ashatora/editor
1
0
Fork 0
mirror of https://github.com/maputnik/editor.git synced 2026-10-27 05:13:43 +00:00
Code Issues Projects Releases Wiki Activity
2,950 Commits 6 Branches 33 Tags
c64452c1bdfd2619c2f35ca16445703f56e4c3d3
Commit Graph
2950 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] c64452c1bd chore(deps): Bump i18next from 26.5.3 to 26.5.6 (#2264) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.5.3 to
26.5.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.5.6</h2>
<ul>
<li>fix: <code>cloneInstance({ forkResourceStore: true })</code> now
copies the resources at every level. It copied them only down to the
namespace objects, so nested keys and arrays stayed shared with the
original instance: <code>addResource()</code> with a nested key
(<code>fork.addResource('en', 'translation', 'greeting.hello',
'Hi')</code>) or a deep <code>addResourceBundle()</code> on the fork
also changed the original instance and every other fork. Flat keys were
already isolated. Forking a large store takes a bit longer: with 300k
keys in nested groups, about 11 ms instead of 3 ms per fork. Clones
without <code>forkResourceStore</code> still share the store as before.
Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2456">#2456</a>,
follow-up to <a
href="https://redirect.github.com/i18next/i18next/issues/2270">#2270</a>).</li>
</ul>
<h2>v26.5.5</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside a value inserted with an unescaped
<code>{{- var}}</code> now stays literal, as it already did for
<code>{{var}}</code>. The escape pass ran after the unescaped values
were written and scanned them again, so <code>t('{{- a}}', { a: '{{b}}',
b: 'c' })</code> returned <code>'c'</code> instead of
<code>'{{b}}'</code>. With pre-built HTML that carries user text, like
<code>t('You may contact {{name}} at {{- emailHTML}}.', { name,
emailHTML })</code>, that text could pull another variable of the same
<code>t()</code> call into the output. Results with
<code>skipOnVariables: false</code>, and values without placeholders,
are unchanged. Compatibility note: a <code>{{- var}}</code> value whose
placeholders were meant to be filled from the same <code>t()</code> call
now keeps them literally; <code>skipOnVariables: false</code> restores
the old behavior. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2455">#2455</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747">#1595</a>).</li>
</ul>
<h2>v26.5.4</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside an interpolated value now stays
literal also when the same placeholder appears later in the translation.
Each value was written with <code>String.replace</code>, which replaces
the first copy of the placeholder text, and that could be the copy
inside an earlier value: <code>t('{{name}} has {{count}} items', { name:
'{{count}}', count: 5 })</code> returned <code>'5 has {{count}}
items'</code> instead of <code>'{{count}} has 5 items'</code>. The value
is now written at the position of the matched placeholder. Results with
<code>skipOnVariables: false</code> are unchanged. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2454">#2454</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503">#1595</a>).</li>
<li>fix: with <code>useRawValueToEscape: true</code>, a non-string value
in an unescaped <code>{{- var}}</code> placeholder or with
<code>escapeValue: false</code> no longer throws <code>val.replace is
not a function</code>; it is converted to a string like any other
value.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.5.6</h2>
<ul>
<li>fix: <code>cloneInstance({ forkResourceStore: true })</code> now
copies the resources at every level. It copied them only down to the
namespace objects, so nested keys and arrays stayed shared with the
original instance: <code>addResource()</code> with a nested key
(<code>fork.addResource('en', 'translation', 'greeting.hello',
'Hi')</code>) or a deep <code>addResourceBundle()</code> on the fork
also changed the original instance and every other fork. Flat keys were
already isolated. Forking a large store takes a bit longer: with 300k
keys in nested groups, about 11 ms instead of 3 ms per fork. Clones
without <code>forkResourceStore</code> still share the store as before.
Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2456">#2456</a>,
follow-up to <a
href="https://redirect.github.com/i18next/i18next/issues/2270">#2270</a>).</li>
</ul>
<h2>26.5.5</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside a value inserted with an unescaped
<code>{{- var}}</code> now stays literal, as it already did for
<code>{{var}}</code>. The escape pass ran after the unescaped values
were written and scanned them again, so <code>t('{{- a}}', { a: '{{b}}',
b: 'c' })</code> returned <code>'c'</code> instead of
<code>'{{b}}'</code>. With pre-built HTML that carries user text, like
<code>t('You may contact {{name}} at {{- emailHTML}}.', { name,
emailHTML })</code>, that text could pull another variable of the same
<code>t()</code> call into the output. Results with
<code>skipOnVariables: false</code>, and values without placeholders,
are unchanged. Compatibility note: a <code>{{- var}}</code> value whose
placeholders were meant to be filled from the same <code>t()</code> call
now keeps them literally; <code>skipOnVariables: false</code> restores
the old behavior. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2455">#2455</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747">#1595</a>).</li>
</ul>
<h2>26.5.4</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside an interpolated value now stays
literal also when the same placeholder appears later in the translation.
Each value was written with <code>String.replace</code>, which replaces
the first copy of the placeholder text, and that could be the copy
inside an earlier value: <code>t('{{name}} has {{count}} items', { name:
'{{count}}', count: 5 })</code> returned <code>'5 has {{count}}
items'</code> instead of <code>'{{count}} has 5 items'</code>. The value
is now written at the position of the matched placeholder. Results with
<code>skipOnVariables: false</code> are unchanged. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2454">#2454</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503">#1595</a>).</li>
<li>fix: with <code>useRawValueToEscape: true</code>, a non-string value
in an unescaped <code>{{- var}}</code> placeholder or with
<code>escapeValue: false</code> no longer throws <code>val.replace is
not a function</code>; it is converted to a string like any other
value.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/82894c159845c3675fb6540db52a4144abbd5d4a"><code>82894c1</code></a>
26.5.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/343080da6802c0badb2fe1032139d49af93d9774"><code>343080d</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/8e2eebb132aaccfb752990b6cc61cbfd7d835764"><code>8e2eebb</code></a>
changelog for 26.5.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/822a37bc57f50b4a476aa630f864d3ed1f88a7e9"><code>822a37b</code></a>
fix: copy nested resources when cloning with forkResourceStore (<a
href="https://redirect.github.com/i18next/i18next/issues/2456">#2456</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/744c5cb41a19f52ae08d1a71c2d9ceca6525dc1d"><code>744c5cb</code></a>
26.5.5</li>
<li><a
href="https://github.com/i18next/i18next/commit/de5960eee00d9db2a7c1b452d6ce9231c16b6474"><code>de5960e</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/fbe16f3429273f2f9c1fe9736f4590fa2e8253a5"><code>fbe16f3</code></a>
changelog for 26.5.5</li>
<li><a
href="https://github.com/i18next/i18next/commit/67b4ae194ed4a1af083119f77daba48f1c295f1d"><code>67b4ae1</code></a>
fix: keep placeholders inside unescaped values literal (<a
href="https://redirect.github.com/i18next/i18next/issues/2455">#2455</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/aadd75ba9e88a20b34b7f44798d4e3bd8ec71baa"><code>aadd75b</code></a>
26.5.4</li>
<li><a
href="https://github.com/i18next/i18next/commit/a43c43286a381bbae144c04de9f8056f464c7cd9"><code>a43c432</code></a>
build</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v26.5.3...v26.5.6">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 14:26:02 +00:00
dependabot[bot] ab3316d5e9 chore(deps): Bump fast-uri from 3.1.7 to 3.1.9 (#2270) 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.7 to
3.1.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.9</h2>
<h2>Security</h2>
<p>This security release fixes four URI parsing and normalization
vulnerabilities in fast-uri 3.x. Applications that process untrusted URI
input should upgrade to v3.1.9.</p>
<ul>
<li><strong>Medium — URI scheme spoofing through percent-encoded
schemes</strong> (<a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg">GHSA-w74x-v6f9-j3xg</a>,
CVE-2026-110306): percent-encoded scheme input is now rejected instead
of being decoded into a live scheme.</li>
<li><strong>Medium — Host confusion during domain-host
canonicalization</strong> (<a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-wjr9-j795-jxcr">GHSA-wjr9-j795-jxcr</a>,
CVE-2026-110180): malformed domain hosts containing ambiguous delimiters
or stripped control characters are now rejected instead of being
silently rewritten.</li>
<li><strong>Low — Incorrect relative-reference normalization</strong>
(<a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h">GHSA-xhq7-xmqj-769h</a>,
CVE-2026-110095): dot-segment removal now preserves the resolution
semantics of relative references.</li>
<li><strong>Low — Scheme injection in suffix references</strong> (<a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-333x-w4r6-6crp">GHSA-333x-w4r6-6crp</a>,
CVE-2026-110725): first-segment colons in path-only suffix references
are now escaped so the output is not reparsed as a scheme.</li>
</ul>
<p>Upgrade with:</p>
<pre lang="sh"><code>npm install fast-uri@3.1.9
</code></pre>
<p>Thanks to <a href="https://github.com/zekth"><code>@​zekth</code></a>
for reporting the scheme, host, and relative-reference issues, and to <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
for finding the suffix-reference issue and reviewing the
remediations.</p>
<h2>What's Changed</h2>
<ul>
<li>ci: enable trusted publishing releases (v3.x) by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/229">fastify/fast-uri#229</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.8...v3.1.9">https://github.com/fastify/fast-uri/compare/v3.1.8...v3.1.9</a></p>
<h2>v3.1.8</h2>
<h2>⚠️ Security Warning</h2>
<p>This security release fixes the following medium-severity security
advisory:</p>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-hrr3-gc8f-f4qj">GHSA-hrr3-gc8f-f4qj</a>
— inconsistent host case normalization via percent-encoded octets</li>
</ul>
<p>Users of the v3.x release line should upgrade to v3.1.8.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8">https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.8</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/commit/0def70338a0fa2f12a10c83ae8eafc2139ae9a07"><code>0def703</code></a>
Bumped v3.1.9</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/a1d0da2f5c703244027c1b204c1aebd0516da338"><code>a1d0da2</code></a>
test: generate only relative path references</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/9eb8759a9825c046f57f7f695f1944bc39b88abd"><code>9eb8759</code></a>
fix: preserve relative paths in suffix and relative resolution</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/54c30f75891b74e5a4393b44be9ea7ba43dd1e4b"><code>54c30f7</code></a>
docs: note suffix-reference authority ambiguity</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/39e6493c1356f30a0084171627eb266786e1620e"><code>39e6493</code></a>
fix: escape a first-segment colon in suffix references</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/745183c1d9d98d113bed8a57bb1c9ceaf0147b7a"><code>745183c</code></a>
test: cover first-segment colon in suffix references</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/ddfc6a51122dfce0365655f04479fc3adb7f6b3c"><code>ddfc6a5</code></a>
fix(SEC-03): reject non reg-name characters in domain hosts</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/d86a8d29f45187819dac2d4fe171c35e3e488264"><code>d86a8d2</code></a>
fix: keep a colon-first segment behind &quot;./&quot; in relative
normalization</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/eb483b5da2580bdecb8af644bbfee878d5424850"><code>eb483b5</code></a>
test: cover colon-first relative references in normalization</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/b110a3571c37dfcf9d1c72ce2e2e178c78d1a424"><code>b110a35</code></a>
fix(SEC-02): preserve meaning of relative references during
normalization</li>
<li>Additional commits viewable in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.7...v3.1.9">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for fast-uri since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.7&new-version=3.1.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 14:06:56 +00:00
dependabot[bot] f5c9d9f323 chore(deps-dev): Bump i18next-cli from 1.77.0 to 1.80.0 (#2266) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.77.0
to 1.80.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.80.0</h2>
<ul>
<li>feat(lint): in the i18next format, the translation files of every
locale are compared with the primary language:
interpolations by name (<code>{{name}}</code>, <code>{{- name}}</code>,
<code>{{val, number}}</code>), nested <code>$t(key)</code> references
and tags (<code>&lt;0&gt;</code>,
<code>&lt;1/&gt;</code>, <code>&lt;bold&gt;</code>), except the basic
HTML react-i18next keeps (<code>transKeepBasicHtmlNodesFor</code>). A
translation that
renamed or dropped a placeholder is reported with file, key and line,
e.g.
<code>greeting: missing {{name}}, unexpected {{nom}} (compared with
&quot;en&quot;)</code>. Plural forms are compared as a group, so
<code>{{count}}</code> may be left out of <code>_one</code> or
<code>_zero</code>. A warning by default, so existing CI runs keep
passing;
<code>lint.checkTranslationPlaceholders: 'error'</code> fails the run,
<code>'off'</code> disables it. Until now only ICU and MF2 projects
had this check.</li>
<li>feat(status): values identical to the primary language (English
copied into <code>de</code>) are marked
<code>≈ (identical to en)</code> and counted in the summary.
<code>status.checkIdentical</code>: <code>'warn'</code> (default) still
counts them as
translated and keeps the exit code, <code>'error'</code> counts them as
untranslated, <code>'off'</code> disables it. Locales of the
primary's language (<code>en-GB</code> with <code>en</code>), values
without letters, URLs, e-mail addresses and short all-caps words
(<code>OK</code>, <code>FAQ</code>) are skipped; other values that stay
the same go into <code>status.ignoreKeys</code>.</li>
<li>feat(lint): <code>lint --update-baseline</code> writes the current
issues to <code>i18next-lint-baseline.json</code>
(<code>lint.baseline</code> for
another path). While the file exists, <code>lint</code> reports and
fails only on new issues, so a codebase with existing
hardcoded strings can run <code>lint</code> in CI. Issues are matched by
file, type and text, not by line.</li>
<li>fix(lint): interpolations are read like i18next does. The unescaped
<code>{{-name}}</code> was read as a parameter <code>-name</code>, so
<code>t('Hi {{-name}}', { name })</code> reported two false
interpolation issues; <code>{{- name}}</code> and names outside
<code>[A-Za-z0-9_.-]</code>
(<code>{{größe}}</code>) were not read at all.</li>
<li>docs(types): <code>transKeepBasicHtmlNodesFor</code> defaults to
react-i18next's <code>['br', 'strong', 'i', 'p']</code>.</li>
<li>docs(skill, localize): after translating by hand, run
<code>lint</code> to check the placeholders.</li>
</ul>
<h2>1.79.1</h2>
<ul>
<li>fix(init, migrate-config): the default source glob includes
<code>.mjs</code> (<code>src/**/*.{js,jsx,mjs,ts,tsx}</code>), in
<code>init</code>, in the
config detected for a project without one, and in
<code>migrate-config</code> when the old config has no
<code>input</code>. Existing
configs do not change. <a
href="https://redirect.github.com/i18next/i18next-cli/pull/309#issuecomment-6310275918">#309</a></li>
</ul>
<h2>1.79.0</h2>
<ul>
<li>feat(extract, instrument, lint): a <code>.mjs</code> file with JSX
is parsed with the same JSX fallback as a <code>.js</code> file,
including the constants pre-scan of <code>extract</code>. Before, it
failed with a syntax error and <code>extract</code> exited with 1.
<a
href="https://redirect.github.com/i18next/i18next-cli/pull/309">#309</a></li>
</ul>
<h2>1.78.0</h2>
<ul>
<li>feat(lint): with <code>messageFormat: 'mf2'</code>,
<code>lint</code> warns when whitespace at the start or end of a pattern
differs from
the primary language. MF2 keeps a space inside <code>{{ }}</code> as
text, so <code>{{ {$count} files}}</code> shows it in the app. A
warning does not fail the run.</li>
<li>fix(lint): a language code with <code>_</code> (<code>ru_RU</code>,
<code>pt_BR</code>) is read as <code>ru-RU</code>, <code>pt-BR</code>
for the plural categories. Before,
<code>Intl</code> rejected it and only <code>other</code> was required,
so a <code>ru_RU</code> plural with only <code>one</code> and
<code>other</code> passed.</li>
<li>fix(lint): the required plural categories are <code>other</code>
plus every category a whole number below one million selects
(was 0 to 1000), the same rule as Locize; exact selectors count for a
category only when it selects a few small
numbers. No locale's result changes with today's CLDR data.</li>
<li>docs(skill): the ICU and MF2 reference names the common MF2 plural
mistakes: <code>other</code> instead of <code>*</code>, <code>{{
{$count}</code>
instead of <code>{{{$count}</code>, and spaces inside <code>{{
}}</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/6a339b2ab661cc4465b46f5276c448e2e44287b2"><code>6a339b2</code></a>
1.80.0</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/3f5ffd91fdc458fb0c0be086a5f6cf9e75c6a084"><code>3f5ffd9</code></a>
feat(lint, status): placeholders across locales, identical values, lint
baseline</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/73b085de457bcf6ffd9b868f2c5d71cc55c5dfb6"><code>73b085d</code></a>
1.79.1</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/f479d53ac90ade3d7e7dc71313fd9f79b0e198c4"><code>f479d53</code></a>
fix(init, migrate-config): include .mjs in the default source glob</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/ee7b1aa652ec89fab53f8d2b3f74e23910b91099"><code>ee7b1aa</code></a>
1.79.0</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/7c95544e98d6732f816a0c724d5e9816e25a31b5"><code>7c95544</code></a>
fix(extract): JSX fallback for .mjs in the constants pre-scan too</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/d320c6aad9d3d5f21907281406963a1852ece7a4"><code>d320c6a</code></a>
feat(extract, instrument, lint): support .mjs files with JSX (<a
href="https://redirect.github.com/i18next/i18next-cli/issues/309">#309</a>)</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/20524b8fe98937c79859cad42658f40709304bde"><code>20524b8</code></a>
1.78.0</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/462ed40b05e2b9637d56efcce9c850a287312a3d"><code>462ed40</code></a>
feat(lint): MF2 pattern-edge whitespace warning, <code>_</code> language
codes, plural r...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.77.0...v1.80.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.77.0&new-version=1.80.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 14:04:15 +00:00
dependabot[bot] 414db4b9a2 chore(deps-dev): Bump vite from 8.3.4 to 8.3.5 (#2267) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.3.4 to 8.3.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.5</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> handle missing chunk import maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23777">#23777</a>)
(<a
href="https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229">8d7623d</a>)</li>
<li><strong>build:</strong> include preload dependencies to chunk import
map hashing (<a
href="https://redirect.github.com/vitejs/vite/issues/23793">#23793</a>)
(<a
href="https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9">4d16e7c</a>)</li>
<li><strong>bundled-dev:</strong> apply <code>server.origin</code> to
asset URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23683">#23683</a>)
(<a
href="https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5">52ba877</a>)</li>
<li><strong>bundled-dev:</strong> declare utf-8 charset in fallback page
(<a
href="https://redirect.github.com/vitejs/vite/issues/23846">#23846</a>)
(<a
href="https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6">197daf6</a>)</li>
<li><strong>bundled-dev:</strong> ignore build.chunkImportMap (<a
href="https://redirect.github.com/vitejs/vite/issues/23685">#23685</a>)
(<a
href="https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07">cfe917d</a>)</li>
<li><strong>bundled-dev:</strong> include user
<code>import.meta.env.*</code> defines in the
<code>import.meta.env</code> object (<a
href="https://redirect.github.com/vitejs/vite/issues/23713">#23713</a>)
(<a
href="https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25">6019aa7</a>)</li>
<li><strong>bundled-dev:</strong> map forwarded error stacks through the
bundle source maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23741">#23741</a>)
(<a
href="https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18">11fe1e4</a>)</li>
<li><strong>bundled-dev:</strong> normalize served output files (<a
href="https://redirect.github.com/vitejs/vite/issues/23684">#23684</a>)
(<a
href="https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3">df4e02c</a>)</li>
<li><strong>bundled-dev:</strong> stop hmr propagation at modules that
are no longer imported (<a
href="https://redirect.github.com/vitejs/vite/issues/23839">#23839</a>)
(<a
href="https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212">7471e8c</a>)</li>
<li><strong>css:</strong> don't fail on a literal <code>%</code> in
<code>url()</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23676">#23676</a>)
(<a
href="https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261">50b382d</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23731">#23731</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29">cf80aa5</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23826">#23826</a>)
(<a
href="https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9">77d8373</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23733">#23733</a>)
(<a
href="https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48">43f0d05</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23827">#23827</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab">c2e0418</a>)</li>
<li><strong>optimizer:</strong> fall back to yarn.lock for lockfile hash
(<a
href="https://redirect.github.com/vitejs/vite/issues/23667">#23667</a>)
(<a
href="https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e">f206096</a>)</li>
<li><strong>optimizer:</strong> scan <code>oxc.jsxInject</code> imports
(<a
href="https://redirect.github.com/vitejs/vite/issues/23758">#23758</a>)
(<a
href="https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714">38f3cb4</a>)</li>
<li><strong>optimizer:</strong> skip patches dir check for yarn.lock
fallback (<a
href="https://redirect.github.com/vitejs/vite/issues/23725">#23725</a>)
(<a
href="https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa">8e890e1</a>)</li>
<li><strong>optimizer:</strong> skip patches dir hash for nub lockfile
(<a
href="https://redirect.github.com/vitejs/vite/issues/23761">#23761</a>)
(<a
href="https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486">a7d5696</a>)</li>
<li><strong>resolve:</strong> support subpath imports with multiple
<code>#</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23631">#23631</a>)
(<a
href="https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1">0d86b34</a>)</li>
<li><strong>resolve:</strong> update resolve.exports to 2.0.4 (<a
href="https://redirect.github.com/vitejs/vite/issues/23739">#23739</a>)
(<a
href="https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5">4ea708a</a>)</li>
<li><strong>server:</strong> handle socket errors on upgrade requests
not taken by the HMR server (<a
href="https://redirect.github.com/vitejs/vite/issues/23728">#23728</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5">c2c9ef4</a>)</li>
<li><strong>server:</strong> only strip base when path matches a full
segment (<a
href="https://redirect.github.com/vitejs/vite/issues/23641">#23641</a>)
(<a
href="https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6">3dfde87</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>ssr:</strong> extract inline source maps without a regexp
(<a
href="https://redirect.github.com/vitejs/vite/issues/23775">#23775</a>)
(<a
href="https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a">6a02780</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li>migrate to Oxlint (<a
href="https://redirect.github.com/vitejs/vite/issues/23746">#23746</a>)
(<a
href="https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92">5b73935</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>deps:</strong> replace <code>@vercel/detect-agent</code>
with <code>std-env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23744">#23744</a>)
(<a
href="https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5">ce4293f</a>)</li>
<li><strong>dev:</strong> consolidate moduleURL to file path utilities
(<a
href="https://redirect.github.com/vitejs/vite/issues/23828">#23828</a>)
(<a
href="https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3">df7b40e</a>)</li>
<li><strong>dev:</strong> separate import resolution from URL conversion
(<a
href="https://redirect.github.com/vitejs/vite/issues/23791">#23791</a>)
(<a
href="https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7">6116689</a>)</li>
<li><strong>dev:</strong> share ModuleURL and BrowserURL conversions (<a
href="https://redirect.github.com/vitejs/vite/issues/23790">#23790</a>)
(<a
href="https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731">446954c</a>)</li>
<li><strong>dev:</strong> use ModuleURLs throughout HTML transforms (<a
href="https://redirect.github.com/vitejs/vite/issues/23815">#23815</a>)
(<a
href="https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52">a162990</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.4...v8.3.5">8.3.5</a>
(2026-10-21)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> handle missing chunk import maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23777">#23777</a>)
(<a
href="https://github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229">8d7623d</a>)</li>
<li><strong>build:</strong> include preload dependencies to chunk import
map hashing (<a
href="https://redirect.github.com/vitejs/vite/issues/23793">#23793</a>)
(<a
href="https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9">4d16e7c</a>)</li>
<li><strong>bundled-dev:</strong> apply <code>server.origin</code> to
asset URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23683">#23683</a>)
(<a
href="https://github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5">52ba877</a>)</li>
<li><strong>bundled-dev:</strong> declare utf-8 charset in fallback page
(<a
href="https://redirect.github.com/vitejs/vite/issues/23846">#23846</a>)
(<a
href="https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6">197daf6</a>)</li>
<li><strong>bundled-dev:</strong> ignore build.chunkImportMap (<a
href="https://redirect.github.com/vitejs/vite/issues/23685">#23685</a>)
(<a
href="https://github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07">cfe917d</a>)</li>
<li><strong>bundled-dev:</strong> include user
<code>import.meta.env.*</code> defines in the
<code>import.meta.env</code> object (<a
href="https://redirect.github.com/vitejs/vite/issues/23713">#23713</a>)
(<a
href="https://github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25">6019aa7</a>)</li>
<li><strong>bundled-dev:</strong> map forwarded error stacks through the
bundle source maps (<a
href="https://redirect.github.com/vitejs/vite/issues/23741">#23741</a>)
(<a
href="https://github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18">11fe1e4</a>)</li>
<li><strong>bundled-dev:</strong> normalize served output files (<a
href="https://redirect.github.com/vitejs/vite/issues/23684">#23684</a>)
(<a
href="https://github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3">df4e02c</a>)</li>
<li><strong>bundled-dev:</strong> stop hmr propagation at modules that
are no longer imported (<a
href="https://redirect.github.com/vitejs/vite/issues/23839">#23839</a>)
(<a
href="https://github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212">7471e8c</a>)</li>
<li><strong>css:</strong> don't fail on a literal <code>%</code> in
<code>url()</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23676">#23676</a>)
(<a
href="https://github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261">50b382d</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23731">#23731</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29">cf80aa5</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23826">#23826</a>)
(<a
href="https://github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9">77d8373</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23733">#23733</a>)
(<a
href="https://github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48">43f0d05</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23827">#23827</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab">c2e0418</a>)</li>
<li><strong>optimizer:</strong> fall back to yarn.lock for lockfile hash
(<a
href="https://redirect.github.com/vitejs/vite/issues/23667">#23667</a>)
(<a
href="https://github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e">f206096</a>)</li>
<li><strong>optimizer:</strong> scan <code>oxc.jsxInject</code> imports
(<a
href="https://redirect.github.com/vitejs/vite/issues/23758">#23758</a>)
(<a
href="https://github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714">38f3cb4</a>)</li>
<li><strong>optimizer:</strong> skip patches dir check for yarn.lock
fallback (<a
href="https://redirect.github.com/vitejs/vite/issues/23725">#23725</a>)
(<a
href="https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa">8e890e1</a>)</li>
<li><strong>optimizer:</strong> skip patches dir hash for nub lockfile
(<a
href="https://redirect.github.com/vitejs/vite/issues/23761">#23761</a>)
(<a
href="https://github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486">a7d5696</a>)</li>
<li><strong>resolve:</strong> support subpath imports with multiple
<code>#</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23631">#23631</a>)
(<a
href="https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1">0d86b34</a>)</li>
<li><strong>resolve:</strong> update resolve.exports to 2.0.4 (<a
href="https://redirect.github.com/vitejs/vite/issues/23739">#23739</a>)
(<a
href="https://github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5">4ea708a</a>)</li>
<li><strong>server:</strong> handle socket errors on upgrade requests
not taken by the HMR server (<a
href="https://redirect.github.com/vitejs/vite/issues/23728">#23728</a>)
(<a
href="https://github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5">c2c9ef4</a>)</li>
<li><strong>server:</strong> only strip base when path matches a full
segment (<a
href="https://redirect.github.com/vitejs/vite/issues/23641">#23641</a>)
(<a
href="https://github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6">3dfde87</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>ssr:</strong> extract inline source maps without a regexp
(<a
href="https://redirect.github.com/vitejs/vite/issues/23775">#23775</a>)
(<a
href="https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a">6a02780</a>)</li>
</ul>
<h3>Miscellaneous Chores</h3>
<ul>
<li>migrate to Oxlint (<a
href="https://redirect.github.com/vitejs/vite/issues/23746">#23746</a>)
(<a
href="https://github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92">5b73935</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>deps:</strong> replace <code>@vercel/detect-agent</code>
with <code>std-env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23744">#23744</a>)
(<a
href="https://github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5">ce4293f</a>)</li>
<li><strong>dev:</strong> consolidate moduleURL to file path utilities
(<a
href="https://redirect.github.com/vitejs/vite/issues/23828">#23828</a>)
(<a
href="https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3">df7b40e</a>)</li>
<li><strong>dev:</strong> separate import resolution from URL conversion
(<a
href="https://redirect.github.com/vitejs/vite/issues/23791">#23791</a>)
(<a
href="https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7">6116689</a>)</li>
<li><strong>dev:</strong> share ModuleURL and BrowserURL conversions (<a
href="https://redirect.github.com/vitejs/vite/issues/23790">#23790</a>)
(<a
href="https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731">446954c</a>)</li>
<li><strong>dev:</strong> use ModuleURLs throughout HTML transforms (<a
href="https://redirect.github.com/vitejs/vite/issues/23815">#23815</a>)
(<a
href="https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52">a162990</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/981f07fa4580fb88b333c4450431e4715d2a0b82"><code>981f07f</code></a>
release: v8.3.5 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23856">#23856</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1"><code>0d86b34</code></a>
fix(resolve): support subpath imports with multiple <code>#</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23631">#23631</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a"><code>6a02780</code></a>
perf(ssr): extract inline source maps without a regexp (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23775">#23775</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa"><code>8e890e1</code></a>
fix(optimizer): skip patches dir check for yarn.lock fallback (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23725">#23725</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6"><code>197daf6</code></a>
fix(bundled-dev): declare utf-8 charset in fallback page (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23846">#23846</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9"><code>4d16e7c</code></a>
fix(build): include preload dependencies to chunk import map hashing (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23793">#23793</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3"><code>df7b40e</code></a>
refactor(dev): consolidate moduleURL to file path utilities (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23828">#23828</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52"><code>a162990</code></a>
refactor(dev): use ModuleURLs throughout HTML transforms (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23815">#23815</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7"><code>6116689</code></a>
refactor(dev): separate import resolution from URL conversion (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23791">#23791</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731"><code>446954c</code></a>
refactor(dev): share ModuleURL and BrowserURL conversions (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23790">#23790</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.3.5/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.3.4&new-version=8.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 13:59:58 +00:00
dependabot[bot] 80de3632d0 chore(deps-dev): Bump sass from 1.105.2 to 1.106.1 (#2265) 
Bumps [sass](https://github.com/sass/dart-sass) from 1.105.2 to 1.106.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/releases">sass's
releases</a>.</em></p>
<blockquote>
<h2>Dart Sass 1.106.1</h2>
<p>To install Sass 1.106.1, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<ul>
<li>
<p>Fix a bug where an attribute selector with an empty value (such as
<code>[class=&quot;&quot;]</code>) would crash when serializing.</p>
</li>
<li>
<p>Don't crash when serializing a number with an empty unit. This is
only possible through the JavaScript and Dart APIs or the embedded
protocol.</p>
</li>
</ul>
<h3>Embedded Dart Sass</h3>
<ul>
<li>More robustly convert invalid value errors into <code>PARAMS</code>
errors.</li>
</ul>
<p>See the <a
href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11061">full
changelog</a> for changes in earlier releases.</p>
<h2>Dart Sass 1.106.0</h2>
<p>To install Sass 1.106.0, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<ul>
<li>
<p>Don't normalize CSS escapes in statement contexts that can contain
interpolation. For example, <code>@f\6Fo</code> is now emitted as
written rather than normalized to <code>@foo</code>.</p>
</li>
<li>
<p>Fix a bug where quotes would be removed from attribute selector
values that contained backslashes.</p>
</li>
<li>
<p>Fix invalid source spans that could cause crashes when encountering a
syntax error in selectors or media queries that also contain escape
sequences.</p>
</li>
<li>
<p>Fix a bug where the indented syntax parser would crash when parsing a
file where the first statement was indented <em>and</em> appeared after
the first line.</p>
</li>
<li>
<p>Fix a bug that could cause crashes when encountering errors or
warnings in interpolations that contain patterns like <code>//
*/</code>.</p>
</li>
<li>
<p><strong>Potentially breaking compatibility fix:</strong> CSS escape
codes whose values are 0, for Unicode surrogates, or greater than the
maximum allowed code point are now consistently normalized to U+FFFD
REPLACEMENT CHARACTER in expression contexts. Previously, in some cases
these were instead normalized to the normalized form of the original
escape sequence, which violates the principle that all escape sequences
for identical values should be normalized the same way. In other cases,
these would simply throw errors.</p>
<p>As a special case, <code>\0</code> on its own will continue to be
normalized to <code>\0 </code> to support historical CSS hacks.</p>
</li>
<li>
<p><strong>Potentially breaking bug fix:</strong> Throw an error for
mixins and functions that have rest parameters which are the same as
normal parameters. Previously, the positional parameters wouldn't be
accessible and calling such a mixin or function with a named argument
would crash the compiler.</p>
</li>
<li>
<p><strong>Potentially breaking bug fix:</strong> Fix various cases
where using a CSS escape code at the beginning of an identifier would
change parsing behavior versus using the character directly.</p>
</li>
<li>
<p><strong>Potentially breaking bug fix:</strong> When a number's unit
is ambiguous with a numeric exponent, the unit is now serialized as an
escape code rather than a literal <code>e</code> to avoid being
interpreted as an exponent by CSS.</p>
</li>
<li>
<p><strong>Potentially breaking bug fix:</strong> Don't parse a CSS
escape code for U+45 LATIN CAPITAL LETTER E or U+65 LATIN LOWERCASE
LETTER E as an exponent in <code>@keyframes</code> percentage
selectors.</p>
</li>
<li>
<p><strong>Potentially breaking bug fix:</strong> Properly normalize
underscores written as CSS escape codes in variable, mixin, and function
names.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's
changelog</a>.</em></p>
<blockquote>
<h2>1.106.1</h2>
<ul>
<li>
<p>Fix a bug where an attribute selector with an empty value (such as
<code>[class=&quot;&quot;]</code>) would crash when serializing.</p>
</li>
<li>
<p>Don't crash when serializing a number with an empty unit. This is
only
possible through the JavaScript and Dart APIs or the embedded
protocol.</p>
</li>
</ul>
<h3>Embedded Dart Sass</h3>
<ul>
<li>More robustly convert invalid value errors into <code>PARAMS</code>
errors.</li>
</ul>
<h2>1.106.0</h2>
<ul>
<li>
<p>Don't normalize CSS escapes in statement contexts that can contain
interpolation. For example, <code>@f\6Fo</code> is now emitted as
written rather than
normalized to <code>@foo</code>.</p>
</li>
<li>
<p>Fix a bug where quotes would be removed from attribute selector
values that
contained backslashes.</p>
</li>
<li>
<p>Fix invalid source spans that could cause crashes when encountering a
syntax
error in selectors or media queries that also contain escape
sequences.</p>
</li>
<li>
<p>Fix a bug where the indented syntax parser would crash when parsing a
file
where the first statement was indented <em>and</em> appeared after the
first line.</p>
</li>
<li>
<p>Fix a bug that could cause crashes when encountering errors or
warnings in
interpolations that contain patterns like <code>// */</code>.</p>
</li>
<li>
<p><strong>Potentially breaking compatibility fix:</strong> CSS escape
codes whose values are
0, for Unicode surrogates, or greater than the maximum allowed code
point are
now consistently normalized to U+FFFD REPLACEMENT CHARACTER in
expression
contexts. Previously, in some cases these were instead normalized to the
normalized form of the original escape sequence, which violates the
principle
that all escape sequences for identical values should be normalized the
same
way. In other cases, these would simply throw errors.</p>
<p>As a special case, <code>\0</code> on its own will continue to be
normalized to <code>\0 </code> to
support historical CSS hacks.</p>
</li>
<li>
<p><strong>Potentially breaking bug fix:</strong> Throw an error for
mixins and functions that
have rest parameters which are the same as normal parameters.
Previously, the
positional parameters wouldn't be accessible and calling such a mixin or
function with a named argument would crash the compiler.</p>
</li>
<li>
<p><strong>Potentially breaking bug fix:</strong> Fix various cases
where using a CSS escape
code at the beginning of an identifier would change parsing behavior
versus
using the character directly.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sass/dart-sass/commit/811ecc67bc5ed16d410d76e8bde343d9770f08c0"><code>811ecc6</code></a>
Pull the version back to 1.106.1 (<a
href="https://redirect.github.com/sass/dart-sass/issues/2893">#2893</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/b10205ed8391f11cb9ce8b7c3d6464f842491ce8"><code>b10205e</code></a>
Fix serializing a number with an empty-string unit (<a
href="https://redirect.github.com/sass/dart-sass/issues/2892">#2892</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/e79f8a7d869efe54e3723c1e5060bb6cb95d63a4"><code>e79f8a7</code></a>
Fix serializing an attribute selector with an empty value (<a
href="https://redirect.github.com/sass/dart-sass/issues/2891">#2891</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/2ea4fc07b8560ba57e1657d9759b6ce8e89a64dd"><code>2ea4fc0</code></a>
Merge pull request <a
href="https://redirect.github.com/sass/dart-sass/issues/2883">#2883</a>
from sass/fuzz</li>
<li><a
href="https://github.com/sass/dart-sass/commit/a113995474eb2a58035f2ebb5f5d85590e4d11b9"><code>a113995</code></a>
Bump postcss from 8.5.28 to 8.5.30 in /pkg/sass-parser (<a
href="https://redirect.github.com/sass/dart-sass/issues/2886">#2886</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/2d2e76cf29ec022d5c3a8539e79d8d490accf21f"><code>2d2e76c</code></a>
Try using the SassBot GitHub token when auto-merging dependabot PRs (<a
href="https://redirect.github.com/sass/dart-sass/issues/2885">#2885</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/56608242a996f869fc1903c68fd4c68c8d97daa3"><code>5660824</code></a>
Improve the accuracy of <code>FileSpan.trimLeft()</code> and
<code>.trimRight()</code></li>
<li><a
href="https://github.com/sass/dart-sass/commit/09e4024c4c907f7bbc2754fa5c9a10a882ad9056"><code>09e4024</code></a>
Throw an error for duplicate rest and non-rest parameter names</li>
<li><a
href="https://github.com/sass/dart-sass/commit/34c8e6b1fc854b4aabc907a0c427b854ee9ec35b"><code>34c8e6b</code></a>
Fix check for an indented first statement</li>
<li><a
href="https://github.com/sass/dart-sass/commit/a05866caeb42db34c3df1181eb5bcf41534549c8"><code>a05866c</code></a>
Make <code>_expandInterpolationLeft</code> resilient to commented-out
comments</li>
<li>Additional commits viewable in <a
href="https://github.com/sass/dart-sass/compare/1.105.2...1.106.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sass&package-manager=npm_and_yarn&previous-version=1.105.2&new-version=1.106.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 13:58:49 +00:00
dependabot[bot] 2ba037f44c chore(deps): Bump the codeql-action group with 3 updates (#2268) 
Bumps the codeql-action group with 3 updates:
[github/codeql-action/init](https://github.com/github/codeql-action),
[github/codeql-action/autobuild](https://github.com/github/codeql-action)
and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `github/codeql-action/init` from 4.39.0 to 4.39.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.1</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.3">2.27.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4256">#4256</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.1 - 21 Oct 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.3">2.27.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4256">#4256</a></li>
</ul>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/9b3254085494b55a0f7c4c2b3d2d52cc712ce370"><code>9b32540</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4257">#4257</a>
from github/update-v4.39.1-c5a2f4b0f</li>
<li><a
href="https://github.com/github/codeql-action/commit/b5e1ed9574dcfa81c88c318140f3b3e5c199bfb3"><code>b5e1ed9</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/20f5ec39109073afe1789b098456b2be0164f4ee"><code>20f5ec3</code></a>
Update changelog for v4.39.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/c5a2f4b0fe28ca06eaaeb86fb05a5f612ae293f9"><code>c5a2f4b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4245">#4245</a>
from github/henrymercer/graduate-overlay-trap-caching</li>
<li><a
href="https://github.com/github/codeql-action/commit/61a5a80dd98ad1b9679010141a46cace51065761"><code>61a5a80</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4256">#4256</a>
from github/update-bundle/codeql-bundle-v2.27.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/3dd33f8b69588bd9591684b2dca169eb612f5ed5"><code>3dd33f8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4249">#4249</a>
from github/mbg/upload-improvements-for-4223</li>
<li><a
href="https://github.com/github/codeql-action/commit/b96e3390db93dc46c2c3753a94b87c0d734b0b61"><code>b96e339</code></a>
Change comment for <code>getConfig</code> call in
<code>upload-sarif</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/7fa45180db8d657b23ded3636b5d8583aec6ddfe"><code>7fa4518</code></a>
Use <code>shouldSkipSarifUpload</code> in
<code>analyze-action.ts</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/a69c7cb332d56f616fcadef002884523c71e8d1c"><code>a69c7cb</code></a>
Document that setting the env vars to <code>false</code> takes
precedence</li>
<li><a
href="https://github.com/github/codeql-action/commit/74ddcd9f65683791ab07eccd074b4ba145d89ea6"><code>74ddcd9</code></a>
Fix typo in comment</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/autobuild` from 4.39.0 to 4.39.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.1</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.3">2.27.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4256">#4256</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.1 - 21 Oct 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.3">2.27.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4256">#4256</a></li>
</ul>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/9b3254085494b55a0f7c4c2b3d2d52cc712ce370"><code>9b32540</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4257">#4257</a>
from github/update-v4.39.1-c5a2f4b0f</li>
<li><a
href="https://github.com/github/codeql-action/commit/b5e1ed9574dcfa81c88c318140f3b3e5c199bfb3"><code>b5e1ed9</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/20f5ec39109073afe1789b098456b2be0164f4ee"><code>20f5ec3</code></a>
Update changelog for v4.39.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/c5a2f4b0fe28ca06eaaeb86fb05a5f612ae293f9"><code>c5a2f4b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4245">#4245</a>
from github/henrymercer/graduate-overlay-trap-caching</li>
<li><a
href="https://github.com/github/codeql-action/commit/61a5a80dd98ad1b9679010141a46cace51065761"><code>61a5a80</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4256">#4256</a>
from github/update-bundle/codeql-bundle-v2.27.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/3dd33f8b69588bd9591684b2dca169eb612f5ed5"><code>3dd33f8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4249">#4249</a>
from github/mbg/upload-improvements-for-4223</li>
<li><a
href="https://github.com/github/codeql-action/commit/b96e3390db93dc46c2c3753a94b87c0d734b0b61"><code>b96e339</code></a>
Change comment for <code>getConfig</code> call in
<code>upload-sarif</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/7fa45180db8d657b23ded3636b5d8583aec6ddfe"><code>7fa4518</code></a>
Use <code>shouldSkipSarifUpload</code> in
<code>analyze-action.ts</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/a69c7cb332d56f616fcadef002884523c71e8d1c"><code>a69c7cb</code></a>
Document that setting the env vars to <code>false</code> takes
precedence</li>
<li><a
href="https://github.com/github/codeql-action/commit/74ddcd9f65683791ab07eccd074b4ba145d89ea6"><code>74ddcd9</code></a>
Fix typo in comment</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.39.0 to 4.39.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.1</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.3">2.27.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4256">#4256</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.1 - 21 Oct 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.3">2.27.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4256">#4256</a></li>
</ul>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/9b3254085494b55a0f7c4c2b3d2d52cc712ce370"><code>9b32540</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4257">#4257</a>
from github/update-v4.39.1-c5a2f4b0f</li>
<li><a
href="https://github.com/github/codeql-action/commit/b5e1ed9574dcfa81c88c318140f3b3e5c199bfb3"><code>b5e1ed9</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/20f5ec39109073afe1789b098456b2be0164f4ee"><code>20f5ec3</code></a>
Update changelog for v4.39.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/c5a2f4b0fe28ca06eaaeb86fb05a5f612ae293f9"><code>c5a2f4b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4245">#4245</a>
from github/henrymercer/graduate-overlay-trap-caching</li>
<li><a
href="https://github.com/github/codeql-action/commit/61a5a80dd98ad1b9679010141a46cace51065761"><code>61a5a80</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4256">#4256</a>
from github/update-bundle/codeql-bundle-v2.27.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/3dd33f8b69588bd9591684b2dca169eb612f5ed5"><code>3dd33f8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4249">#4249</a>
from github/mbg/upload-improvements-for-4223</li>
<li><a
href="https://github.com/github/codeql-action/commit/b96e3390db93dc46c2c3753a94b87c0d734b0b61"><code>b96e339</code></a>
Change comment for <code>getConfig</code> call in
<code>upload-sarif</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/7fa45180db8d657b23ded3636b5d8583aec6ddfe"><code>7fa4518</code></a>
Use <code>shouldSkipSarifUpload</code> in
<code>analyze-action.ts</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/a69c7cb332d56f616fcadef002884523c71e8d1c"><code>a69c7cb</code></a>
Document that setting the env vars to <code>false</code> takes
precedence</li>
<li><a
href="https://github.com/github/codeql-action/commit/74ddcd9f65683791ab07eccd074b4ba145d89ea6"><code>74ddcd9</code></a>
Fix typo in comment</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 13:57:36 +00:00
dependabot[bot] 644ec1c75e chore(deps): Bump docker/login-action from 4.6.0 to 4.7.0 (#2269) 
Bumps [docker/login-action](https://github.com/docker/login-action) from
4.6.0 to 4.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.7.0</h2>
<ul>
<li>Preserve explicit ECR settings in <code>registry-auth</code> by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1089">docker/login-action#1089</a></li>
<li>Use registry hosts for scoped credentials by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1088">docker/login-action#1088</a></li>
<li>Raise Docker Hub OIDC max expiry to 6 hours by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1068">docker/login-action#1068</a></li>
<li>Log Docker Hub OIDC token exchange progress by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/1061">docker/login-action#1061</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1154.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1093">docker/login-action#1093</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.94.0 to 0.107.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/1100">docker/login-action#1100</a></li>
<li>Bump <code>@​humanfs/node</code> from 0.16.7 to 0.16.8 in <a
href="https://redirect.github.com/docker/login-action/pull/1077">docker/login-action#1077</a></li>
<li>Bump csv-parse from 7.0.1 to 7.0.3 in <a
href="https://redirect.github.com/docker/login-action/pull/1078">docker/login-action#1078</a></li>
<li>Bump handlebars from 4.7.9 to 4.7.10 in <a
href="https://redirect.github.com/docker/login-action/pull/1091">docker/login-action#1091</a></li>
<li>Bump js-yaml from 5.2.2 to 5.5.0 in <a
href="https://redirect.github.com/docker/login-action/pull/1066">docker/login-action#1066</a></li>
<li>Bump postcss from 8.5.22 to 8.5.26 in <a
href="https://redirect.github.com/docker/login-action/pull/1071">docker/login-action#1071</a></li>
<li>Bump postcss-selector-parser from 7.1.1 to 7.1.6 in <a
href="https://redirect.github.com/docker/login-action/pull/1092">docker/login-action#1092</a></li>
<li>Bump source-map-js from 1.2.1 to 1.2.2 in <a
href="https://redirect.github.com/docker/login-action/pull/1090">docker/login-action#1090</a></li>
<li>Bump undici from 6.27.0 to 6.29.1 in <a
href="https://redirect.github.com/docker/login-action/pull/1085">docker/login-action#1085</a></li>
<li>Bump uuid from 14.0.1 to 14.0.3 in <a
href="https://redirect.github.com/docker/login-action/pull/1096">docker/login-action#1096</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.6.0...v4.7.0">https://github.com/docker/login-action/compare/v4.6.0...v4.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/81c6f93d4bc991e510b342a00b419b3bb4efc5c6"><code>81c6f93</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1100">#1100</a>
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
<li><a
href="https://github.com/docker/login-action/commit/1b16c8d1815e1d951d87a3522ff48a76d073735a"><code>1b16c8d</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1096">#1096</a>
from docker/dependabot/npm_and_yarn/uuid-14.0.3</li>
<li><a
href="https://github.com/docker/login-action/commit/ac86b5e9e9d2db43b12b2d3afb9140a427d69d65"><code>ac86b5e</code></a>
[dependabot skip] chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/1476d845f08dd8309a938959a280f2e23c0cba14"><code>1476d84</code></a>
build(deps): bump <code>@​docker/actions-toolkit</code> from 0.94.0 to
0.107.0</li>
<li><a
href="https://github.com/docker/login-action/commit/503cee68d85e94275776fcc6f5315f19207f7567"><code>503cee6</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1095">#1095</a>
from docker/dependabot/github_actions/actions/create...</li>
<li><a
href="https://github.com/docker/login-action/commit/f0935357f5c539aeb7ff6b886ba5434ab76e9de3"><code>f093535</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1099">#1099</a>
from docker/dependabot/github_actions/codecov/codeco...</li>
<li><a
href="https://github.com/docker/login-action/commit/d5ae7f188776587b12b77b45e29ea21332462da9"><code>d5ae7f1</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1098">#1098</a>
from docker/dependabot/github_actions/docker/bake-ac...</li>
<li><a
href="https://github.com/docker/login-action/commit/6f9750797f6e7186f18c069a7e97abc1dcf1006b"><code>6f97507</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1097">#1097</a>
from docker/dependabot/github_actions/docker/bake-ac...</li>
<li><a
href="https://github.com/docker/login-action/commit/006d61fa598847d65f6670d1569545fa2af9cf02"><code>006d61f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1094">#1094</a>
from docker/dependabot/github_actions/codeql-actions...</li>
<li><a
href="https://github.com/docker/login-action/commit/93f5f522eea5eacabf35cc89b9d19ec23e742471"><code>93f5f52</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/1093">#1093</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.6.0&new-version=4.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 13:56:28 +00:00
dependabot[bot] 0fa49894d7 chore(deps): Bump the react group with 2 updates (#2263) 
Bumps the react group with 2 updates:
[react-i18next](https://github.com/i18next/react-i18next) and
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-i18next` from 17.1.0 to 17.1.4
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.1.4</h2>
<ul>
<li>fix(types): without <code>allowObjectInHTMLChildren</code>, the
<code>children</code> of HTML elements now use React's own type
(<code>DOMAttributes&lt;T&gt;['children']</code>) instead of the
<code>ReactI18NextChildren | Iterable&lt;ReactI18NextChildren&gt;</code>
union. Both accept the same children, so nothing compiles differently.
For default installs the global <code>HTMLAttributes</code> augmentation
now repeats whatever <code>@types/react</code> declares, so changes in
React's types flow through instead of meeting a copy, and type errors on
element children no longer list an extra
<code>Iterable&lt;...&gt;</code>. With <code>allowObjectInHTMLChildren:
true</code> nothing changes. First step of <a
href="https://redirect.github.com/i18next/react-i18next/issues/1928">#1928</a>.</li>
</ul>
<h2>17.1.3</h2>
<ul>
<li>fix(IcuTrans): numeric HTML entities above U+FFFF, like emoji, now
decode to the right character. <code>&quot;Hello &amp;#x1F44B;
&lt;0&gt;friend&lt;/0&gt;
&amp;[#127881](https://github.com/i18next/react-i18next/issues/127881);&quot;</code>
rendered U+F44B and U+F389, private-use glyphs that usually show as a
box, instead of 👋 and 🎉: the decoder used
<code>String.fromCharCode</code>, which keeps only the low 16 bits of
the code point. This shows up with translations that a TMS or CMS
exports HTML-encoded. Entities above U+10FFFF, which are no valid code
points, now stay as written instead of becoming U+0000. Entities below
U+10000, including surrogate pairs written as two entities, decode as
before. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/react-i18next/pull/1940">#1940</a>).</li>
</ul>
<h2>17.1.2</h2>
<ul>
<li>fix(Trans): when the only child is a string, a tag whose index the
children don't have now renders its own text. <code>&lt;Trans
i18nKey=&quot;welcome&quot;&gt;Welcome&lt;/Trans&gt;</code> with
<code>&quot;Welcome &lt;1&gt;friend&lt;/1&gt;&quot;</code> rendered
<code>Welcome e</code>, and <code>defaults=&quot;Hi
&lt;1&gt;there&lt;/1&gt;&quot;</code> with the child <code>Hi</code>
rendered <code>Hi i</code>. The fallback for a single object of
components (<code>{{ 1: &lt;strong /&gt; }}</code>) looked the tag up on
the string and rendered one of its characters. It now applies only when
that child is an object, so <code>{{ 1: &lt;strong /&gt; }}</code>
renders as before, and the tag falls back to its inner text, as it
already did with several children or with a number or an element as the
only child. This also stops a single-entry array child holding
<code>null</code> (<code>{[null]}</code>, e.g. from a <code>.map</code>
that returned <code>null</code>) from throwing <code>Cannot read
properties of null</code>. Thanks <a
href="https://github.com/Cayan"><code>@​Cayan</code></a> (<a
href="https://redirect.github.com/i18next/react-i18next/pull/1939">#1939</a>).</li>
</ul>
<h2>17.1.1</h2>
<ul>
<li>fix(Trans): with <code>components</code> as an object with index
keys, the component for key <code>0</code> is now rendered.
<code>components={{ 0: &lt;a href={path} /&gt; }}</code> with
<code>&quot;You're eligible. &lt;0&gt;Get started
here.&lt;/0&gt;&quot;</code> rendered the text without the link, a
self-closing <code>&lt;0/&gt;</code> rendered nothing, and in
<code>&lt;0&gt;a &lt;1&gt;b&lt;/1&gt;&lt;/0&gt;</code> both elements
were lost, while keys <code>1</code> and up and the array form worked.
The object was passed on as the indexed children, so
<code>&lt;0&gt;</code> resolved to the object itself. It is now looked
up by key, like a named components map. This also fixes an array
<code>components</code> next to
<code>react.transDefaultProps.components</code>, which the merge turns
into such an object (<code>{ Bold, 0, 1 }</code>) and so lost its first
entry, and a self-closing named tag in a mixed object (<code>{ 0: &lt;a
/&gt;, Bold: &lt;b /&gt; }</code> with <code>&lt;Bold/&gt;</code>),
which rendered as the text <code>&lt;Bold /&gt;</code>. Arrays, named
maps and index objects starting at <code>1</code> render as before.
Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/react-i18next/pull/1938">#1938</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/290e8abe91bc7660af3afb1e97cf6d2ca839eb98"><code>290e8ab</code></a>
17.1.4</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/aeb94d1ec3aa97703e3dc8142ecb236b4931a332"><code>aeb94d1</code></a>
changelog for 17.1.4</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/3fecad75a39cd5fe82e5f076108e24e5fee33b89"><code>3fecad7</code></a>
fix(types): use React's own children type unless
allowObjectInHTMLChildren is...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/696c0f5d388b962c5275feb3bd01dcb6d89f02fd"><code>696c0f5</code></a>
17.1.3</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/094943a942b6eca7e75b3ad99456dfc77a28973f"><code>094943a</code></a>
build</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/a73495c09767db22496d5d13b2d1c622d65a477a"><code>a73495c</code></a>
changelog for 17.1.3</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/9a36388b1d2f3fc8dcc7c7ffb22602755f507357"><code>9a36388</code></a>
fix(IcuTrans): decode numeric entities above U+FFFF (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1940">#1940</a>)</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/53a810c1f43198e86c7659248430d7eee0e23209"><code>53a810c</code></a>
17.1.2</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/01aa762d4adad014cd4660ae827c1658b669a28a"><code>01aa762</code></a>
build</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/78679811890fae0b5865b75d8e55934be307e2f2"><code>7867981</code></a>
changelog for 17.1.2</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/react-i18next/compare/v17.1.0...v17.1.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-resizable-panels` from 4.14.7 to 4.14.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.8</h2>
<ul>
<li>Fix &quot;Stacking order can only be calculated for elements with a
common ancestor&quot; error thrown by the document
<code>pointermove</code> handler when the event target is removed from
the DOM during dispatch. Detached targets are now treated as viable hit
targets. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/771">#771</a></li>
<li>Fix <code>Group</code> and <code>Grid</code>
<code>setLayout()</code> and <code>Panel</code> <code>resize()</code>,
<code>collapse()</code>, and <code>expand()</code> validating against
pixel-based constraints for the previous group size when called before
the group's <code>ResizeObserver</code> ran (e.g. from an application's
own <code>ResizeObserver</code>). - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/770">#770</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.8</h2>
<ul>
<li>Fix &quot;Stacking order can only be calculated for elements with a
common ancestor&quot; error thrown by the document
<code>pointermove</code> handler when the event target is removed from
the DOM during dispatch. Detached targets are now treated as viable hit
targets. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/771">#771</a></li>
<li>Fix <code>Group</code> and <code>Grid</code>
<code>setLayout()</code> and <code>Panel</code> <code>resize()</code>,
<code>collapse()</code>, and <code>expand()</code> validating against
pixel-based constraints for the previous group size when called before
the group's <code>ResizeObserver</code> ran (e.g. from an application's
own <code>ResizeObserver</code>). - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/770">#770</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/c19f0a93a96e4f214e9bd7b77eaec155f31f50d7"><code>c19f0a9</code></a>
4.14.7 -&gt; 4.14.8</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/625ef2d83a839eb6fb1a1c7e2703f27598136472"><code>625ef2d</code></a>
Validate imperative layout changes against the group's current size (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/772">#772</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/64c5be9e60a76b087fe56d9a0a20d415b9c69fe1"><code>64c5be9</code></a>
Fix &quot;Stacking order can only be calculated for elements with a
common ancesto...</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.7...4.14.8">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-26 13:54:49 +00:00
dependabot[bot] d113745d39 chore(deps): Bump react-resizable-panels from 4.14.6 to 4.14.7 in the react group (#2259) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.6 to 4.14.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.7</h2>
<ul>
<li>Improve mount performance for groups with many panels by skipping
redundant constraint recalculations and subscriber notifications when a
<code>Panel</code>'s <code>disabled</code> prop has not changed. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/768">#768</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.7</h2>
<ul>
<li>Improve mount performance for groups with many panels by skipping
redundant constraint recalculations and subscriber notifications when a
<code>Panel</code>'s <code>disabled</code> prop has not changed. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/768">#768</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/da1f5c16d9ba3f2767f4ff310f2cc642577757cd"><code>da1f5c1</code></a>
4.14.6 -&gt; 4.14.7</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/c8433978136e756bfef196c02e8f59a6f6550de9"><code>c843397</code></a>
perf: skip unchanged panel prop updates (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/768">#768</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/bb08b8724eb8a40f7246ca79c6d0424441ac3606"><code>bb08b87</code></a>
Update react-lib-tools to 0.0.67</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.6...4.14.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.6&new-version=4.14.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-23 14:04:07 +00:00
dependabot[bot] 92e28a4874 chore(deps): Bump i18next from 26.5.2 to 26.5.3 (#2261) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.5.2 to
26.5.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.5.3</h2>
<ul>
<li>fix(types): with the selector API, a plural key now requires
<code>count</code> also when the call passes an explicit
<code>ns</code>. <code>t(($) =&gt; $.item)</code> already failed without
<code>count</code>, but <code>t(($) =&gt; $.item, { ns: 'items'
})</code> compiled, although at runtime it looks up <code>item</code>
instead of <code>item_one</code> / <code>item_other</code> and returns
the key. It now fails the same way, also with <code>ordinal:
true</code>, <code>defaultValue</code>, an <code>ns</code> array, a key
prefix and <code>i18n.t</code>. Calls with <code>count</code>,
<code>context</code>, <code>returnObjects: true</code> and arrays of
selectors, as well as return types, are unchanged. Thanks <a
href="https://github.com/nyarthan"><code>@​nyarthan</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2452">#2452</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.5.3</h2>
<ul>
<li>fix(types): with the selector API, a plural key now requires
<code>count</code> also when the call passes an explicit
<code>ns</code>. <code>t(($) =&gt; $.item)</code> already failed without
<code>count</code>, but <code>t(($) =&gt; $.item, { ns: 'items'
})</code> compiled, although at runtime it looks up <code>item</code>
instead of <code>item_one</code> / <code>item_other</code> and returns
the key. It now fails the same way, also with <code>ordinal:
true</code>, <code>defaultValue</code>, an <code>ns</code> array, a key
prefix and <code>i18n.t</code>. Calls with <code>count</code>,
<code>context</code>, <code>returnObjects: true</code> and arrays of
selectors, as well as return types, are unchanged. Thanks <a
href="https://github.com/nyarthan"><code>@​nyarthan</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2452">#2452</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/f7d95939e7b9d52a2095dbe3808ddbd89662b1b2"><code>f7d9593</code></a>
26.5.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/a19e0f90edc9b0117280e45851a3dd4d02a627eb"><code>a19e0f9</code></a>
changelog for 26.5.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/124d04eebcbcaa7cc2b79ee365633e4e1725c16d"><code>124d04e</code></a>
fix(types): require count for explicit-ns plural selectors (<a
href="https://redirect.github.com/i18next/i18next/issues/2452">#2452</a>)</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.5.2...v26.5.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.5.2&new-version=26.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-23 13:59:12 +00:00
dependabot[bot] 293a849976 chore(deps): Bump @codemirror/view from 6.43.14 to 6.43.15 (#2260) 
Bumps [@codemirror/view](https://github.com/codemirror/view) from
6.43.14 to 6.43.15.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/view&package-manager=npm_and_yarn&previous-version=6.43.14&new-version=6.43.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-23 13:55:28 +00:00
dependabot[bot] efe357fea5 chore(deps-dev): Bump typescript-eslint from 8.71.2 to 8.72.0 (#2262) 
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
from 8.71.2 to 8.72.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.72.0</h2>
<h2>8.72.0 (2026-10-19)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> lazy load rules (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13010">#13010</a>)</li>
<li><strong>eslint-plugin:</strong> [await-thenable] add
<code>allowMixedPromiseArrays</code> option (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12992">#12992</a>)</li>
<li><strong>typescript-estree:</strong> error on abstract keyword that
precedes export (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13019">#13019</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>ast-spec:</strong> add <code>JSXFragment</code> to
<code>JSXAttribute['value']</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13051">#13051</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types]
check where allowed type aliases are declared (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13016">#13016</a>)</li>
<li><strong>eslint-plugin:</strong> [no-deprecated] report deprecated
properties in object literals (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12704">#12704</a>)</li>
<li><strong>eslint-plugin:</strong> use isTypeLiteralType instead of
type.isLiteral() to include bigint literals on TS &lt; 5.0 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13053">#13053</a>)</li>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] check
tuples (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13058">#13058</a>)</li>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] ignore
extra this type argument on TS &lt; 5.1 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13055">#13055</a>)</li>
<li><strong>type-utils:</strong> discriminateAnyType crashes when
calling getAwaitedType on awaited type in TS &lt; 5.0 (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13054">#13054</a>)</li>
<li><strong>typescript-estree:</strong> include leading and trailing
comments &amp; whitespace in Program range (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12991">#12991</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Junichiro Kasuya <a
href="https://github.com/jksy"><code>@​jksy</code></a></li>
<li>Mitch Fultz <a
href="https://github.com/fitchmultz"><code>@​fitchmultz</code></a></li>
<li>Shaan GS <a
href="https://github.com/ShaanGS"><code>@​ShaanGS</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.72.0 (2026-10-19)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/a4c2603d3e4fd43b33bc25b82457716e9f7cef71"><code>a4c2603</code></a>
chore(release): publish 8.72.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.2&new-version=8.72.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-23 13:54:32 +00:00
dependabot[bot] cd1bc5aeed chore(deps-dev): Bump postcss from 8.5.30 to 8.5.31 (#2258) 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.30 to
8.5.31.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.31</h2>
<ul>
<li>Fix better source map on <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/firefoxic"><code>@​firefoxic</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.31</h2>
<ul>
<li>Fix better source map on <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/firefoxic"><code>@​firefoxic</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/d1908579d6af4155ee5f759030184fb4c2b575ec"><code>d190857</code></a>
Release 8.5.31 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/4ef6d8cc0307df09c21a63b5521285657966ece3"><code>4ef6d8c</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/6abd674231f7867d1c37e6b71bc8d6e00165fd27"><code>6abd674</code></a>
Call the builder with every node when the output is escaped (<a
href="https://redirect.github.com/postcss/postcss/issues/2175">#2175</a>)</li>
<li>See full diff in <a
href="https://github.com/postcss/postcss/compare/8.5.30...8.5.31">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.30&new-version=8.5.31)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-22 14:19:25 +00:00
dependabot[bot] 0171daeea8 chore(deps): Bump react-resizable-panels from 4.14.5 to 4.14.6 in the react group (#2257) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.5 to 4.14.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.6</h2>
<ul>
<li>Fix <code>F6</code> and <code>Shift+F6</code> keyboard navigation
trying to focus disabled separators. Disabled separators are now
skipped. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/767">#767</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.6</h2>
<ul>
<li>Fix <code>F6</code> and <code>Shift+F6</code> keyboard navigation
trying to focus disabled separators. Disabled separators are now
skipped. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/767">#767</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/bbc47aaf4fce78e7f424b7e1e6dcf22a2b0fbe57"><code>bbc47aa</code></a>
4.14.5 -&gt; 4.14.6</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/90cb7a4197187621a947474a004ab5bec7107b0e"><code>90cb7a4</code></a>
Tidying up</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/c8367d2f875aa8c977137a0f8a37e9db1e751d52"><code>c8367d2</code></a>
Skip disabled separators during F6 keyboard navigation (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/767">#767</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/4b6332ab872ff32faf4c08751ee3b07a14bf9548"><code>4b6332a</code></a>
Update react-lib-tools dev dependency</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.5...4.14.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.5&new-version=4.14.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-22 14:12:35 +00:00
dependabot[bot] d281e87069 chore(deps): Bump maplibre-gl from 6.14.0 to 6.15.0 (#2255) 
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from
6.14.0 to 6.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's
releases</a>.</em></p>
<blockquote>
<h2>v6.15.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Add <code>dragRotate: {around: 'pointer'}</code> to turn and tilt
the map around the point under the pointer, and <code>{around: 'center',
movement: 'circular' | 'linear'}</code>, which replaces the deprecated
<code>aroundCenter</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8628">#8628</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Redraw fewer layers on terrain when a custom layer's
<code>terrainTileRevision</code> or a feature state changes (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8782">#8782</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Support the <code>hash</code> option in a projection registered with
<code>addProjection</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8743">#8743</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Add experimental <code>addProjection</code>,
<code>removeProjection</code>, a built-in <code>identity</code>
projection and a <code>{bbox}</code> tile URL token for maps in a custom
planar CRS with its own quad tile grid (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/168">#168</a>,
<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/5764">#5764</a>)</li>
<li>Speed up tile loading by skipping point labels in the tile buffer,
which the neighbouring tile draws (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8535">#8535</a>)
(by <a
href="https://github.com/cherenkov"><code>@​cherenkov</code></a>)</li>
<li>Project GeoJSON sources on a map in a registered CRS, in the
workers, from a <code>definition</code> string and a projection handler
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8736">#8736</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Support OpenType <code>vert</code> forms in vertical labels rendered
with <code>font-faces</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8489">#8489</a>)
(by <a
href="https://github.com/NEKOYASAN"><code>@​NEKOYASAN</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix a map in a registered projection going blank when its center
crosses 180° (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8802">#8802</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix world projections like Equal Earth throwing and jumping when the
mouse is in the space around the world (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8803">#8803</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Work around a regression in Safari 26.6 and later where the map
stops loading tiles after the page was in the background (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8780">#8780</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu
mixing fonts or dropping letters when the style has a glyphs URL (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8741">#8741</a>)
(by <a
href="https://github.com/crackalamoo"><code>@​crackalamoo</code></a>)</li>
<li>Fix <code>setWorkerUrl</code> treating a <code>.cjs</code> fragment
or query marker as a module worker URL (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8769">#8769</a>)
(by <a
href="https://github.com/Anandb71"><code>@​Anandb71</code></a>)</li>
<li>Fix the terrain not finding a tile's own DEM data when the DEM
source's maxzoom is below the terrain tile zoom (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8765">#8765</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the camera dropping to sea level while the terrain under the
center of a <code>jumpTo</code>, <code>easeTo</code> or
<code>flyTo</code> loads (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8549">#8549</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix a grid of lines along tile borders in line layers of sliced
overzoomed tiles when the source tile extent is larger than 4096, by
scaling the clip buffer with the extent (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8705">#8705</a>)
(by <a
href="https://github.com/tordans"><code>@​tordans</code></a>)</li>
<li>Fix the globe drag rounding its rotation to single precision (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8784">#8784</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>load</code> and <code>idle</code> firing before the other
tiles finish loading when one tile fails (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8785">#8785</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Avoid using <code>.innerHTML = …</code> for the Popup close icon (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8795">#8795</a>)
(by <a href="https://github.com/k-yle"><code>@​k-yle</code></a>)</li>
<li>Fix a GeoJSON feature without coordinates staying out of the tiles
after <code>updateData</code> gives it some, by updating geojson-vt to
6.3.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8797">#8797</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>6.15.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Add <code>dragRotate: {around: 'pointer'}</code> to turn and tilt
the map around the point under the pointer, and <code>{around: 'center',
movement: 'circular' | 'linear'}</code>, which replaces the deprecated
<code>aroundCenter</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8628">#8628</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Redraw fewer layers on terrain when a custom layer's
<code>terrainTileRevision</code> or a feature state changes (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8782">#8782</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Support the <code>hash</code> option in a projection registered with
<code>addProjection</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8743">#8743</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Add experimental <code>addProjection</code>,
<code>removeProjection</code>, a built-in <code>identity</code>
projection and a <code>{bbox}</code> tile URL token for maps in a custom
planar CRS with its own quad tile grid (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/168">#168</a>,
<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/5764">#5764</a>)</li>
<li>Speed up tile loading by skipping point labels in the tile buffer,
which the neighbouring tile draws (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8535">#8535</a>)
(by <a
href="https://github.com/cherenkov"><code>@​cherenkov</code></a>)</li>
<li>Project GeoJSON sources on a map in a registered CRS, in the
workers, from a <code>definition</code> string and a projection handler
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8736">#8736</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Support OpenType <code>vert</code> forms in vertical labels rendered
with <code>font-faces</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8489">#8489</a>)
(by <a
href="https://github.com/NEKOYASAN"><code>@​NEKOYASAN</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix a map in a registered projection going blank when its center
crosses 180° (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8802">#8802</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix world projections like Equal Earth throwing and jumping when the
mouse is in the space around the world (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8803">#8803</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Work around a regression in Safari 26.6 and later where the map
stops loading tiles after the page was in the background (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8780">#8780</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu
mixing fonts or dropping letters when the style has a glyphs URL (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8741">#8741</a>)
(by <a
href="https://github.com/crackalamoo"><code>@​crackalamoo</code></a>)</li>
<li>Fix <code>setWorkerUrl</code> treating a <code>.cjs</code> fragment
or query marker as a module worker URL (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8769">#8769</a>)
(by <a
href="https://github.com/Anandb71"><code>@​Anandb71</code></a>)</li>
<li>Fix the terrain not finding a tile's own DEM data when the DEM
source's maxzoom is below the terrain tile zoom (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8765">#8765</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the camera dropping to sea level while the terrain under the
center of a <code>jumpTo</code>, <code>easeTo</code> or
<code>flyTo</code> loads (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8549">#8549</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix a grid of lines along tile borders in line layers of sliced
overzoomed tiles when the source tile extent is larger than 4096, by
scaling the clip buffer with the extent (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8705">#8705</a>)
(by <a
href="https://github.com/tordans"><code>@​tordans</code></a>)</li>
<li>Fix the globe drag rounding its rotation to single precision (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8784">#8784</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>load</code> and <code>idle</code> firing before the other
tiles finish loading when one tile fails (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8785">#8785</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Avoid using <code>.innerHTML = …</code> for the Popup close icon (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8795">#8795</a>)
(by <a href="https://github.com/k-yle"><code>@​k-yle</code></a>)</li>
<li>Fix a GeoJSON feature without coordinates staying out of the tiles
after <code>updateData</code> gives it some, by updating geojson-vt to
6.3.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8797">#8797</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/638b3f9ecab4b743fd4d086d3bfd19bce7b7b032"><code>638b3f9</code></a>
Bump js version to 6.15.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8812">#8812</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/ddf4cc611392d9489fa6edb2e464165e1c2d75eb"><code>ddf4cc6</code></a>
Fix registered projections going blank when the center crosses 180° (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8802">#8802</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/c8e4e34f9880d1d51a1a3ec8b54e67c694ccc173"><code>c8e4e34</code></a>
fix: world projections throwing and wrapping past their edge (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8803">#8803</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/7ec75354566c464df70cd67ae50cfaaa2f431b55"><code>7ec7535</code></a>
first step towards supporting trusted-types (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8795">#8795</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/fc1aa1cd7539ab50e4451d7175e30fa95f41ddf3"><code>fc1aa1c</code></a>
docs: separate a registered CRS from the tile grid its sources are cut
in (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8">#8</a>...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/1897306104320058fd0bb492691384f1c9e0b64c"><code>1897306</code></a>
feat: support dragRotate around pointer (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8628">#8628</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/17ad56d0e253ae4b6cbc4d6fab50009be2f26e2f"><code>17ad56d</code></a>
docs: show how custom layers place positions on a registered CRS (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8806">#8806</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/fe339621bb436ea8ce39373c43d337eec8376551"><code>fe33962</code></a>
fix: keep GeoJSON at the far pole of a polar projection off the map (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8798">#8798</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/17eb78b3b3dbf633ed01a73b3aeedd4fd46103ec"><code>17eb78b</code></a>
chore: bump <code>@​maplibre/geojson-vt</code> to 6.3.0 and pass its
coordinates and wrap o...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/6c2784f7adda6d138e8ef13ccc2acaf7825f3be8"><code>6c2784f</code></a>
refactor: rename CRSDefinition to CRS and its wkt to definition (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8787">#8787</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v6.14.0...v6.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.14.0&new-version=6.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-21 13:57:20 +00:00
dependabot[bot] 057a6a07d8 chore(deps): Bump i18next from 26.4.7 to 26.5.2 (#2256) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [i18next](https://github.com/i18next/i18next) from 26.4.7 to
26.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.5.2</h2>
<ul>
<li>fix(types): on TypeScript 7, a <code>t()</code> call with a missing,
misspelled or wrongly typed option now reports that option again
(<code>Property 'album' is missing</code>, <code>Type 'string' is not
assignable to type 'number'</code>), as TypeScript 5 and 6 do.
TypeScript 7 elaborated the error against the default-value signature
instead and ended in <code>'{ count: 3; albm: &quot;Summer&quot;; }' is
not assignable to type 'string'</code>: on a failed call TypeScript
explains the last of the equally matching signatures, and TypeScript 7
sorts the 3-element <code>[key, defaultValue, options?]</code> last. It
is now written as two signatures, <code>[key, defaultValue]</code> and
<code>[key, defaultValue, options]</code>. This affects the default key
checks with i18next <code>{{name}}</code> messages as well as
<code>parseInterpolation: 'icu'</code> and <code>'mf2'</code>. Which
calls compile, their return types and the error positions are unchanged
on TypeScript 5.9, 6 and 7.</li>
</ul>
<h2>v26.5.1</h2>
<ul>
<li>perf(types): type-checking <code>t()</code> calls against a large
namespace is no longer quadratic in the number of keys. TypeScript does
not cache <code>keyof</code> of an object type, and the types rebuilt
the union of all keys of a namespace once per key while building the key
union, and again in every <code>t()</code> call to look up the return
type. Both now use a cached key union, and a literal key is looked up
directly instead of being intersected with every key. With 5,000 keys in
one namespace and one call per key, the check time went from 14.8s to
1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return
types and errors are unchanged.</li>
<li>perf(types): the selector API (<code>enableSelector: true</code> /
<code>'strict'</code>) with <code>context</code> is no longer quadratic
in the size of an object. To decide which keys a context keeps, the
types scanned all keys of the object once for every key, also when
TypeScript checks the selector with <code>context</code> widened to
<code>string</code>. With 1,000 keys plus one context variant each, a
namespace took 18.7s and failed with &quot;Type instantiation is
excessively deep and possibly infinite&quot; (TS2589); 2,500 and more
ran out of memory. The context variants of an object are now collected
once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in
3.1s. Long keys (whole sentences with <code>keySeparator: false</code>)
work as before. Selected values and errors are unchanged.</li>
</ul>
<h2>v26.5.0</h2>
<ul>
<li>feat(types): <code>parseInterpolation: 'icu'</code> and
<code>parseInterpolation: 'mf2'</code> type <code>t()</code> options
from the message's ICU MessageFormat arguments (i18next-icu) or
MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer
need <code>parseInterpolation: false</code> and lose argument checking.
Missing, misspelled and wrongly typed arguments fail, and so does
leaving out the options for a message with arguments
(<code>t('greeting')</code>); that error names the missing arguments.
Opt-in, default <code>true</code> is unchanged.
<ul>
<li>ICU: <code>{name}</code> takes <code>string | number</code>,
<code>{n, number}</code>, <code>plural</code> and
<code>selectordinal</code> take <code>number</code>, <code>{d,
date}</code> and <code>{t, time}</code> take <code>Date</code>,
<code>select</code> takes its case keys or any string (for
<code>other</code>), and arguments nested in cases are required too.
<code>#</code> and tags are not arguments, apostrophe quoting is read
like intl-messageformat does.</li>
<li>MF2: <code>{$name}</code> takes <code>string | number</code>, a
variable annotated with <code>:number</code>, <code>:integer</code>,
<code>:currency</code>, <code>:percent</code> or <code>:unit</code>
(inline or through <code>.input</code> / <code>.local</code>) takes
<code>number</code>, <code>:datetime</code>, <code>:date</code> and
<code>:time</code> take <code>Date</code>, <code>:string</code> takes
<code>string</code>, option and markup variables
(<code>minimumFractionDigits=$digits</code>, <code>{#link
href=$url}</code>) are required too, <code>.local</code> variables are
not arguments, and <code>|quoted literals|</code> and <code>\{</code>
escapes are skipped.</li>
<li><code>interpolationFormatTypeMap</code> overrides a type by ICU
format or MF2 function name, e.g. <code>date: Date | number</code> or a
custom <code>uppercase: string</code>.</li>
<li>Applies to <code>t()</code>, <code>getFixedT()</code>,
<code>i18n.t</code>, key prefixes, namespaces, the selector API and
react-i18next's <code>Trans</code> <code>values</code>. Messages need
literal types, as the resources file from i18next-cli's
<code>types</code> command has them.</li>
<li>Type-check cost with 1,000 messages and one call each: 1.35s instead
of 0.86s with <code>false</code> (TypeScript 6), 0.5s instead of 0.26s
with TypeScript 7. Messages that no call uses cost nothing.</li>
</ul>
</li>
<li>fix(types): with the default (non-strict) key checks, an options
object with a missing or misspelled interpolation variable now reports
the missing variable (<code>Property 'name' is missing</code>) instead
of <code>'{ nmae: string }' is not assignable to type 'string'</code>
from the default-value overload.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.5.2</h2>
<ul>
<li>fix(types): on TypeScript 7, a <code>t()</code> call with a missing,
misspelled or wrongly typed option now reports that option again
(<code>Property 'album' is missing</code>, <code>Type 'string' is not
assignable to type 'number'</code>), as TypeScript 5 and 6 do.
TypeScript 7 elaborated the error against the default-value signature
instead and ended in <code>'{ count: 3; albm: &quot;Summer&quot;; }' is
not assignable to type 'string'</code>: on a failed call TypeScript
explains the last of the equally matching signatures, and TypeScript 7
sorts the 3-element <code>[key, defaultValue, options?]</code> last. It
is now written as two signatures, <code>[key, defaultValue]</code> and
<code>[key, defaultValue, options]</code>. This affects the default key
checks with i18next <code>{{name}}</code> messages as well as
<code>parseInterpolation: 'icu'</code> and <code>'mf2'</code>. Which
calls compile, their return types and the error positions are unchanged
on TypeScript 5.9, 6 and 7.</li>
</ul>
<h2>26.5.1</h2>
<ul>
<li>perf(types): type-checking <code>t()</code> calls against a large
namespace is no longer quadratic in the number of keys. TypeScript does
not cache <code>keyof</code> of an object type, and the types rebuilt
the union of all keys of a namespace once per key while building the key
union, and again in every <code>t()</code> call to look up the return
type. Both now use a cached key union, and a literal key is looked up
directly instead of being intersected with every key. With 5,000 keys in
one namespace and one call per key, the check time went from 14.8s to
1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return
types and errors are unchanged.</li>
<li>perf(types): the selector API (<code>enableSelector: true</code> /
<code>'strict'</code>) with <code>context</code> is no longer quadratic
in the size of an object. To decide which keys a context keeps, the
types scanned all keys of the object once for every key, also when
TypeScript checks the selector with <code>context</code> widened to
<code>string</code>. With 1,000 keys plus one context variant each, a
namespace took 18.7s and failed with &quot;Type instantiation is
excessively deep and possibly infinite&quot; (TS2589); 2,500 and more
ran out of memory. The context variants of an object are now collected
once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in
3.1s. Long keys (whole sentences with <code>keySeparator: false</code>)
work as before. Selected values and errors are unchanged.</li>
</ul>
<h2>26.5.0</h2>
<ul>
<li>feat(types): <code>parseInterpolation: 'icu'</code> and
<code>parseInterpolation: 'mf2'</code> type <code>t()</code> options
from the message's ICU MessageFormat arguments (i18next-icu) or
MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer
need <code>parseInterpolation: false</code> and lose argument checking.
Missing, misspelled and wrongly typed arguments fail, and so does
leaving out the options for a message with arguments
(<code>t('greeting')</code>); that error names the missing arguments.
Opt-in, default <code>true</code> is unchanged.
<ul>
<li>ICU: <code>{name}</code> takes <code>string | number</code>,
<code>{n, number}</code>, <code>plural</code> and
<code>selectordinal</code> take <code>number</code>, <code>{d,
date}</code> and <code>{t, time}</code> take <code>Date</code>,
<code>select</code> takes its case keys or any string (for
<code>other</code>), and arguments nested in cases are required too.
<code>#</code> and tags are not arguments, apostrophe quoting is read
like intl-messageformat does.</li>
<li>MF2: <code>{$name}</code> takes <code>string | number</code>, a
variable annotated with <code>:number</code>, <code>:integer</code>,
<code>:currency</code>, <code>:percent</code> or <code>:unit</code>
(inline or through <code>.input</code> / <code>.local</code>) takes
<code>number</code>, <code>:datetime</code>, <code>:date</code> and
<code>:time</code> take <code>Date</code>, <code>:string</code> takes
<code>string</code>, option and markup variables
(<code>minimumFractionDigits=$digits</code>, <code>{#link
href=$url}</code>) are required too, <code>.local</code> variables are
not arguments, and <code>|quoted literals|</code> and <code>\{</code>
escapes are skipped.</li>
<li><code>interpolationFormatTypeMap</code> overrides a type by ICU
format or MF2 function name, e.g. <code>date: Date | number</code> or a
custom <code>uppercase: string</code>.</li>
<li>Applies to <code>t()</code>, <code>getFixedT()</code>,
<code>i18n.t</code>, key prefixes, namespaces, the selector API and
react-i18next's <code>Trans</code> <code>values</code>. Messages need
literal types, as the resources file from i18next-cli's
<code>types</code> command has them.</li>
<li>Type-check cost with 1,000 messages and one call each: 1.35s instead
of 0.86s with <code>false</code> (TypeScript 6), 0.5s instead of 0.26s
with TypeScript 7. Messages that no call uses cost nothing.</li>
</ul>
</li>
<li>fix(types): with the default (non-strict) key checks, an options
object with a missing or misspelled interpolation variable now reports
the missing variable (<code>Property 'name' is missing</code>) instead
of <code>'{ nmae: string }' is not assignable to type 'string'</code>
from the default-value overload.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/c46ea5c301c049d17e47412b1b64a94b54c1bb97"><code>c46ea5c</code></a>
26.5.2</li>
<li><a
href="https://github.com/i18next/i18next/commit/d798f0e703d49770f4016deb483945eecd3e59f3"><code>d798f0e</code></a>
fix(types): report the wrong t() option on TypeScript 7</li>
<li><a
href="https://github.com/i18next/i18next/commit/dabd9f60d849d66936baca4adbca7e349f459069"><code>dabd9f6</code></a>
26.5.1</li>
<li><a
href="https://github.com/i18next/i18next/commit/01c3852d941d2dad503ff477755e0c489f3d75ee"><code>01c3852</code></a>
perf(types): no quadratic type-check time for large namespaces</li>
<li><a
href="https://github.com/i18next/i18next/commit/64b9da8bfd6d1e2a58eef23ed885b5ab60a412f1"><code>64b9da8</code></a>
26.5.0</li>
<li><a
href="https://github.com/i18next/i18next/commit/2468227c924204a6fafcf78ff615d7a232e9a07a"><code>2468227</code></a>
feat(types): parseInterpolation 'icu' and 'mf2' type t() options from
ICU arg...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.4.7...v26.5.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.7&new-version=26.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-21 13:55:11 +00:00
dependabot[bot] ccfe624ac6 chore(deps-dev): Bump i18next-cli from 1.75.3 to 1.77.0 (#2254) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.75.3
to 1.77.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.77.0</h2>
<ul>
<li>feat(types): with <code>extract.messageFormat: 'icu'</code> or
<code>'mf2'</code>, a newly generated <code>i18next.d.ts</code> sets
<code>parseInterpolation: 'icu'</code> or <code>'mf2'</code> when the
project's i18next is 26.5.0 or later, so <code>t()</code> options are
type-checked
against the arguments of each message. With i18next 26.2.0 to 26.4.x it
still sets <code>parseInterpolation: false</code>. The
version is read from <code>node_modules/i18next/package.json</code>,
from the working directory upwards (hoisted monorepo
installs count); without an installed i18next it stays
<code>false</code>. The warning for an existing
<code>i18next.d.ts</code> without
<code>parseInterpolation</code> suggests the value for your i18next
version, and an existing file that still sets <code>false</code>
although your i18next supports the typed value gets a hint.</li>
<li>docs(skill): the ICU and MF2 reference describes
<code>parseInterpolation: 'icu'</code> / <code>'mf2'</code>.</li>
</ul>
<h2>1.76.0</h2>
<ul>
<li>feat: new <code>extract.messageFormat</code> option,
<code>'i18next'</code> (default), <code>'icu'</code> (<a
href="https://github.com/i18next/i18next-icu">i18next-icu</a>)
or <code>'mf2'</code> (<a
href="https://github.com/i18next/i18next-mf2">i18next-mf2</a>), for the
syntax of your translation values.</li>
<li>feat(extract): with <code>messageFormat: 'icu'</code> or
<code>'mf2'</code>, <code>extract</code> writes one key per message.
<code>t('photos', '{count, plural, ...}', { count })</code> gave
<code>photos_one</code> and <code>photos_other</code> (plus
<code>_few</code> and <code>_many</code> for languages like Polish),
keys i18next-icu and i18next-mf2 never read, and <code>context</code>
gave <code>_male</code> keys; now it gives <code>photos</code>.
<code>$t()</code> in a value
is no longer read as nesting, and the children of
<code>&lt;Trans&gt;</code> are written with <code>{name}</code> (ICU) or
<code>{$name}</code> (MF2)
instead of <code>{{name}}</code>, which ICU and MF2 rendered as
text.</li>
<li>feat(extract): <code>IcuTrans</code> and
<code>IcuTransWithoutContext</code> are extracted, also when imported
under another name (key from
<code>i18nKey</code>, or <code>defaultTranslation</code> when there is
none), and so are the <code>Trans</code>, <code>Plural</code>,
<code>Select</code> and <code>SelectOrdinal</code>
components of <code>react-i18next/icu.macro</code>, with the message the
macro builds (<code>&lt;Trans&gt;Welcome,
&lt;strong&gt;{name}&lt;/strong&gt;!&lt;/Trans&gt;</code> gives
<code>Welcome, &lt;0&gt;{name}&lt;/0&gt;!</code>). Before,
<code>IcuTrans</code> was
not extracted, and the macro <code>&lt;Trans&gt;</code> was read as
react-i18next <code>Trans</code> and written as
<code>Welcome, &lt;strong&gt;{{name}}&lt;/strong&gt;!</code>, which the
compiled <code>IcuTrans</code> rendered as text.</li>
<li>feat(status): with <code>messageFormat: 'icu'</code> or
<code>'mf2'</code>, a plural or select message counts as one key, so
<code>status</code> no
longer reports missing <code>_few</code> and <code>_many</code>
keys.</li>
<li>feat(instrument): with <code>messageFormat: 'icu'</code> or
<code>'mf2'</code>, <code>instrument</code> writes <code>{name}</code> /
<code>{$name}</code> placeholders, a
<code>count === 1 ? … : …</code> ternary becomes one plural message
instead of <code>defaultValue_one</code> /
<code>defaultValue_other</code>, and
the i18n init file it creates registers <code>i18next-icu</code> (with
<code>intl-messageformat</code> in the install hint) or
<code>i18next-mf2</code>.</li>
<li>feat(extract, instrument): with <code>messageFormat: 'icu'</code> or
<code>'mf2'</code>, the text around converted placeholders
(<code>Trans</code> values, <code>instrument</code>) is
escaped: <code>File '{{name}}' not found</code> becomes <code>File
''{name}' not found</code>, because an apostrophe before <code>{</code>
starts quoted
text in ICU and <code>'{name}'</code> would render as the text
<code>{name}</code>; literal braces are quoted (ICU) or escaped
(MF2).</li>
<li>feat(lint): with <code>messageFormat: 'icu'</code> or
<code>'mf2'</code>, <code>lint</code> parses every value in the
translation files of all
locales and reports, with file, key and line (JSON files):
<ul>
<li>syntax errors with the parser's message (<code>greeting: ICU syntax
error: EXPECT_ARGUMENT_CLOSING_BRACE at column 7</code>),
with a hint when the value contains i18next's <code>{{</code></li>
<li>argument names that differ from the primary language, so a renamed
or missing <code>{name}</code> is caught (<code>#</code> is not an
argument)</li>
<li>plural categories that do not fit the locale, for
<code>plural</code> and <code>selectordinal</code> (MF2:
<code>.match</code> on <code>:number</code> or
<code>:integer</code>). Allowed are the locale's CLDR categories,
required are <code>other</code> plus every category a whole number from
0 to 1000 selects: <code>ru</code> needs <code>one</code>,
<code>few</code> and <code>many</code>, while <code>fr</code>,
<code>es</code>, <code>it</code> and <code>pt</code> may leave out
<code>many</code> (only from
1,000,000) and <code>cs</code> its <code>many</code> (fractions only),
and <code>zero</code> in <code>en</code> is reported as never used.
Exact selectors like
<code>=0</code> are allowed and count for a category when they cover
every whole number it is used for (<code>=1</code> covers
<code>one</code> in
<code>en</code>, not in <code>ru</code>, where <code>one</code> is also
21, 31, ...). For a locale <code>Intl</code> does not know only
<code>other</code> is required.</li>
</ul>
</li>
<li>fix(lint): with <code>messageFormat: 'icu'</code> or
<code>'mf2'</code>, the <code>t()</code> interpolation check reads the
arguments with the same
parser. ICU braces like <code>male {{name}}</code> are no longer taken
for <code>{{name}}</code> interpolation (which reported the
<code>gender</code>
passed to a select as unused), and <code>t('greeting', 'Hello {name}', {
nmae })</code> is reported.</li>
<li>feat(types): with <code>messageFormat: 'icu'</code> or
<code>'mf2'</code>, a newly generated <code>i18next.d.ts</code> sets
<code>parseInterpolation: false</code>
(i18next 26.2.0+), so ICU and MF2 plurals no longer break the type-safe
<code>t</code>. For an existing file without it, <code>types</code>
prints a warning.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/933364ee283b2b6a805ad1ae8c936a01a2de2dae"><code>933364e</code></a>
1.77.0</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/2916f1b31425dcffffc9b2e6abc8436341f36473"><code>2916f1b</code></a>
update i18next deps</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/b7d07e784e4832a0e452afaf4640755461569638"><code>b7d07e7</code></a>
feat(types): write parseInterpolation 'icu' / 'mf2' for i18next 26.5.0
or later</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/71194cce275ba105f399e7d8aa01c7f58d76bdde"><code>71194cc</code></a>
test(lint): platform paths in the ICU/MF2 lint tests, so they pass on
Windows</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/1ea83288d0a247a28cbf87a36f3a516ee7ba4396"><code>1ea8328</code></a>
1.76.0</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/faa93a34705f0ae0cda8866e5e08943ef7579c86"><code>faa93a3</code></a>
fix(extract, instrument): escape ICU/MF2 text, register the plugin in
the ini...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/a87f01fcb4836935afb840629c9b63f73d7a4839"><code>a87f01f</code></a>
feat(extract, status, instrument): one key per ICU/MF2 message, IcuTrans
and ...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/e9b1f5642a95a638ff60a2194c0b039d633a1f66"><code>e9b1f56</code></a>
feat(lint, types): ICU and MF2 support with the new
extract.messageFormat option</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/6d2202d02dbb962c454ee496b12ac865d0027dba"><code>6d2202d</code></a>
README: add Awesome Claude Code badge next to the skill install
badge</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.75.3...v1.77.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.75.3&new-version=1.77.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-21 13:54:07 +00:00
dependabot[bot] b1ffd828ea chore(deps): Bump react-i18next from 17.0.21 to 17.1.0 in the react group (#2253) 
Bumps the react group with 1 update:
[react-i18next](https://github.com/i18next/react-i18next).

Updates `react-i18next` from 17.0.21 to 17.1.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.1.0</h2>
<ul>
<li>feat(types): with i18next's new <code>parseInterpolation:
'icu'</code> (or <code>'mf2'</code>) type option (i18next v26.5.0), the
<code>values</code> of <code>IcuTrans</code> and
<code>IcuTransWithoutContext</code> are typed from the message of
<code>i18nKey</code>, like the options of <code>t()</code>: a misspelled
argument, a value of the wrong type or a value meant for another key is
a type error. <code>values</code> was <code>Record&lt;string,
any&gt;</code> before, and still is with any other
<code>parseInterpolation</code> setting. <code>values</code> stays
optional, as on <code>Trans</code>. <code>useTranslation</code>'s
<code>t</code> and <code>Trans</code> <code>values</code> get the checks
from i18next's types without changes here.</li>
<li>fix(types): <code>IcuTrans</code> and
<code>IcuTransWithoutContext</code> now infer the literal
<code>i18nKey</code> (<code>const</code> type parameter, as
<code>Trans</code> does), so props that depend on the key are checked
against that key instead of all keys of the namespace.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/d3b12369660975aa73e8c2648de5e7cfa4fcbc57"><code>d3b1236</code></a>
17.1.0</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/efed87d91449ad3cfcbdfd0d9ec3b24ff19691fb"><code>efed87d</code></a>
chore: i18next ^26.5.0 for the parseInterpolation 'icu' / 'mf2' type
tests</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/6300ae2e5860c00e34c8157ec4203c99204fefeb"><code>6300ae2</code></a>
feat(types): IcuTrans values typed from the message under
parseInterpolation ...</li>
<li>See full diff in <a
href="https://github.com/i18next/react-i18next/compare/v17.0.21...v17.1.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.21&new-version=17.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-21 13:52:39 +00:00
dependabot[bot] 37d8a9fa1d chore(deps-dev): Bump eslint from 10.12.0 to 10.13.0 (#2252) 
Bumps [eslint](https://github.com/eslint/eslint) from 10.12.0 to
10.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.13.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/48d5cc47e43478670ccf95a74f7a73e8408152b5"><code>48d5cc4</code></a>
feat: report references inside IIFEs in
<code>no-use-before-define</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21238">#21238</a>)
(Irfan fandi)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a39d9fb1fdb5db546f6407580cac531ba3370450"><code>a39d9fb</code></a>
feat: add <code>globalThis</code> to <code>no-obj-calls</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21382">#21382</a>)
(synthex-byte)</li>
<li><a
href="https://github.com/eslint/eslint/commit/66ac58383e076940c11a5d7213ad079028d1140e"><code>66ac583</code></a>
feat: check <code>yield*</code> expressions in
<code>no-unsafe-optional-chaining</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21399">#21399</a>)
(xbinaryx)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/87bd2cef7b2309739c29598fb2be335f4bed71a3"><code>87bd2ce</code></a>
fix: avoid redeclared <code>let</code> when <code>no-var</code> and
<code>one-var</code> fix together (<a
href="https://redirect.github.com/eslint/eslint/issues/21389">#21389</a>)
(Daniel Pinto)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4783a6806fb73ea4843ac46c6ae3d8285f56c288"><code>4783a68</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/43f0ac90e7858a834a0e68309e6397fb4cfa72dd"><code>43f0ac9</code></a>
docs: clarify parameter description in <code>getText</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21287">#21287</a>)
(lumir)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b59d889c7c18d8c73144e6ba46e9e7f3e7da0196"><code>b59d889</code></a>
chore: update github/codeql-action action to v4.38.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/21412">#21412</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/95e51a0518b15015304eca9844b3f64c1fc167ca"><code>95e51a0</code></a>
ci: re-enable <code>@typescript-eslint/typescript-eslint</code> in
ecosystem tests (<a
href="https://redirect.github.com/eslint/eslint/issues/21410">#21410</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/317fcb365f19e912a60d171a9d5a8d1f16fe4660"><code>317fcb3</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21409">#21409</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b92decf8ead7cc4082a18a4a0ab28f3c7c589887"><code>b92decf</code></a>
perf: skip no-redeclare scan for single-declaration variables (<a
href="https://redirect.github.com/eslint/eslint/issues/21365">#21365</a>)
(James Ross)</li>
<li><a
href="https://github.com/eslint/eslint/commit/47b7063b3f3f7bc7a5bcb87c082577e4e8b96e24"><code>47b7063</code></a>
chore: update dependency <code>@​eslint/json</code> to ^2.1.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/21398">#21398</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/e5aea414cc00555ecd43f6e608bf80e0f9a6d4d6"><code>e5aea41</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21390">#21390</a>)
(ESLint Bot)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4637f9827a1ba137498eaee70957850621082815"><code>4637f98</code></a>
10.13.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/96df05ceb7000813859acf16a690f8a8bbbea904"><code>96df05c</code></a>
Build: changelog update for 10.13.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/4783a6806fb73ea4843ac46c6ae3d8285f56c288"><code>4783a68</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/b59d889c7c18d8c73144e6ba46e9e7f3e7da0196"><code>b59d889</code></a>
chore: update github/codeql-action action to v4.38.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/21412">#21412</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/95e51a0518b15015304eca9844b3f64c1fc167ca"><code>95e51a0</code></a>
ci: re-enable <code>@typescript-eslint/typescript-eslint</code> in
ecosystem tests (<a
href="https://redirect.github.com/eslint/eslint/issues/21410">#21410</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/317fcb365f19e912a60d171a9d5a8d1f16fe4660"><code>317fcb3</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21409">#21409</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/48d5cc47e43478670ccf95a74f7a73e8408152b5"><code>48d5cc4</code></a>
feat: report references inside IIFEs in
<code>no-use-before-define</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21238">#21238</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/43f0ac90e7858a834a0e68309e6397fb4cfa72dd"><code>43f0ac9</code></a>
docs: clarify parameter description in <code>getText</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21287">#21287</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a39d9fb1fdb5db546f6407580cac531ba3370450"><code>a39d9fb</code></a>
feat: add <code>globalThis</code> to <code>no-obj-calls</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21382">#21382</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b92decf8ead7cc4082a18a4a0ab28f3c7c589887"><code>b92decf</code></a>
perf: skip no-redeclare scan for single-declaration variables (<a
href="https://redirect.github.com/eslint/eslint/issues/21365">#21365</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.12.0...v10.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=10.12.0&new-version=10.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-20 17:23:01 +00:00
dependabot[bot] 52eaba41e0 chore(deps): Bump react-i18next from 17.0.19 to 17.0.21 in the react group (#2251) 
Bumps the react group with 1 update:
[react-i18next](https://github.com/i18next/react-i18next).

Updates `react-i18next` from 17.0.19 to 17.0.21
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.21</h2>
<ul>
<li>fix(IcuTrans): explicit <code>values</code> now win over
<code>interpolation.defaultVariables</code>, as they do in
<code>t()</code>. <code>IcuTrans</code> merged them the other way round,
so <code>&lt;IcuTrans values={{ user: 'John Doe' }} /&gt;</code>
rendered the configured default variable <code>user</code> instead of
<code>John Doe</code>. <code>Trans</code> had the same inverted merge
and is fixed too. Compatibility note: only names that are set both in
<code>values</code> and in <code>defaultVariables</code> render
differently.</li>
<li>feat: new entry point
<code>react-i18next/IcuTransWithoutContext</code> (with types) for React
Server Components. Importing <code>IcuTransWithoutContext</code> from
<code>react-i18next</code> in a Server Component could fail the build
with <code>createContext is not a function</code>, because the main
entry creates the React context when it is loaded. Like
<code>react-i18next/TransWithoutContext</code>, the new entry point does
not.</li>
<li>fix(build): the ESM build's <code>dist/es/package.json</code> now
declares <code>&quot;sideEffects&quot;: false</code>, like the root
<code>package.json</code> already did. Bundlers use the nearest
<code>package.json</code>, so the ESM build counted as having side
effects and unused exports were kept: an app that only uses
<code>Trans</code> still bundled <code>IcuTrans</code> with its HTML
entity decoder, <code>useTranslation</code> and
<code>use-sync-external-store</code>. With esbuild, a
<code>Trans</code>-only bundle (React and i18next external) goes from
20.9 KB to 11.6 KB minified, 8.3 KB to 5.0 KB gzipped.</li>
<li>docs: the <code>icu.macro</code> Babel macro is now marked as
deprecated in favour of using <code>IcuTrans</code> directly. It fails
on Babel 8 (<code>t.jSXIdentifier is not a function</code>),
<code>&lt;Plural count={count}&gt;</code> renders the raw ICU message,
and a React <code>key</code> on
<code>&lt;Plural&gt;</code>/<code>&lt;Select&gt;</code> becomes an ICU
case. It keeps working on Babel 7 and is not removed. The
<code>IcuTrans</code> docs page has a corrected example and props table
and covers Server Components.</li>
</ul>
<h2>17.0.20</h2>
<ul>
<li>fix: <code>useTranslation</code> no longer suspends when a missing
namespace is loaded by a synchronous backend. With
<code>useSuspense</code> (the default), a namespace that wasn't in the
store yet always made the component throw the loading promise, even when
the backend had already delivered the resources while that promise was
being created. React then showed the <code>Suspense</code> fallback and
rendered again right away, which appears as a fallback flash (a white
flash in React Native) and costs performance. The hook now starts the
load first, checks the store again and only suspends if the namespace is
still missing. This helps every backend that calls back synchronously,
for example <code>i18next-resources-to-backend</code> with a static
resources object or a loader that returns the data directly. Async
backends, and an instance that isn't initialized yet, still suspend as
before. Thanks <a
href="https://github.com/oblador"><code>@​oblador</code></a> (<a
href="https://redirect.github.com/i18next/react-i18next/pull/1937">#1937</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/64a3d1360fd0bf2f49652c09881be04a5e22082f"><code>64a3d13</code></a>
17.0.21</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/c7e1c80f066abb68dc1399e3a069e0a5b7dddaa8"><code>c7e1c80</code></a>
fix(IcuTrans): explicit values win over defaultVariables, RSC entry
point, ES...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/66dbfbab1c5430a99a7d9badc308f59fa3931678"><code>66dbfba</code></a>
17.0.20</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/806df1ee326534bd1656fcc88239321f70c9c65f"><code>806df1e</code></a>
build, changelog for 17.0.20</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/49ec36d359236d3f5f7298b9da355754eb1fb719"><code>49ec36d</code></a>
fix(useTranslation): don't suspend synchronous backends (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1937">#1937</a>)</li>
<li>See full diff in <a
href="https://github.com/i18next/react-i18next/compare/v17.0.19...v17.0.21">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.19&new-version=17.0.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-20 17:08:36 +00:00
dependabot[bot] f3935fd2d6 chore(deps): Bump the react group across 1 directory with 3 updates (#2245) 
Bumps the react group with 3 updates in the / directory:
[react](https://github.com/react/react/tree/HEAD/packages/react),
[react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom)
and [react-i18next](https://github.com/i18next/react-i18next).

Updates `react` from 19.3.0 to 19.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react's
releases</a>.</em></p>
<blockquote>
<h2>19.3.1 (October 14th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Improve transport protocol (<a
href="https://redirect.github.com/facebook/react/pull/37845">#37845</a>
by <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> and
<a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/61aa00df822d0eb76d0362eb8b6fdd3527693efe"><code>61aa00d</code></a>
[19.3.x][Flight] Improve transport protocol (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/37845">#37845</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.3.1/packages/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-dom` from 19.3.0 to 19.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react-dom's
releases</a>.</em></p>
<blockquote>
<h2>19.3.1 (October 14th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Improve transport protocol (<a
href="https://redirect.github.com/facebook/react/pull/37845">#37845</a>
by <a
href="https://github.com/unstubbable"><code>@​unstubbable</code></a> and
<a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/61aa00df822d0eb76d0362eb8b6fdd3527693efe"><code>61aa00d</code></a>
[19.3.x][Flight] Improve transport protocol (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37845">#37845</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.3.1/packages/react-dom">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-i18next` from 17.0.16 to 17.0.19
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.19</h2>
<ul>
<li>fix: <code>useTranslation</code> with an inline selector
<code>keyPrefix</code> (<code>useTranslation('ns', { keyPrefix: ($)
=&gt; $.role })</code>) returned a new <code>t</code> on every render,
so every effect, <code>useCallback</code> and <code>useMemo</code>
depending on <code>t</code> ran again each time. The cached
<code>t</code> was compared against the <code>keyPrefix</code> function
itself, and an inline arrow is a new function on every render. It is now
compared against the key the selector resolves to (with the same options
and namespace list <code>getFixedT</code> resolves it with), so
<code>t</code> keeps its identity as long as the resolved prefix does,
just like a string <code>keyPrefix</code>. A selector that resolves to a
different key still gets a new <code>t</code>, and i18next still
resolves the selector on each <code>t</code> call as before. Fixes <a
href="https://redirect.github.com/i18next/react-i18next/issues/1936">#1936</a>.</li>
<li>fix: <code>useTranslation</code> kept returning the previous
<code>t</code> when only the namespace (<code>useTranslation('a')</code>
→ <code>useTranslation('b')</code>) or only the i18n instance (another
instance with the same language, via props or
<code>I18nextProvider</code>) changed on a mounted component. That
<code>t</code> kept resolving against the old namespace or instance
until something else (the language, the ready state, a bound i18n event)
produced a new one. Both are now part of the check that decides whether
the cached <code>t</code> can be reused.</li>
</ul>
<h2>17.0.18</h2>
<ul>
<li>fix(Trans): with <code>shouldUnescape</code>, the default
<code>unescape</code> now turns <code>&amp;nbsp;</code> and
<code>&amp;[#160](https://github.com/i18next/react-i18next/issues/160);</code>
into a no-break space (U+00A0) instead of a regular space (U+0020). The
regular space dropped what the entity is for:
<code>u&amp;nbsp;nás</code> or <code>10&amp;nbsp;km</code> could wrap
across lines, and consecutive <code>&amp;nbsp;</code>s collapsed into
one space. This also matches <code>IcuTrans</code>, whose entity decoder
already mapped <code>&amp;nbsp;</code> to U+00A0. Compatibility note:
only affects <code>shouldUnescape</code>; snapshots or exact
<code>textContent</code> comparisons of such text now contain U+00A0
(Testing Library's default normalizer still matches it as a space). A
custom <code>react.unescape</code> function can restore the old mapping
for text nodes. Thanks <a
href="https://github.com/lprnmns"><code>@​lprnmns</code></a> (<a
href="https://redirect.github.com/i18next/react-i18next/pull/1935">#1935</a>).</li>
</ul>
<h2>17.0.17</h2>
<ul>
<li>perf: <code>useTranslation</code> no longer unsubscribes and
resubscribes its i18n listeners on every render. The
<code>subscribe</code> callback handed to
<code>useSyncExternalStore</code> depended on the merged options object,
which is rebuilt whenever <code>props</code> is a new object: with no
options (the <code>{}</code> default), with options passed inline
(<code>useTranslation('ns', { keyPrefix })</code>), and through
<code>withTranslation</code> and <code>&lt;Translation&gt;</code>. A new
<code>subscribe</code> makes React resubscribe, so each render of each
caller ran <code>i18n.off</code> and <code>i18n.on</code> in an extra
effect. It now depends only on the instance and the
<code>bindI18n</code>/<code>bindI18nStore</code> event names. No updates
were ever missed, because React re-checks the snapshot after
resubscribing; this only removes the churn, which adds up with many
mounted components that re-render often. Reported via <a
href="https://redirect.github.com/i18next/next-i18next/issues/2349">next-i18next#2349</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/d576d09cbebb9e2fc7a52a4cd6fe80793459cdfb"><code>d576d09</code></a>
17.0.19</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/d69464b4c4346309c530c9c5777191954f9842f0"><code>d69464b</code></a>
build</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/36e327ac48e5095d0313f8b3a39151e5ad3fc32f"><code>36e327a</code></a>
fix(useTranslation): keep t stable for an inline selector keyPrefix</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/f17e70812944aa767482799cfbbaaf4a3d6a5d72"><code>f17e708</code></a>
17.0.18</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/b799c190f66472e9c518d5a758a42302f8f12cea"><code>b799c19</code></a>
build, changelog for 17.0.18</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/7a55f5620d0ea0be0b3ab0269a605fd343519e92"><code>7a55f56</code></a>
fix: unescape   and &amp;<a
href="https://redirect.github.com/i18next/react-i18next/issues/160">#160</a>;
to a no-break space (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1935">#1935</a>)</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/511e1f24ccb152bad43b592b147310614252bff0"><code>511e1f2</code></a>
17.0.17</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/699eae31bec8379ccdbd68060d921b6f9ada7605"><code>699eae3</code></a>
build</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/5a88fe6090fc2f14aac97bb6dfcc7c89094aee28"><code>5a88fe6</code></a>
perf(useTranslation): stop resubscribing the i18n listeners on every
render</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/c4ee2c94ef8450499c46c5007c775de96f7528d3"><code>c4ee2c9</code></a>
build</li>
<li>See full diff in <a
href="https://github.com/i18next/react-i18next/compare/v17.0.16...v17.0.19">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 14:09:36 +00:00
dependabot[bot] 4325a33462 chore(deps): Bump the codeql-action group with 3 updates (#2250) 
Bumps the codeql-action group with 3 updates:
[github/codeql-action/init](https://github.com/github/codeql-action),
[github/codeql-action/autobuild](https://github.com/github/codeql-action)
and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `github/codeql-action/init` from 4.38.3 to 4.39.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a>
from github/update-v4.39.0-d63383a73</li>
<li><a
href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a>
Update changelog for v4.39.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a>
from github/mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a>
Rename <code>path</code> to <code>result</code> in tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a>
from github/mario-campos/automate-changenotes-assemble</li>
<li><a
href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a>
from github/mbg/add-missing-changenotes</li>
<li><a
href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/autobuild` from 4.38.3 to 4.39.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a>
from github/update-v4.39.0-d63383a73</li>
<li><a
href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a>
Update changelog for v4.39.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a>
from github/mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a>
Rename <code>path</code> to <code>result</code> in tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a>
from github/mario-campos/automate-changenotes-assemble</li>
<li><a
href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a>
from github/mbg/add-missing-changenotes</li>
<li><a
href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.39.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.39.0 - 15 Oct 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
<li>The <code>codeql-action/analyze</code> step now validates that a
correct argument for the <code>checkout_path</code> input has been
provided. The <code>checkout_path</code> input must be set to the path
where the repository that is being analyzed is checked out at on the
runner, if that path is something other than the workspace root. If the
path does not point to a repository checkout or is different from the
path that was used by <code>codeql-action/init</code>, then the CodeQL
Action now produces a warning. <a
href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li>
<li>Resolved an issue with third-party caching implementations that
prevented caches from being restored correctly. <a
href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li>
<li>The <code>codeql-action/start-proxy</code> step that is used in Code
Scanning Default Setup now finds CodeQL releases using the same logic as
<code>codeql-action/init</code>. This primarily benefits customers who
are using GitHub instances other than <code>github.com</code> where the
<code>codeql-action/start-proxy</code> step may previously have been
unable to locate recent releases and ended up using outdated versions of
the private registry authentication proxy as a result. <a
href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a>
from github/update-v4.39.0-d63383a73</li>
<li><a
href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a>
Trigger workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a>
Update changelog for v4.39.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a>
from github/mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a>
Rename <code>path</code> to <code>result</code> in tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/start-proxy/report-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a>
from github/mario-campos/automate-changenotes-assemble</li>
<li><a
href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a>
from github/mbg/add-missing-changenotes</li>
<li><a
href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a>
Add change note for <a
href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:57:39 +00:00
dependabot[bot] d5755ea60b chore(deps): Bump i18next from 26.4.4 to 26.4.7 (#2248) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.4.4 to
26.4.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.4.7</h2>
<ul>
<li>perf: <code>cloneInstance()</code> no longer inherits
<code>preload</code>. <code>loadResources()</code> adds every
<code>preload</code> language to each load, and clones copied
<code>preload</code> from the parent, so a clone's <code>init()</code>
and every <code>changeLanguage()</code> walked all preloaded languages ×
all namespaces through <code>queueLoad()</code> /
<code>hasResourceBundle()</code>, although the parent had already loaded
them into the shared store. With i18next-http-middleware (one clone +
<code>changeLanguage()</code> per request), 25 preloaded languages and
20 namespaces, that was most of the per-request CPU: the reproduction
from the issue went from ~90 µs to ~10 µs per request, the same as with
a single language. A clone now only loads what it uses itself: its
<code>changeLanguage()</code> no longer waits for parent preload
languages that are still loading (the parent's own <code>init()</code>
still does), and <code>clone.loadNamespaces()</code> loads the new
namespace for the clone's language and fallbacks instead of every
preloaded language. <code>clone.loadLanguages()</code> works as before,
the parent instance is unchanged, and passing <code>preload</code> to
<code>cloneInstance()</code> keeps the old behavior. Thanks <a
href="https://github.com/theMostCuriousHomunculus"><code>@​theMostCuriousHomunculus</code></a>
for the detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2451">#2451</a>).</li>
</ul>
<h2>v26.4.6</h2>
<ul>
<li>fix: a fallback language whose formatted code is already in the
hierarchy is no longer added a second time.
<code>toResolveHierarchy()</code> checked the raw
<code>fallbackLng</code> value against the list, but the list holds
formatted codes, so any fallback written differently from its formatted
form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng:
'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de',
'de-CH']</code>, and the same happened with <code>fallbackLng:
'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and
Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys
were looked up in the same language twice. Only exact duplicates are
removed; the order is unchanged. Thanks <a
href="https://github.com/lprnmns"><code>@​lprnmns</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2450">#2450</a>).</li>
</ul>
<h2>v26.4.5</h2>
<ul>
<li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays
<code>false</code> forever when the passed in <code>lng</code> is loaded
under another code, or not at all. It checked the load state of the raw
<code>lng</code>, but <code>loadLanguages()</code> stores a language
under its resolved code (<code>de-ch</code> → <code>de-CH</code>,
<code>de-CH</code> → <code>de</code> with <code>load:
'languageOnly'</code>) and skips a <code>lng</code> outside
<code>supportedLngs</code> entirely (only the fallback gets loaded), so
that state never got set. react-i18next's <code>useTranslation(ns, { lng
})</code> then never became ready: with <code>useSuspense</code> it kept
throwing an already resolved promise and React retried forever (100%
CPU, SSR never finished), without it the load effect re-rendered in a
loop. It now checks the code the language is actually loaded under, and
for a <code>lng</code> outside <code>supportedLngs</code> only waits for
the fallback, which is also what <code>t()</code> resolves to. Calls
without <code>lng</code> and the <code>precheck</code> (react-i18next's
<code>bindI18n: 'languageChanging'</code>) are unchanged (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1934">react-i18next#1934</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.4.7</h2>
<ul>
<li>perf: <code>cloneInstance()</code> no longer inherits
<code>preload</code>. <code>loadResources()</code> adds every
<code>preload</code> language to each load, and clones copied
<code>preload</code> from the parent, so a clone's <code>init()</code>
and every <code>changeLanguage()</code> walked all preloaded languages ×
all namespaces through <code>queueLoad()</code> /
<code>hasResourceBundle()</code>, although the parent had already loaded
them into the shared store. With i18next-http-middleware (one clone +
<code>changeLanguage()</code> per request), 25 preloaded languages and
20 namespaces, that was most of the per-request CPU: the reproduction
from the issue went from ~90 µs to ~10 µs per request, the same as with
a single language. A clone now only loads what it uses itself: its
<code>changeLanguage()</code> no longer waits for parent preload
languages that are still loading (the parent's own <code>init()</code>
still does), and <code>clone.loadNamespaces()</code> loads the new
namespace for the clone's language and fallbacks instead of every
preloaded language. <code>clone.loadLanguages()</code> works as before,
the parent instance is unchanged, and passing <code>preload</code> to
<code>cloneInstance()</code> keeps the old behavior. Thanks <a
href="https://github.com/theMostCuriousHomunculus"><code>@​theMostCuriousHomunculus</code></a>
for the detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2451">#2451</a>).</li>
</ul>
<h2>26.4.6</h2>
<ul>
<li>fix: a fallback language whose formatted code is already in the
hierarchy is no longer added a second time.
<code>toResolveHierarchy()</code> checked the raw
<code>fallbackLng</code> value against the list, but the list holds
formatted codes, so any fallback written differently from its formatted
form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng:
'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de',
'de-CH']</code>, and the same happened with <code>fallbackLng:
'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and
Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys
were looked up in the same language twice. Only exact duplicates are
removed; the order is unchanged. Thanks <a
href="https://github.com/lprnmns"><code>@​lprnmns</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2450">#2450</a>).</li>
</ul>
<h2>26.4.5</h2>
<ul>
<li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays
<code>false</code> forever when the passed in <code>lng</code> is loaded
under another code, or not at all. It checked the load state of the raw
<code>lng</code>, but <code>loadLanguages()</code> stores a language
under its resolved code (<code>de-ch</code> → <code>de-CH</code>,
<code>de-CH</code> → <code>de</code> with <code>load:
'languageOnly'</code>) and skips a <code>lng</code> outside
<code>supportedLngs</code> entirely (only the fallback gets loaded), so
that state never got set. react-i18next's <code>useTranslation(ns, { lng
})</code> then never became ready: with <code>useSuspense</code> it kept
throwing an already resolved promise and React retried forever (100%
CPU, SSR never finished), without it the load effect re-rendered in a
loop. It now checks the code the language is actually loaded under, and
for a <code>lng</code> outside <code>supportedLngs</code> only waits for
the fallback, which is also what <code>t()</code> resolves to. Calls
without <code>lng</code> and the <code>precheck</code> (react-i18next's
<code>bindI18n: 'languageChanging'</code>) are unchanged (<a
href="https://redirect.github.com/i18next/react-i18next/issues/1934">react-i18next#1934</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/5546d211a32e73642d22b57e58cc762338270afa"><code>5546d21</code></a>
26.4.7</li>
<li><a
href="https://github.com/i18next/i18next/commit/f27c937e5866f33700db40d0bf055694ee890cca"><code>f27c937</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/50ecc221940e99dcb36670c93b342a896165fca4"><code>50ecc22</code></a>
perf: clones no longer inherit preload, so changeLanguage on a clone
doesn't ...</li>
<li><a
href="https://github.com/i18next/i18next/commit/bc951ab36e601d459e4afe7040c72cc7632d3b9e"><code>bc951ab</code></a>
26.4.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/45d0aba52fba755039a8f6f6be76825f5aebaa81"><code>45d0aba</code></a>
changelog + build for 26.4.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/0458efc507c88e78b2daa4b0cab9c254cfdc77d2"><code>0458efc</code></a>
fix: don't repeat a fallback language that differs only in casing (<a
href="https://redirect.github.com/i18next/i18next/issues/2450">#2450</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/ce7b9cf970b2e6dcbecc6eb997d460ea1ea811ad"><code>ce7b9cf</code></a>
26.4.5</li>
<li><a
href="https://github.com/i18next/i18next/commit/4d4c60720e05da72e53af33fa0a8e0d69a56487a"><code>4d4c607</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/8f8651e938e122b5e40eacf616c9fb823a189087"><code>8f8651e</code></a>
fix: hasLoadedNamespace with a passed in lng checks the code it is
actually l...</li>
<li><a
href="https://github.com/i18next/i18next/commit/15d0b9d90e0564947861b926352b06deff0a8a05"><code>15d0b9d</code></a>
changelog: link GHSA-5jr9-983r-c8x4 in v26.4.4</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v26.4.4...v26.4.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.4&new-version=26.4.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:57:18 +00:00
dependabot[bot] 51664b082b chore(deps): Bump ol-mapbox-style from 13.5.1 to 13.8.0 (#2249) 
Bumps [ol-mapbox-style](https://github.com/openlayers/ol-mapbox-style)
from 13.5.1 to 13.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/openlayers/ol-mapbox-style/releases">ol-mapbox-style's
releases</a>.</em></p>
<blockquote>
<h2>v13.7.1</h2>
<h2>Summary</h2>
<ul>
<li>Avoid lost patterns after SDFing them</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Changes for 13.7.0 by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1547">openlayers/ol-mapbox-style#1547</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/openlayers/ol-mapbox-style/compare/v13.7.0...v13.7.1">https://github.com/openlayers/ol-mapbox-style/compare/v13.7.0...v13.7.1</a></p>
<h2>v13.7.0</h2>
<h2>Summary</h2>
<ul>
<li>Use <code>PatternDescriptor</code> instead of patterns as color for
<code>fill-pattern</code>. This is to support other rendering techniques
than Canvas 2D.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Changes for 13.6.0 by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1545">openlayers/ol-mapbox-style#1545</a></li>
<li>Use PatternDescriptor instead of patterns as color for fills by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1546">openlayers/ol-mapbox-style#1546</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/openlayers/ol-mapbox-style/compare/v13.6.0...v13.7.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.6.0...v13.7.0</a></p>
<h2>v13.6.0</h2>
<h2>Summary</h2>
<ul>
<li>Allow other layers than <code>Vector</code> or
<code>VectorTile</code> for <code>applyStyle()</code></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Changes for 13.5.1 by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1528">openlayers/ol-mapbox-style#1528</a></li>
<li>Allow other layers than Vector or VectorTile for applyStyle() by <a
href="https://github.com/ahocevar"><code>@​ahocevar</code></a> in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1542">openlayers/ol-mapbox-style#1542</a></li>
<li>Bump typedoc-plugin-missing-exports from 4.1.3 to 4.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1529">openlayers/ol-mapbox-style#1529</a></li>
<li>Bump proj4 from 2.21.0 to 2.22.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1530">openlayers/ol-mapbox-style#1530</a></li>
<li>Bump mocha from 12.0.0-rc.6 to 12.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1531">openlayers/ol-mapbox-style#1531</a></li>
<li>Bump globals from 17.8.0 to 17.12.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1532">openlayers/ol-mapbox-style#1532</a></li>
<li>Bump compression from 1.8.1 to 1.8.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1540">openlayers/ol-mapbox-style#1540</a></li>
<li>Bump postcss-selector-parser, postcss-modules-local-by-default and
postcss-modules-scope by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1541">openlayers/ol-mapbox-style#1541</a></li>
<li>Bump serialize-javascript from 7.1.1 to 7.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1543">openlayers/ol-mapbox-style#1543</a></li>
<li>Bump brace-expansion by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1536">openlayers/ol-mapbox-style#1536</a></li>
<li>Bump shell-quote from 1.10.0 to 1.12.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1535">openlayers/ol-mapbox-style#1535</a></li>
<li>Bump proxy-addr from 2.0.7 to 2.0.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1538">openlayers/ol-mapbox-style#1538</a></li>
<li>Bump <code>@​babel/core</code> from 7.12.3 to 7.29.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1544">openlayers/ol-mapbox-style#1544</a></li>
<li>Bump source-map-js from 1.2.1 to 1.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1539">openlayers/ol-mapbox-style#1539</a></li>
<li>Bump webpack-dev-middleware from 7.4.2 to 7.4.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1537">openlayers/ol-mapbox-style#1537</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/openlayers/ol-mapbox-style/compare/v13.5.1...v13.6.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.5.1...v13.6.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/openlayers/ol-mapbox-style/blob/main/CHANGELOG.md">ol-mapbox-style's
changelog</a>.</em></p>
<blockquote>
<h2>13.8.0</h2>
<ul>
<li>Support <code>fill-translate</code> and
<code>fill-translate-anchor</code> (and the same for
<code>fill-extrusion</code>).</li>
</ul>
<h2>13.7.0</h2>
<ul>
<li>Use <code>PatternDescriptor</code> instead of patterns as color for
<code>fill-pattern</code>. This is to support other rendering techniques
than Canvas 2D.</li>
</ul>
<h2>13.6.0</h2>
<ul>
<li>Allow other layers than <code>Vector</code> or
<code>VectorTile</code> for <code>applyStyle()</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/openlayers/ol-mapbox-style/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol-mapbox-style&package-manager=npm_and_yarn&previous-version=13.5.1&new-version=13.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:56:28 +00:00
dependabot[bot] 253afcc35f chore(deps-dev): Bump the vitest group with 2 updates (#2244) 
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).

Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.5</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Keep vite default <code>fs.deny</code> with api token file  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11578">vitest-dev/vitest#11578</a>
<a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb"><!-- raw
HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li>
<li>Handle quoted file names in <code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11583">vitest-dev/vitest#11583</a>
<a href="https://github.com/vitest-dev/vitest/commit/14921e962"><!-- raw
HTML omitted -->(14921)<!-- raw HTML omitted --></a></li>
<li>Add <code>data</code> to the <code>import.meta.hot</code> stub  - 
by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11590">vitest-dev/vitest#11590</a>
<a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3"><!-- raw
HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li>
<li>Set <code>skip</code> in <code>skipIf</code>, ignore
<code>undefined</code> options  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11591">vitest-dev/vitest#11591</a>
<a href="https://github.com/vitest-dev/vitest/commit/d523a15f2"><!-- raw
HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li>
<li>Skip builtin loading in async leak detector  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11598">vitest-dev/vitest#11598</a>
<a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6"><!-- raw
HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li>
<li>Keep the import frame in native loader errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11599">vitest-dev/vitest#11599</a>
<a href="https://github.com/vitest-dev/vitest/commit/9697b3894"><!-- raw
HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li>
<li>Run hook cleanups when a later hook fails  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11605">vitest-dev/vitest#11605</a>
<a href="https://github.com/vitest-dev/vitest/commit/6c5a44720"><!-- raw
HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li>
<li>Release mocks of finished test files  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11607">vitest-dev/vitest#11607</a>
<a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0"><!-- raw
HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li>
<li>Abort all running tests on cancel  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11606">vitest-dev/vitest#11606</a>
<a href="https://github.com/vitest-dev/vitest/commit/6621a72d6"><!-- raw
HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Ignore synthetic pagehide events  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11582">vitest-dev/vitest#11582</a>
<a href="https://github.com/vitest-dev/vitest/commit/ca0813584"><!-- raw
HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li>
<li>Run plugin buildStart on server creation  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11593">vitest-dev/vitest#11593</a>
<a href="https://github.com/vitest-dev/vitest/commit/ea611e44c"><!-- raw
HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li>
<li>Drop late connections of closed sessions  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11600">vitest-dev/vitest#11600</a>
<a href="https://github.com/vitest-dev/vitest/commit/f161e6df2"><!-- raw
HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li>
<li>Wait 30s for the browser to close  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11601">vitest-dev/vitest#11601</a>
<a href="https://github.com/vitest-dev/vitest/commit/6498b666a"><!-- raw
HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li>
<li>Run global setup once with instances  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11596">vitest-dev/vitest#11596</a>
<a href="https://github.com/vitest-dev/vitest/commit/8dd67c262"><!-- raw
HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>reporter</strong>:
<ul>
<li>End reason
<code>&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);failed&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);</code>
on worker crash  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11568">vitest-dev/vitest#11568</a>
<a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff"><!-- raw
HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7"><code>7a825db</code></a>
chore: release v5.0.5 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11609">#11609</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest` from 5.0.4 to 5.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.5</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Keep vite default <code>fs.deny</code> with api token file  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11578">vitest-dev/vitest#11578</a>
<a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb"><!-- raw
HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li>
<li>Handle quoted file names in <code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11583">vitest-dev/vitest#11583</a>
<a href="https://github.com/vitest-dev/vitest/commit/14921e962"><!-- raw
HTML omitted -->(14921)<!-- raw HTML omitted --></a></li>
<li>Add <code>data</code> to the <code>import.meta.hot</code> stub  - 
by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11590">vitest-dev/vitest#11590</a>
<a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3"><!-- raw
HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li>
<li>Set <code>skip</code> in <code>skipIf</code>, ignore
<code>undefined</code> options  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11591">vitest-dev/vitest#11591</a>
<a href="https://github.com/vitest-dev/vitest/commit/d523a15f2"><!-- raw
HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li>
<li>Skip builtin loading in async leak detector  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11598">vitest-dev/vitest#11598</a>
<a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6"><!-- raw
HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li>
<li>Keep the import frame in native loader errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11599">vitest-dev/vitest#11599</a>
<a href="https://github.com/vitest-dev/vitest/commit/9697b3894"><!-- raw
HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li>
<li>Run hook cleanups when a later hook fails  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11605">vitest-dev/vitest#11605</a>
<a href="https://github.com/vitest-dev/vitest/commit/6c5a44720"><!-- raw
HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li>
<li>Release mocks of finished test files  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11607">vitest-dev/vitest#11607</a>
<a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0"><!-- raw
HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li>
<li>Abort all running tests on cancel  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11606">vitest-dev/vitest#11606</a>
<a href="https://github.com/vitest-dev/vitest/commit/6621a72d6"><!-- raw
HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Ignore synthetic pagehide events  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11582">vitest-dev/vitest#11582</a>
<a href="https://github.com/vitest-dev/vitest/commit/ca0813584"><!-- raw
HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li>
<li>Run plugin buildStart on server creation  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11593">vitest-dev/vitest#11593</a>
<a href="https://github.com/vitest-dev/vitest/commit/ea611e44c"><!-- raw
HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li>
<li>Drop late connections of closed sessions  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11600">vitest-dev/vitest#11600</a>
<a href="https://github.com/vitest-dev/vitest/commit/f161e6df2"><!-- raw
HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li>
<li>Wait 30s for the browser to close  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11601">vitest-dev/vitest#11601</a>
<a href="https://github.com/vitest-dev/vitest/commit/6498b666a"><!-- raw
HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li>
<li>Run global setup once with instances  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11596">vitest-dev/vitest#11596</a>
<a href="https://github.com/vitest-dev/vitest/commit/8dd67c262"><!-- raw
HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>reporter</strong>:
<ul>
<li>End reason
<code>&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&amp;[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);</code>
on worker crash  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11568">vitest-dev/vitest#11568</a>
<a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff"><!-- raw
HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7"><code>7a825db</code></a>
chore: release v5.0.5 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11609">#11609</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6621a72d6ed371e43f80ff327f5063693bd6b1ad"><code>6621a72</code></a>
fix: abort all running tests on cancel (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11606">#11606</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0c8d6867de06a3df43ea28a05eeec444"><code>e9c3d72</code></a>
fix: release mocks of finished test files (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11607">#11607</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/8dd67c2625943d824e257b87ae57a14094e90eed"><code>8dd67c2</code></a>
fix(browser): run global setup once with instances (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11596">#11596</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6c5a447203a29a0708fbc5de4fb91ea501bdc395"><code>6c5a447</code></a>
fix: run hook cleanups when a later hook fails (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11605">#11605</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/9697b3894f456b85db91f3824ebe833449305c04"><code>9697b38</code></a>
fix: keep the import frame in native loader errors (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11599">#11599</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6498b666a3ae8961f6f2a8abdc89015b6fd0b3aa"><code>6498b66</code></a>
fix(browser): wait 30s for the browser to close (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11601">#11601</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/f161e6df2b3c0bc84982d374094379139e380791"><code>f161e6d</code></a>
fix(browser): drop late connections of closed sessions (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11600">#11600</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/fe86a64c6c6aa75481bffe5880b5c4e35ea67927"><code>fe86a64</code></a>
fix: skip builtin loading in async leak detector (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11598">#11598</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff0734cf476e30186a83aebe6771aa330"><code>6ae8e89</code></a>
fix(reporter): end reason <code>'failed'</code> on worker crash (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11568">#11568</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:55:45 +00:00
dependabot[bot] 4accd18a2e chore(deps-dev): Bump @playwright/test from 1.64.0 to 1.64.1 (#2247) 
Bumps [@playwright/test](https://github.com/microsoft/playwright) from
1.64.0 to 1.64.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/playwright/releases">@​playwright/test's
releases</a>.</em></p>
<blockquote>
<h2>v1.64.1</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/43247">#43247</a>
[Bug]: _electron.launch intermittently loses a packaged app's first
window since 1.64.0</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/43242">#43242</a>
[Regression]: Chromium 155+ aborts a preflighted cross-origin redirect
whenever any route is registered (net::ERR_ABORTED)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/playwright/commit/cfe490d941f992655948eee8fd4fd94e1c4234bf"><code>cfe490d</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43353">#43353</a>):
docs: release notes for v1.64 Python</li>
<li><a
href="https://github.com/microsoft/playwright/commit/866cbb864009f84d7e8e41c64fdbfceff43f280d"><code>866cbb8</code></a>
chore: mark v1.64.1 (<a
href="https://redirect.github.com/microsoft/playwright/issues/43354">#43354</a>)</li>
<li><a
href="https://github.com/microsoft/playwright/commit/1b2924712024804936dbcfe9fabaa655d52325e5"><code>1b29247</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43250">#43250</a>):
fix(electron): do not drop windows that have not navigat...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/632d976826c74b0163fd5201a05b7b4853ba3f4a"><code>632d976</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43249">#43249</a>):
fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect</li>
<li><a
href="https://github.com/microsoft/playwright/commit/824d0c5d1e10f21fcbe88d18a99d06194acde77c"><code>824d0c5</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43217">#43217</a>):
chore(dotnet): fix async suffix of optional-arg overload...</li>
<li>See full diff in <a
href="https://github.com/microsoft/playwright/compare/v1.64.0...v1.64.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.64.0&new-version=1.64.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:54:53 +00:00
dependabot[bot] 789e8d4569 chore(deps-dev): Bump sass from 1.105.1 to 1.105.2 (#2246) 
Bumps [sass](https://github.com/sass/dart-sass) from 1.105.1 to 1.105.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/releases">sass's
releases</a>.</em></p>
<blockquote>
<h2>Dart Sass 1.105.2</h2>
<p>To install Sass 1.105.2, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<h3>Node.js Embedded Host</h3>
<ul>
<li>Fix a deadlock when the async compiler fails to start.</li>
</ul>
<p>See the <a
href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11052">full
changelog</a> for changes in earlier releases.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's
changelog</a>.</em></p>
<blockquote>
<h2>1.105.2</h2>
<h3>Node.js Embedded Host</h3>
<ul>
<li>Fix a deadlock when the async compiler fails to start.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sass/dart-sass/commit/00a0d7968f4a6d8ed044da35e3b04877d8b3e2b4"><code>00a0d79</code></a>
Add a changelog entry for <a
href="https://redirect.github.com/sass/embedded-host-node/issues/449">sass/embedded-host-node#449</a>
(<a
href="https://redirect.github.com/sass/dart-sass/issues/2882">#2882</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/83fdf3573961991569f6baf90ee80469ca952792"><code>83fdf35</code></a>
Fix the <code>git pr merge</code> invocation in GitHUb actions (<a
href="https://redirect.github.com/sass/dart-sass/issues/2881">#2881</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/c9868b44d9287171d585e8d77b8bf1d2946393fc"><code>c9868b4</code></a>
Try setting dependabot merge authorship with <code>-A</code> (<a
href="https://redirect.github.com/sass/dart-sass/issues/2873">#2873</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/f10cddec0e47c41ca19791c0a9cbd9a4c73c3ff2"><code>f10cdde</code></a>
Check out sass/sass with clone-linked-repo whenever possible (<a
href="https://redirect.github.com/sass/dart-sass/issues/2871">#2871</a>)</li>
<li>See full diff in <a
href="https://github.com/sass/dart-sass/compare/1.105.1...1.105.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sass&package-manager=npm_and_yarn&previous-version=1.105.1&new-version=1.105.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-19 13:54:08 +00:00
dependabot[bot] 2522b20c02 chore(deps-dev): Bump postcss from 8.5.29 to 8.5.30 (#2242) 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.29 to
8.5.30.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.30</h2>
<ul>
<li>Fix broken map on <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/Rufflet"><code>@​Rufflet</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.30</h2>
<ul>
<li>Fix broken map on <code>&lt;/style&gt;</code> escaping (by <a
href="https://github.com/Rufflet"><code>@​Rufflet</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/f1aca7ec68ab0cfb96cc9e69520a87f641c5a9e4"><code>f1aca7e</code></a>
Release 8.5.30 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/9d8344589299ca90f4ec0a4fab899e357995eaad"><code>9d83445</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/6c9bc73d9d2ad2c9c8e998ace707ebe067bc8425"><code>6c9bc73</code></a>
Fix invalid source map mapping on escaping before new line (<a
href="https://redirect.github.com/postcss/postcss/issues/2169">#2169</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/1fd8f881875330b284d65961c2c158f61d4e3bab"><code>1fd8f88</code></a>
Add missed changes in changelog</li>
<li>See full diff in <a
href="https://github.com/postcss/postcss/compare/8.5.29...8.5.30">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.29&new-version=8.5.30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:56:54 +00:00
dependabot[bot] b73f0abfad chore(deps-dev): Bump typescript-eslint from 8.71.1 to 8.71.2 (#2241) 
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
from 8.71.1 to 8.71.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.71.2</h2>
<h2>8.71.2 (2026-10-12)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unused-vars] avoid
false-positives when not using our parser (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12989">#12989</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters]
count instantiated mapped type templates (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12974">#12974</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unused-vars] ignore type-only
refs for after-used (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12977">#12977</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters]
parenthesize constraint in optional tuple elements (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12995">#12995</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] safe fix
when the chain ends with a strict null comparison (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12805">#12805</a>)</li>
<li><strong>type-utils:</strong> match linked packages and packages with
missing version in <code>TypeOrValueSpecifier</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12948">#12948</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Abraham Guo</li>
<li>Brad Zacher <a
href="https://github.com/bradzacher"><code>@​bradzacher</code></a></li>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg</li>
<li>Vinccool96</li>
<li>Younsang Na <a
href="https://github.com/nayounsang"><code>@​nayounsang</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.2">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.71.2 (2026-10-12)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.2">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/7488d681f6e0e96c2aaa1eee9c3d1b9b1ef077cb"><code>7488d68</code></a>
chore(release): publish 8.71.2</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.1&new-version=8.71.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:55:36 +00:00
dependabot[bot] aa52073505 chore(deps-dev): Bump i18next-cli from 1.75.2 to 1.75.3 (#2243) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.75.2
to 1.75.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.75.3</h2>
<ul>
<li>fix(extract): options passed in a variable are read like inline
ones. With <code>const params = { count }</code>,
<code>t('key', params)</code> now extracts the plural keys (and reads
<code>context</code>, <code>ns</code>, <code>defaultValue</code> the
same way),
where it used to extract only <code>key</code>. A variable a file
declares also no longer resolves to a same-named
variable of another file: <code>t('key', overwrittenParams)</code> took
<code>y=true</code> as its default value from an
unrelated function-local <code>overwrittenParams</code> array elsewhere.
Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/307">#307</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/3c957348b396910daa3bb3f6e7fa25d3b266d9d5"><code>3c95734</code></a>
1.75.3</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/171c6f450aa900f210372d33f15dbf7eae7c6ff8"><code>171c6f4</code></a>
fix(extract): read t() options passed in a variable, and keep a file's
variab...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.75.2...v1.75.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.75.2&new-version=1.75.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:54:28 +00:00
dependabot[bot] 4d4db6e406 chore(deps): Bump react-resizable-panels from 4.14.4 to 4.14.5 in the react group (#2240) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.4 to 4.14.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.5</h2>
<ul>
<li><code>Group</code>, <code>Panel</code>, <code>Separator</code>,
<code>Grid</code>, and <code>Cell</code> only render an explicit
<code>id</code> (or <code>data-testid</code>) as
<code>data-testid</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li>Empty string <code>id</code> prop is now treated the same as an
undefined value and falls back to <code>useId</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li><code>Panel</code> with an <code>id</code> of <code>0</code> is now
properly treated as an explicit <code>id</code> value - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.5</h2>
<ul>
<li><code>Group</code>, <code>Panel</code>, <code>Separator</code>,
<code>Grid</code>, and <code>Cell</code> only render an explicit
<code>id</code> (or <code>data-testid</code>) as
<code>data-testid</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li>Empty string <code>id</code> prop is now treated the same as an
undefined value and falls back to <code>useId</code> - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
<li><code>Panel</code> with an <code>id</code> of <code>0</code> is now
properly treated as an explicit <code>id</code> value - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/00766aa4b967ce3050908075ed891f4a9e96a86e"><code>00766aa</code></a>
4.14.4 -&gt; 4.14.5</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/593afafa93d90582808ba7f2bb0cb83b9b78c488"><code>593afaf</code></a>
Improve id and data-testid semantics (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/766">#766</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/23453f69c307ceb6f7c2ace1bb5f75decb34c8ed"><code>23453f6</code></a>
Update react-lib-tools dep</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/f757fb90367c7417fd5708adb9c9ec908ac8cc10"><code>f757fb9</code></a>
Update react-lib-tools dep</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/cdaec0d674ab3c563bc42d6fd6db3415724fa604"><code>cdaec0d</code></a>
Fix typos (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/764">#764</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/213232f3156f2cfe790cce5ad970adb0039a60d4"><code>213232f</code></a>
Fix TSC error in config file</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/74cc7f8cfdb7792843f2fcdef0e3686b817ba037"><code>74cc7f8</code></a>
CI now runs the e2e tests against production builds</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/558e0d6f1af9a82af2004a58a426ad4043fc5119"><code>558e0d6</code></a>
Run CI on main</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/b903cd9805e1f69d63810d5f31d88ae7a64b030b"><code>b903cd9</code></a>
Speed up e2e tests</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.4...4.14.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.4&new-version=4.14.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-16 13:52:48 +00:00
dependabot[bot] 97f426c0d4 chore(deps): Bump i18next from 26.4.3 to 26.4.4 (#2239) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.4.3 to
26.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.4.4</h2>
<ul>
<li>fix(security): the nesting regexp no longer backtracks exponentially
(ReDoS) on an unclosed <code>$t(</code>. Its repeated group had
overlapping alternatives (<code>[^()&quot;']+</code> inside
<code>(?:...)*?</code>, and inside parentheses <code>[^()]</code> also
matched quotes), so a string containing <code>$t(</code> without a
closing <code>)</code> made the engine try every way to split the text:
about 2x the runtime per extra character, and a ~25 character value hung
<code>t()</code> for minutes. With the default config this was reachable
through any interpolated value (<code>t('greet', { name:
'$t(aaaaaaaaaaaaaaaaaaaaaaaa' })</code>): escaping does not touch
<code>$</code>, <code>t</code> or <code>(</code>, and the
<code>skipOnVariables</code> check runs the regexp on the interpolated
result, so <code>nest: false</code> did not help either. Every
alternative now starts with a different character (plain char,
<code>&quot;</code>, <code>'</code> or <code>(</code>), so there is only
one way to match and the cost is linear. Quoted strings and one level of
parentheses in nesting options keep working (<a
href="https://redirect.github.com/i18next/i18next/issues/2336">#2336</a>).
The only difference: a lone <code>&quot;</code> or <code>'</code> inside
unquoted parentheses within <code>$t(...)</code> is no longer matched.
Affects 25.3.3 to 26.4.3. Thanks to Anisetti Chaitanya Eshwar Prasad for
the responsible disclosure.</li>
<li>fix(security): <code>nest()</code> now resolves <code>$t(...)</code>
in a single pass and no longer nests text that came out of a resolved
value. Every nested lookup reset the shared nesting regexp, so the loop
started over from the beginning of the string after each match. That had
two effects. First, a <code>$t(...)</code> inside a variable that the
nested lookup deliberately kept literal (default <code>skipOnVariables:
true</code>) was resolved anyway by the outer loop: with <code>outer: 'A
$t(inner) B'</code> and <code>inner: 'Hi {{name}}'</code>,
<code>t('outer', { name: '$t(secret)' })</code> rendered the
<code>secret</code> translation. It now stays <code>A Hi $t(secret)
B</code>, the same as without the outer nesting; with
<code>skipOnVariables: false</code> it is still resolved. Second, the
cost was quadratic when an unclosed <code>$t(</code> preceded many
nestings, which matters when an app passes untrusted input as the key
itself (<code>t(userInput)</code>): 20,000 nestings took ~1.4 s, now ~25
ms. The resolved value is now sliced into the result instead of going
through <code>String.replace</code>, so <code>$&amp;</code>,
<code>$`</code>, <code>$'</code> and <code>$$</code> stay literal as
before (26.4.2).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.4.4</h2>
<ul>
<li>fix(security): the nesting regexp no longer backtracks exponentially
(ReDoS) on an unclosed <code>$t(</code>. Its repeated group had
overlapping alternatives (<code>[^()&quot;']+</code> inside
<code>(?:...)*?</code>, and inside parentheses <code>[^()]</code> also
matched quotes), so a string containing <code>$t(</code> without a
closing <code>)</code> made the engine try every way to split the text:
about 2x the runtime per extra character, and a ~25 character value hung
<code>t()</code> for minutes. With the default config this was reachable
through any interpolated value (<code>t('greet', { name:
'$t(aaaaaaaaaaaaaaaaaaaaaaaa' })</code>): escaping does not touch
<code>$</code>, <code>t</code> or <code>(</code>, and the
<code>skipOnVariables</code> check runs the regexp on the interpolated
result, so <code>nest: false</code> did not help either. Every
alternative now starts with a different character (plain char,
<code>&quot;</code>, <code>'</code> or <code>(</code>), so there is only
one way to match and the cost is linear. Quoted strings and one level of
parentheses in nesting options keep working (<a
href="https://redirect.github.com/i18next/i18next/issues/2336">#2336</a>).
The only difference: a lone <code>&quot;</code> or <code>'</code> inside
unquoted parentheses within <code>$t(...)</code> is no longer matched.
Affects 25.3.3 to 26.4.3. See advisory <a
href="https://github.com/i18next/i18next/security/advisories/GHSA-5jr9-983r-c8x4">GHSA-5jr9-983r-c8x4</a>,
CVSS 7.5 (<code>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</code>).
Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible
disclosure.</li>
<li>fix(security): <code>nest()</code> now resolves <code>$t(...)</code>
in a single pass and no longer nests text that came out of a resolved
value. Every nested lookup reset the shared nesting regexp, so the loop
started over from the beginning of the string after each match. That had
two effects. First, a <code>$t(...)</code> inside a variable that the
nested lookup deliberately kept literal (default <code>skipOnVariables:
true</code>) was resolved anyway by the outer loop: with <code>outer: 'A
$t(inner) B'</code> and <code>inner: 'Hi {{name}}'</code>,
<code>t('outer', { name: '$t(secret)' })</code> rendered the
<code>secret</code> translation. It now stays <code>A Hi $t(secret)
B</code>, the same as without the outer nesting; with
<code>skipOnVariables: false</code> it is still resolved. Second, the
cost was quadratic when an unclosed <code>$t(</code> preceded many
nestings, which matters when an app passes untrusted input as the key
itself (<code>t(userInput)</code>): 20,000 nestings took ~1.4 s, now ~25
ms. The resolved value is now sliced into the result instead of going
through <code>String.replace</code>, so <code>$&amp;</code>,
<code>$`</code>, <code>$'</code> and <code>$$</code> stay literal as
before (26.4.2).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/f6a7746d119790f07bc03ba86b130b090af8e443"><code>f6a7746</code></a>
26.4.4</li>
<li><a
href="https://github.com/i18next/i18next/commit/25988d5405e8e57415b2550af179f512c33ca2be"><code>25988d5</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/c9f8ebab17b456b5837e61a2e542ee27d190e151"><code>c9f8eba</code></a>
fix(security): nesting regexp ReDoS on unclosed $t( and single-pass
nest(), c...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.4.3...v26.4.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.3&new-version=26.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-15 13:58:11 +00:00
dependabot[bot] 5ae36a456b chore(deps-dev): Bump the vitest group with 2 updates (#2238) 
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8)
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.4</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>experimental</strong>:
<ul>
<li>Tag cache directories with CACHEDIR.TAG  -  by <a
href="https://github.com/lifeiscontent"><code>@​lifeiscontent</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11461">vitest-dev/vitest#11461</a>
<a href="https://github.com/vitest-dev/vitest/commit/a8ea3c8fd"><!-- raw
HTML omitted -->(a8ea3)<!-- raw HTML omitted --></a></li>
<li>Support <code>test.ui.theme</code> option  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11499">vitest-dev/vitest#11499</a>
<a href="https://github.com/vitest-dev/vitest/commit/1da66405d"><!-- raw
HTML omitted -->(1da66)<!-- raw HTML omitted --></a></li>
<li>Highlight selector multiple matches in trace view  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11489">vitest-dev/vitest#11489</a>
<a href="https://github.com/vitest-dev/vitest/commit/5abba1e1b"><!-- raw
HTML omitted -->(5abba)<!-- raw HTML omitted --></a></li>
<li>Print how many tests were affected and a total when running
<code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11424">vitest-dev/vitest#11424</a>
<a href="https://github.com/vitest-dev/vitest/commit/a23368585"><!-- raw
HTML omitted -->(a2336)<!-- raw HTML omitted --></a></li>
<li>Add an option to cache dependencies instead of statically parsing
them  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11515">vitest-dev/vitest#11515</a>
<a href="https://github.com/vitest-dev/vitest/commit/c06012ac8"><!-- raw
HTML omitted -->(c0601)<!-- raw HTML omitted --></a></li>
<li>Add fit and zoom controls to trace viewer  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11490">vitest-dev/vitest#11490</a>
<a href="https://github.com/vitest-dev/vitest/commit/f5dd99ed0"><!-- raw
HTML omitted -->(f5dd9)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Fail the run on git and location filter errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11430">vitest-dev/vitest#11430</a>
<a href="https://github.com/vitest-dev/vitest/commit/30d0304d2"><!-- raw
HTML omitted -->(30d03)<!-- raw HTML omitted --></a></li>
<li>Enable fsModuleCache by default  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11435">vitest-dev/vitest#11435</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad208cc29"><!-- raw
HTML omitted -->(ad208)<!-- raw HTML omitted --></a></li>
<li>Track project files and mocks with --changed  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11432">vitest-dev/vitest#11432</a>
<a href="https://github.com/vitest-dev/vitest/commit/b0f2b3bb9"><!-- raw
HTML omitted -->(b0f2b)<!-- raw HTML omitted --></a></li>
<li>Refactor caching, fix <code>:</code> in project and change the shape
of <code>results</code> cache  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11453">vitest-dev/vitest#11453</a>
<a href="https://github.com/vitest-dev/vitest/commit/9673c49a4"><!-- raw
HTML omitted -->(9673c)<!-- raw HTML omitted --></a></li>
<li>Keep full <code>$</code> string values when
<code>taskTitleValueFormatTruncate</code> is 0  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11485">vitest-dev/vitest#11485</a>
<a href="https://github.com/vitest-dev/vitest/commit/4f7e1799b"><!-- raw
HTML omitted -->(4f7e1)<!-- raw HTML omitted --></a></li>
<li>Resolve node builtins in client environments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11417">vitest-dev/vitest#11417</a>
<a href="https://github.com/vitest-dev/vitest/commit/56b319ac6"><!-- raw
HTML omitted -->(56b31)<!-- raw HTML omitted --></a></li>
<li>Fix module graph builtin externals after <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11421">#11421</a>
 -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11491">vitest-dev/vitest#11491</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11421">vitest-dev/vitest#11421</a>
<a href="https://github.com/vitest-dev/vitest/commit/008e184cb"><!-- raw
HTML omitted -->(008e1)<!-- raw HTML omitted --></a></li>
<li>Wrap module mocks during in-source testing  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11505">vitest-dev/vitest#11505</a>
<a href="https://github.com/vitest-dev/vitest/commit/36d19cb00"><!-- raw
HTML omitted -->(36d19)<!-- raw HTML omitted --></a></li>
<li>Handle line endings in snapshot  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11522">vitest-dev/vitest#11522</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c468aa40"><!-- raw
HTML omitted -->(4c468)<!-- raw HTML omitted --></a></li>
<li>Respect root in projects  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11521">vitest-dev/vitest#11521</a>
<a href="https://github.com/vitest-dev/vitest/commit/26642f793"><!-- raw
HTML omitted -->(26642)<!-- raw HTML omitted --></a></li>
<li>Resolve mocks in directories with spaces  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11539">vitest-dev/vitest#11539</a>
<a href="https://github.com/vitest-dev/vitest/commit/caaef9416"><!-- raw
HTML omitted -->(caaef)<!-- raw HTML omitted --></a></li>
<li><strong>api</strong>:
<ul>
<li>Publish the api token atomically  -  by <a
href="https://github.com/umairnawaz333"><code>@​umairnawaz333</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11323">vitest-dev/vitest#11323</a>
<a href="https://github.com/vitest-dev/vitest/commit/6f990fef1"><!-- raw
HTML omitted -->(6f990)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>browser</strong>:
<ul>
<li>Close the mock route interception race  -  by <a
href="https://github.com/cplieger"><code>@​cplieger</code></a> and <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8339">vitest-dev/vitest#8339</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11083">vitest-dev/vitest#11083</a>
<a href="https://github.com/vitest-dev/vitest/commit/d6620fae6"><!-- raw
HTML omitted -->(d6620)<!-- raw HTML omitted --></a></li>
<li>Allow toHaveTextContent without arguments  -  by <a
href="https://github.com/nomadical"><code>@​nomadical</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11425">vitest-dev/vitest#11425</a>
<a href="https://github.com/vitest-dev/vitest/commit/8ebcf5f8a"><!-- raw
HTML omitted -->(8ebcf)<!-- raw HTML omitted --></a></li>
<li>Apply API options without browser config  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10852">vitest-dev/vitest#10852</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad055837b"><!-- raw
HTML omitted -->(ad055)<!-- raw HTML omitted --></a></li>
<li>Preserve undefined command arguments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> and
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11497">vitest-dev/vitest#11497</a>
<a href="https://github.com/vitest-dev/vitest/commit/1576d3d89"><!-- raw
HTML omitted -->(1576d)<!-- raw HTML omitted --></a></li>
<li>Wait for setup mocks before importing a test file  -  by <a
href="https://github.com/kasperpeulen"><code>@​kasperpeulen</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11520">vitest-dev/vitest#11520</a>
<a href="https://github.com/vitest-dev/vitest/commit/b61d1ced3"><!-- raw
HTML omitted -->(b61d1)<!-- raw HTML omitted --></a></li>
<li>Avoid extra scroll outside the iframe  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11523">vitest-dev/vitest#11523</a>
<a href="https://github.com/vitest-dev/vitest/commit/662e8a363"><!-- raw
HTML omitted -->(662e8)<!-- raw HTML omitted --></a></li>
<li>Run browser instances as workers  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11525">vitest-dev/vitest#11525</a>
<a href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc"><!-- raw
HTML omitted -->(bf04b)<!-- raw HTML omitted --></a>
<ul>
<li>⚠️ This can degrade performance if you have a custom
<code>maxWorkers</code> setting. Previously, it was applied incorrectly
and could lead to Vitest using too many resources. For example, a lower
number would still open too many browsers. Fixing it means Vitest opens
less instances by default now.</li>
</ul>
</li>
<li>Open one cdp session per tester  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11542">vitest-dev/vitest#11542</a>
<a href="https://github.com/vitest-dev/vitest/commit/69e6369f6"><!-- raw
HTML omitted -->(69e63)<!-- raw HTML omitted --></a></li>
<li>Clean up unmocked and pending mocks  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11537">vitest-dev/vitest#11537</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c9552173"><!-- raw
HTML omitted -->(5c955)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>coverage</strong>:
<ul>
<li>V8 browser memory leak between test files  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11466">vitest-dev/vitest#11466</a>
<a href="https://github.com/vitest-dev/vitest/commit/2297d93a8"><!-- raw
HTML omitted -->(2297d)<!-- raw HTML omitted --></a></li>
<li><code>allowExternal</code> fails to include uncovered files  -  by
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11513">vitest-dev/vitest#11513</a>
<a href="https://github.com/vitest-dev/vitest/commit/4ef000a93"><!-- raw
HTML omitted -->(4ef00)<!-- raw HTML omitted --></a></li>
<li>Filenames containing brackets incorrectly showing as uncovered  - 
by <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11531">vitest-dev/vitest#11531</a>
<a href="https://github.com/vitest-dev/vitest/commit/0fa80f53c"><!-- raw
HTML omitted -->(0fa80)<!-- raw HTML omitted --></a></li>
<li>Istanbul coverage wrong when module transform warmups  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11529">vitest-dev/vitest#11529</a>
<a href="https://github.com/vitest-dev/vitest/commit/9f61dcca2"><!-- raw
HTML omitted -->(9f61d)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>deps</strong>:
<ul>
<li>Update all non-major dependencies  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11167">vitest-dev/vitest#11167</a>
<a href="https://github.com/vitest-dev/vitest/commit/c74e099a9"><!-- raw
HTML omitted -->(c74e0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>expect</strong>:
<ul>
<li>Fix <code>Map</code> and <code>Set</code> deep equality in some
assertions  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11402">vitest-dev/vitest#11402</a>
<a href="https://github.com/vitest-dev/vitest/commit/b4e79fd7a"><!-- raw
HTML omitted -->(b4e79)<!-- raw HTML omitted --></a></li>
<li>Check value in chai-style returned  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11500">vitest-dev/vitest#11500</a>
<a href="https://github.com/vitest-dev/vitest/commit/1aca02a21"><!-- raw
HTML omitted -->(1aca0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>mocker</strong>:
<ul>
<li>Fix native loader mocking edge cases  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11540">vitest-dev/vitest#11540</a>
<a href="https://github.com/vitest-dev/vitest/commit/cd423ba04"><!-- raw
HTML omitted -->(cd423)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pretty-format</strong>:</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40"><code>6a11cf6</code></a>
chore: release v5.0.4 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11554">#11554</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/2297d93a854968d2ffee6025700c69099e6b7f80"><code>2297d93</code></a>
fix(coverage): v8 browser memory leak between test files (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11466">#11466</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/c74e099a9d17e24e9816878165af4818df84a631"><code>c74e099</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11167">#11167</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest` from 5.0.3 to 5.0.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.4</h2>
<h3>   🚀 Features</h3>
<ul>
<li><strong>experimental</strong>:
<ul>
<li>Tag cache directories with CACHEDIR.TAG  -  by <a
href="https://github.com/lifeiscontent"><code>@​lifeiscontent</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11461">vitest-dev/vitest#11461</a>
<a href="https://github.com/vitest-dev/vitest/commit/a8ea3c8fd"><!-- raw
HTML omitted -->(a8ea3)<!-- raw HTML omitted --></a></li>
<li>Support <code>test.ui.theme</code> option  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11499">vitest-dev/vitest#11499</a>
<a href="https://github.com/vitest-dev/vitest/commit/1da66405d"><!-- raw
HTML omitted -->(1da66)<!-- raw HTML omitted --></a></li>
<li>Highlight selector multiple matches in trace view  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11489">vitest-dev/vitest#11489</a>
<a href="https://github.com/vitest-dev/vitest/commit/5abba1e1b"><!-- raw
HTML omitted -->(5abba)<!-- raw HTML omitted --></a></li>
<li>Print how many tests were affected and a total when running
<code>--changed</code>  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11424">vitest-dev/vitest#11424</a>
<a href="https://github.com/vitest-dev/vitest/commit/a23368585"><!-- raw
HTML omitted -->(a2336)<!-- raw HTML omitted --></a></li>
<li>Add an option to cache dependencies instead of statically parsing
them  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11515">vitest-dev/vitest#11515</a>
<a href="https://github.com/vitest-dev/vitest/commit/c06012ac8"><!-- raw
HTML omitted -->(c0601)<!-- raw HTML omitted --></a></li>
<li>Add fit and zoom controls to trace viewer  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11490">vitest-dev/vitest#11490</a>
<a href="https://github.com/vitest-dev/vitest/commit/f5dd99ed0"><!-- raw
HTML omitted -->(f5dd9)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Fail the run on git and location filter errors  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11430">vitest-dev/vitest#11430</a>
<a href="https://github.com/vitest-dev/vitest/commit/30d0304d2"><!-- raw
HTML omitted -->(30d03)<!-- raw HTML omitted --></a></li>
<li>Enable fsModuleCache by default  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11435">vitest-dev/vitest#11435</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad208cc29"><!-- raw
HTML omitted -->(ad208)<!-- raw HTML omitted --></a></li>
<li>Track project files and mocks with --changed  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11432">vitest-dev/vitest#11432</a>
<a href="https://github.com/vitest-dev/vitest/commit/b0f2b3bb9"><!-- raw
HTML omitted -->(b0f2b)<!-- raw HTML omitted --></a></li>
<li>Refactor caching, fix <code>:</code> in project and change the shape
of <code>results</code> cache  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11453">vitest-dev/vitest#11453</a>
<a href="https://github.com/vitest-dev/vitest/commit/9673c49a4"><!-- raw
HTML omitted -->(9673c)<!-- raw HTML omitted --></a></li>
<li>Keep full <code>$</code> string values when
<code>taskTitleValueFormatTruncate</code> is 0  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11485">vitest-dev/vitest#11485</a>
<a href="https://github.com/vitest-dev/vitest/commit/4f7e1799b"><!-- raw
HTML omitted -->(4f7e1)<!-- raw HTML omitted --></a></li>
<li>Resolve node builtins in client environments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11417">vitest-dev/vitest#11417</a>
<a href="https://github.com/vitest-dev/vitest/commit/56b319ac6"><!-- raw
HTML omitted -->(56b31)<!-- raw HTML omitted --></a></li>
<li>Fix module graph builtin externals after <a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11421">#11421</a>
 -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11491">vitest-dev/vitest#11491</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11421">vitest-dev/vitest#11421</a>
<a href="https://github.com/vitest-dev/vitest/commit/008e184cb"><!-- raw
HTML omitted -->(008e1)<!-- raw HTML omitted --></a></li>
<li>Wrap module mocks during in-source testing  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11505">vitest-dev/vitest#11505</a>
<a href="https://github.com/vitest-dev/vitest/commit/36d19cb00"><!-- raw
HTML omitted -->(36d19)<!-- raw HTML omitted --></a></li>
<li>Handle line endings in snapshot  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11522">vitest-dev/vitest#11522</a>
<a href="https://github.com/vitest-dev/vitest/commit/4c468aa40"><!-- raw
HTML omitted -->(4c468)<!-- raw HTML omitted --></a></li>
<li>Respect root in projects  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11521">vitest-dev/vitest#11521</a>
<a href="https://github.com/vitest-dev/vitest/commit/26642f793"><!-- raw
HTML omitted -->(26642)<!-- raw HTML omitted --></a></li>
<li>Resolve mocks in directories with spaces  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11539">vitest-dev/vitest#11539</a>
<a href="https://github.com/vitest-dev/vitest/commit/caaef9416"><!-- raw
HTML omitted -->(caaef)<!-- raw HTML omitted --></a></li>
<li><strong>api</strong>:
<ul>
<li>Publish the api token atomically  -  by <a
href="https://github.com/umairnawaz333"><code>@​umairnawaz333</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11323">vitest-dev/vitest#11323</a>
<a href="https://github.com/vitest-dev/vitest/commit/6f990fef1"><!-- raw
HTML omitted -->(6f990)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>browser</strong>:
<ul>
<li>Close the mock route interception race  -  by <a
href="https://github.com/cplieger"><code>@​cplieger</code></a> and <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/8339">vitest-dev/vitest#8339</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11083">vitest-dev/vitest#11083</a>
<a href="https://github.com/vitest-dev/vitest/commit/d6620fae6"><!-- raw
HTML omitted -->(d6620)<!-- raw HTML omitted --></a></li>
<li>Allow toHaveTextContent without arguments  -  by <a
href="https://github.com/nomadical"><code>@​nomadical</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11425">vitest-dev/vitest#11425</a>
<a href="https://github.com/vitest-dev/vitest/commit/8ebcf5f8a"><!-- raw
HTML omitted -->(8ebcf)<!-- raw HTML omitted --></a></li>
<li>Apply API options without browser config  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10852">vitest-dev/vitest#10852</a>
<a href="https://github.com/vitest-dev/vitest/commit/ad055837b"><!-- raw
HTML omitted -->(ad055)<!-- raw HTML omitted --></a></li>
<li>Preserve undefined command arguments  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> and
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11497">vitest-dev/vitest#11497</a>
<a href="https://github.com/vitest-dev/vitest/commit/1576d3d89"><!-- raw
HTML omitted -->(1576d)<!-- raw HTML omitted --></a></li>
<li>Wait for setup mocks before importing a test file  -  by <a
href="https://github.com/kasperpeulen"><code>@​kasperpeulen</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11520">vitest-dev/vitest#11520</a>
<a href="https://github.com/vitest-dev/vitest/commit/b61d1ced3"><!-- raw
HTML omitted -->(b61d1)<!-- raw HTML omitted --></a></li>
<li>Avoid extra scroll outside the iframe  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11523">vitest-dev/vitest#11523</a>
<a href="https://github.com/vitest-dev/vitest/commit/662e8a363"><!-- raw
HTML omitted -->(662e8)<!-- raw HTML omitted --></a></li>
<li>Run browser instances as workers  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11525">vitest-dev/vitest#11525</a>
<a href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc"><!-- raw
HTML omitted -->(bf04b)<!-- raw HTML omitted --></a>
<ul>
<li>⚠️ This can degrade performance if you have a custom
<code>maxWorkers</code> setting. Previously, it was applied incorrectly
and could lead to Vitest using too many resources. For example, a lower
number would still open too many browsers. Fixing it means Vitest opens
less instances by default now.</li>
</ul>
</li>
<li>Open one cdp session per tester  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11542">vitest-dev/vitest#11542</a>
<a href="https://github.com/vitest-dev/vitest/commit/69e6369f6"><!-- raw
HTML omitted -->(69e63)<!-- raw HTML omitted --></a></li>
<li>Clean up unmocked and pending mocks  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11537">vitest-dev/vitest#11537</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c9552173"><!-- raw
HTML omitted -->(5c955)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>coverage</strong>:
<ul>
<li>V8 browser memory leak between test files  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11466">vitest-dev/vitest#11466</a>
<a href="https://github.com/vitest-dev/vitest/commit/2297d93a8"><!-- raw
HTML omitted -->(2297d)<!-- raw HTML omitted --></a></li>
<li><code>allowExternal</code> fails to include uncovered files  -  by
<a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11513">vitest-dev/vitest#11513</a>
<a href="https://github.com/vitest-dev/vitest/commit/4ef000a93"><!-- raw
HTML omitted -->(4ef00)<!-- raw HTML omitted --></a></li>
<li>Filenames containing brackets incorrectly showing as uncovered  - 
by <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a>
in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11531">vitest-dev/vitest#11531</a>
<a href="https://github.com/vitest-dev/vitest/commit/0fa80f53c"><!-- raw
HTML omitted -->(0fa80)<!-- raw HTML omitted --></a></li>
<li>Istanbul coverage wrong when module transform warmups  -  by <a
href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/11529">vitest-dev/vitest#11529</a>
<a href="https://github.com/vitest-dev/vitest/commit/9f61dcca2"><!-- raw
HTML omitted -->(9f61d)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>deps</strong>:
<ul>
<li>Update all non-major dependencies  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11167">vitest-dev/vitest#11167</a>
<a href="https://github.com/vitest-dev/vitest/commit/c74e099a9"><!-- raw
HTML omitted -->(c74e0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>expect</strong>:
<ul>
<li>Fix <code>Map</code> and <code>Set</code> deep equality in some
assertions  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11402">vitest-dev/vitest#11402</a>
<a href="https://github.com/vitest-dev/vitest/commit/b4e79fd7a"><!-- raw
HTML omitted -->(b4e79)<!-- raw HTML omitted --></a></li>
<li>Check value in chai-style returned  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11500">vitest-dev/vitest#11500</a>
<a href="https://github.com/vitest-dev/vitest/commit/1aca02a21"><!-- raw
HTML omitted -->(1aca0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>mocker</strong>:
<ul>
<li>Fix native loader mocking edge cases  -  by <a
href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/11540">vitest-dev/vitest#11540</a>
<a href="https://github.com/vitest-dev/vitest/commit/cd423ba04"><!-- raw
HTML omitted -->(cd423)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pretty-format</strong>:</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40"><code>6a11cf6</code></a>
chore: release v5.0.4 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11554">#11554</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de"><code>58c86ed</code></a>
chore(deps): update all non-major dependencies (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11550">#11550</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/0fa80f53c2afa3429ead7f357f0ad266b39b240a"><code>0fa80f5</code></a>
fix(coverage): filenames containing brackets incorrectly showing as
uncovered...</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc7235949e63490d310cdca00e61b3e4a"><code>bf04b9c</code></a>
fix(browser): run browser instances as workers (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11525">#11525</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/3e3624c5e5ecf77b20065da1aeb60f1182db0ccd"><code>3e3624c</code></a>
refactor: resolve maxWorkers once in config (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11524">#11524</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/26642f7936e04ec2591ad1d9b3500642423ba8ce"><code>26642f7</code></a>
fix: respect root in projects (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11521">#11521</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/c06012ac8419ca4ea14a8808aedc8b0120111f81"><code>c06012a</code></a>
feat(experimental): add an option to cache dependencies instead of
statically...</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/4ef000a938ca3e54eee1c8dd02e2eb9b1afff0c3"><code>4ef000a</code></a>
fix(coverage): <code>allowExternal</code> fails to include uncovered
files (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11513">#11513</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/1da66405d5e979299601a8c7fd13fb0f78e74495"><code>1da6640</code></a>
feat: support <code>test.ui.theme</code> option (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11499">#11499</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/b618afd5cce6a903ca16e0dd9c8f00b58bb0b474"><code>b618afd</code></a>
fix(vm): bind <code>this</code> to <code>module.exports</code> (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11504">#11504</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-15 13:55:23 +00:00
dependabot[bot] edf42be679 chore(deps): Bump react-resizable-panels from 4.14.3 to 4.14.4 in the react group (#2237) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.3 to 4.14.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.4</h2>
<ul>
<li>Fix pointer events in one document affecting groups mounted in
another (e.g. a popup window). The resize cursor is now only shown in
the document that contains the active group. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/762">#762</a></li>
<li>Fix an error thrown by an <code>onLayoutChange</code>,
<code>onLayoutChanged</code>, or <code>onResize</code> callback leaving
a drag stuck in the active state or preventing other groups from being
updated. The error is now re-thrown once all groups have been updated. -
<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/763">#763</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.4</h2>
<ul>
<li>Fix pointer events in one document affecting groups mounted in
another (e.g. a popup window). The resize cursor is now only shown in
the document that contains the active group. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/762">#762</a></li>
<li>Fix an error thrown by an <code>onLayoutChange</code>,
<code>onLayoutChanged</code>, or <code>onResize</code> callback leaving
a drag stuck in the active state or preventing other groups from being
updated. The error is now re-thrown once all groups have been updated. -
<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/763">#763</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/b070a13ecad02ac814a7de85a4a288febdebfb61"><code>b070a13</code></a>
4.14.3 -&gt; 4.14.4</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/cf40d48f1ed06441344c0546411e43c2ab1816fc"><code>cf40d48</code></a>
Defer errors thrown by layout change callbacks so drags always finish
cleanly...</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/ada7a2130f73112c733804cb8bdb4aea7e7ef5b2"><code>ada7a21</code></a>
fix: ignore hit targets from other documents (<a
href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/762">#762</a>)</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/f4c06add8848836e65cbbd20a02f8de0d6be4618"><code>f4c06ad</code></a>
Update CHANGELOG</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.3...4.14.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.3&new-version=4.14.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-14 21:17:00 +00:00
dependabot[bot] 8787a397dc chore(deps): Bump maplibre-gl from 6.13.0 to 6.14.0 (#2236) 
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from
6.13.0 to 6.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's
releases</a>.</em></p>
<blockquote>
<h2>v6.14.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Allow calling <code>new Map({ globalState: { ... }})</code> and
<code>setStyle({ globalState: ... })</code> to provide an initial global
state for the map style, overriding the global state defaults from the
style (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7632">#7632</a>)
(by <a
href="https://github.com/hiddewie"><code>@​hiddewie</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>fix: <code>ScaleControl</code> throwing when its sample points miss
the globe (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8720">#8720</a>)
(by <a
href="https://github.com/SatvikMishra08"><code>@​SatvikMishra08</code></a>)</li>
<li>Fix a rendering crash when <code>removeFeatureState</code> removes a
property before feature state is set (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8715">#8715</a>)
(by <a
href="https://github.com/yeomin4242"><code>@​yeomin4242</code></a>)</li>
<li>Work around blank, unresponsive maps on affected iPadOS 16 Safari
devices (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8364">#8364</a>)
(by <a
href="https://github.com/samuelsmarason"><code>@​samuelsmarason</code></a>)</li>
<li>Fix circles with <code>circle-pitch-alignment: map</code> being
drawn too large while the globe transitions to mercator (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8714">#8714</a>)
(by <a href="https://github.com/heikki"><code>@​heikki</code></a>)</li>
<li>Fix <code>map.resize(eventData, false)</code> constraining the
camera with the <code>vertical-perspective</code> projection (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8695">#8695</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix an uncaught error when <code>setStyle</code> is called while the
WebGL context is lost, since 6.12.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8693">#8693</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix the view sliding hundreds of meters off the center when terrain
is switched on during a gesture (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8688">#8688</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the camera jumping back at the end of a pan, flick or rotation
into terrain (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8692">#8692</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>flyTo</code> dropping the <code>offset</code> and
<code>around</code> options under <code>prefers-reduced-motion</code>,
so a reduced-motion fly lands at the same camera as the animated one (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8730">#8730</a>)
(by <a
href="https://github.com/maartenla"><code>@​maartenla</code></a>)</li>
<li>Fix <code>load</code> and <code>idle</code> never firing when the
last tile fails with a status other than 404 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8733">#8733</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>6.14.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Allow calling <code>new Map({ globalState: { ... }})</code> and
<code>setStyle({ globalState: ... })</code> to provide an initial global
state for the map style, overriding the global state defaults from the
style (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7632">#7632</a>)
(by <a
href="https://github.com/hiddewie"><code>@​hiddewie</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>fix: <code>ScaleControl</code> throwing when its sample points miss
the globe (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8720">#8720</a>)
(by <a
href="https://github.com/SatvikMishra08"><code>@​SatvikMishra08</code></a>)</li>
<li>Fix a rendering crash when <code>removeFeatureState</code> removes a
property before feature state is set (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8715">#8715</a>)
(by <a
href="https://github.com/yeomin4242"><code>@​yeomin4242</code></a>)</li>
<li>Work around blank, unresponsive maps on affected iPadOS 16 Safari
devices (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8364">#8364</a>)
(by <a
href="https://github.com/samuelsmarason"><code>@​samuelsmarason</code></a>)</li>
<li>Fix circles with <code>circle-pitch-alignment: map</code> being
drawn too large while the globe transitions to mercator (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8714">#8714</a>)
(by <a href="https://github.com/heikki"><code>@​heikki</code></a>)</li>
<li>Fix <code>map.resize(eventData, false)</code> constraining the
camera with the <code>vertical-perspective</code> projection (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8695">#8695</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix an uncaught error when <code>setStyle</code> is called while the
WebGL context is lost, since 6.12.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8693">#8693</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Fix the view sliding hundreds of meters off the center when terrain
is switched on during a gesture (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8688">#8688</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix the camera jumping back at the end of a pan, flick or rotation
into terrain (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8692">#8692</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
<li>Fix <code>flyTo</code> dropping the <code>offset</code> and
<code>around</code> options under <code>prefers-reduced-motion</code>,
so a reduced-motion fly lands at the same camera as the animated one (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8730">#8730</a>)
(by <a
href="https://github.com/maartenla"><code>@​maartenla</code></a>)</li>
<li>Fix <code>load</code> and <code>idle</code> never firing when the
last tile fails with a status other than 404 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8733">#8733</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/72927301b7594536630d896c45c64c4d0d4c587f"><code>7292730</code></a>
Bump js version to 6.14.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8737">#8737</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/9d3c6b3fbf7ed80de3647e12aaedb77b20e370b4"><code>9d3c6b3</code></a>
Fix rendering crash when removing a property before feature state is set
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8715">#8715</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/8e23433a1e908fe99e3c026e0cf9b2df3eccb527"><code>8e23433</code></a>
fix: load and idle never firing when the last tile fails with a non-404
statu...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/873377f3752176d80cba25fd7db50f8a8068b7f4"><code>873377f</code></a>
feat: Allow providing initial global state and style transform for map
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8264">#8264</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/5d5dea20251577887eff9652ff009b02903d048a"><code>5d5dea2</code></a>
Keep offset and around when flyTo honors prefers-reduced-motion (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8730">#8730</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/7e493d21b8bcdb1bf741a81be50b19025501c42a"><code>7e493d2</code></a>
fix: <code>ScaleControl</code> throwing when its sample points miss the
globe (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8720">#8720</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/6d26435e525263e6e04926db0a7211613aa8e69e"><code>6d26435</code></a>
chore(deps-dev): bump monocart-coverage-reports from 2.13.0 to 2.13.1
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8728">#8728</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/398f8740025c1973fe90667a8415ad567984be10"><code>398f874</code></a>
chore(deps): bump zensical/zensical from 0.0.67 to 0.0.68 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8729">#8729</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/93f5c6ce4131a1a588ba37c23fb6afece7d36cc5"><code>93f5c6c</code></a>
chore(deps-dev): bump the eslint group with 2 updates (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8724">#8724</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/299ab7e914c3f5ea75ab2a9cfdde5b7ebd6bc45b"><code>299ab7e</code></a>
chore(deps-dev): bump postcss from 8.5.28 to 8.5.29 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8726">#8726</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v6.13.0...v6.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.13.0&new-version=6.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-14 21:14:54 +00:00
dependabot[bot] 61c08d2da0 chore(deps-dev): Bump vite from 8.3.3 to 8.3.4 (#2229) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.3.3 to 8.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.4</h2>
<h3>Features</h3>
<ul>
<li><strong>bundled-dev:</strong> support
<code>import.meta.hot.acceptExports</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>avoid mutating hmr defaults (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>)
(<a
href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li>
<li><strong>build:</strong> correct preloads when chunkImportMap is
enabled with non-root base (<a
href="https://redirect.github.com/vitejs/vite/issues/23698">#23698</a>)
(<a
href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd">2a8c0f0</a>)</li>
<li><strong>build:</strong> wait for in-flight stylesheets in preload
helper (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23652">#23652</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23662">#23662</a>)
(<a
href="https://github.com/vitejs/vite/commit/036b74599b2fe1d8c61475371b856ceb88d26963">036b745</a>)</li>
<li><strong>bundled-dev:</strong> serve <code>/@vite/client</code> and
stub <code>@vite/env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23664">#23664</a>)
(<a
href="https://github.com/vitejs/vite/commit/5afc5a8876624888fc1e8f43fed1c85c4b0e830b">5afc5a8</a>)</li>
<li><strong>client:</strong> skip rewriting unchanged adopted styles (<a
href="https://redirect.github.com/vitejs/vite/issues/23697">#23697</a>)
(<a
href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba">fa71469</a>)</li>
<li><strong>css:</strong> resolve imported preprocessors from their file
path with lightningcss (<a
href="https://redirect.github.com/vitejs/vite/issues/23688">#23688</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9">cf52011</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23648">#23648</a>)
(<a
href="https://github.com/vitejs/vite/commit/8a4c19cfc035f2dd203f2fa6d00ab9256a5e77c9">8a4c19c</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23649">#23649</a>)
(<a
href="https://github.com/vitejs/vite/commit/794516d50cff80e405bc9b3e5faac1c82987566c">794516d</a>)</li>
<li><strong>dev:</strong> a restart requested during a restart used to
be dropped (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23392">#23392</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23484">#23484</a>)
(<a
href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73">70d56ea</a>)</li>
<li>don't treat modules ending with js-like query as js (<a
href="https://redirect.github.com/vitejs/vite/issues/23687">#23687</a>)
(<a
href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0">fcb6f12</a>)</li>
<li><strong>html:</strong> avoid adding filesystem root to watcher (<a
href="https://redirect.github.com/vitejs/vite/issues/23689">#23689</a>)
(<a
href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778">3a7f2ae</a>)</li>
<li><strong>html:</strong> skip caching CSS of chunks in a cycle (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23628">#23628</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23636">#23636</a>)
(<a
href="https://github.com/vitejs/vite/commit/15d82f7dc679ab9c18d5ce2c3711157c2365ddd1">15d82f7</a>)</li>
<li><strong>optimizer:</strong> scan deep imports with custom extensions
(<a
href="https://redirect.github.com/vitejs/vite/issues/23678">#23678</a>)
(<a
href="https://github.com/vitejs/vite/commit/8579189bae8626b6ddab55a09325e209d62e027e">8579189</a>)</li>
<li>remove input option unescaping for now (<a
href="https://redirect.github.com/vitejs/vite/issues/23694">#23694</a>)
(<a
href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6">facc2fb</a>)</li>
<li><strong>server:</strong> match static aliases on path boundaries (<a
href="https://redirect.github.com/vitejs/vite/issues/23643">#23643</a>)
(<a
href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577">b28db28</a>)</li>
<li><strong>watcher:</strong> normalize file before root check in
<code>ensureWatchedFile</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23673">#23673</a>)
(<a
href="https://github.com/vitejs/vite/commit/12bb28c22379c8d2fe90088fa0eefbfa2ab3fb80">12bb28c</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>module-runner:</strong> skip cloning call sites that have no
source map (<a
href="https://redirect.github.com/vitejs/vite/issues/23646">#23646</a>)
(<a
href="https://github.com/vitejs/vite/commit/3d674869a50a0bca84a8cc8dc55bd35d57100e37">3d67486</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>bundled-dev:</strong> import CSS HMR helpers from
<code>/@vite/client</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23674">#23674</a>)
(<a
href="https://github.com/vitejs/vite/commit/182f5b2a65391da5bee05f9c3df1aeb3794e98d9">182f5b2</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4">8.3.4</a>
(2026-10-08)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li><strong>bundled-dev:</strong> support
<code>import.meta.hot.acceptExports</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>)
(<a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>avoid mutating hmr defaults (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>)
(<a
href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li>
<li><strong>build:</strong> correct preloads when chunkImportMap is
enabled with non-root base (<a
href="https://redirect.github.com/vitejs/vite/issues/23698">#23698</a>)
(<a
href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd">2a8c0f0</a>)</li>
<li><strong>build:</strong> wait for in-flight stylesheets in preload
helper (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23652">#23652</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23662">#23662</a>)
(<a
href="https://github.com/vitejs/vite/commit/036b74599b2fe1d8c61475371b856ceb88d26963">036b745</a>)</li>
<li><strong>bundled-dev:</strong> serve <code>/@vite/client</code> and
stub <code>@vite/env</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23664">#23664</a>)
(<a
href="https://github.com/vitejs/vite/commit/5afc5a8876624888fc1e8f43fed1c85c4b0e830b">5afc5a8</a>)</li>
<li><strong>client:</strong> skip rewriting unchanged adopted styles (<a
href="https://redirect.github.com/vitejs/vite/issues/23697">#23697</a>)
(<a
href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba">fa71469</a>)</li>
<li><strong>css:</strong> resolve imported preprocessors from their file
path with lightningcss (<a
href="https://redirect.github.com/vitejs/vite/issues/23688">#23688</a>)
(<a
href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9">cf52011</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23648">#23648</a>)
(<a
href="https://github.com/vitejs/vite/commit/8a4c19cfc035f2dd203f2fa6d00ab9256a5e77c9">8a4c19c</a>)</li>
<li><strong>deps:</strong> update rolldown-related dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23649">#23649</a>)
(<a
href="https://github.com/vitejs/vite/commit/794516d50cff80e405bc9b3e5faac1c82987566c">794516d</a>)</li>
<li><strong>dev:</strong> a restart requested during a restart used to
be dropped (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23392">#23392</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23484">#23484</a>)
(<a
href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73">70d56ea</a>)</li>
<li>don't treat modules ending with js-like query as js (<a
href="https://redirect.github.com/vitejs/vite/issues/23687">#23687</a>)
(<a
href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0">fcb6f12</a>)</li>
<li><strong>html:</strong> avoid adding filesystem root to watcher (<a
href="https://redirect.github.com/vitejs/vite/issues/23689">#23689</a>)
(<a
href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778">3a7f2ae</a>)</li>
<li><strong>html:</strong> skip caching CSS of chunks in a cycle (fix <a
href="https://redirect.github.com/vitejs/vite/issues/23628">#23628</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/23636">#23636</a>)
(<a
href="https://github.com/vitejs/vite/commit/15d82f7dc679ab9c18d5ce2c3711157c2365ddd1">15d82f7</a>)</li>
<li><strong>optimizer:</strong> scan deep imports with custom extensions
(<a
href="https://redirect.github.com/vitejs/vite/issues/23678">#23678</a>)
(<a
href="https://github.com/vitejs/vite/commit/8579189bae8626b6ddab55a09325e209d62e027e">8579189</a>)</li>
<li>remove input option unescaping for now (<a
href="https://redirect.github.com/vitejs/vite/issues/23694">#23694</a>)
(<a
href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6">facc2fb</a>)</li>
<li><strong>server:</strong> match static aliases on path boundaries (<a
href="https://redirect.github.com/vitejs/vite/issues/23643">#23643</a>)
(<a
href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577">b28db28</a>)</li>
<li><strong>watcher:</strong> normalize file before root check in
<code>ensureWatchedFile</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23673">#23673</a>)
(<a
href="https://github.com/vitejs/vite/commit/12bb28c22379c8d2fe90088fa0eefbfa2ab3fb80">12bb28c</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>module-runner:</strong> skip cloning call sites that have no
source map (<a
href="https://redirect.github.com/vitejs/vite/issues/23646">#23646</a>)
(<a
href="https://github.com/vitejs/vite/commit/3d674869a50a0bca84a8cc8dc55bd35d57100e37">3d67486</a>)</li>
</ul>
<h3>Code Refactoring</h3>
<ul>
<li><strong>bundled-dev:</strong> import CSS HMR helpers from
<code>/@vite/client</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23674">#23674</a>)
(<a
href="https://github.com/vitejs/vite/commit/182f5b2a65391da5bee05f9c3df1aeb3794e98d9">182f5b2</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/b6c20f6a8126d8561891e5fb9368e8fc9da37538"><code>b6c20f6</code></a>
release: v8.3.4 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23702">#23702</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577"><code>b28db28</code></a>
fix(server): match static aliases on path boundaries (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23643">#23643</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e"><code>bc0f21c</code></a>
feat(bundled-dev): support <code>import.meta.hot.acceptExports</code>
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23463">#23463</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba"><code>fa71469</code></a>
fix(client): skip rewriting unchanged adopted styles (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23697">#23697</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd"><code>2a8c0f0</code></a>
fix(build): correct preloads when chunkImportMap is enabled with
non-root bas...</li>
<li><a
href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778"><code>3a7f2ae</code></a>
fix(html): avoid adding filesystem root to watcher (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23689">#23689</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6"><code>facc2fb</code></a>
fix: remove input option unescaping for now (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23694">#23694</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73"><code>70d56ea</code></a>
fix(dev): a restart requested during a restart used to be dropped (fix
<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23392">#23392</a>...</li>
<li><a
href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9"><code>cf52011</code></a>
fix(css): resolve imported preprocessors from their file path with
lightningc...</li>
<li><a
href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0"><code>fcb6f12</code></a>
fix: don't treat modules ending with js-like query as js (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23687">#23687</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.3.4/packages/vite">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 15:09:24 +00:00
dependabot[bot] d391a1d2d8 chore(deps): Bump i18next from 26.4.2 to 26.4.3 (#2231) 
Bumps [i18next](https://github.com/i18next/i18next) from 26.4.2 to
26.4.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.4.3</h2>
<ul>
<li>perf: <code>ResourceStore.hasLanguageSomeTranslations()</code> no
longer enumerates every key of a large bundle on each call. It ran
<code>Object.keys()</code> on the whole bundle just to learn whether it
had at least one key, and <code>init()</code> /
<code>changeLanguage()</code> reach it three times per instance (once
while picking the language, twice via
<code>setResolvedLanguage()</code>). With large flat bundles and one
i18next instance per SSR request reusing the same resources, that showed
up as measurable CPU work before any <code>t()</code> call. Bundle
objects already found non-empty are now remembered in a
<code>WeakSet</code> shared across instances, so later checks are O(1):
2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the
same as a one-key bundle. Only the non-empty result is cached. No API
removes single keys from a bundle, so a non-empty bundle stays
non-empty, and empty bundles are re-checked every time, so keys added
later (backend loads, <code>addResource</code>,
<code>addResourceBundle</code>, direct or silent changes) count right
away. The only edge case: a bundle emptied by hand with
<code>delete</code> on every key while it is still in the store keeps
counting as having translations; use <code>removeResourceBundle()</code>
for that. Thanks <a
href="https://github.com/dmchoi77"><code>@​dmchoi77</code></a> for the
detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2449">#2449</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.4.3</h2>
<ul>
<li>perf: <code>ResourceStore.hasLanguageSomeTranslations()</code> no
longer enumerates every key of a large bundle on each call. It ran
<code>Object.keys()</code> on the whole bundle just to learn whether it
had at least one key, and <code>init()</code> /
<code>changeLanguage()</code> reach it three times per instance (once
while picking the language, twice via
<code>setResolvedLanguage()</code>). With large flat bundles and one
i18next instance per SSR request reusing the same resources, that showed
up as measurable CPU work before any <code>t()</code> call. Bundle
objects already found non-empty are now remembered in a
<code>WeakSet</code> shared across instances, so later checks are O(1):
2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the
same as a one-key bundle. Only the non-empty result is cached. No API
removes single keys from a bundle, so a non-empty bundle stays
non-empty, and empty bundles are re-checked every time, so keys added
later (backend loads, <code>addResource</code>,
<code>addResourceBundle</code>, direct or silent changes) count right
away. The only edge case: a bundle emptied by hand with
<code>delete</code> on every key while it is still in the store keeps
counting as having translations; use <code>removeResourceBundle()</code>
for that. Thanks <a
href="https://github.com/dmchoi77"><code>@​dmchoi77</code></a> for the
detailed report (<a
href="https://redirect.github.com/i18next/i18next/issues/2449">#2449</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/0d2845a2360dcc236fe9681f849781f5dfdd35c4"><code>0d2845a</code></a>
26.4.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/a2dbe15e844b7f897ff5851419ba000fbacdbc45"><code>a2dbe15</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/e75843ffeac038a961f91181d963ae4a8f228976"><code>e75843f</code></a>
perf: cache non-empty bundles in hasLanguageSomeTranslations, changelog
v26.4.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/edaea71b729aa54dc35d5e7dfea72b2b12f24a61"><code>edaea71</code></a>
Fix TypeScript examples build and update them to i18next v26 (<a
href="https://redirect.github.com/i18next/i18next/issues/2448">#2448</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/4ebd19d89111fa558d7086f6be64eb748bad6327"><code>4ebd19d</code></a>
docs: &quot;For AI assistants&quot; paragraph in the README and a fuller
saveMissing JSDoc</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.4.2...v26.4.3">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 15:03:20 +00:00
dependabot[bot] 74d6263e2b chore(deps-dev): Bump uuid from 14.0.2 to 14.0.3 (#2232) 
Bumps [uuid](https://github.com/uuidjs/uuid) from 14.0.2 to 14.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uuidjs/uuid/releases">uuid's
releases</a>.</em></p>
<blockquote>
<h2>v14.0.3</h2>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">14.0.3</a>
(2026-10-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>fix CITGM <a
href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a
href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>) (<a
href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac">b44f159</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md">uuid's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">14.0.3</a>
(2026-10-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>fix CITGM <a
href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a
href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>) (<a
href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac">b44f159</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/uuidjs/uuid/commit/993ff7b64a289ef7f921ccafc8bb98ef9461d214"><code>993ff7b</code></a>
chore(main): release 14.0.3 (<a
href="https://redirect.github.com/uuidjs/uuid/issues/982">#982</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/f7d19b9b5fea8671059e58aea380ac546100448c"><code>f7d19b9</code></a>
chore: update workflow actions (<a
href="https://redirect.github.com/uuidjs/uuid/issues/983">#983</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac"><code>b44f159</code></a>
fix: fix CITGM <a
href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a
href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/dd8c173521bb3faacb11ff244233df4a0dcde545"><code>dd8c173</code></a>
chore: update deps (<a
href="https://redirect.github.com/uuidjs/uuid/issues/975">#975</a>)</li>
<li>See full diff in <a
href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uuid&package-manager=npm_and_yarn&previous-version=14.0.2&new-version=14.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:55:10 +00:00
dependabot[bot] 47c00a4bc5 chore(deps): Bump react-resizable-panels from 4.14.2 to 4.14.3 in the react group (#2227) 
Bumps the react group with 1 update:
[react-resizable-panels](https://github.com/bvaughn/react-resizable-panels).

Updates `react-resizable-panels` from 4.14.2 to 4.14.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's
releases</a>.</em></p>
<blockquote>
<h2>4.14.3</h2>
<ul>
<li><a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/761">761</a>
Bugfix: A drag interrupted by <code>pointercancel</code>,
<code>lostpointercapture</code>, or the window losing focus (e.g.
Alt/Cmd+Tab) now ends and commits the current layout, rather than
staying active until the next pointer event</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's
changelog</a>.</em></p>
<blockquote>
<h2>4.14.3</h2>
<ul>
<li>Fix drags interrupted by <code>&quot;pointercancel&quot;</code>,
<code>&quot;lostpointercapture&quot;</code>, or the window losing focus
(e.g. Alt/Cmd+Tab) staying active until the next pointer event. The drag
now ends and commits the current layout. - <a
href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/761">#761</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/6abc6ac81e51819edecd40b71ac2c580f472093a"><code>6abc6ac</code></a>
4.14.2 -&gt; 4.14.3</li>
<li><a
href="https://github.com/bvaughn/react-resizable-panels/commit/5ac3e5cdedbd528588e6abb47648e32287d78e00"><code>5ac3e5c</code></a>
Bugfix: Handle drags interrupted by &quot;pointercancel&quot;,
&quot;lostpointercapture&quot;, or...</li>
<li>See full diff in <a
href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.2...4.14.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.2&new-version=4.14.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:54:39 +00:00
dependabot[bot] f0ed53c4e5 chore(deps-dev): Bump i18next-cli from 1.74.7 to 1.75.2 (#2234) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.7
to 1.75.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.75.2</h2>
<ul>
<li>fix(extract): declarations with the same name in different files no
longer overwrite each other.
Two generated OpenAPI clients that both export <code>components</code>
resolved to whichever file was read first,
so <code>import { components as githubComponents } from
'./github-api'</code> and
<code>import { components as digitalOceanComponents } from
'./digital-ocean-api'</code> extracted the keys of only one
of them, and moving files around changed which. A name now resolves to
the module the file imports it
from, for renamed and plain imports, namespace imports
(<code>GH.components</code>), <code>.js</code> import specifiers and
tsconfig <code>paths</code> aliases. Imports that cannot be traced to a
scanned file (packages, re-exporting barrels)
still resolve by name as before. Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/306">#306</a>.</li>
</ul>
<h2>1.75.1</h2>
<ul>
<li>fix(extract): types and values read through a namespace import
resolve like named imports. With
<code>import * as Types from './types'</code>, a qualified type
(<code>(color: Types.Color) =&gt; …</code>, <code>x as
Types.Color</code>,
<code>FC&lt;Types.Props&gt;</code>, <code>declare const s:
Types.Status</code>) and a namespace member
(<code>Types.SIZES.map(…)</code>,
<code>Types.Status.Done</code>, <code>t(Types.LABELS.save)</code>,
<code>Object.keys(Types.LABELS)</code>) now extract their keys, also
for a namespace re-exported from a barrel (<code>export * as Shared from
'./types'</code>). Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/305">#305</a>.</li>
<li>fix(extract): an exported <code>as const</code> object resolves in
the files that import it: <code>t(LABELS.save)</code> and
<code>Object.keys(LABELS)</code> only worked in the declaring file
before.</li>
<li>fix(extract): a value typed <code>keyof typeof MAP</code> resolves
to the map's keys, so
<code>t(`label.${key}`)</code> with <code>declare const key: keyof
typeof LABELS</code> extracts <code>label.save</code> and
<code>label.cancel</code>. This branch never matched before.</li>
</ul>
<h2>1.75.0</h2>
<ul>
<li>feat(extract): new <code>extract.maxTypeDepth</code> option sets how
many levels of nested object members are
followed when a dynamic key reads a typed value (default: 5). Higher
values cost time and memory on
large recursive types such as OpenAPI schemas. Requested in
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/302#issuecomment-6039348480">#302</a>.</li>
<li>fix(extract): the depth now counts from the type an indexed access
picks instead of from the declared
wrapper type. <code>type Pet = components['schemas']['Pet']</code> gets
the full depth below <code>Pet</code>, where the
<code>components</code>/<code>schemas</code> wrapper used to take two of
the five levels.</li>
<li>fix(extract): numeric keys resolve in object types and indexed
access types, so openapi-typescript
response types work:

<code>operations['getPet']['responses'][200]['content']['application/json']</code>
and
<code>op.responses[200].content['application/json'].status</code>
resolved nothing before.</li>
</ul>
<h2>1.74.8</h2>
<ul>
<li>fix(extract): a commented template literal no longer extracts its
placeholder as a key.
<code>// t(`QUARTER.${q}`)</code> extracted <code>QUARTER.${q}</code>
and <code>// t(`status.${deepObject.status}`)</code> extracted
<code>status.${deepObject.status}</code>. Such a comment now keeps the
existing keys it matches (<code>QUARTER.1</code>,
<code>QUARTER.2</code>, …) even with <code>removeUnusedKeys</code>, the
way a commented static key keeps its key, while code can
still add new matching keys. A pattern without any static part
(<code>`${a}.${b}`</code>) is ignored. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/304">#304</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/540b3beac7737ce066af47875be7f1dd360bd12c"><code>540b3be</code></a>
1.75.2</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/9cc03de706dc8990dc0c801240e1cfea33f7cf37"><code>9cc03de</code></a>
fix(extract): resolve same-named declarations by the module they are
imported...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/dd21f26554aec73b9e2d5d2670ea9ecdc0ad1562"><code>dd21f26</code></a>
1.75.1</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/7c637a89b5e76a29e6e8f063e9901068d10449fa"><code>7c637a8</code></a>
fix(extract): resolve types and values read through a namespace import
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/305">#305</a></li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/ef3ebc58cb1e55d2fbe2d1d418518c8f8b539dd9"><code>ef3ebc5</code></a>
1.75.0</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/33d47ac8d6b8fc2429745a9f43036fea83f4b7ac"><code>33d47ac</code></a>
feat(extract): add maxTypeDepth, count it from the indexed type, resolve
nume...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/747d5e91bc31f866f6bd2048b8efecd4ac8389b4"><code>747d5e9</code></a>
1.74.8</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/a8246695cf1306ff1e7cbf69f62b4941c053bd44"><code>a824669</code></a>
fix(extract): keep the keys a commented template literal matches instead
of e...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.74.7...v1.75.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.7&new-version=1.75.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:53:14 +00:00
dependabot[bot] 890fbf5764 chore(deps): Bump @codemirror/view from 6.43.13 to 6.43.14 (#2235) 
Bumps [@codemirror/view](https://github.com/codemirror/view) from
6.43.13 to 6.43.14.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/view&package-manager=npm_and_yarn&previous-version=6.43.13&new-version=6.43.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:51:51 +00:00
dependabot[bot] 15161f7dd4 chore(deps): Bump maplibre-gl from 6.12.0 to 6.13.0 (#2233) 
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from
6.12.0 to 6.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's
releases</a>.</em></p>
<blockquote>
<h2>v6.13.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Let the globe center reach the poles, where it stopped at 85.05° (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8629">#8629</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Speed up symbol layout by skipping line breaking for labels that fit
on one line (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8617">#8617</a>)
(by <a
href="https://github.com/DoFabien"><code>@​DoFabien</code></a>)</li>
<li>Add experimental
<code>CustomLayerInterface.renderToTerrainTile</code>,
<code>CustomLayerInterface.terrainTileRevision</code> and
<code>renderTerrainHeightMap</code> in the options of
<code>prerender</code>, so custom layers can drape what they draw over
the terrain and place objects on it on the GPU (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8588">#8588</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix a stale cached worker crashing the map after an upgrade: the
worker is self-contained again instead of importing
<code>maplibre-gl-shared.mjs</code>, and its default URL carries the
version as a <code>v</code> query parameter.
<code>maplibre-gl-shared.mjs</code> and
<code>maplibre-gl-shared-dev.mjs</code> are now empty files, kept so
that existing copy steps don't fail; they are deprecated and will be
removed in the next major version (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8621">#8621</a>)
(by <a href="https://github.com/HarelM"><code>@​HarelM</code></a>)</li>
<li>Fix <code>globeDistanceOfLocationsPixels</code> returning
<code>NaN</code> when two copies of the same point have a dot product
slightly above 1 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8624">#8624</a>)(by
<a
href="https://github.com/Dimononon"><code>@​Dimononon</code></a>)</li>
<li>Keep the camera above the terrain, where a scroll zoom into a
mountain could take it under the surface and the zoom's end throw it
kilometers up (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>6.13.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Let the globe center reach the poles, where it stopped at 85.05° (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8629">#8629</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
<li>Speed up symbol layout by skipping line breaking for labels that fit
on one line (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8617">#8617</a>)
(by <a
href="https://github.com/DoFabien"><code>@​DoFabien</code></a>)</li>
<li>Add experimental
<code>CustomLayerInterface.renderToTerrainTile</code>,
<code>CustomLayerInterface.terrainTileRevision</code> and
<code>renderTerrainHeightMap</code> in the options of
<code>prerender</code>, so custom layers can drape what they draw over
the terrain and place objects on it on the GPU (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8588">#8588</a>)
(by <a
href="https://github.com/birkskyum"><code>@​birkskyum</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix a stale cached worker crashing the map after an upgrade: the
worker is self-contained again instead of importing
<code>maplibre-gl-shared.mjs</code>, and its default URL carries the
version as a <code>v</code> query parameter.
<code>maplibre-gl-shared.mjs</code> and
<code>maplibre-gl-shared-dev.mjs</code> are now empty files, kept so
that existing copy steps don't fail; they are deprecated and will be
removed in the next major version (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8621">#8621</a>)
(by <a href="https://github.com/HarelM"><code>@​HarelM</code></a>)</li>
<li>Fix <code>globeDistanceOfLocationsPixels</code> returning
<code>NaN</code> when two copies of the same point have a dot product
slightly above 1 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8624">#8624</a>)(by
<a
href="https://github.com/Dimononon"><code>@​Dimononon</code></a>)</li>
<li>Keep the camera above the terrain, where a scroll zoom into a
mountain could take it under the surface and the zoom's end throw it
kilometers up (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>)
(by <a
href="https://github.com/johncarmack1984"><code>@​johncarmack1984</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/f67ac5e45ce441c6eef7c395ad2bbde7ed717c5d"><code>f67ac5e</code></a>
Bump js version to 6.13.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8685">#8685</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/04761779dd45b4537ce1e3e0aa4054ece9df4497"><code>0476177</code></a>
fix: keep the camera above the terrain (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8547">#8547</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/eaf272ce8b7ef5ebb55f1f3e86cf104d6de0e16d"><code>eaf272c</code></a>
chore(deps-dev): bump shell-quote (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8682">#8682</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/e0a0d7766fbabf7d7da0a27ad07e24b5c1f45dde"><code>e0a0d77</code></a>
chore(deps-dev): bump shell-quote from 1.10.0 to 1.12.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8683">#8683</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/84f4d81ee2f75d32436fa2afc8cc6ac82b947069"><code>84f4d81</code></a>
fix: revert shared mjs file (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8672">#8672</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/f98ef79b472280c9d7d1f0e6c4da3631080e358f"><code>f98ef79</code></a>
Make the 3D Tiles example use maplibre-gl-three, add raycast example (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8567">#8567</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/372a40b821d7fc049c43100934fe6b4e63e2c615"><code>372a40b</code></a>
GM2.14 Move the painter's leftover helpers to their owners (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8678">#8678</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/6ef0e295159fac8bbd71e81fbfc592bd957f5b4e"><code>6ef0e29</code></a>
GM2.13 Remove the style reference from the painter (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8668">#8668</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/5e5ab7e49ad7a3e16eb47a7eda26c98e9d883fc2"><code>5e5ab7e</code></a>
chore(deps): bump the npm_and_yarn group across 4 directories with 3
updates ...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/0343f27a9b7e5f9bec51a4078c974fb61b9e4d69"><code>0343f27</code></a>
chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8676">#8676</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v6.12.0...v6.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.12.0&new-version=6.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:51:48 +00:00
dependabot[bot] cde81d4d7c chore(deps-dev): Bump @playwright/test from 1.63.0 to 1.64.0 (#2230) 
Bumps [@playwright/test](https://github.com/microsoft/playwright) from
1.63.0 to 1.64.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/playwright/releases">@​playwright/test's
releases</a>.</em></p>
<blockquote>
<h2>v1.64.0</h2>
<h2>🧰 WebMCP</h2>
<p>New <a
href="https://playwright.dev/docs/api/class-page#page-webmcp">page.webmcp</a>
and <a
href="https://playwright.dev/docs/api/class-frame#frame-webmcp">frame.webmcp</a>
give access to the tools that a page registers through the experimental
<a href="https://playwright.dev/docs/api/class-webmcp">WebMCP</a>
browser API, so you can test them like any other part of your app:</p>
<pre lang="js"><code>const browser = await chromium.launch({ args:
['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
<p>for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);</p>
<p>const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // &quot;42&quot;
</code></pre></p>
<p><a href="https://playwright.dev/docs/getting-started-mcp">Playwright
MCP</a> also supports WebMCP by default, with page-defined tools offered
to the agent as <code>webmcp_&lt;tool&gt;</code>. Pass
<code>--no-webmcp</code> to opt out.</p>
<p><a
href="https://playwright.dev/docs/getting-started-cli"><code>playwright-cli</code></a>
exposes them as well:</p>
<pre lang="bash"><code>playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params
'{&quot;query&quot;:&quot;cats&quot;}'
</code></pre>
<h2>🎬 Better videos</h2>
<p>Videos can now be recorded at a custom frame rate, and the
decorations for actions are styled with plain CSS:</p>
<pre lang="js"><code>// playwright.config.ts
import { defineConfig } from '@playwright/test';
<p>export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid <a
href="https://redirect.github.com/microsoft/playwright/issues/333">#333</a>;
background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/playwright/commit/606ecd8b34bac100db32561b6278ffd76e5eb3cd"><code>606ecd8</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43192">#43192</a>):
fix(locators): parse locators the way the client API bui...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/e4f872c79530583300185d3e4aa9689e2f85d0b0"><code>e4f872c</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43188">#43188</a>):
feat(api): expose asLocatorDescription via LocalUtils fo...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/f6a439e6f496f75d8e8b687116eef8c21316aa1f"><code>f6a439e</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43189">#43189</a>):
docs(webmcp): expose WebMCP to all languages</li>
<li><a
href="https://github.com/microsoft/playwright/commit/e2335c30f16196a96f81c099598803ca74f9120c"><code>e2335c3</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43174">#43174</a>):
fix(mcp): do not close the browser twice when the client...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/d2a436e0111091ba99836fa6711de28201606cfc"><code>d2a436e</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43163">#43163</a>):
Revert &quot;fix(blob): do not remove existing reports from o...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/a0c4b5efc965577e19f5ebfdcc27f384d3058783"><code>a0c4b5e</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43175">#43175</a>):
feat(api): return language-specific locator code from re...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/3f7d535c7b69ff1997307dc304c3c8c76b51179d"><code>3f7d535</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43131">#43131</a>):
docs: fix broken C# samples in API docs and handles guide</li>
<li><a
href="https://github.com/microsoft/playwright/commit/1cde64f74a0f85304f2f4091a46670bf9a3e0dc3"><code>1cde64f</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43170">#43170</a>):
fix(locators): parse mixed role options</li>
<li><a
href="https://github.com/microsoft/playwright/commit/8851e7296508ae50cd1f822e50d1e4fa92eab218"><code>8851e72</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43171">#43171</a>):
fix(locators): parse JavaScript escapes and regex classes</li>
<li><a
href="https://github.com/microsoft/playwright/commit/dcc50654872510b630c73ec6eba1fb3d625c735e"><code>dcc5065</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/43172">#43172</a>):
fix(locator): parse within and getByRef locators</li>
<li>Additional commits viewable in <a
href="https://github.com/microsoft/playwright/compare/v1.63.0...v1.64.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.63.0&new-version=1.64.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:51:34 +00:00
dependabot[bot] 536e5993f2 chore(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#2226) 
Bumps
[actions/upload-artifact](https://github.com/actions/upload-artifact)
from 7.0.1 to 7.0.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Improves artifact download retries when the service returns HTTP 429
(rate limiting), including honoring valid Retry-After headers.</li>
<li>Updates <code>@​actions/artifact</code> to v6.3.1.</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/tunc-d"><code>@​tunc-d</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/821">actions/upload-artifact#821</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2">https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/upload-artifact/commit/cf430e030ddbb5b0abf93d22962f4752f3646cd9"><code>cf430e0</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/822">#822</a>
from actions/tunc-d-prepare-upload-v7-0-2</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/c2acdedd35a8824a1552c7137f8c18288c3ea469"><code>c2acded</code></a>
chore: prepare v7.0.2 release</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/4687c1bbaa0a58abb517d90b4bbade6754c80c1a"><code>4687c1b</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/821">#821</a>
from actions/tunc-d-upload-artifact-package-bump</li>
<li><a
href="https://github.com/actions/upload-artifact/commit/8cbe1bebdb858105d8fdd88f81404d4de4595719"><code>8cbe1be</code></a>
Bump <code>@​actions/artifact</code> to 6.3.1</li>
<li>See full diff in <a
href="https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=7.0.1&new-version=7.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:33:01 +00:00
dependabot[bot] afca3e28f4 chore(deps): Bump the codeql-action group with 3 updates (#2224) 
Bumps the codeql-action group with 3 updates:
[github/codeql-action/init](https://github.com/github/codeql-action),
[github/codeql-action/autobuild](https://github.com/github/codeql-action)
and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a>
from github/update-v4.38.3-e0b52dbdc</li>
<li><a
href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a>
Add changelog note for <a
href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a>
Update changelog for v4.38.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a>
from github/henrymercer/pin-python-for-older-clis-in-ci</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a>
Pin Python 3.13.15 for older CLI versions in multi-language check</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a>
from github/update-bundle/codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a>
Update default bundle to codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a>
from github/mbg/esm/migrate-pr-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a>
Replace <code>__dirname</code> in <code>sync.ts</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/autobuild` from 4.38.2 to 4.38.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a>
from github/update-v4.38.3-e0b52dbdc</li>
<li><a
href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a>
Add changelog note for <a
href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a>
Update changelog for v4.38.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a>
from github/henrymercer/pin-python-for-older-clis-in-ci</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a>
Pin Python 3.13.15 for older CLI versions in multi-language check</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a>
from github/update-bundle/codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a>
Update default bundle to codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a>
from github/mbg/esm/migrate-pr-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a>
Replace <code>__dirname</code> in <code>sync.ts</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.20.7. <a
href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li>
</ul>
<h2>4.38.3 - 08 Oct 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier
were discontinued on 24 September 2026 alongside GitHub Enterprise
Server 3.17, and will be unsupported by the next minor release of the
CodeQL Action. Added a deprecation warning for customers using these
versions of CodeQL. <a
href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li>
<li>Fixed a bug where the decision of whether to use a per-language
bundle did not account for custom configurations that reference queries
outside of compiled CodeQL packs. This issue was caught during internal
testing and did not affect any customer repositories. We will resume the
roll out of per-language bundles in the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li>
</ul>
<h2>4.38.2 - 24 Sept 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li>
</ul>
<h2>4.38.1 - 18 Sept 2026</h2>
<ul>
<li>The CodeQL Action now has experimental support for CodeQL releases
for which per-language bundles are available. Per-language bundles
support analysis for a single language and are therefore smaller than
the combined bundles that allow analysis for all supported languages. As
a result, per-language bundles take up less space on disk and are faster
to download. We expect to roll this change out to everyone in the coming
weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li>
</ul>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
<h2>4.37.4 - 29 Jul 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a>
from github/update-v4.38.3-e0b52dbdc</li>
<li><a
href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a>
Add changelog note for <a
href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a>
Update changelog for v4.38.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a>
from github/henrymercer/pin-python-for-older-clis-in-ci</li>
<li><a
href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a>
Pin Python 3.13.15 for older CLI versions in multi-language check</li>
<li><a
href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a>
from github/update-bundle/codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a>
Update default bundle to codeql-bundle-v2.27.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a>
from github/mbg/esm/migrate-pr-checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a>
Replace <code>__dirname</code> in <code>sync.ts</code></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-13 14:31:53 +00:00
zstadlerandClaude 28917685f7 Fix map staying blank until moved (#2217) 
If the style arrives before the map's initial `style.load`,
`componentDidUpdate` skips `setStyle` because `state.map` is still null.
The `setState` on `style.load` is then blocked by
`shouldComponentUpdate`, because `JSON.stringify` throws on the MapLibre
`Map` in state, so the style is only applied after a later prop change,
e.g. moving the map.

Fix: `shouldComponentUpdate` compares state fields by reference instead
of stringifying them. `zoom` is excluded: it changes on every zoom frame
but is only read when a layer popup opens.

## Launch Checklist

 - [x] Briefly describe the changes in this PR.
 - [ ] ~~Link to related issues.~~
- [ ] ~~Include before/after visuals or gifs if this PR includes visual
changes.~~
 - [ ] ~~Write tests for all new functionality.~~ (removed per review)
 - [x] Add an entry to `CHANGELOG.md` under the `## main` section.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01WDkBFXcoMv8K4QSHA6P3Fg


---
_Generated by [Claude Code](https://claude.ai/code)_

---------

Co-authored-by: Claude <noreply@anthropic.com>
 2026-10-11 17:06:18 +03:00
dependabot[bot] 688a75bb69 chore(deps-dev): Bump handlebars from 4.7.9 to 4.7.10 (#2222) 
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js)
from 4.7.9 to 4.7.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/handlebars-lang/handlebars.js/releases">handlebars's
releases</a>.</em></p>
<blockquote>
<h2>v4.7.10</h2>
<ul>
<li>security: Sanitize the source map URL when minifying - f37c599</li>
<li>security: Iterate lazily in #each and strip whitespace in linear
time - 812c226</li>
<li>security: Escape <code>&lt;!--</code> and <code>&lt;script</code> in
precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li>
<li>security: Don't trust special properties on context data - ceec388
GHSA-p8wg-vrv2-v86f</li>
<li>security: Only compile partials that are template strings -
c28ee7a</li>
<li>security: Only dispatch known node types in the Compiler and Visitor
- 7d501a5</li>
<li>security: Validate AST values in the compiler instead of the parser
- 703fdcc GHSA-8r5x-fm3f-whwj</li>
<li>Clarify that --root does not restrict filesystem access -
0fcf25c</li>
<li>Bump minimist to ^1.2.8 - ea8ed82</li>
<li>Fix Ruby component publishing documentation - d069c1c</li>
<li>Fix Composer component definition - 6714e07</li>
</ul>
<p>Compatibility notes:</p>
<ul>
<li><code>{{#each}}</code> iterates iterables such as <code>Map</code>,
<code>Set</code> and generators lazily, like <code>for...of</code>,
instead of
copying them into an array first. Values added to the iterable while the
block renders are now visited too.</li>
</ul>
<p><a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">Commits</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md">handlebars's
changelog</a>.</em></p>
<blockquote>
<h2>v4.7.10 - October 5th, 2026</h2>
<ul>
<li>security: Sanitize the source map URL when minifying - f37c599</li>
<li>security: Iterate lazily in #each and strip whitespace in linear
time - 812c226</li>
<li>security: Escape <code>&lt;!--</code> and <code>&lt;script</code> in
precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li>
<li>security: Don't trust special properties on context data - ceec388
GHSA-p8wg-vrv2-v86f</li>
<li>security: Only compile partials that are template strings -
c28ee7a</li>
<li>security: Only dispatch known node types in the Compiler and Visitor
- 7d501a5</li>
<li>security: Validate AST values in the compiler instead of the parser
- 703fdcc GHSA-8r5x-fm3f-whwj</li>
<li>Clarify that --root does not restrict filesystem access -
0fcf25c</li>
<li>Bump minimist to ^1.2.8 - ea8ed82</li>
<li>Fix Ruby component publishing documentation - d069c1c</li>
<li>Fix Composer component definition - 6714e07</li>
</ul>
<p>Compatibility notes:</p>
<ul>
<li><code>{{#each}}</code> iterates iterables such as <code>Map</code>,
<code>Set</code> and generators lazily, like <code>for...of</code>,
instead of
copying them into an array first. Values added to the iterable while the
block renders are now visited too.</li>
</ul>
<p><a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">Commits</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e"><code>45ce152</code></a>
v4.7.10</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8"><code>e47b236</code></a>
Update release notes</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0"><code>f37c599</code></a>
Sanitize the source map URL when minifying</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca"><code>812c226</code></a>
Iterate lazily in #each and strip whitespace in linear time</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"><code>609d1b1</code></a>
Escape <code>&lt;!--</code> and <code>&lt;script</code> in precompiled
output</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa"><code>ceec388</code></a>
Don't trust special properties on context data</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98"><code>c28ee7a</code></a>
Only compile partials that are template strings</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1"><code>7d501a5</code></a>
Only dispatch known node types in the Compiler and Visitor</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2"><code>703fdcc</code></a>
Validate AST values in the compiler instead of the parser</li>
<li><a
href="https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d"><code>0fcf25c</code></a>
Clarify that --root does not restrict filesystem access</li>
<li>Additional commits viewable in <a
href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.7.9&new-version=4.7.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 14:09:21 +00:00
dependabot[bot] 247d8d4de3 chore(deps-dev): Bump vite from 8.3.2 to 8.3.3 (#2221) 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 8.3.2 to 8.3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.3.3</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update launch-editor to v2.14.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/23654">#23654</a>)
(<a
href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097">22fd1d5</a>)</li>
<li><strong>html:</strong> filename passed to transformIndexHtml should
not include queries (<a
href="https://redirect.github.com/vitejs/vite/issues/23653">#23653</a>)
(<a
href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17">7dafd8e</a>)</li>
<li><strong>server:</strong> check <code>fs.serve</code> for
<code>?vite-wasm-instance</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23655">#23655</a>)
(<a
href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73">ba8b7ab</a>)</li>
<li><strong>server:</strong> store ids to <code>safeModulePaths</code>
rather than URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23656">#23656</a>)
(<a
href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905">c3e06f9</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.3.2...v8.3.3">8.3.3</a>
(2026-10-06)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update launch-editor to v2.14.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/23654">#23654</a>)
(<a
href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097">22fd1d5</a>)</li>
<li><strong>html:</strong> filename passed to transformIndexHtml should
not include queries (<a
href="https://redirect.github.com/vitejs/vite/issues/23653">#23653</a>)
(<a
href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17">7dafd8e</a>)</li>
<li><strong>server:</strong> check <code>fs.serve</code> for
<code>?vite-wasm-instance</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23655">#23655</a>)
(<a
href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73">ba8b7ab</a>)</li>
<li><strong>server:</strong> store ids to <code>safeModulePaths</code>
rather than URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/23656">#23656</a>)
(<a
href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905">c3e06f9</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/fea5b21dd9524ed7308632407b996f1fe5942c9c"><code>fea5b21</code></a>
release: v8.3.3 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23657">#23657</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905"><code>c3e06f9</code></a>
fix(server): store ids to <code>safeModulePaths</code> rather than URLs
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23656">#23656</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73"><code>ba8b7ab</code></a>
fix(server): check <code>fs.serve</code> for
<code>?vite-wasm-instance</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23655">#23655</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097"><code>22fd1d5</code></a>
fix(deps): update launch-editor to v2.14.2 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23654">#23654</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17"><code>7dafd8e</code></a>
fix(html): filename passed to transformIndexHtml should not include
queries (...</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v8.3.3/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.3.2&new-version=8.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 14:03:54 +00:00
dependabot[bot] a3453a50d4 chore(deps-dev): Bump typescript-eslint from 8.71.0 to 8.71.1 (#2219) 
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
from 8.71.0 to 8.71.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.71.1</h2>
<h2>8.71.1 (2026-10-05)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-misused-promises] skip argument
checks for calls without arguments (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12923">#12923</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unused-vars] report
usedOnlyAsType for partially exported merged declarations (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12892">#12892</a>)</li>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] use
array argument type constraint (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12919">#12919</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unsafe-enum-assignment] skip
identical types and bound deep type walks (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12957">#12957</a>)</li>
<li><strong>eslint-plugin:</strong> [no-confusing-void-expression] don't
autofix when declared return type is unknown (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12930">#12930</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] check the
constrained type (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12953">#12953</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters]
count instantiated mapped type constraints (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12941">#12941</a>)</li>
<li><strong>project-service:</strong> throttle cleanup when opening
files (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12934">#12934</a>)</li>
<li><strong>type-utils:</strong> match re-exports and global
declarations in <code>TypeOrValueSpecifier</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12943">#12943</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Diptajoy Mistry <a
href="https://github.com/diptomistry"><code>@​diptomistry</code></a></li>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Josh Goldberg</li>
<li>Josh Goldberg ✨</li>
<li>Medhansh Poojari</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.71.1 (2026-10-05)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/d57b8da272375b6a45270639894a793933208a91"><code>d57b8da</code></a>
chore(release): publish 8.71.1</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.0&new-version=8.71.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 14:02:13 +00:00
dependabot[bot] 56539785c3 chore(deps-dev): Bump i18next-cli from 1.74.5 to 1.74.7 (#2220) 
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.5
to 1.74.7.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2>1.74.7</h2>
<ul>
<li>fix(extract): a selector <code>i18nKey</code> on <code>&lt;Trans
t={t}&gt;</code> now routes into the hook's namespaces the same way
<code>t()</code> does, matching react-i18next 17.0.16. With <code>const
{ t } = useTranslation(['ns1', 'ns2'])</code>,
<code>&lt;Trans t={t} i18nKey={$ =&gt; $.ns2.message} /&gt;</code> was
filed as <code>ns1:ns2.message</code>; it is now filed as
<code>ns2:message</code>, like <code>t($ =&gt; $.ns2.message)</code>.
Under <code>types.enableSelector: 'strict'</code> a leading primary
namespace is stripped too (<code>useTranslation('only')</code> with
<code>$ =&gt; $.only.key</code> files <code>only:key</code>). Reported
in
<a
href="https://redirect.github.com/i18next/react-i18next/issues/1933">react-i18next#1933</a>.</li>
<li>fix(extract): the props of a component typed
<code>React.FC&lt;Props&gt;</code> (also <code>FC</code>,
<code>FunctionComponent</code>),
<code>forwardRef&lt;Ref, Props&gt;(…)</code> or
<code>memo&lt;Props&gt;(…)</code> are typed by <code>Props</code>, and
iterating a typed member binds
the element. <code>props.colors.map((color) =&gt;
t(\</code>Color.${color}`))<code>with</code>colors:
Color[]<code>extracted nothing before unless</code>color<code>was
asserted with</code>as Color<code>. Arrays of objects work the same way:
</code>props.items.map(({ kind }) =&gt; …)<code>, </code>for (const item
of props.items)<code>and a destructured</code>({ items }) =&gt;
items.map(…)`. Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/303">#303</a>.</li>
</ul>
<h2>1.74.6</h2>
<ul>
<li>fix(extract): iterating an inline array literal binds the element
like iterating a named constant
does. <code>([1, 2, 3, 4] as const).map((q) =&gt;
t(\</code>QUARTER.${q}`))<code>, </code>for (const unit of ['day',
'hour'] as const)`
and inline arrays of objects extracted nothing before. Fixes
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/301">#301</a>.</li>
<li>fix(extract): members of nested object types resolve.
<code>t(\</code>barStatus.${deepObject.Bar.status}`)<code>and</code>t(`fooBarStatus.${deepObject.Foo.Bar.status}`)<code>
now extract the nested union's values, also through references to other
types, optional chaining (</code>pet.category?.kind<code>),
destructuring (</code>const { kind } = pet.category<code>) and indexed
access types (</code>DeepObject['Bar']['status']<code>,
</code>components['schemas']['Pet']<code>), so types generated by
openapi-typescript work. Nested members are followed up to five levels
below the declared type, as in
</code>components.schemas.Pet.category.kind`.
Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/302">#302</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/32291d28be792d4d318da94f4a27bb22d7053dde"><code>32291d2</code></a>
1.74.7</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/8b3717d07f5b6733872dfc602613e80ec02c8817"><code>8b3717d</code></a>
fix(extract): type component props from React.FC, forwardRef and memo <a
href="https://redirect.github.com/i18next/i18next-cli/issues/303">#303</a></li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/4c6314ab14e0bb17ad81e07ee53d309b0a3bc2cc"><code>4c6314a</code></a>
fix(extract): route a Trans selector key into the t prop's namespaces
like t()</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/7f7e635fd9af6110a212f5916bdcfb1e6201250a"><code>7f7e635</code></a>
1.74.6</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/a56b05fbccba966fb1ac8bcbf576903da3b4c48f"><code>a56b05f</code></a>
fix(extract): resolve inline array literals and nested object types <a
href="https://redirect.github.com/i18next/i18next-cli/issues/301">#301</a>
<a
href="https://redirect.github.com/i18next/i18next-cli/issues/302">#302</a></li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.74.5...v1.74.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.5&new-version=1.74.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-09 13:57:19 +00:00