ashatora/editor
1
0
Fork 0
mirror of https://github.com/maputnik/editor.git synced 2026-10-21 18:33:45 +00:00
Code Issues Projects Releases Wiki Activity
2,932 Commits 6 Branches 33 Tags
37d8a9fa1d68a2a12104455c0a938e36c334468a
Commit Graph
2932 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 37d8a9fa1d chore(deps-dev): Bump eslint from 10.12.0 to 10.13.0 (#2252) 
Bumps [eslint](https://github.com/eslint/eslint) from 10.12.0 to
10.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.13.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/48d5cc47e43478670ccf95a74f7a73e8408152b5"><code>48d5cc4</code></a>
feat: report references inside IIFEs in
<code>no-use-before-define</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21238">#21238</a>)
(Irfan fandi)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a39d9fb1fdb5db546f6407580cac531ba3370450"><code>a39d9fb</code></a>
feat: add <code>globalThis</code> to <code>no-obj-calls</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21382">#21382</a>)
(synthex-byte)</li>
<li><a
href="https://github.com/eslint/eslint/commit/66ac58383e076940c11a5d7213ad079028d1140e"><code>66ac583</code></a>
feat: check <code>yield*</code> expressions in
<code>no-unsafe-optional-chaining</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21399">#21399</a>)
(xbinaryx)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/87bd2cef7b2309739c29598fb2be335f4bed71a3"><code>87bd2ce</code></a>
fix: avoid redeclared <code>let</code> when <code>no-var</code> and
<code>one-var</code> fix together (<a
href="https://redirect.github.com/eslint/eslint/issues/21389">#21389</a>)
(Daniel Pinto)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4783a6806fb73ea4843ac46c6ae3d8285f56c288"><code>4783a68</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/43f0ac90e7858a834a0e68309e6397fb4cfa72dd"><code>43f0ac9</code></a>
docs: clarify parameter description in <code>getText</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21287">#21287</a>)
(lumir)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b59d889c7c18d8c73144e6ba46e9e7f3e7da0196"><code>b59d889</code></a>
chore: update github/codeql-action action to v4.38.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/21412">#21412</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/95e51a0518b15015304eca9844b3f64c1fc167ca"><code>95e51a0</code></a>
ci: re-enable <code>@typescript-eslint/typescript-eslint</code> in
ecosystem tests (<a
href="https://redirect.github.com/eslint/eslint/issues/21410">#21410</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/317fcb365f19e912a60d171a9d5a8d1f16fe4660"><code>317fcb3</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21409">#21409</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b92decf8ead7cc4082a18a4a0ab28f3c7c589887"><code>b92decf</code></a>
perf: skip no-redeclare scan for single-declaration variables (<a
href="https://redirect.github.com/eslint/eslint/issues/21365">#21365</a>)
(James Ross)</li>
<li><a
href="https://github.com/eslint/eslint/commit/47b7063b3f3f7bc7a5bcb87c082577e4e8b96e24"><code>47b7063</code></a>
chore: update dependency <code>@​eslint/json</code> to ^2.1.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/21398">#21398</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/e5aea414cc00555ecd43f6e608bf80e0f9a6d4d6"><code>e5aea41</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21390">#21390</a>)
(ESLint Bot)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4637f9827a1ba137498eaee70957850621082815"><code>4637f98</code></a>
10.13.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/96df05ceb7000813859acf16a690f8a8bbbea904"><code>96df05c</code></a>
Build: changelog update for 10.13.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/4783a6806fb73ea4843ac46c6ae3d8285f56c288"><code>4783a68</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/b59d889c7c18d8c73144e6ba46e9e7f3e7da0196"><code>b59d889</code></a>
chore: update github/codeql-action action to v4.38.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/21412">#21412</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/95e51a0518b15015304eca9844b3f64c1fc167ca"><code>95e51a0</code></a>
ci: re-enable <code>@typescript-eslint/typescript-eslint</code> in
ecosystem tests (<a
href="https://redirect.github.com/eslint/eslint/issues/21410">#21410</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/317fcb365f19e912a60d171a9d5a8d1f16fe4660"><code>317fcb3</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21409">#21409</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/48d5cc47e43478670ccf95a74f7a73e8408152b5"><code>48d5cc4</code></a>
feat: report references inside IIFEs in
<code>no-use-before-define</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21238">#21238</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/43f0ac90e7858a834a0e68309e6397fb4cfa72dd"><code>43f0ac9</code></a>
docs: clarify parameter description in <code>getText</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21287">#21287</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a39d9fb1fdb5db546f6407580cac531ba3370450"><code>a39d9fb</code></a>
feat: add <code>globalThis</code> to <code>no-obj-calls</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21382">#21382</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b92decf8ead7cc4082a18a4a0ab28f3c7c589887"><code>b92decf</code></a>
perf: skip no-redeclare scan for single-declaration variables (<a
href="https://redirect.github.com/eslint/eslint/issues/21365">#21365</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.12.0...v10.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=10.12.0&new-version=10.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-20 17:23:01 +00:00
dependabot[bot] 52eaba41e0 chore(deps): Bump react-i18next from 17.0.19 to 17.0.21 in the react group (#2251) 
Bumps the react group with 1 update:
[react-i18next](https://github.com/i18next/react-i18next).

Updates `react-i18next` from 17.0.19 to 17.0.21
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.21</h2>
<ul>
<li>fix(IcuTrans): explicit <code>values</code> now win over
<code>interpolation.defaultVariables</code>, as they do in
<code>t()</code>. <code>IcuTrans</code> merged them the other way round,
so <code>&lt;IcuTrans values={{ user: 'John Doe' }} /&gt;</code>
rendered the configured default variable <code>user</code> instead of
<code>John Doe</code>. <code>Trans</code> had the same inverted merge
and is fixed too. Compatibility note: only names that are set both in
<code>values</code> and in <code>defaultVariables</code> render
differently.</li>
<li>feat: new entry point
<code>react-i18next/IcuTransWithoutContext</code> (with types) for React
Server Components. Importing <code>IcuTransWithoutContext</code> from
<code>react-i18next</code> in a Server Component could fail the build
with <code>createContext is not a function</code>, because the main
entry creates the React context when it is loaded. Like
<code>react-i18next/TransWithoutContext</code>, the new entry point does
not.</li>
<li>fix(build): the ESM build's <code>dist/es/package.json</code> now
declares <code>&quot;sideEffects&quot;: false</code>, like the root
<code>package.json</code> already did. Bundlers use the nearest
<code>package.json</code>, so the ESM build counted as having side
effects and unused exports were kept: an app that only uses
<code>Trans</code> still bundled <code>IcuTrans</code> with its HTML
entity decoder, <code>useTranslation</code> and
<code>use-sync-external-store</code>. With esbuild, a
<code>Trans</code>-only bundle (React and i18next external) goes from
20.9 KB to 11.6 KB minified, 8.3 KB to 5.0 KB gzipped.</li>
<li>docs: the <code>icu.macro</code> Babel macro is now marked as
deprecated in favour of using <code>IcuTrans</code> directly. It fails
on Babel 8 (<code>t.jSXIdentifier is not a function</code>),
<code>&lt;Plural count={count}&gt;</code> renders the raw ICU message,
and a React <code>key</code> on
<code>&lt;Plural&gt;</code>/<code>&lt;Select&gt;</code> becomes an ICU
case. It keeps working on Babel 7 and is not removed. The
<code>IcuTrans</code> docs page has a corrected example and props table
and covers Server Components.</li>
</ul>
<h2>17.0.20</h2>
<ul>
<li>fix: <code>useTranslation</code> no longer suspends when a missing
namespace is loaded by a synchronous backend. With
<code>useSuspense</code> (the default), a namespace that wasn't in the
store yet always made the component throw the loading promise, even when
the backend had already delivered the resources while that promise was
being created. React then showed the <code>Suspense</code> fallback and
rendered again right away, which appears as a fallback flash (a white
flash in React Native) and costs performance. The hook now starts the
load first, checks the store again and only suspends if the namespace is
still missing. This helps every backend that calls back synchronously,
for example <code>i18next-resources-to-backend</code> with a static
resources object or a loader that returns the data directly. Async
backends, and an instance that isn't initialized yet, still suspend as
before. Thanks <a
href="https://github.com/oblador"><code>@​oblador</code></a> (<a
href="https://redirect.github.com/i18next/react-i18next/pull/1937">#1937</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/64a3d1360fd0bf2f49652c09881be04a5e22082f"><code>64a3d13</code></a>
17.0.21</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/c7e1c80f066abb68dc1399e3a069e0a5b7dddaa8"><code>c7e1c80</code></a>
fix(IcuTrans): explicit values win over defaultVariables, RSC entry
point, ES...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/66dbfbab1c5430a99a7d9badc308f59fa3931678"><code>66dbfba</code></a>
17.0.20</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/806df1ee326534bd1656fcc88239321f70c9c65f"><code>806df1e</code></a>
build, changelog for 17.0.20</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/49ec36d359236d3f5f7298b9da355754eb1fb719"><code>49ec36d</code></a>
fix(useTranslation): don't suspend synchronous backends (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1937">#1937</a>)</li>
<li>See full diff in <a
href="https://github.com/i18next/react-i18next/compare/v17.0.19...v17.0.21">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.19&new-version=17.0.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-20 17:08:36 +00:00
dependabot[bot] f3935fd2d6 chore(deps): Bump the react group across 1 directory with 3 updates (#2245) 
Bumps the react group with 3 updates in the / directory:
[react](https://github.com/react/react/tree/HEAD/packages/react),
[react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom)
and [react-i18next](https://github.com/i18next/react-i18next).

Updates `react` from 19.3.0 to 19.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react's
releases</a>.</em></p>
<blockquote>
<h2>19.3.1 (October 14th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Improve transport protocol (<a
href="https://redirect.github.com/facebook/react/pull/37845">#37845</a>
by <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> and
<a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/61aa00df822d0eb76d0362eb8b6fdd3527693efe"><code>61aa00d</code></a>
[19.3.x][Flight] Improve transport protocol (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/37845">#37845</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.3.1/packages/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-dom` from 19.3.0 to 19.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react-dom's
releases</a>.</em></p>
<blockquote>
<h2>19.3.1 (October 14th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Improve transport protocol (<a
href="https://redirect.github.com/facebook/react/pull/37845">#37845</a>
by <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> and
<a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/61aa00df822d0eb76d0362eb8b6fdd3527693efe"><code>61aa00d</code></a>
[19.3.x][Flight] Improve transport protocol (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37845">#37845</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.3.1/packages/react-dom">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-i18next` from 17.0.16 to 17.0.19
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.19</h2>
<ul>
<li>fix: <code>useTranslation</code> with an inline selector
<code>keyPrefix</code> (<code>useTranslation('ns', { keyPrefix: ($)
=&gt; $.role })</code>) returned a new <code>t</code> on every render,
so every effect, <code>useCallback</code> and <code>useMemo</code>
depending on <code>t</code> ran again each time. The cached
<code>t</code> was compared against the <code>keyPrefix</code> function
itself, and an inline arrow is a new function on every render. It is now
compared against the key the selector resolves to (with the same options
and namespace list <code>getFixedT</code> resolves it with), so
<code>t</code> keeps its identity as long as the resolved prefix does,
just like a string <code>keyPrefix</code>. A selector that resolves to a
different key still gets a new <code>t</code>, and i18next still
resolves the selector on each <code>t</code> call as before. Fixes <a
href="https://redirect.github.com/i18next/react-i18next/issues/1936">#1936</a>.</li>
<li>fix: <code>useTranslation</code> kept returning the previous
<code>t</code> when only the namespace (<code>useTranslation('a')</code>
→ <code>useTranslation('b')</code>) or only the i18n instance (another
instance with the same language, via props or
<code>I18nextProvider</code>) changed on a mounted component. That
<code>t</code> kept resolving against the old namespace or instance
until something else (the language, the ready state, a bound i18n event)
produced a new one. Both are now part of the check that decides whether
the cached <code>t</code> can be reused.</li>
</ul>
<h2>17.0.18</h2>
<ul>
<li>fix(Trans): with <code>shouldUnescape</code>, the default
<code>unescape</code> now turns <code>&amp;nbsp;</code> and
<code>&amp;[#160](https://github.com/i18next/react-i18next/issues/160);</code>
into a no-break space (U+00A0) instead of a regular space (U+0020). The
regular space dropped what the entity is for:
<code>u&amp;nbsp;nás</code> or <code>10&amp;nbsp;km</code> could wrap
across lines, and consecutive <code>&amp;nbsp;</code>s collapsed into
one space. This also matches <code>IcuTrans</code>, whose entity decoder
already mapped <code>&amp;nbsp;</code> to U+00A0. Compatibility note:
only affects <code>shouldUnescape</code>; snapshots or exact
<code>textContent</code> comparisons of such text now contain U+00A0
(Testing Library's default normalizer still matches it as a space). A
custom <code>react.unescape</code> function can restore the old mapping
for text nodes. Thanks <a
href="https://github.com/lprnmns"><code>@​lprnmns</code></a> (<a
href="https://redirect.github.com/i18next/react-i18next/pull/1935">#1935</a>).</li>
</ul>
<h2>17.0.17</h2>
<ul>
<li>perf: <code>useTranslation</code> no longer unsubscribes and
resubscribes its i18n listeners on every render. The
<code>subscribe</code> callback handed to
<code>useSyncExternalStore</code> depended on the merged options object,
which is rebuilt whenever <code>props</code> is a new object: with no
options (the <code>{}</code> default), with options passed inline
(<code>useTranslation('ns', { keyPrefix })</code>), and through
<code>withTranslation</code> and <code>&lt;Translation&gt;</code>. A new
<code>subscribe</code> makes React resubscribe, so each render of each
caller ran <code>i18n.off</code> and <code>i18n.on</code> in an extra
effect. It now depends only on the instance and the
<code>bindI18n</code>/<code>bindI18nStore</code> event names. No updates
were ever missed, because React re-checks the snapshot after
resubscribing; this only removes the churn, which adds up with many
mounted components that re-render often. Reported via <a
href="https://redirect.github.com/i18next/next-i18next/issues/2349">next-i18next#2349</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/d576d09cbebb9e2fc7a52a4cd6fe80793459cdfb"><code>d576d09</code></a>
17.0.19</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/d69464b4c4346309c530c9c5777191954f9842f0"><code>d69464b</code></a>
build</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/36e327ac48e5095d0313f8b3a39151e5ad3fc32f"><code>36e327a</code></a>
fix(useTranslation): keep t stable for an inline selector keyPrefix</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/f17e70812944aa767482799cfbbaaf4a3d6a5d72"><code>f17e708</code></a>
17.0.18</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/b799c190f66472e9c518d5a758a42302f8f12cea"><code>b799c19</code></a>
build, changelog for 17.0.18</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/7a55f5620d0ea0be0b3ab0269a605fd343519e92"><code>7a55f56</code></a>
fix: unescape   and &amp;<a
href="https://redirect.github.com/i18next/react-i18next/issues/160">#160</a>;
to a no-break space (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1935">#1935</a>)</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/511e1f24ccb152bad43b592b147310614252bff0"><code>511e1f2</code></a>
17.0.17</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/699eae31bec8379ccdbd68060d921b6f9ada7605"><code>699eae3</code></a>
build</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/5a88fe6090fc2f14aac97bb6dfcc7c89094aee28"><code>5a88fe6</code></a>
perf(useTranslation): stop resubscribing the i18n listeners on every
render</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/c4ee2c94ef8450499c46c5007c775de96f7528d3"><code>c4ee2c9</code></a>
build</li>
<li>See full diff in <a
href="https://github.com/i18next/react-i18next/compare/v17.0.16...v17.0.19">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 14:09:36 +00:00
dependabot[bot] 4325a33462 chore(deps): Bump the codeql-action group with 3 updates (#2250) 
Bumps the codeql-action group with 3 updates:
[github/codeql-action/init](https://github.com/github/codeql-action),
[github/codeql-action/autobuild](https://github.com/github/codeql-action)
and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `github/codeql-action/init` from 4.38.3 to 4.39.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a>
from github/update-v4.39.0-d63383a73</li>
<li><a
href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a>
Update changelog for v4.39.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a>
from github/mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a>
Rename <code>path</code> to <code>result</code> in tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a>
from github/mario-campos/automate-changenotes-assemble</li>
<li><a
href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a>
from github/mbg/add-missing-changenotes</li>
<li><a
href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/autobuild` from 4.38.3 to 4.39.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a>
from github/update-v4.39.0-d63383a73</li>
<li><a
href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a>
Update changelog for v4.39.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a>
from github/mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a>
Rename <code>path</code> to <code>result</code> in tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a>
from github/mario-campos/automate-changenotes-assemble</li>
<li><a
href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a>
from github/mbg/add-missing-changenotes</li>
<li><a
href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a>
from github/update-v4.39.0-d63383a73</li>
<li><a
href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a>
Update changelog for v4.39.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a>
from github/mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a>
Rename <code>path</code> to <code>result</code> in tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a>
from github/mario-campos/automate-changenotes-assemble</li>
<li><a
href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a>
from github/mbg/add-missing-changenotes</li>
<li><a
href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:57:39 +00:00
dependabot[bot] d5755ea60b chore(deps): Bump i18next from 26.4.4 to 26.4.7 (#2248) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.4.4 to
26.4.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.4.7</h2>
<ul>
<li>perf: <code>cloneInstance()</code> no longer inherits
<code>preload</code>. <code>loadResources()</code> adds every
<code>preload</code> language to each load, and clones copied
<code>preload</code> from the parent, so a clone's <code>init()</code>
and every <code>changeLanguage()</code> walked all preloaded languages ×
all namespaces through <code>queueLoad()</code> /
<code>hasResourceBundle()</code>, although the parent had already loaded
them into the shared store. With i18next-http-middleware (one clone +
<code>changeLanguage()</code> per request), 25 preloaded languages and
20 namespaces, that was most of the per-request CPU: the reproduction
from the issue went from ~90 µs to ~10 µs per request, the same as with
a single language. A clone now only loads what it uses itself: its
<code>changeLanguage()</code> no longer waits for parent preload
languages that are still loading (the parent's own <code>init()</code>
still does), and <code>clone.loadNamespaces()</code> loads the new
namespace for the clone's language and fallbacks instead of every
preloaded language. <code>clone.loadLanguages()</code> works as before,
the parent instance is unchanged, and passing <code>preload</code> to
<code>cloneInstance()</code> keeps the old behavior. Thanks <a
href="https://github.com/theMostCuriousHomunculus"><code>@​theMostCuriousHomunculus</code></a>
for the detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2451">#2451</a>).</li>
</ul>
<h2>v26.4.6</h2>
<ul>
<li>fix: a fallback language whose formatted code is already in the
hierarchy is no longer added a second time.
<code>toResolveHierarchy()</code> checked the raw
<code>fallbackLng</code> value against the list, but the list holds
formatted codes, so any fallback written differently from its formatted
form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng:
'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de',
'de-CH']</code>, and the same happened with <code>fallbackLng:
'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and
Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys
were looked up in the same language twice. Only exact duplicates are
removed; the order is unchanged. Thanks <a
href="https://github.com/lprnmns"><code>@​lprnmns</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2450">#2450</a>).</li>
</ul>
<h2>v26.4.5</h2>
<ul>
<li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays
<code>false</code> forever when the passed in <code>lng</code> is loaded
under another code, or not at all. It checked the load state of the raw
<code>lng</code>, but <code>loadLanguages()</code> stores a language
under its resolved code (<code>de-ch</code> → <code>de-CH</code>,
<code>de-CH</code> → <code>de</code> with <code>load:
'languageOnly'</code>) and skips a <code>lng</code> outside
<code>supportedLngs</code> entirely (only the fallback gets loaded), so
that state never got set. react-i18next's <code>useTranslation(ns, { lng
})</code> then never became ready: with <code>useSuspense</code> it kept
throwing an already resolved promise and React retried forever (100%
CPU, SSR never finished), without it the load effect re-rendered in a
loop. It now checks the code the language is actually loaded under, and
for a <code>lng</code> outside <code>supportedLngs</code> only waits for
the fallback, which is also what <code>t()</code> resolves to. Calls
without <code>lng</code> and the <code>precheck</code> (react-i18next's
<code>bindI18n: 'languageChanging'</code>) are unchanged (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1934">react-i18next#1934</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.4.7</h2>
<ul>
<li>perf: <code>cloneInstance()</code> no longer inherits
<code>preload</code>. <code>loadResources()</code> adds every
<code>preload</code> language to each load, and clones copied
<code>preload</code> from the parent, so a clone's <code>init()</code>
and every <code>changeLanguage()</code> walked all preloaded languages ×
all namespaces through <code>queueLoad()</code> /
<code>hasResourceBundle()</code>, although the parent had already loaded
them into the shared store. With i18next-http-middleware (one clone +
<code>changeLanguage()</code> per request), 25 preloaded languages and
20 namespaces, that was most of the per-request CPU: the reproduction
from the issue went from ~90 µs to ~10 µs per request, the same as with
a single language. A clone now only loads what it uses itself: its
<code>changeLanguage()</code> no longer waits for parent preload
languages that are still loading (the parent's own <code>init()</code>
still does), and <code>clone.loadNamespaces()</code> loads the new
namespace for the clone's language and fallbacks instead of every
preloaded language. <code>clone.loadLanguages()</code> works as before,
the parent instance is unchanged, and passing <code>preload</code> to
<code>cloneInstance()</code> keeps the old behavior. Thanks <a
href="https://github.com/theMostCuriousHomunculus"><code>@​theMostCuriousHomunculus</code></a>
for the detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2451">#2451</a>).</li>
</ul>
<h2>26.4.6</h2>
<ul>
<li>fix: a fallback language whose formatted code is already in the
hierarchy is no longer added a second time.
<code>toResolveHierarchy()</code> checked the raw
<code>fallbackLng</code> value against the list, but the list holds
formatted codes, so any fallback written differently from its formatted
form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng:
'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de',
'de-CH']</code>, and the same happened with <code>fallbackLng:
'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and
Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys
were looked up in the same language twice. Only exact duplicates are
removed; the order is unchanged. Thanks <a
href="https://github.com/lprnmns"><code>@​lprnmns</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2450">#2450</a>).</li>
</ul>
<h2>26.4.5</h2>
<ul>
<li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays
<code>false</code> forever when the passed in <code>lng</code> is loaded
under another code, or not at all. It checked the load state of the raw
<code>lng</code>, but <code>loadLanguages()</code> stores a language
under its resolved code (<code>de-ch</code> → <code>de-CH</code>,
<code>de-CH</code> → <code>de</code> with <code>load:
'languageOnly'</code>) and skips a <code>lng</code> outside
<code>supportedLngs</code> entirely (only the fallback gets loaded), so
that state never got set. react-i18next's <code>useTranslation(ns, { lng
})</code> then never became ready: with <code>useSuspense</code> it kept
throwing an already resolved promise and React retried forever (100%
CPU, SSR never finished), without it the load effect re-rendered in a
loop. It now checks the code the language is actually loaded under, and
for a <code>lng</code> outside <code>supportedLngs</code> only waits for
the fallback, which is also what <code>t()</code> resolves to. Calls
without <code>lng</code> and the <code>precheck</code> (react-i18next's
<code>bindI18n: 'languageChanging'</code>) are unchanged (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1934">react-i18next#1934</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/5546d211a32e73642d22b57e58cc762338270afa"><code>5546d21</code></a>
26.4.7</li>
<li><a
href="https://github.com/i18next/i18next/commit/f27c937e5866f33700db40d0bf055694ee890cca"><code>f27c937</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/50ecc221940e99dcb36670c93b342a896165fca4"><code>50ecc22</code></a>
perf: clones no longer inherit preload, so changeLanguage on a clone
doesn't ...</li>
<li><a
href="https://github.com/i18next/i18next/commit/bc951ab36e601d459e4afe7040c72cc7632d3b9e"><code>bc951ab</code></a>
26.4.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/45d0aba52fba755039a8f6f6be76825f5aebaa81"><code>45d0aba</code></a>
changelog + build for 26.4.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/0458efc507c88e78b2daa4b0cab9c254cfdc77d2"><code>0458efc</code></a>
fix: don't repeat a fallback language that differs only in casing (<a
href="https://redirect.github.com/i18next/i18next/issues/2450">#2450</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/ce7b9cf970b2e6dcbecc6eb997d460ea1ea811ad"><code>ce7b9cf</code></a>
26.4.5</li>
<li><a
href="https://github.com/i18next/i18next/commit/4d4c60720e05da72e53af33fa0a8e0d69a56487a"><code>4d4c607</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/8f8651e938e122b5e40eacf616c9fb823a189087"><code>8f8651e</code></a>
fix: hasLoadedNamespace with a passed in lng checks the code it is
actually l...</li>
<li><a
href="https://github.com/i18next/i18next/commit/15d0b9d90e0564947861b926352b06deff0a8a05"><code>15d0b9d</code></a>
changelog: link GHSA-5jr9-983r-c8x4 in v26.4.4</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v26.4.4...v26.4.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.4&new-version=26.4.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:57:18 +00:00
dependabot[bot] 51664b082b chore(deps): Bump ol-mapbox-style from 13.5.1 to 13.8.0 (#2249) 
Bumps [ol-mapbox-style](https://github.com/openlayers/ol-mapbox-style)
from 13.5.1 to 13.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/openlayers/ol-mapbox-style/releases">ol-mapbox-style's
releases</a>.</em></p>
<blockquote>
<h2>v13.7.1</h2>
<h2>Summary</h2>
<ul>
<li>Avoid lost patterns after SDFing them</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Changes for 13.7.0 by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1547">openlayers/ol-mapbox-style#1547</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/openlayers/ol-mapbox-style/compare/v13.7.0...v13.7.1">https://github.com/openlayers/ol-mapbox-style/compare/v13.7.0...v13.7.1</a></p>
<h2>v13.7.0</h2>
<h2>Summary</h2>
<ul>
<li>Use <code>PatternDescriptor</code> instead of patterns as color for
<code>fill-pattern</code>. This is to support other rendering techniques
than Canvas 2D.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Changes for 13.6.0 by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1545">openlayers/ol-mapbox-style#1545</a></li>
<li>Use PatternDescriptor instead of patterns as color for fills by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1546">openlayers/ol-mapbox-style#1546</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/openlayers/ol-mapbox-style/compare/v13.6.0...v13.7.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.6.0...v13.7.0</a></p>
<h2>v13.6.0</h2>
<h2>Summary</h2>
<ul>
<li>Allow other layers than <code>Vector</code> or
<code>VectorTile</code> for <code>applyStyle()</code></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Changes for 13.5.1 by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1528">openlayers/ol-mapbox-style#1528</a></li>
<li>Allow other layers than Vector or VectorTile for applyStyle() by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1542">openlayers/ol-mapbox-style#1542</a></li>
<li>Bump typedoc-plugin-missing-exports from 4.1.3 to 4.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1529">openlayers/ol-mapbox-style#1529</a></li>
<li>Bump proj4 from 2.21.0 to 2.22.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1530">openlayers/ol-mapbox-style#1530</a></li>
<li>Bump mocha from 12.0.0-rc.6 to 12.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1531">openlayers/ol-mapbox-style#1531</a></li>
<li>Bump globals from 17.8.0 to 17.12.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1532">openlayers/ol-mapbox-style#1532</a></li>
<li>Bump compression from 1.8.1 to 1.8.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1540">openlayers/ol-mapbox-style#1540</a></li>
<li>Bump postcss-selector-parser, postcss-modules-local-by-default and
postcss-modules-scope by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1541">openlayers/ol-mapbox-style#1541</a></li>
<li>Bump serialize-javascript from 7.1.1 to 7.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1543">openlayers/ol-mapbox-style#1543</a></li>
<li>Bump brace-expansion by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1536">openlayers/ol-mapbox-style#1536</a></li>
<li>Bump shell-quote from 1.10.0 to 1.12.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1535">openlayers/ol-mapbox-style#1535</a></li>
<li>Bump proxy-addr from 2.0.7 to 2.0.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1538">openlayers/ol-mapbox-style#1538</a></li>
<li>Bump <code>@​babel/core</code> from 7.12.3 to 7.29.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1544">openlayers/ol-mapbox-style#1544</a></li>
<li>Bump source-map-js from 1.2.1 to 1.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1539">openlayers/ol-mapbox-style#1539</a></li>
<li>Bump webpack-dev-middleware from 7.4.2 to 7.4.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1537">openlayers/ol-mapbox-style#1537</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/openlayers/ol-mapbox-style/compare/v13.5.1...v13.6.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.5.1...v13.6.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/openlayers/ol-mapbox-style/blob/main/CHANGELOG.md">ol-mapbox-style's
changelog</a>.</em></p>
<blockquote>
<h2>13.8.0</h2>
<ul>
<li>Support <code>fill-translate</code> and
<code>fill-translate-anchor</code> (and the same for
<code>fill-extrusion</code>).</li>
</ul>
<h2>13.7.0</h2>
<ul>
<li>Use <code>PatternDescriptor</code> instead of patterns as color for
<code>fill-pattern</code>. This is to support other rendering techniques
than Canvas 2D.</li>
</ul>
<h2>13.6.0</h2>
<ul>
<li>Allow other layers than <code>Vector</code> or
<code>VectorTile</code> for <code>applyStyle()</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/openlayers/ol-mapbox-style/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol-mapbox-style&package-manager=npm_and_yarn&previous-version=13.5.1&new-version=13.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:56:28 +00:00
dependabot[bot] 253afcc35f chore(deps-dev): Bump the vitest group with 2 updates (#2244) 
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).

Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.5</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Keep vite default <code>fs.deny</code> with api token file  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11578">vitest-dev/vitest#11578</a>
<a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb"><!-- raw
HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li>
<li>Handle quoted file names in <code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11583">vitest-dev/vitest#11583</a>
<a href="https://github.com/vitest-dev/vitest/commit/14921e962"><!-- raw
HTML omitted -->(14921)<!-- raw HTML omitted --></a></li>
<li>Add <code>data</code> to the <code>import.meta.hot</code> stub  - 
by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11590">vitest-dev/vitest#11590</a>
<a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3"><!-- raw
HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li>
<li>Set <code>skip</code> in <code>skipIf</code>, ignore
<code>undefined</code> options  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11591">vitest-dev/vitest#11591</a>
<a href="https://github.com/vitest-dev/vitest/commit/d523a15f2"><!-- raw
HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li>
<li>Skip builtin loading in async leak detector  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11598">vitest-dev/vitest#11598</a>
<a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6"><!-- raw
HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li>
<li>Keep the import frame in native loader errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11599">vitest-dev/vitest#11599</a>
<a href="https://github.com/vitest-dev/vitest/commit/9697b3894"><!-- raw
HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li>
<li>Run hook cleanups when a later hook fails  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11605">vitest-dev/vitest#11605</a>
<a href="https://github.com/vitest-dev/vitest/commit/6c5a44720"><!-- raw
HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li>
<li>Release mocks of finished test files  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11607">vitest-dev/vitest#11607</a>
<a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0"><!-- raw
HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li>
<li>Abort all running tests on cancel  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11606">vitest-dev/vitest#11606</a>
<a href="https://github.com/vitest-dev/vitest/commit/6621a72d6"><!-- raw
HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Ignore synthetic pagehide events  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11582">vitest-dev/vitest#11582</a>
<a href="https://github.com/vitest-dev/vitest/commit/ca0813584"><!-- raw
HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li>
<li>Run plugin buildStart on server creation  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11593">vitest-dev/vitest#11593</a>
<a href="https://github.com/vitest-dev/vitest/commit/ea611e44c"><!-- raw
HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li>
<li>Drop late connections of closed sessions  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11600">vitest-dev/vitest#11600</a>
<a href="https://github.com/vitest-dev/vitest/commit/f161e6df2"><!-- raw
HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li>
<li>Wait 30s for the browser to close  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11601">vitest-dev/vitest#11601</a>
<a href="https://github.com/vitest-dev/vitest/commit/6498b666a"><!-- raw
HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li>
<li>Run global setup once with instances  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11596">vitest-dev/vitest#11596</a>
<a href="https://github.com/vitest-dev/vitest/commit/8dd67c262"><!-- raw
HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>reporter</strong>:
<ul>
<li>End reason
<code>&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);failed&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);</code>
on worker crash  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11568">vitest-dev/vitest#11568</a>
<a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff"><!-- raw
HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7"><code>7a825db</code></a>
chore: release v5.0.5 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11609">#11609</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest` from 5.0.4 to 5.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.5</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Keep vite default <code>fs.deny</code> with api token file  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11578">vitest-dev/vitest#11578</a>
<a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb"><!-- raw
HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li>
<li>Handle quoted file names in <code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11583">vitest-dev/vitest#11583</a>
<a href="https://github.com/vitest-dev/vitest/commit/14921e962"><!-- raw
HTML omitted -->(14921)<!-- raw HTML omitted --></a></li>
<li>Add <code>data</code> to the <code>import.meta.hot</code> stub  - 
by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11590">vitest-dev/vitest#11590</a>
<a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3"><!-- raw
HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li>
<li>Set <code>skip</code> in <code>skipIf</code>, ignore
<code>undefined</code> options  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11591">vitest-dev/vitest#11591</a>
<a href="https://github.com/vitest-dev/vitest/commit/d523a15f2"><!-- raw
HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li>
<li>Skip builtin loading in async leak detector  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11598">vitest-dev/vitest#11598</a>
<a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6"><!-- raw
HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li>
<li>Keep the import frame in native loader errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11599">vitest-dev/vitest#11599</a>
<a href="https://github.com/vitest-dev/vitest/commit/9697b3894"><!-- raw
HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li>
<li>Run hook cleanups when a later hook fails  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11605">vitest-dev/vitest#11605</a>
<a href="https://github.com/vitest-dev/vitest/commit/6c5a44720"><!-- raw
HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li>
<li>Release mocks of finished test files  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11607">vitest-dev/vitest#11607</a>
<a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0"><!-- raw
HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li>
<li>Abort all running tests on cancel  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11606">vitest-dev/vitest#11606</a>
<a href="https://github.com/vitest-dev/vitest/commit/6621a72d6"><!-- raw
HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Ignore synthetic pagehide events  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11582">vitest-dev/vitest#11582</a>
<a href="https://github.com/vitest-dev/vitest/commit/ca0813584"><!-- raw
HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li>
<li>Run plugin buildStart on server creation  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11593">vitest-dev/vitest#11593</a>
<a href="https://github.com/vitest-dev/vitest/commit/ea611e44c"><!-- raw
HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li>
<li>Drop late connections of closed sessions  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11600">vitest-dev/vitest#11600</a>
<a href="https://github.com/vitest-dev/vitest/commit/f161e6df2"><!-- raw
HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li>
<li>Wait 30s for the browser to close  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11601">vitest-dev/vitest#11601</a>
<a href="https://github.com/vitest-dev/vitest/commit/6498b666a"><!-- raw
HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li>
<li>Run global setup once with instances  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11596">vitest-dev/vitest#11596</a>
<a href="https://github.com/vitest-dev/vitest/commit/8dd67c262"><!-- raw
HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>reporter</strong>:
<ul>
<li>End reason
<code>&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);</code>
on worker crash  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11568">vitest-dev/vitest#11568</a>
<a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff"><!-- raw
HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7"><code>7a825db</code></a>
chore: release v5.0.5 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11609">#11609</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6621a72d6ed371e43f80ff327f5063693bd6b1ad"><code>6621a72</code></a>
fix: abort all running tests on cancel (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11606">#11606</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0c8d6867de06a3df43ea28a05eeec444"><code>e9c3d72</code></a>
fix: release mocks of finished test files (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11607">#11607</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/8dd67c2625943d824e257b87ae57a14094e90eed"><code>8dd67c2</code></a>
fix(browser): run global setup once with instances (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11596">#11596</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6c5a447203a29a0708fbc5de4fb91ea501bdc395"><code>6c5a447</code></a>
fix: run hook cleanups when a later hook fails (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11605">#11605</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/9697b3894f456b85db91f3824ebe833449305c04"><code>9697b38</code></a>
fix: keep the import frame in native loader errors (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11599">#11599</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6498b666a3ae8961f6f2a8abdc89015b6fd0b3aa"><code>6498b66</code></a>
fix(browser): wait 30s for the browser to close (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11601">#11601</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/f161e6df2b3c0bc84982d374094379139e380791"><code>f161e6d</code></a>
fix(browser): drop late connections of closed sessions (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11600">#11600</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/fe86a64c6c6aa75481bffe5880b5c4e35ea67927"><code>fe86a64</code></a>
fix: skip builtin loading in async leak detector (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11598">#11598</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff0734cf476e30186a83aebe6771aa330"><code>6ae8e89</code></a>
fix(reporter): end reason <code>'failed'</code> on worker crash (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11568">#11568</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:55:45 +00:00
dependabot[bot] 4accd18a2e chore(deps-dev): Bump @playwright/test from 1.64.0 to 1.64.1 (#2247) 
Bumps [@playwright/test](https://github.com/microsoft/playwright) from
1.64.0 to 1.64.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/playwright/releases">@​playwright/test's
releases</a>.</em></p>
<blockquote>
<h2>v1.64.1</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/43247">#43247</a>
[Bug]: _electron.launch intermittently loses a packaged app's first
window since 1.64.0</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/43242">#43242</a>
[Regression]: Chromium 155+ aborts a preflighted cross-origin redirect
whenever any route is registered (net::ERR_ABORTED)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/playwright/commit/cfe490d941f992655948eee8fd4fd94e1c4234bf"><code>cfe490d</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43353">#43353</a>):
docs: release notes for v1.64 Python</li>
<li><a
href="https://github.com/microsoft/playwright/commit/866cbb864009f84d7e8e41c64fdbfceff43f280d"><code>866cbb8</code></a>
chore: mark v1.64.1 (<a
href="https://redirect.github.com/microsoft/playwright/issues/43354">#43354</a>)</li>
<li><a
href="https://github.com/microsoft/playwright/commit/1b2924712024804936dbcfe9fabaa655d52325e5"><code>1b29247</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43250">#43250</a>):
fix(electron): do not drop windows that have not navigat...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/632d976826c74b0163fd5201a05b7b4853ba3f4a"><code>632d976</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43249">#43249</a>):
fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect</li>
<li><a
href="https://github.com/microsoft/playwright/commit/824d0c5d1e10f21fcbe88d18a99d06194acde77c"><code>824d0c5</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43217">#43217</a>):
chore(dotnet): fix async suffix of optional-arg overload...</li>
<li>See full diff in <a
href="https://github.com/microsoft/playwright/compare/v1.64.0...v1.64.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.64.0&new-version=1.64.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:54:53 +00:00
dependabot[bot] 789e8d4569 chore(deps-dev): Bump sass from 1.105.1 to 1.105.2 (#2246) 
Bumps [sass](https://github.com/sass/dart-sass) from 1.105.1 to 1.105.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/releases">sass's
releases</a>.</em></p>
<blockquote>
<h2>Dart Sass 1.105.2</h2>
<p>To install Sass 1.105.2, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<h3>Node.js Embedded Host</h3>
<ul>
<li>Fix a deadlock when the async compiler fails to start.</li>
</ul>
<p>See the <a
href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11052">full
changelog</a> for changes in earlier releases.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's
changelog</a>.</em></p>
<blockquote>
<h2>1.105.2</h2>
<h3>Node.js Embedded Host</h3>
<ul>
<li>Fix a deadlock when the async compiler fails to start.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sass/dart-sass/commit/00a0d7968f4a6d8ed044da35e3b04877d8b3e2b4"><code>00a0d79</code></a>
Add a changelog entry for <a
href="https://redirect.github.com/sass/embedded-host-node/issues/449">sass/embedded-host-node#449</a>
(<a
href="https://redirect.github.com/sass/dart-sass/issues/2882">#2882</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/83fdf3573961991569f6baf90ee80469ca952792"><code>83fdf35</code></a>
Fix the <code>git pr merge</code> invocation in GitHUb actions (<a
href="https://redirect.github.com/sass/dart-sass/issues/2881">#2881</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/c9868b44d9287171d585e8d77b8bf1d2946393fc"><code>c9868b4</code></a>
Try setting dependabot merge authorship with <code>-A</code> (<a
href="https://redirect.github.com/sass/dart-sass/issues/2873">#2873</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/f10cddec0e47c41ca19791c0a9cbd9a4c73c3ff2"><code>f10cdde</code></a>
Check out sass/sass with clone-linked-repo whenever possible (<a
href="https://redirect.github.com/sass/dart-sass/issues/2871">#2871</a>)</li>
<li>See full diff in <a
href="https://github.com/sass/dart-sass/compare/1.105.1...1.105.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sass&package-manager=npm_and_yarn&previous-version=1.105.1&new-version=1.105.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:54:08 +00:00
dependabot[bot] 2522b20c02 chore(deps-dev): Bump postcss from 8.5.29 to 8.5.30 (#2242) 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.29 to
8.5.30.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.30</h2>
<ul>
<li>Fix broken map on <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/Rufflet"><code>@​Rufflet</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.30</h2>
<ul>
<li>Fix broken map on <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/Rufflet"><code>@​Rufflet</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/f1aca7ec68ab0cfb96cc9e69520a87f641c5a9e4"><code>f1aca7e</code></a>
Release 8.5.30 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d8344589299ca90f4ec0a4fab899e357995eaad"><code>9d83445</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/6c9bc73d9d2ad2c9c8e998ace707ebe067bc8425"><code>6c9bc73</code></a>
Fix invalid source map mapping on escaping before new line (<a
href="https://redirect.github.com/postcss/postcss/issues/2169">#2169</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/1fd8f881875330b284d65961c2c158f61d4e3bab"><code>1fd8f88</code></a>
Add missed changes in changelog</li>
<li>See full diff in <a
href="https://github.com/postcss/postcss/compare/8.5.29...8.5.30">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.29&new-version=8.5.30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:56:54 +00:00
dependabot[bot] b73f0abfad chore(deps-dev): Bump typescript-eslint from 8.71.1 to 8.71.2 (#2241) 
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
from 8.71.1 to 8.71.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.71.2</h2>
<h2>8.71.2 (2026-10-12)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unused-vars] avoid
false-positives when not using our parser (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12989">#12989</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters]
count instantiated mapped type templates (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12974">#12974</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unused-vars] ignore type-only
refs for after-used (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12977">#12977</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters]
parenthesize constraint in optional tuple elements (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12995">#12995</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] safe fix
when the chain ends with a strict null comparison (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12805">#12805</a>)</li>
<li><strong>type-utils:</strong> match linked packages and packages with
missing version in <code>TypeOrValueSpecifier</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12948">#12948</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Abraham Guo</li>
<li>Brad Zacher <a
href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg</li>
<li>Vinccool96</li>
<li>Younsang Na <a
href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.2">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.71.2 (2026-10-12)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.2">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/7488d681f6e0e96c2aaa1eee9c3d1b9b1ef077cb"><code>7488d68</code></a>
chore(release): publish 8.71.2</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.1&new-version=8.71.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:55:36 +00:00
dependabot[bot] aa52073505 chore(deps-dev): Bump i18next-cli from 1.75.2 to 1.75.3 (#2243) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.75.2
to 1.75.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.75.3</h2>
<ul>
<li>fix(extract): options passed in a variable are read like inline
ones. With <code>const params = { count }</code>,
<code>t('key', params)</code> now extracts the plural keys (and reads
<code>context</code>, <code>ns</code>, <code>defaultValue</code> the
same way),
where it used to extract only <code>key</code>. A variable a file
declares also no longer resolves to a same-named
variable of another file: <code>t('key', overwrittenParams)</code> took
<code>y=true</code> as its default value from an
unrelated function-local <code>overwrittenParams</code> array elsewhere.
Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/307">#307</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/3c957348b396910daa3bb3f6e7fa25d3b266d9d5"><code>3c95734</code></a>
1.75.3</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/171c6f450aa900f210372d33f15dbf7eae7c6ff8"><code>171c6f4</code></a>
fix(extract): read t() options passed in a variable, and keep a file's
variab...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.75.2...v1.75.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.75.2&new-version=1.75.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:54:28 +00:00
dependabot[bot] 4d4db6e406 chore(deps): Bump react-resizable-panels from 4.14.4 to 4.14.5 in the react group (#2240) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.4 to 4.14.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.5</h2>
<ul>
<li><code>Group</code>, <code>Panel</code>, <code>Separator</code>,
<code>Grid</code>, and <code>Cell</code> only render an explicit
<code>id</code> (or <code>data-testid</code>) as
<code>data-testid</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li>Empty string <code>id</code> prop is now treated the same as an
undefined value and falls back to <code>useId</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li><code>Panel</code> with an <code>id</code> of <code>0</code> is now
properly treated as an explicit <code>id</code> value - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.5</h2>
<ul>
<li><code>Group</code>, <code>Panel</code>, <code>Separator</code>,
<code>Grid</code>, and <code>Cell</code> only render an explicit
<code>id</code> (or <code>data-testid</code>) as
<code>data-testid</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li>Empty string <code>id</code> prop is now treated the same as an
undefined value and falls back to <code>useId</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li><code>Panel</code> with an <code>id</code> of <code>0</code> is now
properly treated as an explicit <code>id</code> value - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/00766aa4b967ce3050908075ed891f4a9e96a86e"><code>00766aa</code></a>
4.14.4 -&gt; 4.14.5</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/593afafa93d90582808ba7f2bb0cb83b9b78c488"><code>593afaf</code></a>
Improve id and data-testid semantics (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/766">#766</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/23453f69c307ceb6f7c2ace1bb5f75decb34c8ed"><code>23453f6</code></a>
Update react-lib-tools dep</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/f757fb90367c7417fd5708adb9c9ec908ac8cc10"><code>f757fb9</code></a>
Update react-lib-tools dep</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/cdaec0d674ab3c563bc42d6fd6db3415724fa604"><code>cdaec0d</code></a>
Fix typos (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/764">#764</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/213232f3156f2cfe790cce5ad970adb0039a60d4"><code>213232f</code></a>
Fix TSC error in config file</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/74cc7f8cfdb7792843f2fcdef0e3686b817ba037"><code>74cc7f8</code></a>
CI now runs the e2e tests against production builds</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/558e0d6f1af9a82af2004a58a426ad4043fc5119"><code>558e0d6</code></a>
Run CI on main</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/b903cd9805e1f69d63810d5f31d88ae7a64b030b"><code>b903cd9</code></a>
Speed up e2e tests</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.4...4.14.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.4&new-version=4.14.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:52:48 +00:00
dependabot[bot] 97f426c0d4 chore(deps): Bump i18next from 26.4.3 to 26.4.4 (#2239) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.4.3 to
26.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.4.4</h2>
<ul>
<li>fix(security): the nesting regexp no longer backtracks exponentially
(ReDoS) on an unclosed <code>$t(</code>. Its repeated group had
overlapping alternatives (<code>[^()&quot;']+</code> inside
<code>(?:...)*?</code>, and inside parentheses <code>[^()]</code> also
matched quotes), so a string containing <code>$t(</code> without a
closing <code>)</code> made the engine try every way to split the text:
about 2x the runtime per extra character, and a ~25 character value hung
<code>t()</code> for minutes. With the default config this was reachable
through any interpolated value (<code>t('greet', { name:
'$t(aaaaaaaaaaaaaaaaaaaaaaaa' })</code>): escaping does not touch
<code>$</code>, <code>t</code> or <code>(</code>, and the
<code>skipOnVariables</code> check runs the regexp on the interpolated
result, so <code>nest: false</code> did not help either. Every
alternative now starts with a different character (plain char,
<code>&quot;</code>, <code>'</code> or <code>(</code>), so there is only
one way to match and the cost is linear. Quoted strings and one level of
parentheses in nesting options keep working (<a
href="https://redirect.github.com/i18next/i18next/issues/2336">#2336</a>).
The only difference: a lone <code>&quot;</code> or <code>'</code> inside
unquoted parentheses within <code>$t(...)</code> is no longer matched.
Affects 25.3.3 to 26.4.3. Thanks to Anisetti Chaitanya Eshwar Prasad for
the responsible disclosure.</li>
<li>fix(security): <code>nest()</code> now resolves <code>$t(...)</code>
in a single pass and no longer nests text that came out of a resolved
value. Every nested lookup reset the shared nesting regexp, so the loop
started over from the beginning of the string after each match. That had
two effects. First, a <code>$t(...)</code> inside a variable that the
nested lookup deliberately kept literal (default <code>skipOnVariables:
true</code>) was resolved anyway by the outer loop: with <code>outer: 'A
$t(inner) B'</code> and <code>inner: 'Hi {{name}}'</code>,
<code>t('outer', { name: '$t(secret)' })</code> rendered the
<code>secret</code> translation. It now stays <code>A Hi $t(secret)
B</code>, the same as without the outer nesting; with
<code>skipOnVariables: false</code> it is still resolved. Second, the
cost was quadratic when an unclosed <code>$t(</code> preceded many
nestings, which matters when an app passes untrusted input as the key
itself (<code>t(userInput)</code>): 20,000 nestings took ~1.4 s, now ~25
ms. The resolved value is now sliced into the result instead of going
through <code>String.replace</code>, so <code>$&amp;</code>,
<code>$`</code>, <code>$'</code> and <code>$$</code> stay literal as
before (26.4.2).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.4.4</h2>
<ul>
<li>fix(security): the nesting regexp no longer backtracks exponentially
(ReDoS) on an unclosed <code>$t(</code>. Its repeated group had
overlapping alternatives (<code>[^()&quot;']+</code> inside
<code>(?:...)*?</code>, and inside parentheses <code>[^()]</code> also
matched quotes), so a string containing <code>$t(</code> without a
closing <code>)</code> made the engine try every way to split the text:
about 2x the runtime per extra character, and a ~25 character value hung
<code>t()</code> for minutes. With the default config this was reachable
through any interpolated value (<code>t('greet', { name:
'$t(aaaaaaaaaaaaaaaaaaaaaaaa' })</code>): escaping does not touch
<code>$</code>, <code>t</code> or <code>(</code>, and the
<code>skipOnVariables</code> check runs the regexp on the interpolated
result, so <code>nest: false</code> did not help either. Every
alternative now starts with a different character (plain char,
<code>&quot;</code>, <code>'</code> or <code>(</code>), so there is only
one way to match and the cost is linear. Quoted strings and one level of
parentheses in nesting options keep working (<a
href="https://redirect.github.com/i18next/i18next/issues/2336">#2336</a>).
The only difference: a lone <code>&quot;</code> or <code>'</code> inside
unquoted parentheses within <code>$t(...)</code> is no longer matched.
Affects 25.3.3 to 26.4.3. See advisory <a
href="https://github.com/i18next/i18next/security/advisories/GHSA-5jr9-983r-c8x4">GHSA-5jr9-983r-c8x4</a>,
CVSS 7.5 (<code>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</code>).
Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible
disclosure.</li>
<li>fix(security): <code>nest()</code> now resolves <code>$t(...)</code>
in a single pass and no longer nests text that came out of a resolved
value. Every nested lookup reset the shared nesting regexp, so the loop
started over from the beginning of the string after each match. That had
two effects. First, a <code>$t(...)</code> inside a variable that the
nested lookup deliberately kept literal (default <code>skipOnVariables:
true</code>) was resolved anyway by the outer loop: with <code>outer: 'A
$t(inner) B'</code> and <code>inner: 'Hi {{name}}'</code>,
<code>t('outer', { name: '$t(secret)' })</code> rendered the
<code>secret</code> translation. It now stays <code>A Hi $t(secret)
B</code>, the same as without the outer nesting; with
<code>skipOnVariables: false</code> it is still resolved. Second, the
cost was quadratic when an unclosed <code>$t(</code> preceded many
nestings, which matters when an app passes untrusted input as the key
itself (<code>t(userInput)</code>): 20,000 nestings took ~1.4 s, now ~25
ms. The resolved value is now sliced into the result instead of going
through <code>String.replace</code>, so <code>$&amp;</code>,
<code>$`</code>, <code>$'</code> and <code>$$</code> stay literal as
before (26.4.2).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/f6a7746d119790f07bc03ba86b130b090af8e443"><code>f6a7746</code></a>
26.4.4</li>
<li><a
href="https://github.com/i18next/i18next/commit/25988d5405e8e57415b2550af179f512c33ca2be"><code>25988d5</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/c9f8ebab17b456b5837e61a2e542ee27d190e151"><code>c9f8eba</code></a>
fix(security): nesting regexp ReDoS on unclosed $t( and single-pass
nest(), c...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.4.3...v26.4.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.3&new-version=26.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-15 13:58:11 +00:00
dependabot[bot] 5ae36a456b chore(deps-dev): Bump the vitest group with 2 updates (#2238) 
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.4</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>experimental</strong>:
<ul>
<li>Tag cache directories with CACHEDIR.TAG  -  by <a
href="https://github.com/lifeiscontent"><code>@​lifeiscontent</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11461">vitest-dev/vitest#11461</a>
<a href="https://github.com/vitest-dev/vitest/commit/a8ea3c8fd"><!-- raw
HTML omitted -->(a8ea3)<!-- raw HTML omitted --></a></li>
<li>Support <code>test.ui.theme</code> option  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11499">vitest-dev/vitest#11499</a>
<a href="https://github.com/vitest-dev/vitest/commit/1da66405d"><!-- raw
HTML omitted -->(1da66)<!-- raw HTML omitted --></a></li>
<li>Highlight selector multiple matches in trace view  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11489">vitest-dev/vitest#11489</a>
<a href="https://github.com/vitest-dev/vitest/commit/5abba1e1b"><!-- raw
HTML omitted -->(5abba)<!-- raw HTML omitted --></a></li>
<li>Print how many tests were affected and a total when running
<code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11424">vitest-dev/vitest#11424</a>
<a href="https://github.com/vitest-dev/vitest/commit/a23368585"><!-- raw
HTML omitted -->(a2336)<!-- raw HTML omitted --></a></li>
<li>Add an option to cache dependencies instead of statically parsing
them  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11515">vitest-dev/vitest#11515</a>
<a href="https://github.com/vitest-dev/vitest/commit/c06012ac8"><!-- raw
HTML omitted -->(c0601)<!-- raw HTML omitted --></a></li>
<li>Add fit and zoom controls to trace viewer  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11490">vitest-dev/vitest#11490</a>
<a href="https://github.com/vitest-dev/vitest/commit/f5dd99ed0"><!-- raw
HTML omitted -->(f5dd9)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Fail the run on git and location filter errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11430">vitest-dev/vitest#11430</a>
<a href="https://github.com/vitest-dev/vitest/commit/30d0304d2"><!-- raw
HTML omitted -->(30d03)<!-- raw HTML omitted --></a></li>
<li>Enable fsModuleCache by default  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11435">vitest-dev/vitest#11435</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad208cc29"><!-- raw
HTML omitted -->(ad208)<!-- raw HTML omitted --></a></li>
<li>Track project files and mocks with --changed  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11432">vitest-dev/vitest#11432</a>
<a href="https://github.com/vitest-dev/vitest/commit/b0f2b3bb9"><!-- raw
HTML omitted -->(b0f2b)<!-- raw HTML omitted --></a></li>
<li>Refactor caching, fix <code>:</code> in project and change the shape
of <code>results</code> cache  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11453">vitest-dev/vitest#11453</a>
<a href="https://github.com/vitest-dev/vitest/commit/9673c49a4"><!-- raw
HTML omitted -->(9673c)<!-- raw HTML omitted --></a></li>
<li>Keep full <code>$</code> string values when
<code>taskTitleValueFormatTruncate</code> is 0  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11485">vitest-dev/vitest#11485</a>
<a href="https://github.com/vitest-dev/vitest/commit/4f7e1799b"><!-- raw
HTML omitted -->(4f7e1)<!-- raw HTML omitted --></a></li>
<li>Resolve node builtins in client environments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11417">vitest-dev/vitest#11417</a>
<a href="https://github.com/vitest-dev/vitest/commit/56b319ac6"><!-- raw
HTML omitted -->(56b31)<!-- raw HTML omitted --></a></li>
<li>Fix module graph builtin externals after <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11421">#11421</a>
 -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11491">vitest-dev/vitest#11491</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11421">vitest-dev/vitest#11421</a>
<a href="https://github.com/vitest-dev/vitest/commit/008e184cb"><!-- raw
HTML omitted -->(008e1)<!-- raw HTML omitted --></a></li>
<li>Wrap module mocks during in-source testing  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11505">vitest-dev/vitest#11505</a>
<a href="https://github.com/vitest-dev/vitest/commit/36d19cb00"><!-- raw
HTML omitted -->(36d19)<!-- raw HTML omitted --></a></li>
<li>Handle line endings in snapshot  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11522">vitest-dev/vitest#11522</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c468aa40"><!-- raw
HTML omitted -->(4c468)<!-- raw HTML omitted --></a></li>
<li>Respect root in projects  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11521">vitest-dev/vitest#11521</a>
<a href="https://github.com/vitest-dev/vitest/commit/26642f793"><!-- raw
HTML omitted -->(26642)<!-- raw HTML omitted --></a></li>
<li>Resolve mocks in directories with spaces  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11539">vitest-dev/vitest#11539</a>
<a href="https://github.com/vitest-dev/vitest/commit/caaef9416"><!-- raw
HTML omitted -->(caaef)<!-- raw HTML omitted --></a></li>
<li><strong>api</strong>:
<ul>
<li>Publish the api token atomically  -  by <a
href="https://github.com/umairnawaz333"><code>@​umairnawaz333</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11323">vitest-dev/vitest#11323</a>
<a href="https://github.com/vitest-dev/vitest/commit/6f990fef1"><!-- raw
HTML omitted -->(6f990)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>browser</strong>:
<ul>
<li>Close the mock route interception race  -  by <a
href="https://github.com/cplieger"><code>@​cplieger</code></a> and <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8339">vitest-dev/vitest#8339</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11083">vitest-dev/vitest#11083</a>
<a href="https://github.com/vitest-dev/vitest/commit/d6620fae6"><!-- raw
HTML omitted -->(d6620)<!-- raw HTML omitted --></a></li>
<li>Allow toHaveTextContent without arguments  -  by <a
href="https://github.com/nomadical"><code>@​nomadical</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11425">vitest-dev/vitest#11425</a>
<a href="https://github.com/vitest-dev/vitest/commit/8ebcf5f8a"><!-- raw
HTML omitted -->(8ebcf)<!-- raw HTML omitted --></a></li>
<li>Apply API options without browser config  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10852">vitest-dev/vitest#10852</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad055837b"><!-- raw
HTML omitted -->(ad055)<!-- raw HTML omitted --></a></li>
<li>Preserve undefined command arguments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> and
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11497">vitest-dev/vitest#11497</a>
<a href="https://github.com/vitest-dev/vitest/commit/1576d3d89"><!-- raw
HTML omitted -->(1576d)<!-- raw HTML omitted --></a></li>
<li>Wait for setup mocks before importing a test file  -  by <a
href="https://github.com/kasperpeulen"><code>@​kasperpeulen</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11520">vitest-dev/vitest#11520</a>
<a href="https://github.com/vitest-dev/vitest/commit/b61d1ced3"><!-- raw
HTML omitted -->(b61d1)<!-- raw HTML omitted --></a></li>
<li>Avoid extra scroll outside the iframe  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11523">vitest-dev/vitest#11523</a>
<a href="https://github.com/vitest-dev/vitest/commit/662e8a363"><!-- raw
HTML omitted -->(662e8)<!-- raw HTML omitted --></a></li>
<li>Run browser instances as workers  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11525">vitest-dev/vitest#11525</a>
<a href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc"><!-- raw
HTML omitted -->(bf04b)<!-- raw HTML omitted --></a>
<ul>
<li>⚠️ This can degrade performance if you have a custom
<code>maxWorkers</code> setting. Previously, it was applied incorrectly
and could lead to Vitest using too many resources. For example, a lower
number would still open too many browsers. Fixing it means Vitest opens
less instances by default now.</li>
</ul>
</li>
<li>Open one cdp session per tester  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11542">vitest-dev/vitest#11542</a>
<a href="https://github.com/vitest-dev/vitest/commit/69e6369f6"><!-- raw
HTML omitted -->(69e63)<!-- raw HTML omitted --></a></li>
<li>Clean up unmocked and pending mocks  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11537">vitest-dev/vitest#11537</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c9552173"><!-- raw
HTML omitted -->(5c955)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>coverage</strong>:
<ul>
<li>V8 browser memory leak between test files  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11466">vitest-dev/vitest#11466</a>
<a href="https://github.com/vitest-dev/vitest/commit/2297d93a8"><!-- raw
HTML omitted -->(2297d)<!-- raw HTML omitted --></a></li>
<li><code>allowExternal</code> fails to include uncovered files  -  by
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11513">vitest-dev/vitest#11513</a>
<a href="https://github.com/vitest-dev/vitest/commit/4ef000a93"><!-- raw
HTML omitted -->(4ef00)<!-- raw HTML omitted --></a></li>
<li>Filenames containing brackets incorrectly showing as uncovered  - 
by <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11531">vitest-dev/vitest#11531</a>
<a href="https://github.com/vitest-dev/vitest/commit/0fa80f53c"><!-- raw
HTML omitted -->(0fa80)<!-- raw HTML omitted --></a></li>
<li>Istanbul coverage wrong when module transform warmups  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11529">vitest-dev/vitest#11529</a>
<a href="https://github.com/vitest-dev/vitest/commit/9f61dcca2"><!-- raw
HTML omitted -->(9f61d)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>deps</strong>:
<ul>
<li>Update all non-major dependencies  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11167">vitest-dev/vitest#11167</a>
<a href="https://github.com/vitest-dev/vitest/commit/c74e099a9"><!-- raw
HTML omitted -->(c74e0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>expect</strong>:
<ul>
<li>Fix <code>Map</code> and <code>Set</code> deep equality in some
assertions  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11402">vitest-dev/vitest#11402</a>
<a href="https://github.com/vitest-dev/vitest/commit/b4e79fd7a"><!-- raw
HTML omitted -->(b4e79)<!-- raw HTML omitted --></a></li>
<li>Check value in chai-style returned  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11500">vitest-dev/vitest#11500</a>
<a href="https://github.com/vitest-dev/vitest/commit/1aca02a21"><!-- raw
HTML omitted -->(1aca0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>mocker</strong>:
<ul>
<li>Fix native loader mocking edge cases  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11540">vitest-dev/vitest#11540</a>
<a href="https://github.com/vitest-dev/vitest/commit/cd423ba04"><!-- raw
HTML omitted -->(cd423)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pretty-format</strong>:</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40"><code>6a11cf6</code></a>
chore: release v5.0.4 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11554">#11554</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/2297d93a854968d2ffee6025700c69099e6b7f80"><code>2297d93</code></a>
fix(coverage): v8 browser memory leak between test files (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11466">#11466</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/c74e099a9d17e24e9816878165af4818df84a631"><code>c74e099</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11167">#11167</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest` from 5.0.3 to 5.0.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.4</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>experimental</strong>:
<ul>
<li>Tag cache directories with CACHEDIR.TAG  -  by <a
href="https://github.com/lifeiscontent"><code>@​lifeiscontent</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11461">vitest-dev/vitest#11461</a>
<a href="https://github.com/vitest-dev/vitest/commit/a8ea3c8fd"><!-- raw
HTML omitted -->(a8ea3)<!-- raw HTML omitted --></a></li>
<li>Support <code>test.ui.theme</code> option  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11499">vitest-dev/vitest#11499</a>
<a href="https://github.com/vitest-dev/vitest/commit/1da66405d"><!-- raw
HTML omitted -->(1da66)<!-- raw HTML omitted --></a></li>
<li>Highlight selector multiple matches in trace view  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11489">vitest-dev/vitest#11489</a>
<a href="https://github.com/vitest-dev/vitest/commit/5abba1e1b"><!-- raw
HTML omitted -->(5abba)<!-- raw HTML omitted --></a></li>
<li>Print how many tests were affected and a total when running
<code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11424">vitest-dev/vitest#11424</a>
<a href="https://github.com/vitest-dev/vitest/commit/a23368585"><!-- raw
HTML omitted -->(a2336)<!-- raw HTML omitted --></a></li>
<li>Add an option to cache dependencies instead of statically parsing
them  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11515">vitest-dev/vitest#11515</a>
<a href="https://github.com/vitest-dev/vitest/commit/c06012ac8"><!-- raw
HTML omitted -->(c0601)<!-- raw HTML omitted --></a></li>
<li>Add fit and zoom controls to trace viewer  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11490">vitest-dev/vitest#11490</a>
<a href="https://github.com/vitest-dev/vitest/commit/f5dd99ed0"><!-- raw
HTML omitted -->(f5dd9)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Fail the run on git and location filter errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11430">vitest-dev/vitest#11430</a>
<a href="https://github.com/vitest-dev/vitest/commit/30d0304d2"><!-- raw
HTML omitted -->(30d03)<!-- raw HTML omitted --></a></li>
<li>Enable fsModuleCache by default  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11435">vitest-dev/vitest#11435</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad208cc29"><!-- raw
HTML omitted -->(ad208)<!-- raw HTML omitted --></a></li>
<li>Track project files and mocks with --changed  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11432">vitest-dev/vitest#11432</a>
<a href="https://github.com/vitest-dev/vitest/commit/b0f2b3bb9"><!-- raw
HTML omitted -->(b0f2b)<!-- raw HTML omitted --></a></li>
<li>Refactor caching, fix <code>:</code> in project and change the shape
of <code>results</code> cache  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11453">vitest-dev/vitest#11453</a>
<a href="https://github.com/vitest-dev/vitest/commit/9673c49a4"><!-- raw
HTML omitted -->(9673c)<!-- raw HTML omitted --></a></li>
<li>Keep full <code>$</code> string values when
<code>taskTitleValueFormatTruncate</code> is 0  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11485">vitest-dev/vitest#11485</a>
<a href="https://github.com/vitest-dev/vitest/commit/4f7e1799b"><!-- raw
HTML omitted -->(4f7e1)<!-- raw HTML omitted --></a></li>
<li>Resolve node builtins in client environments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11417">vitest-dev/vitest#11417</a>
<a href="https://github.com/vitest-dev/vitest/commit/56b319ac6"><!-- raw
HTML omitted -->(56b31)<!-- raw HTML omitted --></a></li>
<li>Fix module graph builtin externals after <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11421">#11421</a>
 -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11491">vitest-dev/vitest#11491</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11421">vitest-dev/vitest#11421</a>
<a href="https://github.com/vitest-dev/vitest/commit/008e184cb"><!-- raw
HTML omitted -->(008e1)<!-- raw HTML omitted --></a></li>
<li>Wrap module mocks during in-source testing  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11505">vitest-dev/vitest#11505</a>
<a href="https://github.com/vitest-dev/vitest/commit/36d19cb00"><!-- raw
HTML omitted -->(36d19)<!-- raw HTML omitted --></a></li>
<li>Handle line endings in snapshot  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11522">vitest-dev/vitest#11522</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c468aa40"><!-- raw
HTML omitted -->(4c468)<!-- raw HTML omitted --></a></li>
<li>Respect root in projects  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11521">vitest-dev/vitest#11521</a>
<a href="https://github.com/vitest-dev/vitest/commit/26642f793"><!-- raw
HTML omitted -->(26642)<!-- raw HTML omitted --></a></li>
<li>Resolve mocks in directories with spaces  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11539">vitest-dev/vitest#11539</a>
<a href="https://github.com/vitest-dev/vitest/commit/caaef9416"><!-- raw
HTML omitted -->(caaef)<!-- raw HTML omitted --></a></li>
<li><strong>api</strong>:
<ul>
<li>Publish the api token atomically  -  by <a
href="https://github.com/umairnawaz333"><code>@​umairnawaz333</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11323">vitest-dev/vitest#11323</a>
<a href="https://github.com/vitest-dev/vitest/commit/6f990fef1"><!-- raw
HTML omitted -->(6f990)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>browser</strong>:
<ul>
<li>Close the mock route interception race  -  by <a
href="https://github.com/cplieger"><code>@​cplieger</code></a> and <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8339">vitest-dev/vitest#8339</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11083">vitest-dev/vitest#11083</a>
<a href="https://github.com/vitest-dev/vitest/commit/d6620fae6"><!-- raw
HTML omitted -->(d6620)<!-- raw HTML omitted --></a></li>
<li>Allow toHaveTextContent without arguments  -  by <a
href="https://github.com/nomadical"><code>@​nomadical</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11425">vitest-dev/vitest#11425</a>
<a href="https://github.com/vitest-dev/vitest/commit/8ebcf5f8a"><!-- raw
HTML omitted -->(8ebcf)<!-- raw HTML omitted --></a></li>
<li>Apply API options without browser config  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10852">vitest-dev/vitest#10852</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad055837b"><!-- raw
HTML omitted -->(ad055)<!-- raw HTML omitted --></a></li>
<li>Preserve undefined command arguments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> and
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11497">vitest-dev/vitest#11497</a>
<a href="https://github.com/vitest-dev/vitest/commit/1576d3d89"><!-- raw
HTML omitted -->(1576d)<!-- raw HTML omitted --></a></li>
<li>Wait for setup mocks before importing a test file  -  by <a
href="https://github.com/kasperpeulen"><code>@​kasperpeulen</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11520">vitest-dev/vitest#11520</a>
<a href="https://github.com/vitest-dev/vitest/commit/b61d1ced3"><!-- raw
HTML omitted -->(b61d1)<!-- raw HTML omitted --></a></li>
<li>Avoid extra scroll outside the iframe  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11523">vitest-dev/vitest#11523</a>
<a href="https://github.com/vitest-dev/vitest/commit/662e8a363"><!-- raw
HTML omitted -->(662e8)<!-- raw HTML omitted --></a></li>
<li>Run browser instances as workers  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11525">vitest-dev/vitest#11525</a>
<a href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc"><!-- raw
HTML omitted -->(bf04b)<!-- raw HTML omitted --></a>
<ul>
<li>⚠️ This can degrade performance if you have a custom
<code>maxWorkers</code> setting. Previously, it was applied incorrectly
and could lead to Vitest using too many resources. For example, a lower
number would still open too many browsers. Fixing it means Vitest opens
less instances by default now.</li>
</ul>
</li>
<li>Open one cdp session per tester  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11542">vitest-dev/vitest#11542</a>
<a href="https://github.com/vitest-dev/vitest/commit/69e6369f6"><!-- raw
HTML omitted -->(69e63)<!-- raw HTML omitted --></a></li>
<li>Clean up unmocked and pending mocks  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11537">vitest-dev/vitest#11537</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c9552173"><!-- raw
HTML omitted -->(5c955)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>coverage</strong>:
<ul>
<li>V8 browser memory leak between test files  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11466">vitest-dev/vitest#11466</a>
<a href="https://github.com/vitest-dev/vitest/commit/2297d93a8"><!-- raw
HTML omitted -->(2297d)<!-- raw HTML omitted --></a></li>
<li><code>allowExternal</code> fails to include uncovered files  -  by
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11513">vitest-dev/vitest#11513</a>
<a href="https://github.com/vitest-dev/vitest/commit/4ef000a93"><!-- raw
HTML omitted -->(4ef00)<!-- raw HTML omitted --></a></li>
<li>Filenames containing brackets incorrectly showing as uncovered  - 
by <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11531">vitest-dev/vitest#11531</a>
<a href="https://github.com/vitest-dev/vitest/commit/0fa80f53c"><!-- raw
HTML omitted -->(0fa80)<!-- raw HTML omitted --></a></li>
<li>Istanbul coverage wrong when module transform warmups  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11529">vitest-dev/vitest#11529</a>
<a href="https://github.com/vitest-dev/vitest/commit/9f61dcca2"><!-- raw
HTML omitted -->(9f61d)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>deps</strong>:
<ul>
<li>Update all non-major dependencies  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11167">vitest-dev/vitest#11167</a>
<a href="https://github.com/vitest-dev/vitest/commit/c74e099a9"><!-- raw
HTML omitted -->(c74e0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>expect</strong>:
<ul>
<li>Fix <code>Map</code> and <code>Set</code> deep equality in some
assertions  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11402">vitest-dev/vitest#11402</a>
<a href="https://github.com/vitest-dev/vitest/commit/b4e79fd7a"><!-- raw
HTML omitted -->(b4e79)<!-- raw HTML omitted --></a></li>
<li>Check value in chai-style returned  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11500">vitest-dev/vitest#11500</a>
<a href="https://github.com/vitest-dev/vitest/commit/1aca02a21"><!-- raw
HTML omitted -->(1aca0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>mocker</strong>:
<ul>
<li>Fix native loader mocking edge cases  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11540">vitest-dev/vitest#11540</a>
<a href="https://github.com/vitest-dev/vitest/commit/cd423ba04"><!-- raw
HTML omitted -->(cd423)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pretty-format</strong>:</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40"><code>6a11cf6</code></a>
chore: release v5.0.4 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11554">#11554</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de"><code>58c86ed</code></a>
chore(deps): update all non-major dependencies (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11550">#11550</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/0fa80f53c2afa3429ead7f357f0ad266b39b240a"><code>0fa80f5</code></a>
fix(coverage): filenames containing brackets incorrectly showing as
uncovered...</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc7235949e63490d310cdca00e61b3e4a"><code>bf04b9c</code></a>
fix(browser): run browser instances as workers (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11525">#11525</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/3e3624c5e5ecf77b20065da1aeb60f1182db0ccd"><code>3e3624c</code></a>
refactor: resolve maxWorkers once in config (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11524">#11524</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/26642f7936e04ec2591ad1d9b3500642423ba8ce"><code>26642f7</code></a>
fix: respect root in projects (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11521">#11521</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/c06012ac8419ca4ea14a8808aedc8b0120111f81"><code>c06012a</code></a>
feat(experimental): add an option to cache dependencies instead of
statically...</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/4ef000a938ca3e54eee1c8dd02e2eb9b1afff0c3"><code>4ef000a</code></a>
fix(coverage): <code>allowExternal</code> fails to include uncovered
files (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11513">#11513</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/1da66405d5e979299601a8c7fd13fb0f78e74495"><code>1da6640</code></a>
feat: support <code>test.ui.theme</code> option (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11499">#11499</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/b618afd5cce6a903ca16e0dd9c8f00b58bb0b474"><code>b618afd</code></a>
fix(vm): bind <code>this</code> to <code>module.exports</code> (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11504">#11504</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-15 13:55:23 +00:00
dependabot[bot] edf42be679 chore(deps): Bump react-resizable-panels from 4.14.3 to 4.14.4 in the react group (#2237) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.3 to 4.14.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.4</h2>
<ul>
<li>Fix pointer events in one document affecting groups mounted in
another (e.g. a popup window). The resize cursor is now only shown in
the document that contains the active group. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/762">#762</a></li>
<li>Fix an error thrown by an <code>onLayoutChange</code>,
<code>onLayoutChanged</code>, or <code>onResize</code> callback leaving
a drag stuck in the active state or preventing other groups from being
updated. The error is now re-thrown once all groups have been updated. -
<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/763">#763</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.4</h2>
<ul>
<li>Fix pointer events in one document affecting groups mounted in
another (e.g. a popup window). The resize cursor is now only shown in
the document that contains the active group. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/762">#762</a></li>
<li>Fix an error thrown by an <code>onLayoutChange</code>,
<code>onLayoutChanged</code>, or <code>onResize</code> callback leaving
a drag stuck in the active state or preventing other groups from being
updated. The error is now re-thrown once all groups have been updated. -
<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/763">#763</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/b070a13ecad02ac814a7de85a4a288febdebfb61"><code>b070a13</code></a>
4.14.3 -&gt; 4.14.4</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/cf40d48f1ed06441344c0546411e43c2ab1816fc"><code>cf40d48</code></a>
Defer errors thrown by layout change callbacks so drags always finish
cleanly...</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/ada7a2130f73112c733804cb8bdb4aea7e7ef5b2"><code>ada7a21</code></a>
fix: ignore hit targets from other documents (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/762">#762</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/f4c06add8848836e65cbbd20a02f8de0d6be4618"><code>f4c06ad</code></a>
Update CHANGELOG</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.3...4.14.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.3&new-version=4.14.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-14 21:17:00 +00:00
dependabot[bot] 8787a397dc chore(deps): Bump maplibre-gl from 6.13.0 to 6.14.0 (#2236) 
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from
6.13.0 to 6.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's
releases</a>.</em></p>
<blockquote>
<h2>v6.14.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Allow calling <code>new Map({ globalState: { ... }})</code> and
<code>setStyle({ globalState: ... })</code> to provide an initial global
state for the map style, overriding the global state defaults from the
style (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7632">#7632</a>)
(by <a
href="https://github.com/hiddewie"><code>@​hiddewie</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>fix: <code>ScaleControl</code> throwing when its sample points miss
the globe (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8720">#8720</a>)
(by <a
href="https://github.com/SatvikMishra08"><code>@​SatvikMishra08</code></a>)</li>
<li>Fix a rendering crash when <code>removeFeatureState</code> removes a
property before feature state is set (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8715">#8715</a>)
(by <a
href="https://github.com/yeomin4242"><code>@​yeomin4242</code></a>)</li>
<li>Work around blank, unresponsive maps on affected iPadOS 16 Safari
devices (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8364">#8364</a>)
(by <a
href="https://github.com/samuelsmarason"><code>@​samuelsmarason</code></a>)</li>
<li>Fix circles with <code>circle-pitch-alignment: map</code> being
drawn too large while the globe transitions to mercator (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8714">#8714</a>)
(by <a href="https://github.com/heikki"><code>@​heikki</code></a>)</li>
<li>Fix <code>map.resize(eventData, false)</code> constraining the
camera with the <code>vertical-perspective</code> projection (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8695">#8695</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix an uncaught error when <code>setStyle</code> is called while the
WebGL context is lost, since 6.12.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8693">#8693</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix the view sliding hundreds of meters off the center when terrain
is switched on during a gesture (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8688">#8688</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the camera jumping back at the end of a pan, flick or rotation
into terrain (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8692">#8692</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>flyTo</code> dropping the <code>offset</code> and
<code>around</code> options under <code>prefers-reduced-motion</code>,
so a reduced-motion fly lands at the same camera as the animated one (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8730">#8730</a>)
(by <a
href="https://github.com/maartenla"><code>@​maartenla</code></a>)</li>
<li>Fix <code>load</code> and <code>idle</code> never firing when the
last tile fails with a status other than 404 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8733">#8733</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>6.14.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Allow calling <code>new Map({ globalState: { ... }})</code> and
<code>setStyle({ globalState: ... })</code> to provide an initial global
state for the map style, overriding the global state defaults from the
style (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7632">#7632</a>)
(by <a
href="https://github.com/hiddewie"><code>@​hiddewie</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>fix: <code>ScaleControl</code> throwing when its sample points miss
the globe (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8720">#8720</a>)
(by <a
href="https://github.com/SatvikMishra08"><code>@​SatvikMishra08</code></a>)</li>
<li>Fix a rendering crash when <code>removeFeatureState</code> removes a
property before feature state is set (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8715">#8715</a>)
(by <a
href="https://github.com/yeomin4242"><code>@​yeomin4242</code></a>)</li>
<li>Work around blank, unresponsive maps on affected iPadOS 16 Safari
devices (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8364">#8364</a>)
(by <a
href="https://github.com/samuelsmarason"><code>@​samuelsmarason</code></a>)</li>
<li>Fix circles with <code>circle-pitch-alignment: map</code> being
drawn too large while the globe transitions to mercator (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8714">#8714</a>)
(by <a href="https://github.com/heikki"><code>@​heikki</code></a>)</li>
<li>Fix <code>map.resize(eventData, false)</code> constraining the
camera with the <code>vertical-perspective</code> projection (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8695">#8695</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix an uncaught error when <code>setStyle</code> is called while the
WebGL context is lost, since 6.12.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8693">#8693</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix the view sliding hundreds of meters off the center when terrain
is switched on during a gesture (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8688">#8688</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the camera jumping back at the end of a pan, flick or rotation
into terrain (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8692">#8692</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>flyTo</code> dropping the <code>offset</code> and
<code>around</code> options under <code>prefers-reduced-motion</code>,
so a reduced-motion fly lands at the same camera as the animated one (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8730">#8730</a>)
(by <a
href="https://github.com/maartenla"><code>@​maartenla</code></a>)</li>
<li>Fix <code>load</code> and <code>idle</code> never firing when the
last tile fails with a status other than 404 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8733">#8733</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/72927301b7594536630d896c45c64c4d0d4c587f"><code>7292730</code></a>
Bump js version to 6.14.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8737">#8737</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/9d3c6b3fbf7ed80de3647e12aaedb77b20e370b4"><code>9d3c6b3</code></a>
Fix rendering crash when removing a property before feature state is set
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8715">#8715</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/8e23433a1e908fe99e3c026e0cf9b2df3eccb527"><code>8e23433</code></a>
fix: load and idle never firing when the last tile fails with a non-404
statu...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/873377f3752176d80cba25fd7db50f8a8068b7f4"><code>873377f</code></a>
feat: Allow providing initial global state and style transform for map
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8264">#8264</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/5d5dea20251577887eff9652ff009b02903d048a"><code>5d5dea2</code></a>
Keep offset and around when flyTo honors prefers-reduced-motion (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8730">#8730</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/7e493d21b8bcdb1bf741a81be50b19025501c42a"><code>7e493d2</code></a>
fix: <code>ScaleControl</code> throwing when its sample points miss the
globe (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8720">#8720</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/6d26435e525263e6e04926db0a7211613aa8e69e"><code>6d26435</code></a>
chore(deps-dev): bump monocart-coverage-reports from 2.13.0 to 2.13.1
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8728">#8728</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/398f8740025c1973fe90667a8415ad567984be10"><code>398f874</code></a>
chore(deps): bump zensical/zensical from 0.0.67 to 0.0.68 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8729">#8729</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/93f5c6ce4131a1a588ba37c23fb6afece7d36cc5"><code>93f5c6c</code></a>
chore(deps-dev): bump the eslint group with 2 updates (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8724">#8724</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/299ab7e914c3f5ea75ab2a9cfdde5b7ebd6bc45b"><code>299ab7e</code></a>
chore(deps-dev): bump postcss from 8.5.28 to 8.5.29 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8726">#8726</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v6.13.0...v6.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.13.0&new-version=6.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-14 21:14:54 +00:00
dependabot[bot] 61c08d2da0 chore(deps-dev): Bump vite from 8.3.3 to 8.3.4 (#2229) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.3.3 to 8.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.4</h2>
<h3>Features</h3>
<ul>
<li><strong>bundled-dev:</strong> support
<code>import.meta.hot.acceptExports</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>avoid mutating hmr defaults (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>)
(<a
href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li>
<li><strong>build:</strong> correct preloads when chunkImportMap is
enabled with non-root base (<a
href="https://redirect.github.com/vitejs/vite/issues/23698">#23698</a>)
(<a
href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd">2a8c0f0</a>)</li>
<li><strong>build:</strong> wait for in-flight stylesheets in preload
helper (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23652">#23652</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23662">#23662</a>)
(<a
href="https://github.com/vitejs/vite/commit/036b74599b2fe1d8c61475371b856ceb88d26963">036b745</a>)</li>
<li><strong>bundled-dev:</strong> serve <code>/@vite/client</code> and
stub <code>@vite/env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23664">#23664</a>)
(<a
href="https://github.com/vitejs/vite/commit/5afc5a8876624888fc1e8f43fed1c85c4b0e830b">5afc5a8</a>)</li>
<li><strong>client:</strong> skip rewriting unchanged adopted styles (<a
href="https://redirect.github.com/vitejs/vite/issues/23697">#23697</a>)
(<a
href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba">fa71469</a>)</li>
<li><strong>css:</strong> resolve imported preprocessors from their file
path with lightningcss (<a
href="https://redirect.github.com/vitejs/vite/issues/23688">#23688</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9">cf52011</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23648">#23648</a>)
(<a
href="https://github.com/vitejs/vite/commit/8a4c19cfc035f2dd203f2fa6d00ab9256a5e77c9">8a4c19c</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23649">#23649</a>)
(<a
href="https://github.com/vitejs/vite/commit/794516d50cff80e405bc9b3e5faac1c82987566c">794516d</a>)</li>
<li><strong>dev:</strong> a restart requested during a restart used to
be dropped (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23392">#23392</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23484">#23484</a>)
(<a
href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73">70d56ea</a>)</li>
<li>don't treat modules ending with js-like query as js (<a
href="https://redirect.github.com/vitejs/vite/issues/23687">#23687</a>)
(<a
href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0">fcb6f12</a>)</li>
<li><strong>html:</strong> avoid adding filesystem root to watcher (<a
href="https://redirect.github.com/vitejs/vite/issues/23689">#23689</a>)
(<a
href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778">3a7f2ae</a>)</li>
<li><strong>html:</strong> skip caching CSS of chunks in a cycle (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23628">#23628</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23636">#23636</a>)
(<a
href="https://github.com/vitejs/vite/commit/15d82f7dc679ab9c18d5ce2c3711157c2365ddd1">15d82f7</a>)</li>
<li><strong>optimizer:</strong> scan deep imports with custom extensions
(<a
href="https://redirect.github.com/vitejs/vite/issues/23678">#23678</a>)
(<a
href="https://github.com/vitejs/vite/commit/8579189bae8626b6ddab55a09325e209d62e027e">8579189</a>)</li>
<li>remove input option unescaping for now (<a
href="https://redirect.github.com/vitejs/vite/issues/23694">#23694</a>)
(<a
href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6">facc2fb</a>)</li>
<li><strong>server:</strong> match static aliases on path boundaries (<a
href="https://redirect.github.com/vitejs/vite/issues/23643">#23643</a>)
(<a
href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577">b28db28</a>)</li>
<li><strong>watcher:</strong> normalize file before root check in
<code>ensureWatchedFile</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23673">#23673</a>)
(<a
href="https://github.com/vitejs/vite/commit/12bb28c22379c8d2fe90088fa0eefbfa2ab3fb80">12bb28c</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>module-runner:</strong> skip cloning call sites that have no
source map (<a
href="https://redirect.github.com/vitejs/vite/issues/23646">#23646</a>)
(<a
href="https://github.com/vitejs/vite/commit/3d674869a50a0bca84a8cc8dc55bd35d57100e37">3d67486</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>bundled-dev:</strong> import CSS HMR helpers from
<code>/@vite/client</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23674">#23674</a>)
(<a
href="https://github.com/vitejs/vite/commit/182f5b2a65391da5bee05f9c3df1aeb3794e98d9">182f5b2</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4">8.3.4</a>
(2026-10-08)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li><strong>bundled-dev:</strong> support
<code>import.meta.hot.acceptExports</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>avoid mutating hmr defaults (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>)
(<a
href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li>
<li><strong>build:</strong> correct preloads when chunkImportMap is
enabled with non-root base (<a
href="https://redirect.github.com/vitejs/vite/issues/23698">#23698</a>)
(<a
href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd">2a8c0f0</a>)</li>
<li><strong>build:</strong> wait for in-flight stylesheets in preload
helper (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23652">#23652</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23662">#23662</a>)
(<a
href="https://github.com/vitejs/vite/commit/036b74599b2fe1d8c61475371b856ceb88d26963">036b745</a>)</li>
<li><strong>bundled-dev:</strong> serve <code>/@vite/client</code> and
stub <code>@vite/env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23664">#23664</a>)
(<a
href="https://github.com/vitejs/vite/commit/5afc5a8876624888fc1e8f43fed1c85c4b0e830b">5afc5a8</a>)</li>
<li><strong>client:</strong> skip rewriting unchanged adopted styles (<a
href="https://redirect.github.com/vitejs/vite/issues/23697">#23697</a>)
(<a
href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba">fa71469</a>)</li>
<li><strong>css:</strong> resolve imported preprocessors from their file
path with lightningcss (<a
href="https://redirect.github.com/vitejs/vite/issues/23688">#23688</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9">cf52011</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23648">#23648</a>)
(<a
href="https://github.com/vitejs/vite/commit/8a4c19cfc035f2dd203f2fa6d00ab9256a5e77c9">8a4c19c</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23649">#23649</a>)
(<a
href="https://github.com/vitejs/vite/commit/794516d50cff80e405bc9b3e5faac1c82987566c">794516d</a>)</li>
<li><strong>dev:</strong> a restart requested during a restart used to
be dropped (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23392">#23392</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23484">#23484</a>)
(<a
href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73">70d56ea</a>)</li>
<li>don't treat modules ending with js-like query as js (<a
href="https://redirect.github.com/vitejs/vite/issues/23687">#23687</a>)
(<a
href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0">fcb6f12</a>)</li>
<li><strong>html:</strong> avoid adding filesystem root to watcher (<a
href="https://redirect.github.com/vitejs/vite/issues/23689">#23689</a>)
(<a
href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778">3a7f2ae</a>)</li>
<li><strong>html:</strong> skip caching CSS of chunks in a cycle (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23628">#23628</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23636">#23636</a>)
(<a
href="https://github.com/vitejs/vite/commit/15d82f7dc679ab9c18d5ce2c3711157c2365ddd1">15d82f7</a>)</li>
<li><strong>optimizer:</strong> scan deep imports with custom extensions
(<a
href="https://redirect.github.com/vitejs/vite/issues/23678">#23678</a>)
(<a
href="https://github.com/vitejs/vite/commit/8579189bae8626b6ddab55a09325e209d62e027e">8579189</a>)</li>
<li>remove input option unescaping for now (<a
href="https://redirect.github.com/vitejs/vite/issues/23694">#23694</a>)
(<a
href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6">facc2fb</a>)</li>
<li><strong>server:</strong> match static aliases on path boundaries (<a
href="https://redirect.github.com/vitejs/vite/issues/23643">#23643</a>)
(<a
href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577">b28db28</a>)</li>
<li><strong>watcher:</strong> normalize file before root check in
<code>ensureWatchedFile</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23673">#23673</a>)
(<a
href="https://github.com/vitejs/vite/commit/12bb28c22379c8d2fe90088fa0eefbfa2ab3fb80">12bb28c</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>module-runner:</strong> skip cloning call sites that have no
source map (<a
href="https://redirect.github.com/vitejs/vite/issues/23646">#23646</a>)
(<a
href="https://github.com/vitejs/vite/commit/3d674869a50a0bca84a8cc8dc55bd35d57100e37">3d67486</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>bundled-dev:</strong> import CSS HMR helpers from
<code>/@vite/client</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23674">#23674</a>)
(<a
href="https://github.com/vitejs/vite/commit/182f5b2a65391da5bee05f9c3df1aeb3794e98d9">182f5b2</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/b6c20f6a8126d8561891e5fb9368e8fc9da37538"><code>b6c20f6</code></a>
release: v8.3.4 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23702">#23702</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577"><code>b28db28</code></a>
fix(server): match static aliases on path boundaries (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23643">#23643</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e"><code>bc0f21c</code></a>
feat(bundled-dev): support <code>import.meta.hot.acceptExports</code>
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23463">#23463</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba"><code>fa71469</code></a>
fix(client): skip rewriting unchanged adopted styles (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23697">#23697</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd"><code>2a8c0f0</code></a>
fix(build): correct preloads when chunkImportMap is enabled with
non-root bas...</li>
<li><a
href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778"><code>3a7f2ae</code></a>
fix(html): avoid adding filesystem root to watcher (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23689">#23689</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6"><code>facc2fb</code></a>
fix: remove input option unescaping for now (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23694">#23694</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73"><code>70d56ea</code></a>
fix(dev): a restart requested during a restart used to be dropped (fix
<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23392">#23392</a>...</li>
<li><a
href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9"><code>cf52011</code></a>
fix(css): resolve imported preprocessors from their file path with
lightningc...</li>
<li><a
href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0"><code>fcb6f12</code></a>
fix: don't treat modules ending with js-like query as js (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23687">#23687</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.3.4/packages/vite">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 15:09:24 +00:00
dependabot[bot] d391a1d2d8 chore(deps): Bump i18next from 26.4.2 to 26.4.3 (#2231) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.4.2 to
26.4.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.4.3</h2>
<ul>
<li>perf: <code>ResourceStore.hasLanguageSomeTranslations()</code> no
longer enumerates every key of a large bundle on each call. It ran
<code>Object.keys()</code> on the whole bundle just to learn whether it
had at least one key, and <code>init()</code> /
<code>changeLanguage()</code> reach it three times per instance (once
while picking the language, twice via
<code>setResolvedLanguage()</code>). With large flat bundles and one
i18next instance per SSR request reusing the same resources, that showed
up as measurable CPU work before any <code>t()</code> call. Bundle
objects already found non-empty are now remembered in a
<code>WeakSet</code> shared across instances, so later checks are O(1):
2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the
same as a one-key bundle. Only the non-empty result is cached. No API
removes single keys from a bundle, so a non-empty bundle stays
non-empty, and empty bundles are re-checked every time, so keys added
later (backend loads, <code>addResource</code>,
<code>addResourceBundle</code>, direct or silent changes) count right
away. The only edge case: a bundle emptied by hand with
<code>delete</code> on every key while it is still in the store keeps
counting as having translations; use <code>removeResourceBundle()</code>
for that. Thanks <a
href="https://github.com/dmchoi77"><code>@​dmchoi77</code></a> for the
detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2449">#2449</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.4.3</h2>
<ul>
<li>perf: <code>ResourceStore.hasLanguageSomeTranslations()</code> no
longer enumerates every key of a large bundle on each call. It ran
<code>Object.keys()</code> on the whole bundle just to learn whether it
had at least one key, and <code>init()</code> /
<code>changeLanguage()</code> reach it three times per instance (once
while picking the language, twice via
<code>setResolvedLanguage()</code>). With large flat bundles and one
i18next instance per SSR request reusing the same resources, that showed
up as measurable CPU work before any <code>t()</code> call. Bundle
objects already found non-empty are now remembered in a
<code>WeakSet</code> shared across instances, so later checks are O(1):
2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the
same as a one-key bundle. Only the non-empty result is cached. No API
removes single keys from a bundle, so a non-empty bundle stays
non-empty, and empty bundles are re-checked every time, so keys added
later (backend loads, <code>addResource</code>,
<code>addResourceBundle</code>, direct or silent changes) count right
away. The only edge case: a bundle emptied by hand with
<code>delete</code> on every key while it is still in the store keeps
counting as having translations; use <code>removeResourceBundle()</code>
for that. Thanks <a
href="https://github.com/dmchoi77"><code>@​dmchoi77</code></a> for the
detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2449">#2449</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/0d2845a2360dcc236fe9681f849781f5dfdd35c4"><code>0d2845a</code></a>
26.4.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/a2dbe15e844b7f897ff5851419ba000fbacdbc45"><code>a2dbe15</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/e75843ffeac038a961f91181d963ae4a8f228976"><code>e75843f</code></a>
perf: cache non-empty bundles in hasLanguageSomeTranslations, changelog
v26.4.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/edaea71b729aa54dc35d5e7dfea72b2b12f24a61"><code>edaea71</code></a>
Fix TypeScript examples build and update them to i18next v26 (<a
href="https://redirect.github.com/i18next/i18next/issues/2448">#2448</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/4ebd19d89111fa558d7086f6be64eb748bad6327"><code>4ebd19d</code></a>
docs: &quot;For AI assistants&quot; paragraph in the README and a fuller
saveMissing JSDoc</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.4.2...v26.4.3">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 15:03:20 +00:00
dependabot[bot] 74d6263e2b chore(deps-dev): Bump uuid from 14.0.2 to 14.0.3 (#2232) 
Bumps [uuid](https://github.com/uuidjs/uuid) from 14.0.2 to 14.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uuidjs/uuid/releases">uuid's
releases</a>.</em></p>
<blockquote>
<h2>v14.0.3</h2>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">14.0.3</a>
(2026-10-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>fix CITGM <a
href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a
href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>) (<a
href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac">b44f159</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md">uuid's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">14.0.3</a>
(2026-10-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>fix CITGM <a
href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a
href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>) (<a
href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac">b44f159</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/uuidjs/uuid/commit/993ff7b64a289ef7f921ccafc8bb98ef9461d214"><code>993ff7b</code></a>
chore(main): release 14.0.3 (<a
href="https://redirect.github.com/uuidjs/uuid/issues/982">#982</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/f7d19b9b5fea8671059e58aea380ac546100448c"><code>f7d19b9</code></a>
chore: update workflow actions (<a
href="https://redirect.github.com/uuidjs/uuid/issues/983">#983</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac"><code>b44f159</code></a>
fix: fix CITGM <a
href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a
href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/dd8c173521bb3faacb11ff244233df4a0dcde545"><code>dd8c173</code></a>
chore: update deps (<a
href="https://redirect.github.com/uuidjs/uuid/issues/975">#975</a>)</li>
<li>See full diff in <a
href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uuid&package-manager=npm_and_yarn&previous-version=14.0.2&new-version=14.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:55:10 +00:00
dependabot[bot] 47c00a4bc5 chore(deps): Bump react-resizable-panels from 4.14.2 to 4.14.3 in the react group (#2227) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.2 to 4.14.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.3</h2>
<ul>
<li><a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/761">761</a>
Bugfix: A drag interrupted by <code>pointercancel</code>,
<code>lostpointercapture</code>, or the window losing focus (e.g.
Alt/Cmd+Tab) now ends and commits the current layout, rather than
staying active until the next pointer event</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.3</h2>
<ul>
<li>Fix drags interrupted by <code>&quot;pointercancel&quot;</code>,
<code>&quot;lostpointercapture&quot;</code>, or the window losing focus
(e.g. Alt/Cmd+Tab) staying active until the next pointer event. The drag
now ends and commits the current layout. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/761">#761</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/6abc6ac81e51819edecd40b71ac2c580f472093a"><code>6abc6ac</code></a>
4.14.2 -&gt; 4.14.3</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/5ac3e5cdedbd528588e6abb47648e32287d78e00"><code>5ac3e5c</code></a>
Bugfix: Handle drags interrupted by &quot;pointercancel&quot;,
&quot;lostpointercapture&quot;, or...</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.2...4.14.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.2&new-version=4.14.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:54:39 +00:00
dependabot[bot] f0ed53c4e5 chore(deps-dev): Bump i18next-cli from 1.74.7 to 1.75.2 (#2234) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.7
to 1.75.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.75.2</h2>
<ul>
<li>fix(extract): declarations with the same name in different files no
longer overwrite each other.
Two generated OpenAPI clients that both export <code>components</code>
resolved to whichever file was read first,
so <code>import { components as githubComponents } from
'./github-api'</code> and
<code>import { components as digitalOceanComponents } from
'./digital-ocean-api'</code> extracted the keys of only one
of them, and moving files around changed which. A name now resolves to
the module the file imports it
from, for renamed and plain imports, namespace imports
(<code>GH.components</code>), <code>.js</code> import specifiers and
tsconfig <code>paths</code> aliases. Imports that cannot be traced to a
scanned file (packages, re-exporting barrels)
still resolve by name as before. Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/306">#306</a>.</li>
</ul>
<h2>1.75.1</h2>
<ul>
<li>fix(extract): types and values read through a namespace import
resolve like named imports. With
<code>import * as Types from './types'</code>, a qualified type
(<code>(color: Types.Color) =&gt; …</code>, <code>x as
Types.Color</code>,
<code>FC&lt;Types.Props&gt;</code>, <code>declare const s:
Types.Status</code>) and a namespace member
(<code>Types.SIZES.map(…)</code>,
<code>Types.Status.Done</code>, <code>t(Types.LABELS.save)</code>,
<code>Object.keys(Types.LABELS)</code>) now extract their keys, also
for a namespace re-exported from a barrel (<code>export * as Shared from
'./types'</code>). Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/305">#305</a>.</li>
<li>fix(extract): an exported <code>as const</code> object resolves in
the files that import it: <code>t(LABELS.save)</code> and
<code>Object.keys(LABELS)</code> only worked in the declaring file
before.</li>
<li>fix(extract): a value typed <code>keyof typeof MAP</code> resolves
to the map's keys, so
<code>t(`label.${key}`)</code> with <code>declare const key: keyof
typeof LABELS</code> extracts <code>label.save</code> and
<code>label.cancel</code>. This branch never matched before.</li>
</ul>
<h2>1.75.0</h2>
<ul>
<li>feat(extract): new <code>extract.maxTypeDepth</code> option sets how
many levels of nested object members are
followed when a dynamic key reads a typed value (default: 5). Higher
values cost time and memory on
large recursive types such as OpenAPI schemas. Requested in
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/302#issuecomment-6039348480">#302</a>.</li>
<li>fix(extract): the depth now counts from the type an indexed access
picks instead of from the declared
wrapper type. <code>type Pet = components['schemas']['Pet']</code> gets
the full depth below <code>Pet</code>, where the
<code>components</code>/<code>schemas</code> wrapper used to take two of
the five levels.</li>
<li>fix(extract): numeric keys resolve in object types and indexed
access types, so openapi-typescript
response types work:

<code>operations['getPet']['responses'][200]['content']['application/json']</code>
and
<code>op.responses[200].content['application/json'].status</code>
resolved nothing before.</li>
</ul>
<h2>1.74.8</h2>
<ul>
<li>fix(extract): a commented template literal no longer extracts its
placeholder as a key.
<code>// t(`QUARTER.${q}`)</code> extracted <code>QUARTER.${q}</code>
and <code>// t(`status.${deepObject.status}`)</code> extracted
<code>status.${deepObject.status}</code>. Such a comment now keeps the
existing keys it matches (<code>QUARTER.1</code>,
<code>QUARTER.2</code>, …) even with <code>removeUnusedKeys</code>, the
way a commented static key keeps its key, while code can
still add new matching keys. A pattern without any static part
(<code>`${a}.${b}`</code>) is ignored. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/304">#304</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/540b3beac7737ce066af47875be7f1dd360bd12c"><code>540b3be</code></a>
1.75.2</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/9cc03de706dc8990dc0c801240e1cfea33f7cf37"><code>9cc03de</code></a>
fix(extract): resolve same-named declarations by the module they are
imported...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/dd21f26554aec73b9e2d5d2670ea9ecdc0ad1562"><code>dd21f26</code></a>
1.75.1</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/7c637a89b5e76a29e6e8f063e9901068d10449fa"><code>7c637a8</code></a>
fix(extract): resolve types and values read through a namespace import
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/305">#305</a></li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/ef3ebc58cb1e55d2fbe2d1d418518c8f8b539dd9"><code>ef3ebc5</code></a>
1.75.0</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/33d47ac8d6b8fc2429745a9f43036fea83f4b7ac"><code>33d47ac</code></a>
feat(extract): add maxTypeDepth, count it from the indexed type, resolve
nume...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/747d5e91bc31f866f6bd2048b8efecd4ac8389b4"><code>747d5e9</code></a>
1.74.8</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/a8246695cf1306ff1e7cbf69f62b4941c053bd44"><code>a824669</code></a>
fix(extract): keep the keys a commented template literal matches instead
of e...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.74.7...v1.75.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.7&new-version=1.75.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:53:14 +00:00
dependabot[bot] 890fbf5764 chore(deps): Bump @codemirror/view from 6.43.13 to 6.43.14 (#2235) 
Bumps [@codemirror/view](https://github.com/codemirror/view) from
6.43.13 to 6.43.14.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/view&package-manager=npm_and_yarn&previous-version=6.43.13&new-version=6.43.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:51:51 +00:00
dependabot[bot] 15161f7dd4 chore(deps): Bump maplibre-gl from 6.12.0 to 6.13.0 (#2233) 
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from
6.12.0 to 6.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's
releases</a>.</em></p>
<blockquote>
<h2>v6.13.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Let the globe center reach the poles, where it stopped at 85.05° (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8629">#8629</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Speed up symbol layout by skipping line breaking for labels that fit
on one line (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8617">#8617</a>)
(by <a
href="https://github.com/DoFabien"><code>@​DoFabien</code></a>)</li>
<li>Add experimental
<code>CustomLayerInterface.renderToTerrainTile</code>,
<code>CustomLayerInterface.terrainTileRevision</code> and
<code>renderTerrainHeightMap</code> in the options of
<code>prerender</code>, so custom layers can drape what they draw over
the terrain and place objects on it on the GPU (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8588">#8588</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix a stale cached worker crashing the map after an upgrade: the
worker is self-contained again instead of importing
<code>maplibre-gl-shared.mjs</code>, and its default URL carries the
version as a <code>v</code> query parameter.
<code>maplibre-gl-shared.mjs</code> and
<code>maplibre-gl-shared-dev.mjs</code> are now empty files, kept so
that existing copy steps don't fail; they are deprecated and will be
removed in the next major version (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8621">#8621</a>)
(by <a href="https://github.com/HarelM"><code>@​HarelM</code></a>)</li>
<li>Fix <code>globeDistanceOfLocationsPixels</code> returning
<code>NaN</code> when two copies of the same point have a dot product
slightly above 1 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8624">#8624</a>)(by
<a
href="https://github.com/Dimononon"><code>@​Dimononon</code></a>)</li>
<li>Keep the camera above the terrain, where a scroll zoom into a
mountain could take it under the surface and the zoom's end throw it
kilometers up (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>6.13.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Let the globe center reach the poles, where it stopped at 85.05° (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8629">#8629</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Speed up symbol layout by skipping line breaking for labels that fit
on one line (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8617">#8617</a>)
(by <a
href="https://github.com/DoFabien"><code>@​DoFabien</code></a>)</li>
<li>Add experimental
<code>CustomLayerInterface.renderToTerrainTile</code>,
<code>CustomLayerInterface.terrainTileRevision</code> and
<code>renderTerrainHeightMap</code> in the options of
<code>prerender</code>, so custom layers can drape what they draw over
the terrain and place objects on it on the GPU (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8588">#8588</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix a stale cached worker crashing the map after an upgrade: the
worker is self-contained again instead of importing
<code>maplibre-gl-shared.mjs</code>, and its default URL carries the
version as a <code>v</code> query parameter.
<code>maplibre-gl-shared.mjs</code> and
<code>maplibre-gl-shared-dev.mjs</code> are now empty files, kept so
that existing copy steps don't fail; they are deprecated and will be
removed in the next major version (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8621">#8621</a>)
(by <a href="https://github.com/HarelM"><code>@​HarelM</code></a>)</li>
<li>Fix <code>globeDistanceOfLocationsPixels</code> returning
<code>NaN</code> when two copies of the same point have a dot product
slightly above 1 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8624">#8624</a>)(by
<a
href="https://github.com/Dimononon"><code>@​Dimononon</code></a>)</li>
<li>Keep the camera above the terrain, where a scroll zoom into a
mountain could take it under the surface and the zoom's end throw it
kilometers up (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/f67ac5e45ce441c6eef7c395ad2bbde7ed717c5d"><code>f67ac5e</code></a>
Bump js version to 6.13.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8685">#8685</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/04761779dd45b4537ce1e3e0aa4054ece9df4497"><code>0476177</code></a>
fix: keep the camera above the terrain (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8547">#8547</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/eaf272ce8b7ef5ebb55f1f3e86cf104d6de0e16d"><code>eaf272c</code></a>
chore(deps-dev): bump shell-quote (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8682">#8682</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/e0a0d7766fbabf7d7da0a27ad07e24b5c1f45dde"><code>e0a0d77</code></a>
chore(deps-dev): bump shell-quote from 1.10.0 to 1.12.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8683">#8683</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/84f4d81ee2f75d32436fa2afc8cc6ac82b947069"><code>84f4d81</code></a>
fix: revert shared mjs file (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8672">#8672</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/f98ef79b472280c9d7d1f0e6c4da3631080e358f"><code>f98ef79</code></a>
Make the 3D Tiles example use maplibre-gl-three, add raycast example (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8567">#8567</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/372a40b821d7fc049c43100934fe6b4e63e2c615"><code>372a40b</code></a>
GM2.14 Move the painter's leftover helpers to their owners (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8678">#8678</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/6ef0e295159fac8bbd71e81fbfc592bd957f5b4e"><code>6ef0e29</code></a>
GM2.13 Remove the style reference from the painter (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8668">#8668</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/5e5ab7e49ad7a3e16eb47a7eda26c98e9d883fc2"><code>5e5ab7e</code></a>
chore(deps): bump the npm_and_yarn group across 4 directories with 3
updates ...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/0343f27a9b7e5f9bec51a4078c974fb61b9e4d69"><code>0343f27</code></a>
chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8676">#8676</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v6.12.0...v6.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.12.0&new-version=6.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:51:48 +00:00
dependabot[bot] cde81d4d7c chore(deps-dev): Bump @playwright/test from 1.63.0 to 1.64.0 (#2230) 
Bumps [@playwright/test](https://github.com/microsoft/playwright) from
1.63.0 to 1.64.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/playwright/releases">@​playwright/test's
releases</a>.</em></p>
<blockquote>
<h2>v1.64.0</h2>
<h2>🧰 WebMCP</h2>
<p>New <a
href="https://playwright.dev/docs/api/class-page#page-webmcp">page.webmcp</a>
and <a
href="https://playwright.dev/docs/api/class-frame#frame-webmcp">frame.webmcp</a>
give access to the tools that a page registers through the experimental
<a href="https://playwright.dev/docs/api/class-webmcp">WebMCP</a>
browser API, so you can test them like any other part of your app:</p>
<pre lang="js"><code>const browser = await chromium.launch({ args:
['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
<p>for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);</p>
<p>const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // &quot;42&quot;
</code></pre></p>
<p><a href="https://playwright.dev/docs/getting-started-mcp">Playwright
MCP</a> also supports WebMCP by default, with page-defined tools offered
to the agent as <code>webmcp_&lt;tool&gt;</code>. Pass
<code>--no-webmcp</code> to opt out.</p>
<p><a
href="https://playwright.dev/docs/getting-started-cli"><code>playwright-cli</code></a>
exposes them as well:</p>
<pre lang="bash"><code>playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params
'{&quot;query&quot;:&quot;cats&quot;}'
</code></pre>
<h2>🎬 Better videos</h2>
<p>Videos can now be recorded at a custom frame rate, and the
decorations for actions are styled with plain CSS:</p>
<pre lang="js"><code>// playwright.config.ts
import { defineConfig } from '@playwright/test';
<p>export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid <a
href="https://redirect.github.com/microsoft/playwright/issues/333">#333</a>;
background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/playwright/commit/606ecd8b34bac100db32561b6278ffd76e5eb3cd"><code>606ecd8</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43192">#43192</a>):
fix(locators): parse locators the way the client API bui...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/e4f872c79530583300185d3e4aa9689e2f85d0b0"><code>e4f872c</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43188">#43188</a>):
feat(api): expose asLocatorDescription via LocalUtils fo...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/f6a439e6f496f75d8e8b687116eef8c21316aa1f"><code>f6a439e</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43189">#43189</a>):
docs(webmcp): expose WebMCP to all languages</li>
<li><a
href="https://github.com/microsoft/playwright/commit/e2335c30f16196a96f81c099598803ca74f9120c"><code>e2335c3</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43174">#43174</a>):
fix(mcp): do not close the browser twice when the client...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/d2a436e0111091ba99836fa6711de28201606cfc"><code>d2a436e</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43163">#43163</a>):
Revert &quot;fix(blob): do not remove existing reports from o...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/a0c4b5efc965577e19f5ebfdcc27f384d3058783"><code>a0c4b5e</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43175">#43175</a>):
feat(api): return language-specific locator code from re...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/3f7d535c7b69ff1997307dc304c3c8c76b51179d"><code>3f7d535</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43131">#43131</a>):
docs: fix broken C# samples in API docs and handles guide</li>
<li><a
href="https://github.com/microsoft/playwright/commit/1cde64f74a0f85304f2f4091a46670bf9a3e0dc3"><code>1cde64f</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43170">#43170</a>):
fix(locators): parse mixed role options</li>
<li><a
href="https://github.com/microsoft/playwright/commit/8851e7296508ae50cd1f822e50d1e4fa92eab218"><code>8851e72</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43171">#43171</a>):
fix(locators): parse JavaScript escapes and regex classes</li>
<li><a
href="https://github.com/microsoft/playwright/commit/dcc50654872510b630c73ec6eba1fb3d625c735e"><code>dcc5065</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43172">#43172</a>):
fix(locator): parse within and getByRef locators</li>
<li>Additional commits viewable in <a
href="https://github.com/microsoft/playwright/compare/v1.63.0...v1.64.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.63.0&new-version=1.64.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:51:34 +00:00
dependabot[bot] 536e5993f2 chore(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#2226) 
Bumps
[actions/upload-artifact](https://github.com/actions/upload-artifact)
from 7.0.1 to 7.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Improves artifact download retries when the service returns HTTP 429
(rate limiting), including honoring valid Retry-After headers.</li>
<li>Updates <code>@​actions/artifact</code> to v6.3.1.</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/tunc-d"><code>@​tunc-d</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/821">actions/upload-artifact#821</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2">https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/cf430e030ddbb5b0abf93d22962f4752f3646cd9"><code>cf430e0</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/822">#822</a>
from actions/tunc-d-prepare-upload-v7-0-2</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/c2acdedd35a8824a1552c7137f8c18288c3ea469"><code>c2acded</code></a>
chore: prepare v7.0.2 release</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/4687c1bbaa0a58abb517d90b4bbade6754c80c1a"><code>4687c1b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/821">#821</a>
from actions/tunc-d-upload-artifact-package-bump</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/8cbe1bebdb858105d8fdd88f81404d4de4595719"><code>8cbe1be</code></a>
Bump <code>@​actions/artifact</code> to 6.3.1</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=7.0.1&new-version=7.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:33:01 +00:00
dependabot[bot] afca3e28f4 chore(deps): Bump the codeql-action group with 3 updates (#2224) 
Bumps the codeql-action group with 3 updates:
[github/codeql-action/init](https://github.com/github/codeql-action),
[github/codeql-action/autobuild](https://github.com/github/codeql-action)
and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a>
from github/update-v4.38.3-e0b52dbdc</li>
<li><a
href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a>
Add changelog note for <a
href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a>
Update changelog for v4.38.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a>
from github/henrymercer/pin-python-for-older-clis-in-ci</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a>
Pin Python 3.13.15 for older CLI versions in multi-language check</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a>
from github/update-bundle/codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a>
Update default bundle to codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a>
from github/mbg/esm/migrate-pr-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a>
Replace <code>__dirname</code> in <code>sync.ts</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/autobuild` from 4.38.2 to 4.38.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a>
from github/update-v4.38.3-e0b52dbdc</li>
<li><a
href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a>
Add changelog note for <a
href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a>
Update changelog for v4.38.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a>
from github/henrymercer/pin-python-for-older-clis-in-ci</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a>
Pin Python 3.13.15 for older CLI versions in multi-language check</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a>
from github/update-bundle/codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a>
Update default bundle to codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a>
from github/mbg/esm/migrate-pr-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a>
Replace <code>__dirname</code> in <code>sync.ts</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a>
from github/update-v4.38.3-e0b52dbdc</li>
<li><a
href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a>
Add changelog note for <a
href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a>
Update changelog for v4.38.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a>
from github/henrymercer/pin-python-for-older-clis-in-ci</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a>
Pin Python 3.13.15 for older CLI versions in multi-language check</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a>
from github/update-bundle/codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a>
Update default bundle to codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a>
from github/mbg/esm/migrate-pr-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a>
Replace <code>__dirname</code> in <code>sync.ts</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:31:53 +00:00
zstadlerandClaude 28917685f7 Fix map staying blank until moved (#2217) 
If the style arrives before the map's initial `style.load`,
`componentDidUpdate` skips `setStyle` because `state.map` is still null.
The `setState` on `style.load` is then blocked by
`shouldComponentUpdate`, because `JSON.stringify` throws on the MapLibre
`Map` in state, so the style is only applied after a later prop change,
e.g. moving the map.

Fix: `shouldComponentUpdate` compares state fields by reference instead
of stringifying them. `zoom` is excluded: it changes on every zoom frame
but is only read when a layer popup opens.

## Launch Checklist

 - [x] Briefly describe the changes in this PR.
 - [ ] ~~Link to related issues.~~
- [ ] ~~Include before/after visuals or gifs if this PR includes visual
changes.~~
 - [ ] ~~Write tests for all new functionality.~~ (removed per review)
 - [x] Add an entry to `CHANGELOG.md` under the `## main` section.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01WDkBFXcoMv8K4QSHA6P3Fg


---
_Generated by [Claude Code](https://claude.ai/code)_

---------

Co-authored-by: Claude <noreply@anthropic.com>
 2026-10-11 17:06:18 +03:00
dependabot[bot] 688a75bb69 chore(deps-dev): Bump handlebars from 4.7.9 to 4.7.10 (#2222) 
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js)
from 4.7.9 to 4.7.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/handlebars-lang/handlebars.js/releases">handlebars's
releases</a>.</em></p>
<blockquote>
<h2>v4.7.10</h2>
<ul>
<li>security: Sanitize the source map URL when minifying - f37c599</li>
<li>security: Iterate lazily in #each and strip whitespace in linear
time - 812c226</li>
<li>security: Escape <code>&lt;!--</code> and <code>&lt;script</code> in
precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li>
<li>security: Don't trust special properties on context data - ceec388
GHSA-p8wg-vrv2-v86f</li>
<li>security: Only compile partials that are template strings -
c28ee7a</li>
<li>security: Only dispatch known node types in the Compiler and Visitor
- 7d501a5</li>
<li>security: Validate AST values in the compiler instead of the parser
- 703fdcc GHSA-8r5x-fm3f-whwj</li>
<li>Clarify that --root does not restrict filesystem access -
0fcf25c</li>
<li>Bump minimist to ^1.2.8 - ea8ed82</li>
<li>Fix Ruby component publishing documentation - d069c1c</li>
<li>Fix Composer component definition - 6714e07</li>
</ul>
<p>Compatibility notes:</p>
<ul>
<li><code>{{#each}}</code> iterates iterables such as <code>Map</code>,
<code>Set</code> and generators lazily, like <code>for...of</code>,
instead of
copying them into an array first. Values added to the iterable while the
block renders are now visited too.</li>
</ul>
<p><a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">Commits</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md">handlebars's
changelog</a>.</em></p>
<blockquote>
<h2>v4.7.10 - October 5th, 2026</h2>
<ul>
<li>security: Sanitize the source map URL when minifying - f37c599</li>
<li>security: Iterate lazily in #each and strip whitespace in linear
time - 812c226</li>
<li>security: Escape <code>&lt;!--</code> and <code>&lt;script</code> in
precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li>
<li>security: Don't trust special properties on context data - ceec388
GHSA-p8wg-vrv2-v86f</li>
<li>security: Only compile partials that are template strings -
c28ee7a</li>
<li>security: Only dispatch known node types in the Compiler and Visitor
- 7d501a5</li>
<li>security: Validate AST values in the compiler instead of the parser
- 703fdcc GHSA-8r5x-fm3f-whwj</li>
<li>Clarify that --root does not restrict filesystem access -
0fcf25c</li>
<li>Bump minimist to ^1.2.8 - ea8ed82</li>
<li>Fix Ruby component publishing documentation - d069c1c</li>
<li>Fix Composer component definition - 6714e07</li>
</ul>
<p>Compatibility notes:</p>
<ul>
<li><code>{{#each}}</code> iterates iterables such as <code>Map</code>,
<code>Set</code> and generators lazily, like <code>for...of</code>,
instead of
copying them into an array first. Values added to the iterable while the
block renders are now visited too.</li>
</ul>
<p><a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">Commits</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e"><code>45ce152</code></a>
v4.7.10</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8"><code>e47b236</code></a>
Update release notes</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0"><code>f37c599</code></a>
Sanitize the source map URL when minifying</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca"><code>812c226</code></a>
Iterate lazily in #each and strip whitespace in linear time</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"><code>609d1b1</code></a>
Escape <code>&lt;!--</code> and <code>&lt;script</code> in precompiled
output</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa"><code>ceec388</code></a>
Don't trust special properties on context data</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98"><code>c28ee7a</code></a>
Only compile partials that are template strings</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1"><code>7d501a5</code></a>
Only dispatch known node types in the Compiler and Visitor</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2"><code>703fdcc</code></a>
Validate AST values in the compiler instead of the parser</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d"><code>0fcf25c</code></a>
Clarify that --root does not restrict filesystem access</li>
<li>Additional commits viewable in <a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.7.9&new-version=4.7.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 14:09:21 +00:00
dependabot[bot] 247d8d4de3 chore(deps-dev): Bump vite from 8.3.2 to 8.3.3 (#2221) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.3.2 to 8.3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.3</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update launch-editor to v2.14.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/23654">#23654</a>)
(<a
href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097">22fd1d5</a>)</li>
<li><strong>html:</strong> filename passed to transformIndexHtml should
not include queries (<a
href="https://redirect.github.com/vitejs/vite/issues/23653">#23653</a>)
(<a
href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17">7dafd8e</a>)</li>
<li><strong>server:</strong> check <code>fs.serve</code> for
<code>?vite-wasm-instance</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23655">#23655</a>)
(<a
href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73">ba8b7ab</a>)</li>
<li><strong>server:</strong> store ids to <code>safeModulePaths</code>
rather than URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23656">#23656</a>)
(<a
href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905">c3e06f9</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.2...v8.3.3">8.3.3</a>
(2026-10-06)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update launch-editor to v2.14.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/23654">#23654</a>)
(<a
href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097">22fd1d5</a>)</li>
<li><strong>html:</strong> filename passed to transformIndexHtml should
not include queries (<a
href="https://redirect.github.com/vitejs/vite/issues/23653">#23653</a>)
(<a
href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17">7dafd8e</a>)</li>
<li><strong>server:</strong> check <code>fs.serve</code> for
<code>?vite-wasm-instance</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23655">#23655</a>)
(<a
href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73">ba8b7ab</a>)</li>
<li><strong>server:</strong> store ids to <code>safeModulePaths</code>
rather than URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23656">#23656</a>)
(<a
href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905">c3e06f9</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/fea5b21dd9524ed7308632407b996f1fe5942c9c"><code>fea5b21</code></a>
release: v8.3.3 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23657">#23657</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905"><code>c3e06f9</code></a>
fix(server): store ids to <code>safeModulePaths</code> rather than URLs
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23656">#23656</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73"><code>ba8b7ab</code></a>
fix(server): check <code>fs.serve</code> for
<code>?vite-wasm-instance</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23655">#23655</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097"><code>22fd1d5</code></a>
fix(deps): update launch-editor to v2.14.2 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23654">#23654</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17"><code>7dafd8e</code></a>
fix(html): filename passed to transformIndexHtml should not include
queries (...</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v8.3.3/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.3.2&new-version=8.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 14:03:54 +00:00
dependabot[bot] a3453a50d4 chore(deps-dev): Bump typescript-eslint from 8.71.0 to 8.71.1 (#2219) 
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
from 8.71.0 to 8.71.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.71.1</h2>
<h2>8.71.1 (2026-10-05)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-misused-promises] skip argument
checks for calls without arguments (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12923">#12923</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unused-vars] report
usedOnlyAsType for partially exported merged declarations (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12892">#12892</a>)</li>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] use
array argument type constraint (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12919">#12919</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-enum-assignment] skip
identical types and bound deep type walks (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12957">#12957</a>)</li>
<li><strong>eslint-plugin:</strong> [no-confusing-void-expression] don't
autofix when declared return type is unknown (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12930">#12930</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] check the
constrained type (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12953">#12953</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters]
count instantiated mapped type constraints (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12941">#12941</a>)</li>
<li><strong>project-service:</strong> throttle cleanup when opening
files (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12934">#12934</a>)</li>
<li><strong>type-utils:</strong> match re-exports and global
declarations in <code>TypeOrValueSpecifier</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12943">#12943</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Diptajoy Mistry <a
href="https://github.com/diptomistry"><code>@​diptomistry</code></a></li>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg</li>
<li>Josh Goldberg ✨</li>
<li>Medhansh Poojari</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.71.1 (2026-10-05)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/d57b8da272375b6a45270639894a793933208a91"><code>d57b8da</code></a>
chore(release): publish 8.71.1</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.0&new-version=8.71.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 14:02:13 +00:00
dependabot[bot] 56539785c3 chore(deps-dev): Bump i18next-cli from 1.74.5 to 1.74.7 (#2220) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.5
to 1.74.7.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.74.7</h2>
<ul>
<li>fix(extract): a selector <code>i18nKey</code> on <code>&lt;Trans
t={t}&gt;</code> now routes into the hook's namespaces the same way
<code>t()</code> does, matching react-i18next 17.0.16. With <code>const
{ t } = useTranslation(['ns1', 'ns2'])</code>,
<code>&lt;Trans t={t} i18nKey={$ =&gt; $.ns2.message} /&gt;</code> was
filed as <code>ns1:ns2.message</code>; it is now filed as
<code>ns2:message</code>, like <code>t($ =&gt; $.ns2.message)</code>.
Under <code>types.enableSelector: 'strict'</code> a leading primary
namespace is stripped too (<code>useTranslation('only')</code> with
<code>$ =&gt; $.only.key</code> files <code>only:key</code>). Reported
in
<a
href="https://redirect.github.com/i18next/react-i18next/issues/1933">react-i18next#1933</a>.</li>
<li>fix(extract): the props of a component typed
<code>React.FC&lt;Props&gt;</code> (also <code>FC</code>,
<code>FunctionComponent</code>),
<code>forwardRef&lt;Ref, Props&gt;(…)</code> or
<code>memo&lt;Props&gt;(…)</code> are typed by <code>Props</code>, and
iterating a typed member binds
the element. <code>props.colors.map((color) =&gt;
t(\</code>Color.${color}`))<code>with</code>colors:
Color[]<code>extracted nothing before unless</code>color<code>was
asserted with</code>as Color<code>. Arrays of objects work the same way:
</code>props.items.map(({ kind }) =&gt; …)<code>, </code>for (const item
of props.items)<code>and a destructured</code>({ items }) =&gt;
items.map(…)`. Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/303">#303</a>.</li>
</ul>
<h2>1.74.6</h2>
<ul>
<li>fix(extract): iterating an inline array literal binds the element
like iterating a named constant
does. <code>([1, 2, 3, 4] as const).map((q) =&gt;
t(\</code>QUARTER.${q}`))<code>, </code>for (const unit of ['day',
'hour'] as const)`
and inline arrays of objects extracted nothing before. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/301">#301</a>.</li>
<li>fix(extract): members of nested object types resolve.
<code>t(\</code>barStatus.${deepObject.Bar.status}`)<code>and</code>t(`fooBarStatus.${deepObject.Foo.Bar.status}`)<code>
now extract the nested union's values, also through references to other
types, optional chaining (</code>pet.category?.kind<code>),
destructuring (</code>const { kind } = pet.category<code>) and indexed
access types (</code>DeepObject['Bar']['status']<code>,
</code>components['schemas']['Pet']<code>), so types generated by
openapi-typescript work. Nested members are followed up to five levels
below the declared type, as in
</code>components.schemas.Pet.category.kind`.
Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/302">#302</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/32291d28be792d4d318da94f4a27bb22d7053dde"><code>32291d2</code></a>
1.74.7</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/8b3717d07f5b6733872dfc602613e80ec02c8817"><code>8b3717d</code></a>
fix(extract): type component props from React.FC, forwardRef and memo <a
href="https://redirect.github.com/i18next/i18next-cli/issues/303">#303</a></li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/4c6314ab14e0bb17ad81e07ee53d309b0a3bc2cc"><code>4c6314a</code></a>
fix(extract): route a Trans selector key into the t prop's namespaces
like t()</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/7f7e635fd9af6110a212f5916bdcfb1e6201250a"><code>7f7e635</code></a>
1.74.6</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/a56b05fbccba966fb1ac8bcbf576903da3b4c48f"><code>a56b05f</code></a>
fix(extract): resolve inline array literals and nested object types <a
href="https://redirect.github.com/i18next/i18next-cli/issues/301">#301</a>
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/302">#302</a></li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.74.5...v1.74.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.5&new-version=1.74.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 13:57:19 +00:00
dependabot[bot] 5ba1d97ec0 chore(deps): Bump react-i18next from 17.0.15 to 17.0.16 in the react group (#2218) 
Bumps the react group with 1 update:
[react-i18next](https://github.com/i18next/react-i18next).

Updates `react-i18next` from 17.0.15 to 17.0.16
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.16</h2>
<ul>
<li>fix(Trans): a selector <code>i18nKey</code> that points into a
secondary namespace of <code>useTranslation</code> now resolves the same
way <code>t()</code> does. With <code>const { t } =
useTranslation(['ns1', 'ns2'])</code>, <code>t($ =&gt;
$.ns2.message)</code> works since 17.0.7, but <code>&lt;Trans t={t}
i18nKey={$ =&gt; $.ns2.message} /&gt;</code> rendered the raw key (or
its children). <code>Trans</code> always passed an <code>ns</code>
option to <code>t</code>, filled from <code>t.ns</code> (the primary
namespace only), and an explicit <code>ns</code> makes i18next's fixed
<code>t</code> skip the hook's full namespace list
(<code>scopeNs</code>). When <code>Trans</code> or
<code>TransWithoutContext</code> gets a <code>t</code> that carries its
own namespace and no <code>ns</code> prop, it now leaves <code>ns</code>
out and lets that <code>t</code> apply its own. String keys,
<code>keyPrefix</code>, <code>nsMode: 'fallback'</code>, an explicit
<code>ns</code> prop and <code>Trans</code> without a <code>t</code>
prop behave as before. Compatibility note: if the primary namespace has
a nested object named like a secondary namespace (<code>ns1</code> →
<code>ns2.message</code>), <code>Trans</code> now resolves <code>$ =&gt;
$.ns2.message</code> to <code>ns2:message</code>, as <code>t()</code>
already does. Fixes <a
href="https://redirect.github.com/i18next/react-i18next/issues/1933">#1933</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/606b6a55f231bbf73823863fbb94e6b8eb8272fd"><code>606b6a5</code></a>
17.0.16</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/51b7c269597ab52477574153633aa0062e5f4b9b"><code>51b7c26</code></a>
fix(Trans): resolve selector keys into useTranslation's secondary
namespaces</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/0a2f0182b9f2c51d9868364057db8d5987a550d3"><code>0a2f018</code></a>
fix(examples): load the Swedish file in test-jest and align the ru
plural tag...</li>
<li>See full diff in <a
href="https://github.com/i18next/react-i18next/compare/v17.0.15...v17.0.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.15&new-version=17.0.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 13:56:56 +00:00
dependabot[bot] c8b44dcc6b chore(deps-dev): Bump postcss from 8.5.28 to 8.5.29 (#2215) 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.28 to
8.5.29.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.29</h2>
<ul>
<li>Improved <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/choudhryfrompak"><code>@​choudhryfrompak</code></a>).</li>
<li>Fixed comments support in <code>list.comma()</code> and
<code>list.space()</code> (by <a
href="https://github.com/00200200"><code>@​00200200</code></a>).</li>
<li>Fixed semicolon and custom property (by <a
href="https://github.com/wahidrizka"><code>@​wahidrizka</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.29</h2>
<ul>
<li>Improved <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/choudhryfrompak"><code>@​choudhryfrompak</code></a>).</li>
<li>Fixed comments support in <code>list.comma()</code> and
<code>list.space()</code> (by <a
href="https://github.com/00200200"><code>@​00200200</code></a>).</li>
<li>Fixed semicolon and custom property (by <a
href="https://github.com/wahidrizka"><code>@​wahidrizka</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/a7a1f3476177d689dff722d3f9f72190ddf93f7e"><code>a7a1f34</code></a>
Release 8.5.29 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/b55a36d14670cefa838b59a9b68c035b9619e294"><code>b55a36d</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/7647a8107ebac8014f1a29ec7e06d3f6ab7c8ac6"><code>7647a81</code></a>
Escape &lt;/style&gt; in output of non-Root nodes (<a
href="https://redirect.github.com/postcss/postcss/issues/2163">#2163</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/7ac902664902289ea0cb9d6b1096b81e8d33bbf5"><code>7ac9026</code></a>
Do not split list.comma() and list.space() on separators inside comments
(<a
href="https://redirect.github.com/postcss/postcss/issues/2162">#2162</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/ebffa97faa305f781a7df5a41ec39f57966b7b6c"><code>ebffa97</code></a>
Add postcss-smooth-corners plugin</li>
<li><a
href="https://github.com/postcss/postcss/commit/57d6401ccca6ce96c9fcdebbdfc30c1ce9e7e797"><code>57d6401</code></a>
Speed up source map cleaning</li>
<li><a
href="https://github.com/postcss/postcss/commit/7e46a036aa55c16b99bf4620850267e3407797ca"><code>7e46a03</code></a>
Speed up parser</li>
<li><a
href="https://github.com/postcss/postcss/commit/7f5c417f1d2dfd3280bb552191dac64a7ffd93d8"><code>7f5c417</code></a>
Improve &lt;/style&gt; protection for the case when beffore nodes have
different parts</li>
<li><a
href="https://github.com/postcss/postcss/commit/7ba9051fb22d5b5ab160d71c3f2b749557c8ac6f"><code>7ba9051</code></a>
Fix useless ESLint warning</li>
<li><a
href="https://github.com/postcss/postcss/commit/12b41616d99877145dbd209cb17c339aedb556f9"><code>12b4161</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.28...8.5.29">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.28&new-version=8.5.29)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-08 13:57:34 +00:00
dependabot[bot] 5a1839f362 chore(deps-dev): Bump @vitejs/plugin-react from 6.1.1 to 6.1.2 in the react group (#2213) 
Bumps the react group with 1 update:
[@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react).

Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/releases">@​vitejs/plugin-react's
releases</a>.</em></p>
<blockquote>
<h2>plugin-react@6.1.2</h2>
<h3>Fix HMR for compound components (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1484">#1484</a>)</h3>
<p>Adding or removing a component from a compound component was not
handled, creating stale updates. Doing this now triggers hmr invalidate
on the file and propagates the invalidation to importers.</p>
<h3>Fix <code>compiler.logDiagnostics</code> option not working (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1483">#1483</a>)</h3>
<p>With <code>oxc-transform-react</code> &gt;= 0.148, the
<code>logDiagnostics</code> was not working. This version fixes it and
requires <code>oxc-transform-react</code> &gt;= 0.152 as a peer
dependency if you are using the <code>compiler</code> option.
<code>compiler.logDiagnostics</code> option is now deprecated and should
be swapped for the builtin <code>compiler.reportDiagnostics</code>.</p>
<h3>Disable refresh for non-jsx with compiler enabled (fix <a
href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1478">#1478</a>)
(<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1485">#1485</a>)</h3>
<p>When the compiler was enabled, TS files could trigger fast refresh
which would cause runtime errors. The logic now follows what the builtin
oxc plugin in Vite does.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md">@​vitejs/plugin-react's
changelog</a>.</em></p>
<blockquote>
<h2>6.1.2 (2026-10-05)</h2>
<h3>Fix HMR for compound components (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1484">#1484</a>)</h3>
<p>Adding or removing a component from a compound component was not
handled, creating stale updates. Doing this now triggers hmr invalidate
on the file and propagates the invalidation to importers.</p>
<h3>Fix <code>compiler.logDiagnostics</code> option not working (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1483">#1483</a>)</h3>
<p>With <code>oxc-transform-react</code> &gt;= 0.148, the
<code>logDiagnostics</code> was not working. This version fixes it and
requires <code>oxc-transform-react</code> &gt;= 0.152 as a peer
dependency if you are using the <code>compiler</code> option.
<code>compiler.logDiagnostics</code> option is now deprecated and should
be swapped for the builtin <code>compiler.reportDiagnostics</code>.</p>
<h3>Disable refresh for non-jsx with compiler enabled (fix <a
href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1478">#1478</a>)
(<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1485">#1485</a>)</h3>
<p>When the compiler was enabled, TS files could trigger fast refresh
which would cause runtime errors. The logic now follows what the builtin
oxc plugin in Vite does.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/ac47648e17674299accb51816e9e33b8a7b07b05"><code>ac47648</code></a>
release: plugin-react@6.1.2 (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1491">#1491</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/98277e7d49fea7fa707170d2892738c8bfb5f1c0"><code>98277e7</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1486">#1486</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/12eddea34ae9de92b3dc8d8b8a76fa1260b781bf"><code>12eddea</code></a>
fix(hmr): better handle compound components (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1484">#1484</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/3cfb1d1114df64cf9aeee4aae0ac951d0c2f3abf"><code>3cfb1d1</code></a>
fix(plugin-react): fix <code>compiler.logDiagnostics</code> (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1483">#1483</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/6de9915e1b4c1b8a7b390eb1364ab6cd83d64e62"><code>6de9915</code></a>
fix(plugin-react): disable refresh for non-jsx with compiler enabled (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1485">#1485</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/ee97d2f3bd25cda8f06c27366722f01aaac0201f"><code>ee97d2f</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1445">#1445</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/b0a014da31be23c7806ffb0b997ec53b52ab68f2"><code>b0a014d</code></a>
chore: use Babel 8 for babel compiler playgrounds (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1460">#1460</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/61b650fe93c3fe30d79aa8615199cdcb0a2594f4"><code>61b650f</code></a>
fix(deps): update react-related dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1452">#1452</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/736efe2f004002abee693a44b405e70699432ecd"><code>736efe2</code></a>
chore(deps): update tsdown to v0.23 (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1451">#1451</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@vitejs/plugin-react&package-manager=npm_and_yarn&previous-version=6.1.1&new-version=6.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-08 13:57:00 +00:00
dependabot[bot] 2e5a5406da chore(deps): Bump ol from 10.10.0 to 10.11.0 (#2214) 
Bumps [ol](https://github.com/openlayers/openlayers) from 10.10.0 to
10.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/openlayers/openlayers/releases">ol's
releases</a>.</em></p>
<blockquote>
<h2>v10.11.0</h2>
<h1>10.11.0</h1>
<p>The 10.11 release improves styling, raster data and OGC service
support, and makes the library leaner to load. The highlights are</p>
<ul>
<li>Canvas styles now evaluate the <code>color</code> and
<code>array</code> operators, and <code>interpolate</code> mixes colors
in sRGB on both the Canvas and WebGL renderers; a new
<code>interpolate-hcl</code> operator keeps the perceptual gradient</li>
<li><code>ol/source/Raster</code> gains basic data tile support, and the
GeoZarr source can visualize generic n-D datacubes and accepts
<code>storeOptions</code> for headers and credentials</li>
<li>WMTS sources no longer derive their extent from the tile matrices,
so layers that cover a wider area at low zoom levels are no longer cut
off</li>
<li>Tiles that the current view no longer needs are dropped from the
queue, and the WebGL text overlay worker is loaded on demand</li>
<li>The <code>VectorImageLayer</code> gets crisp rendering on rotated
views, with rotated text and point symbols</li>
<li>New <code>wrapX</code> option for
<code>getPixelFromCoordinate</code> and
<code>getCoordinateFromPixel</code>, and <code>projection</code> options
for the WKT format</li>
<li>Fixes for RTL text along lines, nested WFS 2.0 feature collections,
empty GeoJSON coordinate arrays, and MouseWheelZoom target cleanup</li>
</ul>
<h3>Upgrade notes</h3>
<h4>Fixed GeoJSON parsing of geometries with empty coordinate
arrays</h4>
<p>Previously, a GeoJSON geometry with an empty coordinates array (e.g.
<code>{&quot;type&quot;: &quot;Point&quot;, &quot;coordinates&quot;:
[]}</code>) produced a geometry with an empty coordinates array. We have
now changed this to match the GeoJSON spec's recommendation to treat
such geometries (except <code>GeometryCollection</code>) as
<code>null</code> geometries. This change should not affect application
code, unless it had special handling for geometries with empty
coordinates arrays.</p>
<h4>Fixed: <code>interpolate</code> mixed colors differently on the
Canvas and WebGL renderers</h4>
<p>The <code>['interpolate', ...]</code> operator interpolated colors in
the Hue-Chroma-Luminance space on
the Canvas renderer, but component-wise in sRGB on the WebGL renderer.
The same style
produced different gradients depending on which renderer drew it, and
neither behaviour was
documented. Both now interpolate in sRGB.</p>
<p>Gradients built with <code>interpolate</code> over colors will look
slightly different on the Canvas
renderer. To keep the previous appearance, use the new
<code>interpolate-hcl</code> operator:</p>
<pre lang="js"><code>// Before
const style = {
'fill-color': ['interpolate', ['linear'], ['get', 'value'], 0, 'red', 1,
'green'],
};
</code></pre>
<pre lang="js"><code>// After - to keep the perceptual gradient
const style = {
'fill-color': ['interpolate-hcl', ['linear'], ['get', 'value'], 0,
'red', 1, 'green'],
};
</code></pre>
<p><code>interpolate-hcl</code> is only supported by the Canvas renderer
for now.</p>
<p>With the <code>['interpolate', ...]</code> operator, channels now
keep their fractional part, so operations
applied on top of an interpolated color are more accurate. Code reading
back a color from an
evaluated style may now see a fractional channel.</p>
<h4>The WMTS tile grid extent is no longer calculated from the tile
matrices</h4>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/openlayers/openlayers/commit/88fc44564552176b761dbb9531f9977386d041c0"><code>88fc445</code></a>
Updates for the 10.11.0 release</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/66e841c8833e858a9ddb1d2e66b5a7c9fa8891da"><code>66e841c</code></a>
Merge pull request <a
href="https://redirect.github.com/openlayers/openlayers/issues/17606">#17606</a>
from ahocevar/cog-examples-source</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/fc449f3b8bf83034ff529794bfe5a479126ca07e"><code>fc449f3</code></a>
Merge pull request <a
href="https://redirect.github.com/openlayers/openlayers/issues/17646">#17646</a>
from zarathustracode/wkt-projection-options</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/90cbd4a029d67ea5b46caf57beb67572b0d925d9"><code>90cbd4a</code></a>
Merge pull request <a
href="https://redirect.github.com/openlayers/openlayers/issues/17653">#17653</a>
from openlayers/dependabot/npm_and_yarn/development...</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/9f1b6268c7b0add6317ecdf52b77f954d0adfe0a"><code>9f1b626</code></a>
Merge pull request <a
href="https://redirect.github.com/openlayers/openlayers/issues/17655">#17655</a>
from openlayers/dependabot/npm_and_yarn/production-...</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/0c9e5429b4cc309c38e198408d856d4e8639229c"><code>0c9e542</code></a>
Merge pull request <a
href="https://redirect.github.com/openlayers/openlayers/issues/17656">#17656</a>
from openlayers/dependabot/github_actions/actions-7...</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/c1883341b0011d7c7cf4eacc6b105b90d81b42f7"><code>c188334</code></a>
Merge pull request <a
href="https://redirect.github.com/openlayers/openlayers/issues/17650">#17650</a>
from Egge-Jan/custom-controls-north-arrow</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/7d43f53abca7ffd346252497e2fddfd2df0a6188"><code>7d43f53</code></a>
chore(deps): bump the actions group across 1 directory with 2
updates</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/5a9ab4326db85930141c924d49cf6817e188a2f0"><code>5a9ab43</code></a>
chore(deps-dev): bump the development-security group across 1 directory
with ...</li>
<li><a
href="https://github.com/openlayers/openlayers/commit/27dfb990e413fc250ab0ba48da26f819dc184dad"><code>27dfb99</code></a>
chore(deps): bump earcut</li>
<li>Additional commits viewable in <a
href="https://github.com/openlayers/openlayers/compare/v10.10.0...v10.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol&package-manager=npm_and_yarn&previous-version=10.10.0&new-version=10.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-08 13:54:54 +00:00
dependabot[bot] 2990bc992a chore(deps-dev): Bump i18next-cli from 1.74.4 to 1.74.5 (#2216) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.4
to 1.74.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.74.5</h2>
<ul>
<li>fix(extract): a value typed as an array of a string union
(<code>Color[]</code>, <code>readonly Color[]</code>,
<code>Array&lt;Color&gt;</code> or an alias of one) now resolves to the
union's values, so
<code>colors.map((color) =&gt;
t(\</code>color.${color}`))<code>and</code>for (const color of
colors)<code>extract every key instead of nothing. Before, this only
worked with</code>color as Color`. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/300">#300</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/954db342d8f46d64f1836be47fd818ff590dba52"><code>954db34</code></a>
1.74.5</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/60c2773939e853eacb4483773606deb8f635216d"><code>60c2773</code></a>
fix(extract): resolve arrays of a string union to the union's values <a
href="https://redirect.github.com/i18next/i18next-cli/issues/300">#300</a></li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.74.4...v1.74.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.4&new-version=1.74.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-08 13:54:27 +00:00
dependabot[bot] 3ca5b342d4 chore(deps): Bump maplibre-gl from 6.11.2 to 6.12.0 (#2212) 
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from
6.11.2 to 6.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's
releases</a>.</em></p>
<blockquote>
<h2>v6.12.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Add a <code>zoomToUserAccuracy</code> option to
<code>GeolocateControlOptions</code> to allow control over map zoom
adjustments in line with the Geolocation Position update accuracy, while
<code>trackUserLocation</code> is <code>true</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7908">#7908</a>,
<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8324">#8324</a>,
continues <a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7909">#7909</a>)
(by <a
href="https://github.com/timsluis"><code>@​timsluis</code></a>)</li>
<li>With <code>fill-extrusion-rounded-corner-distance</code> set, shade
the walls of a rounded corner as one curved surface by sharing the
vertex normal between walls that meet at a shallow angle, instead of one
flat shade per arc segment (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8475">#8475</a>)
(by <a
href="https://github.com/clement-igonet"><code>@​clement-igonet</code></a>)</li>
<li>Speed up symbol rendering when the set of visible tiles changes, by
rewriting the opacity buffers only of the symbol buckets whose labels
actually changed instead of every bucket of every symbol layer (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8434">#8434</a>)
(by <a
href="https://github.com/cherenkov"><code>@​cherenkov</code></a>)</li>
<li>Add an <code>absolutePadding</code> option to
<code>Map#cameraForBounds</code> and <code>Map#fitBounds</code> to treat
<code>padding</code> as the map's persistent padding instead of adding
it to the current one (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8480">#8480</a>)
(by <a
href="https://github.com/sargunv"><code>@​sargunv</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>fix(CanvasSource): catch load errors and fire map.error like
ImageSource (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8448">#8448</a>)
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8450">#8450</a>)
(by <a
href="https://github.com/SatvikMishra08"><code>@​SatvikMishra08</code></a>)</li>
<li>Fix <code>GeoJSONSource</code> still sending its waiting updates to
the worker after the source is removed (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix <code>GeoJSONSource</code> memory growing until the page crashes
when <code>setData</code> is called faster than the worker handles it
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix the map rendering at the display rate instead of going idle over
a DEM with a minimum below sea level when
<code>centerClampedToGround</code> is false (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8605">#8605</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix a gesture over terrain throwing the camera when the terrain
under the center loads after the gesture begins or the terrain switches
off before it ends (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8548">#8548</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the terrain elevation reading 0 outside the drawn tiles while
the camera is below the terrain, and make that read about 40 times
cheaper (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix a hole around the poles of the globe in background, fill and
line layers from zoom 3 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8638">#8638</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix <code>jumpTo</code>, and the setters that use it, pulling the
center elevation onto the terrain when
<code>centerClampedToGround</code> is false (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>GeoJSONSource#updateData</code> leaving stale clusters on
untouched tiles after clustering was turned on with
<code>setClusterOptions</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix <code>GeoJSONSource#setClusterOptions</code> clustering twice
when called while new data is waiting to be sent (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix <code>GeoJSONSource</code> data set with <code>setData</code>
being overwritten by the result of an earlier URL load or
<code>updateData</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix fill-extrusion walls facing exactly east or west skipping
<code>fill-extrusion-vertical-gradient</code> and rendering brighter
than the other walls (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8604">#8604</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix <code>easeTo</code> and <code>flyTo</code> pulling the center
elevation onto the terrain when <code>centerClampedToGround</code> is
false (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>fill-outline-color</code>, and the antialiased edge of
fills, not being drawn when terrain is enabled (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/4200">#4200</a>)
(by <a
href="https://github.com/clement-igonet"><code>@​clement-igonet</code></a>)</li>
<li>Respect map padding when constraining the camera to max bounds, so
the padded viewport can pan fully to its edges (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8501">#8501</a>)
(by <a
href="https://github.com/erenbati"><code>@​erenbati</code></a>)</li>
<li>Fix an unclosed disallowed tag in one attribution erasing the other
attributions, by sanitizing each attribution before joining them (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8569">#8569</a>)
(by <a href="https://github.com/sx4im"><code>@​sx4im</code></a>)</li>
<li>Fix <code>color-relief</code> with a <code>custom</code> DEM
encoding whose <code>redFactor</code>, <code>greenFactor</code> or
<code>blueFactor</code> is 0, where every elevation stop packed to NaN
and the color ramp collapsed (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6411">#6411</a>)
(by <a
href="https://github.com/drakeo338"><code>@​drakeo338</code></a>)</li>
<li>Fix <code>queryRenderedFeatures</code> missing fill-extrusions on
globe once it renders as mercator (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8560">#8560</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix <code>line-offset</code> distorting the line width around joins
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8570">#8570</a>)
(by <a href="https://github.com/HarelM"><code>@​HarelM</code></a>)</li>
<li>Cross-fade raster tiles when zooming out from a source's
<code>maxzoom</code>, where the tiles switched instantly (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8517">#8517</a>)
(by <a
href="https://github.com/cherenkov"><code>@​cherenkov</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>6.12.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Add a <code>zoomToUserAccuracy</code> option to
<code>GeolocateControlOptions</code> to allow control over map zoom
adjustments in line with the Geolocation Position update accuracy, while
<code>trackUserLocation</code> is <code>true</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7908">#7908</a>,
<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8324">#8324</a>,
continues <a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7909">#7909</a>)
(by <a
href="https://github.com/timsluis"><code>@​timsluis</code></a>)</li>
<li>With <code>fill-extrusion-rounded-corner-distance</code> set, shade
the walls of a rounded corner as one curved surface by sharing the
vertex normal between walls that meet at a shallow angle, instead of one
flat shade per arc segment (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8475">#8475</a>)
(by <a
href="https://github.com/clement-igonet"><code>@​clement-igonet</code></a>)</li>
<li>Speed up symbol rendering when the set of visible tiles changes, by
rewriting the opacity buffers only of the symbol buckets whose labels
actually changed instead of every bucket of every symbol layer (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8434">#8434</a>)
(by <a
href="https://github.com/cherenkov"><code>@​cherenkov</code></a>)</li>
<li>Add an <code>absolutePadding</code> option to
<code>Map#cameraForBounds</code> and <code>Map#fitBounds</code> to treat
<code>padding</code> as the map's persistent padding instead of adding
it to the current one (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8480">#8480</a>)
(by <a
href="https://github.com/sargunv"><code>@​sargunv</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>fix(CanvasSource): catch load errors and fire map.error like
ImageSource (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8448">#8448</a>)
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8450">#8450</a>)
(by <a
href="https://github.com/SatvikMishra08"><code>@​SatvikMishra08</code></a>)</li>
<li>Fix <code>GeoJSONSource</code> still sending its waiting updates to
the worker after the source is removed (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix <code>GeoJSONSource</code> memory growing until the page crashes
when <code>setData</code> is called faster than the worker handles it
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix the map rendering at the display rate instead of going idle over
a DEM with a minimum below sea level when
<code>centerClampedToGround</code> is false (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8605">#8605</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix a gesture over terrain throwing the camera when the terrain
under the center loads after the gesture begins or the terrain switches
off before it ends (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8548">#8548</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the terrain elevation reading 0 outside the drawn tiles while
the camera is below the terrain, and make that read about 40 times
cheaper (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix a hole around the poles of the globe in background, fill and
line layers from zoom 3 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8638">#8638</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix <code>jumpTo</code>, and the setters that use it, pulling the
center elevation onto the terrain when
<code>centerClampedToGround</code> is false (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>GeoJSONSource#updateData</code> leaving stale clusters on
untouched tiles after clustering was turned on with
<code>setClusterOptions</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix <code>GeoJSONSource#setClusterOptions</code> clustering twice
when called while new data is waiting to be sent (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix <code>GeoJSONSource</code> data set with <code>setData</code>
being overwritten by the result of an earlier URL load or
<code>updateData</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>)
(by <a
href="https://github.com/clementperon"><code>@​clementperon</code></a>)</li>
<li>Fix fill-extrusion walls facing exactly east or west skipping
<code>fill-extrusion-vertical-gradient</code> and rendering brighter
than the other walls (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8604">#8604</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix <code>easeTo</code> and <code>flyTo</code> pulling the center
elevation onto the terrain when <code>centerClampedToGround</code> is
false (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>fill-outline-color</code>, and the antialiased edge of
fills, not being drawn when terrain is enabled (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/4200">#4200</a>)
(by <a
href="https://github.com/clement-igonet"><code>@​clement-igonet</code></a>)</li>
<li>Respect map padding when constraining the camera to max bounds, so
the padded viewport can pan fully to its edges (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8501">#8501</a>)
(by <a
href="https://github.com/erenbati"><code>@​erenbati</code></a>)</li>
<li>Fix an unclosed disallowed tag in one attribution erasing the other
attributions, by sanitizing each attribution before joining them (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8569">#8569</a>)
(by <a href="https://github.com/sx4im"><code>@​sx4im</code></a>)</li>
<li>Fix <code>color-relief</code> with a <code>custom</code> DEM
encoding whose <code>redFactor</code>, <code>greenFactor</code> or
<code>blueFactor</code> is 0, where every elevation stop packed to NaN
and the color ramp collapsed (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6411">#6411</a>)
(by <a
href="https://github.com/drakeo338"><code>@​drakeo338</code></a>)</li>
<li>Fix <code>queryRenderedFeatures</code> missing fill-extrusions on
globe once it renders as mercator (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8560">#8560</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix <code>line-offset</code> distorting the line width around joins
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8570">#8570</a>)
(by <a href="https://github.com/HarelM"><code>@​HarelM</code></a>)</li>
<li>Cross-fade raster tiles when zooming out from a source's
<code>maxzoom</code>, where the tiles switched instantly (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8517">#8517</a>)
(by <a
href="https://github.com/cherenkov"><code>@​cherenkov</code></a>)</li>
<li>Mark a program as failed to create instead of throwing when the
WebGL context is lost or a failed link reports zero attached shaders,
where a dead GPU process made every query answer dead before
<code>webglcontextlost</code> arrived (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8607">#8607</a>)
(by <a
href="https://github.com/rubenmarcus"><code>@​rubenmarcus</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/7976a989280508d763265f95f523e945d04d87b0"><code>7976a98</code></a>
Bump js version to 6.12.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8646">#8646</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/7c6c49e604e0b1d42eea8ab9b74643dc254c41df"><code>7c6c49e</code></a>
fix: a gesture's hold on the center elevation waits for the DEM (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8548">#8548</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/48d5fffe6ba53017b393684200a86920df859e57"><code>48d5fff</code></a>
Draw fill outlines when terrain is enabled (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8632">#8632</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/d4aa8b469985583641c60d4cbc853eda3d7db1cf"><code>d4aa8b4</code></a>
feat: add a zoomToUserAccuracy option to GeolocateControl (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8324">#8324</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/94c71652d3ce7182aa8305cd0bd549d24e6fffe3"><code>94c7165</code></a>
test: build the terrain for the tile-zoom DEM read from the test util
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8645">#8645</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/c842c3bd6cf90288a4d7056304400ceb4b6465d1"><code>c842c3b</code></a>
Fix GeoJSONSource keeping every finished worker update alive while
updates ke...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/80f9b4331f488915e5da9a2bb1e716a940b162de"><code>80f9b43</code></a>
fix: recalculate the matrices when the minimum elevation for the current
tile...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/622371972d5e77a8688245026cd61dcfdfefbef1"><code>6223719</code></a>
fix: read the terrain elevation at the tile zoom where the drawn tiles
do not...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/9c48bf7fb99d35888ea7ce943209786e59087be8"><code>9c48bf7</code></a>
fix: avoid a hole forming at the poles of the globe (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8638">#8638</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/1bc975fc97cc08eb87c6cb6f50e3e6f38dbf3bab"><code>1bc975f</code></a>
Add llms.txt and social cards to the docs (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8639">#8639</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v6.11.2...v6.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.11.2&new-version=6.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-07 13:56:52 +00:00
dependabot[bot] 64c13902ff chore(deps-dev): Bump source-map-js from 1.2.1 to 1.2.2 (#2211) 
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from
1.2.1 to 1.2.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/7rulnik/source-map-js/releases">source-map-js's
releases</a>.</em></p>
<blockquote>
<h2>v1.2.2</h2>
<ul>
<li>
<p>Fix crash when executing in browser with CSP script-src that don't
permit unsafe-eval (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/29">#29</a>)
<a href="https://github.com/xfournet"><code>@​xfournet</code></a></p>
</li>
<li>
<p>Fix denial of service from malicious indexed source maps
(CVE-2026-93749) (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/79">#79</a>)</p>
<p>Reported by <a
href="https://github.com/waydeshi"><code>@​waydeshi</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/issues/76">#76</a>.
A fix was also proposed by <a
href="https://github.com/aniebiet"><code>@​aniebiet</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/pull/78">#78</a>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md">source-map-js's
changelog</a>.</em></p>
<blockquote>
<h2>1.2.2</h2>
<ul>
<li>
<p>Fix crash when executing in browser with CSP script-src that don't
permit unsafe-eval (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/29">#29</a>)
<a href="https://github.com/xfournet"><code>@​xfournet</code></a></p>
</li>
<li>
<p>Fix denial of service from malicious indexed source maps
(CVE-2026-93749) (<a
href="https://redirect.github.com/7rulnik/source-map-js/pull/79">#79</a>)</p>
<p>Reported by <a
href="https://github.com/waydeshi"><code>@​waydeshi</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/issues/76">#76</a>.
A fix was also proposed by <a
href="https://github.com/aniebiet"><code>@​aniebiet</code></a> in <a
href="https://redirect.github.com/7rulnik/source-map-js/pull/78">#78</a>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a"><code>0a1d334</code></a>
1.2.2</li>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739"><code>4c6fa26</code></a>
Update changelog</li>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016"><code>cf76580</code></a>
Fix denial of service from malicious indexed source maps
(CVE-2026-93749) (<a
href="https://redirect.github.com/7rulnik/source-map-js/issues/79">#79</a>)</li>
<li><a
href="https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df"><code>7899a86</code></a>
Fix crash when executing browser with CSP script-src that don't permit
unsafe...</li>
<li>See full diff in <a
href="https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=source-map-js&package-manager=npm_and_yarn&previous-version=1.2.1&new-version=1.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-06 14:10:29 +00:00
dependabot[bot] 83531bd777 chore(deps-dev): Bump eslint from 10.11.0 to 10.12.0 (#2210) 
Bumps [eslint](https://github.com/eslint/eslint) from 10.11.0 to
10.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.12.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4618052eed6bb3ef420cf0db0490bbda2fd835a5"><code>4618052</code></a>
feat: handle astral letters in <code>new-cap</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21357">#21357</a>)
(sary)</li>
<li><a
href="https://github.com/eslint/eslint/commit/4ec5168d6d6888e3f7b163eb82963d40e45a75fa"><code>4ec5168</code></a>
feat: allow <code>SourceCode#getText()</code> to accept tokens and
comments (<a
href="https://redirect.github.com/eslint/eslint/issues/21340">#21340</a>)
(electrohyun)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/bc51eee6e3e816622b2dd1bc08acb9cfb2d3a6a7"><code>bc51eee</code></a>
fix: <code>prefer-arrow-callback</code> false positive in conditional
test (<a
href="https://redirect.github.com/eslint/eslint/issues/21373">#21373</a>)
(Daniel Pinto)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bbff86c41521cc435e20754e26007f657a843038"><code>bbff86c</code></a>
fix: skip lines with multiple comments in
<code>max-lines-per-function</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21332">#21332</a>)
(xbinaryx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/efc4d6bdc4c4d1dfba8bdab6a8f44f27a1b1d00a"><code>efc4d6b</code></a>
fix: astral letters in <code>consistent-return</code>,
<code>no-eval</code>, <code>no-invalid-this</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21360">#21360</a>)
(lumir)</li>
<li><a
href="https://github.com/eslint/eslint/commit/93de066d4125f8df013d40305e8009f4634a5cba"><code>93de066</code></a>
fix: prefer-exponentiation-operator autofix for async function base (<a
href="https://redirect.github.com/eslint/eslint/issues/21322">#21322</a>)
(Vladimir Babin)</li>
<li><a
href="https://github.com/eslint/eslint/commit/02e34ffba6adbed72365177c7caee71d950834e5"><code>02e34ff</code></a>
fix: add missing space after <code>else</code> in <code>curly</code>
autofix (<a
href="https://redirect.github.com/eslint/eslint/issues/21355">#21355</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b14b8bc213ccfc19d3edcfa9ce6af62622661160"><code>b14b8bc</code></a>
fix: correct <code>id-length</code> message for long private names (<a
href="https://redirect.github.com/eslint/eslint/issues/21348">#21348</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/69aac01d898837a934c9e735e0b7881cc1df09e8"><code>69aac01</code></a>
fix: support <code>TSFunctionType</code> in
<code>getFunctionHeadLoc</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21335">#21335</a>)
(xbinaryx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/686630eb34ec1cddf399a4e6eaeebb080116a532"><code>686630e</code></a>
fix: <code>no-loss-of-precision</code> false positive with
<code>0.e5</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21337">#21337</a>)
(sethamus)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/67eb586e2eda290813b329d4f40e605ad696bc4f"><code>67eb586</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/5370d7ee35a6523873f798e87f3ccc73779d5d21"><code>5370d7e</code></a>
docs: clarify <code>one-var</code> <code>separateRequires</code> matches
any <code>require()</code> call (<a
href="https://redirect.github.com/eslint/eslint/issues/21192">#21192</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8816c1ddfcfa31318ad17cddcfb68acffa30940f"><code>8816c1d</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3d2e7cedb7409d8a2c5f2c2fafb14fa22790e40e"><code>3d2e7ce</code></a>
docs: fix typo in no-unused-expressions documentation (<a
href="https://redirect.github.com/eslint/eslint/issues/21346">#21346</a>)
(bytedoe)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/152067f0f81f08b6cce9cf8eeaddb8558731b4f6"><code>152067f</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21362">#21362</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b56d58e0b1f3c919a6b7661254af760cdd909d6e"><code>b56d58e</code></a>
chore: update github/codeql-action action to v4.38.2 (<a
href="https://redirect.github.com/eslint/eslint/issues/21376">#21376</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/bfaea12ddc30b458fe4cfbb6c306a62b5299c177"><code>bfaea12</code></a>
perf: cache normalized config globals per languageOptions (<a
href="https://redirect.github.com/eslint/eslint/issues/21364">#21364</a>)
(James Ross)</li>
<li><a
href="https://github.com/eslint/eslint/commit/322209ef164e8a00a25ec7ca166969ddc853355c"><code>322209e</code></a>
ci: avoid Nx cache in ecosystem tests and disable failing test (<a
href="https://redirect.github.com/eslint/eslint/issues/21369">#21369</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d166567901e09940c1de4ad0e95d572eeab5c927"><code>d166567</code></a>
chore: update dependency prettier to v3.9.9 (<a
href="https://redirect.github.com/eslint/eslint/issues/21371">#21371</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/29585ceba7ad35368d1b763bd1e80d899f28842c"><code>29585ce</code></a>
chore: update dependency eslint-plugin-expect-type to ^0.7.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/21359">#21359</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/39d79ba9650542ac66d585d1899304abd630c07d"><code>39d79ba</code></a>
chore: update github/codeql-action action to v4.38.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/21354">#21354</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/182a6e993a8a5dbdad5a628b69ad7382d48bf24f"><code>182a6e9</code></a>
chore: update dependency prettier to v3.9.8 (<a
href="https://redirect.github.com/eslint/eslint/issues/21352">#21352</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/f995127230dad258069c29b7f51971681bd53f00"><code>f995127</code></a>
chore: remove CLAUDE.md in favor of AGENTS.md (<a
href="https://redirect.github.com/eslint/eslint/issues/21339">#21339</a>)
(Jarren)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b95fb6cb335f82a0ccabb0944ac3b89c703bd947"><code>b95fb6c</code></a>
chore: update dependency prettier to v3.9.7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21347">#21347</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/3782dd458fdfbe492e600d9a54b295a9721ed815"><code>3782dd4</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21342">#21342</a>)
(ESLint Bot)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/a438ec39512c3381f4785a1f3058982ce9845970"><code>a438ec3</code></a>
10.12.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/32a73f144198510e23c40c5ca6808e2c09b7e5e5"><code>32a73f1</code></a>
Build: changelog update for 10.12.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/bc51eee6e3e816622b2dd1bc08acb9cfb2d3a6a7"><code>bc51eee</code></a>
fix: <code>prefer-arrow-callback</code> false positive in conditional
test (<a
href="https://redirect.github.com/eslint/eslint/issues/21373">#21373</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bbff86c41521cc435e20754e26007f657a843038"><code>bbff86c</code></a>
fix: skip lines with multiple comments in
<code>max-lines-per-function</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21332">#21332</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/152067f0f81f08b6cce9cf8eeaddb8558731b4f6"><code>152067f</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21362">#21362</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b56d58e0b1f3c919a6b7661254af760cdd909d6e"><code>b56d58e</code></a>
chore: update github/codeql-action action to v4.38.2 (<a
href="https://redirect.github.com/eslint/eslint/issues/21376">#21376</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/67eb586e2eda290813b329d4f40e605ad696bc4f"><code>67eb586</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/bfaea12ddc30b458fe4cfbb6c306a62b5299c177"><code>bfaea12</code></a>
perf: cache normalized config globals per languageOptions (<a
href="https://redirect.github.com/eslint/eslint/issues/21364">#21364</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/322209ef164e8a00a25ec7ca166969ddc853355c"><code>322209e</code></a>
ci: avoid Nx cache in ecosystem tests and disable failing test (<a
href="https://redirect.github.com/eslint/eslint/issues/21369">#21369</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d166567901e09940c1de4ad0e95d572eeab5c927"><code>d166567</code></a>
chore: update dependency prettier to v3.9.9 (<a
href="https://redirect.github.com/eslint/eslint/issues/21371">#21371</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.11.0...v10.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=10.11.0&new-version=10.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-06 14:03:54 +00:00
dependabot[bot] 6ff01be932 chore(deps): Bump react-resizable-panels from 4.14.1 to 4.14.2 in the react group (#2209) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.1 to 4.14.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.2</h2>
<ul>
<li><a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/759">759</a>:
Bugfix: Resort panels and separators before (re)deriving
constraints</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.2</h2>
<ul>
<li><a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/759">759</a>:
Bugfix: Resort panels and separators before (re)deriving
constraints</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/8c0573b7938b50c868ae837813fda8945e36b596"><code>8c0573b</code></a>
4.14.1 -&gt; 4.14.2</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/e00997ab338672df82e67cb711e9ef565b2eab2a"><code>e00997a</code></a>
Bugfix: Resort panels and separators before (re)deriving constraints (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/759">#759</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/7eb8d7af0ae9311055354a16f6ce4997b60783e1"><code>7eb8d7a</code></a>
Update react-lib-tools and docs site content</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/8d30dadcf428b9c7aa8636e9a4b3820a75041cd7"><code>8d30dad</code></a>
Update react-lib-tools</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/2b231f16bffea686339ad1a07003ee8676a52975"><code>2b231f1</code></a>
Bump react-lib-tools to make site a bit larger</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/b46094e28a79df67f5da7c030fbbaa8d6bd4de7d"><code>b46094e</code></a>
Fix logo color on docs site</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/6251784a85f8f90ab5c578dbfe3b2fd97205bf5e"><code>6251784</code></a>
Update logo</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.1...4.14.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.1&new-version=4.14.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-06 13:55:36 +00:00
dependabot[bot] 8a98be0e96 chore(deps-dev): Bump sass from 1.105.0 to 1.105.1 (#2207) 
Bumps [sass](https://github.com/sass/dart-sass) from 1.105.0 to 1.105.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/releases">sass's
releases</a>.</em></p>
<blockquote>
<h2>Dart Sass 1.105.1</h2>
<p>To install Sass 1.105.1, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<ul>
<li>Improve error messages for <code>@extend</code>s across different
media queries.</li>
</ul>
<p>See the <a
href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11051">full
changelog</a> for changes in earlier releases.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's
changelog</a>.</em></p>
<blockquote>
<h2>1.105.1</h2>
<ul>
<li>Improve error messages for <code>@extend</code>s across different
media queries.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sass/dart-sass/commit/db3c666fd8adedce310295580694ae05a01a00cf"><code>db3c666</code></a>
Merge pull request <a
href="https://redirect.github.com/sass/dart-sass/issues/2869">#2869</a>
from sass/extend-media-errors</li>
<li><a
href="https://github.com/sass/dart-sass/commit/2ac45157135726623bf010d75559cd659a953737"><code>2ac4515</code></a>
Improve span boundaries for media queries and selectors</li>
<li><a
href="https://github.com/sass/dart-sass/commit/706cfbf3cc8726f57cbbe82c0c355fec6708f974"><code>706cfbf</code></a>
Fix <code>InterpolationMap._expandInterpolationSpanRight()</code></li>
<li><a
href="https://github.com/sass/dart-sass/commit/792a948d6fb02d81f57baedb0dedb882ba29a652"><code>792a948</code></a>
Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize
(<a
href="https://redirect.github.com/sass/dart-sass/issues/2870">#2870</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/61ab7025b90012161540afa7cf5757b88633aeb2"><code>61ab702</code></a>
Improve errors for <code>@extend</code> across media queries</li>
<li><a
href="https://github.com/sass/dart-sass/commit/288d4e202501ea1b943525c88e1d5e5cd225de62"><code>288d4e2</code></a>
Auto-merge dependabot PRs as the Sass bot account (<a
href="https://redirect.github.com/sass/dart-sass/issues/2866">#2866</a>)</li>
<li>See full diff in <a
href="https://github.com/sass/dart-sass/compare/1.105.0...1.105.1">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-05 14:04:29 +00:00
dependabot[bot] f8b56cf384 chore(deps-dev): Bump vite from 8.3.1 to 8.3.2 (#2208) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.3.1 to 8.3.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.2</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> preload CSS correctly when
<code>renderBuiltUrl</code> returns URLs with queries (<a
href="https://redirect.github.com/vitejs/vite/issues/23611">#23611</a>)
(<a
href="https://github.com/vitejs/vite/commit/64e0a215c24f0522b27b91f93cfd93e317b94481">64e0a21</a>)</li>
<li><strong>bundled-dev:</strong> serve lazy chunk sourcemaps (<a
href="https://redirect.github.com/vitejs/vite/issues/23026">#23026</a>)
(<a
href="https://github.com/vitejs/vite/commit/eb7aa9a8816a1e926d5d9b4cbe7e796b61314ce2">eb7aa9a</a>)</li>
<li><strong>bundled-dev:</strong> serve the rolldown runtime from the
installed rolldown (<a
href="https://redirect.github.com/vitejs/vite/issues/23568">#23568</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc598a6a8a6b7d6e157e9f19c16911cff8d2360c">bc598a6</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23601">#23601</a>)
(<a
href="https://github.com/vitejs/vite/commit/9944fa6033873f13ae88f59e023ab642c50fee2b">9944fa6</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23602">#23602</a>)
(<a
href="https://github.com/vitejs/vite/commit/88c17415af221b3a13e778f4f2c0e907c8287baf">88c1741</a>)</li>
<li><strong>html:</strong> resolve percent-encoded srcset urls (<a
href="https://redirect.github.com/vitejs/vite/issues/23609">#23609</a>)
(<a
href="https://github.com/vitejs/vite/commit/53f1ce7bfe38426861f6da572ef0e3359f6a80cd">53f1ce7</a>)</li>
<li>limit size of object and array printing via
<code>forwardConsole</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23565">#23565</a>)
(<a
href="https://github.com/vitejs/vite/commit/e64a5877dd3e552843a545749ccc257568917d28">e64a587</a>)</li>
<li>merge <code>build.rolldownOptions.output.minify</code> correctly (<a
href="https://redirect.github.com/vitejs/vite/issues/23536">#23536</a>)
(<a
href="https://github.com/vitejs/vite/commit/bba3bb8beedd185948956e02667d450672632d79">bba3bb8</a>)</li>
<li><strong>optimize-deps:</strong> avoid &quot;unsupported&quot;
warnings for browser:false mappings (<a
href="https://redirect.github.com/vitejs/vite/issues/23590">#23590</a>)
(<a
href="https://github.com/vitejs/vite/commit/5e4b9ca3dcb24b51f58a765fd2d852614bbf3574">5e4b9ca</a>)</li>
<li><strong>optimizer:</strong> preserve excluded optional peer require
fallbacks (<a
href="https://redirect.github.com/vitejs/vite/issues/23600">#23600</a>)
(<a
href="https://github.com/vitejs/vite/commit/a2bd6fa897c35c8a691671a7d70061c1cdd5c688">a2bd6fa</a>)</li>
<li>pass queries to <code>renderBuiltUrl</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23586">#23586</a>)
(<a
href="https://github.com/vitejs/vite/commit/744269e5b2a155074910ddd275aecf2b83938496">744269e</a>)</li>
<li><strong>server:</strong> handle file watcher errors without crashing
(<a
href="https://redirect.github.com/vitejs/vite/issues/23503">#23503</a>)
(<a
href="https://github.com/vitejs/vite/commit/6894f5cbceac589536a0efb476d881a47f5ab1c5">6894f5c</a>)</li>
<li><strong>server:</strong> release previous environments after
initialization (<a
href="https://redirect.github.com/vitejs/vite/issues/23499">#23499</a>)
(<a
href="https://github.com/vitejs/vite/commit/5a3a010eea4c9ebbdcc080819f93068d4e035bd4">5a3a010</a>)</li>
<li><strong>ssr:</strong> encode whitespace in module runner sourceURL
(<a
href="https://redirect.github.com/vitejs/vite/issues/23513">#23513</a>)
(<a
href="https://github.com/vitejs/vite/commit/bbc88129c967a8b8eedebd93acc82bee63b86b2a">bbc8812</a>)</li>
<li><strong>worker:</strong> align worker urls in client and server when
using terser (<a
href="https://redirect.github.com/vitejs/vite/issues/23614">#23614</a>)
(<a
href="https://github.com/vitejs/vite/commit/24bd3316f3b2503d04a49361e365532bdb335e19">24bd331</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>avoid encoding intermediate source maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23461">#23461</a>)
(<a
href="https://github.com/vitejs/vite/commit/89574f6d940a7273a53c5122a4477285801a696a">89574f6</a>)</li>
<li><strong>build:</strong> avoid quadratic link scan in the preload
helper (<a
href="https://redirect.github.com/vitejs/vite/issues/23510">#23510</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf5c0288d526824aead1b24e977400f13c527927">cf5c028</a>)</li>
<li>only register time middleware when debug logging is enabled (<a
href="https://redirect.github.com/vitejs/vite/issues/23621">#23621</a>)
(<a
href="https://github.com/vitejs/vite/commit/94d0080345e23d63d4cd02df2f7fa2afae775c26">94d0080</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>fix dead og-image PNG links in vite6/vite7 changelog entries (<a
href="https://redirect.github.com/vitejs/vite/issues/23594">#23594</a>)
(<a
href="https://github.com/vitejs/vite/commit/1929b4cc5f38ad53781e3b07b8bdaa32cf18da07">1929b4c</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update vitest monorepo to v5 (<a
href="https://redirect.github.com/vitejs/vite/issues/23604">#23604</a>)
(<a
href="https://github.com/vitejs/vite/commit/24339f4339d64fd8b5bc37654ac14ccff5aee584">24339f4</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li>use <code>tinyexec</code> instead of <code>cross-spawn</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23583">#23583</a>)
(<a
href="https://github.com/vitejs/vite/commit/db915e5c0edbe1359dcf0cea340c9571dc7f4ad9">db915e5</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li><strong>bundled-dev:</strong> accept a rolldown dev runtime with no
helper imports (<a
href="https://redirect.github.com/vitejs/vite/issues/23606">#23606</a>)
(<a
href="https://github.com/vitejs/vite/commit/634745dcc5648912bc32cb4de72ed8dd2230efa0">634745d</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.1...v8.3.2">8.3.2</a>
(2026-10-01)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> preload CSS correctly when
<code>renderBuiltUrl</code> returns URLs with queries (<a
href="https://redirect.github.com/vitejs/vite/issues/23611">#23611</a>)
(<a
href="https://github.com/vitejs/vite/commit/64e0a215c24f0522b27b91f93cfd93e317b94481">64e0a21</a>)</li>
<li><strong>bundled-dev:</strong> serve lazy chunk sourcemaps (<a
href="https://redirect.github.com/vitejs/vite/issues/23026">#23026</a>)
(<a
href="https://github.com/vitejs/vite/commit/eb7aa9a8816a1e926d5d9b4cbe7e796b61314ce2">eb7aa9a</a>)</li>
<li><strong>bundled-dev:</strong> serve the rolldown runtime from the
installed rolldown (<a
href="https://redirect.github.com/vitejs/vite/issues/23568">#23568</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc598a6a8a6b7d6e157e9f19c16911cff8d2360c">bc598a6</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23601">#23601</a>)
(<a
href="https://github.com/vitejs/vite/commit/9944fa6033873f13ae88f59e023ab642c50fee2b">9944fa6</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23602">#23602</a>)
(<a
href="https://github.com/vitejs/vite/commit/88c17415af221b3a13e778f4f2c0e907c8287baf">88c1741</a>)</li>
<li><strong>html:</strong> resolve percent-encoded srcset urls (<a
href="https://redirect.github.com/vitejs/vite/issues/23609">#23609</a>)
(<a
href="https://github.com/vitejs/vite/commit/53f1ce7bfe38426861f6da572ef0e3359f6a80cd">53f1ce7</a>)</li>
<li>limit size of object and array printing via
<code>forwardConsole</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23565">#23565</a>)
(<a
href="https://github.com/vitejs/vite/commit/e64a5877dd3e552843a545749ccc257568917d28">e64a587</a>)</li>
<li>merge <code>build.rolldownOptions.output.minify</code> correctly (<a
href="https://redirect.github.com/vitejs/vite/issues/23536">#23536</a>)
(<a
href="https://github.com/vitejs/vite/commit/bba3bb8beedd185948956e02667d450672632d79">bba3bb8</a>)</li>
<li><strong>optimize-deps:</strong> avoid &quot;unsupported&quot;
warnings for browser:false mappings (<a
href="https://redirect.github.com/vitejs/vite/issues/23590">#23590</a>)
(<a
href="https://github.com/vitejs/vite/commit/5e4b9ca3dcb24b51f58a765fd2d852614bbf3574">5e4b9ca</a>)</li>
<li><strong>optimizer:</strong> preserve excluded optional peer require
fallbacks (<a
href="https://redirect.github.com/vitejs/vite/issues/23600">#23600</a>)
(<a
href="https://github.com/vitejs/vite/commit/a2bd6fa897c35c8a691671a7d70061c1cdd5c688">a2bd6fa</a>)</li>
<li>pass queries to <code>renderBuiltUrl</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23586">#23586</a>)
(<a
href="https://github.com/vitejs/vite/commit/744269e5b2a155074910ddd275aecf2b83938496">744269e</a>)</li>
<li><strong>server:</strong> handle file watcher errors without crashing
(<a
href="https://redirect.github.com/vitejs/vite/issues/23503">#23503</a>)
(<a
href="https://github.com/vitejs/vite/commit/6894f5cbceac589536a0efb476d881a47f5ab1c5">6894f5c</a>)</li>
<li><strong>server:</strong> release previous environments after
initialization (<a
href="https://redirect.github.com/vitejs/vite/issues/23499">#23499</a>)
(<a
href="https://github.com/vitejs/vite/commit/5a3a010eea4c9ebbdcc080819f93068d4e035bd4">5a3a010</a>)</li>
<li><strong>ssr:</strong> encode whitespace in module runner sourceURL
(<a
href="https://redirect.github.com/vitejs/vite/issues/23513">#23513</a>)
(<a
href="https://github.com/vitejs/vite/commit/bbc88129c967a8b8eedebd93acc82bee63b86b2a">bbc8812</a>)</li>
<li><strong>worker:</strong> align worker urls in client and server when
using terser (<a
href="https://redirect.github.com/vitejs/vite/issues/23614">#23614</a>)
(<a
href="https://github.com/vitejs/vite/commit/24bd3316f3b2503d04a49361e365532bdb335e19">24bd331</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>avoid encoding intermediate source maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23461">#23461</a>)
(<a
href="https://github.com/vitejs/vite/commit/89574f6d940a7273a53c5122a4477285801a696a">89574f6</a>)</li>
<li><strong>build:</strong> avoid quadratic link scan in the preload
helper (<a
href="https://redirect.github.com/vitejs/vite/issues/23510">#23510</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf5c0288d526824aead1b24e977400f13c527927">cf5c028</a>)</li>
<li>only register time middleware when debug logging is enabled (<a
href="https://redirect.github.com/vitejs/vite/issues/23621">#23621</a>)
(<a
href="https://github.com/vitejs/vite/commit/94d0080345e23d63d4cd02df2f7fa2afae775c26">94d0080</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>fix dead og-image PNG links in vite6/vite7 changelog entries (<a
href="https://redirect.github.com/vitejs/vite/issues/23594">#23594</a>)
(<a
href="https://github.com/vitejs/vite/commit/1929b4cc5f38ad53781e3b07b8bdaa32cf18da07">1929b4c</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li><strong>deps:</strong> update vitest monorepo to v5 (<a
href="https://redirect.github.com/vitejs/vite/issues/23604">#23604</a>)
(<a
href="https://github.com/vitejs/vite/commit/24339f4339d64fd8b5bc37654ac14ccff5aee584">24339f4</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li>use <code>tinyexec</code> instead of <code>cross-spawn</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23583">#23583</a>)
(<a
href="https://github.com/vitejs/vite/commit/db915e5c0edbe1359dcf0cea340c9571dc7f4ad9">db915e5</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li><strong>bundled-dev:</strong> accept a rolldown dev runtime with no
helper imports (<a
href="https://redirect.github.com/vitejs/vite/issues/23606">#23606</a>)
(<a
href="https://github.com/vitejs/vite/commit/634745dcc5648912bc32cb4de72ed8dd2230efa0">634745d</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/10033218d239c927cdc375970b5741cce408e81b"><code>1003321</code></a>
release: v8.3.2 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23623">#23623</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/24bd3316f3b2503d04a49361e365532bdb335e19"><code>24bd331</code></a>
fix(worker): align worker urls in client and server when using terser
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23614">#23614</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/94d0080345e23d63d4cd02df2f7fa2afae775c26"><code>94d0080</code></a>
perf: only register time middleware when debug logging is enabled (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23621">#23621</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/89574f6d940a7273a53c5122a4477285801a696a"><code>89574f6</code></a>
perf: avoid encoding intermediate source maps (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23461">#23461</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/5a3a010eea4c9ebbdcc080819f93068d4e035bd4"><code>5a3a010</code></a>
fix(server): release previous environments after initialization (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23499">#23499</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/1929b4cc5f38ad53781e3b07b8bdaa32cf18da07"><code>1929b4c</code></a>
docs: fix dead og-image PNG links in vite6/vite7 changelog entries (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23594">#23594</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/6894f5cbceac589536a0efb476d881a47f5ab1c5"><code>6894f5c</code></a>
fix(server): handle file watcher errors without crashing (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23503">#23503</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/cf5c0288d526824aead1b24e977400f13c527927"><code>cf5c028</code></a>
perf(build): avoid quadratic link scan in the preload helper (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23510">#23510</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/bba3bb8beedd185948956e02667d450672632d79"><code>bba3bb8</code></a>
fix: merge <code>build.rolldownOptions.output.minify</code> correctly
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23536">#23536</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/5e4b9ca3dcb24b51f58a765fd2d852614bbf3574"><code>5e4b9ca</code></a>
fix(optimize-deps): avoid &quot;unsupported&quot; warnings for
browser:false mappings (...</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.3.2/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.3.1&new-version=8.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-05 13:59:04 +00:00
dependabot[bot] 893dc9a765 chore(deps-dev): Bump the vitest group with 2 updates (#2204) 
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).

Updates `@vitest/coverage-v8` from 5.0.2 to 5.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.3</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Isolate <code>result.status</code> between <code>repeats</code> runs
 -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11218">vitest-dev/vitest#11218</a>
<a href="https://github.com/vitest-dev/vitest/commit/5dbebe9e3"><!-- raw
HTML omitted -->(5dbeb)<!-- raw HTML omitted --></a></li>
<li>Don't print an interceptor warning in browser mode  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11377">vitest-dev/vitest#11377</a>
<a href="https://github.com/vitest-dev/vitest/commit/15cc006aa"><!-- raw
HTML omitted -->(15cc0)<!-- raw HTML omitted --></a></li>
<li>Don't retry when <code>test.fails</code> expectedly failed  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11219">vitest-dev/vitest#11219</a>
<a href="https://github.com/vitest-dev/vitest/commit/b24585f08"><!-- raw
HTML omitted -->(b2458)<!-- raw HTML omitted --></a></li>
<li>Scope cache key generators to projects  -  by <a
href="https://github.com/ecoyoung"><code>@​ecoyoung</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11281">vitest-dev/vitest#11281</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11301">vitest-dev/vitest#11301</a>
<a href="https://github.com/vitest-dev/vitest/commit/92ba7fc1d"><!-- raw
HTML omitted -->(92ba7)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Delay server <code>listen</code> until tests start running  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11366">vitest-dev/vitest#11366</a>
<a href="https://github.com/vitest-dev/vitest/commit/7d8ed3e9b"><!-- raw
HTML omitted -->(7d8ed)<!-- raw HTML omitted --></a></li>
<li>Check mock path boundaries  -  by <a
href="https://github.com/saryn17"><code>@​saryn17</code></a>,
<strong>Ryosei Sato</strong> and <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11361">vitest-dev/vitest#11361</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11362">vitest-dev/vitest#11362</a>
<a href="https://github.com/vitest-dev/vitest/commit/1c3888bce"><!-- raw
HTML omitted -->(1c388)<!-- raw HTML omitted --></a></li>
<li>Keep config of browser-consumed environments  -  by <a
href="https://github.com/kasperpeulen"><code>@​kasperpeulen</code></a>
and <strong>Claude</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11378">vitest-dev/vitest#11378</a>
<a href="https://github.com/vitest-dev/vitest/commit/aafc0996f"><!-- raw
HTML omitted -->(aafc0)<!-- raw HTML omitted --></a></li>
<li>Ignore page crash while cancelling  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11386">vitest-dev/vitest#11386</a>
<a href="https://github.com/vitest-dev/vitest/commit/7c36748fa"><!-- raw
HTML omitted -->(7c367)<!-- raw HTML omitted --></a></li>
<li><code>toMatchScreenshot</code> uses wrong reference on retried tests
 -  by <a href="https://github.com/macarie"><code>@​macarie</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11393">vitest-dev/vitest#11393</a>
<a href="https://github.com/vitest-dev/vitest/commit/c22aba992"><!-- raw
HTML omitted -->(c22ab)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>cache</strong>:
<ul>
<li>Revalidate imports of cached modules  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11381">vitest-dev/vitest#11381</a>
<a href="https://github.com/vitest-dev/vitest/commit/38f98855f"><!-- raw
HTML omitted -->(38f98)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>deps</strong>:
<ul>
<li>Pin <code>why-is-node-running</code> to <code>3.2.1</code> to avoid
users running into <code>ERR_PNPM_TRUST_DOWNGRADE</code>  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11403">vitest-dev/vitest#11403</a>
<a href="https://github.com/vitest-dev/vitest/commit/f6c9a4977"><!-- raw
HTML omitted -->(f6c9a)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>expect</strong>:
<ul>
<li>Pass current equality testers to <code>expect.extend</code>
asymmetric matchers  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11401">vitest-dev/vitest#11401</a>
<a href="https://github.com/vitest-dev/vitest/commit/3e794a96b"><!-- raw
HTML omitted -->(3e794)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>jsdom</strong>:
<ul>
<li>Support Blob on jsdom 30.1  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11379">vitest-dev/vitest#11379</a>
<a href="https://github.com/vitest-dev/vitest/commit/6c49b7197"><!-- raw
HTML omitted -->(6c49b)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pool</strong>:
<ul>
<li>Preserve unique pool ids when <code>groupOrder</code> is set  -  by
<a href="https://github.com/mtorp"><code>@​mtorp</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11392">vitest-dev/vitest#11392</a>
<a href="https://github.com/vitest-dev/vitest/commit/50312ebb4"><!-- raw
HTML omitted -->(50312)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>ui</strong>:
<ul>
<li>Split-pane handle overlapping iframe  -  by <a
href="https://github.com/macarie"><code>@​macarie</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11221">vitest-dev/vitest#11221</a>
<a href="https://github.com/vitest-dev/vitest/commit/f91db0dfd"><!-- raw
HTML omitted -->(f91db)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>vitest</strong>:
<ul>
<li>Remove root temp dir on close  -  by <a
href="https://github.com/abhinav-phi"><code>@​abhinav-phi</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11248">vitest-dev/vitest#11248</a>
<a href="https://github.com/vitest-dev/vitest/commit/7c7119cf7"><!-- raw
HTML omitted -->(7c711)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>vm</strong>:
<ul>
<li>Do not optimize deps from index.html  -  by <a
href="https://github.com/ezefernandezyf"><code>@​ezefernandezyf</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11329">vitest-dev/vitest#11329</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11360">vitest-dev/vitest#11360</a>
<a href="https://github.com/vitest-dev/vitest/commit/caf2887de"><!-- raw
HTML omitted -->(caf28)<!-- raw HTML omitted --></a></li>
<li>Don't reuse scripts across vite environments  -  by <a
href="https://github.com/MO2k4"><code>@​MO2k4</code></a>, <strong>Martin
Oehlert</strong> and <strong>Claude</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11395">vitest-dev/vitest#11395</a>
<a href="https://github.com/vitest-dev/vitest/commit/346d3896b"><!-- raw
HTML omitted -->(346d3)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v5.0.2...v5.0.3">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75"><code>33cadea</code></a>
chore: release v5.0.3 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11409">#11409</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a029e76a9e72ebdd468452ee1bb788bbe5dc635e"><code>a029e76</code></a>
chore: migrate to oxc (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11367">#11367</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest` from 5.0.2 to 5.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.3</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Isolate <code>result.status</code> between <code>repeats</code> runs
 -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11218">vitest-dev/vitest#11218</a>
<a href="https://github.com/vitest-dev/vitest/commit/5dbebe9e3"><!-- raw
HTML omitted -->(5dbeb)<!-- raw HTML omitted --></a></li>
<li>Don't print an interceptor warning in browser mode  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11377">vitest-dev/vitest#11377</a>
<a href="https://github.com/vitest-dev/vitest/commit/15cc006aa"><!-- raw
HTML omitted -->(15cc0)<!-- raw HTML omitted --></a></li>
<li>Don't retry when <code>test.fails</code> expectedly failed  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11219">vitest-dev/vitest#11219</a>
<a href="https://github.com/vitest-dev/vitest/commit/b24585f08"><!-- raw
HTML omitted -->(b2458)<!-- raw HTML omitted --></a></li>
<li>Scope cache key generators to projects  -  by <a
href="https://github.com/ecoyoung"><code>@​ecoyoung</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11281">vitest-dev/vitest#11281</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11301">vitest-dev/vitest#11301</a>
<a href="https://github.com/vitest-dev/vitest/commit/92ba7fc1d"><!-- raw
HTML omitted -->(92ba7)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Delay server <code>listen</code> until tests start running  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11366">vitest-dev/vitest#11366</a>
<a href="https://github.com/vitest-dev/vitest/commit/7d8ed3e9b"><!-- raw
HTML omitted -->(7d8ed)<!-- raw HTML omitted --></a></li>
<li>Check mock path boundaries  -  by <a
href="https://github.com/saryn17"><code>@​saryn17</code></a>,
<strong>Ryosei Sato</strong> and <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11361">vitest-dev/vitest#11361</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11362">vitest-dev/vitest#11362</a>
<a href="https://github.com/vitest-dev/vitest/commit/1c3888bce"><!-- raw
HTML omitted -->(1c388)<!-- raw HTML omitted --></a></li>
<li>Keep config of browser-consumed environments  -  by <a
href="https://github.com/kasperpeulen"><code>@​kasperpeulen</code></a>
and <strong>Claude</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11378">vitest-dev/vitest#11378</a>
<a href="https://github.com/vitest-dev/vitest/commit/aafc0996f"><!-- raw
HTML omitted -->(aafc0)<!-- raw HTML omitted --></a></li>
<li>Ignore page crash while cancelling  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11386">vitest-dev/vitest#11386</a>
<a href="https://github.com/vitest-dev/vitest/commit/7c36748fa"><!-- raw
HTML omitted -->(7c367)<!-- raw HTML omitted --></a></li>
<li><code>toMatchScreenshot</code> uses wrong reference on retried tests
 -  by <a href="https://github.com/macarie"><code>@​macarie</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11393">vitest-dev/vitest#11393</a>
<a href="https://github.com/vitest-dev/vitest/commit/c22aba992"><!-- raw
HTML omitted -->(c22ab)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>cache</strong>:
<ul>
<li>Revalidate imports of cached modules  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11381">vitest-dev/vitest#11381</a>
<a href="https://github.com/vitest-dev/vitest/commit/38f98855f"><!-- raw
HTML omitted -->(38f98)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>deps</strong>:
<ul>
<li>Pin <code>why-is-node-running</code> to <code>3.2.1</code> to avoid
users running into <code>ERR_PNPM_TRUST_DOWNGRADE</code>  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11403">vitest-dev/vitest#11403</a>
<a href="https://github.com/vitest-dev/vitest/commit/f6c9a4977"><!-- raw
HTML omitted -->(f6c9a)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>expect</strong>:
<ul>
<li>Pass current equality testers to <code>expect.extend</code>
asymmetric matchers  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11401">vitest-dev/vitest#11401</a>
<a href="https://github.com/vitest-dev/vitest/commit/3e794a96b"><!-- raw
HTML omitted -->(3e794)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>jsdom</strong>:
<ul>
<li>Support Blob on jsdom 30.1  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11379">vitest-dev/vitest#11379</a>
<a href="https://github.com/vitest-dev/vitest/commit/6c49b7197"><!-- raw
HTML omitted -->(6c49b)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pool</strong>:
<ul>
<li>Preserve unique pool ids when <code>groupOrder</code> is set  -  by
<a href="https://github.com/mtorp"><code>@​mtorp</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11392">vitest-dev/vitest#11392</a>
<a href="https://github.com/vitest-dev/vitest/commit/50312ebb4"><!-- raw
HTML omitted -->(50312)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>ui</strong>:
<ul>
<li>Split-pane handle overlapping iframe  -  by <a
href="https://github.com/macarie"><code>@​macarie</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11221">vitest-dev/vitest#11221</a>
<a href="https://github.com/vitest-dev/vitest/commit/f91db0dfd"><!-- raw
HTML omitted -->(f91db)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>vitest</strong>:
<ul>
<li>Remove root temp dir on close  -  by <a
href="https://github.com/abhinav-phi"><code>@​abhinav-phi</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11248">vitest-dev/vitest#11248</a>
<a href="https://github.com/vitest-dev/vitest/commit/7c7119cf7"><!-- raw
HTML omitted -->(7c711)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>vm</strong>:
<ul>
<li>Do not optimize deps from index.html  -  by <a
href="https://github.com/ezefernandezyf"><code>@​ezefernandezyf</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11329">vitest-dev/vitest#11329</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11360">vitest-dev/vitest#11360</a>
<a href="https://github.com/vitest-dev/vitest/commit/caf2887de"><!-- raw
HTML omitted -->(caf28)<!-- raw HTML omitted --></a></li>
<li>Don't reuse scripts across vite environments  -  by <a
href="https://github.com/MO2k4"><code>@​MO2k4</code></a>, <strong>Martin
Oehlert</strong> and <strong>Claude</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11395">vitest-dev/vitest#11395</a>
<a href="https://github.com/vitest-dev/vitest/commit/346d3896b"><!-- raw
HTML omitted -->(346d3)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v5.0.2...v5.0.3">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75"><code>33cadea</code></a>
chore: release v5.0.3 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11409">#11409</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/346d3896b65c3c907174447a035807342799f346"><code>346d389</code></a>
fix(vm): don't reuse scripts across vite environments (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11395">#11395</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/f6c9a4977ad3363f796a737834572e54c6ad5c18"><code>f6c9a49</code></a>
fix(deps): pin <code>why-is-node-running</code> to <code>3.2.1</code> to
avoid users running into `...</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/062c75d8b63519211d951d8293ea81b5a9e3c124"><code>062c75d</code></a>
chore: fix standalone docs build, update exports maps (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11394">#11394</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/caf2887dee8987a60118d53933f6e9cabd6b3e2a"><code>caf2887</code></a>
fix(vm): do not optimize deps from index.html (fix <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11329">#11329</a>)
(<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11360">#11360</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/50312ebb4eca6a98f6d0b2b61d5d9d38cbbabcef"><code>50312eb</code></a>
fix(pool): preserve unique pool ids when <code>groupOrder</code> is set
(<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11392">#11392</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/7c36748fad1eae9687312f2f7ceadce6ec88b5df"><code>7c36748</code></a>
fix(browser): ignore page crash while cancelling (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11386">#11386</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/92ba7fc1df16a4fa5bbee3f198c582fbd56689d8"><code>92ba7fc</code></a>
fix: scope cache key generators to projects (fix <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11281">#11281</a>)
(<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11301">#11301</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/38f98855fa9cd7fd376afb84094eba0fda256a74"><code>38f9885</code></a>
fix(cache): revalidate imports of cached modules (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11381">#11381</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/b24585f08f2ea267746a2d6ca0e43edcbb29726f"><code>b24585f</code></a>
fix: don't retry when <code>test.fails</code> expectedly failed (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11219">#11219</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-05 13:57:23 +00:00
dependabot[bot] e868a72e78 chore(deps-dev): Bump i18next-cli from 1.74.2 to 1.74.4 (#2205) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.2
to 1.74.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.74.4</h2>
<ul>
<li>fix(extract): a conditional namespace argument resolves to the
namespaces in its branches.
<code>useTranslation(confirmEmail ? ['reset-email-page', 'reset-page'] :
'reset-page')</code> filed
<code>t('form.title')</code> under <code>defaultNS</code>, so
<code>status</code> reported it as absent and <code>extract</code>
removed the
existing translations from <code>reset-page</code> and
<code>reset-email-page</code>. The key is now extracted into the
primary namespace of every branch (here <code>reset-email-page</code>
and <code>reset-page</code>), also for
<code>&lt;Trans t={t}&gt;</code>. Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/299">#299</a>.</li>
</ul>
<h2>1.74.3</h2>
<ul>
<li>
<p>fix(extract): dynamic keys typed by a declaration in a file without
any translation call
resolve again when that declaration builds on one from a file that sorts
after it. In 1.74.2,
<code>type Kind = Base | 'extra'</code> in <code>api/types.ts</code>
with <code>Base</code> declared in <code>shared/base.ts</code> expanded
<code>t(`kind.${kind}`)</code> to <code>kind.extra</code> only, and the
same happened to interface members,
function return types and functions returning an enum member declared
further down the list.
Such declarations are now resolved again once every file has been
scanned, which also removes
the file-order dependence this had before 1.74.2.</p>
</li>
<li>
<p>feat(extract): more implicitly typed values expand to their finite
set of keys. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/298">#298</a>:</p>
<ul>
<li>members of an object returned by a function with an object return
type:
<code>const animal = getAnimal(); t(`animal.${animal.type}`)</code>,
also through
<code>const { type } = getAnimal()</code>, <code>const kind =
animal.type</code> or <code>getAnimal().type</code>.</li>
<li>unions and intersections of object types (<code>type Animal = Duck |
Dog</code> gives <code>animal.type</code> the
values of both) and generic object types (<code>type AnimalBase&lt;T
extends AnimalType&gt; = { type: T }</code>
used as <code>AnimalBase&lt;'DUCK'&gt;</code>, or bare, which falls back
to the parameter's default or
constraint).</li>
<li><code>(typeof COLOR)[keyof typeof COLOR]</code> for an <code>as
const</code> object or an enum.</li>
<li>elements of an array, <code>colors[i]</code>, without an annotation
on the variable they are assigned to.</li>
</ul>
<p>Narrowing is not followed: after <code>if (color !== 'BLUE')</code>,
<code>color.BLUE</code> is still extracted.</p>
</li>
<li>
<p>fix(extract): shorthand options resolve like their long form.
<code>t('k', { ns })</code> filed the key
under the default namespace, <code>{ defaultValue }</code> was ignored
and
<code>useTranslation('ns', { keyPrefix })</code> lost its prefix. Thanks
to
<a href="https://github.com/aaronshaf"><code>@​aaronshaf</code></a> for
reporting it in
<a
href="https://redirect.github.com/i18next/i18next-cli/pull/291">#291</a>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/12ea0d4291ab916a646608b0ce16f03c359e87ff"><code>12ea0d4</code></a>
1.74.4</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/b8cf7051d80ecca85cdc7709f11c8fdeafcf573b"><code>b8cf705</code></a>
fix(extract): resolve a conditional useTranslation namespace to its
branches ...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/1236571c85ea1c3c1bbae668f0c1e2988614e759"><code>1236571</code></a>
1.74.3</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/ce6e8c2f4b6f81118016e64366d771211af72c40"><code>ce6e8c2</code></a>
fix(extract): resolve implicit object types, cross-file declarations and
shor...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.74.2...v1.74.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.2&new-version=1.74.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-05 13:56:51 +00:00
dependabot[bot] 986af304bc chore(deps-dev): Bump stylelint from 17.15.0 to 17.16.0 (#2206) 
Bumps [stylelint](https://github.com/stylelint/stylelint) from 17.15.0
to 17.16.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.16.0</h2>
<p>It fixes 2 bugs in the <code>layout-mappings</code> rules. This will
likely be the last <code>17.x</code> release, as we prepare for
<code>18.0.0</code>.</p>
<ul>
<li>Fixed: <code>property-layout-mappings</code> and
<code>unit-layout-mappings</code> false negatives for uppercase property
names and units (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9485">#9485</a>)
(<a
href="https://github.com/giaBaoJS"><code>@​giaBaoJS</code></a>).</li>
<li>Fixed: <code>value-keyword-layout-mappings</code> false positives
for <code>caption-side</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9483">#9483</a>)
(<a
href="https://github.com/giaBaoJS"><code>@​giaBaoJS</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.16.0 - 2026-10-01</h2>
<p>It fixes 2 bugs in the <code>layout-mappings</code> rules. This will
likely be the last <code>17.x</code> release, as we prepare for
<code>18.0.0</code>.</p>
<ul>
<li>Fixed: <code>property-layout-mappings</code> and
<code>unit-layout-mappings</code> false negatives for uppercase property
names and units (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9485">#9485</a>)
(<a
href="https://github.com/giaBaoJS"><code>@​giaBaoJS</code></a>).</li>
<li>Fixed: <code>value-keyword-layout-mappings</code> false positives
for <code>caption-side</code> (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9483">#9483</a>)
(<a
href="https://github.com/giaBaoJS"><code>@​giaBaoJS</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint/stylelint/commit/bc06c7cdb1413de3d8dc939b33af138ab7e59df1"><code>bc06c7c</code></a>
Release 17.16.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9551">#9551</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/f4fb76f709c5046e9b1b2d9888d1d2dd1d9e61a8"><code>f4fb76f</code></a>
Set <code>target-branch</code> to <code>v18</code> in Dependabot config
(<a
href="https://redirect.github.com/stylelint/stylelint/issues/9488">#9488</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/20194788a393f726c6087dffb7f54e1d5c67a7b1"><code>2019478</code></a>
Fix <code>property-layout-mappings</code> and
<code>unit-layout-mappings</code> false negatives for...</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/e8757103c662e7573166640f9bcada57bc6bad6c"><code>e875710</code></a>
Fix <code>value-keyword-layout-mappings</code> false positives for
<code>caption-side</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9483">#9483</a>)</li>
<li>See full diff in <a
href="https://github.com/stylelint/stylelint/compare/17.15.0...17.16.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stylelint&package-manager=npm_and_yarn&previous-version=17.15.0&new-version=17.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-05 13:53:18 +00:00
Harel M 68c81fc7a3 feat: Add ability to control the max zoom of the map (#2201) 
- Resolves #2202

## Launch Checklist

The map max zoom was increased to 24 without the ability to change it.
- https://github.com/maplibre/maputnik/issues/593

The default is 22 for all maplibre instances if you don't override it in
your code.
The zoom levels to over scale is dependent on max zoom, which can affect
how the map looks.
This PR adds the ability to change this.
This was added to the debug dialog:
<img width="446" height="446" alt="image"
src="https://github.com/user-attachments/assets/ea68c392-309f-4476-8922-790670762d56"
/>


 - [x] Briefly describe the changes in this PR.
 - [x] Link to related issues.
- [x] Include before/after visuals or gifs if this PR includes visual
changes.
 - [x] Write tests for all new functionality.
 - [x] Add an entry to `CHANGELOG.md` under the `## main` section.
 2026-10-05 15:49:55 +03:00
dependabot[bot] e172e6c6fc chore(deps-dev): Bump typescript-eslint from 8.70.1 to 8.71.0 (#2200) 
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
from 8.70.1 to 8.71.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.71.0</h2>
<h2>8.71.0 (2026-09-28)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unsafe-enum-assignment] add rule
(<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12732">#12732</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [switch-exhaustiveness-check] always
sort literal cases in stable order (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12885">#12885</a>)</li>
<li><strong>eslint-plugin:</strong> [unbound-method] respect <code>this:
void</code> on class properties (<a
href="https://github.com/typescript-eslint/typescript-eslint/commit/7fce9127d">7fce9127d</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
specialize generic assertion report message (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12832">#12832</a>)</li>
<li><strong>eslint-plugin:</strong> [no-misused-promises] handle a
return outside of any function (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12912">#12912</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Fatih Çakır <a
href="https://github.com/wfatih"><code>@​wfatih</code></a></li>
<li>Josh Goldberg</li>
<li>Josh Goldberg ✨</li>
<li>Zamiell <a
href="https://github.com/Zamiell"><code>@​Zamiell</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.71.0 (2026-09-28)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/8695664c5ee3fbb8fd76907fc45e148579cc3162"><code>8695664</code></a>
chore(release): publish 8.71.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.70.1&new-version=8.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-02 13:52:25 +00:00
dependabot[bot] daae11623d chore(deps-dev): Bump i18next-cli from 1.74.1 to 1.74.2 (#2199) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.1
to 1.74.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.74.2</h2>
<ul>
<li>fix(extract): the output no longer depends on the order in which
<code>glob</code> happens to return the
input files. When two call sites give one key different defaults
(<code>t('k', 'Adding...')</code> in one
file, <code>t('k', 'Importing...')</code> in another), the first file
visited wins, so an unchanged source
tree could produce a different catalog from run to run and flip CI
checks that compare against a
committed catalog. Files are now visited in sorted path order, which
makes the winner stable. If
your sources contain such conflicts, the kept default may change once
with this release. To
hear about them instead of silently keeping one default, set
<code>extract.warnOnConflicts</code> to <code>'warn'</code> or
<code>'error'</code>. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/296">#296</a>.</li>
<li>perf(extract): files that contain no translation call, hook,
<code>TFunction</code>, <code>getFixedT</code> or Trans
component (as configured via <code>functions</code>,
<code>useTranslationNames</code> and <code>transComponents</code>) are
no
longer parsed and walked a second time for keys. The constants pre-scan
still reads every file,
so types and <code>as const</code> values declared in such files keep
resolving dynamic keys elsewhere.
Plugins with an <code>onVisitNode</code> hook still see every file. On
large trees where most files hold no
translations this cuts extraction time considerably. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/297">#297</a>.</li>
<li>chore: update dependencies</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/d0b07c98e9a56b96ef1d289ca43bfc2059084d06"><code>d0b07c9</code></a>
1.74.2</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/8ce283ee0200185c491468f156402c081f476017"><code>8ce283e</code></a>
fix(extract): sort input files and skip the key walk for token-free
files <a
href="https://redirect.github.com/i18next/i18next-cli/issues/29">#29</a>...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.74.1...v1.74.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.1&new-version=1.74.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-01 13:57:44 +00:00
dependabot[bot] 73c1633788 chore(deps): Bump brace-expansion (#2198) 
Bumps and
[brace-expansion](https://github.com/juliangruber/brace-expansion).
These dependencies needed to be updated together.
Updates `brace-expansion` from 5.0.9 to 5.0.12
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099"><code>f341015</code></a>
5.0.12</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96"><code>33a5ef1</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568"><code>8247927</code></a>
5.0.11</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"><code>935d78f</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f"><code>df7682f</code></a>
5.0.10</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02"><code>1ade9de</code></a>
npm run format</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"><code>6735c94</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18"><code>4e70465</code></a>
chore: ensure prettier formatting (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/154">#154</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff"><code>fd7a5e3</code></a>
Bump ip-address from 10.2.0 to 10.4.0 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/152">#152</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4"><code>1790143</code></a>
Bump uuid and <code>@​tapjs/processinfo</code> (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/120">#120</a>)</li>
<li>See full diff in <a
href="https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12">compare
view</a></li>
</ul>
</details>
<br />

Updates `brace-expansion` from 1.1.18 to 1.1.21
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099"><code>f341015</code></a>
5.0.12</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96"><code>33a5ef1</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568"><code>8247927</code></a>
5.0.11</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"><code>935d78f</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f"><code>df7682f</code></a>
5.0.10</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02"><code>1ade9de</code></a>
npm run format</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"><code>6735c94</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18"><code>4e70465</code></a>
chore: ensure prettier formatting (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/154">#154</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff"><code>fd7a5e3</code></a>
Bump ip-address from 10.2.0 to 10.4.0 (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/152">#152</a>)</li>
<li><a
href="https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4"><code>1790143</code></a>
Bump uuid and <code>@​tapjs/processinfo</code> (<a
href="https://redirect.github.com/juliangruber/brace-expansion/issues/120">#120</a>)</li>
<li>See full diff in <a
href="https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-30 14:07:59 +00:00