distributions
(e.g. Alpine in Docker) related to musl's allocator.</li>
<li>Other platforms have always used mimalloc, but we previously did not
use mimalloc on musl because of compilation issues that have since been
resolved.</li>
</ul>
</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/mischnic"><code>@​mischnic</code></a> for
helping!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="acba4a6b9f"><code>acba4a6</code></a>
v16.1.5</li>
<li><a
href="e1d1fc6525"><code>e1d1fc6</code></a>
Add maximum size limit for postponed body parsing (<a
href="https://redirect.github.com/vercel/next.js/issues/88175">#88175</a>)</li>
<li><a
href="500ec83743"><code>500ec83</code></a>
fetch(next/image): reduce maximumResponseBody from 300MB to 50MB (<a
href="https://redirect.github.com/vercel/next.js/issues/88588">#88588</a>)</li>
<li><a
href="1caaca3cdb"><code>1caaca3</code></a>
feat(next/image)!: add <code>images.maximumResponseBody</code> config
(<a
href="https://redirect.github.com/vercel/next.js/issues/88183">#88183</a>)</li>
<li><a
href="522ed840be"><code>522ed84</code></a>
Sync DoS mitigations for React Flight</li>
<li><a
href="8cad197c76"><code>8cad197</code></a>
[backport][cna] Ensure created app is not considered the workspace root
in pn...</li>
<li><a
href="27186615d7"><code>2718661</code></a>
Backport/docs fixes (<a
href="https://redirect.github.com/vercel/next.js/issues/89031">#89031</a>)</li>
<li><a
href="53336250b3"><code>5333625</code></a>
Backport/docs fixes 16.1.5 (<a
href="https://redirect.github.com/vercel/next.js/issues/88916">#88916</a>)</li>
<li><a
href="60de6c2114"><code>60de6c2</code></a>
v16.1.4</li>
<li><a
href="5f75d22b80"><code>5f75d22</code></a>
backport: Only filter next config if experimental flag is enabled (<a
href="https://redirect.github.com/vercel/next.js/issues/88733">#88733</a>)
(#...</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v16.1.1...v16.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=next&package-manager=npm_and_yarn&previous-version=16.1.1&new-version=16.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 22:21:50 +00:00
dependabot[bot]
6b83168b22 Bump gunicorn from 23.0.0 to 24.1.1 in /backend (#1535)
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 23.0.0 to
24.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/benoitc/gunicorn/releases">gunicorn's
releases</a>.</em></p>
<blockquote>
<h2>24.1.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li>Fix <code>forwarded_allow_ips</code> and
<code>proxy_allow_ips</code> to remain as strings for backward
compatibility with external tools like uvicorn. Network validation now
uses strict
mode to detect invalid CIDR notation (e.g., <code>192.168.1.1/24</code>
where host bits are set)
(<a
href="https://redirect.github.com/benoitc/gunicorn/issues/3458">#3458</a>,
[PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3459">#3459</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3459">benoitc/gunicorn#3459</a>))</li>
</ul>
<hr />
<p><strong>Full Changelog</strong>: <a
href="https://github.com/benoitc/gunicorn/compare/24.1.0...24.1.1">https://github.com/benoitc/gunicorn/compare/24.1.0...24.1.1</a></p>
<h2>Gunicorn 24.1.0</h2>
<h2>New Features</h2>
<ul>
<li>
<p><strong>Official Docker Image</strong>: Gunicorn now publishes
official Docker images to GitHub Container Registry ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3454">#3454</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3454">benoitc/gunicorn#3454</a>))</p>
<ul>
<li>Available at <code>ghcr.io/benoitc/gunicorn</code></li>
<li>Based on Python 3.12 slim image</li>
<li>Uses recommended worker formula (2 × CPU + 1)</li>
<li>Configurable via environment variables</li>
</ul>
</li>
<li>
<p><strong>PROXY Protocol v2 Support</strong>: Extended PROXY protocol
implementation to support the binary v2 format in addition to the
existing text-based v1 format ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3451">#3451</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3451">benoitc/gunicorn#3451</a>))</p>
<ul>
<li>New <code>--proxy-protocol</code> modes: <code>off</code>,
<code>v1</code>, <code>v2</code>, <code>auto</code></li>
<li><code>auto</code> mode (default when enabled) detects v1 or v2
automatically</li>
<li>v2 binary format is more efficient and supports additional
metadata</li>
<li>Works with HAProxy, AWS NLB/ALB, and other PROXY protocol v2
sources</li>
</ul>
</li>
<li>
<p><strong>CIDR Network Support</strong>:
<code>--forwarded-allow-ips</code> and <code>--proxy-allow-from</code>
now accept CIDR notation (e.g., <code>192.168.0.0/16</code>) for
specifying trusted networks ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3449">#3449</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3449">benoitc/gunicorn#3449</a>))</p>
</li>
<li>
<p><strong>Socket Backlog Metric</strong>: New
<code>gunicorn.socket.backlog</code> gauge metric reports the current
socket backlog size on Linux systems ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3450">#3450</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3450">benoitc/gunicorn#3450</a>))</p>
</li>
<li>
<p><strong>InotifyReloader Enhancement</strong>: The inotify-based
reloader now watches newly imported modules, not just those loaded at
startup ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3447">#3447</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3447">benoitc/gunicorn#3447</a>))</p>
</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Fix signal handling regression where SIGCLD alias caused
&quot;Unhandled signal: cld&quot; errors on Linux when workers fail
during boot (<a
href="https://github.com/benoitc/gunicorn/discussions/3453">#3453</a>)</li>
<li>Fix socket blocking mode on keepalive connections preventing SSL
handshake failures with async workers ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3452">#3452</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3452">benoitc/gunicorn#3452</a>))</li>
<li>Use smaller buffer size in <code>finish_body()</code> for faster
timeout detection on slow or abandoned connections ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3453">#3453</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3453">benoitc/gunicorn#3453</a>))</li>
<li>Handle <code>SSLWantReadError</code> in <code>finish_body()</code>
to prevent worker hangs during SSL renegotiation ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3448">#3448</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3448">benoitc/gunicorn#3448</a>))</li>
<li>Log SIGTERM as info level instead of warning to reduce noise in
orchestrated environments ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3446">#3446</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3446">benoitc/gunicorn#3446</a>))</li>
<li>Print exception details to stderr when worker fails to boot ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3443">#3443</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3443">benoitc/gunicorn#3443</a>))</li>
<li>Fix <code>unreader.unread()</code> to prepend data to buffer instead
of appending ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3442">#3442</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3442">benoitc/gunicorn#3442</a>))</li>
<li>Prevent <code>RecursionError</code> when pickling Config objects
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3441">#3441</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3441">benoitc/gunicorn#3441</a>))</li>
<li>Use proper exception chaining with <code>raise from</code> in
glogging.py ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3440">#3440</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3440">benoitc/gunicorn#3440</a>))</li>
</ul>
<h2>Installation</h2>
<pre lang="bash"><code>pip install gunicorn==24.1.0
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="375e79e95b"><code>375e79e</code></a>
release: bump version to 24.1.1</li>
<li><a
href="ad0c12de98"><code>ad0c12d</code></a>
docs: add sponsors section to README</li>
<li><a
href="70200eef46"><code>70200ee</code></a>
chore: add GitHub Sponsors funding configuration</li>
<li><a
href="6841804116"><code>6841804</code></a>
docs: remove incorrect PR reference from Docker changelog entry</li>
<li><a
href="abce0ca9cb"><code>abce0ca</code></a>
docs: add 24.1.1 changelog entry for forwarded_allow_ips fix</li>
<li><a
href="e9a3f30a0f"><code>e9a3f30</code></a>
fix: keep forwarded_allow_ips as strings for backward compatibility (<a
href="https://redirect.github.com/benoitc/gunicorn/issues/3459">#3459</a>)</li>
<li><a
href="d73ff4b1d8"><code>d73ff4b</code></a>
docs: update main changelog with 24.1.0</li>
<li><a
href="53f2c31012"><code>53f2c31</code></a>
ci: allow docs deploy on workflow_dispatch</li>
<li><a
href="eab5f0b1a5"><code>eab5f0b</code></a>
ci: trigger Docker publish on tags with or without v prefix</li>
<li><a
href="a20d3fb220"><code>a20d3fb</code></a>
docs: add Docker image to 24.1.0 changelog</li>
<li>Additional commits viewable in <a
href="https://github.com/benoitc/gunicorn/compare/23.0.0...24.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gunicorn&package-manager=uv&previous-version=23.0.0&new-version=24.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:11:27 +00:00
dependabot[bot]
fe67b0c120 Bump pyrefly from 0.48.0 to 0.50.0 in /backend (#1534)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.48.0 to
0.50.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/pyrefly/releases">pyrefly's
releases</a>.</em></p>
<blockquote>
<h2>Pyrefly v0.49.0</h2>
<p><strong>Status : BETA</strong><br />
<em>Release date: 20 January 2026</em></p>
<p>Pyrefly v0.49.0 bundles <strong>231 commits</strong> from <strong>25
contributors</strong>.</p>
<hr />
<h1> New &amp; Improved</h1>
<table>
<thead>
<tr>
<th align="left">Area</th>
<th align="left">What’s new</th>
</tr>
</thead>
<tbody>
<tr>
<td align="left"><strong>Type Inference</strong></td>
<td align="left">- Partial type inference now possible in loops <!-- raw
HTML omitted --><!-- raw HTML omitted -->- Variance inference for
self-referential generic types (PEP 695) <!-- raw HTML omitted --><!--
raw HTML omitted -->- <code>typing.Mapping</code> now recognised as a
type alias</td>
</tr>
<tr>
<td align="left"><strong>Language Server</strong></td>
<td align="left">- Improved refactoring capabilities for moving module
members and lifting local functions/methods to top-level module scope,
with automatic import/shim creation. <!-- raw HTML omitted --><!-- raw
HTML omitted -->- Hover support for <code>in</code> keyword when used in
iteration contexts (for-loops and comprehensions), showing the type of
the iterable being iterated over <!-- raw HTML omitted --><!-- raw HTML
omitted -->- “Go to symbol” now correctly includes methods inside a
class <!-- raw HTML omitted --><!-- raw HTML omitted -->- Enabled
clickable inlay hints for built-in types like tuple, dict, str, and
special forms (TypeVar, ParamSpec, etc.), allowing users to quickly
navigate to type definitions in the IDE</td>
</tr>
<tr>
<td align="left"><strong>Pydantic Support</strong></td>
<td align="left">Added detection and support for
<code>pydantic.dataclasses.dataclass</code> decorator, including strict
and lax mode support for pydantic dataclasses</td>
</tr>
<tr>
<td align="left"><strong>Error Reporting</strong></td>
<td align="left">Improved error messages for <code>yield</code>,
<code>yield from</code>, augmented assignment, missing imports, and
missing stubs for better user clarity.</td>
</tr>
</tbody>
</table>
<hr />
<h1>🐛 bug fixes</h1>
<p>We closed <strong>38 bug issues</strong> this week 👏</p>
<ul>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/2145">#2145</a>
- Fixed variance inference incorrectly using
<code>inferred_variance</code> instead of
<code>specified_variance</code> for stdlib generic classes like
<code>Mapping[str, T]</code>.</li>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/1806">#1806</a>
- Fixed improper type narrowing and captured variable typing for
sequence patterns (e.g., <code>[*values]</code>) in match/case
statements.</li>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/1697">#1697</a>
- Fixed a bug where Pyrefly got confused if a class had the same name as
an overloaded method.</li>
<li><a
href="https://redirect.github.com/facebook/pyrefly/issues/1494">#1494</a>
- Ensures correct overload resolution when promoting nested tuple
element literals for unannotated method-initialized attributes.</li>
<li>And more: <a
href="https://redirect.github.com/facebook/pyrefly/issues/1481">#1481</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1472">#1472</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1466">#1466</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1385">#1385</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1341">#1341</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1310">#1310</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1277">#1277</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1234">#1234</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1219">#1219</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1208">#1208</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1013">#1013</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1002">#1002</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/935">#935</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/910">#910</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/899">#899</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/773">#773</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/768">#768</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/755">#755</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/737">#737</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/708">#708</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/421">#421</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/295">#295</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/266">#266</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/265">#265</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1503">#1503</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1616">#1616</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1626">#1626</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/1803">#1803</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2051">#2051</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2072">#2072</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2077">#2077</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2107">#2107</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2111">#2111</a>,
<a
href="https://redirect.github.com/facebook/pyrefly/issues/2161">#2161</a></li>
</ul>
<p>Thank-you to all our contributors who found these bugs and reported
them! Did you know this is one of the most helpful contributions you can
make to an open-source project? If you find any bugs in Pyrefly we want
to know about them! Please open a bug report issue <a
href="https://github.com/facebook/pyrefly/issues">here</a></p>
<hr />
<h1>📦 Upgrade</h1>
<pre><code>pip install --upgrade pyrefly==0.49.0
</code></pre>
<h2>How to safely upgrade your codebase</h2>
<p>Upgrading the version of Pyrefly you're using or a third-party
library you depend on can reveal new type errors in your code. Fixing
them all at once is often unrealistic. We've written scripts to help you
temporarily silence them. After upgrading, follow these steps:</p>
<ol>
<li><code>pyrefly check --suppress-errors</code></li>
<li>run your code formatter of choice</li>
<li><code>pyrefly check --remove-unused-ignores</code></li>
<li>Repeat until you achieve a clean formatting run and a clean type
check.</li>
</ol>
<p>This will add <code># pyrefly: ignore</code> comments to your code,
enabling you to silence errors and return to fix them later. This can
make the process of upgrading a large codebase much more manageable.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4c95fadbff"><code>4c95fad</code></a>
Allow suppress command to take in json values (4/n)</li>
<li><a
href="ddc207782f"><code>ddc2077</code></a>
Disable test failing on Windows</li>
<li><a
href="5d09330250"><code>5d09330</code></a>
Fix completion item kinds for module attributes (<a
href="https://redirect.github.com/facebook/pyrefly/issues/1936">#1936</a>)</li>
<li><a
href="c57c5e5659"><code>c57c5e5</code></a>
Fix go-to-definition for intermediate submodule components</li>
<li><a
href="c5b01d308b"><code>c5b01d3</code></a>
Add go-to-def test for deep submodule chain with explicit
re-exports</li>
<li><a
href="46a55b2462"><code>46a55b2</code></a>
make --remove-unused-ignores a no-op for files with no unused ignores
(<a
href="https://redirect.github.com/facebook/pyrefly/issues/2217">#2217</a>)</li>
<li><a
href="bdac377cc3"><code>bdac377</code></a>
fix relative pyrefly.org link in documentation (<a
href="https://redirect.github.com/facebook/pyrefly/issues/2186">#2186</a>)</li>
<li><a
href="ab05550d2d"><code>ab05550</code></a>
Update pyrefly version]</li>
<li><a
href="06583faa51"><code>06583fa</code></a>
Simplify tarjan NodeVec push</li>
<li><a
href="063154c9fa"><code>063154c</code></a>
Refactor IsInstancePattern to use NarrowSource on IsInstance</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.48.0...0.50.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.48.0&new-version=0.50.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:11:14 +00:00
dependabot[bot]
92d8f81d96 Bump sentry-sdk from 2.49.0 to 2.50.0 in /backend (#1533)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.49.0 to 2.50.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.50.0</h2>
<h3>New Features </h3>
<h4>Ai</h4>
<ul>
<li>feat(ai): add cache writes for gen_ai by <a
href="https://github.com/shellmayr"><code>@​shellmayr</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5319">#5319</a></li>
<li>feat(ai): add parse_data_uri function to parse a data URI by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5311">#5311</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>
<p>feat(asyncio): Add on-demand way to enable AsyncioIntegration by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5288">#5288</a></p>
<p>You can now enable the <code>AsyncioIntegration</code> on demand,
after calling <code>sentry_sdk.init()</code>. This is useful in
scenarios where you don't have
the event loop running early on, or when you need to instrument multiple
event loops.</p>
</li>
</ul>
<pre lang="python"><code>import sentry_sdk
from sentry_sdk.integrations.asyncio import enable_asyncio_integration
<h1>Initializing the SDK as early as possible, when there is no event
loop yet</h1>
<p>sentry_sdk.init(<br />
...<br />
# No AsyncioIntegration in explicitly provided
<code>integrations</code><br />
)</p>
<p>async def main():<br />
enable_asyncio_integration()  # instruments the current event loop<br />
# ...your code...<br />
</code></pre></p>
<ul>
<li>feat(openai-agents): Inject propagation headers for
<code>HostedMCPTool</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5297">#5297</a></li>
<li>feat(stdlib): Handle proxy tunnels in httlib integration by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5303">#5303</a></li>
<li>feat: Support array types for logs and metrics attributes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5314">#5314</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Integrations</h4>
<ul>
<li>fix(integrations): google genai report image inputs by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5337">#5337</a></li>
<li>fix(integrations): google-genai: reworked
<code>gen_ai.request.messages</code> extraction from parameters by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5275">#5275</a></li>
<li>fix(integrations): pydantic-ai: properly format binary input message
parts to be conformant with the <code>gen_ai.request.messages</code>
structure by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5251">#5251</a></li>
<li>fix(integrations): Anthropic: add content transformation for images
and documents by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5276">#5276</a></li>
<li>fix(integrations): langchain add multimodal content transformation
functions for images, audio, and files by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5278">#5278</a></li>
</ul>
<h4>Litellm</h4>
<ul>
<li>fix(litellm): fix <code>gen_ai.request.messages</code> to be as
expected by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5255">#5255</a></li>
<li>fix(litellm): Guard against module shadowing by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5249">#5249</a></li>
</ul>
<h4>Other</h4>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.50.0</h2>
<h3>New Features </h3>
<h4>Ai</h4>
<ul>
<li>feat(ai): add cache writes for gen_ai by <a
href="https://github.com/shellmayr"><code>@​shellmayr</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5319">#5319</a></li>
<li>feat(ai): add parse_data_uri function to parse a data URI by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5311">#5311</a></li>
</ul>
<h4>Other</h4>
<ul>
<li>
<p>feat(asyncio): Add on-demand way to enable AsyncioIntegration by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5288">#5288</a></p>
<p>You can now enable the <code>AsyncioIntegration</code> on demand,
after calling <code>sentry_sdk.init()</code>. This is useful in
scenarios where you don't have
the event loop running early on, or when you need to instrument multiple
event loops.</p>
</li>
</ul>
<pre lang="python"><code>import sentry_sdk
from sentry_sdk.integrations.asyncio import enable_asyncio_integration
<h1>Initializing the SDK as early as possible, when there is no event
loop yet</h1>
<p>sentry_sdk.init(<br />
...<br />
# No AsyncioIntegration in explicitly provided
<code>integrations</code><br />
)</p>
<p>async def main():<br />
enable_asyncio_integration()  # instruments the current event loop<br />
# ...your code...<br />
</code></pre></p>
<ul>
<li>feat(openai-agents): Inject propagation headers for
<code>HostedMCPTool</code> by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5297">#5297</a></li>
<li>feat(stdlib): Handle proxy tunnels in httlib integration by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5303">#5303</a></li>
<li>feat: Support array types for logs and metrics attributes by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5314">#5314</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<h4>Integrations</h4>
<ul>
<li>fix(integrations): google genai report image inputs by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5337">#5337</a></li>
<li>fix(integrations): google-genai: reworked
<code>gen_ai.request.messages</code> extraction from parameters by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5275">#5275</a></li>
<li>fix(integrations): pydantic-ai: properly format binary input message
parts to be conformant with the <code>gen_ai.request.messages</code>
structure by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5251">#5251</a></li>
<li>fix(integrations): Anthropic: add content transformation for images
and documents by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5276">#5276</a></li>
<li>fix(integrations): langchain add multimodal content transformation
functions for images, audio, and files by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5278">#5278</a></li>
</ul>
<h4>Litellm</h4>
<ul>
<li>fix(litellm): fix <code>gen_ai.request.messages</code> to be as
expected by <a
href="https://github.com/constantinius"><code>@​constantinius</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5255">#5255</a></li>
<li>fix(litellm): Guard against module shadowing by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5249">#5249</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="27b0bfd9b5"><code>27b0bfd</code></a>
Update CHANGELOG.md</li>
<li><a
href="73857b448f"><code>73857b4</code></a>
release: 2.50.0</li>
<li><a
href="d38b3782e0"><code>d38b378</code></a>
test(fastmcp): Narrow <code>AttributeError</code> try-except (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5339">#5339</a>)</li>
<li><a
href="e73e600ea1"><code>e73e600</code></a>
test(fastmcp): Stop accessing non-existent attribute (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5338">#5338</a>)</li>
<li><a
href="e0d42b9323"><code>e0d42b9</code></a>
chore(repo): Add Claude Code settings with basic permissions (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5342">#5342</a>)</li>
<li><a
href="2585678b19"><code>2585678</code></a>
feat(stdlib): Handle proxy tunnels in httlib integration (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5303">#5303</a>)</li>
<li><a
href="e1710092dc"><code>e171009</code></a>
fix(integrations): google genai report image inputs (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5337">#5337</a>)</li>
<li><a
href="749d8e5dba"><code>749d8e5</code></a>
fix(integrations): google-genai: reworked
<code>gen_ai.request.messages</code> extractio...</li>
<li><a
href="ab5cddedd6"><code>ab5cdde</code></a>
feat(ai): add cache writes for gen_ai (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5319">#5319</a>)</li>
<li><a
href="1970486d00"><code>1970486</code></a>
build(deps): bump getsentry/craft from 2.18.3 to 2.19.0 (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5331">#5331</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.49.0...2.50.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.49.0&new-version=2.50.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:10:59 +00:00
dependabot[bot]
4f3fbd1e67 Bump i18next from 25.7.1 to 25.8.0 in /frontend (#1532)
Bumps [i18next](https://github.com/i18next/i18next) from 25.7.1 to
25.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v25.8.0</h2>
<ul>
<li>fix: TFunctionReturn fallback <a
href="https://redirect.github.com/i18next/i18next/issues/2360">2360</a></li>
</ul>
<h2>v25.7.4</h2>
<ul>
<li>fix: Interpolation breaks when cloning an instance <a
href="https://redirect.github.com/i18next/react-i18next/issues/2376">2376</a></li>
</ul>
<h2>v25.7.3</h2>
<ul>
<li>type definitions for new transDefaultProps option in react-i18next
[react-i18next: <a
href="https://redirect.github.com/i18next/i18next/issues/1895">#1895</a>](<a
href="https://redirect.github.com/i18next/react-i18next/issues/1895">i18next/react-i18next#1895</a>)</li>
</ul>
<h2>v25.7.2</h2>
<ul>
<li>fix: Invalid overwrite of default value for
overloadTranslationOptionHandler <a
href="https://redirect.github.com/i18next/i18next/issues/2374">2374</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>25.8.0</h2>
<ul>
<li>fix: TFunctionReturn fallback <a
href="https://redirect.github.com/i18next/i18next/issues/2360">2360</a></li>
</ul>
<h2>25.7.4</h2>
<ul>
<li>fix: Interpolation breaks when cloning an instance <a
href="https://redirect.github.com/i18next/i18next/issues/2376">2376</a></li>
</ul>
<h2>25.7.3</h2>
<ul>
<li>type definitions for new transDefaultProps option in react-i18next
[react-i18next: <a
href="https://redirect.github.com/i18next/i18next/issues/1895">#1895</a>](<a
href="https://redirect.github.com/i18next/react-i18next/issues/1895">i18next/react-i18next#1895</a>)</li>
</ul>
<h2>25.7.2</h2>
<ul>
<li>fix: Invalid overwrite of default value for
overloadTranslationOptionHandler <a
href="https://redirect.github.com/i18next/i18next/issues/2374">2374</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="89b6579abc"><code>89b6579</code></a>
25.8.0</li>
<li><a
href="f39cac20dc"><code>f39cac2</code></a>
improve fallbackNS types handling</li>
<li><a
href="6c06b0055c"><code>6c06b00</code></a>
selector example</li>
<li><a
href="8cf616830c"><code>8cf6168</code></a>
TFunctionReturn fallback (<a
href="https://redirect.github.com/i18next/i18next/issues/2361">#2361</a>)</li>
<li><a
href="485b4ec818"><code>485b4ec</code></a>
help msg</li>
<li><a
href="d496e5ad6f"><code>d496e5a</code></a>
jsr update</li>
<li><a
href="04392be4ec"><code>04392be</code></a>
25.7.4</li>
<li><a
href="92c8f482ab"><code>92c8f48</code></a>
fix: Interpolation breaks when cloning an instance <a
href="https://redirect.github.com/i18next/i18next/issues/2376">#2376</a></li>
<li><a
href="5f44eb7018"><code>5f44eb7</code></a>
fix img url</li>
<li><a
href="1e5f568674"><code>1e5f568</code></a>
remove old addRule function</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v25.7.1...v25.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=25.7.1&new-version=25.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:09:20 +00:00
dependabot[bot]
17f6211544 Bump react-router from 7.12.0 to 7.13.0 in /frontend (#1531)
Bumps
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router)
from 7.12.0 to 7.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases">react-router's
releases</a>.</em></p>
<blockquote>
<h2>v7.13.0</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130">https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7130</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md">react-router's
changelog</a>.</em></p>
<blockquote>
<h2>7.13.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>Add <code>crossOrigin</code> prop to <code>Links</code> component
(<a
href="https://redirect.github.com/remix-run/react-router/pull/14687">#14687</a>)</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>Fix double slash normalization for useNavigate colon urls (<a
href="https://redirect.github.com/remix-run/react-router/pull/14718">#14718</a>)</li>
<li>Update failed origin checks to return a 400 status instead of a 500
(<a
href="https://redirect.github.com/remix-run/react-router/pull/14737">#14737</a>)</li>
<li>Bugfix <a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14666">#14666</a>:
Inline criticalCss is missing nonce (<a
href="https://redirect.github.com/remix-run/react-router/pull/14691">#14691</a>)</li>
<li>Loosen <code>allowedActionOrigins</code> glob check so
<code>**</code> matches all domains (<a
href="https://redirect.github.com/remix-run/react-router/pull/14722">#14722</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5557ba3f84"><code>5557ba3</code></a>
chore: Update version for release (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14749">#14749</a>)</li>
<li><a
href="62c6e0effd"><code>62c6e0e</code></a>
chore: Update version for release (pre) (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14738">#14738</a>)</li>
<li><a
href="3126264a69"><code>3126264</code></a>
Return 400 response on failed origin checks (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14737">#14737</a>)</li>
<li><a
href="3a5b5ad0e5"><code>3a5b5ad</code></a>
Fix double slash normalization for <code>useNavigate</code> paths with
colons (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14718">#14718</a>)</li>
<li><a
href="f29c6c9563"><code>f29c6c9</code></a>
Add docs and loosen origins wildcard check (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14722">#14722</a>)</li>
<li><a
href="0bb972b747"><code>0bb972b</code></a>
fix(react-router/dom/ssr): add <code>nonce</code> to inline critical css
(<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14691">#14691</a>)</li>
<li><a
href="dd08f8d3b1"><code>dd08f8d</code></a>
fix(react-router): add crossOrigin prop to Links component (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/14687">#14687</a>)</li>
<li><a
href="c38d76ce4e"><code>c38d76c</code></a>
chore: format</li>
<li>See full diff in <a
href="https://github.com/remix-run/react-router/commits/react-router@7.13.0/packages/react-router">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-router&package-manager=npm_and_yarn&previous-version=7.12.0&new-version=7.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:09:03 +00:00
dependabot[bot]
7d6949be88 Bump lucide-react from 0.562.0 to 0.563.0 in /docs (#1530)
Bumps
[lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)
from 0.562.0 to 0.563.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.563.0</h2>
<h2>What's Changed</h2>
<p><code>aria-hidden</code> is by default added to icons components in
all packages. This was already added to <code>lucide-react</code>
before.
Making icons accessible, you can add an <code>aria-label</code> or a
<code>title</code>. See docs about <a
href="https://lucide.dev/guide/advanced/accessibility">accessibility</a>.</p>
<h2>All changes</h2>
<ul>
<li>chore(dev): Enable ligatures in font build configuration by <a
href="https://github.com/dcxo"><code>@​dcxo</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3876">lucide-icons/lucide#3876</a></li>
<li>chore(repo): add Android to brand stopwords by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3895">lucide-icons/lucide#3895</a></li>
<li>fix(site): add missing titles and a title template by <a
href="https://github.com/taimar"><code>@​taimar</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3920">lucide-icons/lucide#3920</a></li>
<li>fix(site): unify and improve the styling of input fields by <a
href="https://github.com/taimar"><code>@​taimar</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3919">lucide-icons/lucide#3919</a></li>
<li>fix(icons): changed <code>star-off</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3952">lucide-icons/lucide#3952</a></li>
<li>fix(icons): changed <code>tickets-plane</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3928">lucide-icons/lucide#3928</a></li>
<li>fix(icons): changed <code>monitor-off</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3962">lucide-icons/lucide#3962</a></li>
<li>fix(icons): changed <code>lasso</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3961">lucide-icons/lucide#3961</a></li>
<li>fix(icons): changed <code>cloud-off</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3942">lucide-icons/lucide#3942</a></li>
<li>docs(site): added lucide-web-components third-party package by <a
href="https://github.com/midesweb"><code>@​midesweb</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3948">lucide-icons/lucide#3948</a></li>
<li>chore(deps-dev): bump preact from 10.27.2 to 10.27.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3955">lucide-icons/lucide#3955</a></li>
<li>feat(icon): add globe-x icon with metadata by <a
href="https://github.com/Muhammad-Aqib-Bashir"><code>@​Muhammad-Aqib-Bashir</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3827">lucide-icons/lucide#3827</a></li>
<li>fix(icons): changed <code>waypoints</code> icon by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3990">lucide-icons/lucide#3990</a></li>
<li>fix(icons): changed <code>bookmark</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/2906">lucide-icons/lucide#2906</a></li>
<li>fix(icons): changed <code>message-square-dashed</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3959">lucide-icons/lucide#3959</a></li>
<li>fix(icons): changed <code>cloudy</code> icon by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3966">lucide-icons/lucide#3966</a></li>
<li>fix(github-actions): resolved spelling mistake in gh issue close
command by <a
href="https://github.com/jguddas"><code>@​jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4000">lucide-icons/lucide#4000</a></li>
<li>Update LICENSE by <a
href="https://github.com/alxgraphy"><code>@​alxgraphy</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4009">lucide-icons/lucide#4009</a></li>
<li>feat(packages): Added aria-hidden fallback for decorative icons to
all packages by <a
href="https://github.com/ericfennis"><code>@​ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3604">lucide-icons/lucide#3604</a></li>
<li>chore(deps): bump lodash from 4.17.21 to 4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4020">lucide-icons/lucide#4020</a></li>
<li>chore(deps): bump lodash-es from 4.17.21 to 4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4019">lucide-icons/lucide#4019</a></li>
<li>Suggest anchoring to a specific lucide version when using a cdn by
<a href="https://github.com/drago1520"><code>@​drago1520</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/3727">lucide-icons/lucide#3727</a></li>
<li>feat(docs): upgraded backers block by <a
href="https://github.com/karsa-mistmere"><code>@​karsa-mistmere</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4014">lucide-icons/lucide#4014</a></li>
<li>fix(site): hide native search input clear &quot;X&quot; icon by <a
href="https://github.com/epifaniofrancisco"><code>@​epifaniofrancisco</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3933">lucide-icons/lucide#3933</a></li>
<li>feat(icons): added <code>printer-x</code> icon by <a
href="https://github.com/lt25106"><code>@​lt25106</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3941">lucide-icons/lucide#3941</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/dcxo"><code>@​dcxo</code></a> made their
first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3876">lucide-icons/lucide#3876</a></li>
<li><a href="https://github.com/midesweb"><code>@​midesweb</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3948">lucide-icons/lucide#3948</a></li>
<li><a href="https://github.com/alxgraphy"><code>@​alxgraphy</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4009">lucide-icons/lucide#4009</a></li>
<li><a href="https://github.com/drago1520"><code>@​drago1520</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3727">lucide-icons/lucide#3727</a></li>
<li><a href="https://github.com/lt25106"><code>@​lt25106</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3941">lucide-icons/lucide#3941</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/0.562.0...0.563.0">https://github.com/lucide-icons/lucide/compare/0.562.0...0.563.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="67c0485457"><code>67c0485</code></a>
feat(scripts): added helper script to automatically update
OpenCollective bac...</li>
<li><a
href="b6ed43d48c"><code>b6ed43d</code></a>
feat(packages): Added aria-hidden fallback for decorative icons to all
packag...</li>
<li>See full diff in <a
href="https://github.com/lucide-icons/lucide/commits/0.563.0/packages/lucide-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lucide-react&package-manager=npm_and_yarn&previous-version=0.562.0&new-version=0.563.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 04:08:01 +00:00
dependabot[bot]
1cfbc6391a Bump python-multipart from 0.0.20 to 0.0.22 in /backend (#1529)
Bumps [python-multipart](https://github.com/Kludex/python-multipart)
from 0.0.20 to 0.0.22.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/python-multipart/releases">python-multipart's
releases</a>.</em></p>
<blockquote>
<h2>Version 0.0.22</h2>
<h2>What's Changed</h2>
<ul>
<li>Drop directory path from filename in <code>File</code> <a
href="9433f4bbc9">9433f4b</a>.</li>
</ul>
<hr />
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/python-multipart/compare/0.0.21...0.0.22">https://github.com/Kludex/python-multipart/compare/0.0.21...0.0.22</a></p>
<h2>Version 0.0.21</h2>
<h2>What's Changed</h2>
<ul>
<li>Add support for Python 3.14 and drop EOL 3.8 and 3.9 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/Kludex/python-multipart/pull/216">Kludex/python-multipart#216</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/waketzheng"><code>@​waketzheng</code></a> made
their first contribution in <a
href="https://redirect.github.com/Kludex/python-multipart/pull/203">Kludex/python-multipart#203</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Kludex/python-multipart/compare/0.0.20...0.0.21">https://github.com/Kludex/python-multipart/compare/0.0.20...0.0.21</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md">python-multipart's
changelog</a>.</em></p>
<blockquote>
<h2>0.0.22 (2026-01-25)</h2>
<ul>
<li>Drop directory path from filename in <code>File</code> <a
href="9433f4bbc9">9433f4b</a>.</li>
</ul>
<h2>0.0.21 (2025-12-17)</h2>
<ul>
<li>Add support for Python 3.14 and drop EOL 3.8 and 3.9 <a
href="https://redirect.github.com/Kludex/python-multipart/pull/216">#216</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bea7bbb290"><code>bea7bbb</code></a>
Version 0.0.22 (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/222">#222</a>)</li>
<li><a
href="0fb59a9df0"><code>0fb59a9</code></a>
chore: add return type on test (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/221">#221</a>)</li>
<li><a
href="9433f4bbc9"><code>9433f4b</code></a>
Merge commit from fork</li>
<li><a
href="d5c91ecb0a"><code>d5c91ec</code></a>
Bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/219">#219</a>)</li>
<li><a
href="5a90631b48"><code>5a90631</code></a>
bump uv (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/218">#218</a>)</li>
<li><a
href="1f72955602"><code>1f72955</code></a>
Version 0.0.21 (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/217">#217</a>)</li>
<li><a
href="47ecfed353"><code>47ecfed</code></a>
Add support for Python 3.14 and drop EOL 3.8 and 3.9 (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/216">#216</a>)</li>
<li><a
href="f18b70941b"><code>f18b709</code></a>
Bump the github-actions group across 1 directory with 4 updates (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/214">#214</a>)</li>
<li><a
href="b388e9a7a8"><code>b388e9a</code></a>
chore: use depedency-groups in <code>pyproject.toml</code> (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/212">#212</a>)</li>
<li><a
href="6113e75097"><code>6113e75</code></a>
Bump the github-actions group across 1 directory with 3 updates (<a
href="https://redirect.github.com/Kludex/python-multipart/issues/210">#210</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Kludex/python-multipart/compare/0.0.20...0.0.22">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=python-multipart&package-manager=uv&previous-version=0.0.20&new-version=0.0.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 23:58:06 +00:00
github-actions[bot]
9308d0ccd7 Update contributors in readme (#1526)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-01-23 19:37:56 +01:00
dependabot[bot]
551b59bccf Bump prettier from 3.7.4 to 3.8.0 in /docs (#1521)
Bumps [prettier](https://github.com/prettier/prettier) from 3.7.4 to
3.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/releases">prettier's
releases</a>.</em></p>
<blockquote>
<h2>3.8.0</h2>
<ul>
<li>Support Angular v21.1</li>
</ul>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release note
&quot;Prettier 3.8: Support for Angular v21.1&quot;</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md">prettier's
changelog</a>.</em></p>
<blockquote>
<h1>3.8.0</h1>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release
Notes</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="812a4d0071"><code>812a4d0</code></a>
Release 3.8.0</li>
<li><a
href="6cc1be31e2"><code>6cc1be3</code></a>
Consistent title</li>
<li><a
href="6d9bef0514"><code>6d9bef0</code></a>
Apply automated changes</li>
<li><a
href="3744a1840e"><code>3744a18</code></a>
Update code example</li>
<li><a
href="9a3edde022"><code>9a3edde</code></a>
Update</li>
<li><a
href="82dc52cdee"><code>82dc52c</code></a>
Regenerate</li>
<li><a
href="dc2de1a6e7"><code>dc2de1a</code></a>
Regenerate</li>
<li><a
href="5aa69662b4"><code>5aa6966</code></a>
Regenerate</li>
<li><a
href="daeeb51af9"><code>daeeb51</code></a>
Another version</li>
<li><a
href="a282985860"><code>a282985</code></a>
Add blog post</li>
<li>Additional commits viewable in <a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=3.7.4&new-version=3.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 14:24:01 +01:00
dependabot[bot]
e8d35e7706 Bump urllib3 from 2.5.0 to 2.6.3 in /backend (#1523)
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/urllib3/urllib3/releases">urllib3's
releases</a>.</em></p>
<blockquote>
<h2>2.6.3</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Changes</h2>
<ul>
<li>Fixed a security issue where decompression-bomb safeguards of the
streaming API were bypassed when HTTP redirects were followed.
(CVE-2026-21441 reported by <a
href="https://github.com/D47A"><code>@​D47A</code></a>, 8.9 High,
GHSA-38jv-5279-wg99)</li>
<li>Started treating <code>Retry-After</code> times greater than 6 hours
as 6 hours by default. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3743">urllib3/urllib3#3743</a>)</li>
<li>Fixed <code>urllib3.connection.VerifiedHTTPSConnection</code> on
Emscripten. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3752">urllib3/urllib3#3752</a>)</li>
</ul>
<h2>2.6.2</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Changes</h2>
<ul>
<li>Fixed <code>HTTPResponse.read_chunked()</code> to properly handle
leftover data in the decoder's buffer when reading compressed chunked
responses. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3734">urllib3/urllib3#3734</a>)</li>
</ul>
<h2>2.6.1</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Changes</h2>
<ul>
<li>Restore previously removed <code>HTTPResponse.getheaders()</code>
and <code>HTTPResponse.getheader()</code> methods. (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3731">#3731</a>)</li>
</ul>
<h2>2.6.0</h2>
<h2>🚀 urllib3 is fundraising for HTTP/2 support</h2>
<p><a
href="https://sethmlarson.dev/urllib3-is-fundraising-for-http2-support">urllib3
is raising ~$40,000 USD</a> to release HTTP/2 support and ensure
long-term sustainable maintenance of the project after a sharp decline
in financial support. If your company or organization uses Python and
would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and
thousands of other projects <a
href="https://opencollective.com/urllib3">please consider contributing
financially</a> to ensure HTTP/2 support is developed sustainably and
maintained for the long-haul.</p>
<p>Thank you for your support.</p>
<h2>Security</h2>
<ul>
<li>Fixed a security issue where streaming API could improperly handle
highly compressed HTTP content (&quot;decompression bombs&quot;) leading
to excessive resource consumption even when a small amount of data was
requested. Reading small chunks of compressed data is safer and much
more efficient now. (CVE-2025-66471 reported by <a
href="https://github.com/Cycloctane"><code>@​Cycloctane</code></a>, 8.9
High, GHSA-2xpw-w6gg-jr37)</li>
<li>Fixed a security issue where an attacker could compose an HTTP
response with virtually unlimited links in the
<code>Content-Encoding</code> header, potentially leading to a denial of
service (DoS) attack by exhausting system resources during decoding. The
number of allowed chained encodings is now limited to 5. (CVE-2025-66418
reported by <a
href="https://github.com/illia-v"><code>@​illia-v</code></a>, 8.9 High,
GHSA-gm62-xv2j-4w53)</li>
</ul>
<blockquote>
<p>[!IMPORTANT]</p>
<ul>
<li>If urllib3 is not installed with the optional
<code>urllib3[brotli]</code> extra, but your environment contains a
Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at
least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security
fixes and avoid warnings. Prefer using <code>urllib3[brotli]</code> to
install a compatible Brotli package automatically.</li>
</ul>
</blockquote>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/urllib3/urllib3/blob/main/CHANGES.rst">urllib3's
changelog</a>.</em></p>
<blockquote>
<h1>2.6.3 (2026-01-07)</h1>
<ul>
<li>Fixed a high-severity security issue where decompression-bomb
safeguards of
the streaming API were bypassed when HTTP redirects were followed.
(<code>GHSA-38jv-5279-wg99
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99&gt;</code>__)</li>
<li>Started treating <code>Retry-After</code> times greater than 6 hours
as 6 hours by
default. (<code>[#3743](https://github.com/urllib3/urllib3/issues/3743)
&lt;https://github.com/urllib3/urllib3/issues/3743&gt;</code>__)</li>
<li>Fixed <code>urllib3.connection.VerifiedHTTPSConnection</code> on
Emscripten.
(<code>[#3752](https://github.com/urllib3/urllib3/issues/3752)
&lt;https://github.com/urllib3/urllib3/issues/3752&gt;</code>__)</li>
</ul>
<h1>2.6.2 (2025-12-11)</h1>
<ul>
<li>Fixed <code>HTTPResponse.read_chunked()</code> to properly handle
leftover data in
the decoder's buffer when reading compressed chunked responses.
(<code>[#3734](https://github.com/urllib3/urllib3/issues/3734)
&lt;https://github.com/urllib3/urllib3/issues/3734&gt;</code>__)</li>
</ul>
<h1>2.6.1 (2025-12-08)</h1>
<ul>
<li>Restore previously removed <code>HTTPResponse.getheaders()</code>
and
<code>HTTPResponse.getheader()</code> methods.
(<code>[#3731](https://github.com/urllib3/urllib3/issues/3731)
&lt;https://github.com/urllib3/urllib3/issues/3731&gt;</code>__)</li>
</ul>
<h1>2.6.0 (2025-12-05)</h1>
<h2>Security</h2>
<ul>
<li>Fixed a security issue where streaming API could improperly handle
highly
compressed HTTP content (&quot;decompression bombs&quot;) leading to
excessive resource
consumption even when a small amount of data was requested. Reading
small
chunks of compressed data is safer and much more efficient now.
(<code>GHSA-2xpw-w6gg-jr37
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37&gt;</code>__)</li>
<li>Fixed a security issue where an attacker could compose an HTTP
response with
virtually unlimited links in the <code>Content-Encoding</code> header,
potentially
leading to a denial of service (DoS) attack by exhausting system
resources
during decoding. The number of allowed chained encodings is now limited
to 5.
(<code>GHSA-gm62-xv2j-4w53
&lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53&gt;</code>__)</li>
</ul>
<p>.. caution::</p>
<ul>
<li>If urllib3 is not installed with the optional
<code>urllib3[brotli]</code> extra, but
your environment contains a Brotli/brotlicffi/brotlipy package anyway,
make
sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to
benefit from the security fixes and avoid warnings. Prefer using</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0248277dd7"><code>0248277</code></a>
Release 2.6.3</li>
<li><a
href="8864ac407b"><code>8864ac4</code></a>
Merge commit from fork</li>
<li><a
href="70cecb27ca"><code>70cecb2</code></a>
Fix Scorecard issues related to vulnerable dev dependencies (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3755">#3755</a>)</li>
<li><a
href="41f249abe1"><code>41f249a</code></a>
Move &quot;v2.0 Migration Guide&quot; to the end of the table of
contents (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3747">#3747</a>)</li>
<li><a
href="fd4dffd2fc"><code>fd4dffd</code></a>
Patch <code>VerifiedHTTPSConnection</code> for Emscripten (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3752">#3752</a>)</li>
<li><a
href="13f0bfd55e"><code>13f0bfd</code></a>
Handle massive values in Retry-After when calculating time to sleep for
(<a
href="https://redirect.github.com/urllib3/urllib3/issues/3743">#3743</a>)</li>
<li><a
href="8c480bf87b"><code>8c480bf</code></a>
Bump actions/upload-artifact from 5.0.0 to 6.0.0 (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3748">#3748</a>)</li>
<li><a
href="4b40616e95"><code>4b40616</code></a>
Bump actions/cache from 4.3.0 to 5.0.1 (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3750">#3750</a>)</li>
<li><a
href="82b8479663"><code>82b8479</code></a>
Bump actions/download-artifact from 6.0.0 to 7.0.0 (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3749">#3749</a>)</li>
<li><a
href="34284cb017"><code>34284cb</code></a>
Mention experimental features in the security policy (<a
href="https://redirect.github.com/urllib3/urllib3/issues/3746">#3746</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/urllib3/urllib3/compare/2.5.0...2.6.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=urllib3&package-manager=uv&previous-version=2.5.0&new-version=2.6.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 04:14:12 +00:00
dependabot[bot]
19b5a2924e Bump aiohttp from 3.13.2 to 3.13.3 in /backend (#1524)
[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aiohttp&package-manager=uv&previous-version=3.13.2&new-version=3.13.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/evroon/bracket/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 04:13:56 +00:00
dependabot[bot]
42f1e6a2d0 Bump prettier from 3.7.1 to 3.8.0 in /frontend (#1522)
Bumps [prettier](https://github.com/prettier/prettier) from 3.7.1 to
3.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/releases">prettier's
releases</a>.</em></p>
<blockquote>
<h2>3.8.0</h2>
<ul>
<li>Support Angular v21.1</li>
</ul>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release note
&quot;Prettier 3.8: Support for Angular v21.1&quot;</a></p>
<h2>3.7.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix comment in union type gets duplicated by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18393">prettier/prettier#18393</a></li>
<li>Fix unstable comment print in union type by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18395">prettier/prettier#18395</a></li>
<li>Avoid quote around LWC interpolations by <a
href="https://github.com/kovsu"><code>@​kovsu</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18383">prettier/prettier#18383</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#374">Changelog</a></p>
<h2>3.7.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix <code>prettier.getFileInfo()</code> change that breaks VSCode
extension by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18375">prettier/prettier#18375</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#373">Changelog</a></p>
<h2>3.7.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix string print when switching quotes by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18351">prettier/prettier#18351</a></li>
<li>Preserve quote for embedded HTML attribute values by <a
href="https://github.com/kovsu"><code>@​kovsu</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18352">prettier/prettier#18352</a></li>
<li>Fix comment in empty type literal by <a
href="https://github.com/fisker"><code>@​fisker</code></a> in <a
href="https://redirect.github.com/prettier/prettier/pull/18364">prettier/prettier#18364</a></li>
</ul>
<p>🔗 <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md#372">Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prettier/prettier/blob/main/CHANGELOG.md">prettier's
changelog</a>.</em></p>
<blockquote>
<h1>3.8.0</h1>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.4...3.8.0">diff</a></p>
<p>🔗 <a href="https://prettier.io/blog/2026/01/14/3.8.0">Release
Notes</a></p>
<h1>3.7.4</h1>
<p><a
href="https://github.com/prettier/prettier/compare/3.7.3...3.7.4">diff</a></p>
<h4>LWC: Avoid quote around interpolations (<a
href="https://redirect.github.com/prettier/prettier/pull/18383">#18383</a>
by <a href="https://github.com/kovsu"><code>@​kovsu</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="html"><code>&lt;!-- Input --&gt;
&lt;div foo={bar}&gt;   &lt;/div&gt;
<p>&lt;!-- Prettier 3.7.3 (--embedded-language-formatting off) --&gt;<br
/>
&lt;div foo=&quot;{bar}&quot;&gt;&lt;/div&gt;</p>
<p>&lt;!-- Prettier 3.7.4 (--embedded-language-formatting off) --&gt;<br
/>
&lt;div foo={bar}&gt;&lt;/div&gt;<br />
</code></pre></p>
<h4>TypeScript: Fix comment inside union type gets duplicated (<a
href="https://redirect.github.com/prettier/prettier/pull/18393">#18393</a>
by <a href="https://github.com/fisker"><code>@​fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="tsx"><code>// Input
type Foo = (/** comment */ a | b) | c;
<p>// Prettier 3.7.3<br />
type Foo = /** comment <em>/ (/</em>* comment */ a | b) | c;</p>
<p>// Prettier 3.7.4<br />
type Foo = /** comment */ (a | b) | c;<br />
</code></pre></p>
<h4>TypeScript: Fix unstable comment print in union type comments (<a
href="https://redirect.github.com/prettier/prettier/pull/18395">#18395</a>
by <a href="https://github.com/fisker"><code>@​fisker</code></a>)</h4>
<!-- raw HTML omitted -->
<pre lang="tsx"><code>// Input
type X = (A | B) &amp; (
  // comment
  A | B
);
<p>// Prettier 3.7.3 (first format)<br />
type X = (A | B) &amp;<br />
&lt;/tr&gt;&lt;/table&gt;<br />
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="812a4d0071"><code>812a4d0</code></a>
Release 3.8.0</li>
<li><a
href="6cc1be31e2"><code>6cc1be3</code></a>
Consistent title</li>
<li><a
href="6d9bef0514"><code>6d9bef0</code></a>
Apply automated changes</li>
<li><a
href="3744a1840e"><code>3744a18</code></a>
Update code example</li>
<li><a
href="9a3edde022"><code>9a3edde</code></a>
Update</li>
<li><a
href="82dc52cdee"><code>82dc52c</code></a>
Regenerate</li>
<li><a
href="dc2de1a6e7"><code>dc2de1a</code></a>
Regenerate</li>
<li><a
href="5aa69662b4"><code>5aa6966</code></a>
Regenerate</li>
<li><a
href="daeeb51af9"><code>daeeb51</code></a>
Another version</li>
<li><a
href="a282985860"><code>a282985</code></a>
Add blog post</li>
<li>Additional commits viewable in <a
href="https://github.com/prettier/prettier/compare/3.7.1...3.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=3.7.1&new-version=3.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 04:11:15 +00:00
Amin NAIRI
ffd8f49c68 Fixed path for the PostgreSQL data folder (#1520)
The ending `data` folder does not exist per the Postgres documentation
and causes errors when starting up the Docker Compose Stack.
2026-01-17 22:57:34 +01:00
dependabot[bot]
4a6258ded3 Bump pyrefly from 0.47.0 to 0.48.0 in /backend (#1519)
Bumps [pyrefly](https://github.com/facebook/pyrefly) from 0.47.0 to
0.48.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="468f7d55b4"><code>468f7d5</code></a>
Update pyrefly version]</li>
<li><a
href="96c01a087f"><code>96c01a0</code></a>
Add failing testcase for private attributes</li>
<li><a
href="583707b1af"><code>583707b</code></a>
Add testcase to document aggregate behavior</li>
<li><a
href="5e77d5a188"><code>5e77d5a</code></a>
Remove jinja and typeshed-stats from mypy primer blocklist</li>
<li><a
href="862bfcc4cf"><code>862bfcc</code></a>
Add additional test cases</li>
<li><a
href="59098f44a5"><code>59098f4</code></a>
fix Not inferring generic type for variable typed as Callable with
TypeVar <a
href="https://redirect.github.com/facebook/pyrefly/issues/1">#1</a>...</li>
<li><a
href="7f0ca20a16"><code>7f0ca20</code></a>
Allow mypy_primer results for xarray</li>
<li><a
href="b78342deaa"><code>b78342d</code></a>
Allow mypy_primer results for scikit learn</li>
<li><a
href="4311f9b011"><code>4311f9b</code></a>
Allow mypy primer for arviz</li>
<li><a
href="1279c6741e"><code>1279c67</code></a>
Allow mypy primer for pytest</li>
<li>Additional commits viewable in <a
href="https://github.com/facebook/pyrefly/compare/0.47.0...0.48.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pyrefly&package-manager=uv&previous-version=0.47.0&new-version=0.48.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 06:17:51 +00:00
dependabot[bot]
f8b595c2ae Bump alembic from 1.17.1 to 1.18.0 in /backend (#1518)
Bumps [alembic](https://github.com/sqlalchemy/alembic) from 1.17.1 to
1.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sqlalchemy/alembic/releases">alembic's
releases</a>.</em></p>
<blockquote>
<h1>1.18.0</h1>
<p>Released: January 9, 2026</p>
<h2>feature</h2>
<ul>
<li>
<p><strong>[feature] [operations]</strong> When alembic is run in
&quot;verbose&quot; mode, alembic now logs a message to
indicate from which file is used to load the configuration.</p>
<p>References: <a
href="https://redirect.github.com/sqlalchemy/alembic/issues/1737">#1737</a></p>
</li>
<li>
<p><strong>[feature] [autogenerate]</strong> Autogenerate reflection
sweeps now use the &quot;bulk&quot; inspector methods
introduced in SQLAlchemy 2.0, which for selected dialects including
PostgreSQL and Oracle use batched queries to reflect whole collections
of
tables using O(1) queries rather than O(N).</p>
<p>References: <a
href="https://redirect.github.com/sqlalchemy/alembic/issues/1771">#1771</a></p>
</li>
<li>
<p><strong>[feature] [autogenerate]</strong> Release 1.18.0 introduces a
plugin system that allows for automatic
loading of third-party extensions as well as configurable autogenerate
compare functionality on a per-environment basis.</p>
<p>The <code>Plugin</code> class provides a common interface for
extensions that
register handlers among Alembic's existing extension points such as
<code>Operations.register_operation()</code> and
<code>Operations.implementation_for()</code>. A new interface for
registering
autogenerate comparison handlers,
<code>Plugin.add_autogenerate_comparator()</code>, provides for
autogenerate
compare functionality that may be custom-configured on a per-environment
basis using the new
<code>EnvironmentContext.configure.autogenerate_plugins</code>
parameter.</p>
<p>The change does not impact well known Alembic add-ons such as
<code>alembic-utils</code>, which continue to work as before; however,
such add-ons
have the option to provide plugin entrypoints going forward.</p>
<p>As part of this change, Alembic's autogenerate compare functionality
is
reorganized into a series of internal plugins under the
<code>alembic.autogenerate</code> namespace, which may be individually
or
collectively identified for inclusion and/or exclusion within the
<code>EnvironmentContext.configure()</code> call using a new parameter
<code>EnvironmentContext.configure.autogenerate_plugins</code>. This
parameter is also where third party comparison plugins may also be
indicated.</p>
<p>See <code>alembic.plugins.toplevel</code> for complete documentation
on
the new <code>Plugin</code> class as well as autogenerate-specific usage
instructions.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/sqlalchemy/alembic/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=alembic&package-manager=uv&previous-version=1.17.1&new-version=1.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 06:17:29 +00:00
dependabot[bot]
3f22bc08c5 Bump sentry-sdk from 2.48.0 to 2.49.0 in /backend (#1517)
Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from
2.48.0 to 2.49.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/releases">sentry-sdk's
releases</a>.</em></p>
<blockquote>
<h2>2.49.0</h2>
<h3>New Features </h3>
<ul>
<li>feat(api): Add <code>Scope.set_attribute</code> by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5256">#5256</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(grpc): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5246">#5246</a></li>
<li>fix(opentelemetry): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5247">#5247</a></li>
<li>fix(ray): Keep variadic kwargs last in signatures by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5244">#5244</a></li>
<li>fix(trytond): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5245">#5245</a></li>
<li>Fix openai count_tokens by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5281">#5281</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>docs: Fix typo in comment by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5280">#5280</a></li>
<li>docs: Fix <code>middleware_spans</code> docstring by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5279">#5279</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ref(scope): Set global attrs on global scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5259">#5259</a></li>
<li>chore: Ignore type migration for scripts/ and tests/ in blame by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5284">#5284</a></li>
<li>ref: Properly override parent func by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5283">#5283</a></li>
<li>ci: Allow to use Craft's new auto-versioning by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5218">#5218</a></li>
<li>ref: Deduplicate batchers by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5263">#5263</a></li>
<li>tests: Add dedicated transport format test for metrics, logs by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5264">#5264</a></li>
<li>ci: 🤖 Update test matrix with new releases (01/05) by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5273">#5273</a></li>
<li>tests: General logs tests should use Sentry logs API by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5262">#5262</a></li>
<li>tests: Test preserialization of attributes by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5260">#5260</a></li>
<li>ci: Unpin Pydantic 1.x version in tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5261">#5261</a></li>
<li>ref: Make logs, metrics go via scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5213">#5213</a></li>
<li>ci: Fix failing arq, fastapi tests on 3.7; update test matrix by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5258">#5258</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md">sentry-sdk's
changelog</a>.</em></p>
<blockquote>
<h2>2.49.0</h2>
<h3>New Features </h3>
<ul>
<li>feat(api): Add <code>Scope.set_attribute</code> by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5256">#5256</a></li>
</ul>
<h3>Bug Fixes 🐛</h3>
<ul>
<li>fix(grpc): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5246">#5246</a></li>
<li>fix(opentelemetry): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5247">#5247</a></li>
<li>fix(ray): Keep variadic kwargs last in signatures by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5244">#5244</a></li>
<li>fix(trytond): Gate third-party imports by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5245">#5245</a></li>
<li>Fix openai count_tokens by <a
href="https://github.com/sl0thentr0py"><code>@​sl0thentr0py</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5281">#5281</a></li>
</ul>
<h3>Documentation 📚</h3>
<ul>
<li>docs: Fix typo in comment by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5280">#5280</a></li>
<li>docs: Fix <code>middleware_spans</code> docstring by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5279">#5279</a></li>
</ul>
<h3>Internal Changes 🔧</h3>
<ul>
<li>ref(scope): Set global attrs on global scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5259">#5259</a></li>
<li>chore: Ignore type migration for scripts/ and tests/ in blame by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5284">#5284</a></li>
<li>ref: Properly override parent func by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5283">#5283</a></li>
<li>ci: Allow to use Craft's new auto-versioning by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5218">#5218</a></li>
<li>ref: Deduplicate batchers by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5263">#5263</a></li>
<li>tests: Add dedicated transport format test for metrics, logs by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5264">#5264</a></li>
<li>ci: 🤖 Update test matrix with new releases (01/05) by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5273">#5273</a></li>
<li>tests: General logs tests should use Sentry logs API by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5262">#5262</a></li>
<li>tests: Test preserialization of attributes by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5260">#5260</a></li>
<li>ci: Unpin Pydantic 1.x version in tests by <a
href="https://github.com/alexander-alderman-webb"><code>@​alexander-alderman-webb</code></a>
in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5261">#5261</a></li>
<li>ref: Make logs, metrics go via scope by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5213">#5213</a></li>
<li>ci: Fix failing arq, fastapi tests on 3.7; update test matrix by <a
href="https://github.com/sentrivana"><code>@​sentrivana</code></a> in <a
href="https://redirect.github.com/getsentry/sentry-python/pull/5258">#5258</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2c85e64f99"><code>2c85e64</code></a>
release: 2.49.0</li>
<li><a
href="8f273d45ea"><code>8f273d4</code></a>
chore: Ignore type migration for scripts/ and tests/ in blame (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5284">#5284</a>)</li>
<li><a
href="dc8a8e5b0d"><code>dc8a8e5</code></a>
ref: Properly override parent func (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5283">#5283</a>)</li>
<li><a
href="485aa6ddb3"><code>485aa6d</code></a>
ci: Allow to use Craft's new auto-versioning (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5218">#5218</a>)</li>
<li><a
href="c8d8d60bef"><code>c8d8d60</code></a>
docs: Fix typo in comment (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5280">#5280</a>)</li>
<li><a
href="6039305f7a"><code>6039305</code></a>
ref: Deduplicate batchers (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5263">#5263</a>)</li>
<li><a
href="f2317dc4c7"><code>f2317dc</code></a>
ref(scope): Set global attrs on global scope (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5259">#5259</a>)</li>
<li><a
href="3d83b3912a"><code>3d83b39</code></a>
fix(ray): Keep variadic kwargs last in signatures (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5244">#5244</a>)</li>
<li><a
href="f5c51fc4a5"><code>f5c51fc</code></a>
Fix openai count_tokens (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5281">#5281</a>)</li>
<li><a
href="a979755d26"><code>a979755</code></a>
docs: Fix <code>middleware_spans</code> docstring (<a
href="https://redirect.github.com/getsentry/sentry-python/issues/5279">#5279</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/getsentry/sentry-python/compare/2.48.0...2.49.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sentry-sdk&package-manager=uv&previous-version=2.48.0&new-version=2.49.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 06:17:01 +00:00