editor

mirror of https://github.com/maputnik/editor.git synced 2026-10-25 12:23:47 +00:00

Author	SHA1	Message	Date
dependabot[bot]	d113745d39	chore(deps): Bump react-resizable-panels from 4.14.6 to 4.14.7 in the react group (#2259 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.14.6 to 4.14.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.7</h2> <ul> <li>Improve mount performance for groups with many panels by skipping redundant constraint recalculations and subscriber notifications when a <code>Panel</code>'s <code>disabled</code> prop has not changed. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/768">#768</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.7</h2> <ul> <li>Improve mount performance for groups with many panels by skipping redundant constraint recalculations and subscriber notifications when a <code>Panel</code>'s <code>disabled</code> prop has not changed. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/768">#768</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/da1f5c16d9ba3f2767f4ff310f2cc642577757cd"><code>da1f5c1</code></a> 4.14.6 -> 4.14.7</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/c8433978136e756bfef196c02e8f59a6f6550de9"><code>c843397</code></a> perf: skip unchanged panel prop updates (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/768">#768</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/bb08b8724eb8a40f7246ca79c6d0424441ac3606"><code>bb08b87</code></a> Update react-lib-tools to 0.0.67</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.6...4.14.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.6&new-version=4.14.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-23 14:04:07 +00:00
dependabot[bot]	92e28a4874	chore(deps): Bump i18next from 26.5.2 to 26.5.3 (#2261 ) Bumps [i18next](https://github.com/i18next/i18next) from 26.5.2 to 26.5.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v26.5.3</h2> <ul> <li>fix(types): with the selector API, a plural key now requires <code>count</code> also when the call passes an explicit <code>ns</code>. <code>t(($) => $.item)</code> already failed without <code>count</code>, but <code>t(($) => $.item, { ns: 'items' })</code> compiled, although at runtime it looks up <code>item</code> instead of <code>item_one</code> / <code>item_other</code> and returns the key. It now fails the same way, also with <code>ordinal: true</code>, <code>defaultValue</code>, an <code>ns</code> array, a key prefix and <code>i18n.t</code>. Calls with <code>count</code>, <code>context</code>, <code>returnObjects: true</code> and arrays of selectors, as well as return types, are unchanged. Thanks <a href="https://github.com/nyarthan"><code>@nyarthan</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2452">#2452</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>26.5.3</h2> <ul> <li>fix(types): with the selector API, a plural key now requires <code>count</code> also when the call passes an explicit <code>ns</code>. <code>t(($) => $.item)</code> already failed without <code>count</code>, but <code>t(($) => $.item, { ns: 'items' })</code> compiled, although at runtime it looks up <code>item</code> instead of <code>item_one</code> / <code>item_other</code> and returns the key. It now fails the same way, also with <code>ordinal: true</code>, <code>defaultValue</code>, an <code>ns</code> array, a key prefix and <code>i18n.t</code>. Calls with <code>count</code>, <code>context</code>, <code>returnObjects: true</code> and arrays of selectors, as well as return types, are unchanged. Thanks <a href="https://github.com/nyarthan"><code>@nyarthan</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2452">#2452</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/f7d95939e7b9d52a2095dbe3808ddbd89662b1b2"><code>f7d9593</code></a> 26.5.3</li> <li><a href="https://github.com/i18next/i18next/commit/a19e0f90edc9b0117280e45851a3dd4d02a627eb"><code>a19e0f9</code></a> changelog for 26.5.3</li> <li><a href="https://github.com/i18next/i18next/commit/124d04eebcbcaa7cc2b79ee365633e4e1725c16d"><code>124d04e</code></a> fix(types): require count for explicit-ns plural selectors (<a href="https://redirect.github.com/i18next/i18next/issues/2452">#2452</a>)</li> <li>See full diff in <a href="https://github.com/i18next/i18next/compare/v26.5.2...v26.5.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.5.2&new-version=26.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-23 13:59:12 +00:00
dependabot[bot]	293a849976	chore(deps): Bump @codemirror/view from 6.43.14 to 6.43.15 (#2260 ) Bumps [@codemirror/view](https://github.com/codemirror/view) from 6.43.14 to 6.43.15. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/codemirror/view/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/view&package-manager=npm_and_yarn&previous-version=6.43.14&new-version=6.43.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-23 13:55:28 +00:00
dependabot[bot]	efe357fea5	chore(deps-dev): Bump typescript-eslint from 8.71.2 to 8.72.0 (#2262 ) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.71.2 to 8.72.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.72.0</h2> <h2>8.72.0 (2026-10-19)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> lazy load rules (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13010">#13010</a>)</li> <li><strong>eslint-plugin:</strong> [await-thenable] add <code>allowMixedPromiseArrays</code> option (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12992">#12992</a>)</li> <li><strong>typescript-estree:</strong> error on abstract keyword that precedes export (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13019">#13019</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>ast-spec:</strong> add <code>JSXFragment</code> to <code>JSXAttribute['value']</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13051">#13051</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-readonly-parameter-types] check where allowed type aliases are declared (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13016">#13016</a>)</li> <li><strong>eslint-plugin:</strong> [no-deprecated] report deprecated properties in object literals (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12704">#12704</a>)</li> <li><strong>eslint-plugin:</strong> use isTypeLiteralType instead of type.isLiteral() to include bigint literals on TS < 5.0 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13053">#13053</a>)</li> <li><strong>eslint-plugin:</strong> [require-array-sort-compare] check tuples (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13058">#13058</a>)</li> <li><strong>eslint-plugin:</strong> [require-array-sort-compare] ignore extra this type argument on TS < 5.1 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13055">#13055</a>)</li> <li><strong>type-utils:</strong> discriminateAnyType crashes when calling getAwaitedType on awaited type in TS < 5.0 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13054">#13054</a>)</li> <li><strong>typescript-estree:</strong> include leading and trailing comments & whitespace in Program range (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12991">#12991</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Junichiro Kasuya <a href="https://github.com/jksy"><code>@jksy</code></a></li> <li>Mitch Fultz <a href="https://github.com/fitchmultz"><code>@fitchmultz</code></a></li> <li>Shaan GS <a href="https://github.com/ShaanGS"><code>@ShaanGS</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.72.0 (2026-10-19)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a4c2603d3e4fd43b33bc25b82457716e9f7cef71"><code>a4c2603</code></a> chore(release): publish 8.72.0</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.2&new-version=8.72.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-23 13:54:32 +00:00
dependabot[bot]	cd1bc5aeed	chore(deps-dev): Bump postcss from 8.5.30 to 8.5.31 (#2258 ) Bumps [postcss](https://github.com/postcss/postcss) from 8.5.30 to 8.5.31. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.31</h2> <ul> <li>Fix better source map on <code></style></code> escaping (by <a href="https://github.com/firefoxic"><code>@firefoxic</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.31</h2> <ul> <li>Fix better source map on <code></style></code> escaping (by <a href="https://github.com/firefoxic"><code>@firefoxic</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/d1908579d6af4155ee5f759030184fb4c2b575ec"><code>d190857</code></a> Release 8.5.31 version</li> <li><a href="https://github.com/postcss/postcss/commit/4ef6d8cc0307df09c21a63b5521285657966ece3"><code>4ef6d8c</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/6abd674231f7867d1c37e6b71bc8d6e00165fd27"><code>6abd674</code></a> Call the builder with every node when the output is escaped (<a href="https://redirect.github.com/postcss/postcss/issues/2175">#2175</a>)</li> <li>See full diff in <a href="https://github.com/postcss/postcss/compare/8.5.30...8.5.31">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.30&new-version=8.5.31)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-22 14:19:25 +00:00
dependabot[bot]	0171daeea8	chore(deps): Bump react-resizable-panels from 4.14.5 to 4.14.6 in the react group (#2257 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.14.5 to 4.14.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.6</h2> <ul> <li>Fix <code>F6</code> and <code>Shift+F6</code> keyboard navigation trying to focus disabled separators. Disabled separators are now skipped. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/767">#767</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.6</h2> <ul> <li>Fix <code>F6</code> and <code>Shift+F6</code> keyboard navigation trying to focus disabled separators. Disabled separators are now skipped. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/767">#767</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/bbc47aaf4fce78e7f424b7e1e6dcf22a2b0fbe57"><code>bbc47aa</code></a> 4.14.5 -> 4.14.6</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/90cb7a4197187621a947474a004ab5bec7107b0e"><code>90cb7a4</code></a> Tidying up</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/c8367d2f875aa8c977137a0f8a37e9db1e751d52"><code>c8367d2</code></a> Skip disabled separators during F6 keyboard navigation (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/767">#767</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/4b6332ab872ff32faf4c08751ee3b07a14bf9548"><code>4b6332a</code></a> Update react-lib-tools dev dependency</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.5...4.14.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.5&new-version=4.14.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-22 14:12:35 +00:00
dependabot[bot]	d281e87069	chore(deps): Bump maplibre-gl from 6.14.0 to 6.15.0 (#2255 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.14.0 to 6.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.15.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add <code>dragRotate: {around: 'pointer'}</code> to turn and tilt the map around the point under the pointer, and <code>{around: 'center', movement: 'circular' \| 'linear'}</code>, which replaces the deprecated <code>aroundCenter</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8628">#8628</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Redraw fewer layers on terrain when a custom layer's <code>terrainTileRevision</code> or a feature state changes (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8782">#8782</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Support the <code>hash</code> option in a projection registered with <code>addProjection</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8743">#8743</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Add experimental <code>addProjection</code>, <code>removeProjection</code>, a built-in <code>identity</code> projection and a <code>{bbox}</code> tile URL token for maps in a custom planar CRS with its own quad tile grid (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/168">#168</a>, <a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/5764">#5764</a>)</li> <li>Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8535">#8535</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Project GeoJSON sources on a map in a registered CRS, in the workers, from a <code>definition</code> string and a projection handler (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8736">#8736</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Support OpenType <code>vert</code> forms in vertical labels rendered with <code>font-faces</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8489">#8489</a>) (by <a href="https://github.com/NEKOYASAN"><code>@NEKOYASAN</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix a map in a registered projection going blank when its center crosses 180° (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8802">#8802</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8803">#8803</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8780">#8780</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8741">#8741</a>) (by <a href="https://github.com/crackalamoo"><code>@crackalamoo</code></a>)</li> <li>Fix <code>setWorkerUrl</code> treating a <code>.cjs</code> fragment or query marker as a module worker URL (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8769">#8769</a>) (by <a href="https://github.com/Anandb71"><code>@Anandb71</code></a>)</li> <li>Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8765">#8765</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix the camera dropping to sea level while the terrain under the center of a <code>jumpTo</code>, <code>easeTo</code> or <code>flyTo</code> loads (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8549">#8549</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8705">#8705</a>) (by <a href="https://github.com/tordans"><code>@tordans</code></a>)</li> <li>Fix the globe drag rounding its rotation to single precision (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8784">#8784</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>load</code> and <code>idle</code> firing before the other tiles finish loading when one tile fails (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8785">#8785</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Avoid using <code>.innerHTML = …</code> for the Popup close icon (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8795">#8795</a>) (by <a href="https://github.com/k-yle"><code>@k-yle</code></a>)</li> <li>Fix a GeoJSON feature without coordinates staying out of the tiles after <code>updateData</code> gives it some, by updating geojson-vt to 6.3.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8797">#8797</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.15.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add <code>dragRotate: {around: 'pointer'}</code> to turn and tilt the map around the point under the pointer, and <code>{around: 'center', movement: 'circular' \| 'linear'}</code>, which replaces the deprecated <code>aroundCenter</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8628">#8628</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Redraw fewer layers on terrain when a custom layer's <code>terrainTileRevision</code> or a feature state changes (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8782">#8782</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Support the <code>hash</code> option in a projection registered with <code>addProjection</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8743">#8743</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Add experimental <code>addProjection</code>, <code>removeProjection</code>, a built-in <code>identity</code> projection and a <code>{bbox}</code> tile URL token for maps in a custom planar CRS with its own quad tile grid (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/168">#168</a>, <a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/5764">#5764</a>)</li> <li>Speed up tile loading by skipping point labels in the tile buffer, which the neighbouring tile draws (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8535">#8535</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Project GeoJSON sources on a map in a registered CRS, in the workers, from a <code>definition</code> string and a projection handler (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8736">#8736</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Support OpenType <code>vert</code> forms in vertical labels rendered with <code>font-faces</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8489">#8489</a>) (by <a href="https://github.com/NEKOYASAN"><code>@NEKOYASAN</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix a map in a registered projection going blank when its center crosses 180° (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8802">#8802</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix world projections like Equal Earth throwing and jumping when the mouse is in the space around the world (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8803">#8803</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Work around a regression in Safari 26.6 and later where the map stops loading tiles after the page was in the background (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8780">#8780</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix labels in Brahmic scripts such as Devanagari, Thai and Telugu mixing fonts or dropping letters when the style has a glyphs URL (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8741">#8741</a>) (by <a href="https://github.com/crackalamoo"><code>@crackalamoo</code></a>)</li> <li>Fix <code>setWorkerUrl</code> treating a <code>.cjs</code> fragment or query marker as a module worker URL (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8769">#8769</a>) (by <a href="https://github.com/Anandb71"><code>@Anandb71</code></a>)</li> <li>Fix the terrain not finding a tile's own DEM data when the DEM source's maxzoom is below the terrain tile zoom (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8765">#8765</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix the camera dropping to sea level while the terrain under the center of a <code>jumpTo</code>, <code>easeTo</code> or <code>flyTo</code> loads (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8549">#8549</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix a grid of lines along tile borders in line layers of sliced overzoomed tiles when the source tile extent is larger than 4096, by scaling the clip buffer with the extent (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8705">#8705</a>) (by <a href="https://github.com/tordans"><code>@tordans</code></a>)</li> <li>Fix the globe drag rounding its rotation to single precision (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8784">#8784</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>load</code> and <code>idle</code> firing before the other tiles finish loading when one tile fails (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8785">#8785</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Avoid using <code>.innerHTML = …</code> for the Popup close icon (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8795">#8795</a>) (by <a href="https://github.com/k-yle"><code>@k-yle</code></a>)</li> <li>Fix a GeoJSON feature without coordinates staying out of the tiles after <code>updateData</code> gives it some, by updating geojson-vt to 6.3.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8797">#8797</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/638b3f9ecab4b743fd4d086d3bfd19bce7b7b032"><code>638b3f9</code></a> Bump js version to 6.15.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8812">#8812</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/ddf4cc611392d9489fa6edb2e464165e1c2d75eb"><code>ddf4cc6</code></a> Fix registered projections going blank when the center crosses 180° (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8802">#8802</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/c8e4e34f9880d1d51a1a3ec8b54e67c694ccc173"><code>c8e4e34</code></a> fix: world projections throwing and wrapping past their edge (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8803">#8803</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/7ec75354566c464df70cd67ae50cfaaa2f431b55"><code>7ec7535</code></a> first step towards supporting trusted-types (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8795">#8795</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/fc1aa1cd7539ab50e4451d7175e30fa95f41ddf3"><code>fc1aa1c</code></a> docs: separate a registered CRS from the tile grid its sources are cut in (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8">#8</a>...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/1897306104320058fd0bb492691384f1c9e0b64c"><code>1897306</code></a> feat: support dragRotate around pointer (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8628">#8628</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/17ad56d0e253ae4b6cbc4d6fab50009be2f26e2f"><code>17ad56d</code></a> docs: show how custom layers place positions on a registered CRS (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8806">#8806</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/fe339621bb436ea8ce39373c43d337eec8376551"><code>fe33962</code></a> fix: keep GeoJSON at the far pole of a polar projection off the map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8798">#8798</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/17eb78b3b3dbf633ed01a73b3aeedd4fd46103ec"><code>17eb78b</code></a> chore: bump <code>@maplibre/geojson-vt</code> to 6.3.0 and pass its coordinates and wrap o...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/6c2784f7adda6d138e8ef13ccc2acaf7825f3be8"><code>6c2784f</code></a> refactor: rename CRSDefinition to CRS and its wkt to definition (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8787">#8787</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.14.0...v6.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.14.0&new-version=6.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-21 13:57:20 +00:00
dependabot[bot]	057a6a07d8	chore(deps): Bump i18next from 26.4.7 to 26.5.2 (#2256 ) [//]: # (dependabot-start) ⚠️ Dependabot is rebasing this PR ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [i18next](https://github.com/i18next/i18next) from 26.4.7 to 26.5.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v26.5.2</h2> <ul> <li>fix(types): on TypeScript 7, a <code>t()</code> call with a missing, misspelled or wrongly typed option now reports that option again (<code>Property 'album' is missing</code>, <code>Type 'string' is not assignable to type 'number'</code>), as TypeScript 5 and 6 do. TypeScript 7 elaborated the error against the default-value signature instead and ended in <code>'{ count: 3; albm: "Summer"; }' is not assignable to type 'string'</code>: on a failed call TypeScript explains the last of the equally matching signatures, and TypeScript 7 sorts the 3-element <code>[key, defaultValue, options?]</code> last. It is now written as two signatures, <code>[key, defaultValue]</code> and <code>[key, defaultValue, options]</code>. This affects the default key checks with i18next <code>{{name}}</code> messages as well as <code>parseInterpolation: 'icu'</code> and <code>'mf2'</code>. Which calls compile, their return types and the error positions are unchanged on TypeScript 5.9, 6 and 7.</li> </ul> <h2>v26.5.1</h2> <ul> <li>perf(types): type-checking <code>t()</code> calls against a large namespace is no longer quadratic in the number of keys. TypeScript does not cache <code>keyof</code> of an object type, and the types rebuilt the union of all keys of a namespace once per key while building the key union, and again in every <code>t()</code> call to look up the return type. Both now use a cached key union, and a literal key is looked up directly instead of being intersected with every key. With 5,000 keys in one namespace and one call per key, the check time went from 14.8s to 1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return types and errors are unchanged.</li> <li>perf(types): the selector API (<code>enableSelector: true</code> / <code>'strict'</code>) with <code>context</code> is no longer quadratic in the size of an object. To decide which keys a context keeps, the types scanned all keys of the object once for every key, also when TypeScript checks the selector with <code>context</code> widened to <code>string</code>. With 1,000 keys plus one context variant each, a namespace took 18.7s and failed with "Type instantiation is excessively deep and possibly infinite" (TS2589); 2,500 and more ran out of memory. The context variants of an object are now collected once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in 3.1s. Long keys (whole sentences with <code>keySeparator: false</code>) work as before. Selected values and errors are unchanged.</li> </ul> <h2>v26.5.0</h2> <ul> <li>feat(types): <code>parseInterpolation: 'icu'</code> and <code>parseInterpolation: 'mf2'</code> type <code>t()</code> options from the message's ICU MessageFormat arguments (i18next-icu) or MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer need <code>parseInterpolation: false</code> and lose argument checking. Missing, misspelled and wrongly typed arguments fail, and so does leaving out the options for a message with arguments (<code>t('greeting')</code>); that error names the missing arguments. Opt-in, default <code>true</code> is unchanged. <ul> <li>ICU: <code>{name}</code> takes <code>string \| number</code>, <code>{n, number}</code>, <code>plural</code> and <code>selectordinal</code> take <code>number</code>, <code>{d, date}</code> and <code>{t, time}</code> take <code>Date</code>, <code>select</code> takes its case keys or any string (for <code>other</code>), and arguments nested in cases are required too. <code>#</code> and tags are not arguments, apostrophe quoting is read like intl-messageformat does.</li> <li>MF2: <code>{$name}</code> takes <code>string \| number</code>, a variable annotated with <code>:number</code>, <code>:integer</code>, <code>:currency</code>, <code>:percent</code> or <code>:unit</code> (inline or through <code>.input</code> / <code>.local</code>) takes <code>number</code>, <code>:datetime</code>, <code>:date</code> and <code>:time</code> take <code>Date</code>, <code>:string</code> takes <code>string</code>, option and markup variables (<code>minimumFractionDigits=$digits</code>, <code>{#link href=$url}</code>) are required too, <code>.local</code> variables are not arguments, and <code>\|quoted literals\|</code> and <code>\{</code> escapes are skipped.</li> <li><code>interpolationFormatTypeMap</code> overrides a type by ICU format or MF2 function name, e.g. <code>date: Date \| number</code> or a custom <code>uppercase: string</code>.</li> <li>Applies to <code>t()</code>, <code>getFixedT()</code>, <code>i18n.t</code>, key prefixes, namespaces, the selector API and react-i18next's <code>Trans</code> <code>values</code>. Messages need literal types, as the resources file from i18next-cli's <code>types</code> command has them.</li> <li>Type-check cost with 1,000 messages and one call each: 1.35s instead of 0.86s with <code>false</code> (TypeScript 6), 0.5s instead of 0.26s with TypeScript 7. Messages that no call uses cost nothing.</li> </ul> </li> <li>fix(types): with the default (non-strict) key checks, an options object with a missing or misspelled interpolation variable now reports the missing variable (<code>Property 'name' is missing</code>) instead of <code>'{ nmae: string }' is not assignable to type 'string'</code> from the default-value overload.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>26.5.2</h2> <ul> <li>fix(types): on TypeScript 7, a <code>t()</code> call with a missing, misspelled or wrongly typed option now reports that option again (<code>Property 'album' is missing</code>, <code>Type 'string' is not assignable to type 'number'</code>), as TypeScript 5 and 6 do. TypeScript 7 elaborated the error against the default-value signature instead and ended in <code>'{ count: 3; albm: "Summer"; }' is not assignable to type 'string'</code>: on a failed call TypeScript explains the last of the equally matching signatures, and TypeScript 7 sorts the 3-element <code>[key, defaultValue, options?]</code> last. It is now written as two signatures, <code>[key, defaultValue]</code> and <code>[key, defaultValue, options]</code>. This affects the default key checks with i18next <code>{{name}}</code> messages as well as <code>parseInterpolation: 'icu'</code> and <code>'mf2'</code>. Which calls compile, their return types and the error positions are unchanged on TypeScript 5.9, 6 and 7.</li> </ul> <h2>26.5.1</h2> <ul> <li>perf(types): type-checking <code>t()</code> calls against a large namespace is no longer quadratic in the number of keys. TypeScript does not cache <code>keyof</code> of an object type, and the types rebuilt the union of all keys of a namespace once per key while building the key union, and again in every <code>t()</code> call to look up the return type. Both now use a cached key union, and a literal key is looked up directly instead of being intersected with every key. With 5,000 keys in one namespace and one call per key, the check time went from 14.8s to 1.1s (TypeScript 6); with 1,000 keys from 0.75s to 0.27s. Keys, return types and errors are unchanged.</li> <li>perf(types): the selector API (<code>enableSelector: true</code> / <code>'strict'</code>) with <code>context</code> is no longer quadratic in the size of an object. To decide which keys a context keeps, the types scanned all keys of the object once for every key, also when TypeScript checks the selector with <code>context</code> widened to <code>string</code>. With 1,000 keys plus one context variant each, a namespace took 18.7s and failed with "Type instantiation is excessively deep and possibly infinite" (TS2589); 2,500 and more ran out of memory. The context variants of an object are now collected once, in one pass over its keys: 1,000 keys check in 0.69s, 5,000 in 3.1s. Long keys (whole sentences with <code>keySeparator: false</code>) work as before. Selected values and errors are unchanged.</li> </ul> <h2>26.5.0</h2> <ul> <li>feat(types): <code>parseInterpolation: 'icu'</code> and <code>parseInterpolation: 'mf2'</code> type <code>t()</code> options from the message's ICU MessageFormat arguments (i18next-icu) or MessageFormat 2 variables (i18next-mf2), so ICU and MF2 users no longer need <code>parseInterpolation: false</code> and lose argument checking. Missing, misspelled and wrongly typed arguments fail, and so does leaving out the options for a message with arguments (<code>t('greeting')</code>); that error names the missing arguments. Opt-in, default <code>true</code> is unchanged. <ul> <li>ICU: <code>{name}</code> takes <code>string \| number</code>, <code>{n, number}</code>, <code>plural</code> and <code>selectordinal</code> take <code>number</code>, <code>{d, date}</code> and <code>{t, time}</code> take <code>Date</code>, <code>select</code> takes its case keys or any string (for <code>other</code>), and arguments nested in cases are required too. <code>#</code> and tags are not arguments, apostrophe quoting is read like intl-messageformat does.</li> <li>MF2: <code>{$name}</code> takes <code>string \| number</code>, a variable annotated with <code>:number</code>, <code>:integer</code>, <code>:currency</code>, <code>:percent</code> or <code>:unit</code> (inline or through <code>.input</code> / <code>.local</code>) takes <code>number</code>, <code>:datetime</code>, <code>:date</code> and <code>:time</code> take <code>Date</code>, <code>:string</code> takes <code>string</code>, option and markup variables (<code>minimumFractionDigits=$digits</code>, <code>{#link href=$url}</code>) are required too, <code>.local</code> variables are not arguments, and <code>\|quoted literals\|</code> and <code>\{</code> escapes are skipped.</li> <li><code>interpolationFormatTypeMap</code> overrides a type by ICU format or MF2 function name, e.g. <code>date: Date \| number</code> or a custom <code>uppercase: string</code>.</li> <li>Applies to <code>t()</code>, <code>getFixedT()</code>, <code>i18n.t</code>, key prefixes, namespaces, the selector API and react-i18next's <code>Trans</code> <code>values</code>. Messages need literal types, as the resources file from i18next-cli's <code>types</code> command has them.</li> <li>Type-check cost with 1,000 messages and one call each: 1.35s instead of 0.86s with <code>false</code> (TypeScript 6), 0.5s instead of 0.26s with TypeScript 7. Messages that no call uses cost nothing.</li> </ul> </li> <li>fix(types): with the default (non-strict) key checks, an options object with a missing or misspelled interpolation variable now reports the missing variable (<code>Property 'name' is missing</code>) instead of <code>'{ nmae: string }' is not assignable to type 'string'</code> from the default-value overload.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/c46ea5c301c049d17e47412b1b64a94b54c1bb97"><code>c46ea5c</code></a> 26.5.2</li> <li><a href="https://github.com/i18next/i18next/commit/d798f0e703d49770f4016deb483945eecd3e59f3"><code>d798f0e</code></a> fix(types): report the wrong t() option on TypeScript 7</li> <li><a href="https://github.com/i18next/i18next/commit/dabd9f60d849d66936baca4adbca7e349f459069"><code>dabd9f6</code></a> 26.5.1</li> <li><a href="https://github.com/i18next/i18next/commit/01c3852d941d2dad503ff477755e0c489f3d75ee"><code>01c3852</code></a> perf(types): no quadratic type-check time for large namespaces</li> <li><a href="https://github.com/i18next/i18next/commit/64b9da8bfd6d1e2a58eef23ed885b5ab60a412f1"><code>64b9da8</code></a> 26.5.0</li> <li><a href="https://github.com/i18next/i18next/commit/2468227c924204a6fafcf78ff615d7a232e9a07a"><code>2468227</code></a> feat(types): parseInterpolation 'icu' and 'mf2' type t() options from ICU arg...</li> <li>See full diff in <a href="https://github.com/i18next/i18next/compare/v26.4.7...v26.5.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.7&new-version=26.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-21 13:55:11 +00:00
dependabot[bot]	ccfe624ac6	chore(deps-dev): Bump i18next-cli from 1.75.3 to 1.77.0 (#2254 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.75.3 to 1.77.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.77.0</h2> <ul> <li>feat(types): with <code>extract.messageFormat: 'icu'</code> or <code>'mf2'</code>, a newly generated <code>i18next.d.ts</code> sets <code>parseInterpolation: 'icu'</code> or <code>'mf2'</code> when the project's i18next is 26.5.0 or later, so <code>t()</code> options are type-checked against the arguments of each message. With i18next 26.2.0 to 26.4.x it still sets <code>parseInterpolation: false</code>. The version is read from <code>node_modules/i18next/package.json</code>, from the working directory upwards (hoisted monorepo installs count); without an installed i18next it stays <code>false</code>. The warning for an existing <code>i18next.d.ts</code> without <code>parseInterpolation</code> suggests the value for your i18next version, and an existing file that still sets <code>false</code> although your i18next supports the typed value gets a hint.</li> <li>docs(skill): the ICU and MF2 reference describes <code>parseInterpolation: 'icu'</code> / <code>'mf2'</code>.</li> </ul> <h2>1.76.0</h2> <ul> <li>feat: new <code>extract.messageFormat</code> option, <code>'i18next'</code> (default), <code>'icu'</code> (<a href="https://github.com/i18next/i18next-icu">i18next-icu</a>) or <code>'mf2'</code> (<a href="https://github.com/i18next/i18next-mf2">i18next-mf2</a>), for the syntax of your translation values.</li> <li>feat(extract): with <code>messageFormat: 'icu'</code> or <code>'mf2'</code>, <code>extract</code> writes one key per message. <code>t('photos', '{count, plural, ...}', { count })</code> gave <code>photos_one</code> and <code>photos_other</code> (plus <code>_few</code> and <code>_many</code> for languages like Polish), keys i18next-icu and i18next-mf2 never read, and <code>context</code> gave <code>_male</code> keys; now it gives <code>photos</code>. <code>$t()</code> in a value is no longer read as nesting, and the children of <code><Trans></code> are written with <code>{name}</code> (ICU) or <code>{$name}</code> (MF2) instead of <code>{{name}}</code>, which ICU and MF2 rendered as text.</li> <li>feat(extract): <code>IcuTrans</code> and <code>IcuTransWithoutContext</code> are extracted, also when imported under another name (key from <code>i18nKey</code>, or <code>defaultTranslation</code> when there is none), and so are the <code>Trans</code>, <code>Plural</code>, <code>Select</code> and <code>SelectOrdinal</code> components of <code>react-i18next/icu.macro</code>, with the message the macro builds (<code><Trans>Welcome, <strong>{name}</strong>!</Trans></code> gives <code>Welcome, <0>{name}</0>!</code>). Before, <code>IcuTrans</code> was not extracted, and the macro <code><Trans></code> was read as react-i18next <code>Trans</code> and written as <code>Welcome, <strong>{{name}}</strong>!</code>, which the compiled <code>IcuTrans</code> rendered as text.</li> <li>feat(status): with <code>messageFormat: 'icu'</code> or <code>'mf2'</code>, a plural or select message counts as one key, so <code>status</code> no longer reports missing <code>_few</code> and <code>_many</code> keys.</li> <li>feat(instrument): with <code>messageFormat: 'icu'</code> or <code>'mf2'</code>, <code>instrument</code> writes <code>{name}</code> / <code>{$name}</code> placeholders, a <code>count === 1 ? … : …</code> ternary becomes one plural message instead of <code>defaultValue_one</code> / <code>defaultValue_other</code>, and the i18n init file it creates registers <code>i18next-icu</code> (with <code>intl-messageformat</code> in the install hint) or <code>i18next-mf2</code>.</li> <li>feat(extract, instrument): with <code>messageFormat: 'icu'</code> or <code>'mf2'</code>, the text around converted placeholders (<code>Trans</code> values, <code>instrument</code>) is escaped: <code>File '{{name}}' not found</code> becomes <code>File ''{name}' not found</code>, because an apostrophe before <code>{</code> starts quoted text in ICU and <code>'{name}'</code> would render as the text <code>{name}</code>; literal braces are quoted (ICU) or escaped (MF2).</li> <li>feat(lint): with <code>messageFormat: 'icu'</code> or <code>'mf2'</code>, <code>lint</code> parses every value in the translation files of all locales and reports, with file, key and line (JSON files): <ul> <li>syntax errors with the parser's message (<code>greeting: ICU syntax error: EXPECT_ARGUMENT_CLOSING_BRACE at column 7</code>), with a hint when the value contains i18next's <code>{{</code></li> <li>argument names that differ from the primary language, so a renamed or missing <code>{name}</code> is caught (<code>#</code> is not an argument)</li> <li>plural categories that do not fit the locale, for <code>plural</code> and <code>selectordinal</code> (MF2: <code>.match</code> on <code>:number</code> or <code>:integer</code>). Allowed are the locale's CLDR categories, required are <code>other</code> plus every category a whole number from 0 to 1000 selects: <code>ru</code> needs <code>one</code>, <code>few</code> and <code>many</code>, while <code>fr</code>, <code>es</code>, <code>it</code> and <code>pt</code> may leave out <code>many</code> (only from 1,000,000) and <code>cs</code> its <code>many</code> (fractions only), and <code>zero</code> in <code>en</code> is reported as never used. Exact selectors like <code>=0</code> are allowed and count for a category when they cover every whole number it is used for (<code>=1</code> covers <code>one</code> in <code>en</code>, not in <code>ru</code>, where <code>one</code> is also 21, 31, ...). For a locale <code>Intl</code> does not know only <code>other</code> is required.</li> </ul> </li> <li>fix(lint): with <code>messageFormat: 'icu'</code> or <code>'mf2'</code>, the <code>t()</code> interpolation check reads the arguments with the same parser. ICU braces like <code>male {{name}}</code> are no longer taken for <code>{{name}}</code> interpolation (which reported the <code>gender</code> passed to a select as unused), and <code>t('greeting', 'Hello {name}', { nmae })</code> is reported.</li> <li>feat(types): with <code>messageFormat: 'icu'</code> or <code>'mf2'</code>, a newly generated <code>i18next.d.ts</code> sets <code>parseInterpolation: false</code> (i18next 26.2.0+), so ICU and MF2 plurals no longer break the type-safe <code>t</code>. For an existing file without it, <code>types</code> prints a warning.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/933364ee283b2b6a805ad1ae8c936a01a2de2dae"><code>933364e</code></a> 1.77.0</li> <li><a href="https://github.com/i18next/i18next-cli/commit/2916f1b31425dcffffc9b2e6abc8436341f36473"><code>2916f1b</code></a> update i18next deps</li> <li><a href="https://github.com/i18next/i18next-cli/commit/b7d07e784e4832a0e452afaf4640755461569638"><code>b7d07e7</code></a> feat(types): write parseInterpolation 'icu' / 'mf2' for i18next 26.5.0 or later</li> <li><a href="https://github.com/i18next/i18next-cli/commit/71194cce275ba105f399e7d8aa01c7f58d76bdde"><code>71194cc</code></a> test(lint): platform paths in the ICU/MF2 lint tests, so they pass on Windows</li> <li><a href="https://github.com/i18next/i18next-cli/commit/1ea83288d0a247a28cbf87a36f3a516ee7ba4396"><code>1ea8328</code></a> 1.76.0</li> <li><a href="https://github.com/i18next/i18next-cli/commit/faa93a34705f0ae0cda8866e5e08943ef7579c86"><code>faa93a3</code></a> fix(extract, instrument): escape ICU/MF2 text, register the plugin in the ini...</li> <li><a href="https://github.com/i18next/i18next-cli/commit/a87f01fcb4836935afb840629c9b63f73d7a4839"><code>a87f01f</code></a> feat(extract, status, instrument): one key per ICU/MF2 message, IcuTrans and ...</li> <li><a href="https://github.com/i18next/i18next-cli/commit/e9b1f5642a95a638ff60a2194c0b039d633a1f66"><code>e9b1f56</code></a> feat(lint, types): ICU and MF2 support with the new extract.messageFormat option</li> <li><a href="https://github.com/i18next/i18next-cli/commit/6d2202d02dbb962c454ee496b12ac865d0027dba"><code>6d2202d</code></a> README: add Awesome Claude Code badge next to the skill install badge</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.75.3...v1.77.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.75.3&new-version=1.77.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-21 13:54:07 +00:00
dependabot[bot]	b1ffd828ea	chore(deps): Bump react-i18next from 17.0.21 to 17.1.0 in the react group (#2253 ) Bumps the react group with 1 update: [react-i18next](https://github.com/i18next/react-i18next). Updates `react-i18next` from 17.0.21 to 17.1.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.1.0</h2> <ul> <li>feat(types): with i18next's new <code>parseInterpolation: 'icu'</code> (or <code>'mf2'</code>) type option (i18next v26.5.0), the <code>values</code> of <code>IcuTrans</code> and <code>IcuTransWithoutContext</code> are typed from the message of <code>i18nKey</code>, like the options of <code>t()</code>: a misspelled argument, a value of the wrong type or a value meant for another key is a type error. <code>values</code> was <code>Record<string, any></code> before, and still is with any other <code>parseInterpolation</code> setting. <code>values</code> stays optional, as on <code>Trans</code>. <code>useTranslation</code>'s <code>t</code> and <code>Trans</code> <code>values</code> get the checks from i18next's types without changes here.</li> <li>fix(types): <code>IcuTrans</code> and <code>IcuTransWithoutContext</code> now infer the literal <code>i18nKey</code> (<code>const</code> type parameter, as <code>Trans</code> does), so props that depend on the key are checked against that key instead of all keys of the namespace.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/d3b12369660975aa73e8c2648de5e7cfa4fcbc57"><code>d3b1236</code></a> 17.1.0</li> <li><a href="https://github.com/i18next/react-i18next/commit/efed87d91449ad3cfcbdfd0d9ec3b24ff19691fb"><code>efed87d</code></a> chore: i18next ^26.5.0 for the parseInterpolation 'icu' / 'mf2' type tests</li> <li><a href="https://github.com/i18next/react-i18next/commit/6300ae2e5860c00e34c8157ec4203c99204fefeb"><code>6300ae2</code></a> feat(types): IcuTrans values typed from the message under parseInterpolation ...</li> <li>See full diff in <a href="https://github.com/i18next/react-i18next/compare/v17.0.21...v17.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.21&new-version=17.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-21 13:52:39 +00:00
dependabot[bot]	37d8a9fa1d	chore(deps-dev): Bump eslint from 10.12.0 to 10.13.0 (#2252 ) Bumps [eslint](https://github.com/eslint/eslint) from 10.12.0 to 10.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.13.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/48d5cc47e43478670ccf95a74f7a73e8408152b5"><code>48d5cc4</code></a> feat: report references inside IIFEs in <code>no-use-before-define</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21238">#21238</a>) (Irfan fandi)</li> <li><a href="https://github.com/eslint/eslint/commit/a39d9fb1fdb5db546f6407580cac531ba3370450"><code>a39d9fb</code></a> feat: add <code>globalThis</code> to <code>no-obj-calls</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21382">#21382</a>) (synthex-byte)</li> <li><a href="https://github.com/eslint/eslint/commit/66ac58383e076940c11a5d7213ad079028d1140e"><code>66ac583</code></a> feat: check <code>yield*</code> expressions in <code>no-unsafe-optional-chaining</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21399">#21399</a>) (xbinaryx)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/87bd2cef7b2309739c29598fb2be335f4bed71a3"><code>87bd2ce</code></a> fix: avoid redeclared <code>let</code> when <code>no-var</code> and <code>one-var</code> fix together (<a href="https://redirect.github.com/eslint/eslint/issues/21389">#21389</a>) (Daniel Pinto)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/4783a6806fb73ea4843ac46c6ae3d8285f56c288"><code>4783a68</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/43f0ac90e7858a834a0e68309e6397fb4cfa72dd"><code>43f0ac9</code></a> docs: clarify parameter description in <code>getText</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21287">#21287</a>) (lumir)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/b59d889c7c18d8c73144e6ba46e9e7f3e7da0196"><code>b59d889</code></a> chore: update github/codeql-action action to v4.38.3 (<a href="https://redirect.github.com/eslint/eslint/issues/21412">#21412</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/95e51a0518b15015304eca9844b3f64c1fc167ca"><code>95e51a0</code></a> ci: re-enable <code>@typescript-eslint/typescript-eslint</code> in ecosystem tests (<a href="https://redirect.github.com/eslint/eslint/issues/21410">#21410</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/317fcb365f19e912a60d171a9d5a8d1f16fe4660"><code>317fcb3</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21409">#21409</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/b92decf8ead7cc4082a18a4a0ab28f3c7c589887"><code>b92decf</code></a> perf: skip no-redeclare scan for single-declaration variables (<a href="https://redirect.github.com/eslint/eslint/issues/21365">#21365</a>) (James Ross)</li> <li><a href="https://github.com/eslint/eslint/commit/47b7063b3f3f7bc7a5bcb87c082577e4e8b96e24"><code>47b7063</code></a> chore: update dependency <code>@eslint/json</code> to ^2.1.1 (<a href="https://redirect.github.com/eslint/eslint/issues/21398">#21398</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/e5aea414cc00555ecd43f6e608bf80e0f9a6d4d6"><code>e5aea41</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21390">#21390</a>) (ESLint Bot)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/4637f9827a1ba137498eaee70957850621082815"><code>4637f98</code></a> 10.13.0</li> <li><a href="https://github.com/eslint/eslint/commit/96df05ceb7000813859acf16a690f8a8bbbea904"><code>96df05c</code></a> Build: changelog update for 10.13.0</li> <li><a href="https://github.com/eslint/eslint/commit/4783a6806fb73ea4843ac46c6ae3d8285f56c288"><code>4783a68</code></a> docs: Update README</li> <li><a href="https://github.com/eslint/eslint/commit/b59d889c7c18d8c73144e6ba46e9e7f3e7da0196"><code>b59d889</code></a> chore: update github/codeql-action action to v4.38.3 (<a href="https://redirect.github.com/eslint/eslint/issues/21412">#21412</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/95e51a0518b15015304eca9844b3f64c1fc167ca"><code>95e51a0</code></a> ci: re-enable <code>@typescript-eslint/typescript-eslint</code> in ecosystem tests (<a href="https://redirect.github.com/eslint/eslint/issues/21410">#21410</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/317fcb365f19e912a60d171a9d5a8d1f16fe4660"><code>317fcb3</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21409">#21409</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/48d5cc47e43478670ccf95a74f7a73e8408152b5"><code>48d5cc4</code></a> feat: report references inside IIFEs in <code>no-use-before-define</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21238">#21238</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/43f0ac90e7858a834a0e68309e6397fb4cfa72dd"><code>43f0ac9</code></a> docs: clarify parameter description in <code>getText</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21287">#21287</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/a39d9fb1fdb5db546f6407580cac531ba3370450"><code>a39d9fb</code></a> feat: add <code>globalThis</code> to <code>no-obj-calls</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21382">#21382</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/b92decf8ead7cc4082a18a4a0ab28f3c7c589887"><code>b92decf</code></a> perf: skip no-redeclare scan for single-declaration variables (<a href="https://redirect.github.com/eslint/eslint/issues/21365">#21365</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.12.0...v10.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=10.12.0&new-version=10.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-20 17:23:01 +00:00
dependabot[bot]	52eaba41e0	chore(deps): Bump react-i18next from 17.0.19 to 17.0.21 in the react group (#2251 ) Bumps the react group with 1 update: [react-i18next](https://github.com/i18next/react-i18next). Updates `react-i18next` from 17.0.19 to 17.0.21 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.0.21</h2> <ul> <li>fix(IcuTrans): explicit <code>values</code> now win over <code>interpolation.defaultVariables</code>, as they do in <code>t()</code>. <code>IcuTrans</code> merged them the other way round, so <code><IcuTrans values={{ user: 'John Doe' }} /></code> rendered the configured default variable <code>user</code> instead of <code>John Doe</code>. <code>Trans</code> had the same inverted merge and is fixed too. Compatibility note: only names that are set both in <code>values</code> and in <code>defaultVariables</code> render differently.</li> <li>feat: new entry point <code>react-i18next/IcuTransWithoutContext</code> (with types) for React Server Components. Importing <code>IcuTransWithoutContext</code> from <code>react-i18next</code> in a Server Component could fail the build with <code>createContext is not a function</code>, because the main entry creates the React context when it is loaded. Like <code>react-i18next/TransWithoutContext</code>, the new entry point does not.</li> <li>fix(build): the ESM build's <code>dist/es/package.json</code> now declares <code>"sideEffects": false</code>, like the root <code>package.json</code> already did. Bundlers use the nearest <code>package.json</code>, so the ESM build counted as having side effects and unused exports were kept: an app that only uses <code>Trans</code> still bundled <code>IcuTrans</code> with its HTML entity decoder, <code>useTranslation</code> and <code>use-sync-external-store</code>. With esbuild, a <code>Trans</code>-only bundle (React and i18next external) goes from 20.9 KB to 11.6 KB minified, 8.3 KB to 5.0 KB gzipped.</li> <li>docs: the <code>icu.macro</code> Babel macro is now marked as deprecated in favour of using <code>IcuTrans</code> directly. It fails on Babel 8 (<code>t.jSXIdentifier is not a function</code>), <code><Plural count={count}></code> renders the raw ICU message, and a React <code>key</code> on <code><Plural></code>/<code><Select></code> becomes an ICU case. It keeps working on Babel 7 and is not removed. The <code>IcuTrans</code> docs page has a corrected example and props table and covers Server Components.</li> </ul> <h2>17.0.20</h2> <ul> <li>fix: <code>useTranslation</code> no longer suspends when a missing namespace is loaded by a synchronous backend. With <code>useSuspense</code> (the default), a namespace that wasn't in the store yet always made the component throw the loading promise, even when the backend had already delivered the resources while that promise was being created. React then showed the <code>Suspense</code> fallback and rendered again right away, which appears as a fallback flash (a white flash in React Native) and costs performance. The hook now starts the load first, checks the store again and only suspends if the namespace is still missing. This helps every backend that calls back synchronously, for example <code>i18next-resources-to-backend</code> with a static resources object or a loader that returns the data directly. Async backends, and an instance that isn't initialized yet, still suspend as before. Thanks <a href="https://github.com/oblador"><code>@oblador</code></a> (<a href="https://redirect.github.com/i18next/react-i18next/pull/1937">#1937</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/64a3d1360fd0bf2f49652c09881be04a5e22082f"><code>64a3d13</code></a> 17.0.21</li> <li><a href="https://github.com/i18next/react-i18next/commit/c7e1c80f066abb68dc1399e3a069e0a5b7dddaa8"><code>c7e1c80</code></a> fix(IcuTrans): explicit values win over defaultVariables, RSC entry point, ES...</li> <li><a href="https://github.com/i18next/react-i18next/commit/66dbfbab1c5430a99a7d9badc308f59fa3931678"><code>66dbfba</code></a> 17.0.20</li> <li><a href="https://github.com/i18next/react-i18next/commit/806df1ee326534bd1656fcc88239321f70c9c65f"><code>806df1e</code></a> build, changelog for 17.0.20</li> <li><a href="https://github.com/i18next/react-i18next/commit/49ec36d359236d3f5f7298b9da355754eb1fb719"><code>49ec36d</code></a> fix(useTranslation): don't suspend synchronous backends (<a href="https://redirect.github.com/i18next/react-i18next/issues/1937">#1937</a>)</li> <li>See full diff in <a href="https://github.com/i18next/react-i18next/compare/v17.0.19...v17.0.21">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.19&new-version=17.0.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-20 17:08:36 +00:00
dependabot[bot]	f3935fd2d6	chore(deps): Bump the react group across 1 directory with 3 updates (#2245 ) Bumps the react group with 3 updates in the / directory: [react](https://github.com/react/react/tree/HEAD/packages/react), [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) and [react-i18next](https://github.com/i18next/react-i18next). Updates `react` from 19.3.0 to 19.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react's releases</a>.</em></p> <blockquote> <h2>19.3.1 (October 14th, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Improve transport protocol (<a href="https://redirect.github.com/facebook/react/pull/37845">#37845</a> by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> and <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react/react/commit/61aa00df822d0eb76d0362eb8b6fdd3527693efe"><code>61aa00d</code></a> [19.3.x][Flight] Improve transport protocol (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/37845">#37845</a>)</li> <li>See full diff in <a href="https://github.com/react/react/commits/v19.3.1/packages/react">compare view</a></li> </ul> </details> <br /> Updates `react-dom` from 19.3.0 to 19.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react-dom's releases</a>.</em></p> <blockquote> <h2>19.3.1 (October 14th, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Improve transport protocol (<a href="https://redirect.github.com/facebook/react/pull/37845">#37845</a> by <a href="https://github.com/unstubbable"><code>@unstubbable</code></a> and <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react/react/commit/61aa00df822d0eb76d0362eb8b6fdd3527693efe"><code>61aa00d</code></a> [19.3.x][Flight] Improve transport protocol (<a href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37845">#37845</a>)</li> <li>See full diff in <a href="https://github.com/react/react/commits/v19.3.1/packages/react-dom">compare view</a></li> </ul> </details> <br /> Updates `react-i18next` from 17.0.16 to 17.0.19 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.0.19</h2> <ul> <li>fix: <code>useTranslation</code> with an inline selector <code>keyPrefix</code> (<code>useTranslation('ns', { keyPrefix: ($) => $.role })</code>) returned a new <code>t</code> on every render, so every effect, <code>useCallback</code> and <code>useMemo</code> depending on <code>t</code> ran again each time. The cached <code>t</code> was compared against the <code>keyPrefix</code> function itself, and an inline arrow is a new function on every render. It is now compared against the key the selector resolves to (with the same options and namespace list <code>getFixedT</code> resolves it with), so <code>t</code> keeps its identity as long as the resolved prefix does, just like a string <code>keyPrefix</code>. A selector that resolves to a different key still gets a new <code>t</code>, and i18next still resolves the selector on each <code>t</code> call as before. Fixes <a href="https://redirect.github.com/i18next/react-i18next/issues/1936">#1936</a>.</li> <li>fix: <code>useTranslation</code> kept returning the previous <code>t</code> when only the namespace (<code>useTranslation('a')</code> → <code>useTranslation('b')</code>) or only the i18n instance (another instance with the same language, via props or <code>I18nextProvider</code>) changed on a mounted component. That <code>t</code> kept resolving against the old namespace or instance until something else (the language, the ready state, a bound i18n event) produced a new one. Both are now part of the check that decides whether the cached <code>t</code> can be reused.</li> </ul> <h2>17.0.18</h2> <ul> <li>fix(Trans): with <code>shouldUnescape</code>, the default <code>unescape</code> now turns <code>&nbsp;</code> and <code>&[#160](https://github.com/i18next/react-i18next/issues/160);</code> into a no-break space (U+00A0) instead of a regular space (U+0020). The regular space dropped what the entity is for: <code>u&nbsp;nás</code> or <code>10&nbsp;km</code> could wrap across lines, and consecutive <code>&nbsp;</code>s collapsed into one space. This also matches <code>IcuTrans</code>, whose entity decoder already mapped <code>&nbsp;</code> to U+00A0. Compatibility note: only affects <code>shouldUnescape</code>; snapshots or exact <code>textContent</code> comparisons of such text now contain U+00A0 (Testing Library's default normalizer still matches it as a space). A custom <code>react.unescape</code> function can restore the old mapping for text nodes. Thanks <a href="https://github.com/lprnmns"><code>@lprnmns</code></a> (<a href="https://redirect.github.com/i18next/react-i18next/pull/1935">#1935</a>).</li> </ul> <h2>17.0.17</h2> <ul> <li>perf: <code>useTranslation</code> no longer unsubscribes and resubscribes its i18n listeners on every render. The <code>subscribe</code> callback handed to <code>useSyncExternalStore</code> depended on the merged options object, which is rebuilt whenever <code>props</code> is a new object: with no options (the <code>{}</code> default), with options passed inline (<code>useTranslation('ns', { keyPrefix })</code>), and through <code>withTranslation</code> and <code><Translation></code>. A new <code>subscribe</code> makes React resubscribe, so each render of each caller ran <code>i18n.off</code> and <code>i18n.on</code> in an extra effect. It now depends only on the instance and the <code>bindI18n</code>/<code>bindI18nStore</code> event names. No updates were ever missed, because React re-checks the snapshot after resubscribing; this only removes the churn, which adds up with many mounted components that re-render often. Reported via <a href="https://redirect.github.com/i18next/next-i18next/issues/2349">next-i18next#2349</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/d576d09cbebb9e2fc7a52a4cd6fe80793459cdfb"><code>d576d09</code></a> 17.0.19</li> <li><a href="https://github.com/i18next/react-i18next/commit/d69464b4c4346309c530c9c5777191954f9842f0"><code>d69464b</code></a> build</li> <li><a href="https://github.com/i18next/react-i18next/commit/36e327ac48e5095d0313f8b3a39151e5ad3fc32f"><code>36e327a</code></a> fix(useTranslation): keep t stable for an inline selector keyPrefix</li> <li><a href="https://github.com/i18next/react-i18next/commit/f17e70812944aa767482799cfbbaaf4a3d6a5d72"><code>f17e708</code></a> 17.0.18</li> <li><a href="https://github.com/i18next/react-i18next/commit/b799c190f66472e9c518d5a758a42302f8f12cea"><code>b799c19</code></a> build, changelog for 17.0.18</li> <li><a href="https://github.com/i18next/react-i18next/commit/7a55f5620d0ea0be0b3ab0269a605fd343519e92"><code>7a55f56</code></a> fix: unescape and &<a href="https://redirect.github.com/i18next/react-i18next/issues/160">#160</a>; to a no-break space (<a href="https://redirect.github.com/i18next/react-i18next/issues/1935">#1935</a>)</li> <li><a href="https://github.com/i18next/react-i18next/commit/511e1f24ccb152bad43b592b147310614252bff0"><code>511e1f2</code></a> 17.0.17</li> <li><a href="https://github.com/i18next/react-i18next/commit/699eae31bec8379ccdbd68060d921b6f9ada7605"><code>699eae3</code></a> build</li> <li><a href="https://github.com/i18next/react-i18next/commit/5a88fe6090fc2f14aac97bb6dfcc7c89094aee28"><code>5a88fe6</code></a> perf(useTranslation): stop resubscribing the i18n listeners on every render</li> <li><a href="https://github.com/i18next/react-i18next/commit/c4ee2c94ef8450499c46c5007c775de96f7528d3"><code>c4ee2c9</code></a> build</li> <li>See full diff in <a href="https://github.com/i18next/react-i18next/compare/v17.0.16...v17.0.19">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-19 14:09:36 +00:00
dependabot[bot]	4325a33462	chore(deps): Bump the codeql-action group with 3 updates (#2250 ) Bumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.3 to 4.39.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.39.0</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> <li>The <code>codeql-action/analyze</code> step now validates that a correct argument for the <code>checkout_path</code> input has been provided. The <code>checkout_path</code> input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by <code>codeql-action/init</code>, then the CodeQL Action now produces a warning. <a href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li> <li>Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. <a href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li> <li>The <code>codeql-action/start-proxy</code> step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as <code>codeql-action/init</code>. This primarily benefits customers who are using GitHub instances other than <code>github.com</code> where the <code>codeql-action/start-proxy</code> step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. <a href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.39.0 - 15 Oct 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> <li>The <code>codeql-action/analyze</code> step now validates that a correct argument for the <code>checkout_path</code> input has been provided. The <code>checkout_path</code> input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by <code>codeql-action/init</code>, then the CodeQL Action now produces a warning. <a href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li> <li>Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. <a href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li> <li>The <code>codeql-action/start-proxy</code> step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as <code>codeql-action/init</code>. This primarily benefits customers who are using GitHub instances other than <code>github.com</code> where the <code>codeql-action/start-proxy</code> step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. <a href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li> </ul> <h2>4.38.3 - 08 Oct 2026</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a> from github/update-v4.39.0-d63383a73</li> <li><a href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a> Trigger workflows</li> <li><a href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a> Update changelog for v4.39.0</li> <li><a href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a> from github/mbg/start-proxy/report-version</li> <li><a href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a> Rename <code>path</code> to <code>result</code> in tests</li> <li><a href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a> Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version</li> <li><a href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a> from github/mario-campos/automate-changenotes-assemble</li> <li><a href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a> from github/mbg/add-missing-changenotes</li> <li><a href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a> Add change note for <a href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li> <li><a href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a> Add change note for <a href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/autobuild` from 4.38.3 to 4.39.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's releases</a>.</em></p> <blockquote> <h2>v4.39.0</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> <li>The <code>codeql-action/analyze</code> step now validates that a correct argument for the <code>checkout_path</code> input has been provided. The <code>checkout_path</code> input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by <code>codeql-action/init</code>, then the CodeQL Action now produces a warning. <a href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li> <li>Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. <a href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li> <li>The <code>codeql-action/start-proxy</code> step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as <code>codeql-action/init</code>. This primarily benefits customers who are using GitHub instances other than <code>github.com</code> where the <code>codeql-action/start-proxy</code> step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. <a href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.39.0 - 15 Oct 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> <li>The <code>codeql-action/analyze</code> step now validates that a correct argument for the <code>checkout_path</code> input has been provided. The <code>checkout_path</code> input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by <code>codeql-action/init</code>, then the CodeQL Action now produces a warning. <a href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li> <li>Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. <a href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li> <li>The <code>codeql-action/start-proxy</code> step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as <code>codeql-action/init</code>. This primarily benefits customers who are using GitHub instances other than <code>github.com</code> where the <code>codeql-action/start-proxy</code> step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. <a href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li> </ul> <h2>4.38.3 - 08 Oct 2026</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a> from github/update-v4.39.0-d63383a73</li> <li><a href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a> Trigger workflows</li> <li><a href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a> Update changelog for v4.39.0</li> <li><a href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a> from github/mbg/start-proxy/report-version</li> <li><a href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a> Rename <code>path</code> to <code>result</code> in tests</li> <li><a href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a> Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version</li> <li><a href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a> from github/mario-campos/automate-changenotes-assemble</li> <li><a href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a> from github/mbg/add-missing-changenotes</li> <li><a href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a> Add change note for <a href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li> <li><a href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a> Add change note for <a href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.39.0</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> <li>The <code>codeql-action/analyze</code> step now validates that a correct argument for the <code>checkout_path</code> input has been provided. The <code>checkout_path</code> input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by <code>codeql-action/init</code>, then the CodeQL Action now produces a warning. <a href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li> <li>Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. <a href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li> <li>The <code>codeql-action/start-proxy</code> step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as <code>codeql-action/init</code>. This primarily benefits customers who are using GitHub instances other than <code>github.com</code> where the <code>codeql-action/start-proxy</code> step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. <a href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.39.0 - 15 Oct 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> <li>The <code>codeql-action/analyze</code> step now validates that a correct argument for the <code>checkout_path</code> input has been provided. The <code>checkout_path</code> input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by <code>codeql-action/init</code>, then the CodeQL Action now produces a warning. <a href="https://redirect.github.com/github/codeql-action/pull/4148">#4148</a></li> <li>Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. <a href="https://redirect.github.com/github/codeql-action/pull/4206">#4206</a></li> <li>The <code>codeql-action/start-proxy</code> step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as <code>codeql-action/init</code>. This primarily benefits customers who are using GitHub instances other than <code>github.com</code> where the <code>codeql-action/start-proxy</code> step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. <a href="https://redirect.github.com/github/codeql-action/pull/4198">#4198</a></li> </ul> <h2>4.38.3 - 08 Oct 2026</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee"><code>6f2ac81</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4239">#4239</a> from github/update-v4.39.0-d63383a73</li> <li><a href="https://github.com/github/codeql-action/commit/eb1c428e6e3725d2b527aec0ee5db4303c8f669d"><code>eb1c428</code></a> Trigger workflows</li> <li><a href="https://github.com/github/codeql-action/commit/444333376e064d207fe1dc74e881528bf11649c1"><code>4443333</code></a> Update changelog for v4.39.0</li> <li><a href="https://github.com/github/codeql-action/commit/d63383a7318b5332e86725adf62ac19528a9786a"><code>d63383a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4233">#4233</a> from github/mbg/start-proxy/report-version</li> <li><a href="https://github.com/github/codeql-action/commit/8dec0b9f88b61a76f5fc97056ee8e7dc8a1a8022"><code>8dec0b9</code></a> Rename <code>path</code> to <code>result</code> in tests</li> <li><a href="https://github.com/github/codeql-action/commit/4eabea6b5e5123ae16fffacf06e86d9d3864c350"><code>4eabea6</code></a> Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version</li> <li><a href="https://github.com/github/codeql-action/commit/57938b85687300731b9b53559017c143d849481d"><code>57938b8</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4201">#4201</a> from github/mario-campos/automate-changenotes-assemble</li> <li><a href="https://github.com/github/codeql-action/commit/ee07b503f465bcf3338b6e4807a36789e3106f4b"><code>ee07b50</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4236">#4236</a> from github/mbg/add-missing-changenotes</li> <li><a href="https://github.com/github/codeql-action/commit/a897ed5c2eeeb4862bf224c65f62a8b2478eb581"><code>a897ed5</code></a> Add change note for <a href="https://redirect.github.com/github/codeql-action/issues/4206">#4206</a></li> <li><a href="https://github.com/github/codeql-action/commit/c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82"><code>c8bd019</code></a> Add change note for <a href="https://redirect.github.com/github/codeql-action/issues/4198">#4198</a></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-19 13:57:39 +00:00
dependabot[bot]	d5755ea60b	chore(deps): Bump i18next from 26.4.4 to 26.4.7 (#2248 ) Bumps [i18next](https://github.com/i18next/i18next) from 26.4.4 to 26.4.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v26.4.7</h2> <ul> <li>perf: <code>cloneInstance()</code> no longer inherits <code>preload</code>. <code>loadResources()</code> adds every <code>preload</code> language to each load, and clones copied <code>preload</code> from the parent, so a clone's <code>init()</code> and every <code>changeLanguage()</code> walked all preloaded languages × all namespaces through <code>queueLoad()</code> / <code>hasResourceBundle()</code>, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + <code>changeLanguage()</code> per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its <code>changeLanguage()</code> no longer waits for parent preload languages that are still loading (the parent's own <code>init()</code> still does), and <code>clone.loadNamespaces()</code> loads the new namespace for the clone's language and fallbacks instead of every preloaded language. <code>clone.loadLanguages()</code> works as before, the parent instance is unchanged, and passing <code>preload</code> to <code>cloneInstance()</code> keeps the old behavior. Thanks <a href="https://github.com/theMostCuriousHomunculus"><code>@theMostCuriousHomunculus</code></a> for the detailed report (<a href="https://redirect.github.com/i18next/i18next/issues/2451">#2451</a>).</li> </ul> <h2>v26.4.6</h2> <ul> <li>fix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. <code>toResolveHierarchy()</code> checked the raw <code>fallbackLng</code> value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng: 'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de', 'de-CH']</code>, and the same happened with <code>fallbackLng: 'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks <a href="https://github.com/lprnmns"><code>@lprnmns</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2450">#2450</a>).</li> </ul> <h2>v26.4.5</h2> <ul> <li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays <code>false</code> forever when the passed in <code>lng</code> is loaded under another code, or not at all. It checked the load state of the raw <code>lng</code>, but <code>loadLanguages()</code> stores a language under its resolved code (<code>de-ch</code> → <code>de-CH</code>, <code>de-CH</code> → <code>de</code> with <code>load: 'languageOnly'</code>) and skips a <code>lng</code> outside <code>supportedLngs</code> entirely (only the fallback gets loaded), so that state never got set. react-i18next's <code>useTranslation(ns, { lng })</code> then never became ready: with <code>useSuspense</code> it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a <code>lng</code> outside <code>supportedLngs</code> only waits for the fallback, which is also what <code>t()</code> resolves to. Calls without <code>lng</code> and the <code>precheck</code> (react-i18next's <code>bindI18n: 'languageChanging'</code>) are unchanged (<a href="https://redirect.github.com/i18next/react-i18next/issues/1934">react-i18next#1934</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>26.4.7</h2> <ul> <li>perf: <code>cloneInstance()</code> no longer inherits <code>preload</code>. <code>loadResources()</code> adds every <code>preload</code> language to each load, and clones copied <code>preload</code> from the parent, so a clone's <code>init()</code> and every <code>changeLanguage()</code> walked all preloaded languages × all namespaces through <code>queueLoad()</code> / <code>hasResourceBundle()</code>, although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone + <code>changeLanguage()</code> per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: its <code>changeLanguage()</code> no longer waits for parent preload languages that are still loading (the parent's own <code>init()</code> still does), and <code>clone.loadNamespaces()</code> loads the new namespace for the clone's language and fallbacks instead of every preloaded language. <code>clone.loadLanguages()</code> works as before, the parent instance is unchanged, and passing <code>preload</code> to <code>cloneInstance()</code> keeps the old behavior. Thanks <a href="https://github.com/theMostCuriousHomunculus"><code>@theMostCuriousHomunculus</code></a> for the detailed report (<a href="https://redirect.github.com/i18next/i18next/issues/2451">#2451</a>).</li> </ul> <h2>26.4.6</h2> <ul> <li>fix: a fallback language whose formatted code is already in the hierarchy is no longer added a second time. <code>toResolveHierarchy()</code> checked the raw <code>fallbackLng</code> value against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through: <code>lng: 'de-CH'</code> with <code>fallbackLng: 'de-ch'</code> gave <code>languages</code> <code>['de-CH', 'de', 'de-CH']</code>, and the same happened with <code>fallbackLng: 'EN'</code> + <code>cleanCode</code>, <code>lowerCaseLng</code>, and Intl aliases (<code>iw-IL</code> → <code>he-IL</code>). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks <a href="https://github.com/lprnmns"><code>@lprnmns</code></a> (<a href="https://redirect.github.com/i18next/i18next/pull/2450">#2450</a>).</li> </ul> <h2>26.4.5</h2> <ul> <li>fix: <code>hasLoadedNamespace(ns, { lng })</code> no longer stays <code>false</code> forever when the passed in <code>lng</code> is loaded under another code, or not at all. It checked the load state of the raw <code>lng</code>, but <code>loadLanguages()</code> stores a language under its resolved code (<code>de-ch</code> → <code>de-CH</code>, <code>de-CH</code> → <code>de</code> with <code>load: 'languageOnly'</code>) and skips a <code>lng</code> outside <code>supportedLngs</code> entirely (only the fallback gets loaded), so that state never got set. react-i18next's <code>useTranslation(ns, { lng })</code> then never became ready: with <code>useSuspense</code> it kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for a <code>lng</code> outside <code>supportedLngs</code> only waits for the fallback, which is also what <code>t()</code> resolves to. Calls without <code>lng</code> and the <code>precheck</code> (react-i18next's <code>bindI18n: 'languageChanging'</code>) are unchanged (<a href="https://redirect.github.com/i18next/react-i18next/issues/1934">react-i18next#1934</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/5546d211a32e73642d22b57e58cc762338270afa"><code>5546d21</code></a> 26.4.7</li> <li><a href="https://github.com/i18next/i18next/commit/f27c937e5866f33700db40d0bf055694ee890cca"><code>f27c937</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/50ecc221940e99dcb36670c93b342a896165fca4"><code>50ecc22</code></a> perf: clones no longer inherit preload, so changeLanguage on a clone doesn't ...</li> <li><a href="https://github.com/i18next/i18next/commit/bc951ab36e601d459e4afe7040c72cc7632d3b9e"><code>bc951ab</code></a> 26.4.6</li> <li><a href="https://github.com/i18next/i18next/commit/45d0aba52fba755039a8f6f6be76825f5aebaa81"><code>45d0aba</code></a> changelog + build for 26.4.6</li> <li><a href="https://github.com/i18next/i18next/commit/0458efc507c88e78b2daa4b0cab9c254cfdc77d2"><code>0458efc</code></a> fix: don't repeat a fallback language that differs only in casing (<a href="https://redirect.github.com/i18next/i18next/issues/2450">#2450</a>)</li> <li><a href="https://github.com/i18next/i18next/commit/ce7b9cf970b2e6dcbecc6eb997d460ea1ea811ad"><code>ce7b9cf</code></a> 26.4.5</li> <li><a href="https://github.com/i18next/i18next/commit/4d4c60720e05da72e53af33fa0a8e0d69a56487a"><code>4d4c607</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/8f8651e938e122b5e40eacf616c9fb823a189087"><code>8f8651e</code></a> fix: hasLoadedNamespace with a passed in lng checks the code it is actually l...</li> <li><a href="https://github.com/i18next/i18next/commit/15d0b9d90e0564947861b926352b06deff0a8a05"><code>15d0b9d</code></a> changelog: link GHSA-5jr9-983r-c8x4 in v26.4.4</li> <li>Additional commits viewable in <a href="https://github.com/i18next/i18next/compare/v26.4.4...v26.4.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.4&new-version=26.4.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-19 13:57:18 +00:00
dependabot[bot]	51664b082b	chore(deps): Bump ol-mapbox-style from 13.5.1 to 13.8.0 (#2249 ) Bumps [ol-mapbox-style](https://github.com/openlayers/ol-mapbox-style) from 13.5.1 to 13.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/releases">ol-mapbox-style's releases</a>.</em></p> <blockquote> <h2>v13.7.1</h2> <h2>Summary</h2> <ul> <li>Avoid lost patterns after SDFing them</li> </ul> <h2>What's Changed</h2> <ul> <li>Changes for 13.7.0 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1547">openlayers/ol-mapbox-style#1547</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.7.0...v13.7.1">https://github.com/openlayers/ol-mapbox-style/compare/v13.7.0...v13.7.1</a></p> <h2>v13.7.0</h2> <h2>Summary</h2> <ul> <li>Use <code>PatternDescriptor</code> instead of patterns as color for <code>fill-pattern</code>. This is to support other rendering techniques than Canvas 2D.</li> </ul> <h2>What's Changed</h2> <ul> <li>Changes for 13.6.0 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1545">openlayers/ol-mapbox-style#1545</a></li> <li>Use PatternDescriptor instead of patterns as color for fills by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1546">openlayers/ol-mapbox-style#1546</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.6.0...v13.7.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.6.0...v13.7.0</a></p> <h2>v13.6.0</h2> <h2>Summary</h2> <ul> <li>Allow other layers than <code>Vector</code> or <code>VectorTile</code> for <code>applyStyle()</code></li> </ul> <h2>What's Changed</h2> <ul> <li>Changes for 13.5.1 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1528">openlayers/ol-mapbox-style#1528</a></li> <li>Allow other layers than Vector or VectorTile for applyStyle() by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1542">openlayers/ol-mapbox-style#1542</a></li> <li>Bump typedoc-plugin-missing-exports from 4.1.3 to 4.1.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1529">openlayers/ol-mapbox-style#1529</a></li> <li>Bump proj4 from 2.21.0 to 2.22.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1530">openlayers/ol-mapbox-style#1530</a></li> <li>Bump mocha from 12.0.0-rc.6 to 12.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1531">openlayers/ol-mapbox-style#1531</a></li> <li>Bump globals from 17.8.0 to 17.12.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1532">openlayers/ol-mapbox-style#1532</a></li> <li>Bump compression from 1.8.1 to 1.8.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1540">openlayers/ol-mapbox-style#1540</a></li> <li>Bump postcss-selector-parser, postcss-modules-local-by-default and postcss-modules-scope by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1541">openlayers/ol-mapbox-style#1541</a></li> <li>Bump serialize-javascript from 7.1.1 to 7.1.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1543">openlayers/ol-mapbox-style#1543</a></li> <li>Bump brace-expansion by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1536">openlayers/ol-mapbox-style#1536</a></li> <li>Bump shell-quote from 1.10.0 to 1.12.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1535">openlayers/ol-mapbox-style#1535</a></li> <li>Bump proxy-addr from 2.0.7 to 2.0.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1538">openlayers/ol-mapbox-style#1538</a></li> <li>Bump <code>@babel/core</code> from 7.12.3 to 7.29.7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1544">openlayers/ol-mapbox-style#1544</a></li> <li>Bump source-map-js from 1.2.1 to 1.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1539">openlayers/ol-mapbox-style#1539</a></li> <li>Bump webpack-dev-middleware from 7.4.2 to 7.4.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1537">openlayers/ol-mapbox-style#1537</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.5.1...v13.6.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.5.1...v13.6.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/blob/main/CHANGELOG.md">ol-mapbox-style's changelog</a>.</em></p> <blockquote> <h2>13.8.0</h2> <ul> <li>Support <code>fill-translate</code> and <code>fill-translate-anchor</code> (and the same for <code>fill-extrusion</code>).</li> </ul> <h2>13.7.0</h2> <ul> <li>Use <code>PatternDescriptor</code> instead of patterns as color for <code>fill-pattern</code>. This is to support other rendering techniques than Canvas 2D.</li> </ul> <h2>13.6.0</h2> <ul> <li>Allow other layers than <code>Vector</code> or <code>VectorTile</code> for <code>applyStyle()</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/openlayers/ol-mapbox-style/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol-mapbox-style&package-manager=npm_and_yarn&previous-version=13.5.1&new-version=13.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-19 13:56:28 +00:00
dependabot[bot]	253afcc35f	chore(deps-dev): Bump the vitest group with 2 updates (#2244 ) Bumps the vitest group with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@vitest/coverage-v8's releases</a>.</em></p> <blockquote> <h2>v5.0.5</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Keep vite default <code>fs.deny</code> with api token file - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11578">vitest-dev/vitest#11578</a> <a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb"><!-- raw HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li> <li>Handle quoted file names in <code>--changed</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11583">vitest-dev/vitest#11583</a> <a href="https://github.com/vitest-dev/vitest/commit/14921e962"><!-- raw HTML omitted -->(14921)<!-- raw HTML omitted --></a></li> <li>Add <code>data</code> to the <code>import.meta.hot</code> stub - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11590">vitest-dev/vitest#11590</a> <a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3"><!-- raw HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li> <li>Set <code>skip</code> in <code>skipIf</code>, ignore <code>undefined</code> options - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11591">vitest-dev/vitest#11591</a> <a href="https://github.com/vitest-dev/vitest/commit/d523a15f2"><!-- raw HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li> <li>Skip builtin loading in async leak detector - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11598">vitest-dev/vitest#11598</a> <a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6"><!-- raw HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li> <li>Keep the import frame in native loader errors - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11599">vitest-dev/vitest#11599</a> <a href="https://github.com/vitest-dev/vitest/commit/9697b3894"><!-- raw HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li> <li>Run hook cleanups when a later hook fails - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11605">vitest-dev/vitest#11605</a> <a href="https://github.com/vitest-dev/vitest/commit/6c5a44720"><!-- raw HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li> <li>Release mocks of finished test files - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11607">vitest-dev/vitest#11607</a> <a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0"><!-- raw HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li> <li>Abort all running tests on cancel - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11606">vitest-dev/vitest#11606</a> <a href="https://github.com/vitest-dev/vitest/commit/6621a72d6"><!-- raw HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Ignore synthetic pagehide events - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11582">vitest-dev/vitest#11582</a> <a href="https://github.com/vitest-dev/vitest/commit/ca0813584"><!-- raw HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li> <li>Run plugin buildStart on server creation - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11593">vitest-dev/vitest#11593</a> <a href="https://github.com/vitest-dev/vitest/commit/ea611e44c"><!-- raw HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li> <li>Drop late connections of closed sessions - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11600">vitest-dev/vitest#11600</a> <a href="https://github.com/vitest-dev/vitest/commit/f161e6df2"><!-- raw HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li> <li>Wait 30s for the browser to close - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11601">vitest-dev/vitest#11601</a> <a href="https://github.com/vitest-dev/vitest/commit/6498b666a"><!-- raw HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li> <li>Run global setup once with instances - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11596">vitest-dev/vitest#11596</a> <a href="https://github.com/vitest-dev/vitest/commit/8dd67c262"><!-- raw HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporter</strong>: <ul> <li>End reason <code>&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/39);</code> on worker crash - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11568">vitest-dev/vitest#11568</a> <a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff"><!-- raw HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7"><code>7a825db</code></a> chore: release v5.0.5 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11609">#11609</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8">compare view</a></li> </ul> </details> <br /> Updates `vitest` from 5.0.4 to 5.0.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>.</em></p> <blockquote> <h2>v5.0.5</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Keep vite default <code>fs.deny</code> with api token file - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11578">vitest-dev/vitest#11578</a> <a href="https://github.com/vitest-dev/vitest/commit/28dc1edfb"><!-- raw HTML omitted -->(28dc1)<!-- raw HTML omitted --></a></li> <li>Handle quoted file names in <code>--changed</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11583">vitest-dev/vitest#11583</a> <a href="https://github.com/vitest-dev/vitest/commit/14921e962"><!-- raw HTML omitted -->(14921)<!-- raw HTML omitted --></a></li> <li>Add <code>data</code> to the <code>import.meta.hot</code> stub - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11590">vitest-dev/vitest#11590</a> <a href="https://github.com/vitest-dev/vitest/commit/3a8289ac3"><!-- raw HTML omitted -->(3a828)<!-- raw HTML omitted --></a></li> <li>Set <code>skip</code> in <code>skipIf</code>, ignore <code>undefined</code> options - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11591">vitest-dev/vitest#11591</a> <a href="https://github.com/vitest-dev/vitest/commit/d523a15f2"><!-- raw HTML omitted -->(d523a)<!-- raw HTML omitted --></a></li> <li>Skip builtin loading in async leak detector - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11598">vitest-dev/vitest#11598</a> <a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6"><!-- raw HTML omitted -->(fe86a)<!-- raw HTML omitted --></a></li> <li>Keep the import frame in native loader errors - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11599">vitest-dev/vitest#11599</a> <a href="https://github.com/vitest-dev/vitest/commit/9697b3894"><!-- raw HTML omitted -->(9697b)<!-- raw HTML omitted --></a></li> <li>Run hook cleanups when a later hook fails - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11605">vitest-dev/vitest#11605</a> <a href="https://github.com/vitest-dev/vitest/commit/6c5a44720"><!-- raw HTML omitted -->(6c5a4)<!-- raw HTML omitted --></a></li> <li>Release mocks of finished test files - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11607">vitest-dev/vitest#11607</a> <a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0"><!-- raw HTML omitted -->(e9c3d)<!-- raw HTML omitted --></a></li> <li>Abort all running tests on cancel - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11606">vitest-dev/vitest#11606</a> <a href="https://github.com/vitest-dev/vitest/commit/6621a72d6"><!-- raw HTML omitted -->(6621a)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Ignore synthetic pagehide events - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11582">vitest-dev/vitest#11582</a> <a href="https://github.com/vitest-dev/vitest/commit/ca0813584"><!-- raw HTML omitted -->(ca081)<!-- raw HTML omitted --></a></li> <li>Run plugin buildStart on server creation - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11593">vitest-dev/vitest#11593</a> <a href="https://github.com/vitest-dev/vitest/commit/ea611e44c"><!-- raw HTML omitted -->(ea611)<!-- raw HTML omitted --></a></li> <li>Drop late connections of closed sessions - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11600">vitest-dev/vitest#11600</a> <a href="https://github.com/vitest-dev/vitest/commit/f161e6df2"><!-- raw HTML omitted -->(f161e)<!-- raw HTML omitted --></a></li> <li>Wait 30s for the browser to close - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11601">vitest-dev/vitest#11601</a> <a href="https://github.com/vitest-dev/vitest/commit/6498b666a"><!-- raw HTML omitted -->(6498b)<!-- raw HTML omitted --></a></li> <li>Run global setup once with instances - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11596">vitest-dev/vitest#11596</a> <a href="https://github.com/vitest-dev/vitest/commit/8dd67c262"><!-- raw HTML omitted -->(8dd67)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporter</strong>: <ul> <li>End reason <code>&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);</code> on worker crash - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11568">vitest-dev/vitest#11568</a> <a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff"><!-- raw HTML omitted -->(6ae8e)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.4...v5.0.5">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/7a825db43e2beca0b219d2eadaec334cb81af0c7"><code>7a825db</code></a> chore: release v5.0.5 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11609">#11609</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6621a72d6ed371e43f80ff327f5063693bd6b1ad"><code>6621a72</code></a> fix: abort all running tests on cancel (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11606">#11606</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/e9c3d72f0c8d6867de06a3df43ea28a05eeec444"><code>e9c3d72</code></a> fix: release mocks of finished test files (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11607">#11607</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/8dd67c2625943d824e257b87ae57a14094e90eed"><code>8dd67c2</code></a> fix(browser): run global setup once with instances (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11596">#11596</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6c5a447203a29a0708fbc5de4fb91ea501bdc395"><code>6c5a447</code></a> fix: run hook cleanups when a later hook fails (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11605">#11605</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/9697b3894f456b85db91f3824ebe833449305c04"><code>9697b38</code></a> fix: keep the import frame in native loader errors (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11599">#11599</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6498b666a3ae8961f6f2a8abdc89015b6fd0b3aa"><code>6498b66</code></a> fix(browser): wait 30s for the browser to close (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11601">#11601</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/f161e6df2b3c0bc84982d374094379139e380791"><code>f161e6d</code></a> fix(browser): drop late connections of closed sessions (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11600">#11600</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/fe86a64c6c6aa75481bffe5880b5c4e35ea67927"><code>fe86a64</code></a> fix: skip builtin loading in async leak detector (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11598">#11598</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/6ae8e89ff0734cf476e30186a83aebe6771aa330"><code>6ae8e89</code></a> fix(reporter): end reason <code>'failed'</code> on worker crash (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11568">#11568</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-19 13:55:45 +00:00
dependabot[bot]	4accd18a2e	chore(deps-dev): Bump @playwright/test from 1.64.0 to 1.64.1 (#2247 ) Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.64.0 to 1.64.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/playwright/releases">@playwright/test's releases</a>.</em></p> <blockquote> <h2>v1.64.1</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://redirect.github.com/microsoft/playwright/issues/43247">#43247</a> [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/43242">#43242</a> [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/playwright/commit/cfe490d941f992655948eee8fd4fd94e1c4234bf"><code>cfe490d</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43353">#43353</a>): docs: release notes for v1.64 Python</li> <li><a href="https://github.com/microsoft/playwright/commit/866cbb864009f84d7e8e41c64fdbfceff43f280d"><code>866cbb8</code></a> chore: mark v1.64.1 (<a href="https://redirect.github.com/microsoft/playwright/issues/43354">#43354</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/1b2924712024804936dbcfe9fabaa655d52325e5"><code>1b29247</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43250">#43250</a>): fix(electron): do not drop windows that have not navigat...</li> <li><a href="https://github.com/microsoft/playwright/commit/632d976826c74b0163fd5201a05b7b4853ba3f4a"><code>632d976</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43249">#43249</a>): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect</li> <li><a href="https://github.com/microsoft/playwright/commit/824d0c5d1e10f21fcbe88d18a99d06194acde77c"><code>824d0c5</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43217">#43217</a>): chore(dotnet): fix async suffix of optional-arg overload...</li> <li>See full diff in <a href="https://github.com/microsoft/playwright/compare/v1.64.0...v1.64.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.64.0&new-version=1.64.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-19 13:54:53 +00:00
dependabot[bot]	789e8d4569	chore(deps-dev): Bump sass from 1.105.1 to 1.105.2 (#2246 ) Bumps [sass](https://github.com/sass/dart-sass) from 1.105.1 to 1.105.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/releases">sass's releases</a>.</em></p> <blockquote> <h2>Dart Sass 1.105.2</h2> <p>To install Sass 1.105.2, download one of the packages below and <a href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or see <a href="https://sass-lang.com/install">the Sass website</a> for full installation instructions.</p> <h1>Changes</h1> <h3>Node.js Embedded Host</h3> <ul> <li>Fix a deadlock when the async compiler fails to start.</li> </ul> <p>See the <a href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11052">full changelog</a> for changes in earlier releases.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's changelog</a>.</em></p> <blockquote> <h2>1.105.2</h2> <h3>Node.js Embedded Host</h3> <ul> <li>Fix a deadlock when the async compiler fails to start.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sass/dart-sass/commit/00a0d7968f4a6d8ed044da35e3b04877d8b3e2b4"><code>00a0d79</code></a> Add a changelog entry for <a href="https://redirect.github.com/sass/embedded-host-node/issues/449">sass/embedded-host-node#449</a> (<a href="https://redirect.github.com/sass/dart-sass/issues/2882">#2882</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/83fdf3573961991569f6baf90ee80469ca952792"><code>83fdf35</code></a> Fix the <code>git pr merge</code> invocation in GitHUb actions (<a href="https://redirect.github.com/sass/dart-sass/issues/2881">#2881</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/c9868b44d9287171d585e8d77b8bf1d2946393fc"><code>c9868b4</code></a> Try setting dependabot merge authorship with <code>-A</code> (<a href="https://redirect.github.com/sass/dart-sass/issues/2873">#2873</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/f10cddec0e47c41ca19791c0a9cbd9a4c73c3ff2"><code>f10cdde</code></a> Check out sass/sass with clone-linked-repo whenever possible (<a href="https://redirect.github.com/sass/dart-sass/issues/2871">#2871</a>)</li> <li>See full diff in <a href="https://github.com/sass/dart-sass/compare/1.105.1...1.105.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sass&package-manager=npm_and_yarn&previous-version=1.105.1&new-version=1.105.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-19 13:54:08 +00:00
dependabot[bot]	2522b20c02	chore(deps-dev): Bump postcss from 8.5.29 to 8.5.30 (#2242 ) Bumps [postcss](https://github.com/postcss/postcss) from 8.5.29 to 8.5.30. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.30</h2> <ul> <li>Fix broken map on <code></style></code> escaping (by <a href="https://github.com/Rufflet"><code>@Rufflet</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.30</h2> <ul> <li>Fix broken map on <code></style></code> escaping (by <a href="https://github.com/Rufflet"><code>@Rufflet</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/f1aca7ec68ab0cfb96cc9e69520a87f641c5a9e4"><code>f1aca7e</code></a> Release 8.5.30 version</li> <li><a href="https://github.com/postcss/postcss/commit/9d8344589299ca90f4ec0a4fab899e357995eaad"><code>9d83445</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/6c9bc73d9d2ad2c9c8e998ace707ebe067bc8425"><code>6c9bc73</code></a> Fix invalid source map mapping on escaping before new line (<a href="https://redirect.github.com/postcss/postcss/issues/2169">#2169</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/1fd8f881875330b284d65961c2c158f61d4e3bab"><code>1fd8f88</code></a> Add missed changes in changelog</li> <li>See full diff in <a href="https://github.com/postcss/postcss/compare/8.5.29...8.5.30">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.29&new-version=8.5.30)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-16 13:56:54 +00:00
dependabot[bot]	b73f0abfad	chore(deps-dev): Bump typescript-eslint from 8.71.1 to 8.71.2 (#2241 ) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.71.1 to 8.71.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.71.2</h2> <h2>8.71.2 (2026-10-12)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unused-vars] avoid false-positives when not using our parser (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12989">#12989</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters] count instantiated mapped type templates (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12974">#12974</a>)</li> <li><strong>eslint-plugin:</strong> [no-unused-vars] ignore type-only refs for after-used (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12977">#12977</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12995">#12995</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12805">#12805</a>)</li> <li><strong>type-utils:</strong> match linked packages and packages with missing version in <code>TypeOrValueSpecifier</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12948">#12948</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Abraham Guo</li> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Josh Goldberg</li> <li>Vinccool96</li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@nayounsang</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.71.2 (2026-10-12)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.2">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/7488d681f6e0e96c2aaa1eee9c3d1b9b1ef077cb"><code>7488d68</code></a> chore(release): publish 8.71.2</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.1&new-version=8.71.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-16 13:55:36 +00:00
dependabot[bot]	aa52073505	chore(deps-dev): Bump i18next-cli from 1.75.2 to 1.75.3 (#2243 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.75.2 to 1.75.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.75.3</h2> <ul> <li>fix(extract): options passed in a variable are read like inline ones. With <code>const params = { count }</code>, <code>t('key', params)</code> now extracts the plural keys (and reads <code>context</code>, <code>ns</code>, <code>defaultValue</code> the same way), where it used to extract only <code>key</code>. A variable a file declares also no longer resolves to a same-named variable of another file: <code>t('key', overwrittenParams)</code> took <code>y=true</code> as its default value from an unrelated function-local <code>overwrittenParams</code> array elsewhere. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/307">#307</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/3c957348b396910daa3bb3f6e7fa25d3b266d9d5"><code>3c95734</code></a> 1.75.3</li> <li><a href="https://github.com/i18next/i18next-cli/commit/171c6f450aa900f210372d33f15dbf7eae7c6ff8"><code>171c6f4</code></a> fix(extract): read t() options passed in a variable, and keep a file's variab...</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.75.2...v1.75.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.75.2&new-version=1.75.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-16 13:54:28 +00:00
dependabot[bot]	4d4db6e406	chore(deps): Bump react-resizable-panels from 4.14.4 to 4.14.5 in the react group (#2240 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.14.4 to 4.14.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.5</h2> <ul> <li><code>Group</code>, <code>Panel</code>, <code>Separator</code>, <code>Grid</code>, and <code>Cell</code> only render an explicit <code>id</code> (or <code>data-testid</code>) as <code>data-testid</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li> <li>Empty string <code>id</code> prop is now treated the same as an undefined value and falls back to <code>useId</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li> <li><code>Panel</code> with an <code>id</code> of <code>0</code> is now properly treated as an explicit <code>id</code> value - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.5</h2> <ul> <li><code>Group</code>, <code>Panel</code>, <code>Separator</code>, <code>Grid</code>, and <code>Cell</code> only render an explicit <code>id</code> (or <code>data-testid</code>) as <code>data-testid</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li> <li>Empty string <code>id</code> prop is now treated the same as an undefined value and falls back to <code>useId</code> - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li> <li><code>Panel</code> with an <code>id</code> of <code>0</code> is now properly treated as an explicit <code>id</code> value - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/766">#766</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/00766aa4b967ce3050908075ed891f4a9e96a86e"><code>00766aa</code></a> 4.14.4 -> 4.14.5</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/593afafa93d90582808ba7f2bb0cb83b9b78c488"><code>593afaf</code></a> Improve id and data-testid semantics (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/766">#766</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/23453f69c307ceb6f7c2ace1bb5f75decb34c8ed"><code>23453f6</code></a> Update react-lib-tools dep</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/f757fb90367c7417fd5708adb9c9ec908ac8cc10"><code>f757fb9</code></a> Update react-lib-tools dep</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/cdaec0d674ab3c563bc42d6fd6db3415724fa604"><code>cdaec0d</code></a> Fix typos (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/764">#764</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/213232f3156f2cfe790cce5ad970adb0039a60d4"><code>213232f</code></a> Fix TSC error in config file</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/74cc7f8cfdb7792843f2fcdef0e3686b817ba037"><code>74cc7f8</code></a> CI now runs the e2e tests against production builds</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/558e0d6f1af9a82af2004a58a426ad4043fc5119"><code>558e0d6</code></a> Run CI on main</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/b903cd9805e1f69d63810d5f31d88ae7a64b030b"><code>b903cd9</code></a> Speed up e2e tests</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.4...4.14.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.4&new-version=4.14.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-16 13:52:48 +00:00
dependabot[bot]	97f426c0d4	chore(deps): Bump i18next from 26.4.3 to 26.4.4 (#2239 ) Bumps [i18next](https://github.com/i18next/i18next) from 26.4.3 to 26.4.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v26.4.4</h2> <ul> <li>fix(security): the nesting regexp no longer backtracks exponentially (ReDoS) on an unclosed <code>$t(</code>. Its repeated group had overlapping alternatives (<code>[^()"']+</code> inside <code>(?:...)?</code>, and inside parentheses <code>[^()]</code> also matched quotes), so a string containing <code>$t(</code> without a closing <code>)</code> made the engine try every way to split the text: about 2x the runtime per extra character, and a ~25 character value hung <code>t()</code> for minutes. With the default config this was reachable through any interpolated value (<code>t('greet', { name: '$t(aaaaaaaaaaaaaaaaaaaaaaaa' })</code>): escaping does not touch <code>$</code>, <code>t</code> or <code>(</code>, and the <code>skipOnVariables</code> check runs the regexp on the interpolated result, so <code>nest: false</code> did not help either. Every alternative now starts with a different character (plain char, <code>"</code>, <code>'</code> or <code>(</code>), so there is only one way to match and the cost is linear. Quoted strings and one level of parentheses in nesting options keep working (<a href="https://redirect.github.com/i18next/i18next/issues/2336">#2336</a>). The only difference: a lone <code>"</code> or <code>'</code> inside unquoted parentheses within <code>$t(...)</code> is no longer matched. Affects 25.3.3 to 26.4.3. Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible disclosure.</li> <li>fix(security): <code>nest()</code> now resolves <code>$t(...)</code> in a single pass and no longer nests text that came out of a resolved value. Every nested lookup reset the shared nesting regexp, so the loop started over from the beginning of the string after each match. That had two effects. First, a <code>$t(...)</code> inside a variable that the nested lookup deliberately kept literal (default <code>skipOnVariables: true</code>) was resolved anyway by the outer loop: with <code>outer: 'A $t(inner) B'</code> and <code>inner: 'Hi {{name}}'</code>, <code>t('outer', { name: '$t(secret)' })</code> rendered the <code>secret</code> translation. It now stays <code>A Hi $t(secret) B</code>, the same as without the outer nesting; with <code>skipOnVariables: false</code> it is still resolved. Second, the cost was quadratic when an unclosed <code>$t(</code> preceded many nestings, which matters when an app passes untrusted input as the key itself (<code>t(userInput)</code>): 20,000 nestings took ~1.4 s, now ~25 ms. The resolved value is now sliced into the result instead of going through <code>String.replace</code>, so <code>$&</code>, <code>$`</code>, <code>$'</code> and <code>$$</code> stay literal as before (26.4.2).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>26.4.4</h2> <ul> <li>fix(security): the nesting regexp no longer backtracks exponentially (ReDoS) on an unclosed <code>$t(</code>. Its repeated group had overlapping alternatives (<code>[^()"']+</code> inside <code>(?:...)?</code>, and inside parentheses <code>[^()]</code> also matched quotes), so a string containing <code>$t(</code> without a closing <code>)</code> made the engine try every way to split the text: about 2x the runtime per extra character, and a ~25 character value hung <code>t()</code> for minutes. With the default config this was reachable through any interpolated value (<code>t('greet', { name: '$t(aaaaaaaaaaaaaaaaaaaaaaaa' })</code>): escaping does not touch <code>$</code>, <code>t</code> or <code>(</code>, and the <code>skipOnVariables</code> check runs the regexp on the interpolated result, so <code>nest: false</code> did not help either. Every alternative now starts with a different character (plain char, <code>"</code>, <code>'</code> or <code>(</code>), so there is only one way to match and the cost is linear. Quoted strings and one level of parentheses in nesting options keep working (<a href="https://redirect.github.com/i18next/i18next/issues/2336">#2336</a>). The only difference: a lone <code>"</code> or <code>'</code> inside unquoted parentheses within <code>$t(...)</code> is no longer matched. Affects 25.3.3 to 26.4.3. See advisory <a href="https://github.com/i18next/i18next/security/advisories/GHSA-5jr9-983r-c8x4">GHSA-5jr9-983r-c8x4</a>, CVSS 7.5 (<code>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</code>). Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible disclosure.</li> <li>fix(security): <code>nest()</code> now resolves <code>$t(...)</code> in a single pass and no longer nests text that came out of a resolved value. Every nested lookup reset the shared nesting regexp, so the loop started over from the beginning of the string after each match. That had two effects. First, a <code>$t(...)</code> inside a variable that the nested lookup deliberately kept literal (default <code>skipOnVariables: true</code>) was resolved anyway by the outer loop: with <code>outer: 'A $t(inner) B'</code> and <code>inner: 'Hi {{name}}'</code>, <code>t('outer', { name: '$t(secret)' })</code> rendered the <code>secret</code> translation. It now stays <code>A Hi $t(secret) B</code>, the same as without the outer nesting; with <code>skipOnVariables: false</code> it is still resolved. Second, the cost was quadratic when an unclosed <code>$t(</code> preceded many nestings, which matters when an app passes untrusted input as the key itself (<code>t(userInput)</code>): 20,000 nestings took ~1.4 s, now ~25 ms. The resolved value is now sliced into the result instead of going through <code>String.replace</code>, so <code>$&</code>, <code>$`</code>, <code>$'</code> and <code>$$</code> stay literal as before (26.4.2).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/f6a7746d119790f07bc03ba86b130b090af8e443"><code>f6a7746</code></a> 26.4.4</li> <li><a href="https://github.com/i18next/i18next/commit/25988d5405e8e57415b2550af179f512c33ca2be"><code>25988d5</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/c9f8ebab17b456b5837e61a2e542ee27d190e151"><code>c9f8eba</code></a> fix(security): nesting regexp ReDoS on unclosed $t( and single-pass nest(), c...</li> <li>See full diff in <a href="https://github.com/i18next/i18next/compare/v26.4.3...v26.4.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=26.4.3&new-version=26.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-15 13:58:11 +00:00
dependabot[bot]	5ae36a456b	chore(deps-dev): Bump the vitest group with 2 updates (#2238 ) Bumps the vitest group with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@vitest/coverage-v8's releases</a>.</em></p> <blockquote> <h2>v5.0.4</h2> <h3> 🚀 Features</h3> <ul> <li><strong>experimental</strong>: <ul> <li>Tag cache directories with CACHEDIR.TAG - by <a href="https://github.com/lifeiscontent"><code>@lifeiscontent</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11461">vitest-dev/vitest#11461</a> <a href="https://github.com/vitest-dev/vitest/commit/a8ea3c8fd"><!-- raw HTML omitted -->(a8ea3)<!-- raw HTML omitted --></a></li> <li>Support <code>test.ui.theme</code> option - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11499">vitest-dev/vitest#11499</a> <a href="https://github.com/vitest-dev/vitest/commit/1da66405d"><!-- raw HTML omitted -->(1da66)<!-- raw HTML omitted --></a></li> <li>Highlight selector multiple matches in trace view - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11489">vitest-dev/vitest#11489</a> <a href="https://github.com/vitest-dev/vitest/commit/5abba1e1b"><!-- raw HTML omitted -->(5abba)<!-- raw HTML omitted --></a></li> <li>Print how many tests were affected and a total when running <code>--changed</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11424">vitest-dev/vitest#11424</a> <a href="https://github.com/vitest-dev/vitest/commit/a23368585"><!-- raw HTML omitted -->(a2336)<!-- raw HTML omitted --></a></li> <li>Add an option to cache dependencies instead of statically parsing them - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11515">vitest-dev/vitest#11515</a> <a href="https://github.com/vitest-dev/vitest/commit/c06012ac8"><!-- raw HTML omitted -->(c0601)<!-- raw HTML omitted --></a></li> <li>Add fit and zoom controls to trace viewer - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11490">vitest-dev/vitest#11490</a> <a href="https://github.com/vitest-dev/vitest/commit/f5dd99ed0"><!-- raw HTML omitted -->(f5dd9)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h3> 🐞 Bug Fixes</h3> <ul> <li>Fail the run on git and location filter errors - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11430">vitest-dev/vitest#11430</a> <a href="https://github.com/vitest-dev/vitest/commit/30d0304d2"><!-- raw HTML omitted -->(30d03)<!-- raw HTML omitted --></a></li> <li>Enable fsModuleCache by default - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11435">vitest-dev/vitest#11435</a> <a href="https://github.com/vitest-dev/vitest/commit/ad208cc29"><!-- raw HTML omitted -->(ad208)<!-- raw HTML omitted --></a></li> <li>Track project files and mocks with --changed - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11432">vitest-dev/vitest#11432</a> <a href="https://github.com/vitest-dev/vitest/commit/b0f2b3bb9"><!-- raw HTML omitted -->(b0f2b)<!-- raw HTML omitted --></a></li> <li>Refactor caching, fix <code>:</code> in project and change the shape of <code>results</code> cache - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11453">vitest-dev/vitest#11453</a> <a href="https://github.com/vitest-dev/vitest/commit/9673c49a4"><!-- raw HTML omitted -->(9673c)<!-- raw HTML omitted --></a></li> <li>Keep full <code>$</code> string values when <code>taskTitleValueFormatTruncate</code> is 0 - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11485">vitest-dev/vitest#11485</a> <a href="https://github.com/vitest-dev/vitest/commit/4f7e1799b"><!-- raw HTML omitted -->(4f7e1)<!-- raw HTML omitted --></a></li> <li>Resolve node builtins in client environments - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11417">vitest-dev/vitest#11417</a> <a href="https://github.com/vitest-dev/vitest/commit/56b319ac6"><!-- raw HTML omitted -->(56b31)<!-- raw HTML omitted --></a></li> <li>Fix module graph builtin externals after <a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11421">#11421</a> - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11491">vitest-dev/vitest#11491</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11421">vitest-dev/vitest#11421</a> <a href="https://github.com/vitest-dev/vitest/commit/008e184cb"><!-- raw HTML omitted -->(008e1)<!-- raw HTML omitted --></a></li> <li>Wrap module mocks during in-source testing - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11505">vitest-dev/vitest#11505</a> <a href="https://github.com/vitest-dev/vitest/commit/36d19cb00"><!-- raw HTML omitted -->(36d19)<!-- raw HTML omitted --></a></li> <li>Handle line endings in snapshot - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11522">vitest-dev/vitest#11522</a> <a href="https://github.com/vitest-dev/vitest/commit/4c468aa40"><!-- raw HTML omitted -->(4c468)<!-- raw HTML omitted --></a></li> <li>Respect root in projects - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11521">vitest-dev/vitest#11521</a> <a href="https://github.com/vitest-dev/vitest/commit/26642f793"><!-- raw HTML omitted -->(26642)<!-- raw HTML omitted --></a></li> <li>Resolve mocks in directories with spaces - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11539">vitest-dev/vitest#11539</a> <a href="https://github.com/vitest-dev/vitest/commit/caaef9416"><!-- raw HTML omitted -->(caaef)<!-- raw HTML omitted --></a></li> <li><strong>api</strong>: <ul> <li>Publish the api token atomically - by <a href="https://github.com/umairnawaz333"><code>@umairnawaz333</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11323">vitest-dev/vitest#11323</a> <a href="https://github.com/vitest-dev/vitest/commit/6f990fef1"><!-- raw HTML omitted -->(6f990)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>browser</strong>: <ul> <li>Close the mock route interception race - by <a href="https://github.com/cplieger"><code>@cplieger</code></a> and <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8339">vitest-dev/vitest#8339</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11083">vitest-dev/vitest#11083</a> <a href="https://github.com/vitest-dev/vitest/commit/d6620fae6"><!-- raw HTML omitted -->(d6620)<!-- raw HTML omitted --></a></li> <li>Allow toHaveTextContent without arguments - by <a href="https://github.com/nomadical"><code>@nomadical</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11425">vitest-dev/vitest#11425</a> <a href="https://github.com/vitest-dev/vitest/commit/8ebcf5f8a"><!-- raw HTML omitted -->(8ebcf)<!-- raw HTML omitted --></a></li> <li>Apply API options without browser config - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10852">vitest-dev/vitest#10852</a> <a href="https://github.com/vitest-dev/vitest/commit/ad055837b"><!-- raw HTML omitted -->(ad055)<!-- raw HTML omitted --></a></li> <li>Preserve undefined command arguments - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> and <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11497">vitest-dev/vitest#11497</a> <a href="https://github.com/vitest-dev/vitest/commit/1576d3d89"><!-- raw HTML omitted -->(1576d)<!-- raw HTML omitted --></a></li> <li>Wait for setup mocks before importing a test file - by <a href="https://github.com/kasperpeulen"><code>@kasperpeulen</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11520">vitest-dev/vitest#11520</a> <a href="https://github.com/vitest-dev/vitest/commit/b61d1ced3"><!-- raw HTML omitted -->(b61d1)<!-- raw HTML omitted --></a></li> <li>Avoid extra scroll outside the iframe - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11523">vitest-dev/vitest#11523</a> <a href="https://github.com/vitest-dev/vitest/commit/662e8a363"><!-- raw HTML omitted -->(662e8)<!-- raw HTML omitted --></a></li> <li>Run browser instances as workers - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11525">vitest-dev/vitest#11525</a> <a href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc"><!-- raw HTML omitted -->(bf04b)<!-- raw HTML omitted --></a> <ul> <li>⚠️ This can degrade performance if you have a custom <code>maxWorkers</code> setting. Previously, it was applied incorrectly and could lead to Vitest using too many resources. For example, a lower number would still open too many browsers. Fixing it means Vitest opens less instances by default now.</li> </ul> </li> <li>Open one cdp session per tester - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11542">vitest-dev/vitest#11542</a> <a href="https://github.com/vitest-dev/vitest/commit/69e6369f6"><!-- raw HTML omitted -->(69e63)<!-- raw HTML omitted --></a></li> <li>Clean up unmocked and pending mocks - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11537">vitest-dev/vitest#11537</a> <a href="https://github.com/vitest-dev/vitest/commit/5c9552173"><!-- raw HTML omitted -->(5c955)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>coverage</strong>: <ul> <li>V8 browser memory leak between test files - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11466">vitest-dev/vitest#11466</a> <a href="https://github.com/vitest-dev/vitest/commit/2297d93a8"><!-- raw HTML omitted -->(2297d)<!-- raw HTML omitted --></a></li> <li><code>allowExternal</code> fails to include uncovered files - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11513">vitest-dev/vitest#11513</a> <a href="https://github.com/vitest-dev/vitest/commit/4ef000a93"><!-- raw HTML omitted -->(4ef00)<!-- raw HTML omitted --></a></li> <li>Filenames containing brackets incorrectly showing as uncovered - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11531">vitest-dev/vitest#11531</a> <a href="https://github.com/vitest-dev/vitest/commit/0fa80f53c"><!-- raw HTML omitted -->(0fa80)<!-- raw HTML omitted --></a></li> <li>Istanbul coverage wrong when module transform warmups - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11529">vitest-dev/vitest#11529</a> <a href="https://github.com/vitest-dev/vitest/commit/9f61dcca2"><!-- raw HTML omitted -->(9f61d)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>deps</strong>: <ul> <li>Update all non-major dependencies - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11167">vitest-dev/vitest#11167</a> <a href="https://github.com/vitest-dev/vitest/commit/c74e099a9"><!-- raw HTML omitted -->(c74e0)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Fix <code>Map</code> and <code>Set</code> deep equality in some assertions - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11402">vitest-dev/vitest#11402</a> <a href="https://github.com/vitest-dev/vitest/commit/b4e79fd7a"><!-- raw HTML omitted -->(b4e79)<!-- raw HTML omitted --></a></li> <li>Check value in chai-style returned - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11500">vitest-dev/vitest#11500</a> <a href="https://github.com/vitest-dev/vitest/commit/1aca02a21"><!-- raw HTML omitted -->(1aca0)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>mocker</strong>: <ul> <li>Fix native loader mocking edge cases - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11540">vitest-dev/vitest#11540</a> <a href="https://github.com/vitest-dev/vitest/commit/cd423ba04"><!-- raw HTML omitted -->(cd423)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>pretty-format</strong>:</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40"><code>6a11cf6</code></a> chore: release v5.0.4 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11554">#11554</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/2297d93a854968d2ffee6025700c69099e6b7f80"><code>2297d93</code></a> fix(coverage): v8 browser memory leak between test files (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11466">#11466</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/c74e099a9d17e24e9816878165af4818df84a631"><code>c74e099</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11167">#11167</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8">compare view</a></li> </ul> </details> <br /> Updates `vitest` from 5.0.3 to 5.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>.</em></p> <blockquote> <h2>v5.0.4</h2> <h3> 🚀 Features</h3> <ul> <li><strong>experimental</strong>: <ul> <li>Tag cache directories with CACHEDIR.TAG - by <a href="https://github.com/lifeiscontent"><code>@lifeiscontent</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11461">vitest-dev/vitest#11461</a> <a href="https://github.com/vitest-dev/vitest/commit/a8ea3c8fd"><!-- raw HTML omitted -->(a8ea3)<!-- raw HTML omitted --></a></li> <li>Support <code>test.ui.theme</code> option - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11499">vitest-dev/vitest#11499</a> <a href="https://github.com/vitest-dev/vitest/commit/1da66405d"><!-- raw HTML omitted -->(1da66)<!-- raw HTML omitted --></a></li> <li>Highlight selector multiple matches in trace view - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11489">vitest-dev/vitest#11489</a> <a href="https://github.com/vitest-dev/vitest/commit/5abba1e1b"><!-- raw HTML omitted -->(5abba)<!-- raw HTML omitted --></a></li> <li>Print how many tests were affected and a total when running <code>--changed</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11424">vitest-dev/vitest#11424</a> <a href="https://github.com/vitest-dev/vitest/commit/a23368585"><!-- raw HTML omitted -->(a2336)<!-- raw HTML omitted --></a></li> <li>Add an option to cache dependencies instead of statically parsing them - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11515">vitest-dev/vitest#11515</a> <a href="https://github.com/vitest-dev/vitest/commit/c06012ac8"><!-- raw HTML omitted -->(c0601)<!-- raw HTML omitted --></a></li> <li>Add fit and zoom controls to trace viewer - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11490">vitest-dev/vitest#11490</a> <a href="https://github.com/vitest-dev/vitest/commit/f5dd99ed0"><!-- raw HTML omitted -->(f5dd9)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h3> 🐞 Bug Fixes</h3> <ul> <li>Fail the run on git and location filter errors - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11430">vitest-dev/vitest#11430</a> <a href="https://github.com/vitest-dev/vitest/commit/30d0304d2"><!-- raw HTML omitted -->(30d03)<!-- raw HTML omitted --></a></li> <li>Enable fsModuleCache by default - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11435">vitest-dev/vitest#11435</a> <a href="https://github.com/vitest-dev/vitest/commit/ad208cc29"><!-- raw HTML omitted -->(ad208)<!-- raw HTML omitted --></a></li> <li>Track project files and mocks with --changed - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11432">vitest-dev/vitest#11432</a> <a href="https://github.com/vitest-dev/vitest/commit/b0f2b3bb9"><!-- raw HTML omitted -->(b0f2b)<!-- raw HTML omitted --></a></li> <li>Refactor caching, fix <code>:</code> in project and change the shape of <code>results</code> cache - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11453">vitest-dev/vitest#11453</a> <a href="https://github.com/vitest-dev/vitest/commit/9673c49a4"><!-- raw HTML omitted -->(9673c)<!-- raw HTML omitted --></a></li> <li>Keep full <code>$</code> string values when <code>taskTitleValueFormatTruncate</code> is 0 - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11485">vitest-dev/vitest#11485</a> <a href="https://github.com/vitest-dev/vitest/commit/4f7e1799b"><!-- raw HTML omitted -->(4f7e1)<!-- raw HTML omitted --></a></li> <li>Resolve node builtins in client environments - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11417">vitest-dev/vitest#11417</a> <a href="https://github.com/vitest-dev/vitest/commit/56b319ac6"><!-- raw HTML omitted -->(56b31)<!-- raw HTML omitted --></a></li> <li>Fix module graph builtin externals after <a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11421">#11421</a> - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11491">vitest-dev/vitest#11491</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11421">vitest-dev/vitest#11421</a> <a href="https://github.com/vitest-dev/vitest/commit/008e184cb"><!-- raw HTML omitted -->(008e1)<!-- raw HTML omitted --></a></li> <li>Wrap module mocks during in-source testing - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11505">vitest-dev/vitest#11505</a> <a href="https://github.com/vitest-dev/vitest/commit/36d19cb00"><!-- raw HTML omitted -->(36d19)<!-- raw HTML omitted --></a></li> <li>Handle line endings in snapshot - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11522">vitest-dev/vitest#11522</a> <a href="https://github.com/vitest-dev/vitest/commit/4c468aa40"><!-- raw HTML omitted -->(4c468)<!-- raw HTML omitted --></a></li> <li>Respect root in projects - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11521">vitest-dev/vitest#11521</a> <a href="https://github.com/vitest-dev/vitest/commit/26642f793"><!-- raw HTML omitted -->(26642)<!-- raw HTML omitted --></a></li> <li>Resolve mocks in directories with spaces - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11539">vitest-dev/vitest#11539</a> <a href="https://github.com/vitest-dev/vitest/commit/caaef9416"><!-- raw HTML omitted -->(caaef)<!-- raw HTML omitted --></a></li> <li><strong>api</strong>: <ul> <li>Publish the api token atomically - by <a href="https://github.com/umairnawaz333"><code>@umairnawaz333</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11323">vitest-dev/vitest#11323</a> <a href="https://github.com/vitest-dev/vitest/commit/6f990fef1"><!-- raw HTML omitted -->(6f990)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>browser</strong>: <ul> <li>Close the mock route interception race - by <a href="https://github.com/cplieger"><code>@cplieger</code></a> and <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8339">vitest-dev/vitest#8339</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11083">vitest-dev/vitest#11083</a> <a href="https://github.com/vitest-dev/vitest/commit/d6620fae6"><!-- raw HTML omitted -->(d6620)<!-- raw HTML omitted --></a></li> <li>Allow toHaveTextContent without arguments - by <a href="https://github.com/nomadical"><code>@nomadical</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11425">vitest-dev/vitest#11425</a> <a href="https://github.com/vitest-dev/vitest/commit/8ebcf5f8a"><!-- raw HTML omitted -->(8ebcf)<!-- raw HTML omitted --></a></li> <li>Apply API options without browser config - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10852">vitest-dev/vitest#10852</a> <a href="https://github.com/vitest-dev/vitest/commit/ad055837b"><!-- raw HTML omitted -->(ad055)<!-- raw HTML omitted --></a></li> <li>Preserve undefined command arguments - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> and <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11497">vitest-dev/vitest#11497</a> <a href="https://github.com/vitest-dev/vitest/commit/1576d3d89"><!-- raw HTML omitted -->(1576d)<!-- raw HTML omitted --></a></li> <li>Wait for setup mocks before importing a test file - by <a href="https://github.com/kasperpeulen"><code>@kasperpeulen</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11520">vitest-dev/vitest#11520</a> <a href="https://github.com/vitest-dev/vitest/commit/b61d1ced3"><!-- raw HTML omitted -->(b61d1)<!-- raw HTML omitted --></a></li> <li>Avoid extra scroll outside the iframe - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11523">vitest-dev/vitest#11523</a> <a href="https://github.com/vitest-dev/vitest/commit/662e8a363"><!-- raw HTML omitted -->(662e8)<!-- raw HTML omitted --></a></li> <li>Run browser instances as workers - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11525">vitest-dev/vitest#11525</a> <a href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc"><!-- raw HTML omitted -->(bf04b)<!-- raw HTML omitted --></a> <ul> <li>⚠️ This can degrade performance if you have a custom <code>maxWorkers</code> setting. Previously, it was applied incorrectly and could lead to Vitest using too many resources. For example, a lower number would still open too many browsers. Fixing it means Vitest opens less instances by default now.</li> </ul> </li> <li>Open one cdp session per tester - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11542">vitest-dev/vitest#11542</a> <a href="https://github.com/vitest-dev/vitest/commit/69e6369f6"><!-- raw HTML omitted -->(69e63)<!-- raw HTML omitted --></a></li> <li>Clean up unmocked and pending mocks - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11537">vitest-dev/vitest#11537</a> <a href="https://github.com/vitest-dev/vitest/commit/5c9552173"><!-- raw HTML omitted -->(5c955)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>coverage</strong>: <ul> <li>V8 browser memory leak between test files - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11466">vitest-dev/vitest#11466</a> <a href="https://github.com/vitest-dev/vitest/commit/2297d93a8"><!-- raw HTML omitted -->(2297d)<!-- raw HTML omitted --></a></li> <li><code>allowExternal</code> fails to include uncovered files - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11513">vitest-dev/vitest#11513</a> <a href="https://github.com/vitest-dev/vitest/commit/4ef000a93"><!-- raw HTML omitted -->(4ef00)<!-- raw HTML omitted --></a></li> <li>Filenames containing brackets incorrectly showing as uncovered - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11531">vitest-dev/vitest#11531</a> <a href="https://github.com/vitest-dev/vitest/commit/0fa80f53c"><!-- raw HTML omitted -->(0fa80)<!-- raw HTML omitted --></a></li> <li>Istanbul coverage wrong when module transform warmups - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11529">vitest-dev/vitest#11529</a> <a href="https://github.com/vitest-dev/vitest/commit/9f61dcca2"><!-- raw HTML omitted -->(9f61d)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>deps</strong>: <ul> <li>Update all non-major dependencies - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11167">vitest-dev/vitest#11167</a> <a href="https://github.com/vitest-dev/vitest/commit/c74e099a9"><!-- raw HTML omitted -->(c74e0)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Fix <code>Map</code> and <code>Set</code> deep equality in some assertions - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude Opus 5.5</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11402">vitest-dev/vitest#11402</a> <a href="https://github.com/vitest-dev/vitest/commit/b4e79fd7a"><!-- raw HTML omitted -->(b4e79)<!-- raw HTML omitted --></a></li> <li>Check value in chai-style returned - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11500">vitest-dev/vitest#11500</a> <a href="https://github.com/vitest-dev/vitest/commit/1aca02a21"><!-- raw HTML omitted -->(1aca0)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>mocker</strong>: <ul> <li>Fix native loader mocking edge cases - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11540">vitest-dev/vitest#11540</a> <a href="https://github.com/vitest-dev/vitest/commit/cd423ba04"><!-- raw HTML omitted -->(cd423)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>pretty-format</strong>:</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/6a11cf66f99fa610b7364363d5ca42b66d994f40"><code>6a11cf6</code></a> chore: release v5.0.4 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11554">#11554</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/58c86edb92ec4d470dc87c060002cbd5725900de"><code>58c86ed</code></a> chore(deps): update all non-major dependencies (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11550">#11550</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/0fa80f53c2afa3429ead7f357f0ad266b39b240a"><code>0fa80f5</code></a> fix(coverage): filenames containing brackets incorrectly showing as uncovered...</li> <li><a href="https://github.com/vitest-dev/vitest/commit/bf04b9ccc7235949e63490d310cdca00e61b3e4a"><code>bf04b9c</code></a> fix(browser): run browser instances as workers (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11525">#11525</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/3e3624c5e5ecf77b20065da1aeb60f1182db0ccd"><code>3e3624c</code></a> refactor: resolve maxWorkers once in config (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11524">#11524</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/26642f7936e04ec2591ad1d9b3500642423ba8ce"><code>26642f7</code></a> fix: respect root in projects (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11521">#11521</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/c06012ac8419ca4ea14a8808aedc8b0120111f81"><code>c06012a</code></a> feat(experimental): add an option to cache dependencies instead of statically...</li> <li><a href="https://github.com/vitest-dev/vitest/commit/4ef000a938ca3e54eee1c8dd02e2eb9b1afff0c3"><code>4ef000a</code></a> fix(coverage): <code>allowExternal</code> fails to include uncovered files (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11513">#11513</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/1da66405d5e979299601a8c7fd13fb0f78e74495"><code>1da6640</code></a> feat: support <code>test.ui.theme</code> option (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11499">#11499</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/b618afd5cce6a903ca16e0dd9c8f00b58bb0b474"><code>b618afd</code></a> fix(vm): bind <code>this</code> to <code>module.exports</code> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11504">#11504</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-15 13:55:23 +00:00
dependabot[bot]	edf42be679	chore(deps): Bump react-resizable-panels from 4.14.3 to 4.14.4 in the react group (#2237 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.14.3 to 4.14.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.4</h2> <ul> <li>Fix pointer events in one document affecting groups mounted in another (e.g. a popup window). The resize cursor is now only shown in the document that contains the active group. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/762">#762</a></li> <li>Fix an error thrown by an <code>onLayoutChange</code>, <code>onLayoutChanged</code>, or <code>onResize</code> callback leaving a drag stuck in the active state or preventing other groups from being updated. The error is now re-thrown once all groups have been updated. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/763">#763</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.4</h2> <ul> <li>Fix pointer events in one document affecting groups mounted in another (e.g. a popup window). The resize cursor is now only shown in the document that contains the active group. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/762">#762</a></li> <li>Fix an error thrown by an <code>onLayoutChange</code>, <code>onLayoutChanged</code>, or <code>onResize</code> callback leaving a drag stuck in the active state or preventing other groups from being updated. The error is now re-thrown once all groups have been updated. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/763">#763</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/b070a13ecad02ac814a7de85a4a288febdebfb61"><code>b070a13</code></a> 4.14.3 -> 4.14.4</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/cf40d48f1ed06441344c0546411e43c2ab1816fc"><code>cf40d48</code></a> Defer errors thrown by layout change callbacks so drags always finish cleanly...</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/ada7a2130f73112c733804cb8bdb4aea7e7ef5b2"><code>ada7a21</code></a> fix: ignore hit targets from other documents (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/762">#762</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/f4c06add8848836e65cbbd20a02f8de0d6be4618"><code>f4c06ad</code></a> Update CHANGELOG</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.3...4.14.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.3&new-version=4.14.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-14 21:17:00 +00:00
dependabot[bot]	8787a397dc	chore(deps): Bump maplibre-gl from 6.13.0 to 6.14.0 (#2236 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.13.0 to 6.14.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.14.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Allow calling <code>new Map({ globalState: { ... }})</code> and <code>setStyle({ globalState: ... })</code> to provide an initial global state for the map style, overriding the global state defaults from the style (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7632">#7632</a>) (by <a href="https://github.com/hiddewie"><code>@hiddewie</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>fix: <code>ScaleControl</code> throwing when its sample points miss the globe (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8720">#8720</a>) (by <a href="https://github.com/SatvikMishra08"><code>@SatvikMishra08</code></a>)</li> <li>Fix a rendering crash when <code>removeFeatureState</code> removes a property before feature state is set (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8715">#8715</a>) (by <a href="https://github.com/yeomin4242"><code>@yeomin4242</code></a>)</li> <li>Work around blank, unresponsive maps on affected iPadOS 16 Safari devices (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8364">#8364</a>) (by <a href="https://github.com/samuelsmarason"><code>@samuelsmarason</code></a>)</li> <li>Fix circles with <code>circle-pitch-alignment: map</code> being drawn too large while the globe transitions to mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8714">#8714</a>) (by <a href="https://github.com/heikki"><code>@heikki</code></a>)</li> <li>Fix <code>map.resize(eventData, false)</code> constraining the camera with the <code>vertical-perspective</code> projection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8695">#8695</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix an uncaught error when <code>setStyle</code> is called while the WebGL context is lost, since 6.12.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8693">#8693</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix the view sliding hundreds of meters off the center when terrain is switched on during a gesture (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8688">#8688</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix the camera jumping back at the end of a pan, flick or rotation into terrain (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8692">#8692</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>flyTo</code> dropping the <code>offset</code> and <code>around</code> options under <code>prefers-reduced-motion</code>, so a reduced-motion fly lands at the same camera as the animated one (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8730">#8730</a>) (by <a href="https://github.com/maartenla"><code>@maartenla</code></a>)</li> <li>Fix <code>load</code> and <code>idle</code> never firing when the last tile fails with a status other than 404 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8733">#8733</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.14.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Allow calling <code>new Map({ globalState: { ... }})</code> and <code>setStyle({ globalState: ... })</code> to provide an initial global state for the map style, overriding the global state defaults from the style (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7632">#7632</a>) (by <a href="https://github.com/hiddewie"><code>@hiddewie</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>fix: <code>ScaleControl</code> throwing when its sample points miss the globe (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8720">#8720</a>) (by <a href="https://github.com/SatvikMishra08"><code>@SatvikMishra08</code></a>)</li> <li>Fix a rendering crash when <code>removeFeatureState</code> removes a property before feature state is set (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8715">#8715</a>) (by <a href="https://github.com/yeomin4242"><code>@yeomin4242</code></a>)</li> <li>Work around blank, unresponsive maps on affected iPadOS 16 Safari devices (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8364">#8364</a>) (by <a href="https://github.com/samuelsmarason"><code>@samuelsmarason</code></a>)</li> <li>Fix circles with <code>circle-pitch-alignment: map</code> being drawn too large while the globe transitions to mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8714">#8714</a>) (by <a href="https://github.com/heikki"><code>@heikki</code></a>)</li> <li>Fix <code>map.resize(eventData, false)</code> constraining the camera with the <code>vertical-perspective</code> projection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8695">#8695</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix an uncaught error when <code>setStyle</code> is called while the WebGL context is lost, since 6.12.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8693">#8693</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix the view sliding hundreds of meters off the center when terrain is switched on during a gesture (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8688">#8688</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix the camera jumping back at the end of a pan, flick or rotation into terrain (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8692">#8692</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>flyTo</code> dropping the <code>offset</code> and <code>around</code> options under <code>prefers-reduced-motion</code>, so a reduced-motion fly lands at the same camera as the animated one (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8730">#8730</a>) (by <a href="https://github.com/maartenla"><code>@maartenla</code></a>)</li> <li>Fix <code>load</code> and <code>idle</code> never firing when the last tile fails with a status other than 404 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8733">#8733</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/72927301b7594536630d896c45c64c4d0d4c587f"><code>7292730</code></a> Bump js version to 6.14.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8737">#8737</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/9d3c6b3fbf7ed80de3647e12aaedb77b20e370b4"><code>9d3c6b3</code></a> Fix rendering crash when removing a property before feature state is set (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8715">#8715</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/8e23433a1e908fe99e3c026e0cf9b2df3eccb527"><code>8e23433</code></a> fix: load and idle never firing when the last tile fails with a non-404 statu...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/873377f3752176d80cba25fd7db50f8a8068b7f4"><code>873377f</code></a> feat: Allow providing initial global state and style transform for map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8264">#8264</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/5d5dea20251577887eff9652ff009b02903d048a"><code>5d5dea2</code></a> Keep offset and around when flyTo honors prefers-reduced-motion (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8730">#8730</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/7e493d21b8bcdb1bf741a81be50b19025501c42a"><code>7e493d2</code></a> fix: <code>ScaleControl</code> throwing when its sample points miss the globe (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8720">#8720</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/6d26435e525263e6e04926db0a7211613aa8e69e"><code>6d26435</code></a> chore(deps-dev): bump monocart-coverage-reports from 2.13.0 to 2.13.1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8728">#8728</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/398f8740025c1973fe90667a8415ad567984be10"><code>398f874</code></a> chore(deps): bump zensical/zensical from 0.0.67 to 0.0.68 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8729">#8729</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/93f5c6ce4131a1a588ba37c23fb6afece7d36cc5"><code>93f5c6c</code></a> chore(deps-dev): bump the eslint group with 2 updates (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8724">#8724</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/299ab7e914c3f5ea75ab2a9cfdde5b7ebd6bc45b"><code>299ab7e</code></a> chore(deps-dev): bump postcss from 8.5.28 to 8.5.29 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8726">#8726</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.13.0...v6.14.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.13.0&new-version=6.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-14 21:14:54 +00:00
dependabot[bot]	61c08d2da0	chore(deps-dev): Bump vite from 8.3.3 to 8.3.4 (#2229 ) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.3.3 to 8.3.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.3.4</h2> <h3>Features</h3> <ul> <li><strong>bundled-dev:</strong> support <code>import.meta.hot.acceptExports</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>) (<a href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>avoid mutating hmr defaults (fix <a href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>) (<a href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li> <li><strong>build:</strong> correct preloads when chunkImportMap is enabled with non-root base (<a href="https://redirect.github.com/vitejs/vite/issues/23698">#23698</a>) (<a href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd">2a8c0f0</a>)</li> <li><strong>build:</strong> wait for in-flight stylesheets in preload helper (fix <a href="https://redirect.github.com/vitejs/vite/issues/23652">#23652</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23662">#23662</a>) (<a href="https://github.com/vitejs/vite/commit/036b74599b2fe1d8c61475371b856ceb88d26963">036b745</a>)</li> <li><strong>bundled-dev:</strong> serve <code>/@vite/client</code> and stub <code>@vite/env</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23664">#23664</a>) (<a href="https://github.com/vitejs/vite/commit/5afc5a8876624888fc1e8f43fed1c85c4b0e830b">5afc5a8</a>)</li> <li><strong>client:</strong> skip rewriting unchanged adopted styles (<a href="https://redirect.github.com/vitejs/vite/issues/23697">#23697</a>) (<a href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba">fa71469</a>)</li> <li><strong>css:</strong> resolve imported preprocessors from their file path with lightningcss (<a href="https://redirect.github.com/vitejs/vite/issues/23688">#23688</a>) (<a href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9">cf52011</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23648">#23648</a>) (<a href="https://github.com/vitejs/vite/commit/8a4c19cfc035f2dd203f2fa6d00ab9256a5e77c9">8a4c19c</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23649">#23649</a>) (<a href="https://github.com/vitejs/vite/commit/794516d50cff80e405bc9b3e5faac1c82987566c">794516d</a>)</li> <li><strong>dev:</strong> a restart requested during a restart used to be dropped (fix <a href="https://redirect.github.com/vitejs/vite/issues/23392">#23392</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23484">#23484</a>) (<a href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73">70d56ea</a>)</li> <li>don't treat modules ending with js-like query as js (<a href="https://redirect.github.com/vitejs/vite/issues/23687">#23687</a>) (<a href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0">fcb6f12</a>)</li> <li><strong>html:</strong> avoid adding filesystem root to watcher (<a href="https://redirect.github.com/vitejs/vite/issues/23689">#23689</a>) (<a href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778">3a7f2ae</a>)</li> <li><strong>html:</strong> skip caching CSS of chunks in a cycle (fix <a href="https://redirect.github.com/vitejs/vite/issues/23628">#23628</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23636">#23636</a>) (<a href="https://github.com/vitejs/vite/commit/15d82f7dc679ab9c18d5ce2c3711157c2365ddd1">15d82f7</a>)</li> <li><strong>optimizer:</strong> scan deep imports with custom extensions (<a href="https://redirect.github.com/vitejs/vite/issues/23678">#23678</a>) (<a href="https://github.com/vitejs/vite/commit/8579189bae8626b6ddab55a09325e209d62e027e">8579189</a>)</li> <li>remove input option unescaping for now (<a href="https://redirect.github.com/vitejs/vite/issues/23694">#23694</a>) (<a href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6">facc2fb</a>)</li> <li><strong>server:</strong> match static aliases on path boundaries (<a href="https://redirect.github.com/vitejs/vite/issues/23643">#23643</a>) (<a href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577">b28db28</a>)</li> <li><strong>watcher:</strong> normalize file before root check in <code>ensureWatchedFile</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23673">#23673</a>) (<a href="https://github.com/vitejs/vite/commit/12bb28c22379c8d2fe90088fa0eefbfa2ab3fb80">12bb28c</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>module-runner:</strong> skip cloning call sites that have no source map (<a href="https://redirect.github.com/vitejs/vite/issues/23646">#23646</a>) (<a href="https://github.com/vitejs/vite/commit/3d674869a50a0bca84a8cc8dc55bd35d57100e37">3d67486</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li><strong>bundled-dev:</strong> import CSS HMR helpers from <code>/@vite/client</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23674">#23674</a>) (<a href="https://github.com/vitejs/vite/commit/182f5b2a65391da5bee05f9c3df1aeb3794e98d9">182f5b2</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.3.3...v8.3.4">8.3.4</a> (2026-10-08)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li><strong>bundled-dev:</strong> support <code>import.meta.hot.acceptExports</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23463">#23463</a>) (<a href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e">bc0f21c</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>avoid mutating hmr defaults (fix <a href="https://redirect.github.com/vitejs/vite/issues/23575">#23575</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23576">#23576</a>) (<a href="https://github.com/vitejs/vite/commit/574d5e351905fe99891364d03c2440531378f7fd">574d5e3</a>)</li> <li><strong>build:</strong> correct preloads when chunkImportMap is enabled with non-root base (<a href="https://redirect.github.com/vitejs/vite/issues/23698">#23698</a>) (<a href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd">2a8c0f0</a>)</li> <li><strong>build:</strong> wait for in-flight stylesheets in preload helper (fix <a href="https://redirect.github.com/vitejs/vite/issues/23652">#23652</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23662">#23662</a>) (<a href="https://github.com/vitejs/vite/commit/036b74599b2fe1d8c61475371b856ceb88d26963">036b745</a>)</li> <li><strong>bundled-dev:</strong> serve <code>/@vite/client</code> and stub <code>@vite/env</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23664">#23664</a>) (<a href="https://github.com/vitejs/vite/commit/5afc5a8876624888fc1e8f43fed1c85c4b0e830b">5afc5a8</a>)</li> <li><strong>client:</strong> skip rewriting unchanged adopted styles (<a href="https://redirect.github.com/vitejs/vite/issues/23697">#23697</a>) (<a href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba">fa71469</a>)</li> <li><strong>css:</strong> resolve imported preprocessors from their file path with lightningcss (<a href="https://redirect.github.com/vitejs/vite/issues/23688">#23688</a>) (<a href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9">cf52011</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23648">#23648</a>) (<a href="https://github.com/vitejs/vite/commit/8a4c19cfc035f2dd203f2fa6d00ab9256a5e77c9">8a4c19c</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23649">#23649</a>) (<a href="https://github.com/vitejs/vite/commit/794516d50cff80e405bc9b3e5faac1c82987566c">794516d</a>)</li> <li><strong>dev:</strong> a restart requested during a restart used to be dropped (fix <a href="https://redirect.github.com/vitejs/vite/issues/23392">#23392</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23484">#23484</a>) (<a href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73">70d56ea</a>)</li> <li>don't treat modules ending with js-like query as js (<a href="https://redirect.github.com/vitejs/vite/issues/23687">#23687</a>) (<a href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0">fcb6f12</a>)</li> <li><strong>html:</strong> avoid adding filesystem root to watcher (<a href="https://redirect.github.com/vitejs/vite/issues/23689">#23689</a>) (<a href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778">3a7f2ae</a>)</li> <li><strong>html:</strong> skip caching CSS of chunks in a cycle (fix <a href="https://redirect.github.com/vitejs/vite/issues/23628">#23628</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23636">#23636</a>) (<a href="https://github.com/vitejs/vite/commit/15d82f7dc679ab9c18d5ce2c3711157c2365ddd1">15d82f7</a>)</li> <li><strong>optimizer:</strong> scan deep imports with custom extensions (<a href="https://redirect.github.com/vitejs/vite/issues/23678">#23678</a>) (<a href="https://github.com/vitejs/vite/commit/8579189bae8626b6ddab55a09325e209d62e027e">8579189</a>)</li> <li>remove input option unescaping for now (<a href="https://redirect.github.com/vitejs/vite/issues/23694">#23694</a>) (<a href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6">facc2fb</a>)</li> <li><strong>server:</strong> match static aliases on path boundaries (<a href="https://redirect.github.com/vitejs/vite/issues/23643">#23643</a>) (<a href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577">b28db28</a>)</li> <li><strong>watcher:</strong> normalize file before root check in <code>ensureWatchedFile</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23673">#23673</a>) (<a href="https://github.com/vitejs/vite/commit/12bb28c22379c8d2fe90088fa0eefbfa2ab3fb80">12bb28c</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>module-runner:</strong> skip cloning call sites that have no source map (<a href="https://redirect.github.com/vitejs/vite/issues/23646">#23646</a>) (<a href="https://github.com/vitejs/vite/commit/3d674869a50a0bca84a8cc8dc55bd35d57100e37">3d67486</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li><strong>bundled-dev:</strong> import CSS HMR helpers from <code>/@vite/client</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23674">#23674</a>) (<a href="https://github.com/vitejs/vite/commit/182f5b2a65391da5bee05f9c3df1aeb3794e98d9">182f5b2</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/b6c20f6a8126d8561891e5fb9368e8fc9da37538"><code>b6c20f6</code></a> release: v8.3.4 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23702">#23702</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/b28db28e9e62d9866a9a0f1b22e74589cc180577"><code>b28db28</code></a> fix(server): match static aliases on path boundaries (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23643">#23643</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/bc0f21c56a2e003a4d2dd23ccb9da3ec8c706c4e"><code>bc0f21c</code></a> feat(bundled-dev): support <code>import.meta.hot.acceptExports</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23463">#23463</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/fa7146938b0ca703653c90c20907191a01c032ba"><code>fa71469</code></a> fix(client): skip rewriting unchanged adopted styles (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23697">#23697</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/2a8c0f05c76e35c43ab3560984a5103c8db8dbcd"><code>2a8c0f0</code></a> fix(build): correct preloads when chunkImportMap is enabled with non-root bas...</li> <li><a href="https://github.com/vitejs/vite/commit/3a7f2aea757d59bae66ad6edf6b321d26a7e6778"><code>3a7f2ae</code></a> fix(html): avoid adding filesystem root to watcher (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23689">#23689</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/facc2fb1fffce03d9e2dd7011d0bd0eeddc7d0f6"><code>facc2fb</code></a> fix: remove input option unescaping for now (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23694">#23694</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/70d56ea1848909edab416934f3f68ce14343eb73"><code>70d56ea</code></a> fix(dev): a restart requested during a restart used to be dropped (fix <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23392">#23392</a>...</li> <li><a href="https://github.com/vitejs/vite/commit/cf52011c46409a4a45f3d74bba631b8f005c4bc9"><code>cf52011</code></a> fix(css): resolve imported preprocessors from their file path with lightningc...</li> <li><a href="https://github.com/vitejs/vite/commit/fcb6f1252a95857823d935f98554b938888d41a0"><code>fcb6f12</code></a> fix: don't treat modules ending with js-like query as js (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23687">#23687</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.3.4/packages/vite">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 15:09:24 +00:00
dependabot[bot]	d391a1d2d8	chore(deps): Bump i18next from 26.4.2 to 26.4.3 (#2231 ) Bumps [i18next](https://github.com/i18next/i18next) from 26.4.2 to 26.4.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v26.4.3</h2> <ul> <li>perf: <code>ResourceStore.hasLanguageSomeTranslations()</code> no longer enumerates every key of a large bundle on each call. It ran <code>Object.keys()</code> on the whole bundle just to learn whether it had at least one key, and <code>init()</code> / <code>changeLanguage()</code> reach it three times per instance (once while picking the language, twice via <code>setResolvedLanguage()</code>). With large flat bundles and one i18next instance per SSR request reusing the same resources, that showed up as measurable CPU work before any <code>t()</code> call. Bundle objects already found non-empty are now remembered in a <code>WeakSet</code> shared across instances, so later checks are O(1): 2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the same as a one-key bundle. Only the non-empty result is cached. No API removes single keys from a bundle, so a non-empty bundle stays non-empty, and empty bundles are re-checked every time, so keys added later (backend loads, <code>addResource</code>, <code>addResourceBundle</code>, direct or silent changes) count right away. The only edge case: a bundle emptied by hand with <code>delete</code> on every key while it is still in the store keeps counting as having translations; use <code>removeResourceBundle()</code> for that. Thanks <a href="https://github.com/dmchoi77"><code>@dmchoi77</code></a> for the detailed report (<a href="https://redirect.github.com/i18next/i18next/issues/2449">#2449</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>26.4.3</h2> <ul> <li>perf: <code>ResourceStore.hasLanguageSomeTranslations()</code> no longer enumerates every key of a large bundle on each call. It ran <code>Object.keys()</code> on the whole bundle just to learn whether it had at least one key, and <code>init()</code> / <code>changeLanguage()</code> reach it three times per instance (once while picking the language, twice via <code>setResolvedLanguage()</code>). With large flat bundles and one i18next instance per SSR request reusing the same resources, that showed up as measurable CPU work before any <code>t()</code> call. Bundle objects already found non-empty are now remembered in a <code>WeakSet</code> shared across instances, so later checks are O(1): 2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the same as a one-key bundle. Only the non-empty result is cached. No API removes single keys from a bundle, so a non-empty bundle stays non-empty, and empty bundles are re-checked every time, so keys added later (backend loads, <code>addResource</code>, <code>addResourceBundle</code>, direct or silent changes) count right away. The only edge case: a bundle emptied by hand with <code>delete</code> on every key while it is still in the store keeps counting as having translations; use <code>removeResourceBundle()</code> for that. Thanks <a href="https://github.com/dmchoi77"><code>@dmchoi77</code></a> for the detailed report (<a href="https://redirect.github.com/i18next/i18next/issues/2449">#2449</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/0d2845a2360dcc236fe9681f849781f5dfdd35c4"><code>0d2845a</code></a> 26.4.3</li> <li><a href="https://github.com/i18next/i18next/commit/a2dbe15e844b7f897ff5851419ba000fbacdbc45"><code>a2dbe15</code></a> build</li> <li><a href="https://github.com/i18next/i18next/commit/e75843ffeac038a961f91181d963ae4a8f228976"><code>e75843f</code></a> perf: cache non-empty bundles in hasLanguageSomeTranslations, changelog v26.4.3</li> <li><a href="https://github.com/i18next/i18next/commit/edaea71b729aa54dc35d5e7dfea72b2b12f24a61"><code>edaea71</code></a> Fix TypeScript examples build and update them to i18next v26 (<a href="https://redirect.github.com/i18next/i18next/issues/2448">#2448</a>)</li> <li><a href="https://github.com/i18next/i18next/commit/4ebd19d89111fa558d7086f6be64eb748bad6327"><code>4ebd19d</code></a> docs: "For AI assistants" paragraph in the README and a fuller saveMissing JSDoc</li> <li>See full diff in <a href="https://github.com/i18next/i18next/compare/v26.4.2...v26.4.3">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 15:03:20 +00:00
dependabot[bot]	74d6263e2b	chore(deps-dev): Bump uuid from 14.0.2 to 14.0.3 (#2232 ) Bumps [uuid](https://github.com/uuidjs/uuid) from 14.0.2 to 14.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uuidjs/uuid/releases">uuid's releases</a>.</em></p> <blockquote> <h2>v14.0.3</h2> <h2><a href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">14.0.3</a> (2026-10-09)</h2> <h3>Bug Fixes</h3> <ul> <li>fix CITGM <a href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>) (<a href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac">b44f159</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md">uuid's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">14.0.3</a> (2026-10-09)</h2> <h3>Bug Fixes</h3> <ul> <li>fix CITGM <a href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>) (<a href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac">b44f159</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uuidjs/uuid/commit/993ff7b64a289ef7f921ccafc8bb98ef9461d214"><code>993ff7b</code></a> chore(main): release 14.0.3 (<a href="https://redirect.github.com/uuidjs/uuid/issues/982">#982</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/f7d19b9b5fea8671059e58aea380ac546100448c"><code>f7d19b9</code></a> chore: update workflow actions (<a href="https://redirect.github.com/uuidjs/uuid/issues/983">#983</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/b44f159d5a4af4eb7a144ab35dcabcfd58ef0aac"><code>b44f159</code></a> fix: fix CITGM <a href="https://redirect.github.com/uuidjs/uuid/issues/1154">#1154</a> (<a href="https://redirect.github.com/uuidjs/uuid/issues/981">#981</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/dd8c173521bb3faacb11ff244233df4a0dcde545"><code>dd8c173</code></a> chore: update deps (<a href="https://redirect.github.com/uuidjs/uuid/issues/975">#975</a>)</li> <li>See full diff in <a href="https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3">compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=uuid&package-manager=npm_and_yarn&previous-version=14.0.2&new-version=14.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:55:10 +00:00
dependabot[bot]	47c00a4bc5	chore(deps): Bump react-resizable-panels from 4.14.2 to 4.14.3 in the react group (#2227 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.14.2 to 4.14.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.3</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/761">761</a> Bugfix: A drag interrupted by <code>pointercancel</code>, <code>lostpointercapture</code>, or the window losing focus (e.g. Alt/Cmd+Tab) now ends and commits the current layout, rather than staying active until the next pointer event</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.3</h2> <ul> <li>Fix drags interrupted by <code>"pointercancel"</code>, <code>"lostpointercapture"</code>, or the window losing focus (e.g. Alt/Cmd+Tab) staying active until the next pointer event. The drag now ends and commits the current layout. - <a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/761">#761</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/6abc6ac81e51819edecd40b71ac2c580f472093a"><code>6abc6ac</code></a> 4.14.2 -> 4.14.3</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/5ac3e5cdedbd528588e6abb47648e32287d78e00"><code>5ac3e5c</code></a> Bugfix: Handle drags interrupted by "pointercancel", "lostpointercapture", or...</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.2...4.14.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.2&new-version=4.14.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:54:39 +00:00
dependabot[bot]	f0ed53c4e5	chore(deps-dev): Bump i18next-cli from 1.74.7 to 1.75.2 (#2234 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.7 to 1.75.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.75.2</h2> <ul> <li>fix(extract): declarations with the same name in different files no longer overwrite each other. Two generated OpenAPI clients that both export <code>components</code> resolved to whichever file was read first, so <code>import { components as githubComponents } from './github-api'</code> and <code>import { components as digitalOceanComponents } from './digital-ocean-api'</code> extracted the keys of only one of them, and moving files around changed which. A name now resolves to the module the file imports it from, for renamed and plain imports, namespace imports (<code>GH.components</code>), <code>.js</code> import specifiers and tsconfig <code>paths</code> aliases. Imports that cannot be traced to a scanned file (packages, re-exporting barrels) still resolve by name as before. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/306">#306</a>.</li> </ul> <h2>1.75.1</h2> <ul> <li>fix(extract): types and values read through a namespace import resolve like named imports. With <code>import * as Types from './types'</code>, a qualified type (<code>(color: Types.Color) => …</code>, <code>x as Types.Color</code>, <code>FC<Types.Props></code>, <code>declare const s: Types.Status</code>) and a namespace member (<code>Types.SIZES.map(…)</code>, <code>Types.Status.Done</code>, <code>t(Types.LABELS.save)</code>, <code>Object.keys(Types.LABELS)</code>) now extract their keys, also for a namespace re-exported from a barrel (<code>export * as Shared from './types'</code>). Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/305">#305</a>.</li> <li>fix(extract): an exported <code>as const</code> object resolves in the files that import it: <code>t(LABELS.save)</code> and <code>Object.keys(LABELS)</code> only worked in the declaring file before.</li> <li>fix(extract): a value typed <code>keyof typeof MAP</code> resolves to the map's keys, so <code>t(`label.${key}`)</code> with <code>declare const key: keyof typeof LABELS</code> extracts <code>label.save</code> and <code>label.cancel</code>. This branch never matched before.</li> </ul> <h2>1.75.0</h2> <ul> <li>feat(extract): new <code>extract.maxTypeDepth</code> option sets how many levels of nested object members are followed when a dynamic key reads a typed value (default: 5). Higher values cost time and memory on large recursive types such as OpenAPI schemas. Requested in <a href="https://redirect.github.com/i18next/i18next-cli/issues/302#issuecomment-6039348480">#302</a>.</li> <li>fix(extract): the depth now counts from the type an indexed access picks instead of from the declared wrapper type. <code>type Pet = components['schemas']['Pet']</code> gets the full depth below <code>Pet</code>, where the <code>components</code>/<code>schemas</code> wrapper used to take two of the five levels.</li> <li>fix(extract): numeric keys resolve in object types and indexed access types, so openapi-typescript response types work: <code>operations['getPet']['responses'][200]['content']['application/json']</code> and <code>op.responses[200].content['application/json'].status</code> resolved nothing before.</li> </ul> <h2>1.74.8</h2> <ul> <li>fix(extract): a commented template literal no longer extracts its placeholder as a key. <code>// t(`QUARTER.${q}`)</code> extracted <code>QUARTER.${q}</code> and <code>// t(`status.${deepObject.status}`)</code> extracted <code>status.${deepObject.status}</code>. Such a comment now keeps the existing keys it matches (<code>QUARTER.1</code>, <code>QUARTER.2</code>, …) even with <code>removeUnusedKeys</code>, the way a commented static key keeps its key, while code can still add new matching keys. A pattern without any static part (<code>`${a}.${b}`</code>) is ignored. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/304">#304</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/540b3beac7737ce066af47875be7f1dd360bd12c"><code>540b3be</code></a> 1.75.2</li> <li><a href="https://github.com/i18next/i18next-cli/commit/9cc03de706dc8990dc0c801240e1cfea33f7cf37"><code>9cc03de</code></a> fix(extract): resolve same-named declarations by the module they are imported...</li> <li><a href="https://github.com/i18next/i18next-cli/commit/dd21f26554aec73b9e2d5d2670ea9ecdc0ad1562"><code>dd21f26</code></a> 1.75.1</li> <li><a href="https://github.com/i18next/i18next-cli/commit/7c637a89b5e76a29e6e8f063e9901068d10449fa"><code>7c637a8</code></a> fix(extract): resolve types and values read through a namespace import <a href="https://redirect.github.com/i18next/i18next-cli/issues/305">#305</a></li> <li><a href="https://github.com/i18next/i18next-cli/commit/ef3ebc58cb1e55d2fbe2d1d418518c8f8b539dd9"><code>ef3ebc5</code></a> 1.75.0</li> <li><a href="https://github.com/i18next/i18next-cli/commit/33d47ac8d6b8fc2429745a9f43036fea83f4b7ac"><code>33d47ac</code></a> feat(extract): add maxTypeDepth, count it from the indexed type, resolve nume...</li> <li><a href="https://github.com/i18next/i18next-cli/commit/747d5e91bc31f866f6bd2048b8efecd4ac8389b4"><code>747d5e9</code></a> 1.74.8</li> <li><a href="https://github.com/i18next/i18next-cli/commit/a8246695cf1306ff1e7cbf69f62b4941c053bd44"><code>a824669</code></a> fix(extract): keep the keys a commented template literal matches instead of e...</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.74.7...v1.75.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.7&new-version=1.75.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:53:14 +00:00
dependabot[bot]	890fbf5764	chore(deps): Bump @codemirror/view from 6.43.13 to 6.43.14 (#2235 ) Bumps [@codemirror/view](https://github.com/codemirror/view) from 6.43.13 to 6.43.14. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/codemirror/view/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/view&package-manager=npm_and_yarn&previous-version=6.43.13&new-version=6.43.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:51:51 +00:00
dependabot[bot]	15161f7dd4	chore(deps): Bump maplibre-gl from 6.12.0 to 6.13.0 (#2233 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.12.0 to 6.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.13.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Let the globe center reach the poles, where it stopped at 85.05° (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8629">#8629</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Speed up symbol layout by skipping line breaking for labels that fit on one line (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8617">#8617</a>) (by <a href="https://github.com/DoFabien"><code>@DoFabien</code></a>)</li> <li>Add experimental <code>CustomLayerInterface.renderToTerrainTile</code>, <code>CustomLayerInterface.terrainTileRevision</code> and <code>renderTerrainHeightMap</code> in the options of <code>prerender</code>, so custom layers can drape what they draw over the terrain and place objects on it on the GPU (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8588">#8588</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix a stale cached worker crashing the map after an upgrade: the worker is self-contained again instead of importing <code>maplibre-gl-shared.mjs</code>, and its default URL carries the version as a <code>v</code> query parameter. <code>maplibre-gl-shared.mjs</code> and <code>maplibre-gl-shared-dev.mjs</code> are now empty files, kept so that existing copy steps don't fail; they are deprecated and will be removed in the next major version (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8621">#8621</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix <code>globeDistanceOfLocationsPixels</code> returning <code>NaN</code> when two copies of the same point have a dot product slightly above 1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8624">#8624</a>)(by <a href="https://github.com/Dimononon"><code>@Dimononon</code></a>)</li> <li>Keep the camera above the terrain, where a scroll zoom into a mountain could take it under the surface and the zoom's end throw it kilometers up (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.13.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Let the globe center reach the poles, where it stopped at 85.05° (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8629">#8629</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Speed up symbol layout by skipping line breaking for labels that fit on one line (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8617">#8617</a>) (by <a href="https://github.com/DoFabien"><code>@DoFabien</code></a>)</li> <li>Add experimental <code>CustomLayerInterface.renderToTerrainTile</code>, <code>CustomLayerInterface.terrainTileRevision</code> and <code>renderTerrainHeightMap</code> in the options of <code>prerender</code>, so custom layers can drape what they draw over the terrain and place objects on it on the GPU (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8588">#8588</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix a stale cached worker crashing the map after an upgrade: the worker is self-contained again instead of importing <code>maplibre-gl-shared.mjs</code>, and its default URL carries the version as a <code>v</code> query parameter. <code>maplibre-gl-shared.mjs</code> and <code>maplibre-gl-shared-dev.mjs</code> are now empty files, kept so that existing copy steps don't fail; they are deprecated and will be removed in the next major version (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8621">#8621</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix <code>globeDistanceOfLocationsPixels</code> returning <code>NaN</code> when two copies of the same point have a dot product slightly above 1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8624">#8624</a>)(by <a href="https://github.com/Dimononon"><code>@Dimononon</code></a>)</li> <li>Keep the camera above the terrain, where a scroll zoom into a mountain could take it under the surface and the zoom's end throw it kilometers up (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/f67ac5e45ce441c6eef7c395ad2bbde7ed717c5d"><code>f67ac5e</code></a> Bump js version to 6.13.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8685">#8685</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/04761779dd45b4537ce1e3e0aa4054ece9df4497"><code>0476177</code></a> fix: keep the camera above the terrain (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8547">#8547</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/eaf272ce8b7ef5ebb55f1f3e86cf104d6de0e16d"><code>eaf272c</code></a> chore(deps-dev): bump shell-quote (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8682">#8682</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/e0a0d7766fbabf7d7da0a27ad07e24b5c1f45dde"><code>e0a0d77</code></a> chore(deps-dev): bump shell-quote from 1.10.0 to 1.12.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8683">#8683</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/84f4d81ee2f75d32436fa2afc8cc6ac82b947069"><code>84f4d81</code></a> fix: revert shared mjs file (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8672">#8672</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/f98ef79b472280c9d7d1f0e6c4da3631080e358f"><code>f98ef79</code></a> Make the 3D Tiles example use maplibre-gl-three, add raycast example (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8567">#8567</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/372a40b821d7fc049c43100934fe6b4e63e2c615"><code>372a40b</code></a> GM2.14 Move the painter's leftover helpers to their owners (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8678">#8678</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/6ef0e295159fac8bbd71e81fbfc592bd957f5b4e"><code>6ef0e29</code></a> GM2.13 Remove the style reference from the painter (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8668">#8668</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/5e5ab7e49ad7a3e16eb47a7eda26c98e9d883fc2"><code>5e5ab7e</code></a> chore(deps): bump the npm_and_yarn group across 4 directories with 3 updates ...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/0343f27a9b7e5f9bec51a4078c974fb61b9e4d69"><code>0343f27</code></a> chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8676">#8676</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.12.0...v6.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.12.0&new-version=6.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:51:48 +00:00
dependabot[bot]	cde81d4d7c	chore(deps-dev): Bump @playwright/test from 1.63.0 to 1.64.0 (#2230 ) Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.63.0 to 1.64.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/playwright/releases">@playwright/test's releases</a>.</em></p> <blockquote> <h2>v1.64.0</h2> <h2>🧰 WebMCP</h2> <p>New <a href="https://playwright.dev/docs/api/class-page#page-webmcp">page.webmcp</a> and <a href="https://playwright.dev/docs/api/class-frame#frame-webmcp">frame.webmcp</a> give access to the tools that a page registers through the experimental <a href="https://playwright.dev/docs/api/class-webmcp">WebMCP</a> browser API, so you can test them like any other part of your app:</p> <pre lang="js"><code>const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] }); const page = await browser.newPage(); await page.goto('https://example.com'); <p>for (const tool of await page.webmcp.tools()) console.log(tool.name, tool.description);</p> <p>const result = await page.webmcp.callTool('add', { a: 2, b: 40 }); console.log(result.content[0].text); // "42" </code></pre></p> <p><a href="https://playwright.dev/docs/getting-started-mcp">Playwright MCP</a> also supports WebMCP by default, with page-defined tools offered to the agent as <code>webmcp_<tool></code>. Pass <code>--no-webmcp</code> to opt out.</p> <p><a href="https://playwright.dev/docs/getting-started-cli"><code>playwright-cli</code></a> exposes them as well:</p> <pre lang="bash"><code>playwright-cli webmcp-list playwright-cli webmcp-call search_catalog --params '{"query":"cats"}' </code></pre> <h2>🎬 Better videos</h2> <p>Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:</p> <pre lang="js"><code>// playwright.config.ts import { defineConfig } from '@playwright/test'; <p>export default defineConfig({ use: { video: { mode: 'on', size: { width: 1920, height: 1080 }, fps: 60, show: { actions: { style: { point: 'width: 20px; height: 20px; border-radius: 50%; background: red', highlight: 'outline: 2px solid <a href="https://redirect.github.com/microsoft/playwright/issues/333">#333</a>; background: rgba(0, 128, 255, .15)', title: 'font-size: 16px', }, }, }, }, </tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/playwright/commit/606ecd8b34bac100db32561b6278ffd76e5eb3cd"><code>606ecd8</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43192">#43192</a>): fix(locators): parse locators the way the client API bui...</li> <li><a href="https://github.com/microsoft/playwright/commit/e4f872c79530583300185d3e4aa9689e2f85d0b0"><code>e4f872c</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43188">#43188</a>): feat(api): expose asLocatorDescription via LocalUtils fo...</li> <li><a href="https://github.com/microsoft/playwright/commit/f6a439e6f496f75d8e8b687116eef8c21316aa1f"><code>f6a439e</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43189">#43189</a>): docs(webmcp): expose WebMCP to all languages</li> <li><a href="https://github.com/microsoft/playwright/commit/e2335c30f16196a96f81c099598803ca74f9120c"><code>e2335c3</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43174">#43174</a>): fix(mcp): do not close the browser twice when the client...</li> <li><a href="https://github.com/microsoft/playwright/commit/d2a436e0111091ba99836fa6711de28201606cfc"><code>d2a436e</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43163">#43163</a>): Revert "fix(blob): do not remove existing reports from o...</li> <li><a href="https://github.com/microsoft/playwright/commit/a0c4b5efc965577e19f5ebfdcc27f384d3058783"><code>a0c4b5e</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43175">#43175</a>): feat(api): return language-specific locator code from re...</li> <li><a href="https://github.com/microsoft/playwright/commit/3f7d535c7b69ff1997307dc304c3c8c76b51179d"><code>3f7d535</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43131">#43131</a>): docs: fix broken C# samples in API docs and handles guide</li> <li><a href="https://github.com/microsoft/playwright/commit/1cde64f74a0f85304f2f4091a46670bf9a3e0dc3"><code>1cde64f</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43170">#43170</a>): fix(locators): parse mixed role options</li> <li><a href="https://github.com/microsoft/playwright/commit/8851e7296508ae50cd1f822e50d1e4fa92eab218"><code>8851e72</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43171">#43171</a>): fix(locators): parse JavaScript escapes and regex classes</li> <li><a href="https://github.com/microsoft/playwright/commit/dcc50654872510b630c73ec6eba1fb3d625c735e"><code>dcc5065</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/43172">#43172</a>): fix(locator): parse within and getByRef locators</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/playwright/compare/v1.63.0...v1.64.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.63.0&new-version=1.64.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:51:34 +00:00
dependabot[bot]	536e5993f2	chore(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#2226 ) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.2</h2> <h2>What's Changed</h2> <ul> <li>Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.</li> <li>Updates <code>@actions/artifact</code> to v6.3.1.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tunc-d"><code>@tunc-d</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/821">actions/upload-artifact#821</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2">https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/cf430e030ddbb5b0abf93d22962f4752f3646cd9"><code>cf430e0</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/822">#822</a> from actions/tunc-d-prepare-upload-v7-0-2</li> <li><a href="https://github.com/actions/upload-artifact/commit/c2acdedd35a8824a1552c7137f8c18288c3ea469"><code>c2acded</code></a> chore: prepare v7.0.2 release</li> <li><a href="https://github.com/actions/upload-artifact/commit/4687c1bbaa0a58abb517d90b4bbade6754c80c1a"><code>4687c1b</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/821">#821</a> from actions/tunc-d-upload-artifact-package-bump</li> <li><a href="https://github.com/actions/upload-artifact/commit/8cbe1bebdb858105d8fdd88f81404d4de4595719"><code>8cbe1be</code></a> Bump <code>@actions/artifact</code> to 6.3.1</li> <li>See full diff in <a href="https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=7.0.1&new-version=7.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:33:01 +00:00
dependabot[bot]	afca3e28f4	chore(deps): Bump the codeql-action group with 3 updates (#2224 ) Bumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.38.3</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> </ul> <h2>4.38.3 - 08 Oct 2026</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a> from github/update-v4.38.3-e0b52dbdc</li> <li><a href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a> Add changelog note for <a href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li> <li><a href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a> Update changelog for v4.38.3</li> <li><a href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a> from github/henrymercer/pin-python-for-older-clis-in-ci</li> <li><a href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a> Pin Python 3.13.15 for older CLI versions in multi-language check</li> <li><a href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a> from github/update-bundle/codeql-bundle-v2.27.2</li> <li><a href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a> Update default bundle to codeql-bundle-v2.27.2</li> <li><a href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a> from github/mbg/esm/migrate-pr-checks</li> <li><a href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a> Replace <code>__dirname</code> in <code>sync.ts</code></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/autobuild` from 4.38.2 to 4.38.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's releases</a>.</em></p> <blockquote> <h2>v4.38.3</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> </ul> <h2>4.38.3 - 08 Oct 2026</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a> from github/update-v4.38.3-e0b52dbdc</li> <li><a href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a> Add changelog note for <a href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li> <li><a href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a> Update changelog for v4.38.3</li> <li><a href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a> from github/henrymercer/pin-python-for-older-clis-in-ci</li> <li><a href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a> Pin Python 3.13.15 for older CLI versions in multi-language check</li> <li><a href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a> from github/update-bundle/codeql-bundle-v2.27.2</li> <li><a href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a> Update default bundle to codeql-bundle-v2.27.2</li> <li><a href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a> from github/mbg/esm/migrate-pr-checks</li> <li><a href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a> Replace <code>__dirname</code> in <code>sync.ts</code></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.38.3</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/4205">#4205</a></li> </ul> <h2>4.38.3 - 08 Oct 2026</h2> <ul> <li><em>Upcoming breaking change</em>: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. <a href="https://redirect.github.com/github/codeql-action/pull/4188">#4188</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2">2.27.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4203">#4203</a></li> <li>Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4184">#4184</a></li> </ul> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/24c54180a607b1449ed407dd24f251e4e9147c8d"><code>24c5418</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4214">#4214</a> from github/update-v4.38.3-e0b52dbdc</li> <li><a href="https://github.com/github/codeql-action/commit/69e87c56c1db5253592f61da177da1d20d033bd8"><code>69e87c5</code></a> Add changelog note for <a href="https://redirect.github.com/github/codeql-action/issues/4184">#4184</a></li> <li><a href="https://github.com/github/codeql-action/commit/23b682830be5e93afb6466bfc0197142d70268aa"><code>23b6828</code></a> Update changelog for v4.38.3</li> <li><a href="https://github.com/github/codeql-action/commit/e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b"><code>e0b52db</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4210">#4210</a> from github/henrymercer/pin-python-for-older-clis-in-ci</li> <li><a href="https://github.com/github/codeql-action/commit/6b99698c8cda6115e2bc7c52226b508dc558d7dc"><code>6b99698</code></a> Pin Python 3.13.15 for older CLI versions in multi-language check</li> <li><a href="https://github.com/github/codeql-action/commit/63d3d632fc7cbd91c8089c7fea5322f1bc73d7d8"><code>63d3d63</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4203">#4203</a> from github/update-bundle/codeql-bundle-v2.27.2</li> <li><a href="https://github.com/github/codeql-action/commit/7377a10091aa5d781c1d36dc3834817d8ad0acfe"><code>7377a10</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/c1a30cda114f23a88a09ab61f4ec08c312d2c524"><code>c1a30cd</code></a> Update default bundle to codeql-bundle-v2.27.2</li> <li><a href="https://github.com/github/codeql-action/commit/d208ec71e39ae46397cbf6569bef8439b9aab974"><code>d208ec7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4200">#4200</a> from github/mbg/esm/migrate-pr-checks</li> <li><a href="https://github.com/github/codeql-action/commit/a71b0c6684dea6ca627a472a11bf5b80bd47c845"><code>a71b0c6</code></a> Replace <code>__dirname</code> in <code>sync.ts</code></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 14:31:53 +00:00
dependabot[bot]	688a75bb69	chore(deps-dev): Bump handlebars from 4.7.9 to 4.7.10 (#2222 ) Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.9 to 4.7.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/releases">handlebars's releases</a>.</em></p> <blockquote> <h2>v4.7.10</h2> <ul> <li>security: Sanitize the source map URL when minifying - f37c599</li> <li>security: Iterate lazily in #each and strip whitespace in linear time - 812c226</li> <li>security: Escape <code><!--</code> and <code><script</code> in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li> <li>security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f</li> <li>security: Only compile partials that are template strings - c28ee7a</li> <li>security: Only dispatch known node types in the Compiler and Visitor - 7d501a5</li> <li>security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj</li> <li>Clarify that --root does not restrict filesystem access - 0fcf25c</li> <li>Bump minimist to ^1.2.8 - ea8ed82</li> <li>Fix Ruby component publishing documentation - d069c1c</li> <li>Fix Composer component definition - 6714e07</li> </ul> <p>Compatibility notes:</p> <ul> <li><code>{{#each}}</code> iterates iterables such as <code>Map</code>, <code>Set</code> and generators lazily, like <code>for...of</code>, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.</li> </ul> <p><a href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">Commits</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md">handlebars's changelog</a>.</em></p> <blockquote> <h2>v4.7.10 - October 5th, 2026</h2> <ul> <li>security: Sanitize the source map URL when minifying - f37c599</li> <li>security: Iterate lazily in #each and strip whitespace in linear time - 812c226</li> <li>security: Escape <code><!--</code> and <code><script</code> in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7</li> <li>security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f</li> <li>security: Only compile partials that are template strings - c28ee7a</li> <li>security: Only dispatch known node types in the Compiler and Visitor - 7d501a5</li> <li>security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj</li> <li>Clarify that --root does not restrict filesystem access - 0fcf25c</li> <li>Bump minimist to ^1.2.8 - ea8ed82</li> <li>Fix Ruby component publishing documentation - d069c1c</li> <li>Fix Composer component definition - 6714e07</li> </ul> <p>Compatibility notes:</p> <ul> <li><code>{{#each}}</code> iterates iterables such as <code>Map</code>, <code>Set</code> and generators lazily, like <code>for...of</code>, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.</li> </ul> <p><a href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">Commits</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/45ce15255e0f430ac6d19742b18e316b7539264e"><code>45ce152</code></a> v4.7.10</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/e47b2365d5656ab5689ae226aef90a485a90c5d8"><code>e47b236</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/f37c599de9187715eb1e9afedcb2d80c175487a0"><code>f37c599</code></a> Sanitize the source map URL when minifying</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/812c2260cb8794ef4ab63a7f1d946431112560ca"><code>812c226</code></a> Iterate lazily in #each and strip whitespace in linear time</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/609d1b11c833c9a3e00f56f2f34d22f425446725"><code>609d1b1</code></a> Escape <code><!--</code> and <code><script</code> in precompiled output</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/ceec388abe1d1aac8f6369860d5f390fa71ef4fa"><code>ceec388</code></a> Don't trust special properties on context data</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/c28ee7adb312308e0fe26f4d435a481be5e1ff98"><code>c28ee7a</code></a> Only compile partials that are template strings</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/7d501a5af2ac3aa9ac788a8889dbe419849e46f1"><code>7d501a5</code></a> Only dispatch known node types in the Compiler and Visitor</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/703fdcc5fd6cc8d1cc0c33cc19de40c467c4b8d2"><code>703fdcc</code></a> Validate AST values in the compiler instead of the parser</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/0fcf25c63038b43e78e17adbf029cf073e80554d"><code>0fcf25c</code></a> Clarify that --root does not restrict filesystem access</li> <li>Additional commits viewable in <a href="https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.7.9&new-version=4.7.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/maplibre/maputnik/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-09 14:09:21 +00:00
dependabot[bot]	247d8d4de3	chore(deps-dev): Bump vite from 8.3.2 to 8.3.3 (#2221 ) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.3.2 to 8.3.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.3.3</h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update launch-editor to v2.14.2 (<a href="https://redirect.github.com/vitejs/vite/issues/23654">#23654</a>) (<a href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097">22fd1d5</a>)</li> <li><strong>html:</strong> filename passed to transformIndexHtml should not include queries (<a href="https://redirect.github.com/vitejs/vite/issues/23653">#23653</a>) (<a href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17">7dafd8e</a>)</li> <li><strong>server:</strong> check <code>fs.serve</code> for <code>?vite-wasm-instance</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23655">#23655</a>) (<a href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73">ba8b7ab</a>)</li> <li><strong>server:</strong> store ids to <code>safeModulePaths</code> rather than URLs (<a href="https://redirect.github.com/vitejs/vite/issues/23656">#23656</a>) (<a href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905">c3e06f9</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.3.2...v8.3.3">8.3.3</a> (2026-10-06)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update launch-editor to v2.14.2 (<a href="https://redirect.github.com/vitejs/vite/issues/23654">#23654</a>) (<a href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097">22fd1d5</a>)</li> <li><strong>html:</strong> filename passed to transformIndexHtml should not include queries (<a href="https://redirect.github.com/vitejs/vite/issues/23653">#23653</a>) (<a href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17">7dafd8e</a>)</li> <li><strong>server:</strong> check <code>fs.serve</code> for <code>?vite-wasm-instance</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23655">#23655</a>) (<a href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73">ba8b7ab</a>)</li> <li><strong>server:</strong> store ids to <code>safeModulePaths</code> rather than URLs (<a href="https://redirect.github.com/vitejs/vite/issues/23656">#23656</a>) (<a href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905">c3e06f9</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/fea5b21dd9524ed7308632407b996f1fe5942c9c"><code>fea5b21</code></a> release: v8.3.3 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23657">#23657</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905"><code>c3e06f9</code></a> fix(server): store ids to <code>safeModulePaths</code> rather than URLs (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23656">#23656</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73"><code>ba8b7ab</code></a> fix(server): check <code>fs.serve</code> for <code>?vite-wasm-instance</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23655">#23655</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097"><code>22fd1d5</code></a> fix(deps): update launch-editor to v2.14.2 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23654">#23654</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17"><code>7dafd8e</code></a> fix(html): filename passed to transformIndexHtml should not include queries (...</li> <li>See full diff in <a href="https://github.com/vitejs/vite/commits/v8.3.3/packages/vite">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.3.2&new-version=8.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-09 14:03:54 +00:00
dependabot[bot]	a3453a50d4	chore(deps-dev): Bump typescript-eslint from 8.71.0 to 8.71.1 (#2219 ) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.71.0 to 8.71.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.71.1</h2> <h2>8.71.1 (2026-10-05)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-misused-promises] skip argument checks for calls without arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12923">#12923</a>)</li> <li><strong>eslint-plugin:</strong> [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12892">#12892</a>)</li> <li><strong>eslint-plugin:</strong> [require-array-sort-compare] use array argument type constraint (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12919">#12919</a>)</li> <li><strong>eslint-plugin:</strong> [no-unsafe-enum-assignment] skip identical types and bound deep type walks (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12957">#12957</a>)</li> <li><strong>eslint-plugin:</strong> [no-confusing-void-expression] don't autofix when declared return type is unknown (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12930">#12930</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] check the constrained type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12953">#12953</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters] count instantiated mapped type constraints (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12941">#12941</a>)</li> <li><strong>project-service:</strong> throttle cleanup when opening files (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12934">#12934</a>)</li> <li><strong>type-utils:</strong> match re-exports and global declarations in <code>TypeOrValueSpecifier</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12943">#12943</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Diptajoy Mistry <a href="https://github.com/diptomistry"><code>@diptomistry</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Josh Goldberg</li> <li>Josh Goldberg ✨</li> <li>Medhansh Poojari</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.71.1 (2026-10-05)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/d57b8da272375b6a45270639894a793933208a91"><code>d57b8da</code></a> chore(release): publish 8.71.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.71.0&new-version=8.71.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-09 14:02:13 +00:00
dependabot[bot]	56539785c3	chore(deps-dev): Bump i18next-cli from 1.74.5 to 1.74.7 (#2220 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.5 to 1.74.7. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.74.7</h2> <ul> <li>fix(extract): a selector <code>i18nKey</code> on <code><Trans t={t}></code> now routes into the hook's namespaces the same way <code>t()</code> does, matching react-i18next 17.0.16. With <code>const { t } = useTranslation(['ns1', 'ns2'])</code>, <code><Trans t={t} i18nKey={$ => $.ns2.message} /></code> was filed as <code>ns1:ns2.message</code>; it is now filed as <code>ns2:message</code>, like <code>t($ => $.ns2.message)</code>. Under <code>types.enableSelector: 'strict'</code> a leading primary namespace is stripped too (<code>useTranslation('only')</code> with <code>$ => $.only.key</code> files <code>only:key</code>). Reported in <a href="https://redirect.github.com/i18next/react-i18next/issues/1933">react-i18next#1933</a>.</li> <li>fix(extract): the props of a component typed <code>React.FC<Props></code> (also <code>FC</code>, <code>FunctionComponent</code>), <code>forwardRef<Ref, Props>(…)</code> or <code>memo<Props>(…)</code> are typed by <code>Props</code>, and iterating a typed member binds the element. <code>props.colors.map((color) => t(\</code>Color.${color}`))<code>with</code>colors: Color[]<code>extracted nothing before unless</code>color<code>was asserted with</code>as Color<code>. Arrays of objects work the same way: </code>props.items.map(({ kind }) => …)<code>, </code>for (const item of props.items)<code>and a destructured</code>({ items }) => items.map(…)`. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/303">#303</a>.</li> </ul> <h2>1.74.6</h2> <ul> <li>fix(extract): iterating an inline array literal binds the element like iterating a named constant does. <code>([1, 2, 3, 4] as const).map((q) => t(\</code>QUARTER.${q}`))<code>, </code>for (const unit of ['day', 'hour'] as const)` and inline arrays of objects extracted nothing before. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/301">#301</a>.</li> <li>fix(extract): members of nested object types resolve. <code>t(\</code>barStatus.${deepObject.Bar.status}`)<code>and</code>t(`fooBarStatus.${deepObject.Foo.Bar.status}`)<code> now extract the nested union's values, also through references to other types, optional chaining (</code>pet.category?.kind<code>), destructuring (</code>const { kind } = pet.category<code>) and indexed access types (</code>DeepObject['Bar']['status']<code>, </code>components['schemas']['Pet']<code>), so types generated by openapi-typescript work. Nested members are followed up to five levels below the declared type, as in </code>components.schemas.Pet.category.kind`. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/302">#302</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/32291d28be792d4d318da94f4a27bb22d7053dde"><code>32291d2</code></a> 1.74.7</li> <li><a href="https://github.com/i18next/i18next-cli/commit/8b3717d07f5b6733872dfc602613e80ec02c8817"><code>8b3717d</code></a> fix(extract): type component props from React.FC, forwardRef and memo <a href="https://redirect.github.com/i18next/i18next-cli/issues/303">#303</a></li> <li><a href="https://github.com/i18next/i18next-cli/commit/4c6314ab14e0bb17ad81e07ee53d309b0a3bc2cc"><code>4c6314a</code></a> fix(extract): route a Trans selector key into the t prop's namespaces like t()</li> <li><a href="https://github.com/i18next/i18next-cli/commit/7f7e635fd9af6110a212f5916bdcfb1e6201250a"><code>7f7e635</code></a> 1.74.6</li> <li><a href="https://github.com/i18next/i18next-cli/commit/a56b05fbccba966fb1ac8bcbf576903da3b4c48f"><code>a56b05f</code></a> fix(extract): resolve inline array literals and nested object types <a href="https://redirect.github.com/i18next/i18next-cli/issues/301">#301</a> <a href="https://redirect.github.com/i18next/i18next-cli/issues/302">#302</a></li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.74.5...v1.74.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.5&new-version=1.74.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-09 13:57:19 +00:00
dependabot[bot]	5ba1d97ec0	chore(deps): Bump react-i18next from 17.0.15 to 17.0.16 in the react group (#2218 ) Bumps the react group with 1 update: [react-i18next](https://github.com/i18next/react-i18next). Updates `react-i18next` from 17.0.15 to 17.0.16 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.0.16</h2> <ul> <li>fix(Trans): a selector <code>i18nKey</code> that points into a secondary namespace of <code>useTranslation</code> now resolves the same way <code>t()</code> does. With <code>const { t } = useTranslation(['ns1', 'ns2'])</code>, <code>t($ => $.ns2.message)</code> works since 17.0.7, but <code><Trans t={t} i18nKey={$ => $.ns2.message} /></code> rendered the raw key (or its children). <code>Trans</code> always passed an <code>ns</code> option to <code>t</code>, filled from <code>t.ns</code> (the primary namespace only), and an explicit <code>ns</code> makes i18next's fixed <code>t</code> skip the hook's full namespace list (<code>scopeNs</code>). When <code>Trans</code> or <code>TransWithoutContext</code> gets a <code>t</code> that carries its own namespace and no <code>ns</code> prop, it now leaves <code>ns</code> out and lets that <code>t</code> apply its own. String keys, <code>keyPrefix</code>, <code>nsMode: 'fallback'</code>, an explicit <code>ns</code> prop and <code>Trans</code> without a <code>t</code> prop behave as before. Compatibility note: if the primary namespace has a nested object named like a secondary namespace (<code>ns1</code> → <code>ns2.message</code>), <code>Trans</code> now resolves <code>$ => $.ns2.message</code> to <code>ns2:message</code>, as <code>t()</code> already does. Fixes <a href="https://redirect.github.com/i18next/react-i18next/issues/1933">#1933</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/606b6a55f231bbf73823863fbb94e6b8eb8272fd"><code>606b6a5</code></a> 17.0.16</li> <li><a href="https://github.com/i18next/react-i18next/commit/51b7c269597ab52477574153633aa0062e5f4b9b"><code>51b7c26</code></a> fix(Trans): resolve selector keys into useTranslation's secondary namespaces</li> <li><a href="https://github.com/i18next/react-i18next/commit/0a2f0182b9f2c51d9868364057db8d5987a550d3"><code>0a2f018</code></a> fix(examples): load the Swedish file in test-jest and align the ru plural tag...</li> <li>See full diff in <a href="https://github.com/i18next/react-i18next/compare/v17.0.15...v17.0.16">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.15&new-version=17.0.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-09 13:56:56 +00:00
dependabot[bot]	c8b44dcc6b	chore(deps-dev): Bump postcss from 8.5.28 to 8.5.29 (#2215 ) Bumps [postcss](https://github.com/postcss/postcss) from 8.5.28 to 8.5.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.29</h2> <ul> <li>Improved <code></style></code> escaping (by <a href="https://github.com/choudhryfrompak"><code>@choudhryfrompak</code></a>).</li> <li>Fixed comments support in <code>list.comma()</code> and <code>list.space()</code> (by <a href="https://github.com/00200200"><code>@00200200</code></a>).</li> <li>Fixed semicolon and custom property (by <a href="https://github.com/wahidrizka"><code>@wahidrizka</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.29</h2> <ul> <li>Improved <code></style></code> escaping (by <a href="https://github.com/choudhryfrompak"><code>@choudhryfrompak</code></a>).</li> <li>Fixed comments support in <code>list.comma()</code> and <code>list.space()</code> (by <a href="https://github.com/00200200"><code>@00200200</code></a>).</li> <li>Fixed semicolon and custom property (by <a href="https://github.com/wahidrizka"><code>@wahidrizka</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/a7a1f3476177d689dff722d3f9f72190ddf93f7e"><code>a7a1f34</code></a> Release 8.5.29 version</li> <li><a href="https://github.com/postcss/postcss/commit/b55a36d14670cefa838b59a9b68c035b9619e294"><code>b55a36d</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/7647a8107ebac8014f1a29ec7e06d3f6ab7c8ac6"><code>7647a81</code></a> Escape </style> in output of non-Root nodes (<a href="https://redirect.github.com/postcss/postcss/issues/2163">#2163</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/7ac902664902289ea0cb9d6b1096b81e8d33bbf5"><code>7ac9026</code></a> Do not split list.comma() and list.space() on separators inside comments (<a href="https://redirect.github.com/postcss/postcss/issues/2162">#2162</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/ebffa97faa305f781a7df5a41ec39f57966b7b6c"><code>ebffa97</code></a> Add postcss-smooth-corners plugin</li> <li><a href="https://github.com/postcss/postcss/commit/57d6401ccca6ce96c9fcdebbdfc30c1ce9e7e797"><code>57d6401</code></a> Speed up source map cleaning</li> <li><a href="https://github.com/postcss/postcss/commit/7e46a036aa55c16b99bf4620850267e3407797ca"><code>7e46a03</code></a> Speed up parser</li> <li><a href="https://github.com/postcss/postcss/commit/7f5c417f1d2dfd3280bb552191dac64a7ffd93d8"><code>7f5c417</code></a> Improve </style> protection for the case when beffore nodes have different parts</li> <li><a href="https://github.com/postcss/postcss/commit/7ba9051fb22d5b5ab160d71c3f2b749557c8ac6f"><code>7ba9051</code></a> Fix useless ESLint warning</li> <li><a href="https://github.com/postcss/postcss/commit/12b41616d99877145dbd209cb17c339aedb556f9"><code>12b4161</code></a> Update dependencies</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.5.28...8.5.29">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.5.28&new-version=8.5.29)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-08 13:57:34 +00:00
dependabot[bot]	5a1839f362	chore(deps-dev): Bump @vitejs/plugin-react from 6.1.1 to 6.1.2 in the react group (#2213 ) Bumps the react group with 1 update: [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react). Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/releases">@vitejs/plugin-react's releases</a>.</em></p> <blockquote> <h2>plugin-react@6.1.2</h2> <h3>Fix HMR for compound components (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1484">#1484</a>)</h3> <p>Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.</p> <h3>Fix <code>compiler.logDiagnostics</code> option not working (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1483">#1483</a>)</h3> <p>With <code>oxc-transform-react</code> >= 0.148, the <code>logDiagnostics</code> was not working. This version fixes it and requires <code>oxc-transform-react</code> >= 0.152 as a peer dependency if you are using the <code>compiler</code> option. <code>compiler.logDiagnostics</code> option is now deprecated and should be swapped for the builtin <code>compiler.reportDiagnostics</code>.</p> <h3>Disable refresh for non-jsx with compiler enabled (fix <a href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1478">#1478</a>) (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1485">#1485</a>)</h3> <p>When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md">@vitejs/plugin-react's changelog</a>.</em></p> <blockquote> <h2>6.1.2 (2026-10-05)</h2> <h3>Fix HMR for compound components (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1484">#1484</a>)</h3> <p>Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.</p> <h3>Fix <code>compiler.logDiagnostics</code> option not working (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1483">#1483</a>)</h3> <p>With <code>oxc-transform-react</code> >= 0.148, the <code>logDiagnostics</code> was not working. This version fixes it and requires <code>oxc-transform-react</code> >= 0.152 as a peer dependency if you are using the <code>compiler</code> option. <code>compiler.logDiagnostics</code> option is now deprecated and should be swapped for the builtin <code>compiler.reportDiagnostics</code>.</p> <h3>Disable refresh for non-jsx with compiler enabled (fix <a href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1478">#1478</a>) (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1485">#1485</a>)</h3> <p>When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/ac47648e17674299accb51816e9e33b8a7b07b05"><code>ac47648</code></a> release: plugin-react@6.1.2 (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1491">#1491</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/98277e7d49fea7fa707170d2892738c8bfb5f1c0"><code>98277e7</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1486">#1486</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/12eddea34ae9de92b3dc8d8b8a76fa1260b781bf"><code>12eddea</code></a> fix(hmr): better handle compound components (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1484">#1484</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/3cfb1d1114df64cf9aeee4aae0ac951d0c2f3abf"><code>3cfb1d1</code></a> fix(plugin-react): fix <code>compiler.logDiagnostics</code> (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1483">#1483</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/6de9915e1b4c1b8a7b390eb1364ab6cd83d64e62"><code>6de9915</code></a> fix(plugin-react): disable refresh for non-jsx with compiler enabled (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1485">#1485</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/ee97d2f3bd25cda8f06c27366722f01aaac0201f"><code>ee97d2f</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1445">#1445</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/b0a014da31be23c7806ffb0b997ec53b52ab68f2"><code>b0a014d</code></a> chore: use Babel 8 for babel compiler playgrounds (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1460">#1460</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/61b650fe93c3fe30d79aa8615199cdcb0a2594f4"><code>61b650f</code></a> fix(deps): update react-related dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1452">#1452</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/736efe2f004002abee693a44b405e70699432ecd"><code>736efe2</code></a> chore(deps): update tsdown to v0.23 (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1451">#1451</a>)</li> <li>See full diff in <a href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@vitejs/plugin-react&package-manager=npm_and_yarn&previous-version=6.1.1&new-version=6.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-08 13:57:00 +00:00
dependabot[bot]	2e5a5406da	chore(deps): Bump ol from 10.10.0 to 10.11.0 (#2214 ) Bumps [ol](https://github.com/openlayers/openlayers) from 10.10.0 to 10.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/openlayers/openlayers/releases">ol's releases</a>.</em></p> <blockquote> <h2>v10.11.0</h2> <h1>10.11.0</h1> <p>The 10.11 release improves styling, raster data and OGC service support, and makes the library leaner to load. The highlights are</p> <ul> <li>Canvas styles now evaluate the <code>color</code> and <code>array</code> operators, and <code>interpolate</code> mixes colors in sRGB on both the Canvas and WebGL renderers; a new <code>interpolate-hcl</code> operator keeps the perceptual gradient</li> <li><code>ol/source/Raster</code> gains basic data tile support, and the GeoZarr source can visualize generic n-D datacubes and accepts <code>storeOptions</code> for headers and credentials</li> <li>WMTS sources no longer derive their extent from the tile matrices, so layers that cover a wider area at low zoom levels are no longer cut off</li> <li>Tiles that the current view no longer needs are dropped from the queue, and the WebGL text overlay worker is loaded on demand</li> <li>The <code>VectorImageLayer</code> gets crisp rendering on rotated views, with rotated text and point symbols</li> <li>New <code>wrapX</code> option for <code>getPixelFromCoordinate</code> and <code>getCoordinateFromPixel</code>, and <code>projection</code> options for the WKT format</li> <li>Fixes for RTL text along lines, nested WFS 2.0 feature collections, empty GeoJSON coordinate arrays, and MouseWheelZoom target cleanup</li> </ul> <h3>Upgrade notes</h3> <h4>Fixed GeoJSON parsing of geometries with empty coordinate arrays</h4> <p>Previously, a GeoJSON geometry with an empty coordinates array (e.g. <code>{"type": "Point", "coordinates": []}</code>) produced a geometry with an empty coordinates array. We have now changed this to match the GeoJSON spec's recommendation to treat such geometries (except <code>GeometryCollection</code>) as <code>null</code> geometries. This change should not affect application code, unless it had special handling for geometries with empty coordinates arrays.</p> <h4>Fixed: <code>interpolate</code> mixed colors differently on the Canvas and WebGL renderers</h4> <p>The <code>['interpolate', ...]</code> operator interpolated colors in the Hue-Chroma-Luminance space on the Canvas renderer, but component-wise in sRGB on the WebGL renderer. The same style produced different gradients depending on which renderer drew it, and neither behaviour was documented. Both now interpolate in sRGB.</p> <p>Gradients built with <code>interpolate</code> over colors will look slightly different on the Canvas renderer. To keep the previous appearance, use the new <code>interpolate-hcl</code> operator:</p> <pre lang="js"><code>// Before const style = { 'fill-color': ['interpolate', ['linear'], ['get', 'value'], 0, 'red', 1, 'green'], }; </code></pre> <pre lang="js"><code>// After - to keep the perceptual gradient const style = { 'fill-color': ['interpolate-hcl', ['linear'], ['get', 'value'], 0, 'red', 1, 'green'], }; </code></pre> <p><code>interpolate-hcl</code> is only supported by the Canvas renderer for now.</p> <p>With the <code>['interpolate', ...]</code> operator, channels now keep their fractional part, so operations applied on top of an interpolated color are more accurate. Code reading back a color from an evaluated style may now see a fractional channel.</p> <h4>The WMTS tile grid extent is no longer calculated from the tile matrices</h4> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/openlayers/openlayers/commit/88fc44564552176b761dbb9531f9977386d041c0"><code>88fc445</code></a> Updates for the 10.11.0 release</li> <li><a href="https://github.com/openlayers/openlayers/commit/66e841c8833e858a9ddb1d2e66b5a7c9fa8891da"><code>66e841c</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/openlayers/issues/17606">#17606</a> from ahocevar/cog-examples-source</li> <li><a href="https://github.com/openlayers/openlayers/commit/fc449f3b8bf83034ff529794bfe5a479126ca07e"><code>fc449f3</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/openlayers/issues/17646">#17646</a> from zarathustracode/wkt-projection-options</li> <li><a href="https://github.com/openlayers/openlayers/commit/90cbd4a029d67ea5b46caf57beb67572b0d925d9"><code>90cbd4a</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/openlayers/issues/17653">#17653</a> from openlayers/dependabot/npm_and_yarn/development...</li> <li><a href="https://github.com/openlayers/openlayers/commit/9f1b6268c7b0add6317ecdf52b77f954d0adfe0a"><code>9f1b626</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/openlayers/issues/17655">#17655</a> from openlayers/dependabot/npm_and_yarn/production-...</li> <li><a href="https://github.com/openlayers/openlayers/commit/0c9e5429b4cc309c38e198408d856d4e8639229c"><code>0c9e542</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/openlayers/issues/17656">#17656</a> from openlayers/dependabot/github_actions/actions-7...</li> <li><a href="https://github.com/openlayers/openlayers/commit/c1883341b0011d7c7cf4eacc6b105b90d81b42f7"><code>c188334</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/openlayers/issues/17650">#17650</a> from Egge-Jan/custom-controls-north-arrow</li> <li><a href="https://github.com/openlayers/openlayers/commit/7d43f53abca7ffd346252497e2fddfd2df0a6188"><code>7d43f53</code></a> chore(deps): bump the actions group across 1 directory with 2 updates</li> <li><a href="https://github.com/openlayers/openlayers/commit/5a9ab4326db85930141c924d49cf6817e188a2f0"><code>5a9ab43</code></a> chore(deps-dev): bump the development-security group across 1 directory with ...</li> <li><a href="https://github.com/openlayers/openlayers/commit/27dfb990e413fc250ab0ba48da26f819dc184dad"><code>27dfb99</code></a> chore(deps): bump earcut</li> <li>Additional commits viewable in <a href="https://github.com/openlayers/openlayers/compare/v10.10.0...v10.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol&package-manager=npm_and_yarn&previous-version=10.10.0&new-version=10.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-08 13:54:54 +00:00
dependabot[bot]	2990bc992a	chore(deps-dev): Bump i18next-cli from 1.74.4 to 1.74.5 (#2216 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.4 to 1.74.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.74.5</h2> <ul> <li>fix(extract): a value typed as an array of a string union (<code>Color[]</code>, <code>readonly Color[]</code>, <code>Array<Color></code> or an alias of one) now resolves to the union's values, so <code>colors.map((color) => t(\</code>color.${color}`))<code>and</code>for (const color of colors)<code>extract every key instead of nothing. Before, this only worked with</code>color as Color`. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/300">#300</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/954db342d8f46d64f1836be47fd818ff590dba52"><code>954db34</code></a> 1.74.5</li> <li><a href="https://github.com/i18next/i18next-cli/commit/60c2773939e853eacb4483773606deb8f635216d"><code>60c2773</code></a> fix(extract): resolve arrays of a string union to the union's values <a href="https://redirect.github.com/i18next/i18next-cli/issues/300">#300</a></li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.74.4...v1.74.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.4&new-version=1.74.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-08 13:54:27 +00:00
dependabot[bot]	3ca5b342d4	chore(deps): Bump maplibre-gl from 6.11.2 to 6.12.0 (#2212 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.11.2 to 6.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.12.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add a <code>zoomToUserAccuracy</code> option to <code>GeolocateControlOptions</code> to allow control over map zoom adjustments in line with the Geolocation Position update accuracy, while <code>trackUserLocation</code> is <code>true</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7908">#7908</a>, <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8324">#8324</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7909">#7909</a>) (by <a href="https://github.com/timsluis"><code>@timsluis</code></a>)</li> <li>With <code>fill-extrusion-rounded-corner-distance</code> set, shade the walls of a rounded corner as one curved surface by sharing the vertex normal between walls that meet at a shallow angle, instead of one flat shade per arc segment (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8475">#8475</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Speed up symbol rendering when the set of visible tiles changes, by rewriting the opacity buffers only of the symbol buckets whose labels actually changed instead of every bucket of every symbol layer (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8434">#8434</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Add an <code>absolutePadding</code> option to <code>Map#cameraForBounds</code> and <code>Map#fitBounds</code> to treat <code>padding</code> as the map's persistent padding instead of adding it to the current one (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8480">#8480</a>) (by <a href="https://github.com/sargunv"><code>@sargunv</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>fix(CanvasSource): catch load errors and fire map.error like ImageSource (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8448">#8448</a>) (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8450">#8450</a>) (by <a href="https://github.com/SatvikMishra08"><code>@SatvikMishra08</code></a>)</li> <li>Fix <code>GeoJSONSource</code> still sending its waiting updates to the worker after the source is removed (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix <code>GeoJSONSource</code> memory growing until the page crashes when <code>setData</code> is called faster than the worker handles it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix the map rendering at the display rate instead of going idle over a DEM with a minimum below sea level when <code>centerClampedToGround</code> is false (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8605">#8605</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix a gesture over terrain throwing the camera when the terrain under the center loads after the gesture begins or the terrain switches off before it ends (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8548">#8548</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix the terrain elevation reading 0 outside the drawn tiles while the camera is below the terrain, and make that read about 40 times cheaper (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix a hole around the poles of the globe in background, fill and line layers from zoom 3 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8638">#8638</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>jumpTo</code>, and the setters that use it, pulling the center elevation onto the terrain when <code>centerClampedToGround</code> is false (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>GeoJSONSource#updateData</code> leaving stale clusters on untouched tiles after clustering was turned on with <code>setClusterOptions</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix <code>GeoJSONSource#setClusterOptions</code> clustering twice when called while new data is waiting to be sent (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix <code>GeoJSONSource</code> data set with <code>setData</code> being overwritten by the result of an earlier URL load or <code>updateData</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix fill-extrusion walls facing exactly east or west skipping <code>fill-extrusion-vertical-gradient</code> and rendering brighter than the other walls (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8604">#8604</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>easeTo</code> and <code>flyTo</code> pulling the center elevation onto the terrain when <code>centerClampedToGround</code> is false (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>fill-outline-color</code>, and the antialiased edge of fills, not being drawn when terrain is enabled (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/4200">#4200</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Respect map padding when constraining the camera to max bounds, so the padded viewport can pan fully to its edges (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8501">#8501</a>) (by <a href="https://github.com/erenbati"><code>@erenbati</code></a>)</li> <li>Fix an unclosed disallowed tag in one attribution erasing the other attributions, by sanitizing each attribution before joining them (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8569">#8569</a>) (by <a href="https://github.com/sx4im"><code>@sx4im</code></a>)</li> <li>Fix <code>color-relief</code> with a <code>custom</code> DEM encoding whose <code>redFactor</code>, <code>greenFactor</code> or <code>blueFactor</code> is 0, where every elevation stop packed to NaN and the color ramp collapsed (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6411">#6411</a>) (by <a href="https://github.com/drakeo338"><code>@drakeo338</code></a>)</li> <li>Fix <code>queryRenderedFeatures</code> missing fill-extrusions on globe once it renders as mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8560">#8560</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>line-offset</code> distorting the line width around joins (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8570">#8570</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Cross-fade raster tiles when zooming out from a source's <code>maxzoom</code>, where the tiles switched instantly (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8517">#8517</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.12.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add a <code>zoomToUserAccuracy</code> option to <code>GeolocateControlOptions</code> to allow control over map zoom adjustments in line with the Geolocation Position update accuracy, while <code>trackUserLocation</code> is <code>true</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7908">#7908</a>, <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8324">#8324</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7909">#7909</a>) (by <a href="https://github.com/timsluis"><code>@timsluis</code></a>)</li> <li>With <code>fill-extrusion-rounded-corner-distance</code> set, shade the walls of a rounded corner as one curved surface by sharing the vertex normal between walls that meet at a shallow angle, instead of one flat shade per arc segment (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8475">#8475</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Speed up symbol rendering when the set of visible tiles changes, by rewriting the opacity buffers only of the symbol buckets whose labels actually changed instead of every bucket of every symbol layer (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8434">#8434</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Add an <code>absolutePadding</code> option to <code>Map#cameraForBounds</code> and <code>Map#fitBounds</code> to treat <code>padding</code> as the map's persistent padding instead of adding it to the current one (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8480">#8480</a>) (by <a href="https://github.com/sargunv"><code>@sargunv</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>fix(CanvasSource): catch load errors and fire map.error like ImageSource (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8448">#8448</a>) (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8450">#8450</a>) (by <a href="https://github.com/SatvikMishra08"><code>@SatvikMishra08</code></a>)</li> <li>Fix <code>GeoJSONSource</code> still sending its waiting updates to the worker after the source is removed (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix <code>GeoJSONSource</code> memory growing until the page crashes when <code>setData</code> is called faster than the worker handles it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8585">#8585</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix the map rendering at the display rate instead of going idle over a DEM with a minimum below sea level when <code>centerClampedToGround</code> is false (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8605">#8605</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix a gesture over terrain throwing the camera when the terrain under the center loads after the gesture begins or the terrain switches off before it ends (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8548">#8548</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix the terrain elevation reading 0 outside the drawn tiles while the camera is below the terrain, and make that read about 40 times cheaper (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8539">#8539</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix a hole around the poles of the globe in background, fill and line layers from zoom 3 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8638">#8638</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>jumpTo</code>, and the setters that use it, pulling the center elevation onto the terrain when <code>centerClampedToGround</code> is false (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>GeoJSONSource#updateData</code> leaving stale clusters on untouched tiles after clustering was turned on with <code>setClusterOptions</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix <code>GeoJSONSource#setClusterOptions</code> clustering twice when called while new data is waiting to be sent (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix <code>GeoJSONSource</code> data set with <code>setData</code> being overwritten by the result of an earlier URL load or <code>updateData</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8613">#8613</a>) (by <a href="https://github.com/clementperon"><code>@clementperon</code></a>)</li> <li>Fix fill-extrusion walls facing exactly east or west skipping <code>fill-extrusion-vertical-gradient</code> and rendering brighter than the other walls (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8604">#8604</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>easeTo</code> and <code>flyTo</code> pulling the center elevation onto the terrain when <code>centerClampedToGround</code> is false (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8566">#8566</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>fill-outline-color</code>, and the antialiased edge of fills, not being drawn when terrain is enabled (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/4200">#4200</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Respect map padding when constraining the camera to max bounds, so the padded viewport can pan fully to its edges (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8501">#8501</a>) (by <a href="https://github.com/erenbati"><code>@erenbati</code></a>)</li> <li>Fix an unclosed disallowed tag in one attribution erasing the other attributions, by sanitizing each attribution before joining them (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8569">#8569</a>) (by <a href="https://github.com/sx4im"><code>@sx4im</code></a>)</li> <li>Fix <code>color-relief</code> with a <code>custom</code> DEM encoding whose <code>redFactor</code>, <code>greenFactor</code> or <code>blueFactor</code> is 0, where every elevation stop packed to NaN and the color ramp collapsed (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6411">#6411</a>) (by <a href="https://github.com/drakeo338"><code>@drakeo338</code></a>)</li> <li>Fix <code>queryRenderedFeatures</code> missing fill-extrusions on globe once it renders as mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8560">#8560</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>line-offset</code> distorting the line width around joins (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8570">#8570</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Cross-fade raster tiles when zooming out from a source's <code>maxzoom</code>, where the tiles switched instantly (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8517">#8517</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Mark a program as failed to create instead of throwing when the WebGL context is lost or a failed link reports zero attached shaders, where a dead GPU process made every query answer dead before <code>webglcontextlost</code> arrived (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8607">#8607</a>) (by <a href="https://github.com/rubenmarcus"><code>@rubenmarcus</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/7976a989280508d763265f95f523e945d04d87b0"><code>7976a98</code></a> Bump js version to 6.12.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8646">#8646</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/7c6c49e604e0b1d42eea8ab9b74643dc254c41df"><code>7c6c49e</code></a> fix: a gesture's hold on the center elevation waits for the DEM (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8548">#8548</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/48d5fffe6ba53017b393684200a86920df859e57"><code>48d5fff</code></a> Draw fill outlines when terrain is enabled (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8632">#8632</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/d4aa8b469985583641c60d4cbc853eda3d7db1cf"><code>d4aa8b4</code></a> feat: add a zoomToUserAccuracy option to GeolocateControl (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8324">#8324</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/94c71652d3ce7182aa8305cd0bd549d24e6fffe3"><code>94c7165</code></a> test: build the terrain for the tile-zoom DEM read from the test util (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8645">#8645</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/c842c3bd6cf90288a4d7056304400ceb4b6465d1"><code>c842c3b</code></a> Fix GeoJSONSource keeping every finished worker update alive while updates ke...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/80f9b4331f488915e5da9a2bb1e716a940b162de"><code>80f9b43</code></a> fix: recalculate the matrices when the minimum elevation for the current tile...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/622371972d5e77a8688245026cd61dcfdfefbef1"><code>6223719</code></a> fix: read the terrain elevation at the tile zoom where the drawn tiles do not...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/9c48bf7fb99d35888ea7ce943209786e59087be8"><code>9c48bf7</code></a> fix: avoid a hole forming at the poles of the globe (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8638">#8638</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/1bc975fc97cc08eb87c6cb6f50e3e6f38dbf3bab"><code>1bc975f</code></a> Add llms.txt and social cards to the docs (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8639">#8639</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.11.2...v6.12.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.11.2&new-version=6.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-07 13:56:52 +00:00
dependabot[bot]	64c13902ff	chore(deps-dev): Bump source-map-js from 1.2.1 to 1.2.2 (#2211 ) Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/7rulnik/source-map-js/releases">source-map-js's releases</a>.</em></p> <blockquote> <h2>v1.2.2</h2> <ul> <li> <p>Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (<a href="https://redirect.github.com/7rulnik/source-map-js/pull/29">#29</a>) <a href="https://github.com/xfournet"><code>@xfournet</code></a></p> </li> <li> <p>Fix denial of service from malicious indexed source maps (CVE-2026-93749) (<a href="https://redirect.github.com/7rulnik/source-map-js/pull/79">#79</a>)</p> <p>Reported by <a href="https://github.com/waydeshi"><code>@waydeshi</code></a> in <a href="https://redirect.github.com/7rulnik/source-map-js/issues/76">#76</a>. A fix was also proposed by <a href="https://github.com/aniebiet"><code>@aniebiet</code></a> in <a href="https://redirect.github.com/7rulnik/source-map-js/pull/78">#78</a>.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md">source-map-js's changelog</a>.</em></p> <blockquote> <h2>1.2.2</h2> <ul> <li> <p>Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (<a href="https://redirect.github.com/7rulnik/source-map-js/pull/29">#29</a>) <a href="https://github.com/xfournet"><code>@xfournet</code></a></p> </li> <li> <p>Fix denial of service from malicious indexed source maps (CVE-2026-93749) (<a href="https://redirect.github.com/7rulnik/source-map-js/pull/79">#79</a>)</p> <p>Reported by <a href="https://github.com/waydeshi"><code>@waydeshi</code></a> in <a href="https://redirect.github.com/7rulnik/source-map-js/issues/76">#76</a>. A fix was also proposed by <a href="https://github.com/aniebiet"><code>@aniebiet</code></a> in <a href="https://redirect.github.com/7rulnik/source-map-js/pull/78">#78</a>.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/7rulnik/source-map-js/commit/0a1d334fd1e55a47df97fcd60a7915d46df3b08a"><code>0a1d334</code></a> 1.2.2</li> <li><a href="https://github.com/7rulnik/source-map-js/commit/4c6fa26d77419bd8e48ec92844866cce7d9ae739"><code>4c6fa26</code></a> Update changelog</li> <li><a href="https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016"><code>cf76580</code></a> Fix denial of service from malicious indexed source maps (CVE-2026-93749) (<a href="https://redirect.github.com/7rulnik/source-map-js/issues/79">#79</a>)</li> <li><a href="https://github.com/7rulnik/source-map-js/commit/7899a86615c630f4fc220273ff9fe2e8e49a56df"><code>7899a86</code></a> Fix crash when executing browser with CSP script-src that don't permit unsafe...</li> <li>See full diff in <a href="https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=source-map-js&package-manager=npm_and_yarn&previous-version=1.2.1&new-version=1.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/maplibre/maputnik/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-06 14:10:29 +00:00
dependabot[bot]	83531bd777	chore(deps-dev): Bump eslint from 10.11.0 to 10.12.0 (#2210 ) Bumps [eslint](https://github.com/eslint/eslint) from 10.11.0 to 10.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.12.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/4618052eed6bb3ef420cf0db0490bbda2fd835a5"><code>4618052</code></a> feat: handle astral letters in <code>new-cap</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21357">#21357</a>) (sary)</li> <li><a href="https://github.com/eslint/eslint/commit/4ec5168d6d6888e3f7b163eb82963d40e45a75fa"><code>4ec5168</code></a> feat: allow <code>SourceCode#getText()</code> to accept tokens and comments (<a href="https://redirect.github.com/eslint/eslint/issues/21340">#21340</a>) (electrohyun)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/bc51eee6e3e816622b2dd1bc08acb9cfb2d3a6a7"><code>bc51eee</code></a> fix: <code>prefer-arrow-callback</code> false positive in conditional test (<a href="https://redirect.github.com/eslint/eslint/issues/21373">#21373</a>) (Daniel Pinto)</li> <li><a href="https://github.com/eslint/eslint/commit/bbff86c41521cc435e20754e26007f657a843038"><code>bbff86c</code></a> fix: skip lines with multiple comments in <code>max-lines-per-function</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21332">#21332</a>) (xbinaryx)</li> <li><a href="https://github.com/eslint/eslint/commit/efc4d6bdc4c4d1dfba8bdab6a8f44f27a1b1d00a"><code>efc4d6b</code></a> fix: astral letters in <code>consistent-return</code>, <code>no-eval</code>, <code>no-invalid-this</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21360">#21360</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/93de066d4125f8df013d40305e8009f4634a5cba"><code>93de066</code></a> fix: prefer-exponentiation-operator autofix for async function base (<a href="https://redirect.github.com/eslint/eslint/issues/21322">#21322</a>) (Vladimir Babin)</li> <li><a href="https://github.com/eslint/eslint/commit/02e34ffba6adbed72365177c7caee71d950834e5"><code>02e34ff</code></a> fix: add missing space after <code>else</code> in <code>curly</code> autofix (<a href="https://redirect.github.com/eslint/eslint/issues/21355">#21355</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/b14b8bc213ccfc19d3edcfa9ce6af62622661160"><code>b14b8bc</code></a> fix: correct <code>id-length</code> message for long private names (<a href="https://redirect.github.com/eslint/eslint/issues/21348">#21348</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/69aac01d898837a934c9e735e0b7881cc1df09e8"><code>69aac01</code></a> fix: support <code>TSFunctionType</code> in <code>getFunctionHeadLoc</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21335">#21335</a>) (xbinaryx)</li> <li><a href="https://github.com/eslint/eslint/commit/686630eb34ec1cddf399a4e6eaeebb080116a532"><code>686630e</code></a> fix: <code>no-loss-of-precision</code> false positive with <code>0.e5</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21337">#21337</a>) (sethamus)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/67eb586e2eda290813b329d4f40e605ad696bc4f"><code>67eb586</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/5370d7ee35a6523873f798e87f3ccc73779d5d21"><code>5370d7e</code></a> docs: clarify <code>one-var</code> <code>separateRequires</code> matches any <code>require()</code> call (<a href="https://redirect.github.com/eslint/eslint/issues/21192">#21192</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/8816c1ddfcfa31318ad17cddcfb68acffa30940f"><code>8816c1d</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/3d2e7cedb7409d8a2c5f2c2fafb14fa22790e40e"><code>3d2e7ce</code></a> docs: fix typo in no-unused-expressions documentation (<a href="https://redirect.github.com/eslint/eslint/issues/21346">#21346</a>) (bytedoe)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/152067f0f81f08b6cce9cf8eeaddb8558731b4f6"><code>152067f</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21362">#21362</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/b56d58e0b1f3c919a6b7661254af760cdd909d6e"><code>b56d58e</code></a> chore: update github/codeql-action action to v4.38.2 (<a href="https://redirect.github.com/eslint/eslint/issues/21376">#21376</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/bfaea12ddc30b458fe4cfbb6c306a62b5299c177"><code>bfaea12</code></a> perf: cache normalized config globals per languageOptions (<a href="https://redirect.github.com/eslint/eslint/issues/21364">#21364</a>) (James Ross)</li> <li><a href="https://github.com/eslint/eslint/commit/322209ef164e8a00a25ec7ca166969ddc853355c"><code>322209e</code></a> ci: avoid Nx cache in ecosystem tests and disable failing test (<a href="https://redirect.github.com/eslint/eslint/issues/21369">#21369</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/d166567901e09940c1de4ad0e95d572eeab5c927"><code>d166567</code></a> chore: update dependency prettier to v3.9.9 (<a href="https://redirect.github.com/eslint/eslint/issues/21371">#21371</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/29585ceba7ad35368d1b763bd1e80d899f28842c"><code>29585ce</code></a> chore: update dependency eslint-plugin-expect-type to ^0.7.0 (<a href="https://redirect.github.com/eslint/eslint/issues/21359">#21359</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/39d79ba9650542ac66d585d1899304abd630c07d"><code>39d79ba</code></a> chore: update github/codeql-action action to v4.38.1 (<a href="https://redirect.github.com/eslint/eslint/issues/21354">#21354</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/182a6e993a8a5dbdad5a628b69ad7382d48bf24f"><code>182a6e9</code></a> chore: update dependency prettier to v3.9.8 (<a href="https://redirect.github.com/eslint/eslint/issues/21352">#21352</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/f995127230dad258069c29b7f51971681bd53f00"><code>f995127</code></a> chore: remove CLAUDE.md in favor of AGENTS.md (<a href="https://redirect.github.com/eslint/eslint/issues/21339">#21339</a>) (Jarren)</li> <li><a href="https://github.com/eslint/eslint/commit/b95fb6cb335f82a0ccabb0944ac3b89c703bd947"><code>b95fb6c</code></a> chore: update dependency prettier to v3.9.7 (<a href="https://redirect.github.com/eslint/eslint/issues/21347">#21347</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/3782dd458fdfbe492e600d9a54b295a9721ed815"><code>3782dd4</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21342">#21342</a>) (ESLint Bot)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/a438ec39512c3381f4785a1f3058982ce9845970"><code>a438ec3</code></a> 10.12.0</li> <li><a href="https://github.com/eslint/eslint/commit/32a73f144198510e23c40c5ca6808e2c09b7e5e5"><code>32a73f1</code></a> Build: changelog update for 10.12.0</li> <li><a href="https://github.com/eslint/eslint/commit/bc51eee6e3e816622b2dd1bc08acb9cfb2d3a6a7"><code>bc51eee</code></a> fix: <code>prefer-arrow-callback</code> false positive in conditional test (<a href="https://redirect.github.com/eslint/eslint/issues/21373">#21373</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/bbff86c41521cc435e20754e26007f657a843038"><code>bbff86c</code></a> fix: skip lines with multiple comments in <code>max-lines-per-function</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21332">#21332</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/152067f0f81f08b6cce9cf8eeaddb8558731b4f6"><code>152067f</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21362">#21362</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/b56d58e0b1f3c919a6b7661254af760cdd909d6e"><code>b56d58e</code></a> chore: update github/codeql-action action to v4.38.2 (<a href="https://redirect.github.com/eslint/eslint/issues/21376">#21376</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/67eb586e2eda290813b329d4f40e605ad696bc4f"><code>67eb586</code></a> docs: Update README</li> <li><a href="https://github.com/eslint/eslint/commit/bfaea12ddc30b458fe4cfbb6c306a62b5299c177"><code>bfaea12</code></a> perf: cache normalized config globals per languageOptions (<a href="https://redirect.github.com/eslint/eslint/issues/21364">#21364</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/322209ef164e8a00a25ec7ca166969ddc853355c"><code>322209e</code></a> ci: avoid Nx cache in ecosystem tests and disable failing test (<a href="https://redirect.github.com/eslint/eslint/issues/21369">#21369</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/d166567901e09940c1de4ad0e95d572eeab5c927"><code>d166567</code></a> chore: update dependency prettier to v3.9.9 (<a href="https://redirect.github.com/eslint/eslint/issues/21371">#21371</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.11.0...v10.12.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=10.11.0&new-version=10.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-06 14:03:54 +00:00
dependabot[bot]	6ff01be932	chore(deps): Bump react-resizable-panels from 4.14.1 to 4.14.2 in the react group (#2209 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.14.1 to 4.14.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.2</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/759">759</a>: Bugfix: Resort panels and separators before (re)deriving constraints</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.2</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/759">759</a>: Bugfix: Resort panels and separators before (re)deriving constraints</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/8c0573b7938b50c868ae837813fda8945e36b596"><code>8c0573b</code></a> 4.14.1 -> 4.14.2</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/e00997ab338672df82e67cb711e9ef565b2eab2a"><code>e00997a</code></a> Bugfix: Resort panels and separators before (re)deriving constraints (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/759">#759</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/7eb8d7af0ae9311055354a16f6ce4997b60783e1"><code>7eb8d7a</code></a> Update react-lib-tools and docs site content</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/8d30dadcf428b9c7aa8636e9a4b3820a75041cd7"><code>8d30dad</code></a> Update react-lib-tools</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/2b231f16bffea686339ad1a07003ee8676a52975"><code>2b231f1</code></a> Bump react-lib-tools to make site a bit larger</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/b46094e28a79df67f5da7c030fbbaa8d6bd4de7d"><code>b46094e</code></a> Fix logo color on docs site</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/6251784a85f8f90ab5c578dbfe3b2fd97205bf5e"><code>6251784</code></a> Update logo</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.14.1...4.14.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.14.1&new-version=4.14.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-06 13:55:36 +00:00
dependabot[bot]	8a98be0e96	chore(deps-dev): Bump sass from 1.105.0 to 1.105.1 (#2207 ) Bumps [sass](https://github.com/sass/dart-sass) from 1.105.0 to 1.105.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/releases">sass's releases</a>.</em></p> <blockquote> <h2>Dart Sass 1.105.1</h2> <p>To install Sass 1.105.1, download one of the packages below and <a href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or see <a href="https://sass-lang.com/install">the Sass website</a> for full installation instructions.</p> <h1>Changes</h1> <ul> <li>Improve error messages for <code>@extend</code>s across different media queries.</li> </ul> <p>See the <a href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11051">full changelog</a> for changes in earlier releases.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's changelog</a>.</em></p> <blockquote> <h2>1.105.1</h2> <ul> <li>Improve error messages for <code>@extend</code>s across different media queries.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sass/dart-sass/commit/db3c666fd8adedce310295580694ae05a01a00cf"><code>db3c666</code></a> Merge pull request <a href="https://redirect.github.com/sass/dart-sass/issues/2869">#2869</a> from sass/extend-media-errors</li> <li><a href="https://github.com/sass/dart-sass/commit/2ac45157135726623bf010d75559cd659a953737"><code>2ac4515</code></a> Improve span boundaries for media queries and selectors</li> <li><a href="https://github.com/sass/dart-sass/commit/706cfbf3cc8726f57cbbe82c0c355fec6708f974"><code>706cfbf</code></a> Fix <code>InterpolationMap._expandInterpolationSpanRight()</code></li> <li><a href="https://github.com/sass/dart-sass/commit/792a948d6fb02d81f57baedb0dedb882ba29a652"><code>792a948</code></a> Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (<a href="https://redirect.github.com/sass/dart-sass/issues/2870">#2870</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/61ab7025b90012161540afa7cf5757b88633aeb2"><code>61ab702</code></a> Improve errors for <code>@extend</code> across media queries</li> <li><a href="https://github.com/sass/dart-sass/commit/288d4e202501ea1b943525c88e1d5e5cd225de62"><code>288d4e2</code></a> Auto-merge dependabot PRs as the Sass bot account (<a href="https://redirect.github.com/sass/dart-sass/issues/2866">#2866</a>)</li> <li>See full diff in <a href="https://github.com/sass/dart-sass/compare/1.105.0...1.105.1">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-05 14:04:29 +00:00
dependabot[bot]	f8b56cf384	chore(deps-dev): Bump vite from 8.3.1 to 8.3.2 (#2208 ) [//]: # (dependabot-start) ⚠️ Dependabot is rebasing this PR ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.3.1 to 8.3.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.3.2</h2> <h3>Bug Fixes</h3> <ul> <li><strong>build:</strong> preload CSS correctly when <code>renderBuiltUrl</code> returns URLs with queries (<a href="https://redirect.github.com/vitejs/vite/issues/23611">#23611</a>) (<a href="https://github.com/vitejs/vite/commit/64e0a215c24f0522b27b91f93cfd93e317b94481">64e0a21</a>)</li> <li><strong>bundled-dev:</strong> serve lazy chunk sourcemaps (<a href="https://redirect.github.com/vitejs/vite/issues/23026">#23026</a>) (<a href="https://github.com/vitejs/vite/commit/eb7aa9a8816a1e926d5d9b4cbe7e796b61314ce2">eb7aa9a</a>)</li> <li><strong>bundled-dev:</strong> serve the rolldown runtime from the installed rolldown (<a href="https://redirect.github.com/vitejs/vite/issues/23568">#23568</a>) (<a href="https://github.com/vitejs/vite/commit/bc598a6a8a6b7d6e157e9f19c16911cff8d2360c">bc598a6</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23601">#23601</a>) (<a href="https://github.com/vitejs/vite/commit/9944fa6033873f13ae88f59e023ab642c50fee2b">9944fa6</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23602">#23602</a>) (<a href="https://github.com/vitejs/vite/commit/88c17415af221b3a13e778f4f2c0e907c8287baf">88c1741</a>)</li> <li><strong>html:</strong> resolve percent-encoded srcset urls (<a href="https://redirect.github.com/vitejs/vite/issues/23609">#23609</a>) (<a href="https://github.com/vitejs/vite/commit/53f1ce7bfe38426861f6da572ef0e3359f6a80cd">53f1ce7</a>)</li> <li>limit size of object and array printing via <code>forwardConsole</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23565">#23565</a>) (<a href="https://github.com/vitejs/vite/commit/e64a5877dd3e552843a545749ccc257568917d28">e64a587</a>)</li> <li>merge <code>build.rolldownOptions.output.minify</code> correctly (<a href="https://redirect.github.com/vitejs/vite/issues/23536">#23536</a>) (<a href="https://github.com/vitejs/vite/commit/bba3bb8beedd185948956e02667d450672632d79">bba3bb8</a>)</li> <li><strong>optimize-deps:</strong> avoid "unsupported" warnings for browser:false mappings (<a href="https://redirect.github.com/vitejs/vite/issues/23590">#23590</a>) (<a href="https://github.com/vitejs/vite/commit/5e4b9ca3dcb24b51f58a765fd2d852614bbf3574">5e4b9ca</a>)</li> <li><strong>optimizer:</strong> preserve excluded optional peer require fallbacks (<a href="https://redirect.github.com/vitejs/vite/issues/23600">#23600</a>) (<a href="https://github.com/vitejs/vite/commit/a2bd6fa897c35c8a691671a7d70061c1cdd5c688">a2bd6fa</a>)</li> <li>pass queries to <code>renderBuiltUrl</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23586">#23586</a>) (<a href="https://github.com/vitejs/vite/commit/744269e5b2a155074910ddd275aecf2b83938496">744269e</a>)</li> <li><strong>server:</strong> handle file watcher errors without crashing (<a href="https://redirect.github.com/vitejs/vite/issues/23503">#23503</a>) (<a href="https://github.com/vitejs/vite/commit/6894f5cbceac589536a0efb476d881a47f5ab1c5">6894f5c</a>)</li> <li><strong>server:</strong> release previous environments after initialization (<a href="https://redirect.github.com/vitejs/vite/issues/23499">#23499</a>) (<a href="https://github.com/vitejs/vite/commit/5a3a010eea4c9ebbdcc080819f93068d4e035bd4">5a3a010</a>)</li> <li><strong>ssr:</strong> encode whitespace in module runner sourceURL (<a href="https://redirect.github.com/vitejs/vite/issues/23513">#23513</a>) (<a href="https://github.com/vitejs/vite/commit/bbc88129c967a8b8eedebd93acc82bee63b86b2a">bbc8812</a>)</li> <li><strong>worker:</strong> align worker urls in client and server when using terser (<a href="https://redirect.github.com/vitejs/vite/issues/23614">#23614</a>) (<a href="https://github.com/vitejs/vite/commit/24bd3316f3b2503d04a49361e365532bdb335e19">24bd331</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li>avoid encoding intermediate source maps (<a href="https://redirect.github.com/vitejs/vite/issues/23461">#23461</a>) (<a href="https://github.com/vitejs/vite/commit/89574f6d940a7273a53c5122a4477285801a696a">89574f6</a>)</li> <li><strong>build:</strong> avoid quadratic link scan in the preload helper (<a href="https://redirect.github.com/vitejs/vite/issues/23510">#23510</a>) (<a href="https://github.com/vitejs/vite/commit/cf5c0288d526824aead1b24e977400f13c527927">cf5c028</a>)</li> <li>only register time middleware when debug logging is enabled (<a href="https://redirect.github.com/vitejs/vite/issues/23621">#23621</a>) (<a href="https://github.com/vitejs/vite/commit/94d0080345e23d63d4cd02df2f7fa2afae775c26">94d0080</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>fix dead og-image PNG links in vite6/vite7 changelog entries (<a href="https://redirect.github.com/vitejs/vite/issues/23594">#23594</a>) (<a href="https://github.com/vitejs/vite/commit/1929b4cc5f38ad53781e3b07b8bdaa32cf18da07">1929b4c</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update vitest monorepo to v5 (<a href="https://redirect.github.com/vitejs/vite/issues/23604">#23604</a>) (<a href="https://github.com/vitejs/vite/commit/24339f4339d64fd8b5bc37654ac14ccff5aee584">24339f4</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>use <code>tinyexec</code> instead of <code>cross-spawn</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23583">#23583</a>) (<a href="https://github.com/vitejs/vite/commit/db915e5c0edbe1359dcf0cea340c9571dc7f4ad9">db915e5</a>)</li> </ul> <h3>Tests</h3> <ul> <li><strong>bundled-dev:</strong> accept a rolldown dev runtime with no helper imports (<a href="https://redirect.github.com/vitejs/vite/issues/23606">#23606</a>) (<a href="https://github.com/vitejs/vite/commit/634745dcc5648912bc32cb4de72ed8dd2230efa0">634745d</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.3.1...v8.3.2">8.3.2</a> (2026-10-01)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li><strong>build:</strong> preload CSS correctly when <code>renderBuiltUrl</code> returns URLs with queries (<a href="https://redirect.github.com/vitejs/vite/issues/23611">#23611</a>) (<a href="https://github.com/vitejs/vite/commit/64e0a215c24f0522b27b91f93cfd93e317b94481">64e0a21</a>)</li> <li><strong>bundled-dev:</strong> serve lazy chunk sourcemaps (<a href="https://redirect.github.com/vitejs/vite/issues/23026">#23026</a>) (<a href="https://github.com/vitejs/vite/commit/eb7aa9a8816a1e926d5d9b4cbe7e796b61314ce2">eb7aa9a</a>)</li> <li><strong>bundled-dev:</strong> serve the rolldown runtime from the installed rolldown (<a href="https://redirect.github.com/vitejs/vite/issues/23568">#23568</a>) (<a href="https://github.com/vitejs/vite/commit/bc598a6a8a6b7d6e157e9f19c16911cff8d2360c">bc598a6</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23601">#23601</a>) (<a href="https://github.com/vitejs/vite/commit/9944fa6033873f13ae88f59e023ab642c50fee2b">9944fa6</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23602">#23602</a>) (<a href="https://github.com/vitejs/vite/commit/88c17415af221b3a13e778f4f2c0e907c8287baf">88c1741</a>)</li> <li><strong>html:</strong> resolve percent-encoded srcset urls (<a href="https://redirect.github.com/vitejs/vite/issues/23609">#23609</a>) (<a href="https://github.com/vitejs/vite/commit/53f1ce7bfe38426861f6da572ef0e3359f6a80cd">53f1ce7</a>)</li> <li>limit size of object and array printing via <code>forwardConsole</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23565">#23565</a>) (<a href="https://github.com/vitejs/vite/commit/e64a5877dd3e552843a545749ccc257568917d28">e64a587</a>)</li> <li>merge <code>build.rolldownOptions.output.minify</code> correctly (<a href="https://redirect.github.com/vitejs/vite/issues/23536">#23536</a>) (<a href="https://github.com/vitejs/vite/commit/bba3bb8beedd185948956e02667d450672632d79">bba3bb8</a>)</li> <li><strong>optimize-deps:</strong> avoid "unsupported" warnings for browser:false mappings (<a href="https://redirect.github.com/vitejs/vite/issues/23590">#23590</a>) (<a href="https://github.com/vitejs/vite/commit/5e4b9ca3dcb24b51f58a765fd2d852614bbf3574">5e4b9ca</a>)</li> <li><strong>optimizer:</strong> preserve excluded optional peer require fallbacks (<a href="https://redirect.github.com/vitejs/vite/issues/23600">#23600</a>) (<a href="https://github.com/vitejs/vite/commit/a2bd6fa897c35c8a691671a7d70061c1cdd5c688">a2bd6fa</a>)</li> <li>pass queries to <code>renderBuiltUrl</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23586">#23586</a>) (<a href="https://github.com/vitejs/vite/commit/744269e5b2a155074910ddd275aecf2b83938496">744269e</a>)</li> <li><strong>server:</strong> handle file watcher errors without crashing (<a href="https://redirect.github.com/vitejs/vite/issues/23503">#23503</a>) (<a href="https://github.com/vitejs/vite/commit/6894f5cbceac589536a0efb476d881a47f5ab1c5">6894f5c</a>)</li> <li><strong>server:</strong> release previous environments after initialization (<a href="https://redirect.github.com/vitejs/vite/issues/23499">#23499</a>) (<a href="https://github.com/vitejs/vite/commit/5a3a010eea4c9ebbdcc080819f93068d4e035bd4">5a3a010</a>)</li> <li><strong>ssr:</strong> encode whitespace in module runner sourceURL (<a href="https://redirect.github.com/vitejs/vite/issues/23513">#23513</a>) (<a href="https://github.com/vitejs/vite/commit/bbc88129c967a8b8eedebd93acc82bee63b86b2a">bbc8812</a>)</li> <li><strong>worker:</strong> align worker urls in client and server when using terser (<a href="https://redirect.github.com/vitejs/vite/issues/23614">#23614</a>) (<a href="https://github.com/vitejs/vite/commit/24bd3316f3b2503d04a49361e365532bdb335e19">24bd331</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li>avoid encoding intermediate source maps (<a href="https://redirect.github.com/vitejs/vite/issues/23461">#23461</a>) (<a href="https://github.com/vitejs/vite/commit/89574f6d940a7273a53c5122a4477285801a696a">89574f6</a>)</li> <li><strong>build:</strong> avoid quadratic link scan in the preload helper (<a href="https://redirect.github.com/vitejs/vite/issues/23510">#23510</a>) (<a href="https://github.com/vitejs/vite/commit/cf5c0288d526824aead1b24e977400f13c527927">cf5c028</a>)</li> <li>only register time middleware when debug logging is enabled (<a href="https://redirect.github.com/vitejs/vite/issues/23621">#23621</a>) (<a href="https://github.com/vitejs/vite/commit/94d0080345e23d63d4cd02df2f7fa2afae775c26">94d0080</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>fix dead og-image PNG links in vite6/vite7 changelog entries (<a href="https://redirect.github.com/vitejs/vite/issues/23594">#23594</a>) (<a href="https://github.com/vitejs/vite/commit/1929b4cc5f38ad53781e3b07b8bdaa32cf18da07">1929b4c</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update vitest monorepo to v5 (<a href="https://redirect.github.com/vitejs/vite/issues/23604">#23604</a>) (<a href="https://github.com/vitejs/vite/commit/24339f4339d64fd8b5bc37654ac14ccff5aee584">24339f4</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>use <code>tinyexec</code> instead of <code>cross-spawn</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23583">#23583</a>) (<a href="https://github.com/vitejs/vite/commit/db915e5c0edbe1359dcf0cea340c9571dc7f4ad9">db915e5</a>)</li> </ul> <h3>Tests</h3> <ul> <li><strong>bundled-dev:</strong> accept a rolldown dev runtime with no helper imports (<a href="https://redirect.github.com/vitejs/vite/issues/23606">#23606</a>) (<a href="https://github.com/vitejs/vite/commit/634745dcc5648912bc32cb4de72ed8dd2230efa0">634745d</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/10033218d239c927cdc375970b5741cce408e81b"><code>1003321</code></a> release: v8.3.2 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23623">#23623</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/24bd3316f3b2503d04a49361e365532bdb335e19"><code>24bd331</code></a> fix(worker): align worker urls in client and server when using terser (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23614">#23614</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/94d0080345e23d63d4cd02df2f7fa2afae775c26"><code>94d0080</code></a> perf: only register time middleware when debug logging is enabled (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23621">#23621</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/89574f6d940a7273a53c5122a4477285801a696a"><code>89574f6</code></a> perf: avoid encoding intermediate source maps (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23461">#23461</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/5a3a010eea4c9ebbdcc080819f93068d4e035bd4"><code>5a3a010</code></a> fix(server): release previous environments after initialization (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23499">#23499</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/1929b4cc5f38ad53781e3b07b8bdaa32cf18da07"><code>1929b4c</code></a> docs: fix dead og-image PNG links in vite6/vite7 changelog entries (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23594">#23594</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/6894f5cbceac589536a0efb476d881a47f5ab1c5"><code>6894f5c</code></a> fix(server): handle file watcher errors without crashing (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23503">#23503</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/cf5c0288d526824aead1b24e977400f13c527927"><code>cf5c028</code></a> perf(build): avoid quadratic link scan in the preload helper (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23510">#23510</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/bba3bb8beedd185948956e02667d450672632d79"><code>bba3bb8</code></a> fix: merge <code>build.rolldownOptions.output.minify</code> correctly (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23536">#23536</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/5e4b9ca3dcb24b51f58a765fd2d852614bbf3574"><code>5e4b9ca</code></a> fix(optimize-deps): avoid "unsupported" warnings for browser:false mappings (...</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.3.2/packages/vite">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.3.1&new-version=8.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-05 13:59:04 +00:00
dependabot[bot]	893dc9a765	chore(deps-dev): Bump the vitest group with 2 updates (#2204 ) Bumps the vitest group with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@vitest/coverage-v8` from 5.0.2 to 5.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@vitest/coverage-v8's releases</a>.</em></p> <blockquote> <h2>v5.0.3</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Isolate <code>result.status</code> between <code>repeats</code> runs - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11218">vitest-dev/vitest#11218</a> <a href="https://github.com/vitest-dev/vitest/commit/5dbebe9e3"><!-- raw HTML omitted -->(5dbeb)<!-- raw HTML omitted --></a></li> <li>Don't print an interceptor warning in browser mode - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11377">vitest-dev/vitest#11377</a> <a href="https://github.com/vitest-dev/vitest/commit/15cc006aa"><!-- raw HTML omitted -->(15cc0)<!-- raw HTML omitted --></a></li> <li>Don't retry when <code>test.fails</code> expectedly failed - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11219">vitest-dev/vitest#11219</a> <a href="https://github.com/vitest-dev/vitest/commit/b24585f08"><!-- raw HTML omitted -->(b2458)<!-- raw HTML omitted --></a></li> <li>Scope cache key generators to projects - by <a href="https://github.com/ecoyoung"><code>@ecoyoung</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11281">vitest-dev/vitest#11281</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11301">vitest-dev/vitest#11301</a> <a href="https://github.com/vitest-dev/vitest/commit/92ba7fc1d"><!-- raw HTML omitted -->(92ba7)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Delay server <code>listen</code> until tests start running - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11366">vitest-dev/vitest#11366</a> <a href="https://github.com/vitest-dev/vitest/commit/7d8ed3e9b"><!-- raw HTML omitted -->(7d8ed)<!-- raw HTML omitted --></a></li> <li>Check mock path boundaries - by <a href="https://github.com/saryn17"><code>@saryn17</code></a>, <strong>Ryosei Sato</strong> and <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11361">vitest-dev/vitest#11361</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11362">vitest-dev/vitest#11362</a> <a href="https://github.com/vitest-dev/vitest/commit/1c3888bce"><!-- raw HTML omitted -->(1c388)<!-- raw HTML omitted --></a></li> <li>Keep config of browser-consumed environments - by <a href="https://github.com/kasperpeulen"><code>@kasperpeulen</code></a> and <strong>Claude</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11378">vitest-dev/vitest#11378</a> <a href="https://github.com/vitest-dev/vitest/commit/aafc0996f"><!-- raw HTML omitted -->(aafc0)<!-- raw HTML omitted --></a></li> <li>Ignore page crash while cancelling - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11386">vitest-dev/vitest#11386</a> <a href="https://github.com/vitest-dev/vitest/commit/7c36748fa"><!-- raw HTML omitted -->(7c367)<!-- raw HTML omitted --></a></li> <li><code>toMatchScreenshot</code> uses wrong reference on retried tests - by <a href="https://github.com/macarie"><code>@macarie</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11393">vitest-dev/vitest#11393</a> <a href="https://github.com/vitest-dev/vitest/commit/c22aba992"><!-- raw HTML omitted -->(c22ab)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>cache</strong>: <ul> <li>Revalidate imports of cached modules - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11381">vitest-dev/vitest#11381</a> <a href="https://github.com/vitest-dev/vitest/commit/38f98855f"><!-- raw HTML omitted -->(38f98)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>deps</strong>: <ul> <li>Pin <code>why-is-node-running</code> to <code>3.2.1</code> to avoid users running into <code>ERR_PNPM_TRUST_DOWNGRADE</code> - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11403">vitest-dev/vitest#11403</a> <a href="https://github.com/vitest-dev/vitest/commit/f6c9a4977"><!-- raw HTML omitted -->(f6c9a)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Pass current equality testers to <code>expect.extend</code> asymmetric matchers - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11401">vitest-dev/vitest#11401</a> <a href="https://github.com/vitest-dev/vitest/commit/3e794a96b"><!-- raw HTML omitted -->(3e794)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>jsdom</strong>: <ul> <li>Support Blob on jsdom 30.1 - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11379">vitest-dev/vitest#11379</a> <a href="https://github.com/vitest-dev/vitest/commit/6c49b7197"><!-- raw HTML omitted -->(6c49b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>pool</strong>: <ul> <li>Preserve unique pool ids when <code>groupOrder</code> is set - by <a href="https://github.com/mtorp"><code>@mtorp</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11392">vitest-dev/vitest#11392</a> <a href="https://github.com/vitest-dev/vitest/commit/50312ebb4"><!-- raw HTML omitted -->(50312)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>ui</strong>: <ul> <li>Split-pane handle overlapping iframe - by <a href="https://github.com/macarie"><code>@macarie</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11221">vitest-dev/vitest#11221</a> <a href="https://github.com/vitest-dev/vitest/commit/f91db0dfd"><!-- raw HTML omitted -->(f91db)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>vitest</strong>: <ul> <li>Remove root temp dir on close - by <a href="https://github.com/abhinav-phi"><code>@abhinav-phi</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11248">vitest-dev/vitest#11248</a> <a href="https://github.com/vitest-dev/vitest/commit/7c7119cf7"><!-- raw HTML omitted -->(7c711)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>vm</strong>: <ul> <li>Do not optimize deps from index.html - by <a href="https://github.com/ezefernandezyf"><code>@ezefernandezyf</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11329">vitest-dev/vitest#11329</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11360">vitest-dev/vitest#11360</a> <a href="https://github.com/vitest-dev/vitest/commit/caf2887de"><!-- raw HTML omitted -->(caf28)<!-- raw HTML omitted --></a></li> <li>Don't reuse scripts across vite environments - by <a href="https://github.com/MO2k4"><code>@MO2k4</code></a>, <strong>Martin Oehlert</strong> and <strong>Claude</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11395">vitest-dev/vitest#11395</a> <a href="https://github.com/vitest-dev/vitest/commit/346d3896b"><!-- raw HTML omitted -->(346d3)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.2...v5.0.3">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75"><code>33cadea</code></a> chore: release v5.0.3 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11409">#11409</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/a029e76a9e72ebdd468452ee1bb788bbe5dc635e"><code>a029e76</code></a> chore: migrate to oxc (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11367">#11367</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/coverage-v8">compare view</a></li> </ul> </details> <br /> Updates `vitest` from 5.0.2 to 5.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>.</em></p> <blockquote> <h2>v5.0.3</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Isolate <code>result.status</code> between <code>repeats</code> runs - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11218">vitest-dev/vitest#11218</a> <a href="https://github.com/vitest-dev/vitest/commit/5dbebe9e3"><!-- raw HTML omitted -->(5dbeb)<!-- raw HTML omitted --></a></li> <li>Don't print an interceptor warning in browser mode - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11377">vitest-dev/vitest#11377</a> <a href="https://github.com/vitest-dev/vitest/commit/15cc006aa"><!-- raw HTML omitted -->(15cc0)<!-- raw HTML omitted --></a></li> <li>Don't retry when <code>test.fails</code> expectedly failed - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11219">vitest-dev/vitest#11219</a> <a href="https://github.com/vitest-dev/vitest/commit/b24585f08"><!-- raw HTML omitted -->(b2458)<!-- raw HTML omitted --></a></li> <li>Scope cache key generators to projects - by <a href="https://github.com/ecoyoung"><code>@ecoyoung</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11281">vitest-dev/vitest#11281</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11301">vitest-dev/vitest#11301</a> <a href="https://github.com/vitest-dev/vitest/commit/92ba7fc1d"><!-- raw HTML omitted -->(92ba7)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Delay server <code>listen</code> until tests start running - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11366">vitest-dev/vitest#11366</a> <a href="https://github.com/vitest-dev/vitest/commit/7d8ed3e9b"><!-- raw HTML omitted -->(7d8ed)<!-- raw HTML omitted --></a></li> <li>Check mock path boundaries - by <a href="https://github.com/saryn17"><code>@saryn17</code></a>, <strong>Ryosei Sato</strong> and <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11361">vitest-dev/vitest#11361</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11362">vitest-dev/vitest#11362</a> <a href="https://github.com/vitest-dev/vitest/commit/1c3888bce"><!-- raw HTML omitted -->(1c388)<!-- raw HTML omitted --></a></li> <li>Keep config of browser-consumed environments - by <a href="https://github.com/kasperpeulen"><code>@kasperpeulen</code></a> and <strong>Claude</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11378">vitest-dev/vitest#11378</a> <a href="https://github.com/vitest-dev/vitest/commit/aafc0996f"><!-- raw HTML omitted -->(aafc0)<!-- raw HTML omitted --></a></li> <li>Ignore page crash while cancelling - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11386">vitest-dev/vitest#11386</a> <a href="https://github.com/vitest-dev/vitest/commit/7c36748fa"><!-- raw HTML omitted -->(7c367)<!-- raw HTML omitted --></a></li> <li><code>toMatchScreenshot</code> uses wrong reference on retried tests - by <a href="https://github.com/macarie"><code>@macarie</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11393">vitest-dev/vitest#11393</a> <a href="https://github.com/vitest-dev/vitest/commit/c22aba992"><!-- raw HTML omitted -->(c22ab)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>cache</strong>: <ul> <li>Revalidate imports of cached modules - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11381">vitest-dev/vitest#11381</a> <a href="https://github.com/vitest-dev/vitest/commit/38f98855f"><!-- raw HTML omitted -->(38f98)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>deps</strong>: <ul> <li>Pin <code>why-is-node-running</code> to <code>3.2.1</code> to avoid users running into <code>ERR_PNPM_TRUST_DOWNGRADE</code> - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11403">vitest-dev/vitest#11403</a> <a href="https://github.com/vitest-dev/vitest/commit/f6c9a4977"><!-- raw HTML omitted -->(f6c9a)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Pass current equality testers to <code>expect.extend</code> asymmetric matchers - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Claude</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11401">vitest-dev/vitest#11401</a> <a href="https://github.com/vitest-dev/vitest/commit/3e794a96b"><!-- raw HTML omitted -->(3e794)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>jsdom</strong>: <ul> <li>Support Blob on jsdom 30.1 - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11379">vitest-dev/vitest#11379</a> <a href="https://github.com/vitest-dev/vitest/commit/6c49b7197"><!-- raw HTML omitted -->(6c49b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>pool</strong>: <ul> <li>Preserve unique pool ids when <code>groupOrder</code> is set - by <a href="https://github.com/mtorp"><code>@mtorp</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11392">vitest-dev/vitest#11392</a> <a href="https://github.com/vitest-dev/vitest/commit/50312ebb4"><!-- raw HTML omitted -->(50312)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>ui</strong>: <ul> <li>Split-pane handle overlapping iframe - by <a href="https://github.com/macarie"><code>@macarie</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11221">vitest-dev/vitest#11221</a> <a href="https://github.com/vitest-dev/vitest/commit/f91db0dfd"><!-- raw HTML omitted -->(f91db)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>vitest</strong>: <ul> <li>Remove root temp dir on close - by <a href="https://github.com/abhinav-phi"><code>@abhinav-phi</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11248">vitest-dev/vitest#11248</a> <a href="https://github.com/vitest-dev/vitest/commit/7c7119cf7"><!-- raw HTML omitted -->(7c711)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>vm</strong>: <ul> <li>Do not optimize deps from index.html - by <a href="https://github.com/ezefernandezyf"><code>@ezefernandezyf</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-6)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11329">vitest-dev/vitest#11329</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11360">vitest-dev/vitest#11360</a> <a href="https://github.com/vitest-dev/vitest/commit/caf2887de"><!-- raw HTML omitted -->(caf28)<!-- raw HTML omitted --></a></li> <li>Don't reuse scripts across vite environments - by <a href="https://github.com/MO2k4"><code>@MO2k4</code></a>, <strong>Martin Oehlert</strong> and <strong>Claude</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11395">vitest-dev/vitest#11395</a> <a href="https://github.com/vitest-dev/vitest/commit/346d3896b"><!-- raw HTML omitted -->(346d3)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.2...v5.0.3">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/33cadea62e8763c455c7fca38d9ab1dda87c5f75"><code>33cadea</code></a> chore: release v5.0.3 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11409">#11409</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/346d3896b65c3c907174447a035807342799f346"><code>346d389</code></a> fix(vm): don't reuse scripts across vite environments (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11395">#11395</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/f6c9a4977ad3363f796a737834572e54c6ad5c18"><code>f6c9a49</code></a> fix(deps): pin <code>why-is-node-running</code> to <code>3.2.1</code> to avoid users running into `...</li> <li><a href="https://github.com/vitest-dev/vitest/commit/062c75d8b63519211d951d8293ea81b5a9e3c124"><code>062c75d</code></a> chore: fix standalone docs build, update exports maps (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11394">#11394</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/caf2887dee8987a60118d53933f6e9cabd6b3e2a"><code>caf2887</code></a> fix(vm): do not optimize deps from index.html (fix <a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11329">#11329</a>) (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11360">#11360</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/50312ebb4eca6a98f6d0b2b61d5d9d38cbbabcef"><code>50312eb</code></a> fix(pool): preserve unique pool ids when <code>groupOrder</code> is set (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11392">#11392</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/7c36748fad1eae9687312f2f7ceadce6ec88b5df"><code>7c36748</code></a> fix(browser): ignore page crash while cancelling (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11386">#11386</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/92ba7fc1df16a4fa5bbee3f198c582fbd56689d8"><code>92ba7fc</code></a> fix: scope cache key generators to projects (fix <a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11281">#11281</a>) (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11301">#11301</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/38f98855fa9cd7fd376afb84094eba0fda256a74"><code>38f9885</code></a> fix(cache): revalidate imports of cached modules (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11381">#11381</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/b24585f08f2ea267746a2d6ca0e43edcbb29726f"><code>b24585f</code></a> fix: don't retry when <code>test.fails</code> expectedly failed (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11219">#11219</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-05 13:57:23 +00:00
dependabot[bot]	e868a72e78	chore(deps-dev): Bump i18next-cli from 1.74.2 to 1.74.4 (#2205 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.2 to 1.74.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.74.4</h2> <ul> <li>fix(extract): a conditional namespace argument resolves to the namespaces in its branches. <code>useTranslation(confirmEmail ? ['reset-email-page', 'reset-page'] : 'reset-page')</code> filed <code>t('form.title')</code> under <code>defaultNS</code>, so <code>status</code> reported it as absent and <code>extract</code> removed the existing translations from <code>reset-page</code> and <code>reset-email-page</code>. The key is now extracted into the primary namespace of every branch (here <code>reset-email-page</code> and <code>reset-page</code>), also for <code><Trans t={t}></code>. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/299">#299</a>.</li> </ul> <h2>1.74.3</h2> <ul> <li> <p>fix(extract): dynamic keys typed by a declaration in a file without any translation call resolve again when that declaration builds on one from a file that sorts after it. In 1.74.2, <code>type Kind = Base \| 'extra'</code> in <code>api/types.ts</code> with <code>Base</code> declared in <code>shared/base.ts</code> expanded <code>t(`kind.${kind}`)</code> to <code>kind.extra</code> only, and the same happened to interface members, function return types and functions returning an enum member declared further down the list. Such declarations are now resolved again once every file has been scanned, which also removes the file-order dependence this had before 1.74.2.</p> </li> <li> <p>feat(extract): more implicitly typed values expand to their finite set of keys. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/298">#298</a>:</p> <ul> <li>members of an object returned by a function with an object return type: <code>const animal = getAnimal(); t(`animal.${animal.type}`)</code>, also through <code>const { type } = getAnimal()</code>, <code>const kind = animal.type</code> or <code>getAnimal().type</code>.</li> <li>unions and intersections of object types (<code>type Animal = Duck \| Dog</code> gives <code>animal.type</code> the values of both) and generic object types (<code>type AnimalBase<T extends AnimalType> = { type: T }</code> used as <code>AnimalBase<'DUCK'></code>, or bare, which falls back to the parameter's default or constraint).</li> <li><code>(typeof COLOR)[keyof typeof COLOR]</code> for an <code>as const</code> object or an enum.</li> <li>elements of an array, <code>colors[i]</code>, without an annotation on the variable they are assigned to.</li> </ul> <p>Narrowing is not followed: after <code>if (color !== 'BLUE')</code>, <code>color.BLUE</code> is still extracted.</p> </li> <li> <p>fix(extract): shorthand options resolve like their long form. <code>t('k', { ns })</code> filed the key under the default namespace, <code>{ defaultValue }</code> was ignored and <code>useTranslation('ns', { keyPrefix })</code> lost its prefix. Thanks to <a href="https://github.com/aaronshaf"><code>@aaronshaf</code></a> for reporting it in <a href="https://redirect.github.com/i18next/i18next-cli/pull/291">#291</a>.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/12ea0d4291ab916a646608b0ce16f03c359e87ff"><code>12ea0d4</code></a> 1.74.4</li> <li><a href="https://github.com/i18next/i18next-cli/commit/b8cf7051d80ecca85cdc7709f11c8fdeafcf573b"><code>b8cf705</code></a> fix(extract): resolve a conditional useTranslation namespace to its branches ...</li> <li><a href="https://github.com/i18next/i18next-cli/commit/1236571c85ea1c3c1bbae668f0c1e2988614e759"><code>1236571</code></a> 1.74.3</li> <li><a href="https://github.com/i18next/i18next-cli/commit/ce6e8c2f4b6f81118016e64366d771211af72c40"><code>ce6e8c2</code></a> fix(extract): resolve implicit object types, cross-file declarations and shor...</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.74.2...v1.74.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.2&new-version=1.74.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-05 13:56:51 +00:00
dependabot[bot]	986af304bc	chore(deps-dev): Bump stylelint from 17.15.0 to 17.16.0 (#2206 ) Bumps [stylelint](https://github.com/stylelint/stylelint) from 17.15.0 to 17.16.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/releases">stylelint's releases</a>.</em></p> <blockquote> <h2>17.16.0</h2> <p>It fixes 2 bugs in the <code>layout-mappings</code> rules. This will likely be the last <code>17.x</code> release, as we prepare for <code>18.0.0</code>.</p> <ul> <li>Fixed: <code>property-layout-mappings</code> and <code>unit-layout-mappings</code> false negatives for uppercase property names and units (<a href="https://redirect.github.com/stylelint/stylelint/issues/9485">#9485</a>) (<a href="https://github.com/giaBaoJS"><code>@giaBaoJS</code></a>).</li> <li>Fixed: <code>value-keyword-layout-mappings</code> false positives for <code>caption-side</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9483">#9483</a>) (<a href="https://github.com/giaBaoJS"><code>@giaBaoJS</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md">stylelint's changelog</a>.</em></p> <blockquote> <h2>17.16.0 - 2026-10-01</h2> <p>It fixes 2 bugs in the <code>layout-mappings</code> rules. This will likely be the last <code>17.x</code> release, as we prepare for <code>18.0.0</code>.</p> <ul> <li>Fixed: <code>property-layout-mappings</code> and <code>unit-layout-mappings</code> false negatives for uppercase property names and units (<a href="https://redirect.github.com/stylelint/stylelint/pull/9485">#9485</a>) (<a href="https://github.com/giaBaoJS"><code>@giaBaoJS</code></a>).</li> <li>Fixed: <code>value-keyword-layout-mappings</code> false positives for <code>caption-side</code> (<a href="https://redirect.github.com/stylelint/stylelint/pull/9483">#9483</a>) (<a href="https://github.com/giaBaoJS"><code>@giaBaoJS</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stylelint/stylelint/commit/bc06c7cdb1413de3d8dc939b33af138ab7e59df1"><code>bc06c7c</code></a> Release 17.16.0 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9551">#9551</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/f4fb76f709c5046e9b1b2d9888d1d2dd1d9e61a8"><code>f4fb76f</code></a> Set <code>target-branch</code> to <code>v18</code> in Dependabot config (<a href="https://redirect.github.com/stylelint/stylelint/issues/9488">#9488</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/20194788a393f726c6087dffb7f54e1d5c67a7b1"><code>2019478</code></a> Fix <code>property-layout-mappings</code> and <code>unit-layout-mappings</code> false negatives for...</li> <li><a href="https://github.com/stylelint/stylelint/commit/e8757103c662e7573166640f9bcada57bc6bad6c"><code>e875710</code></a> Fix <code>value-keyword-layout-mappings</code> false positives for <code>caption-side</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9483">#9483</a>)</li> <li>See full diff in <a href="https://github.com/stylelint/stylelint/compare/17.15.0...17.16.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stylelint&package-manager=npm_and_yarn&previous-version=17.15.0&new-version=17.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-05 13:53:18 +00:00
dependabot[bot]	e172e6c6fc	chore(deps-dev): Bump typescript-eslint from 8.70.1 to 8.71.0 (#2200 ) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.70.1 to 8.71.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.71.0</h2> <h2>8.71.0 (2026-09-28)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unsafe-enum-assignment] add rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12732">#12732</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [switch-exhaustiveness-check] always sort literal cases in stable order (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12885">#12885</a>)</li> <li><strong>eslint-plugin:</strong> [unbound-method] respect <code>this: void</code> on class properties (<a href="https://github.com/typescript-eslint/typescript-eslint/commit/7fce9127d">7fce9127d</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] specialize generic assertion report message (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12832">#12832</a>)</li> <li><strong>eslint-plugin:</strong> [no-misused-promises] handle a return outside of any function (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12912">#12912</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Fatih Çakır <a href="https://github.com/wfatih"><code>@wfatih</code></a></li> <li>Josh Goldberg</li> <li>Josh Goldberg ✨</li> <li>Zamiell <a href="https://github.com/Zamiell"><code>@Zamiell</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.71.0 (2026-09-28)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8695664c5ee3fbb8fd76907fc45e148579cc3162"><code>8695664</code></a> chore(release): publish 8.71.0</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.70.1&new-version=8.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-02 13:52:25 +00:00
dependabot[bot]	daae11623d	chore(deps-dev): Bump i18next-cli from 1.74.1 to 1.74.2 (#2199 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.74.1 to 1.74.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.74.2</h2> <ul> <li>fix(extract): the output no longer depends on the order in which <code>glob</code> happens to return the input files. When two call sites give one key different defaults (<code>t('k', 'Adding...')</code> in one file, <code>t('k', 'Importing...')</code> in another), the first file visited wins, so an unchanged source tree could produce a different catalog from run to run and flip CI checks that compare against a committed catalog. Files are now visited in sorted path order, which makes the winner stable. If your sources contain such conflicts, the kept default may change once with this release. To hear about them instead of silently keeping one default, set <code>extract.warnOnConflicts</code> to <code>'warn'</code> or <code>'error'</code>. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/296">#296</a>.</li> <li>perf(extract): files that contain no translation call, hook, <code>TFunction</code>, <code>getFixedT</code> or Trans component (as configured via <code>functions</code>, <code>useTranslationNames</code> and <code>transComponents</code>) are no longer parsed and walked a second time for keys. The constants pre-scan still reads every file, so types and <code>as const</code> values declared in such files keep resolving dynamic keys elsewhere. Plugins with an <code>onVisitNode</code> hook still see every file. On large trees where most files hold no translations this cuts extraction time considerably. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/297">#297</a>.</li> <li>chore: update dependencies</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/d0b07c98e9a56b96ef1d289ca43bfc2059084d06"><code>d0b07c9</code></a> 1.74.2</li> <li><a href="https://github.com/i18next/i18next-cli/commit/8ce283ee0200185c491468f156402c081f476017"><code>8ce283e</code></a> fix(extract): sort input files and skip the key walk for token-free files <a href="https://redirect.github.com/i18next/i18next-cli/issues/29">#29</a>...</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.74.1...v1.74.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.74.1&new-version=1.74.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-01 13:57:44 +00:00
dependabot[bot]	73c1633788	chore(deps): Bump brace-expansion (#2198 ) Bumps and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together. Updates `brace-expansion` from 5.0.9 to 5.0.12 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099"><code>f341015</code></a> 5.0.12</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96"><code>33a5ef1</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568"><code>8247927</code></a> 5.0.11</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"><code>935d78f</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f"><code>df7682f</code></a> 5.0.10</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02"><code>1ade9de</code></a> npm run format</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"><code>6735c94</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18"><code>4e70465</code></a> chore: ensure prettier formatting (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/154">#154</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff"><code>fd7a5e3</code></a> Bump ip-address from 10.2.0 to 10.4.0 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/152">#152</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4"><code>1790143</code></a> Bump uuid and <code>@tapjs/processinfo</code> (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/120">#120</a>)</li> <li>See full diff in <a href="https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12">compare view</a></li> </ul> </details> <br /> Updates `brace-expansion` from 1.1.18 to 1.1.21 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099"><code>f341015</code></a> 5.0.12</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96"><code>33a5ef1</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568"><code>8247927</code></a> 5.0.11</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"><code>935d78f</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f"><code>df7682f</code></a> 5.0.10</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02"><code>1ade9de</code></a> npm run format</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"><code>6735c94</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18"><code>4e70465</code></a> chore: ensure prettier formatting (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/154">#154</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff"><code>fd7a5e3</code></a> Bump ip-address from 10.2.0 to 10.4.0 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/152">#152</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4"><code>1790143</code></a> Bump uuid and <code>@tapjs/processinfo</code> (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/120">#120</a>)</li> <li>See full diff in <a href="https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/maplibre/maputnik/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-30 14:07:59 +00:00
dependabot[bot]	c38a13b68e	chore(deps): Bump react-resizable-panels from 4.13.3 to 4.14.1 in the react group (#2197 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.13.3 to 4.14.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.14.1</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/720">720</a>: Bugfix: Constraints applied because of a <code>Group</code> size change (e.g. a pixel-based <code>minSize</code> when the window is small) no longer permanently alter the layout; the requested layout is restored once the constraint no longer applies <ul> <li><code>onLayoutChanged</code> meta includes a new <code>requestedLayout</code> attribute; <code>useDefaultLayout</code> and <code>useDefaultGridLayout</code> persist this value instead of the constrained layout</li> </ul> </li> </ul> <h2>4.14.0</h2> <ul> <li>New <code>Grid</code>, <code>Cell</code>, and <code>Gridline</code> components for resizable two-dimensional layouts: <ul> <li>Columns and rows support the same size constraints as <code>Panel</code>s (e.g. min/max size, collapsible)</li> <li>Cells can span multiple columns and/or rows</li> <li>Dragging where column and row boundaries intersect resizes both axes</li> <li><code>Gridline</code>s (optional, like <code>Separator</code>s) can span a subset of tracks to avoid spanning cells</li> </ul> </li> <li>New <code>useDefaultGridLayout</code>, <code>useGridRef</code>, and <code>useGridCallbackRef</code> hooks</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.14.1</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/720">720</a>: Bugfix: Constraints applied because of a <code>Group</code> size change (e.g. a pixel-based <code>minSize</code> when the window is small) no longer permanently alter the layout; the requested layout is restored once the constraint no longer applies <ul> <li><code>onLayoutChanged</code> meta includes a new <code>requestedLayout</code> attribute; <code>useDefaultLayout</code> and <code>useDefaultGridLayout</code> persist this value instead of the constrained layout</li> </ul> </li> </ul> <h2>4.14.0</h2> <ul> <li>New <code>Grid</code>, <code>Cell</code>, and <code>Gridline</code> components for resizable two-dimensional layouts: <ul> <li>Columns and rows support the same size constraints as <code>Panel</code>s (e.g. min/max size, collapsible)</li> <li>Cells can span multiple columns and/or rows</li> <li>Dragging where column and row boundaries intersect resizes both axes</li> <li><code>Gridline</code>s (optional, like <code>Separator</code>s) can span a subset of tracks to avoid spanning cells</li> </ul> </li> <li>New <code>useDefaultGridLayout</code>, <code>useGridRef</code>, and <code>useGridCallbackRef</code> hooks</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/0cd376c57a19900d22f33aa8eb46f417a7437c12"><code>0cd376c</code></a> 4.14.0 -> 4.14.1</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/1b329c6b241c0807148bd7331284f0d10e516175"><code>1b329c6</code></a> Bugfix: Size constraints and windows/group resize (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/757">#757</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/c961976bd6e99ba8be13ee2d0b298eab00ffafcb"><code>c961976</code></a> 4.13.3 -> 4.14.0</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/144e65d3c77404f4b925900ee7ec12a4231a8dc4"><code>144e65d</code></a> <code>Grid</code>, <code>Gridline</code>, and <code>Cell</code> components (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/756">#756</a>)</li> <li>See full diff in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.13.3...4.14.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.13.3&new-version=4.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-30 13:55:27 +00:00
dependabot[bot]	af7d35e6e1	chore(deps-dev): Bump vite from 8.3.0 to 8.3.1 (#2193 ) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.3.0 to 8.3.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.3.1</h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23482">#23482</a>) (<a href="https://github.com/vitejs/vite/commit/3c752c8932bc0599465ba4a6d8f44aaf1e934c3d">3c752c8</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23537">#23537</a>) (<a href="https://github.com/vitejs/vite/commit/e8990c4d6101dfaca2654ed8ab4d0574ee920248">e8990c4</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23483">#23483</a>) (<a href="https://github.com/vitejs/vite/commit/9aecbbfa5fb5da4b9981c099cb9746a9fd210806">9aecbbf</a>)</li> <li>handle <code>server.ws: false</code> in mergeConfig (<a href="https://redirect.github.com/vitejs/vite/issues/23511">#23511</a>) (<a href="https://github.com/vitejs/vite/commit/f68c0d5a28c96555431413e3e2cbe644337b087f">f68c0d5</a>)</li> <li>merge <code>build.rolldownOptions.output.comments</code> correctly (<a href="https://redirect.github.com/vitejs/vite/issues/23514">#23514</a>) (<a href="https://github.com/vitejs/vite/commit/4aba8d8720e82e4c5b694a4b7877755a3f84fc57">4aba8d8</a>)</li> <li><strong>optimizer:</strong> don't skip imports whose binding starts with type (<a href="https://redirect.github.com/vitejs/vite/issues/23540">#23540</a>) (<a href="https://github.com/vitejs/vite/commit/39330f489a0ae08923557f0ce10a307d6662a3f5">39330f4</a>)</li> <li><strong>optimizer:</strong> resolve pending discovered dep processing on close before init (<a href="https://redirect.github.com/vitejs/vite/issues/23567">#23567</a>) (<a href="https://github.com/vitejs/vite/commit/5f894339d27882fedc86bf6b1076fa6d92e404f3">5f89433</a>)</li> <li><strong>server:</strong> avoid reinitializing watcher when adding file after server close (<a href="https://redirect.github.com/vitejs/vite/issues/23572">#23572</a>) (<a href="https://github.com/vitejs/vite/commit/6f831f9b58ebda77638b514042ad8d160edfb928">6f831f9</a>)</li> <li><strong>sourcemap:</strong> skip URL source roots when injecting sources content (<a href="https://redirect.github.com/vitejs/vite/issues/23519">#23519</a>) (<a href="https://github.com/vitejs/vite/commit/04fc30a4b91870e65a436b3420620a2e02a94a41">04fc30a</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li>merge prereleases in changelog (<a href="https://redirect.github.com/vitejs/vite/issues/23466">#23466</a>) (<a href="https://github.com/vitejs/vite/commit/99bd9d1d46153fa939f4a304cc0177db42e28776">99bd9d1</a>)</li> <li><strong>optimizer:</strong> add debug log when waiting for dep before init (<a href="https://redirect.github.com/vitejs/vite/issues/23566">#23566</a>) (<a href="https://github.com/vitejs/vite/commit/63567c73ac132e6384fef384e6b9f7e8d5a37fff">63567c7</a>)</li> <li>update <code>optimizeDeps.include</code> comment (<a href="https://redirect.github.com/vitejs/vite/issues/23489">#23489</a>) (<a href="https://github.com/vitejs/vite/commit/6a84c72100da4e4be4badb2d9a0026279b4df136">6a84c72</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>assets regexp use non-capture (<a href="https://redirect.github.com/vitejs/vite/issues/23491">#23491</a>) (<a href="https://github.com/vitejs/vite/commit/f4b4431a2f9097fd9bbb7aaebbf1b63c4b54dea1">f4b4431</a>)</li> <li>remove duplicate configurations (<a href="https://redirect.github.com/vitejs/vite/issues/23532">#23532</a>) (<a href="https://github.com/vitejs/vite/commit/9abd99bfdd3117149d6faf87fc37bc9899b1c998">9abd99b</a>)</li> <li>replace <code>find</code> with <code>some</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23554">#23554</a>) (<a href="https://github.com/vitejs/vite/commit/af7cdf6964f124f58d66037e808fe687654948e2">af7cdf6</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.3.0...v8.3.1">8.3.1</a> (2026-09-24)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23482">#23482</a>) (<a href="https://github.com/vitejs/vite/commit/3c752c8932bc0599465ba4a6d8f44aaf1e934c3d">3c752c8</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23537">#23537</a>) (<a href="https://github.com/vitejs/vite/commit/e8990c4d6101dfaca2654ed8ab4d0574ee920248">e8990c4</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23483">#23483</a>) (<a href="https://github.com/vitejs/vite/commit/9aecbbfa5fb5da4b9981c099cb9746a9fd210806">9aecbbf</a>)</li> <li>handle <code>server.ws: false</code> in mergeConfig (<a href="https://redirect.github.com/vitejs/vite/issues/23511">#23511</a>) (<a href="https://github.com/vitejs/vite/commit/f68c0d5a28c96555431413e3e2cbe644337b087f">f68c0d5</a>)</li> <li>merge <code>build.rolldownOptions.output.comments</code> correctly (<a href="https://redirect.github.com/vitejs/vite/issues/23514">#23514</a>) (<a href="https://github.com/vitejs/vite/commit/4aba8d8720e82e4c5b694a4b7877755a3f84fc57">4aba8d8</a>)</li> <li><strong>optimizer:</strong> don't skip imports whose binding starts with type (<a href="https://redirect.github.com/vitejs/vite/issues/23540">#23540</a>) (<a href="https://github.com/vitejs/vite/commit/39330f489a0ae08923557f0ce10a307d6662a3f5">39330f4</a>)</li> <li><strong>optimizer:</strong> resolve pending discovered dep processing on close before init (<a href="https://redirect.github.com/vitejs/vite/issues/23567">#23567</a>) (<a href="https://github.com/vitejs/vite/commit/5f894339d27882fedc86bf6b1076fa6d92e404f3">5f89433</a>)</li> <li><strong>server:</strong> avoid reinitializing watcher when adding file after server close (<a href="https://redirect.github.com/vitejs/vite/issues/23572">#23572</a>) (<a href="https://github.com/vitejs/vite/commit/6f831f9b58ebda77638b514042ad8d160edfb928">6f831f9</a>)</li> <li><strong>sourcemap:</strong> skip URL source roots when injecting sources content (<a href="https://redirect.github.com/vitejs/vite/issues/23519">#23519</a>) (<a href="https://github.com/vitejs/vite/commit/04fc30a4b91870e65a436b3420620a2e02a94a41">04fc30a</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li>merge prereleases in changelog (<a href="https://redirect.github.com/vitejs/vite/issues/23466">#23466</a>) (<a href="https://github.com/vitejs/vite/commit/99bd9d1d46153fa939f4a304cc0177db42e28776">99bd9d1</a>)</li> <li><strong>optimizer:</strong> add debug log when waiting for dep before init (<a href="https://redirect.github.com/vitejs/vite/issues/23566">#23566</a>) (<a href="https://github.com/vitejs/vite/commit/63567c73ac132e6384fef384e6b9f7e8d5a37fff">63567c7</a>)</li> <li>update <code>optimizeDeps.include</code> comment (<a href="https://redirect.github.com/vitejs/vite/issues/23489">#23489</a>) (<a href="https://github.com/vitejs/vite/commit/6a84c72100da4e4be4badb2d9a0026279b4df136">6a84c72</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>assets regexp use non-capture (<a href="https://redirect.github.com/vitejs/vite/issues/23491">#23491</a>) (<a href="https://github.com/vitejs/vite/commit/f4b4431a2f9097fd9bbb7aaebbf1b63c4b54dea1">f4b4431</a>)</li> <li>remove duplicate configurations (<a href="https://redirect.github.com/vitejs/vite/issues/23532">#23532</a>) (<a href="https://github.com/vitejs/vite/commit/9abd99bfdd3117149d6faf87fc37bc9899b1c998">9abd99b</a>)</li> <li>replace <code>find</code> with <code>some</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23554">#23554</a>) (<a href="https://github.com/vitejs/vite/commit/af7cdf6964f124f58d66037e808fe687654948e2">af7cdf6</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/39ddf7ccf7e7469ff6a3ba37bca38c32ea804d6e"><code>39ddf7c</code></a> release: v8.3.1 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23573">#23573</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/f68c0d5a28c96555431413e3e2cbe644337b087f"><code>f68c0d5</code></a> fix: handle <code>server.ws: false</code> in mergeConfig (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23511">#23511</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/6f831f9b58ebda77638b514042ad8d160edfb928"><code>6f831f9</code></a> fix(server): avoid reinitializing watcher when adding file after server close...</li> <li><a href="https://github.com/vitejs/vite/commit/04fc30a4b91870e65a436b3420620a2e02a94a41"><code>04fc30a</code></a> fix(sourcemap): skip URL source roots when injecting sources content (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23519">#23519</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/5f894339d27882fedc86bf6b1076fa6d92e404f3"><code>5f89433</code></a> fix(optimizer): resolve pending discovered dep processing on close before ini...</li> <li><a href="https://github.com/vitejs/vite/commit/63567c73ac132e6384fef384e6b9f7e8d5a37fff"><code>63567c7</code></a> chore(optimizer): add debug log when waiting for dep before init (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23566">#23566</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/e8990c4d6101dfaca2654ed8ab4d0574ee920248"><code>e8990c4</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23537">#23537</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/af7cdf6964f124f58d66037e808fe687654948e2"><code>af7cdf6</code></a> refactor: replace <code>find</code> with <code>some</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23554">#23554</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/39330f489a0ae08923557f0ce10a307d6662a3f5"><code>39330f4</code></a> fix(optimizer): don't skip imports whose binding starts with type (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23540">#23540</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/9abd99bfdd3117149d6faf87fc37bc9899b1c998"><code>9abd99b</code></a> refactor: remove duplicate configurations (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/23532">#23532</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.3.1/packages/vite">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-28 14:06:18 +00:00
dependabot[bot]	da74d8101b	chore(deps): Bump mathieudutour/github-tag-action from 6.2 to 7 (#2196 ) Bumps [mathieudutour/github-tag-action](https://github.com/mathieudutour/github-tag-action) from 6.2 to 7. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mathieudutour/github-tag-action/blob/master/CHANGELOG.md">mathieudutour/github-tag-action's changelog</a>.</em></p> <blockquote> <h1>v7.0.0</h1> <p>v7 upgrades the action to Node 24 and introduces breaking changes to version calculation and branch handling. Review the migration guide before upgrading from v6.</p> <ul> <li>Run on Node 24 and ship a self-contained <code>dist/</code> bundle with both supported commit presets, templates, dependencies, and license notices. Refresh the lockfile, remove the old Octokit dependency chain, and retain proxy support.</li> <li>Align analysis and changelogs on Conventional Commits, including <code>feat!</code>. Angular remains selectable.</li> <li>Match whole branch names; an empty prerelease list now means no prerelease branches. Never publish from PR events or recursively process tag events. Preview versions include a commit SHA suffix.</li> <li>Fetch all tags and all compare-commit pages. Explicitly restricted tag fetching fails when results might be incomplete. Read initial commit history instead of comparing against a fabricated HEAD baseline.</li> <li>Skip version creation when no eligible commits remain, unless custom or forced versioning was explicitly requested.</li> <li>Keep stable release baselines separate from unrelated prereleases; match prerelease identifiers exactly, honor the first prerelease default, increment existing RCs, and allow higher-level changes to advance the RC base.</li> <li>Add path/scope/ignore filters, opt-in squash-bullet parsing, tag-stream filtering, explicit bump/version inputs, local/moving/rolling tags, repository/ref/directory overrides, and release metadata outputs.</li> <li>Retry transient API reads and fall back to complete local Git history for compare failures. No history means no guessed release. Optional soft failure clears release outputs.</li> </ul> <h2>Migration</h2> <p>See <a href="https://github.com/mathieudutour/github-tag-action/blob/master/docs/migrating-to-v7.md">Migrating from v6 to v7</a> for changed defaults, workflow examples, prerelease behavior, and a dry-run validation procedure.</p> <p>New inputs are opt-in unless explicitly described above and require v7. See the <a href="https://github.com/mathieudutour/github-tag-action/blob/master/README.md">README</a> for the full input contract.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mathieudutour/github-tag-action/commit/af99e60ce8132224b8e6ebab5023449fe256ed46"><code>af99e60</code></a> fix CI on windows</li> <li><a href="https://github.com/mathieudutour/github-tag-action/commit/8e15535db64483b84d3598dbf36eca1662cdbfe7"><code>8e15535</code></a> version 7</li> <li><a href="https://github.com/mathieudutour/github-tag-action/commit/9d35d648e836d5db77936aa35a3a5c7bc16092c8"><code>9d35d64</code></a> Bump ws from 7.5.5 to 7.5.10 (<a href="https://redirect.github.com/mathieudutour/github-tag-action/issues/216">#216</a>)</li> <li><a href="https://github.com/mathieudutour/github-tag-action/commit/17d01dc92c1e62b097ea60d6c63b9f2b73c7b998"><code>17d01dc</code></a> Bump braces from 3.0.2 to 3.0.3 (<a href="https://redirect.github.com/mathieudutour/github-tag-action/issues/215">#215</a>)</li> <li>See full diff in <a href="https://github.com/mathieudutour/github-tag-action/compare/a22cf08638b34d5badda920f9daf6e72c477b07b...af99e60ce8132224b8e6ebab5023449fe256ed46">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mathieudutour/github-tag-action&package-manager=github_actions&previous-version=6.2&new-version=7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-28 13:57:20 +00:00
dependabot[bot]	2120e5a82f	chore(deps): Bump the codeql-action group with 3 updates (#2195 ) Bumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.38.2</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2"><code>2892aa5</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4168">#4168</a> from github/update-v4.38.2-a6ef2c96f</li> <li><a href="https://github.com/github/codeql-action/commit/8ad03a333eb88de8ad6833eda208d0fc51a9c571"><code>8ad03a3</code></a> Trigger workflows</li> <li><a href="https://github.com/github/codeql-action/commit/98af865db5041cee73c7185896319367f8c0adf2"><code>98af865</code></a> Update changelog for v4.38.2</li> <li><a href="https://github.com/github/codeql-action/commit/a6ef2c96fc0e37d0b44fb2bd0b32db4bcb89ae24"><code>a6ef2c9</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4156">#4156</a> from github/mario-campos/fix-validate-cmd</li> <li><a href="https://github.com/github/codeql-action/commit/1ef28a1b7603ca158fd774d1ab328cbd6a40b84b"><code>1ef28a1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4166">#4166</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/26cb08bab0037de74cc66ad9ec0dca31d6d9e8a7"><code>26cb08b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4163">#4163</a> from github/mbg/fix-getCommitOid-stubs</li> <li><a href="https://github.com/github/codeql-action/commit/f035ce3a985a1223a9f59fb719542598640160b2"><code>f035ce3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4165">#4165</a> from github/dependabot/npm_and_yarn/npm-minor-8eaed9...</li> <li><a href="https://github.com/github/codeql-action/commit/5e4e2550b48d7f3de205c9d752eb5176bf07f6d9"><code>5e4e255</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/b13f5f47d5398d0fb982942ced6fdfc4e3951804"><code>b13f5f4</code></a> Bump ruby/setup-ruby</li> <li><a href="https://github.com/github/codeql-action/commit/c87fe5756c0c0bcd5e0005d2169945cfee9a232f"><code>c87fe57</code></a> Rebuild</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/autobuild` from 4.38.1 to 4.38.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's releases</a>.</em></p> <blockquote> <h2>v4.38.2</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2"><code>2892aa5</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4168">#4168</a> from github/update-v4.38.2-a6ef2c96f</li> <li><a href="https://github.com/github/codeql-action/commit/8ad03a333eb88de8ad6833eda208d0fc51a9c571"><code>8ad03a3</code></a> Trigger workflows</li> <li><a href="https://github.com/github/codeql-action/commit/98af865db5041cee73c7185896319367f8c0adf2"><code>98af865</code></a> Update changelog for v4.38.2</li> <li><a href="https://github.com/github/codeql-action/commit/a6ef2c96fc0e37d0b44fb2bd0b32db4bcb89ae24"><code>a6ef2c9</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4156">#4156</a> from github/mario-campos/fix-validate-cmd</li> <li><a href="https://github.com/github/codeql-action/commit/1ef28a1b7603ca158fd774d1ab328cbd6a40b84b"><code>1ef28a1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4166">#4166</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/26cb08bab0037de74cc66ad9ec0dca31d6d9e8a7"><code>26cb08b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4163">#4163</a> from github/mbg/fix-getCommitOid-stubs</li> <li><a href="https://github.com/github/codeql-action/commit/f035ce3a985a1223a9f59fb719542598640160b2"><code>f035ce3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4165">#4165</a> from github/dependabot/npm_and_yarn/npm-minor-8eaed9...</li> <li><a href="https://github.com/github/codeql-action/commit/5e4e2550b48d7f3de205c9d752eb5176bf07f6d9"><code>5e4e255</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/b13f5f47d5398d0fb982942ced6fdfc4e3951804"><code>b13f5f4</code></a> Bump ruby/setup-ruby</li> <li><a href="https://github.com/github/codeql-action/commit/c87fe5756c0c0bcd5e0005d2169945cfee9a232f"><code>c87fe57</code></a> Rebuild</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.38.2</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.2 - 24 Sept 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.1">2.27.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4160">#4160</a></li> </ul> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2"><code>2892aa5</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4168">#4168</a> from github/update-v4.38.2-a6ef2c96f</li> <li><a href="https://github.com/github/codeql-action/commit/8ad03a333eb88de8ad6833eda208d0fc51a9c571"><code>8ad03a3</code></a> Trigger workflows</li> <li><a href="https://github.com/github/codeql-action/commit/98af865db5041cee73c7185896319367f8c0adf2"><code>98af865</code></a> Update changelog for v4.38.2</li> <li><a href="https://github.com/github/codeql-action/commit/a6ef2c96fc0e37d0b44fb2bd0b32db4bcb89ae24"><code>a6ef2c9</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4156">#4156</a> from github/mario-campos/fix-validate-cmd</li> <li><a href="https://github.com/github/codeql-action/commit/1ef28a1b7603ca158fd774d1ab328cbd6a40b84b"><code>1ef28a1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4166">#4166</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/26cb08bab0037de74cc66ad9ec0dca31d6d9e8a7"><code>26cb08b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4163">#4163</a> from github/mbg/fix-getCommitOid-stubs</li> <li><a href="https://github.com/github/codeql-action/commit/f035ce3a985a1223a9f59fb719542598640160b2"><code>f035ce3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4165">#4165</a> from github/dependabot/npm_and_yarn/npm-minor-8eaed9...</li> <li><a href="https://github.com/github/codeql-action/commit/5e4e2550b48d7f3de205c9d752eb5176bf07f6d9"><code>5e4e255</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/b13f5f47d5398d0fb982942ced6fdfc4e3951804"><code>b13f5f4</code></a> Bump ruby/setup-ruby</li> <li><a href="https://github.com/github/codeql-action/commit/c87fe5756c0c0bcd5e0005d2169945cfee9a232f"><code>c87fe57</code></a> Rebuild</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-28 13:56:38 +00:00
dependabot[bot]	7d7a1bec56	chore(deps): Bump react-resizable-panels from 4.11.0 to 4.13.3 in the react group (#2191 ) Bumps the react group with 1 update: [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels). Updates `react-resizable-panels` from 4.11.0 to 4.13.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/releases">react-resizable-panels's releases</a>.</em></p> <blockquote> <h2>4.13.3</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/755">755</a>: Bugfix: <code>Separator</code> behind a modal <code><dialog></code> can no longer be dragged</li> </ul> <h2>4.13.2</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/751">751</a>: <code>Separator</code> no longer retains focus after a drag</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/753">753</a>: Fix <code>Panel</code> order in environments like JSDom with invalid <code>offset</code> values</li> </ul> <h2>4.13.1</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/750">750</a>: Bug fixes: <ul> <li>Match layout values to panel IDs so reordered keys map to the correct constraints</li> <li>Preserve keyboard mappings for disabled separators; fixes edge case “Matching panels not found” error</li> <li>Respect default layout when an initially hidden group becomes visible</li> <li>Calculate available group size once per hit-testing pass instead of once per hit region</li> <li>Ensure onLayoutChanged still fires when pressing elsewhere on the page or resizing another group</li> </ul> </li> </ul> <h2>4.13.0</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/746">746</a>: Customizable resize preview mode</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/749">749</a>: Panels support configurable collapse threshold</li> </ul> <h2>4.12.4</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/743">743</a>: Don't capture pointer for a detached <code>Separator</code></li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/741">741</a>: <code>Separator</code> ARIA values use proper panel indices</li> </ul> <h2>4.12.3</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/730">730</a>: Guard <code>CSSStyleSheet</code> construction to avoid throwing in unsupported environments (<a href="https://github.com/leo-yang-qiong"><code>@leo-yang-qiong</code></a>)</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/736">736</a>: Bugfix: Derived Panel constraints equality check</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/732">732</a>: Bugfix: Prevent orphaned groups in "pointerup" edge case (<a href="https://github.com/waterWang"><code>@waterWang</code></a>)</li> </ul> <h2>4.12.1</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/723">723</a>: Bug fix for context menu event (right click) occurring while pointer-resize is active</li> </ul> <h2>4.12.0</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/716">716)</a>: Meta info available to <code>onLayoutChanged</code> callback signalling whether resize event was triggered by direct user input (keyboard or mouse)</li> <li><code>useDefaultLayout</code> hook supports <code>onlySaveAfterUserInteractions</code> option to only save layouts when directly triggered by user interactions.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md">react-resizable-panels's changelog</a>.</em></p> <blockquote> <h2>4.13.3</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/755">755</a>: Bugfix: <code>Separator</code> behind a modal <code><dialog></code> can no longer be dragged</li> </ul> <h2>4.13.2</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/751">751</a>: <code>Separator</code> no longer retains focus after a drag</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/753">753</a>: Fix <code>Panel</code> order in environments like JSDom with invalid <code>offset</code> values</li> </ul> <h2>4.13.1</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/750">750</a>: Bug fixes: <ul> <li>Match layout values to panel IDs so reordered keys map to the correct constraints</li> <li>Preserve keyboard mappings for disabled separators; fixes edge case “Matching panels not found” error</li> <li>Respect default layout when an initially hidden group becomes visible</li> <li>Calculate available group size once per hit-testing pass instead of once per hit region</li> <li>Ensure onLayoutChanged still fires when pressing elsewhere on the page or resizing another group</li> </ul> </li> </ul> <h2>4.13.0</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/746">746</a>: Customizable resize preview mode</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/749">749</a>: Panels support configurable collapse threshold</li> </ul> <h2>4.12.4</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/743">743</a>: Don't capture pointer for a detached <code>Separator</code></li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/741">741</a>: <code>Separator</code> ARIA values use proper panel indices</li> </ul> <h2>4.12.3</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/730">730</a>: Guard <code>CSSStyleSheet</code> construction to avoid throwing in unsupported environments (<a href="https://github.com/leo-yang-qiong"><code>@leo-yang-qiong</code></a>)</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/736">736</a>: Bugfix: Derived Panel constraints equality check</li> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/732">732</a>: Bugfix: Prevent orphaned groups in "pointerup" edge case (<a href="https://github.com/waterWang"><code>@waterWang</code></a>)</li> </ul> <h2>4.12.2</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/726">726</a>: Updated inline documentation to clarify size units.</li> </ul> <h2>4.12.1</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/723">723</a>: Bug fix for context menu event (right click) occurring while pointer-resize is active</li> </ul> <h2>4.12.0</h2> <ul> <li><a href="https://redirect.github.com/bvaughn/react-resizable-panels/pull/716">716)</a>: Meta info available to <code>onLayoutChanged</code> callback signalling whether resize event was triggered by direct user input (keyboard or mouse)</li> <li><code>useDefaultLayout</code> hook supports <code>onlySaveAfterUserInteractions</code> option to only save layouts when directly triggered by user interactions.</li> </ul> <h2>4.11.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/ffa22a1dae86779093bbf40179e4c22e038867cb"><code>ffa22a1</code></a> 4.13.2 -> 4.13.3</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/cd49125e81c2815b9b0c0fafe34d353fce0ccc9b"><code>cd49125</code></a> Bugfix: Separator behind a modal <dialog> can not be dragged (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/755">#755</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/9a2bb1fda82773585fbdfe540cb91e6d61e6d323"><code>9a2bb1f</code></a> 4.13.1 -> 4.13.2</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/3b6671e017a7b247e61c0134368043951d6fd928"><code>3b6671e</code></a> Fix panel (re)ordering bug for environments like JSDom with no positions/offs...</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/f6622c475daa20a1d5e77c1830fc92a123b3c4af"><code>f6622c4</code></a> Bugfix: Separator keeps invisible focus after a drag (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/752">#752</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/a2796d7acac1d8127d95f201b4a40017bc110faa"><code>a2796d7</code></a> 4.13.0 -> 4.13.1</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/dcc6525693adee5a101bab67978b083f6e185381"><code>dcc6525</code></a> Bug fixes (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/750">#750</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/562292382feccc4be4e7131b24c6dc04e3934ad3"><code>5622923</code></a> 4.12.4 -> 4.13.0</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/b10eba614a54dc4cc9e612320bc95e300679f810"><code>b10eba6</code></a> Panels support configurable collapse threshold (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/749">#749</a>)</li> <li><a href="https://github.com/bvaughn/react-resizable-panels/commit/5ce42e800c5250d9de21f218a9501bb5da45077d"><code>5ce42e8</code></a> Resize preview mode (<a href="https://redirect.github.com/bvaughn/react-resizable-panels/issues/746">#746</a>)</li> <li>Additional commits viewable in <a href="https://github.com/bvaughn/react-resizable-panels/compare/4.11.0...4.13.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-resizable-panels&package-manager=npm_and_yarn&previous-version=4.11.0&new-version=4.13.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-28 13:55:11 +00:00
dependabot[bot]	bfe045b92c	chore(deps): Bump maplibre-gl from 6.10.0 to 6.11.2 (#2192 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.10.0 to 6.11.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.11.2</h2> <h3>✨ Features and improvements</h3> <ul> <li>Improve rendering performance by uploading each tile's projection data once per frame instead of before every draw call (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8545">#8545</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Support multiple glyph variants in requests, caches, and atlases (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8488">#8488</a>) (by <a href="https://github.com/NEKOYASAN"><code>@NEKOYASAN</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix <code>Map#once(type, layerId, listener)</code> unsubscribing on the first event that misses the layer instead of the first event that hits it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8499">#8499</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Remove hillshade gradient toward the poles (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8551">#8551</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix camera settings being undone during camera movement with terrain or <code>transformCameraUpdate</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8550">#8550</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix zooming and panning with the pointer above the horizon moving the map in the opposite direction (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8544">#8544</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix the camera jumping when a drag over terrain ends at a pitch above 84° (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8541">#8541</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Ease the center elevation over terrain during <code>easeTo</code> and <code>flyTo</code> instead of holding it and jumping when the animation ends (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8543">#8543</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>fitBounds</code> and <code>cameraForBounds</code> throwing on the globe projection when the padding exceeds the viewport, instead of warning and returning <code>undefined</code> as on mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8538">#8538</a>) (by <a href="https://github.com/drakeo338"><code>@drakeo338</code></a>)</li> <li>Keep raster tiles sharp at a fractional <code>devicePixelRatio</code>, where the canvas covered a different number of device pixels than its backing store held and the compositor rescaled it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/1590">#1590</a>) (by <a href="https://github.com/zdila"><code>@zdila</code></a>)</li> </ul> <h2>v6.11.1</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix missing promoteId when merging queued updateData diffs in geojson source (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8500">#8500</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Sanitize attribution with an allow list of tags and attributes rather than a list of known-dangerous ones (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8532">#8532</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix the camera jumping or bobbing around gestures over terrain, and ignoring terrain that loads after <code>easeTo</code>/<code>flyTo</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8471">#8471</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Stop sending a vector tile to the worker when it was dropped while its request was being transformed or while the worker was still starting up, which left the parsed tile in the worker for the lifetime of the map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8516">#8516</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> </ul> <h2>v6.11.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Fire a <code>contextmenu</code> map event on long press for touch devices (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/373">#373</a>) (by <a href="https://github.com/kirthi-b"><code>@kirthi-b</code></a>)</li> <li>Transition paint, light and sky properties that read <code>global-state</code> from the value they had when the state changes, where they snapped to the new value while holding <code>idle</code> for the transition duration (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8395">#8395</a>) (by <a href="https://github.com/avosa"><code>@avosa</code></a>)</li> <li>Speed up cross-tile symbol matching for sources with <code>promoteId</code> by keying symbols on their feature id as well as their label (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8470">#8470</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7665">#7665</a>) (by <a href="https://github.com/bradymadden97"><code>@bradymadden97</code></a> and <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Add <code>Map#calculateAnchoredCameraOptions</code> to calculate camera options that place a geographic anchor at a screen position without moving the map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8288">#8288</a>) (by <a href="https://github.com/xavierjs"><code>@xavierjs</code></a>)</li> <li>Skip the loaded-tile scan for constant <code>symbol-height-offset</code> layers when computing tile coverage (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8424">#8424</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Type and document that an <code>addProtocol</code> handler may return an <code>ImageBitmap</code> or <code>HTMLImageElement</code> for an image resource, so decoded pixels are not encoded and decoded again (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8515">#8515</a>) (by <a href="https://github.com/MannXo"><code>@MannXo</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fade the globe atmosphere in with the camera's altitude, so the sky keeps the horizon until the atmosphere takes over from space (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8464">#8464</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Report worker script failures through the map <code>error</code> event (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8018">#8018</a>) (by <a href="https://github.com/xavierjs"><code>@xavierjs</code></a>)</li> <li>Fix slow panning and zooming in Firefox on macOS since 6.8.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8468">#8468</a>) (by <a href="https://github.com/timsluis"><code>@timsluis</code></a> and <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Keep source-specific tile LOD settings from changing internal terrain render-to-texture tile selection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8048">#8048</a>) (by <a href="https://github.com/DoFabien"><code>@DoFabien</code></a>)</li> <li>Fix <code>map.setSky()</code> silently keeping the old sky and firing no <code>error</code> event when the value included a <code>-transition</code> key (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8375">#8375</a>) (by <a href="https://github.com/Yasser-Ameur"><code>@Yasser-Ameur</code></a>)</li> <li>Fix markers and popups misplaced after a projection change or by terrain that loads after the map settled. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8433">#8433</a>) (by <a href="https://github.com/patte"><code>@patte</code></a>)</li> <li>Insert sanitized attribution HTML as DOM nodes instead of re-parsing a serialized string (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8528">#8528</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.11.2</h2> <h3>✨ Features and improvements</h3> <ul> <li>Improve rendering performance by uploading each tile's projection data once per frame instead of before every draw call (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8545">#8545</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Support multiple glyph variants in requests, caches, and atlases (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8488">#8488</a>) (by <a href="https://github.com/NEKOYASAN"><code>@NEKOYASAN</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix <code>Map#once(type, layerId, listener)</code> unsubscribing on the first event that misses the layer instead of the first event that hits it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8499">#8499</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Remove hillshade gradient toward the poles (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8551">#8551</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix camera settings being undone during camera movement with terrain or <code>transformCameraUpdate</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8550">#8550</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix zooming and panning with the pointer above the horizon moving the map in the opposite direction (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8544">#8544</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix the camera jumping when a drag over terrain ends at a pitch above 84° (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8541">#8541</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Ease the center elevation over terrain during <code>easeTo</code> and <code>flyTo</code> instead of holding it and jumping when the animation ends (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8543">#8543</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Fix <code>fitBounds</code> and <code>cameraForBounds</code> throwing on the globe projection when the padding exceeds the viewport, instead of warning and returning <code>undefined</code> as on mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8538">#8538</a>) (by <a href="https://github.com/drakeo338"><code>@drakeo338</code></a>)</li> <li>Keep raster tiles sharp at a fractional <code>devicePixelRatio</code>, where the canvas covered a different number of device pixels than its backing store held and the compositor rescaled it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/1590">#1590</a>) (by <a href="https://github.com/zdila"><code>@zdila</code></a>)</li> </ul> <h2>6.11.1</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix missing promoteId when merging queued updateData diffs in geojson source (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8500">#8500</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Sanitize attribution with an allow list of tags and attributes rather than a list of known-dangerous ones (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8532">#8532</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix the camera jumping or bobbing around gestures over terrain, and ignoring terrain that loads after <code>easeTo</code>/<code>flyTo</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8471">#8471</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Stop sending a vector tile to the worker when it was dropped while its request was being transformed or while the worker was still starting up, which left the parsed tile in the worker for the lifetime of the map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8516">#8516</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> </ul> <h2>6.11.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Fire a <code>contextmenu</code> map event on long press for touch devices (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/373">#373</a>) (by <a href="https://github.com/kirthi-b"><code>@kirthi-b</code></a>)</li> <li>Transition paint, light and sky properties that read <code>global-state</code> from the value they had when the state changes, where they snapped to the new value while holding <code>idle</code> for the transition duration (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8395">#8395</a>) (by <a href="https://github.com/avosa"><code>@avosa</code></a>)</li> <li>Speed up cross-tile symbol matching for sources with <code>promoteId</code> by keying symbols on their feature id as well as their label (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8470">#8470</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7665">#7665</a>) (by <a href="https://github.com/bradymadden97"><code>@bradymadden97</code></a> and <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Add <code>Map#calculateAnchoredCameraOptions</code> to calculate camera options that place a geographic anchor at a screen position without moving the map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8288">#8288</a>) (by <a href="https://github.com/xavierjs"><code>@xavierjs</code></a>)</li> <li>Skip the loaded-tile scan for constant <code>symbol-height-offset</code> layers when computing tile coverage (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8424">#8424</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Type and document that an <code>addProtocol</code> handler may return an <code>ImageBitmap</code> or <code>HTMLImageElement</code> for an image resource, so decoded pixels are not encoded and decoded again (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8515">#8515</a>) (by <a href="https://github.com/MannXo"><code>@MannXo</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fade the globe atmosphere in with the camera's altitude, so the sky keeps the horizon until the atmosphere takes over from space (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8464">#8464</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Report worker script failures through the map <code>error</code> event (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8018">#8018</a>) (by <a href="https://github.com/xavierjs"><code>@xavierjs</code></a>)</li> <li>Fix slow panning and zooming in Firefox on macOS since 6.8.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8468">#8468</a>) (by <a href="https://github.com/timsluis"><code>@timsluis</code></a> and <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Keep source-specific tile LOD settings from changing internal terrain render-to-texture tile selection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8048">#8048</a>) (by <a href="https://github.com/DoFabien"><code>@DoFabien</code></a>)</li> <li>Fix <code>map.setSky()</code> silently keeping the old sky and firing no <code>error</code> event when the value included a <code>-transition</code> key (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8375">#8375</a>) (by <a href="https://github.com/Yasser-Ameur"><code>@Yasser-Ameur</code></a>)</li> <li>Fix markers and popups misplaced after a projection change or by terrain that loads after the map settled. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8433">#8433</a>) (by <a href="https://github.com/patte"><code>@patte</code></a>)</li> <li>Insert sanitized attribution HTML as DOM nodes instead of re-parsing a serialized string (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8528">#8528</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/acb7b722f6a752ac1a2ba98cf83006c83dc4fafa"><code>acb7b72</code></a> Bump js version to 6.11.2 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8555">#8555</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/d28f8443e207be1b54669798b809d731070932b9"><code>d28f844</code></a> fix: Map#once with layerId unsubscribes only after a real hit (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8499">#8499</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/99d0160b018e31dbe5ceba71b79806b36fc0d2ef"><code>99d0160</code></a> Support multiple glyph variants (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8488">#8488</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/98268d3829222064b81b8bfa112baf446ac32cf4"><code>98268d3</code></a> Fix globe cameraForBoxAndBearing throwing when padding exceeds the viewport (...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/f560a83ac3491086024967fbf8cc0503eae3a76d"><code>f560a83</code></a> Size the canvas to whole device pixels (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8513">#8513</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/7a897d0b0db6a2bb4b9eae54e0b2b54896af63f1"><code>7a897d0</code></a> Remove hillshade gradient toward the poles (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8551">#8551</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/0dff33ab118c6d8ea41f7d9d30e0df9d4acf9ea3"><code>0dff33a</code></a> Fix camera settings being undone during camera movement (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8550">#8550</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/c2031bfb2bf54ee866fcb68bad5b149646a2f4b1"><code>c2031bf</code></a> GM2.8 Upload projection data once per tile instead of once per draw (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8545">#8545</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/728a44c08bdd55ca06f601edd1dbf334159fc99e"><code>728a44c</code></a> Fix zoom and drag above the horizon moving the map the wrong way (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8544">#8544</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/3dfdce0b796e27715a51d9c314448be9f6fd9efb"><code>3dfdce0</code></a> refactor: one method builds the mercator animation's end transform (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8546">#8546</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.10.0...v6.11.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.10.0&new-version=6.11.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-28 13:53:10 +00:00
dependabot[bot]	e02c61ba82	chore(deps-dev): Bump sass from 1.104.1 to 1.105.0 (#2194 ) Bumps [sass](https://github.com/sass/dart-sass) from 1.104.1 to 1.105.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/releases">sass's releases</a>.</em></p> <blockquote> <h2>Dart Sass 1.105.0</h2> <p>To install Sass 1.105.0, download one of the packages below and <a href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or see <a href="https://sass-lang.com/install">the Sass website</a> for full installation instructions.</p> <h1>Changes</h1> <ul> <li> <p>Add support for first-class modules. These can be accessed using the new <code>meta.load()</code> and <code>meta.get-module()</code> functions, and may be passed as the <code>$module</code> argument to numerous eisting <code>sass:meta</code> functions.</p> </li> <li> <p>Add the <code>meta.css()</code> mixin, which includes CSS from a first-class module.</p> </li> </ul> <h3>JS API</h3> <ul> <li>Add a <code>SassModule</code> class and a corresponding <code>Value.assertModule()</code> method.</li> </ul> <h3>Dart API</h3> <ul> <li>Add a <code>SassModule</code> class and a corresponding <code>Value.assertModule()</code> method.</li> </ul> <p>See the <a href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11050">full changelog</a> for changes in earlier releases.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's changelog</a>.</em></p> <blockquote> <h2>1.105.0</h2> <ul> <li> <p>Add support for first-class modules. These can be accessed using the new <code>meta.load()</code> and <code>meta.get-module()</code> functions, and may be passed as the <code>$module</code> argument to numerous eisting <code>sass:meta</code> functions.</p> </li> <li> <p>Add the <code>meta.css()</code> mixin, which includes CSS from a first-class module.</p> </li> </ul> <h3>JS API</h3> <ul> <li>Add a <code>SassModule</code> class and a corresponding <code>Value.assertModule()</code> method.</li> </ul> <h3>Dart API</h3> <ul> <li>Add a <code>SassModule</code> class and a corresponding <code>Value.assertModule()</code> method.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sass/dart-sass/commit/4bf2b92404be16adc0fde90bd18abf462ccfcb44"><code>4bf2b92</code></a> Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (<a href="https://redirect.github.com/sass/dart-sass/issues/2865">#2865</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/850d57ef92a3212f144c3589cd99aec5f110a5d1"><code>850d57e</code></a> [meta.load] Add support for <code>meta.load()</code> and related features (<a href="https://redirect.github.com/sass/dart-sass/issues/2861">#2861</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/6180be0e2fce9b99142302822221ad74ba787bc0"><code>6180be0</code></a> Bump postcss from 8.5.26 to 8.5.28 in /pkg/sass-parser (<a href="https://redirect.github.com/sass/dart-sass/issues/2863">#2863</a>)</li> <li>See full diff in <a href="https://github.com/sass/dart-sass/compare/1.104.1...1.105.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sass&package-manager=npm_and_yarn&previous-version=1.104.1&new-version=1.105.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-28 13:53:00 +00:00
dependabot[bot]	170e3dad1d	chore(deps-dev): Bump the vitest group with 2 updates (#2190 ) Bumps the vitest group with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@vitest/coverage-v8` from 5.0.1 to 5.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@vitest/coverage-v8's releases</a>.</em></p> <blockquote> <h2>v5.0.2</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Bind <code>process</code> in case global is overwritten - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11343">vitest-dev/vitest#11343</a> <a href="https://github.com/vitest-dev/vitest/commit/0b79231ad"><!-- raw HTML omitted -->(0b792)<!-- raw HTML omitted --></a></li> <li><strong>detect-async-leaks</strong>: <ul> <li>Ignore <code>process.stdio</code> handles - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11333">vitest-dev/vitest#11333</a> <a href="https://github.com/vitest-dev/vitest/commit/0fd6b9790"><!-- raw HTML omitted -->(0fd6b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Fix <code>toMatchObject</code> with asymmetric matchers - by <a href="https://github.com/ShreeBohara"><code>@ShreeBohara</code></a>, <strong>Claude Opus 5</strong>, <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-5)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11100">vitest-dev/vitest#11100</a> <a href="https://github.com/vitest-dev/vitest/commit/42523289e"><!-- raw HTML omitted -->(42523)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>jsdom</strong>: <ul> <li>Fix <code>Request</code> with <code>Blob</code> body on jsdom 28+ - by <a href="https://github.com/harshit-d3v"><code>@harshit-d3v</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11295">vitest-dev/vitest#11295</a> <a href="https://github.com/vitest-dev/vitest/commit/d1c3ecc93"><!-- raw HTML omitted -->(d1c3e)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporter</strong>: <ul> <li><code>agent</code> to respect <code>--silent</code> - by <a href="https://github.com/Raj4478"><code>@Raj4478</code></a> and <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11271">vitest-dev/vitest#11271</a> <a href="https://github.com/vitest-dev/vitest/commit/5b95efb6d"><!-- raw HTML omitted -->(5b95e)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporters</strong>: <ul> <li>Handle concurrent <code>createReport</code> calls - by <a href="https://github.com/7rulnik"><code>@7rulnik</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11278">vitest-dev/vitest#11278</a> <a href="https://github.com/vitest-dev/vitest/commit/e8e556ff7"><!-- raw HTML omitted -->(e8e55)<!-- raw HTML omitted --></a></li> <li><code>hanging-process</code> to use ESM entrypoint - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11316">vitest-dev/vitest#11316</a> <a href="https://github.com/vitest-dev/vitest/commit/4e91e5668"><!-- raw HTML omitted -->(4e91e)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>spy</strong>: <ul> <li>Fix stack overflow when spying <code>Set.prototype.add</code> - by <a href="https://github.com/fengmk2"><code>@fengmk2</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11299">vitest-dev/vitest#11299</a> <a href="https://github.com/vitest-dev/vitest/commit/a0a939653"><!-- raw HTML omitted -->(a0a93)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>ui</strong>: <ul> <li>Persist authentication cookie beyond current browser session - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (gpt-5.6-sol)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11066">vitest-dev/vitest#11066</a> <a href="https://github.com/vitest-dev/vitest/commit/f88195e16"><!-- raw HTML omitted -->(f8819)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.1...v5.0.2">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/428e2e5043c64635b6b157358bde2fdeaa7b6b3a"><code>428e2e5</code></a> chore: release v5.0.2 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11357">#11357</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8">compare view</a></li> </ul> </details> <br /> Updates `vitest` from 5.0.1 to 5.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>.</em></p> <blockquote> <h2>v5.0.2</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Bind <code>process</code> in case global is overwritten - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11343">vitest-dev/vitest#11343</a> <a href="https://github.com/vitest-dev/vitest/commit/0b79231ad"><!-- raw HTML omitted -->(0b792)<!-- raw HTML omitted --></a></li> <li><strong>detect-async-leaks</strong>: <ul> <li>Ignore <code>process.stdio</code> handles - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11333">vitest-dev/vitest#11333</a> <a href="https://github.com/vitest-dev/vitest/commit/0fd6b9790"><!-- raw HTML omitted -->(0fd6b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Fix <code>toMatchObject</code> with asymmetric matchers - by <a href="https://github.com/ShreeBohara"><code>@ShreeBohara</code></a>, <strong>Claude Opus 5</strong>, <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex (GPT-5)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11100">vitest-dev/vitest#11100</a> <a href="https://github.com/vitest-dev/vitest/commit/42523289e"><!-- raw HTML omitted -->(42523)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>jsdom</strong>: <ul> <li>Fix <code>Request</code> with <code>Blob</code> body on jsdom 28+ - by <a href="https://github.com/harshit-d3v"><code>@harshit-d3v</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11295">vitest-dev/vitest#11295</a> <a href="https://github.com/vitest-dev/vitest/commit/d1c3ecc93"><!-- raw HTML omitted -->(d1c3e)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporter</strong>: <ul> <li><code>agent</code> to respect <code>--silent</code> - by <a href="https://github.com/Raj4478"><code>@Raj4478</code></a> and <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11271">vitest-dev/vitest#11271</a> <a href="https://github.com/vitest-dev/vitest/commit/5b95efb6d"><!-- raw HTML omitted -->(5b95e)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporters</strong>: <ul> <li>Handle concurrent <code>createReport</code> calls - by <a href="https://github.com/7rulnik"><code>@7rulnik</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11278">vitest-dev/vitest#11278</a> <a href="https://github.com/vitest-dev/vitest/commit/e8e556ff7"><!-- raw HTML omitted -->(e8e55)<!-- raw HTML omitted --></a></li> <li><code>hanging-process</code> to use ESM entrypoint - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11316">vitest-dev/vitest#11316</a> <a href="https://github.com/vitest-dev/vitest/commit/4e91e5668"><!-- raw HTML omitted -->(4e91e)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>spy</strong>: <ul> <li>Fix stack overflow when spying <code>Set.prototype.add</code> - by <a href="https://github.com/fengmk2"><code>@fengmk2</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11299">vitest-dev/vitest#11299</a> <a href="https://github.com/vitest-dev/vitest/commit/a0a939653"><!-- raw HTML omitted -->(a0a93)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>ui</strong>: <ul> <li>Persist authentication cookie beyond current browser session - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (gpt-5.6-sol)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11066">vitest-dev/vitest#11066</a> <a href="https://github.com/vitest-dev/vitest/commit/f88195e16"><!-- raw HTML omitted -->(f8819)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.1...v5.0.2">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/428e2e5043c64635b6b157358bde2fdeaa7b6b3a"><code>428e2e5</code></a> chore: release v5.0.2 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11357">#11357</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/0b79231ad7897f03de17940ef16684b63aa217fe"><code>0b79231</code></a> fix: bind <code>process</code> in case global is overwritten (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11343">#11343</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/597df569aba3e8b24c9ad231aacd3cf641ac3bdf"><code>597df56</code></a> docs: correct stale config defaults (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11354">#11354</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/ea1c44fb581978421f9f0901ce8c635970ea72fb"><code>ea1c44f</code></a> docs: <code>sequence.setupFiles</code> default is <code>'list'</code> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11351">#11351</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/0fd6b97902bc828d489385e0a28b82515f57b7cf"><code>0fd6b97</code></a> fix(detect-async-leaks): ignore <code>process.stdio</code> handles (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11333">#11333</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/4e91e56687de43427fbb664d86a63438ca73b681"><code>4e91e56</code></a> fix(reporters): <code>hanging-process</code> to use ESM entrypoint (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11316">#11316</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/1a57929a49fb6fb2db02b47e56c4677ca5ae1704"><code>1a57929</code></a> docs(browser): fix locators.exact default (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11338">#11338</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/5b95efb6dfe378dc6fc8380f5b1e96832f019a5d"><code>5b95efb</code></a> fix(reporter): <code>agent</code> to respect <code>--silent</code> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11271">#11271</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/f58a209779ffd3007006481d0c9da0099d5226e6"><code>f58a209</code></a> docs: correct benchmark.exclude and watch defaults (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11268">#11268</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/d1c3ecc932dcb4cd50420c54aa1f7fa3051deac7"><code>d1c3ecc</code></a> fix(jsdom): fix <code>Request</code> with <code>Blob</code> body on jsdom 28+ (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11295">#11295</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-28 13:52:07 +00:00
dependabot[bot]	e4629339e8	chore(deps): Bump @codemirror/view from 6.43.12 to 6.43.13 (#2187 ) Bumps [@codemirror/view](https://github.com/codemirror/view) from 6.43.12 to 6.43.13. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/codemirror/view/commits">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-25 14:02:09 +00:00
dependabot[bot]	99c8392eac	chore(deps-dev): Bump typescript-eslint from 8.70.0 to 8.70.1 (#2186 ) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.70.0 to 8.70.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.70.1</h2> <h2>8.70.1 (2026-09-21)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>ast-spec:</strong> narrow import attribute keys to identifiers and strings (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12879">#12879</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] avoid false positives on tuples with a rest element (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12768">#12768</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12637">#12637</a>)</li> <li><strong>eslint-plugin:</strong> [no-explicit-any] use unknown[] for bare any rest parameters (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12818">#12818</a>)</li> <li><strong>eslint-plugin:</strong> [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12854">#12854</a>)</li> <li><strong>eslint-plugin:</strong> [no-misused-spread] omit WeakMap spread suggestions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12850">#12850</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12869">#12869</a>)</li> <li><strong>eslint-plugin:</strong> [no-meaningless-void-operator] allow void on assignment expressions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12873">#12873</a>)</li> <li><strong>eslint-plugin:</strong> [await-thenable] prevent autofix from breaking code when removing <code>await</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12716">#12716</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-parameter-property-assignment] account for parameter reassignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12880">#12880</a>)</li> <li><strong>eslint-plugin:</strong> [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12845">#12845</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12747">#12747</a>)</li> <li><strong>eslint-plugin:</strong> [no-useless-default-assignment] convert the fixer to a suggestion fixer (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12826">#12826</a>)</li> <li><strong>eslint-plugin:</strong> [no-misused-promises] handle multiple Promise constituents (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12904">#12904</a>)</li> <li><strong>rule-tester:</strong> test the final autofix output instead of the first pass (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12867">#12867</a>)</li> <li><strong>scope-manager:</strong> merge implicit global definitions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12809">#12809</a>)</li> <li><strong>type-utils:</strong> match package specifiers on whole path components (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12838">#12838</a>)</li> <li><strong>typescript-estree:</strong> resolve symlinked paths when matching files to projects (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12725">#12725</a>)</li> <li><strong>typescript-estree:</strong> add missing <code><</code> token opening type arguments (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12821">#12821</a>)</li> <li><strong>typescript-estree:</strong> require string literal import attribute values (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12894">#12894</a>)</li> <li><strong>website:</strong> prevent playground from breaking down after opening link with the .js file type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12777">#12777</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Amin <a href="https://github.com/amiin-dev"><code>@amiin-dev</code></a></li> <li>Brad Zacher <a href="https://github.com/bradzacher"><code>@bradzacher</code></a></li> <li>Cameron</li> <li>Diptajoy Mistry <a href="https://github.com/diptomistry"><code>@diptomistry</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Grit <a href="https://github.com/Grit03"><code>@Grit03</code></a></li> <li>Hugo <a href="https://github.com/hugop95"><code>@hugop95</code></a></li> <li>Josh Goldberg ✨</li> <li>Michael Naumov <a href="https://github.com/mnaoumov"><code>@mnaoumov</code></a></li> <li>Mikhail Baev <a href="https://github.com/baevm"><code>@baevm</code></a></li> <li>Om Rawat</li> <li>overlookmotel</li> <li>Sanath <a href="https://github.com/sansynx"><code>@sansynx</code></a></li> <li>Shinji</li> <li>stoicism <a href="https://github.com/stoicism02"><code>@stoicism02</code></a></li> <li>Vinccool96</li> <li>Younsang Na <a href="https://github.com/nayounsang"><code>@nayounsang</code></a></li> <li>김채영 <a href="https://github.com/cchaeyoung"><code>@cchaeyoung</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.70.1">GitHub Releases</a> for more information.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.70.1 (2026-09-21)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.70.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/23d38ceeb8fb1237f55cb62fc2b54419e1fa1ed7"><code>23d38ce</code></a> chore(release): publish 8.70.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/eb42d9b7e7ab0eca543bc16b726688624c532fc6"><code>eb42d9b</code></a> chore: cleanup and fix Nx dependencies and missing tasks (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12897">#12897</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8c8053103f4ab8df3105826181c43fa257289a73"><code>8c80531</code></a> chore: fix typos in comments and docs (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12846">#12846</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/b6b86a15dd42aaa0e37054683cb5606c8fd203c2"><code>b6b86a1</code></a> chore: migrate to nx 23.2.0 (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12843">#12843</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.70.0&new-version=8.70.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-25 13:54:11 +00:00
dependabot[bot]	4b9f8ec60a	chore(deps): Bump @codemirror/state from 6.7.5 to 6.7.6 (#2185 ) Bumps [@codemirror/state](https://github.com/codemirror/state) from 6.7.5 to 6.7.6. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/codemirror/state/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/state&package-manager=npm_and_yarn&previous-version=6.7.5&new-version=6.7.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-25 13:52:19 +00:00
dependabot[bot]	1beb89a841	chore(deps): Bump react-i18next from 17.0.14 to 17.0.15 in the react group (#2184 ) Bumps the react group with 1 update: [react-i18next](https://github.com/i18next/react-i18next). Updates `react-i18next` from 17.0.14 to 17.0.15 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.0.15</h2> <ul> <li>fix(Trans): empty paired component tags now preserve a component's single valid React-element child, whether supplied through a named component map (<code><wrap></wrap></code>), a component array (<code><0></0></code>), or indexed JSX children (<code><1></1></code>). This matches the existing behavior for two or more children and self-closing tags. React represents one JSX child as an element and multiple children as an array; the previous array-only check silently rendered the one-child case empty. Compatibility note: when that sole element contains an interpolation object, the restored raw children can expose an existing React rendering limitation as an error instead of silently rendering empty; the same shape already errors with two children. Fixes <a href="https://redirect.github.com/i18next/react-i18next/issues/1932">#1932</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/7d38e0919507f0d339ac29b9fbd5f718eaadc829"><code>7d38e09</code></a> 17.0.15</li> <li><a href="https://github.com/i18next/react-i18next/commit/875b327d3515c781cd083dd77d3d8838dc1efc06"><code>875b327</code></a> fix(Trans): preserve single-element children in empty slots</li> <li>See full diff in <a href="https://github.com/i18next/react-i18next/compare/v17.0.14...v17.0.15">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.14&new-version=17.0.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-25 13:49:41 +00:00
dependabot[bot]	78f77dbd12	chore(deps-dev): Bump eslint from 10.10.0 to 10.11.0 (#2183 ) Bumps [eslint](https://github.com/eslint/eslint) from 10.10.0 to 10.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.11.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/d136fa4b0d2dd4a9e738ca1c012cc674d1441127"><code>d136fa4</code></a> feat: object-shorthand handle quoted properties for <code>ignoreConstructors</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21271">#21271</a>) (Pavel)</li> <li><a href="https://github.com/eslint/eslint/commit/397b3b8134b8ce1a61cbf414d4c29c945ba25690"><code>397b3b8</code></a> feat: report unsafe labeled <code>continue</code> in <code>no-unsafe-finally</code> rule (<a href="https://redirect.github.com/eslint/eslint/issues/21316">#21316</a>) (electrohyun)</li> <li><a href="https://github.com/eslint/eslint/commit/d3dd47f42e4cb5f9da27e3a2e741aa21e02ea1a4"><code>d3dd47f</code></a> feat: only exempt <code>new-cap</code> built-ins that reference the global (<a href="https://redirect.github.com/eslint/eslint/issues/21290">#21290</a>) (sethamus)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/22b09f54f67a9512d4cea39ddbab9b6973d5c476"><code>22b09f5</code></a> fix: ignore <code>__proto__</code> properties in <code>prefer-object-spread</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21311">#21311</a>) (xbinaryx)</li> <li><a href="https://github.com/eslint/eslint/commit/b684bb1cd7e6be03ad1b7a951baead936d9c2166"><code>b684bb1</code></a> fix: make TimePass.parse optional in types and docs (<a href="https://redirect.github.com/eslint/eslint/issues/21313">#21313</a>) (ntnyq)</li> <li><a href="https://github.com/eslint/eslint/commit/26d11bce3e0e21f223613d4bb4be3423839b229e"><code>26d11bc</code></a> fix: don't report <code>__proto__</code> properties in <code>object-shorthand</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21310">#21310</a>) (xbinaryx)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/9ecfdc5319f83580cf3b81beab7e936015fef2fa"><code>9ecfdc5</code></a> docs: note that --cache can serve stale results for cross-file rules (<a href="https://redirect.github.com/eslint/eslint/issues/21312">#21312</a>) (bytedoe)</li> <li><a href="https://github.com/eslint/eslint/commit/6c789ff39bc5420e94e8dafeb328bf2b7e3d35ab"><code>6c789ff</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/5997825635dc9c4e81434894607ef2e3887e0ea3"><code>5997825</code></a> docs: clarify preserve-caught-error known limitation (<a href="https://redirect.github.com/eslint/eslint/issues/21294">#21294</a>) (Akinyemi Toluwalase)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/520dd77a35922fb537e2dbfb3c839d047acbdd68"><code>520dd77</code></a> perf: Implement fast paths in critical areas (<a href="https://redirect.github.com/eslint/eslint/issues/21210">#21210</a>) (Nicholas C. Zakas)</li> <li><a href="https://github.com/eslint/eslint/commit/92086c87e042413a3d0363d8fc3fbb11db98d06a"><code>92086c8</code></a> test: update <code>EMFILE</code> error generation for Node.js 26.9.0 compatibility (<a href="https://redirect.github.com/eslint/eslint/issues/21330">#21330</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/9ac7eb60525ec768c2fdc6699e5a292aa913ce9e"><code>9ac7eb6</code></a> chore: update github/codeql-action action to v4.38.0 (<a href="https://redirect.github.com/eslint/eslint/issues/21331">#21331</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/24310e3a0e22b3c086ca402f88448676f2e1cfcd"><code>24310e3</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21324">#21324</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/45ad79e54a39b54b4ce8eb47e612bd2f72a7a651"><code>45ad79e</code></a> ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (<a href="https://redirect.github.com/eslint/eslint/issues/21318">#21318</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/ac74e37322ebf122ada676f153dc55c81f3caab0"><code>ac74e37</code></a> chore: Add AGENTS.md with AI disclosure requirements (<a href="https://redirect.github.com/eslint/eslint/issues/21221">#21221</a>) (Nicholas C. Zakas)</li> <li><a href="https://github.com/eslint/eslint/commit/c8326608e710e670beaf982501aed80ea104919a"><code>c832660</code></a> chore: Upgrade Stylelint to the latest version in docs (<a href="https://redirect.github.com/eslint/eslint/issues/21245">#21245</a>) (Jung Hyeon Jun)</li> <li><a href="https://github.com/eslint/eslint/commit/f9f88fcccd965fdc162b89c4615dd4018e3cabdf"><code>f9f88fc</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21308">#21308</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/fc81076a5b8145360654d81cbc130cf7d25dca77"><code>fc81076</code></a> ci: add more types integration tests (<a href="https://redirect.github.com/eslint/eslint/issues/20395">#20395</a>) (Nitin Kumar)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/3c0b7c6e1fe2dec778b97a996018126f22d437ae"><code>3c0b7c6</code></a> 10.11.0</li> <li><a href="https://github.com/eslint/eslint/commit/321f0a70dd908ed461b11142e17fbdc0c0f1f198"><code>321f0a7</code></a> Build: changelog update for 10.11.0</li> <li><a href="https://github.com/eslint/eslint/commit/520dd77a35922fb537e2dbfb3c839d047acbdd68"><code>520dd77</code></a> perf: Implement fast paths in critical areas (<a href="https://redirect.github.com/eslint/eslint/issues/21210">#21210</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/9ecfdc5319f83580cf3b81beab7e936015fef2fa"><code>9ecfdc5</code></a> docs: note that --cache can serve stale results for cross-file rules (<a href="https://redirect.github.com/eslint/eslint/issues/21312">#21312</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/92086c87e042413a3d0363d8fc3fbb11db98d06a"><code>92086c8</code></a> test: update <code>EMFILE</code> error generation for Node.js 26.9.0 compatibility (<a href="https://redirect.github.com/eslint/eslint/issues/21330">#21330</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/9ac7eb60525ec768c2fdc6699e5a292aa913ce9e"><code>9ac7eb6</code></a> chore: update github/codeql-action action to v4.38.0 (<a href="https://redirect.github.com/eslint/eslint/issues/21331">#21331</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/22b09f54f67a9512d4cea39ddbab9b6973d5c476"><code>22b09f5</code></a> fix: ignore <code>__proto__</code> properties in <code>prefer-object-spread</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21311">#21311</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/24310e3a0e22b3c086ca402f88448676f2e1cfcd"><code>24310e3</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21324">#21324</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/d136fa4b0d2dd4a9e738ca1c012cc674d1441127"><code>d136fa4</code></a> feat: object-shorthand handle quoted properties for <code>ignoreConstructors</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21">#21</a>...</li> <li><a href="https://github.com/eslint/eslint/commit/45ad79e54a39b54b4ce8eb47e612bd2f72a7a651"><code>45ad79e</code></a> ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (<a href="https://redirect.github.com/eslint/eslint/issues/21318">#21318</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.10.0...v10.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint&package-manager=npm_and_yarn&previous-version=10.10.0&new-version=10.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-22 13:54:24 +00:00
dependabot[bot]	9cd67c9a69	chore(deps-dev): Bump @babel/core from 7.29.0 to 7.29.7 (#2182 ) Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.29.0 to 7.29.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/babel/babel/releases">@babel/core's releases</a>.</em></p> <blockquote> <h2>v7.29.7 (2026-05-25)</h2> <p>Re-release all packages with npm provenance attestations</p> <h2>v7.29.6 (2026-05-25)</h2> <h4>🐛 Bug Fix</h4> <ul> <li><code>babel-generator</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/18014">#18014</a> Catchup source map position in preserveFormat (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li> </ul> </li> <li><code>babel-core</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/18001">#18001</a> [7.x packport]Improve input source map handling (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li> </ul> </li> <li><code>babel-core</code>, <code>babel-generator</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17998">#17998</a> Preserve original identifier names from input sourcemaps (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992">#17992</a>) (<a href="https://github.com/Andarist"><code>@Andarist</code></a>)</li> </ul> </li> </ul> <h4>Committers: 3</h4> <ul> <li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li> <li>Mateusz Burzyński (<a href="https://github.com/Andarist"><code>@Andarist</code></a>)</li> <li>Nicolò Ribaudo (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li> </ul> <h2>v7.29.5 (2026-05-05)</h2> <h4>🏠 Internal</h4> <ul> <li><code>babel-preset-env</code> <ul> <li>Update <code>@babel/*</code> dependencies</li> </ul> </li> </ul> <h2>v7.29.4 (2026-05-05)</h2> <h4>🐛 Bug Fix</h4> <ul> <li><code>babel-plugin-transform-modules-systemjs</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17974">#17974</a> [7.x backport]fix(systemjs): improve module string name support (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li> </ul> </li> </ul> <h4>Committers: 1</h4> <ul> <li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li> </ul> <h2>v7.29.3 (2026-04-30)</h2> <h4>👓 Spec Compliance</h4> <ul> <li><code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17923">#17923</a> Support flow extends bound (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li> </ul> </li> </ul> <h4>🐛 Bug Fix</h4> <ul> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-proposal-decorators</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17931">#17931</a> fix(decorators): replace super within all removed static elements (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li> </ul> </li> <li><code>babel-register</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17915">#17915</a> Fix thread synchronization issues in <code>@babel/register</code> (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li> </ul> </li> <li><code>babel-compat-data</code>, <code>babel-plugin-bugfix-safari-rest-destructuring-rhs-array</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17788">#17788</a> Add bugfix plugin for Safari array rest destructuring bug (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li> </ul> </li> </ul> <h4>💅 Polish</h4> <ul> <li><code>babel-parser</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/babel/babel/commit/4fba7541180bf5f58256d8e358b544e3831ad090"><code>4fba754</code></a> v7.29.7</li> <li><a href="https://github.com/babel/babel/commit/04ea6b27fdac8f40c3481aec2080ac9678779509"><code>04ea6b2</code></a> v7.29.6</li> <li><a href="https://github.com/babel/babel/commit/99f498a9b9fa0b900d603fbe8f6601bb3b9e42bb"><code>99f498a</code></a> [7.x packport]Improve input source map handling (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/18001">#18001</a>)</li> <li><a href="https://github.com/babel/babel/commit/feba0a3654c596bd369d1ef1231f5d56666d56dc"><code>feba0a3</code></a> Preserve original identifier names from input sourcemaps (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17992">#17992</a>) (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-core/issues/17998">#17998</a>)</li> <li>See full diff in <a href="https://github.com/babel/babel/commits/v7.29.7/packages/babel-core">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@babel/core&package-manager=npm_and_yarn&previous-version=7.29.0&new-version=7.29.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/maplibre/maputnik/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 14:05:28 +00:00
dependabot[bot]	c40ece3355	chore(deps): Bump codecov/codecov-action from 7.1.0 to 7.1.1 (#2181 ) Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.1.0 to 7.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/releases">codecov/codecov-action's releases</a>.</em></p> <blockquote> <h2>v7.1.1</h2> <h2>What's Changed</h2> <ul> <li>chore(release): 7.1.1 by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1973">codecov/codecov-action#1973</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v7.1.0...v7.1.1">https://github.com/codecov/codecov-action/compare/v7.1.0...v7.1.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codecov/codecov-action/commit/303a32d7a59b442fa8d48b6a1cc6825c09c847a5"><code>303a32d</code></a> chore(release): 7.1.1 (<a href="https://redirect.github.com/codecov/codecov-action/issues/1973">#1973</a>)</li> <li>See full diff in <a href="https://github.com/codecov/codecov-action/compare/0b35c9ecc4f0529d0eb674914510c22f85b196b4...303a32d7a59b442fa8d48b6a1cc6825c09c847a5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=7.1.0&new-version=7.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:56:49 +00:00
dependabot[bot]	5c65782f2a	chore(deps): Bump the codeql-action group with 3 updates (#2180 ) Bumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.0 to 4.38.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.38.1</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/1c5b675653bb5c22dbe9b12b556ec555138e09fd"><code>1c5b675</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4152">#4152</a> from github/update-v4.38.1-a65b83a73</li> <li><a href="https://github.com/github/codeql-action/commit/a97cdcae05f95787760713131181ee6624037e17"><code>a97cdca</code></a> Add changelog entry for <a href="https://redirect.github.com/github/codeql-action/issues/4146">#4146</a></li> <li><a href="https://github.com/github/codeql-action/commit/cc6c6911c3eb4bc527e1382609bf400bb4c44611"><code>cc6c691</code></a> Update changelog for v4.38.1</li> <li><a href="https://github.com/github/codeql-action/commit/a65b83a73db5849f2c05f0112023a8a4e89a7258"><code>a65b83a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4146">#4146</a> from github/henrymercer/per-language-bundles-pr</li> <li><a href="https://github.com/github/codeql-action/commit/07fa87d33359d182be54e4da4bf41664595e3042"><code>07fa87d</code></a> Clarify the latest-nightly eligibility exception</li> <li><a href="https://github.com/github/codeql-action/commit/f18f3536f13ef44ab98c9ef15f8aa05c7f6ac4ae"><code>f18f353</code></a> Describe the bundle URL resolver</li> <li><a href="https://github.com/github/codeql-action/commit/ecec9b5a3756247bd2bfec7da1b6f7bb3eb92d46"><code>ecec9b5</code></a> Share per-language telemetry fields without renaming</li> <li><a href="https://github.com/github/codeql-action/commit/79fe3a1270f5a101a20367147a05eb6d8ed533af"><code>79fe3a1</code></a> Move download telemetry into the status-report directory</li> <li><a href="https://github.com/github/codeql-action/commit/ead1f7d93f7fea11d3cf483d696b783b3f686607"><code>ead1f7d</code></a> Rename the platform module</li> <li><a href="https://github.com/github/codeql-action/commit/549d498da392f61aadfc0416f08ed43ae7397a2f"><code>549d498</code></a> Simplify per-language platform eligibility checks</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/autobuild` from 4.38.0 to 4.38.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's releases</a>.</em></p> <blockquote> <h2>v4.38.1</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/1c5b675653bb5c22dbe9b12b556ec555138e09fd"><code>1c5b675</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4152">#4152</a> from github/update-v4.38.1-a65b83a73</li> <li><a href="https://github.com/github/codeql-action/commit/a97cdcae05f95787760713131181ee6624037e17"><code>a97cdca</code></a> Add changelog entry for <a href="https://redirect.github.com/github/codeql-action/issues/4146">#4146</a></li> <li><a href="https://github.com/github/codeql-action/commit/cc6c6911c3eb4bc527e1382609bf400bb4c44611"><code>cc6c691</code></a> Update changelog for v4.38.1</li> <li><a href="https://github.com/github/codeql-action/commit/a65b83a73db5849f2c05f0112023a8a4e89a7258"><code>a65b83a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4146">#4146</a> from github/henrymercer/per-language-bundles-pr</li> <li><a href="https://github.com/github/codeql-action/commit/07fa87d33359d182be54e4da4bf41664595e3042"><code>07fa87d</code></a> Clarify the latest-nightly eligibility exception</li> <li><a href="https://github.com/github/codeql-action/commit/f18f3536f13ef44ab98c9ef15f8aa05c7f6ac4ae"><code>f18f353</code></a> Describe the bundle URL resolver</li> <li><a href="https://github.com/github/codeql-action/commit/ecec9b5a3756247bd2bfec7da1b6f7bb3eb92d46"><code>ecec9b5</code></a> Share per-language telemetry fields without renaming</li> <li><a href="https://github.com/github/codeql-action/commit/79fe3a1270f5a101a20367147a05eb6d8ed533af"><code>79fe3a1</code></a> Move download telemetry into the status-report directory</li> <li><a href="https://github.com/github/codeql-action/commit/ead1f7d93f7fea11d3cf483d696b783b3f686607"><code>ead1f7d</code></a> Rename the platform module</li> <li><a href="https://github.com/github/codeql-action/commit/549d498da392f61aadfc0416f08ed43ae7397a2f"><code>549d498</code></a> Simplify per-language platform eligibility checks</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.38.1</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.1 - 18 Sept 2026</h2> <ul> <li>The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/4146">#4146</a></li> </ul> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/1c5b675653bb5c22dbe9b12b556ec555138e09fd"><code>1c5b675</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4152">#4152</a> from github/update-v4.38.1-a65b83a73</li> <li><a href="https://github.com/github/codeql-action/commit/a97cdcae05f95787760713131181ee6624037e17"><code>a97cdca</code></a> Add changelog entry for <a href="https://redirect.github.com/github/codeql-action/issues/4146">#4146</a></li> <li><a href="https://github.com/github/codeql-action/commit/cc6c6911c3eb4bc527e1382609bf400bb4c44611"><code>cc6c691</code></a> Update changelog for v4.38.1</li> <li><a href="https://github.com/github/codeql-action/commit/a65b83a73db5849f2c05f0112023a8a4e89a7258"><code>a65b83a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4146">#4146</a> from github/henrymercer/per-language-bundles-pr</li> <li><a href="https://github.com/github/codeql-action/commit/07fa87d33359d182be54e4da4bf41664595e3042"><code>07fa87d</code></a> Clarify the latest-nightly eligibility exception</li> <li><a href="https://github.com/github/codeql-action/commit/f18f3536f13ef44ab98c9ef15f8aa05c7f6ac4ae"><code>f18f353</code></a> Describe the bundle URL resolver</li> <li><a href="https://github.com/github/codeql-action/commit/ecec9b5a3756247bd2bfec7da1b6f7bb3eb92d46"><code>ecec9b5</code></a> Share per-language telemetry fields without renaming</li> <li><a href="https://github.com/github/codeql-action/commit/79fe3a1270f5a101a20367147a05eb6d8ed533af"><code>79fe3a1</code></a> Move download telemetry into the status-report directory</li> <li><a href="https://github.com/github/codeql-action/commit/ead1f7d93f7fea11d3cf483d696b783b3f686607"><code>ead1f7d</code></a> Rename the platform module</li> <li><a href="https://github.com/github/codeql-action/commit/549d498da392f61aadfc0416f08ed43ae7397a2f"><code>549d498</code></a> Simplify per-language platform eligibility checks</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:56:37 +00:00
dependabot[bot]	560c3103af	chore(deps): Bump @codemirror/state from 6.7.4 to 6.7.5 (#2176 ) Bumps [@codemirror/state](https://github.com/codemirror/state) from 6.7.4 to 6.7.5. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/codemirror/state/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/state&package-manager=npm_and_yarn&previous-version=6.7.4&new-version=6.7.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:54:41 +00:00
dependabot[bot]	d74499589b	chore(deps): Bump maplibre-gl from 6.9.1 to 6.10.0 (#2178 ) [//]: # (dependabot-start) ⚠️ Dependabot is rebasing this PR ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.9.1 to 6.10.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.10.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Show the sky in globe view, fading out with altitude instead of with the globe to mercator transition (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8464">#8464</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Speed up fill and fill-extrusion triangulation by looking up each vertex's deduplicated index once instead of hashing every triangle corner, and every outline point of a ring that is not subdivided, again (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8425">#8425</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Test whether a <code>Marker</code> is behind terrain with a CPU ray walk over the DEM instead of a depth-buffer readback, removing a GPU stall per marker while a map with terrain moves (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8387">#8387</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix partially blank maps in older Safari versions (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8427">#8427</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>setStyle</code> calling <code>Map.setTerrain</code> with the wrong <code>this</code>, which made a terrain change in a style diff throw (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8451">#8451</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix hillshade rendering artifacts on mobile GPUs at high zoom levels (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8431">#8431</a>) (by <a href="https://github.com/Turbo87"><code>@Turbo87</code></a>)</li> <li>Free the pooled terrain drape textures once the map is at rest and when terrain is removed, instead of keeping every drape allocated during a pan resident for the life of the map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8400">#8400</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.10.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Show the sky in globe view, fading out with altitude instead of with the globe to mercator transition (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8464">#8464</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Speed up fill and fill-extrusion triangulation by looking up each vertex's deduplicated index once instead of hashing every triangle corner, and every outline point of a ring that is not subdivided, again (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8425">#8425</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Test whether a <code>Marker</code> is behind terrain with a CPU ray walk over the DEM instead of a depth-buffer readback, removing a GPU stall per marker while a map with terrain moves (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8387">#8387</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix partially blank maps in older Safari versions (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8427">#8427</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix <code>setStyle</code> calling <code>Map.setTerrain</code> with the wrong <code>this</code>, which made a terrain change in a style diff throw (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8451">#8451</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix hillshade rendering artifacts on mobile GPUs at high zoom levels (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8431">#8431</a>) (by <a href="https://github.com/Turbo87"><code>@Turbo87</code></a>)</li> <li>Free the pooled terrain drape textures once the map is at rest and when terrain is removed, instead of keeping every drape allocated during a pan resident for the life of the map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8400">#8400</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/d1934699ed3159f1e5d689078dd2e677f3ed34e3"><code>d193469</code></a> Bump js version to 6.10.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8465">#8465</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/cbf9f1acd3deed77bbe79b6b4b9130a64aefe923"><code>cbf9f1a</code></a> perf: test marker occlusion by terrain with a DEM ray walk instead of a depth...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/6f83accf07899f790798ad148ceb7e1a56a09071"><code>6f83acc</code></a> Show the sky in globe view (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8464">#8464</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/6ac6f2902a7d5031ffe89fbb9b2292123b0c06f9"><code>6ac6f29</code></a> fix partially blank maps in older Safari (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8463">#8463</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/651eaefb4a4130eda0051d9e5a6d6d3640d02237"><code>651eaef</code></a> GM2.7 Centralize tile terrain data (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8462">#8462</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/d406cc2d809567bb9ea164ac8f21980236a4f498"><code>d406cc2</code></a> GM2.6 Centralize tile projection data (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8455">#8455</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/f6b44bc152fbda20c5497af223199c6df631654f"><code>f6b44bc</code></a> fix: replace diff with proper types (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8452">#8452</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/2049770ab192d6f4951a40261073f127072f9f2f"><code>2049770</code></a> enlable lint rule for type only import section (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8460">#8460</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/542e21807a808121285b85c4cc5c2c6b8d65ee9a"><code>542e218</code></a> fix: free the pooled terrain drape textures once the map is at rest and when ...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/761f0f3d648550ae71efca783b54be4e34ae3474"><code>761f0f3</code></a> perf: remap earcut indices and unsubdivided fill outlines through a per-verte...</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.9.1...v6.10.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.9.1&new-version=6.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:54:25 +00:00
dependabot[bot]	3c31a51754	chore(deps-dev): Bump i18next-cli from 1.73.3 to 1.74.1 (#2174 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.73.3 to 1.74.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.74.1</h2> <ul> <li>fix(extract): keys wrapped in parentheses are no longer dropped. <code>t(('key'))</code> and <code>t(cond ? 'a' : ('b'))</code> produced nothing, which is easy to hit without meaning to, since Prettier wraps the longer branch of a ternary in parentheses when the call does not fit on one line. The same wrapper broke the options argument (<code>t('item', ({ count }))</code> extracted no plural forms), a parenthesized default value (<code>t('welcome', ('Welcome!'))</code>), key arrays and selectors (<code>t((['a', 'b']))</code>, <code>t((($) => $.sel.key))</code>), <code>useTranslation(('ns'))</code>, and option values such as <code>{ ns: ('other') }</code>, which silently filed the key under the default namespace. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/295">#295</a>.</li> </ul> <h2>1.74.0</h2> <ul> <li>fix(extract): finite dynamic keys now resolve through renaming imports. <code>import { ResourceStatus as Status } from './types'</code> followed by <code>t(`status.${s}`)</code> used to expand to nothing, because the resolver's tables are keyed by the declared type name and nothing mapped the local binding back to it. Applies to type aliases, enums, interfaces, <code>as const</code> arrays and helper functions alike. Part of <a href="https://redirect.github.com/i18next/i18next-cli/issues/294">#294</a>.</li> <li>feat(extract): <code>node_modules</code> is no longer ignored unconditionally. The default ignore is dropped as soon as one of your <code>extract.input</code> patterns mentions it. Glob a dependency's <code>.d.ts</code> to let the type-aware resolver expand the string unions and enums it declares, or glob a package's sources to extract the keys it ships. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/294">#294</a> and <a href="https://redirect.github.com/i18next/i18next-cli/issues/213">#213</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/f470a2800d619cacb062d0151b181892b8fae957"><code>f470a28</code></a> 1.74.1</li> <li><a href="https://github.com/i18next/i18next-cli/commit/9c193395823fb45b195dc6799baa3a2f0fda9dd3"><code>9c19339</code></a> fix(extract): unwrap parenthesized expressions so keys are not dropped <a href="https://redirect.github.com/i18next/i18next-cli/issues/295">#295</a></li> <li><a href="https://github.com/i18next/i18next-cli/commit/43cba76dee8ae503a291e0647250f106874b5e1d"><code>43cba76</code></a> docs: warn about drift when extracting keys from a dependency's types <a href="https://redirect.github.com/i18next/i18next-cli/issues/294">#294</a></li> <li><a href="https://github.com/i18next/i18next-cli/commit/84c85062f38eb48f578d04b76be023e9aba44a90"><code>84c8506</code></a> 1.74.0</li> <li><a href="https://github.com/i18next/i18next-cli/commit/7e444f6a3ffb21cd01f7b2f6185aa7bade5f6172"><code>7e444f6</code></a> feat(extract): resolve types from node_modules and through renaming imports #...</li> <li><a href="https://github.com/i18next/i18next-cli/commit/dc455908a4946c45b457b5ea751679074f93d822"><code>dc45590</code></a> test(types-generator): use an absolute glob path so the merged-namespace test...</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.73.3...v1.74.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.73.3&new-version=1.74.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:53:57 +00:00
dependabot[bot]	9e6dfadf56	chore(deps): Bump @codemirror/view from 6.43.11 to 6.43.12 (#2175 ) Bumps [@codemirror/view](https://github.com/codemirror/view) from 6.43.11 to 6.43.12. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/codemirror/view/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/view&package-manager=npm_and_yarn&previous-version=6.43.11&new-version=6.43.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:53:51 +00:00
dependabot[bot]	8eec5bdf38	chore(deps): Bump ol-mapbox-style from 13.5.0 to 13.5.1 (#2177 ) Bumps [ol-mapbox-style](https://github.com/openlayers/ol-mapbox-style) from 13.5.0 to 13.5.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/releases">ol-mapbox-style's releases</a>.</em></p> <blockquote> <h2>v13.5.1</h2> <h2>Summary</h2> <ul> <li>Consider <code>declutterMode</code> for cached icons</li> </ul> <h2>What's Changed</h2> <ul> <li>Changes for 13.5.0 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1522">openlayers/ol-mapbox-style#1522</a></li> <li>Consider declutterMode for cached icons by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1527">openlayers/ol-mapbox-style#1527</a></li> <li>Bump css-loader from 7.1.4 to 7.1.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1523">openlayers/ol-mapbox-style#1523</a></li> <li>Bump <code>@maplibre/maplibre-gl-style-spec</code> from 26.4.1 to 26.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1524">openlayers/ol-mapbox-style#1524</a></li> <li>Bump webpack from 5.109.0 to 5.110.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1525">openlayers/ol-mapbox-style#1525</a></li> <li>Bump eslint from 10.1.0 to 10.10.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1526">openlayers/ol-mapbox-style#1526</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.5.0...v13.5.1">https://github.com/openlayers/ol-mapbox-style/compare/v13.5.0...v13.5.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/blob/main/CHANGELOG.md">ol-mapbox-style's changelog</a>.</em></p> <blockquote> <h2>13.5.1</h2> <ul> <li>Consider <code>declutterMode</code> for cached icons</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/ddc4402cba078298e9ed015a627e5e9e8dd9ff73"><code>ddc4402</code></a> Add dist for v13.5.1</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/fa36af81dce9b94f3308f2d1196a1501b0a0b458"><code>fa36af8</code></a> Changes for 13.5.1</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/4d0635d52debc407463362e9842179048c78d1af"><code>4d0635d</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1526">#1526</a> from openlayers/dependabot/npm_and_yarn/eslint-10.10.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/d762b5e2f26bb5218238ce81ed7e225f3d6a308c"><code>d762b5e</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1525">#1525</a> from openlayers/dependabot/npm_and_yarn/webpack-5.110.3</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/67609234a6e811fbc43d57c1993ac0a51813bfaa"><code>6760923</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1524">#1524</a> from openlayers/dependabot/npm_and_yarn/maplibre/map...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/5cb14f2a6b3cf6f1597123f4167515959d17b999"><code>5cb14f2</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1523">#1523</a> from openlayers/dependabot/npm_and_yarn/css-loader-7...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/1391b67889e0927637b66adcbda90f83cd4d02f9"><code>1391b67</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1527">#1527</a> from openlayers/icon-cache-declutter-mode</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/82e15e2fc96210945760ac716685a27625ce2fc1"><code>82e15e2</code></a> Consider declutterMode for cached icons</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/a88904b818b7cec0398611512b6fcb34dce7b974"><code>a88904b</code></a> Bump eslint from 10.1.0 to 10.10.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/0b2aec1471550b4bcbc4fbe73068711bd3e92a25"><code>0b2aec1</code></a> Bump webpack from 5.109.0 to 5.110.3</li> <li>Additional commits viewable in <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.5.0...v13.5.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol-mapbox-style&package-manager=npm_and_yarn&previous-version=13.5.0&new-version=13.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:52:55 +00:00
dependabot[bot]	ce0e6a48a2	chore(deps-dev): Bump stylelint-scss from 7.2.0 to 7.3.0 (#2179 ) Bumps [stylelint-scss](https://github.com/stylelint-scss/stylelint-scss) from 7.2.0 to 7.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stylelint-scss/stylelint-scss/releases">stylelint-scss's releases</a>.</em></p> <blockquote> <h2>7.3.0</h2> <ul> <li>Added: <code>function-disallowed-list</code> report disallowed functions in at-rule params (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1333">#1333</a>).</li> <li>Fixed: <code>operator-no-unspaced</code> fix false positive for CSS type() function arguments (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1329">#1329</a>).</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.2.0...v7.3.0">https://github.com/stylelint-scss/stylelint-scss/compare/v7.2.0...v7.3.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stylelint-scss/stylelint-scss/blob/master/CHANGELOG.md">stylelint-scss's changelog</a>.</em></p> <blockquote> <h1>7.3.0</h1> <ul> <li>Added: <code>function-disallowed-list</code> report disallowed functions in at-rule params (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1333">#1333</a>).</li> <li>Fixed: <code>operator-no-unspaced</code> fix false positive for CSS type() function arguments (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1329">#1329</a>).</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.2.0...v7.3.0">https://github.com/stylelint-scss/stylelint-scss/compare/v7.2.0...v7.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/4a0a3e814f68b6219552118f16cff712c11a9f44"><code>4a0a3e8</code></a> 7.3.0</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/7c26b32aa2066534658f8131d9b4065a19b3000f"><code>7c26b32</code></a> Prepare version 7.3.0 (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1348">#1348</a>)</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/0072d5510fcb54d899114f2e55b7914f2643f78e"><code>0072d55</code></a> build(deps): bump postcss-selector-parser (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1346">#1346</a>)</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/37b504c1e655ff6a745facbea6e6034d6b564249"><code>37b504c</code></a> Update contributors list (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1347">#1347</a>)</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/b15777c6a5bf013bfa14934955bf8512625ff286"><code>b15777c</code></a> build(deps-dev): bump the development-dependencies group across 1 directory w...</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/1db8f625f13fd92205b0ab1f3fa41a2a3f33f318"><code>1db8f62</code></a> build(deps): bump js-yaml (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1344">#1344</a>)</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/0a1409a0b341e0bdd334abaa182192bcc3707be9"><code>0a1409a</code></a> build(deps-dev): bump <code>@humanfs/node</code> from 0.16.7 to 0.16.8 (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1341">#1341</a>)</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/43c00d4de6f1816733c4c692bdace6da1838eea7"><code>43c00d4</code></a> build(deps-dev): bump browserslist from 4.28.2 to 4.28.8 (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1340">#1340</a>)</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/7c0e473be4df25f99618e88911f2812de2151661"><code>7c0e473</code></a> build(deps): bump fast-uri from 3.1.5 to 3.1.7 (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1339">#1339</a>)</li> <li><a href="https://github.com/stylelint-scss/stylelint-scss/commit/ccced9181b143033c7d3af0609e551c618fb675e"><code>ccced91</code></a> build(deps): bump github/codeql-action in the github-actions group (<a href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1338">#1338</a>)</li> <li>Additional commits viewable in <a href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.2.0...v7.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stylelint-scss&package-manager=npm_and_yarn&previous-version=7.2.0&new-version=7.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-21 13:52:17 +00:00
dependabot[bot]	66f88e4fb9	chore(deps-dev): Bump i18next-cli from 1.73.2 to 1.73.3 (#2173 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.73.2 to 1.73.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.73.3</h2> <ul> <li>fix(extract): default values that are not string literals are now resolved statically instead of being dropped. <code>t('greeting', STRINGS.greeting)</code>, <code>t('bye', FAREWELL)</code>, <code>t('k', `${GREETING} there`)</code> and the same expressions inside <code>defaultValue</code> / <code>defaultValue_one</code> / <code>defaultValue_other</code> options pick up the value from a module-scope const, object map or enum. Ambiguous expressions such as ternaries still fall back to the key. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/293">#293</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/c72a00098c032013cf10bba77357f8816c00177f"><code>c72a000</code></a> 1.73.3</li> <li><a href="https://github.com/i18next/i18next-cli/commit/9f4b358a487735b63391b7ea0bd669350537012e"><code>9f4b358</code></a> fix(extract): resolve non-literal default values like t("key", STRINGS.key) i...</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.73.2...v1.73.3">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-18 14:14:07 +00:00
dependabot[bot]	83772d7e37	chore(deps-dev): Bump eslint-plugin-react-refresh from 0.5.6 to 0.5.7 in the react group (#2171 ) Bumps the react group with 1 update: [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh). Updates `eslint-plugin-react-refresh` from 0.5.6 to 0.5.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases">eslint-plugin-react-refresh's releases</a>.</em></p> <blockquote> <h2>v0.5.7</h2> <h3>Add <code>allowCompoundComponents</code> option (<a href="https://redirect.github.com/ArnaudBarre/eslint-plugin-react-refresh/pull/117">#117</a>)</h3> <blockquote> <p>Default: <code>false</code> (<code>true</code> in <code>vite</code> config)</p> </blockquote> <p>Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.</p> <p>This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since <code>@vitejs/plugin-react</code> 4.7.0, <code>@vitejs/plugin-react-swc</code> 3.11.0.</p> <pre lang="json"><code>{ "react-refresh/only-export-components": [ "error", { "allowCompoundComponents": true } ] } </code></pre> <p>Enabling this option allows code such as the following:</p> <pre lang="jsx"><code>const Root = () => <></>; const Label = () => <></>; export const Tag = { Root, Label }; </code></pre> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md">eslint-plugin-react-refresh's changelog</a>.</em></p> <blockquote> <h2>0.5.7</h2> <h3>Add <code>allowCompoundComponents</code> option (<a href="https://redirect.github.com/ArnaudBarre/eslint-plugin-react-refresh/pull/117">#117</a>)</h3> <blockquote> <p>Default: <code>false</code> (<code>true</code> in <code>vite</code> config)</p> </blockquote> <p>Don't warn when components are exported as an object gathering them. Every member of the object must be a component, and a member holding an anonymous function requires a component name as key.</p> <p>This should be enabled if the fast refresh implementation correctly handles this case. Vite supports it since <code>@vitejs/plugin-react</code> 4.7.0, <code>@vitejs/plugin-react-swc</code> 3.11.0.</p> <pre lang="json"><code>{ "react-refresh/only-export-components": [ "error", { "allowCompoundComponents": true } ] } </code></pre> <p>Enabling this option allows code such as the following:</p> <pre lang="jsx"><code>const Root = () => <></>; const Label = () => <></>; export const Tag = { Root, Label }; </code></pre> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ArnaudBarre/eslint-plugin-react-refresh/commit/fd40d83dccc17203dbbbc4e75507f49f44e755cc"><code>fd40d83</code></a> Add allowCompoundComponents option [publish] (<a href="https://redirect.github.com/ArnaudBarre/eslint-plugin-react-refresh/issues/117">#117</a>)</li> <li>See full diff in <a href="https://github.com/ArnaudBarre/eslint-plugin-react-refresh/compare/v0.5.6...v0.5.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=eslint-plugin-react-refresh&package-manager=npm_and_yarn&previous-version=0.5.6&new-version=0.5.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-18 14:02:07 +00:00
dependabot[bot]	0ee4b7ff1c	chore(deps-dev): Bump the vitest group with 2 updates (#2170 ) Bumps the vitest group with 2 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@vitest/coverage-v8` from 5.0.0 to 5.0.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@vitest/coverage-v8's releases</a>.</em></p> <blockquote> <h2>v5.0.1</h2> <h3> 🚀 Features</h3> <ul> <li><strong>ui</strong>: <ul> <li>Move trace attempts selector to viewer header - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11189">vitest-dev/vitest#11189</a> <a href="https://github.com/vitest-dev/vitest/commit/5dc4b5c92"><!-- raw HTML omitted -->(5dc4b)<!-- raw HTML omitted --></a></li> <li>Add focused trace view layout mode - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong>, <strong>OpenCode (gpt-5.6-sol)</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11190">vitest-dev/vitest#11190</a> <a href="https://github.com/vitest-dev/vitest/commit/376dc3bc1"><!-- raw HTML omitted -->(376dc)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h3> 🐞 Bug Fixes</h3> <ul> <li>Exit 1 when vitest list fails collection - by <a href="https://github.com/hamed-bavar"><code>@hamed-bavar</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11145">vitest-dev/vitest#11145</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11146">vitest-dev/vitest#11146</a> <a href="https://github.com/vitest-dev/vitest/commit/6108b8197"><!-- raw HTML omitted -->(6108b)<!-- raw HTML omitted --></a></li> <li>Keep parse error details in static collection - by <a href="https://github.com/hamed-bavar"><code>@hamed-bavar</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11150">vitest-dev/vitest#11150</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11151">vitest-dev/vitest#11151</a> <a href="https://github.com/vitest-dev/vitest/commit/7c818153a"><!-- raw HTML omitted -->(7c818)<!-- raw HTML omitted --></a></li> <li>Avoid recursive prototype in automocking - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11195">vitest-dev/vitest#11195</a> <a href="https://github.com/vitest-dev/vitest/commit/99fc52591"><!-- raw HTML omitted -->(99fc5)<!-- raw HTML omitted --></a></li> <li>Prevent false Vitest import resolution - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11196">vitest-dev/vitest#11196</a> <a href="https://github.com/vitest-dev/vitest/commit/b426c1976"><!-- raw HTML omitted -->(b426c)<!-- raw HTML omitted --></a></li> <li>Keep metadata file when clearing the cache - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11199">vitest-dev/vitest#11199</a> <a href="https://github.com/vitest-dev/vitest/commit/73614654a"><!-- raw HTML omitted -->(73614)<!-- raw HTML omitted --></a></li> <li>Correct typos in error message and comments - by <a href="https://github.com/shinji00222"><code>@shinji00222</code></a> and <strong>Shinji</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11187">vitest-dev/vitest#11187</a> <a href="https://github.com/vitest-dev/vitest/commit/115c3f6d2"><!-- raw HTML omitted -->(115c3)<!-- raw HTML omitted --></a></li> <li>Resolve ResolvedConfig exactOptionalPropertyTypes errors - by <a href="https://github.com/LukeAbby"><code>@LukeAbby</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11175">vitest-dev/vitest#11175</a> <a href="https://github.com/vitest-dev/vitest/commit/498fbe922"><!-- raw HTML omitted -->(498fb)<!-- raw HTML omitted --></a></li> <li>Share the server on self-referencing <code>extends</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11034">vitest-dev/vitest#11034</a> <a href="https://github.com/vitest-dev/vitest/commit/23dda738c"><!-- raw HTML omitted -->(23dda)<!-- raw HTML omitted --></a></li> <li>Warn when deprecated <code>deps.optimizer.web</code> is used - by <a href="https://github.com/im10furry"><code>@im10furry</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11214">vitest-dev/vitest#11214</a> <a href="https://github.com/vitest-dev/vitest/commit/2ce29d5fa"><!-- raw HTML omitted -->(2ce29)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Avoid double quotes in <code>config.define</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11198">vitest-dev/vitest#11198</a> <a href="https://github.com/vitest-dev/vitest/commit/972e24bab"><!-- raw HTML omitted -->(972e2)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>doctor</strong>: <ul> <li>Measure vm pools for custom environments - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11212">vitest-dev/vitest#11212</a> <a href="https://github.com/vitest-dev/vitest/commit/91ab1588c"><!-- raw HTML omitted -->(91ab1)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Correct return value in <code>toMatchAriaSnapshot</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11208">vitest-dev/vitest#11208</a> <a href="https://github.com/vitest-dev/vitest/commit/c119be016"><!-- raw HTML omitted -->(c119b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>fakeTimers</strong>: <ul> <li>Force <code>queueMicrotask</code> and <code>nextTick</code> in <code>toNotFake</code> - by <a href="https://github.com/kingmakeruix"><code>@kingmakeruix</code></a>, <strong>kingmakeruix</strong>, <strong>Hiroshi Ogawa</strong>, <strong>Codex</strong> and <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11261">vitest-dev/vitest#11261</a> <a href="https://github.com/vitest-dev/vitest/commit/a47d7908f"><!-- raw HTML omitted -->(a47d7)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>snapshot</strong>: <ul> <li>Report obsolete keys next to skipped tests - by <a href="https://github.com/hamed-bavar"><code>@hamed-bavar</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (gpt-5.6-sol)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11157">vitest-dev/vitest#11157</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11158">vitest-dev/vitest#11158</a> <a href="https://github.com/vitest-dev/vitest/commit/17e2b22dd"><!-- raw HTML omitted -->(17e2b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>types</strong>: <ul> <li>Make public declarations self-contained - by <a href="https://github.com/ZoeySigel"><code>@ZoeySigel</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11141">vitest-dev/vitest#11141</a> <a href="https://github.com/vitest-dev/vitest/commit/455466c16"><!-- raw HTML omitted -->(45546)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>ui</strong>: <ul> <li>Fix collapse/expand suite with file name search - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11260">vitest-dev/vitest#11260</a> <a href="https://github.com/vitest-dev/vitest/commit/0a7122daa"><!-- raw HTML omitted -->(0a712)<!-- raw HTML omitted --></a></li> <li>Fix explorer file summary count - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong>, <strong>OpenCode (gpt-5.6-sol)</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11125">vitest-dev/vitest#11125</a> <a href="https://github.com/vitest-dev/vitest/commit/05982297d"><!-- raw HTML omitted -->(05982)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>utils</strong>: <ul> <li>Fix <code>deepMerge</code> to handle prototype - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11215">vitest-dev/vitest#11215</a> <a href="https://github.com/vitest-dev/vitest/commit/4944cf498"><!-- raw HTML omitted -->(4944c)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.0...v5.0.1">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/03630a5995d10455fa136be53bfb2b2409381106"><code>03630a5</code></a> chore: release v5.0.1 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/11275">#11275</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/coverage-v8">compare view</a></li> </ul> </details> <br /> Updates `vitest` from 5.0.0 to 5.0.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>.</em></p> <blockquote> <h2>v5.0.1</h2> <h3> 🚀 Features</h3> <ul> <li><strong>ui</strong>: <ul> <li>Move trace attempts selector to viewer header - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11189">vitest-dev/vitest#11189</a> <a href="https://github.com/vitest-dev/vitest/commit/5dc4b5c92"><!-- raw HTML omitted -->(5dc4b)<!-- raw HTML omitted --></a></li> <li>Add focused trace view layout mode - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong>, <strong>OpenCode (gpt-5.6-sol)</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11190">vitest-dev/vitest#11190</a> <a href="https://github.com/vitest-dev/vitest/commit/376dc3bc1"><!-- raw HTML omitted -->(376dc)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h3> 🐞 Bug Fixes</h3> <ul> <li>Exit 1 when vitest list fails collection - by <a href="https://github.com/hamed-bavar"><code>@hamed-bavar</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11145">vitest-dev/vitest#11145</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11146">vitest-dev/vitest#11146</a> <a href="https://github.com/vitest-dev/vitest/commit/6108b8197"><!-- raw HTML omitted -->(6108b)<!-- raw HTML omitted --></a></li> <li>Keep parse error details in static collection - by <a href="https://github.com/hamed-bavar"><code>@hamed-bavar</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11150">vitest-dev/vitest#11150</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11151">vitest-dev/vitest#11151</a> <a href="https://github.com/vitest-dev/vitest/commit/7c818153a"><!-- raw HTML omitted -->(7c818)<!-- raw HTML omitted --></a></li> <li>Avoid recursive prototype in automocking - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11195">vitest-dev/vitest#11195</a> <a href="https://github.com/vitest-dev/vitest/commit/99fc52591"><!-- raw HTML omitted -->(99fc5)<!-- raw HTML omitted --></a></li> <li>Prevent false Vitest import resolution - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11196">vitest-dev/vitest#11196</a> <a href="https://github.com/vitest-dev/vitest/commit/b426c1976"><!-- raw HTML omitted -->(b426c)<!-- raw HTML omitted --></a></li> <li>Keep metadata file when clearing the cache - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11199">vitest-dev/vitest#11199</a> <a href="https://github.com/vitest-dev/vitest/commit/73614654a"><!-- raw HTML omitted -->(73614)<!-- raw HTML omitted --></a></li> <li>Correct typos in error message and comments - by <a href="https://github.com/shinji00222"><code>@shinji00222</code></a> and <strong>Shinji</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11187">vitest-dev/vitest#11187</a> <a href="https://github.com/vitest-dev/vitest/commit/115c3f6d2"><!-- raw HTML omitted -->(115c3)<!-- raw HTML omitted --></a></li> <li>Resolve ResolvedConfig exactOptionalPropertyTypes errors - by <a href="https://github.com/LukeAbby"><code>@LukeAbby</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11175">vitest-dev/vitest#11175</a> <a href="https://github.com/vitest-dev/vitest/commit/498fbe922"><!-- raw HTML omitted -->(498fb)<!-- raw HTML omitted --></a></li> <li>Share the server on self-referencing <code>extends</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11034">vitest-dev/vitest#11034</a> <a href="https://github.com/vitest-dev/vitest/commit/23dda738c"><!-- raw HTML omitted -->(23dda)<!-- raw HTML omitted --></a></li> <li>Warn when deprecated <code>deps.optimizer.web</code> is used - by <a href="https://github.com/im10furry"><code>@im10furry</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11214">vitest-dev/vitest#11214</a> <a href="https://github.com/vitest-dev/vitest/commit/2ce29d5fa"><!-- raw HTML omitted -->(2ce29)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Avoid double quotes in <code>config.define</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11198">vitest-dev/vitest#11198</a> <a href="https://github.com/vitest-dev/vitest/commit/972e24bab"><!-- raw HTML omitted -->(972e2)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>doctor</strong>: <ul> <li>Measure vm pools for custom environments - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11212">vitest-dev/vitest#11212</a> <a href="https://github.com/vitest-dev/vitest/commit/91ab1588c"><!-- raw HTML omitted -->(91ab1)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Correct return value in <code>toMatchAriaSnapshot</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11208">vitest-dev/vitest#11208</a> <a href="https://github.com/vitest-dev/vitest/commit/c119be016"><!-- raw HTML omitted -->(c119b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>fakeTimers</strong>: <ul> <li>Force <code>queueMicrotask</code> and <code>nextTick</code> in <code>toNotFake</code> - by <a href="https://github.com/kingmakeruix"><code>@kingmakeruix</code></a>, <strong>kingmakeruix</strong>, <strong>Hiroshi Ogawa</strong>, <strong>Codex</strong> and <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11261">vitest-dev/vitest#11261</a> <a href="https://github.com/vitest-dev/vitest/commit/a47d7908f"><!-- raw HTML omitted -->(a47d7)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>snapshot</strong>: <ul> <li>Report obsolete keys next to skipped tests - by <a href="https://github.com/hamed-bavar"><code>@hamed-bavar</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (gpt-5.6-sol)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11157">vitest-dev/vitest#11157</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/11158">vitest-dev/vitest#11158</a> <a href="https://github.com/vitest-dev/vitest/commit/17e2b22dd"><!-- raw HTML omitted -->(17e2b)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>types</strong>: <ul> <li>Make public declarations self-contained - by <a href="https://github.com/ZoeySigel"><code>@ZoeySigel</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11141">vitest-dev/vitest#11141</a> <a href="https://github.com/vitest-dev/vitest/commit/455466c16"><!-- raw HTML omitted -->(45546)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>ui</strong>: <ul> <li>Fix collapse/expand suite with file name search - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11260">vitest-dev/vitest#11260</a> <a href="https://github.com/vitest-dev/vitest/commit/0a7122daa"><!-- raw HTML omitted -->(0a712)<!-- raw HTML omitted --></a></li> <li>Fix explorer file summary count - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong>, <strong>OpenCode (gpt-5.6-sol)</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11125">vitest-dev/vitest#11125</a> <a href="https://github.com/vitest-dev/vitest/commit/05982297d"><!-- raw HTML omitted -->(05982)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>utils</strong>: <ul> <li>Fix <code>deepMerge</code> to handle prototype - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/11215">vitest-dev/vitest#11215</a> <a href="https://github.com/vitest-dev/vitest/commit/4944cf498"><!-- raw HTML omitted -->(4944c)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v5.0.0...v5.0.1">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/03630a5995d10455fa136be53bfb2b2409381106"><code>03630a5</code></a> chore: release v5.0.1 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11275">#11275</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/a47d7908f0635e9cba6cbe5e1a209bb6add5e0ab"><code>a47d790</code></a> fix(fakeTimers): force <code>queueMicrotask</code> and <code>nextTick</code> in <code>toNotFake</code> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11261">#11261</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/2ce29d5fa758046e5453bd92b8ed6c9da9709bb5"><code>2ce29d5</code></a> fix: warn when deprecated <code>deps.optimizer.web</code> is used (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11214">#11214</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/ccd6d057b6e4ca29a5e6b753a2b8e16b0afd8cda"><code>ccd6d05</code></a> docs: fix typecheck exclude default in documentation (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11223">#11223</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/91ab1588c72c9c5f7c638368a541cd20e0e8a934"><code>91ab158</code></a> fix(doctor): measure vm pools for custom environments (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11212">#11212</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/23dda738ccacb11682426426cd7b876afd107621"><code>23dda73</code></a> fix: share the server on self-referencing <code>extends</code> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11034">#11034</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/498fbe9222eb9aa3d8cf48481e200c16bb693bbd"><code>498fbe9</code></a> fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11175">#11175</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/115c3f6d2bfa6a8672eeab8cc21bbecc6a4ef3d0"><code>115c3f6</code></a> fix: correct typos in error message and comments (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11187">#11187</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/73614654a46f617c357920eecda439654a561f92"><code>7361465</code></a> fix: keep metadata file when clearing the cache (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11199">#11199</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/972e24bab5fb96843de72447eb65585628b8dbde"><code>972e24b</code></a> fix(browser): avoid double quotes in <code>config.define</code> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/11198">#11198</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-18 13:59:40 +00:00
dependabot[bot]	0b7fe9f8ee	chore(deps): Bump maplibre-gl from 6.9.0 to 6.9.1 (#2172 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.9.0 to 6.9.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.9.1</h2> <h3>✨ Features and improvements</h3> <ul> <li>Stop the scale control forcing a synchronous layout and rewriting its DOM on every frame of a pan or zoom (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8403">#8403</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Speed up merging adjacent <code>symbol-placement: line</code> features that share a label, which took time quadratic in the number of features that chain together (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8436">#8436</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Convert the <code>fill-extrusion-rounded-corner-distance</code> rounding distance to tile units once per tile instead of once per feature (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8435">#8435</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Redraw terrain depth when DEM tiles arrive so occluded symbols and markers stay hidden (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8447">#8447</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Fix raster tiles getting stuck at the start of a fade-in until the map moves. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8430">#8430</a>) (by <a href="https://github.com/Kanahiro"><code>@Kanahiro</code></a>)</li> <li>Fix <code>fill-extrusion-vertical-gradient</code> disappearing over 3D terrain, where the gradient was computed from the extrusion's height above sea level instead of its own height (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8410">#8410</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Fix missing map layers after custom layer rendering (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8406">#8406</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix 3D terrain reading elevation from the wrong part of a parent DEM tile while the deepest DEM tile is still loading (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8407">#8407</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Align 3D terrain DEM sampling with hillshade and color-relief at cell centres (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8420">#8420</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Fix setting one paint, light or sky property transitioning every property alongside it, which delayed <code>idle</code> even when nothing could animate and restarted transitions that were still running (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8376">#8376</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Fix <code>fill-extrusion-rounded-corner-distance</code> rounding every feature twice, which over-rounded the corners and inflated the vertex count (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8429">#8429</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Fix <code>Map#project</code> returning an incorrect on-screen point for a location behind the camera. It now returns a point outside the viewport, on the side through which the location left the screen, so DOM markers and popups are moved off-screen as expected. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8292">#8292</a>) (by <a href="https://github.com/schickm"><code>@schickm</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.9.1</h2> <h3>✨ Features and improvements</h3> <ul> <li>Stop the scale control forcing a synchronous layout and rewriting its DOM on every frame of a pan or zoom (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8403">#8403</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Speed up merging adjacent <code>symbol-placement: line</code> features that share a label, which took time quadratic in the number of features that chain together (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8436">#8436</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Convert the <code>fill-extrusion-rounded-corner-distance</code> rounding distance to tile units once per tile instead of once per feature (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8435">#8435</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Redraw terrain depth when DEM tiles arrive so occluded symbols and markers stay hidden (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8447">#8447</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Fix raster tiles getting stuck at the start of a fade-in until the map moves. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8430">#8430</a>) (by <a href="https://github.com/Kanahiro"><code>@Kanahiro</code></a>)</li> <li>Fix <code>fill-extrusion-vertical-gradient</code> disappearing over 3D terrain, where the gradient was computed from the extrusion's height above sea level instead of its own height (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8410">#8410</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Fix missing map layers after custom layer rendering (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8406">#8406</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Fix 3D terrain reading elevation from the wrong part of a parent DEM tile while the deepest DEM tile is still loading (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8407">#8407</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Align 3D terrain DEM sampling with hillshade and color-relief at cell centres (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8420">#8420</a>) (by <a href="https://github.com/ArcSolver"><code>@ArcSolver</code></a>)</li> <li>Fix setting one paint, light or sky property transitioning every property alongside it, which delayed <code>idle</code> even when nothing could animate and restarted transitions that were still running (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8376">#8376</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Fix <code>fill-extrusion-rounded-corner-distance</code> rounding every feature twice, which over-rounded the corners and inflated the vertex count (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8429">#8429</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Fix <code>Map#project</code> returning an incorrect on-screen point for a location behind the camera. It now returns a point outside the viewport, on the side through which the location left the screen, so DOM markers and popups are moved off-screen as expected. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8292">#8292</a>) (by <a href="https://github.com/schickm"><code>@schickm</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/b044d9f8de4ee1c22430c1b79d10e004e5e86994"><code>b044d9f</code></a> Bump js version to 6.9.1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8449">#8449</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/ae328866133a3188814b2a7b46b640b264d00ee9"><code>ae32886</code></a> fix: redraw terrain depth when DEM tiles arrive (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8447">#8447</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/79172999a0f13171e1c040abf5e036d6af1ea813"><code>7917299</code></a> Fix raster tiles getting stuck during fade-in when zooming in (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8430">#8430</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/78128493147cc1ae4c03c0710a1947ae64bb6f7d"><code>7812849</code></a> fix: Stop Markers and Popups from rendering on-screen when behind the camera ...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/216567dabf37d0c97e5c28d10fb10b995cd54677"><code>216567d</code></a> perf: create the fill-extrusion corner rounder once per tile (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8435">#8435</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/dc767a3624b7400c4428827be49e8bbea94279bb"><code>dc767a3</code></a> fix: align terrain DEM cell centres with hillshade (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8420">#8420</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/73845bd10ce831e79d1b2d918660c54aac636609"><code>73845bd</code></a> chore(deps-dev): bump cspell from 10.2.2 to 10.3.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8417">#8417</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/04bbb358715743ff1a7afd1cd36022ebe3cbdbae"><code>04bbb35</code></a> chore(deps-dev): bump vite from 8.2.2 to 8.3.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8443">#8443</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/8ef49e60074a031f33ac431aca320c4167cd778f"><code>8ef49e6</code></a> chore(deps-dev): bump cssnano from 9.0.3 to 9.0.4 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8416">#8416</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/de2a925b34866691cd98815c8ecb823aaf1e89f2"><code>de2a925</code></a> chore(deps-dev): bump autoprefixer from 10.5.5 to 10.5.6 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8444">#8444</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.9.0...v6.9.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.9.0&new-version=6.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-18 13:59:36 +00:00
dependabot[bot]	f63d620b97	chore(deps): Bump codecov/codecov-action from 7.0.0 to 7.1.0 (#2169 ) Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.0.0 to 7.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/releases">codecov/codecov-action's releases</a>.</em></p> <blockquote> <h2>v7.1.0</h2> <h2>What's Changed</h2> <ul> <li>chore(release): 7.1.0 by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1971">codecov/codecov-action#1971</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v7.0.0...v7.1.0">https://github.com/codecov/codecov-action/compare/v7.0.0...v7.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codecov/codecov-action/commit/0b35c9ecc4f0529d0eb674914510c22f85b196b4"><code>0b35c9e</code></a> chore(release): 7.1.0 (<a href="https://redirect.github.com/codecov/codecov-action/issues/1971">#1971</a>)</li> <li>See full diff in <a href="https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...0b35c9ecc4f0529d0eb674914510c22f85b196b4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=codecov/codecov-action&package-manager=github_actions&previous-version=7.0.0&new-version=7.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-17 13:55:05 +00:00
dependabot[bot]	13a9558480	chore(deps): Bump react-i18next from 17.0.13 to 17.0.14 in the react group (#2168 ) Bumps the react group with 1 update: [react-i18next](https://github.com/i18next/react-i18next). Updates `react-i18next` from 17.0.13 to 17.0.14 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md">react-i18next's changelog</a>.</em></p> <blockquote> <h2>17.0.14</h2> <ul> <li>fix: the <code>i18n</code> object returned by <code>useTranslation</code> was only refreshed when <code>i18n.language</code> changed, so a <code>resolvedLanguage</code> (or <code>languages</code>) change of its own kept handing components the previous snapshot. That happens whenever the translations for the current language arrive after the switch — i18next resolves to the fallback until its store has them — and components reading <code>i18n.resolvedLanguage</code> (language switchers, for example) then stayed one switch behind. The cached wrapper is now keyed on all three language fields, which are exactly the ones the surrounding <code>useMemo</code> already depends on; wrapper identity still only changes when the language state does, so the caching from <a href="https://redirect.github.com/i18next/react-i18next/issues/1885">#1885</a> is unaffected. Reported via <a href="https://redirect.github.com/i18next/next-i18next/issues/2348">next-i18next#2348</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/react-i18next/commit/5f8c5f9e6c7cdabdc476111d0748c91e33bbaa30"><code>5f8c5f9</code></a> 17.0.14</li> <li><a href="https://github.com/i18next/react-i18next/commit/6def81a790ddc55cc6c09a9f306ea6c88e25867c"><code>6def81a</code></a> fix: refresh the returned i18n wrapper when resolvedLanguage changes</li> <li><a href="https://github.com/i18next/react-i18next/commit/f37ea872c74e74ca64a5b6652cc131893405770b"><code>f37ea87</code></a> docs: "For AI assistants" paragraph in the README</li> <li><a href="https://github.com/i18next/react-i18next/commit/e0592bafde1a904588c115f67b36cddf382e49c5"><code>e0592ba</code></a> chore: keep dev-only and local files out of the npm package</li> <li>See full diff in <a href="https://github.com/i18next/react-i18next/compare/v17.0.13...v17.0.14">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-i18next&package-manager=npm_and_yarn&previous-version=17.0.13&new-version=17.0.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-17 13:52:13 +00:00
dependabot[bot]	8fe6f45a41	chore(deps-dev): Bump sass from 1.104.0 to 1.104.1 (#2165 ) Bumps [sass](https://github.com/sass/dart-sass) from 1.104.0 to 1.104.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/releases">sass's releases</a>.</em></p> <blockquote> <h2>Dart Sass 1.104.1</h2> <p>To install Sass 1.104.1, download one of the packages below and <a href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or see <a href="https://sass-lang.com/install">the Sass website</a> for full installation instructions.</p> <h1>Changes</h1> <ul> <li> <p>Fix a bug where loud comments before <code>@use</code> rules could be emitted multiple times under certain circumstances.</p> </li> <li> <p>Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.</p> </li> </ul> <h3>Command Line Interface</h3> <ul> <li> <p>Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where <code>--watch</code> mode could enter an infinite loop recompiling the same CSS file over and over.</p> </li> <li> <p>Sass now sets the modification time of output files to the time compilation <em>started</em> rather than the time it <em>ended</em>. This ensures that, if a source file is modified during compilation, <code>--watch</code> and <code>--update</code> mode will recompile the outputs to include the new source file contents.</p> </li> </ul> <p>See the <a href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11041">full changelog</a> for changes in earlier releases.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's changelog</a>.</em></p> <blockquote> <h2>1.104.1</h2> <ul> <li> <p>Fix a bug where loud comments before <code>@use</code> rules could be emitted multiple times under certain circumstances.</p> </li> <li> <p>Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.</p> </li> </ul> <h3>Command Line Interface</h3> <ul> <li> <p>Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where <code>--watch</code> mode could enter an infinite loop recompiling the same CSS file over and over.</p> </li> <li> <p>Sass now sets the modification time of output files to the time compilation <em>started</em> rather than the time it <em>ended</em>. This ensures that, if a source file is modified during compilation, <code>--watch</code> and <code>--update</code> mode will recompile the outputs to include the new source file contents.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sass/dart-sass/commit/da84fb52f6b7576cc9516e12312bc33f93ac7596"><code>da84fb5</code></a> Fix <code>--watch</code> not recompiling sources modified during a compilation (<a href="https://redirect.github.com/sass/dart-sass/issues/2850">#2850</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/8a287a71e0fd8cf24fc5fe93a33179c14c845924"><code>8a287a7</code></a> Merge pull request <a href="https://redirect.github.com/sass/dart-sass/issues/2859">#2859</a> from sass/fix-auto-merge</li> <li><a href="https://github.com/sass/dart-sass/commit/6033b463ec9f3fc17ab1e5fc2c860b18b7a270d2"><code>6033b46</code></a> Add explicit versions to .github/util actions</li> <li><a href="https://github.com/sass/dart-sass/commit/cc71d43f78056e4f43394711ece111520fd6ade9"><code>cc71d43</code></a> Only auto-merge dependabot PRs once the tests pass</li> <li><a href="https://github.com/sass/dart-sass/commit/49ddc4fe9e59e29271a377cf3f59d557f5a88c4a"><code>49ddc4f</code></a> Revert "Bump dart-lang/setup-dart in /.github/util/initialize"</li> <li><a href="https://github.com/sass/dart-sass/commit/71a127d6bbe49d86d2b31d8531f2253dfb933bc9"><code>71a127d</code></a> Avoid duplicating loud comments that appear before <code>@use</code> (<a href="https://redirect.github.com/sass/dart-sass/issues/2854">#2854</a>)</li> <li><a href="https://github.com/sass/dart-sass/commit/f19baabb4ffe16323f02365d04d025be7cabe840"><code>f19baab</code></a> Merge pull request <a href="https://redirect.github.com/sass/dart-sass/issues/2857">#2857</a> from sass/dependabot/github_actions/dot-github/util/...</li> <li><a href="https://github.com/sass/dart-sass/commit/f5263e2a4ffd7f24c31969612d1a4e35246973dd"><code>f5263e2</code></a> Bump dart-lang/setup-dart in /.github/util/initialize</li> <li><a href="https://github.com/sass/dart-sass/commit/3018c0d73f61c29634099a97007987c040e641aa"><code>3018c0d</code></a> Merge pull request <a href="https://redirect.github.com/sass/dart-sass/issues/2856">#2856</a> from sass/dependabot/github_actions/dart-lang/setup-...</li> <li><a href="https://github.com/sass/dart-sass/commit/5d74adbcb6dd19c403e21c03a54cffa43ddb96f4"><code>5d74adb</code></a> Bump dart-lang/setup-dart from 1.8.0 to 1.8.1</li> <li>Additional commits viewable in <a href="https://github.com/sass/dart-sass/compare/1.104.0...1.104.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sass&package-manager=npm_and_yarn&previous-version=1.104.0&new-version=1.104.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-15 13:54:36 +00:00
dependabot[bot]	35c3dbfc8c	chore(deps): Bump @maplibre/maplibre-gl-style-spec from 26.4.2 to 26.4.4 (#2167 ) Bumps [@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec) from 26.4.2 to 26.4.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-style-spec/releases">@maplibre/maplibre-gl-style-spec's releases</a>.</em></p> <blockquote> <h2>v26.4.4</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix <code>semiliteral</code> parsing in array-valued properties and <code>at</code> operands, and report invalid children at their nested expression locations instead of throwing (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1878">#1878</a>)</li> <li>Order the <code>setTerrain</code> diff command around the source commands, so terrain is set after its source is added and unset before it is removed (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1879">#1879</a>)</li> </ul> <h2>v26.4.3</h2> <h3>✨ Features and improvements</h3> <ul> <li>Tighten the diff command types: <code>DiffCommand</code> is now a discriminated union, so a <code>switch</code> on <code>command</code> narrows <code>args</code>, and the unused legacy class argument was dropped from <code>setPaintProperty</code> and <code>setLayoutProperty</code> (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1876">#1876</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md">@maplibre/maplibre-gl-style-spec's changelog</a>.</em></p> <blockquote> <h2>26.4.4</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix <code>semiliteral</code> parsing in array-valued properties and <code>at</code> operands, and report invalid children at their nested expression locations instead of throwing (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1878">#1878</a>)</li> <li>Order the <code>setTerrain</code> diff command around the source commands, so terrain is set after its source is added and unset before it is removed (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1879">#1879</a>)</li> </ul> <h2>26.4.3</h2> <h3>✨ Features and improvements</h3> <ul> <li>Tighten the diff command types: <code>DiffCommand</code> is now a discriminated union, so a <code>switch</code> on <code>command</code> narrows <code>args</code>, and the unused legacy class argument was dropped from <code>setPaintProperty</code> and <code>setLayoutProperty</code> (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1876">#1876</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/1033d48ba10b991d6d9f60afbed94c81662ef038"><code>1033d48</code></a> Bump js version to 26.4.4 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1880">#1880</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/3c4ab4aa465ab5a64366174f844a6a6ae37a6fc5"><code>3c4ab4a</code></a> fix: setTerrain command order (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1879">#1879</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/32ee5faaaa3d77263f0c9ddd969398051179c20e"><code>32ee5fa</code></a> Fix semiliteral parsing in array contexts (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1878">#1878</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/55f1c29b0f21edbae36a54a1172b812a1f8ee2ee"><code>55f1c29</code></a> Bump js version to 26.4.3 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1877">#1877</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/22000db3d40d0cd4ba5c874487defb2e773d92e1"><code>22000db</code></a> chore: improve types for diff command. (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1876">#1876</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/6837a31fe0efae2b4e16bb057c4a712628372620"><code>6837a31</code></a> build(deps-dev): bump rolldown from 1.2.7 to 1.2.8 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1873">#1873</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/ee38a434b4fede04312f6277b3e3c24fdb91d625"><code>ee38a43</code></a> build(deps-dev): bump <code>@types/node</code> from 26.5.0 to 26.5.1 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1874">#1874</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/db53a8951479bbc3b855de2e0f7ba325e0469e00"><code>db53a89</code></a> build(deps-dev): bump eslint-plugin-jsdoc from 64.3.6 to 64.3.9 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1875">#1875</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/350f1f92f51ef6c9183f6141c93c13b604872804"><code>350f1f9</code></a> docs: record semiliteral support in GL JS 6.6.0 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1871">#1871</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/b955739a6997867f96a6dccb6350392dd0c3e723"><code>b955739</code></a> build(deps-dev): bump rolldown-plugin-dts from 0.27.7 to 0.28.5 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1859">#1859</a>)</li> <li>See full diff in <a href="https://github.com/maplibre/maplibre-style-spec/compare/v26.4.2...v26.4.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@maplibre/maplibre-gl-style-spec&package-manager=npm_and_yarn&previous-version=26.4.2&new-version=26.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-15 13:54:24 +00:00
dependabot[bot]	dd0a635a86	chore(deps): Bump ol-mapbox-style from 13.4.3 to 13.5.0 (#2166 ) Bumps [ol-mapbox-style](https://github.com/openlayers/ol-mapbox-style) from 13.4.3 to 13.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/releases">ol-mapbox-style's releases</a>.</em></p> <blockquote> <h2>v13.5.0</h2> <h2>Summary</h2> <ul> <li>Add support for the <code>raster-resampling</code> raster layer property</li> <li>Smaller build size thanks to optimized style spec data</li> </ul> <h2>What's Changed</h2> <ul> <li>Optimize style spec at pack time by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1509">openlayers/ol-mapbox-style#1509</a></li> <li>Create full build with optimized spec by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1510">openlayers/ol-mapbox-style#1510</a></li> <li>Changes for 13.4.3 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1508">openlayers/ol-mapbox-style#1508</a></li> <li>Add support for the rater-resampling raster layer property by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1521">openlayers/ol-mapbox-style#1521</a></li> <li>Bump proj4 from 2.20.9 to 2.21.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1511">openlayers/ol-mapbox-style#1511</a></li> <li>Bump typedoc from 0.28.19 to 0.28.20 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1512">openlayers/ol-mapbox-style#1512</a></li> <li>Bump mocha from 12.0.0-beta-9.2 to 12.0.0-rc.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1513">openlayers/ol-mapbox-style#1513</a></li> <li>Bump rollup from 4.60.2 to 4.63.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1514">openlayers/ol-mapbox-style#1514</a></li> <li>Bump <code>@humanfs/node</code> from 0.16.6 to 0.16.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1515">openlayers/ol-mapbox-style#1515</a></li> <li>Bump fast-uri from 3.1.5 to 3.1.7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1516">openlayers/ol-mapbox-style#1516</a></li> <li>Bump browserslist from 4.28.1 to 4.28.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1517">openlayers/ol-mapbox-style#1517</a></li> <li>Bump fflate from 0.8.2 to 0.8.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1518">openlayers/ol-mapbox-style#1518</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.4.3...v13.5.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.4.3...v13.5.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/blob/main/CHANGELOG.md">ol-mapbox-style's changelog</a>.</em></p> <blockquote> <h2>13.5.0</h2> <ul> <li>Add support for the <code>raster-resampling</code> raster layer property</li> <li>Smaller build size thanks to optimized style spec data</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/aebf1c85d326f5d511f63bf31c20fe41cb869530"><code>aebf1c8</code></a> Add dist for v13.5.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/3794d3afb22fb9e153b70886703b331fbbf1aa73"><code>3794d3a</code></a> Changes for 13.5.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/244f28271f20ef2b87240872c0f7962188291abd"><code>244f282</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1518">#1518</a> from openlayers/dependabot/npm_and_yarn/fflate-0.8.3</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/6cdaa3fb67b1837db97a7045cb407b2d2a3ea61f"><code>6cdaa3f</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1517">#1517</a> from openlayers/dependabot/npm_and_yarn/browserslist...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/993187098701c3ef76e098e975e25dad72943a34"><code>9931870</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1516">#1516</a> from openlayers/dependabot/npm_and_yarn/fast-uri-3.1.7</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/95c9aa474395e826e530d76395cd9aedea74d186"><code>95c9aa4</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1515">#1515</a> from openlayers/dependabot/npm_and_yarn/humanfs/node...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/c26b454a2d6acc10f5245aba1997dd50b6541164"><code>c26b454</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1514">#1514</a> from openlayers/dependabot/npm_and_yarn/rollup-4.63.1</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/aff390b9ace4cb96cd067f07724936638c774336"><code>aff390b</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1513">#1513</a> from openlayers/dependabot/npm_and_yarn/mocha-12.0.0...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/4c7d445d0cf8641d94fef711260080a0679eb165"><code>4c7d445</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1512">#1512</a> from openlayers/dependabot/npm_and_yarn/typedoc-0.28.20</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/9f0a9e054cc3941850a24b574c74635aa558738a"><code>9f0a9e0</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1511">#1511</a> from openlayers/dependabot/npm_and_yarn/proj4-2.21.0</li> <li>Additional commits viewable in <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.4.3...v13.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol-mapbox-style&package-manager=npm_and_yarn&previous-version=13.4.3&new-version=13.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-15 13:53:33 +00:00
dependabot[bot]	6b6710f7f8	chore(deps): Bump the codeql-action group with 3 updates (#2163 ) Bumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.37.9 to 4.38.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.38.0</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> <h2>4.37.1 - 16 Jul 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/b96794f015dfd88f77b49b1c93e0fa7110f94c63"><code>b96794f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4131">#4131</a> from github/update-v4.38.0-7e08580a9</li> <li><a href="https://github.com/github/codeql-action/commit/02d5093871674ea20274117103ce3038c73c77ef"><code>02d5093</code></a> Update changelog for v4.38.0</li> <li><a href="https://github.com/github/codeql-action/commit/7e08580a93dc4e4b9dda167e364577035cf504c6"><code>7e08580</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4130">#4130</a> from github/henrymercer/workflow-runner-sizing</li> <li><a href="https://github.com/github/codeql-action/commit/bfcc52b4f5d98468a5993daa0bf0e4fb3f3ed698"><code>bfcc52b</code></a> Run slow macOS checks on larger runners</li> <li><a href="https://github.com/github/codeql-action/commit/8c251e757c0260283fc50214a06ac768b61d3af4"><code>8c251e7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4129">#4129</a> from github/update-bundle/codeql-bundle-v2.27.0</li> <li><a href="https://github.com/github/codeql-action/commit/0b7ca400df35985869d4b9146a067865d4115da1"><code>0b7ca40</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/40484b339517c6bcf00f81eebc95ca041ddca505"><code>40484b3</code></a> Update default bundle to codeql-bundle-v2.27.0</li> <li><a href="https://github.com/github/codeql-action/commit/977e6ceaea7361825998245d787fa3b4d6b9e5df"><code>977e6ce</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4124">#4124</a> from github/henrymercer/toolcache-bundle-cleanup</li> <li><a href="https://github.com/github/codeql-action/commit/40a6b3824794ae1156e1a5320d32e364bf1dcebc"><code>40a6b38</code></a> Address toolcache cleanup review feedback</li> <li><a href="https://github.com/github/codeql-action/commit/deece8f852f048bc3f52fd42c9cc7a99b1ebb252"><code>deece8f</code></a> Apply suggestion from <a href="https://github.com/henrymercer"><code>@henrymercer</code></a></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/autobuild` from 4.37.9 to 4.38.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/autobuild's releases</a>.</em></p> <blockquote> <h2>v4.38.0</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/autobuild's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> <h2>4.37.1 - 16 Jul 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/b96794f015dfd88f77b49b1c93e0fa7110f94c63"><code>b96794f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4131">#4131</a> from github/update-v4.38.0-7e08580a9</li> <li><a href="https://github.com/github/codeql-action/commit/02d5093871674ea20274117103ce3038c73c77ef"><code>02d5093</code></a> Update changelog for v4.38.0</li> <li><a href="https://github.com/github/codeql-action/commit/7e08580a93dc4e4b9dda167e364577035cf504c6"><code>7e08580</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4130">#4130</a> from github/henrymercer/workflow-runner-sizing</li> <li><a href="https://github.com/github/codeql-action/commit/bfcc52b4f5d98468a5993daa0bf0e4fb3f3ed698"><code>bfcc52b</code></a> Run slow macOS checks on larger runners</li> <li><a href="https://github.com/github/codeql-action/commit/8c251e757c0260283fc50214a06ac768b61d3af4"><code>8c251e7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4129">#4129</a> from github/update-bundle/codeql-bundle-v2.27.0</li> <li><a href="https://github.com/github/codeql-action/commit/0b7ca400df35985869d4b9146a067865d4115da1"><code>0b7ca40</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/40484b339517c6bcf00f81eebc95ca041ddca505"><code>40484b3</code></a> Update default bundle to codeql-bundle-v2.27.0</li> <li><a href="https://github.com/github/codeql-action/commit/977e6ceaea7361825998245d787fa3b4d6b9e5df"><code>977e6ce</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4124">#4124</a> from github/henrymercer/toolcache-bundle-cleanup</li> <li><a href="https://github.com/github/codeql-action/commit/40a6b3824794ae1156e1a5320d32e364bf1dcebc"><code>40a6b38</code></a> Address toolcache cleanup review feedback</li> <li><a href="https://github.com/github/codeql-action/commit/deece8f852f048bc3f52fd42c9cc7a99b1ebb252"><code>deece8f</code></a> Apply suggestion from <a href="https://github.com/henrymercer"><code>@henrymercer</code></a></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.38.0</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.38.0 - 09 Sept 2026</h2> <ul> <li>On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. <a href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li> <li>The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native <code>linux-arm64</code> CodeQL bundle when available. <a href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li> </ul> <h2>4.37.9 - 26 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li> </ul> <h2>4.37.8 - 21 Aug 2026</h2> <p>No user facing changes.</p> <h2>4.37.7 - 13 Aug 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li> </ul> <h2>4.37.6 - 04 Aug 2026</h2> <ul> <li>Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to <code>.github/codeql-config.yml</code> to align it with the suggested path that is used elsewhere. <a href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li> </ul> <h2>4.37.5 - 03 Aug 2026</h2> <ul> <li>Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the <code>init</code> Action instead of falling back to downloading the bundle before extracting it. <a href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li> </ul> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> <h2>4.37.3 - 22 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> <h2>4.37.1 - 16 Jul 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/b96794f015dfd88f77b49b1c93e0fa7110f94c63"><code>b96794f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4131">#4131</a> from github/update-v4.38.0-7e08580a9</li> <li><a href="https://github.com/github/codeql-action/commit/02d5093871674ea20274117103ce3038c73c77ef"><code>02d5093</code></a> Update changelog for v4.38.0</li> <li><a href="https://github.com/github/codeql-action/commit/7e08580a93dc4e4b9dda167e364577035cf504c6"><code>7e08580</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4130">#4130</a> from github/henrymercer/workflow-runner-sizing</li> <li><a href="https://github.com/github/codeql-action/commit/bfcc52b4f5d98468a5993daa0bf0e4fb3f3ed698"><code>bfcc52b</code></a> Run slow macOS checks on larger runners</li> <li><a href="https://github.com/github/codeql-action/commit/8c251e757c0260283fc50214a06ac768b61d3af4"><code>8c251e7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4129">#4129</a> from github/update-bundle/codeql-bundle-v2.27.0</li> <li><a href="https://github.com/github/codeql-action/commit/0b7ca400df35985869d4b9146a067865d4115da1"><code>0b7ca40</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/40484b339517c6bcf00f81eebc95ca041ddca505"><code>40484b3</code></a> Update default bundle to codeql-bundle-v2.27.0</li> <li><a href="https://github.com/github/codeql-action/commit/977e6ceaea7361825998245d787fa3b4d6b9e5df"><code>977e6ce</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4124">#4124</a> from github/henrymercer/toolcache-bundle-cleanup</li> <li><a href="https://github.com/github/codeql-action/commit/40a6b3824794ae1156e1a5320d32e364bf1dcebc"><code>40a6b38</code></a> Address toolcache cleanup review feedback</li> <li><a href="https://github.com/github/codeql-action/commit/deece8f852f048bc3f52fd42c9cc7a99b1ebb252"><code>deece8f</code></a> Apply suggestion from <a href="https://github.com/henrymercer"><code>@henrymercer</code></a></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-14 13:57:01 +00:00
dependabot[bot]	9847176d6d	chore(deps-dev): Bump i18next-cli from 1.73.1 to 1.73.2 (#2162 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.73.1 to 1.73.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2>1.73.2</h2> <ul> <li>fix(deps): <code>react</code> is no longer a runtime dependency; it only lives in <code>devDependencies</code> for the type import. The CLI only needs <code>react-i18next</code> at runtime, which resolves React from the consuming project. Previously the <code>^19.2.8</code> floor could not dedupe against a project pinning an older React patch (Expo SDK 57 pins <code>react@19.2.3</code>) and nested a second copy under <code>node_modules/i18next-cli</code>, which Expo Doctor flagged as a duplicate. Now a single React copy is used. Fixes <a href="https://redirect.github.com/i18next/i18next-cli/issues/292">#292</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/c2115949bbb887bfbb6cf7191e4de2abf910ef8b"><code>c211594</code></a> 1.73.2</li> <li><a href="https://github.com/i18next/i18next-cli/commit/d2daa22212ce77afdc3834603208ed20cdc05db7"><code>d2daa22</code></a> fix(deps): move react to devDependencies so it no longer nests a second copy ...</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.73.1...v1.73.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.73.1&new-version=1.73.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-14 13:55:32 +00:00
dependabot[bot]	94b24287be	chore(deps-dev): Bump vite from 8.2.2 to 8.3.0 (#2161 ) [//]: # (dependabot-start) ⚠️ Dependabot is rebasing this PR ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.2.2 to 8.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>create-vite@8.3.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.3.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.3.0</h2> <h3>Features</h3> <ul> <li><strong>build:</strong> avoid settling seen preload dependencies for performance (<a href="https://redirect.github.com/vitejs/vite/issues/23446">#23446</a>) (<a href="https://github.com/vitejs/vite/commit/e6f6b3e3119256daa837b2dc399058c8aa45b470">e6f6b3e</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>handle CRLF line endings in code frame positions (<a href="https://redirect.github.com/vitejs/vite/issues/23219">#23219</a>) (<a href="https://github.com/vitejs/vite/commit/9913672bee9c34a2df7fff4c2538783cd4f43b4e">9913672</a>)</li> <li>only treat whole <code>node_modules</code> path segments as dependencies (fix <a href="https://redirect.github.com/vitejs/vite/issues/17467">#17467</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23437">#23437</a>) (<a href="https://github.com/vitejs/vite/commit/ef0dc17ada53d1169ae5a89cb8f6482831466755">ef0dc17</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>proxy:</strong> pre-compile context matchers at server creation (<a href="https://redirect.github.com/vitejs/vite/issues/23263">#23263</a>) (<a href="https://github.com/vitejs/vite/commit/8abf700eeb2411d8402d08f8e2696effafdbe774">8abf700</a>)</li> </ul> <h2>v8.3.0-beta.1</h2> <h3>Features</h3> <ul> <li><strong>devtools:</strong> enable dev server integration (<a href="https://redirect.github.com/vitejs/vite/issues/23333">#23333</a>) (<a href="https://github.com/vitejs/vite/commit/68aeb8a3b5a5a2ccd505288999bae1a5e6942ee1">68aeb8a</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>build:</strong> keep hash placeholders as-is in <code>resolveFileUrl</code> hook (<a href="https://redirect.github.com/vitejs/vite/issues/23422">#23422</a>) (<a href="https://github.com/vitejs/vite/commit/e8d6a4d3399c739772080d70c7f3c4d548a637c9">e8d6a4d</a>)</li> <li><strong>bundled-dev:</strong> mark payload delivered on client report (<a href="https://redirect.github.com/vitejs/vite/issues/23373">#23373</a>) (<a href="https://github.com/vitejs/vite/commit/a6d43bc9e3464faa4d49f090e75e1ab334ffb7b0">a6d43bc</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23445">#23445</a>) (<a href="https://github.com/vitejs/vite/commit/fc7c104e74d35a97fa313d5dd6f1b5e7d5b26159">fc7c104</a>)</li> <li><strong>html:</strong> don't inline preload link targets (fix <a href="https://redirect.github.com/vitejs/vite/issues/13355">#13355</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23387">#23387</a>) (<a href="https://github.com/vitejs/vite/commit/12e709ca4df1059747db1cb7c5d1cd71aba79a24">12e709c</a>)</li> <li>resolve the actual package root in findNearestMainPackageData for nested package.json (<a href="https://redirect.github.com/vitejs/vite/issues/23356">#23356</a>) (<a href="https://github.com/vitejs/vite/commit/8492422b8f110625a90c702f42f30784e8cf19dc">8492422</a>)</li> <li>shortcuts extend error (<a href="https://redirect.github.com/vitejs/vite/issues/23447">#23447</a>) (<a href="https://github.com/vitejs/vite/commit/4ec58d159df4a1b4799356a1fda62db88ed14752">4ec58d1</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li>introducing <code>@e18e/eslint-plugin</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23357">#23357</a>) (<a href="https://github.com/vitejs/vite/commit/f79413353995a2344879014410a9128b1b9f8e9a">f794133</a>)</li> <li>remove unnecessary comment (<a href="https://redirect.github.com/vitejs/vite/issues/23448">#23448</a>) (<a href="https://github.com/vitejs/vite/commit/b919a1a8b5a7c694667f993d677973f42d349458">b919a1a</a>)</li> </ul> <h2>v8.3.0-beta.0</h2> <h3>Features</h3> <ul> <li>accept Rolldown watch options in <code>server.watch</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23133">#23133</a>) (<a href="https://github.com/vitejs/vite/commit/1b5cfe3d3777d4ceb7f35fcee9d3c4279316a084">1b5cfe3</a>)</li> <li>add closeServer and closePreviewServer hooks (<a href="https://redirect.github.com/vitejs/vite/issues/23110">#23110</a>) (<a href="https://github.com/vitejs/vite/commit/e17d2d565b0288f169c7995adb2b192f917548e7">e17d2d5</a>)</li> <li>add top-level <code>tsconfig</code> option (<a href="https://redirect.github.com/vitejs/vite/issues/23310">#23310</a>) (<a href="https://github.com/vitejs/vite/commit/93164c3530a7b4fc7bbedfb986d6afa9546cdef3">93164c3</a>)</li> <li>add warning for unsupported hooks in plugin returned from <code>applyToEnvironment</code> hook (<a href="https://redirect.github.com/vitejs/vite/issues/23191">#23191</a>) (<a href="https://github.com/vitejs/vite/commit/fdef04f112aadfea40ad3c448d96a49a04c168bd">fdef04f</a>)</li> <li><strong>cli:</strong> support naming the CPU profile via --profile [name] (<a href="https://redirect.github.com/vitejs/vite/issues/23042">#23042</a>) (<a href="https://github.com/vitejs/vite/commit/a500deeb6f52d93ca501a0fc612a5392b939f2f5">a500dee</a>)</li> <li><strong>config:</strong> warn on named imports from JSON modules (<a href="https://redirect.github.com/vitejs/vite/issues/23378">#23378</a>) (<a href="https://github.com/vitejs/vite/commit/472385e6ec4b21e3167c7abf9769883d1c9675f8">472385e</a>)</li> <li><strong>css:</strong> minify style tag (<a href="https://redirect.github.com/vitejs/vite/issues/23183">#23183</a>) (<a href="https://github.com/vitejs/vite/commit/8156684572bdcf73e9d8568ed67971f0467fab60">8156684</a>)</li> <li>searched params attached to workers are now preserved (<a href="https://redirect.github.com/vitejs/vite/issues/22280">#22280</a>) (<a href="https://github.com/vitejs/vite/commit/517b97f57ab9473e7417da856eb641d76870a56e">517b97f</a>)</li> <li>support subpath imports in dynamic import statements (<a href="https://redirect.github.com/vitejs/vite/issues/23185">#23185</a>) (<a href="https://github.com/vitejs/vite/commit/b78e2f1bc1cba404c4bd9faf518d26ec85e89fc7">b78e2f1</a>)</li> <li>use <code>import.meta.ROLLDOWN_FILE_URL_</code> for assets in JS (<a href="https://redirect.github.com/vitejs/vite/issues/22888">#22888</a>) (<a href="https://github.com/vitejs/vite/commit/4366ac468343252df6d5706361a6348afa66f9cc">4366ac4</a>)</li> <li>use <code>import.meta.ROLLDOWN_FILE_URL_</code> for other plugins (<a href="https://redirect.github.com/vitejs/vite/issues/22894">#22894</a>) (<a href="https://github.com/vitejs/vite/commit/e38f29ee48bea5ea3178faec5b78708e86f38afb">e38f29e</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/vitejs/vite/compare/v8.2.2...v8.3.0">8.3.0</a> (2026-09-10)</h2> <h3>Features</h3> <ul> <li><strong>build:</strong> avoid settling seen preload dependencies for performance (<a href="https://redirect.github.com/vitejs/vite/issues/23446">#23446</a>) (<a href="https://github.com/vitejs/vite/commit/e6f6b3e3119256daa837b2dc399058c8aa45b470">e6f6b3e</a>)</li> <li><strong>devtools:</strong> enable dev server integration (<a href="https://redirect.github.com/vitejs/vite/issues/23333">#23333</a>) (<a href="https://github.com/vitejs/vite/commit/68aeb8a3b5a5a2ccd505288999bae1a5e6942ee1">68aeb8a</a>)</li> <li>accept Rolldown watch options in <code>server.watch</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23133">#23133</a>) (<a href="https://github.com/vitejs/vite/commit/1b5cfe3d3777d4ceb7f35fcee9d3c4279316a084">1b5cfe3</a>)</li> <li>add closeServer and closePreviewServer hooks (<a href="https://redirect.github.com/vitejs/vite/issues/23110">#23110</a>) (<a href="https://github.com/vitejs/vite/commit/e17d2d565b0288f169c7995adb2b192f917548e7">e17d2d5</a>)</li> <li>add top-level <code>tsconfig</code> option (<a href="https://redirect.github.com/vitejs/vite/issues/23310">#23310</a>) (<a href="https://github.com/vitejs/vite/commit/93164c3530a7b4fc7bbedfb986d6afa9546cdef3">93164c3</a>)</li> <li>add warning for unsupported hooks in plugin returned from <code>applyToEnvironment</code> hook (<a href="https://redirect.github.com/vitejs/vite/issues/23191">#23191</a>) (<a href="https://github.com/vitejs/vite/commit/fdef04f112aadfea40ad3c448d96a49a04c168bd">fdef04f</a>)</li> <li><strong>cli:</strong> support naming the CPU profile via --profile [name] (<a href="https://redirect.github.com/vitejs/vite/issues/23042">#23042</a>) (<a href="https://github.com/vitejs/vite/commit/a500deeb6f52d93ca501a0fc612a5392b939f2f5">a500dee</a>)</li> <li><strong>config:</strong> warn on named imports from JSON modules (<a href="https://redirect.github.com/vitejs/vite/issues/23378">#23378</a>) (<a href="https://github.com/vitejs/vite/commit/472385e6ec4b21e3167c7abf9769883d1c9675f8">472385e</a>)</li> <li><strong>css:</strong> minify style tag (<a href="https://redirect.github.com/vitejs/vite/issues/23183">#23183</a>) (<a href="https://github.com/vitejs/vite/commit/8156684572bdcf73e9d8568ed67971f0467fab60">8156684</a>)</li> <li>searched params attached to workers are now preserved (<a href="https://redirect.github.com/vitejs/vite/issues/22280">#22280</a>) (<a href="https://github.com/vitejs/vite/commit/517b97f57ab9473e7417da856eb641d76870a56e">517b97f</a>)</li> <li>support subpath imports in dynamic import statements (<a href="https://redirect.github.com/vitejs/vite/issues/23185">#23185</a>) (<a href="https://github.com/vitejs/vite/commit/b78e2f1bc1cba404c4bd9faf518d26ec85e89fc7">b78e2f1</a>)</li> <li>use <code>import.meta.ROLLDOWN_FILE_URL_</code> for assets in JS (<a href="https://redirect.github.com/vitejs/vite/issues/22888">#22888</a>) (<a href="https://github.com/vitejs/vite/commit/4366ac468343252df6d5706361a6348afa66f9cc">4366ac4</a>)</li> <li>use <code>import.meta.ROLLDOWN_FILE_URL_</code> for other plugins (<a href="https://redirect.github.com/vitejs/vite/issues/22894">#22894</a>) (<a href="https://github.com/vitejs/vite/commit/e38f29ee48bea5ea3178faec5b78708e86f38afb">e38f29e</a>)</li> <li><strong>worker:</strong> remove worker chunk if it's detected that it's not referenced (<a href="https://redirect.github.com/vitejs/vite/issues/22473">#22473</a>) (<a href="https://github.com/vitejs/vite/commit/924997a4bdda9115faee9bdb622fcec4fc8357f0">924997a</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>handle CRLF line endings in code frame positions (<a href="https://redirect.github.com/vitejs/vite/issues/23219">#23219</a>) (<a href="https://github.com/vitejs/vite/commit/9913672bee9c34a2df7fff4c2538783cd4f43b4e">9913672</a>)</li> <li>only treat whole <code>node_modules</code> path segments as dependencies (fix <a href="https://redirect.github.com/vitejs/vite/issues/17467">#17467</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23437">#23437</a>) (<a href="https://github.com/vitejs/vite/commit/ef0dc17ada53d1169ae5a89cb8f6482831466755">ef0dc17</a>)</li> <li><strong>build:</strong> keep hash placeholders as-is in <code>resolveFileUrl</code> hook (<a href="https://redirect.github.com/vitejs/vite/issues/23422">#23422</a>) (<a href="https://github.com/vitejs/vite/commit/e8d6a4d3399c739772080d70c7f3c4d548a637c9">e8d6a4d</a>)</li> <li><strong>bundled-dev:</strong> mark payload delivered on client report (<a href="https://redirect.github.com/vitejs/vite/issues/23373">#23373</a>) (<a href="https://github.com/vitejs/vite/commit/a6d43bc9e3464faa4d49f090e75e1ab334ffb7b0">a6d43bc</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23445">#23445</a>) (<a href="https://github.com/vitejs/vite/commit/fc7c104e74d35a97fa313d5dd6f1b5e7d5b26159">fc7c104</a>)</li> <li><strong>html:</strong> don't inline preload link targets (fix <a href="https://redirect.github.com/vitejs/vite/issues/13355">#13355</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/23387">#23387</a>) (<a href="https://github.com/vitejs/vite/commit/12e709ca4df1059747db1cb7c5d1cd71aba79a24">12e709c</a>)</li> <li>resolve the actual package root in findNearestMainPackageData for nested package.json (<a href="https://redirect.github.com/vitejs/vite/issues/23356">#23356</a>) (<a href="https://github.com/vitejs/vite/commit/8492422b8f110625a90c702f42f30784e8cf19dc">8492422</a>)</li> <li>shortcuts extend error (<a href="https://redirect.github.com/vitejs/vite/issues/23447">#23447</a>) (<a href="https://github.com/vitejs/vite/commit/4ec58d159df4a1b4799356a1fda62db88ed14752">4ec58d1</a>)</li> <li><strong>config:</strong> close bundles when generation fails (<a href="https://redirect.github.com/vitejs/vite/issues/23256">#23256</a>) (<a href="https://github.com/vitejs/vite/commit/6bacc956df5a76cc5653b9de4493453b953439fd">6bacc95</a>)</li> <li><strong>css:</strong> keep newline-separated srcset candidates intact (<a href="https://redirect.github.com/vitejs/vite/issues/23265">#23265</a>) (<a href="https://github.com/vitejs/vite/commit/4f9d2f4dadc83191200de7d2154c957a711e8c3d">4f9d2f4</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23337">#23337</a>) (<a href="https://github.com/vitejs/vite/commit/d55081581ddd4d55667fef38e85d02ab7f879f15">d550815</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23404">#23404</a>) (<a href="https://github.com/vitejs/vite/commit/238ad811c7fb9e4730cbd317d0657867ed3447b3">238ad81</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23338">#23338</a>) (<a href="https://github.com/vitejs/vite/commit/76e8082c56a2872dc8017c5672bc36cba8dcf75d">76e8082</a>)</li> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23405">#23405</a>) (<a href="https://github.com/vitejs/vite/commit/b88256607e3a051b7bcb0b338b3c4665926b55a8">b882566</a>)</li> <li><strong>dev:</strong> run closeBundle after buildEnd failure (<a href="https://redirect.github.com/vitejs/vite/issues/23165">#23165</a>) (<a href="https://github.com/vitejs/vite/commit/8cb872e7fb65b03f6068923c6aa7fcf3e71baf21">8cb872e</a>)</li> <li><strong>hmr:</strong> handle <code>import.meta.hot.invalidate</code> in virtual module (<a href="https://redirect.github.com/vitejs/vite/issues/23171">#23171</a>) (<a href="https://github.com/vitejs/vite/commit/616296895bd135386d35069a479a5f188c7de298">6162968</a>)</li> <li><strong>utils:</strong> handle dot in srcset density descriptor (<a href="https://redirect.github.com/vitejs/vite/issues/23346">#23346</a>) (<a href="https://github.com/vitejs/vite/commit/b50e1b4a3d66128a4076e19769b2e29657985516">b50e1b4</a>)</li> <li><strong>utils:</strong> match timestamp query parameter with proper delimiters (<a href="https://redirect.github.com/vitejs/vite/issues/23364">#23364</a>) (<a href="https://github.com/vitejs/vite/commit/41f3c6fff88ade015669cac5c42db946e0b6f5c9">41f3c6f</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>proxy:</strong> pre-compile context matchers at server creation (<a href="https://redirect.github.com/vitejs/vite/issues/23263">#23263</a>) (<a href="https://github.com/vitejs/vite/commit/8abf700eeb2411d8402d08f8e2696effafdbe774">8abf700</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li>introducing <code>@e18e/eslint-plugin</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23357">#23357</a>) (<a href="https://github.com/vitejs/vite/commit/f79413353995a2344879014410a9128b1b9f8e9a">f794133</a>)</li> <li>remove unnecessary comment (<a href="https://redirect.github.com/vitejs/vite/issues/23448">#23448</a>) (<a href="https://github.com/vitejs/vite/commit/b919a1a8b5a7c694667f993d677973f42d349458">b919a1a</a>)</li> <li>delete unused <code>PluginContainerOptions</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23382">#23382</a>) (<a href="https://github.com/vitejs/vite/commit/ee644014aab61e546742b862a7d7b0d6c7d67a7b">ee64401</a>)</li> <li>use oxfmt <code>sortImports</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23319">#23319</a>) (<a href="https://github.com/vitejs/vite/commit/97ad042170f4c71b518239723b733dd98e8e3e76">97ad042</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/95e8923f35d0252c9f6eb2d5e358c084542706f1"><code>95e8923</code></a> release: v7.3.1</li> <li><a href="https://github.com/vitejs/vite/commit/9d39d373a7b4e0a93322b70b9dbeb202af06af3e"><code>9d39d37</code></a> feat: add <code>ignoreOutdatedRequests</code> option to <code>optimizeDeps</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21364">#21364</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/acf7e05eaeb18e98f5e19e2d3e648950726f20d1"><code>acf7e05</code></a> release: v7.3.0</li> <li><a href="https://github.com/vitejs/vite/commit/cff26ec0fc13373d7125a5eac6cb01fe63fee4b1"><code>cff26ec</code></a> feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21183">#21183</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/317b3b272f9ef6faa647a51ab3b0768fecc1071d"><code>317b3b2</code></a> release: v7.2.7</li> <li><a href="https://github.com/vitejs/vite/commit/721f16343d9555ae8fc71a2e5354b22e12ff0dc3"><code>721f163</code></a> fix: plugin shortcut support (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21211">#21211</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/bda5dbb648fa7cf877ea9c76ba8a7da226b65cce"><code>bda5dbb</code></a> release: v7.2.6</li> <li><a href="https://github.com/vitejs/vite/commit/3aa7527fb4fc7dafe3ab57c41d637d2985c7bb6e"><code>3aa7527</code></a> release: v7.2.5</li> <li><a href="https://github.com/vitejs/vite/commit/72e398a46d8d2f54fbcbeb9ff0dceab346aeb642"><code>72e398a</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21175">#21175</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/3765f7baea36234bf3816eeed38776d27bfd3649"><code>3765f7b</code></a> fix: shortcuts not rebound after server restart (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21166">#21166</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=8.2.2&new-version=8.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-14 13:55:27 +00:00
dependabot[bot]	41106aaed1	chore(deps): Bump the react group with 4 updates (#2159 ) Bumps the react group with 4 updates: [react](https://github.com/react/react/tree/HEAD/packages/react), [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react), [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom). Updates `react` from 19.2.8 to 19.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react's releases</a>.</em></p> <blockquote> <h2>19.3.0 (September 9, 2026)</h2> <p>Below is a list of all new features, APIs, and bug fixes.</p> <p>Read the <a href="https://react.dev/blog/2026/09/09/react-19-3">React 19.3 release post</a> for more information.</p> <h2>New React Features</h2> <ul> <li><code><ViewTransition /></code>: Adds <code><ViewTransition /></code> and <code>addTransitionType</code> APIs to power View Transition animations in React (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/gaearon"><code>@gaearon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/31975">#31975</a>, <a href="https://redirect.github.com/facebook/react/pull/31987">#31987</a>, <a href="https://redirect.github.com/facebook/react/pull/31996">#31996</a>, <a href="https://redirect.github.com/facebook/react/pull/31999">#31999</a>, <a href="https://redirect.github.com/facebook/react/pull/32001">#32001</a>, <a href="https://redirect.github.com/facebook/react/pull/32002">#32002</a>, <a href="https://redirect.github.com/facebook/react/pull/32028">#32028</a>, <a href="https://redirect.github.com/facebook/react/pull/32029">#32029</a>, <a href="https://redirect.github.com/facebook/react/pull/32031">#32031</a>, <a href="https://redirect.github.com/facebook/react/pull/32034">#32034</a>, <a href="https://redirect.github.com/facebook/react/pull/32038">#32038</a>, <a href="https://redirect.github.com/facebook/react/pull/32041">#32041</a>, <a href="https://redirect.github.com/facebook/react/pull/32050">#32050</a>, <a href="https://redirect.github.com/facebook/react/pull/32090">#32090</a>, <a href="https://redirect.github.com/facebook/react/pull/32105">#32105</a>, <a href="https://redirect.github.com/facebook/react/pull/32254">#32254</a>, <a href="https://redirect.github.com/facebook/react/pull/32379">#32379</a>, <a href="https://redirect.github.com/facebook/react/pull/32422">#32422</a>, <a href="https://redirect.github.com/facebook/react/pull/32462">#32462</a>, <a href="https://redirect.github.com/facebook/react/pull/32540">#32540</a>, <a href="https://redirect.github.com/facebook/react/pull/32545">#32545</a>, <a href="https://redirect.github.com/facebook/react/pull/32585">#32585</a>, <a href="https://redirect.github.com/facebook/react/pull/32599">#32599</a>, <a href="https://redirect.github.com/facebook/react/pull/32611">#32611</a>, <a href="https://redirect.github.com/facebook/react/pull/32612">#32612</a>, <a href="https://redirect.github.com/facebook/react/pull/32617">#32617</a>, <a href="https://redirect.github.com/facebook/react/pull/32651">#32651</a>, <a href="https://redirect.github.com/facebook/react/pull/32653">#32653</a>, <a href="https://redirect.github.com/facebook/react/pull/32656">#32656</a>, <a href="https://redirect.github.com/facebook/react/pull/32664">#32664</a>, <a href="https://redirect.github.com/facebook/react/pull/32699">#32699</a>, <a href="https://redirect.github.com/facebook/react/pull/32723">#32723</a>, <a href="https://redirect.github.com/facebook/react/pull/32734">#32734</a>, <a href="https://redirect.github.com/facebook/react/pull/32751">#32751</a>, <a href="https://redirect.github.com/facebook/react/pull/32752">#32752</a>, <a href="https://redirect.github.com/facebook/react/pull/32760">#32760</a>, <a href="https://redirect.github.com/facebook/react/pull/32761">#32761</a>, <a href="https://redirect.github.com/facebook/react/pull/32764">#32764</a>, <a href="https://redirect.github.com/facebook/react/pull/32772">#32772</a>, <a href="https://redirect.github.com/facebook/react/pull/32790">#32790</a>, <a href="https://redirect.github.com/facebook/react/pull/32819">#32819</a>, <a href="https://redirect.github.com/facebook/react/pull/32820">#32820</a>, <a href="https://redirect.github.com/facebook/react/pull/32822">#32822</a>, <a href="https://redirect.github.com/facebook/react/pull/32833">#32833</a>, <a href="https://redirect.github.com/facebook/react/pull/32849">#32849</a>, <a href="https://redirect.github.com/facebook/react/pull/33094">#33094</a>, <a href="https://redirect.github.com/facebook/react/pull/33191">#33191</a>, <a href="https://redirect.github.com/facebook/react/pull/33200">#33200</a>, <a href="https://redirect.github.com/facebook/react/pull/33206">#33206</a>, <a href="https://redirect.github.com/facebook/react/pull/33293">#33293</a>, <a href="https://redirect.github.com/facebook/react/pull/33330">#33330</a>, <a href="https://redirect.github.com/facebook/react/pull/33331">#33331</a>, <a href="https://redirect.github.com/facebook/react/pull/33332">#33332</a>, <a href="https://redirect.github.com/facebook/react/pull/33357">#33357</a>, <a href="https://redirect.github.com/facebook/react/pull/33362">#33362</a>, <a href="https://redirect.github.com/facebook/react/pull/33433">#33433</a>, <a href="https://redirect.github.com/facebook/react/pull/33576">#33576</a>, <a href="https://redirect.github.com/facebook/react/pull/34374">#34374</a>, <a href="https://redirect.github.com/facebook/react/pull/34450">#34450</a>, <a href="https://redirect.github.com/facebook/react/pull/34481">#34481</a>, <a href="https://redirect.github.com/facebook/react/pull/34500">#34500</a>, <a href="https://redirect.github.com/facebook/react/pull/34502">#34502</a>, <a href="https://redirect.github.com/facebook/react/pull/34510">#34510</a>, <a href="https://redirect.github.com/facebook/react/pull/34511">#34511</a>, <a href="https://redirect.github.com/facebook/react/pull/34539">#34539</a>, <a href="https://redirect.github.com/facebook/react/pull/35567">#35567</a>, <a href="https://redirect.github.com/facebook/react/pull/35564">#35564</a>, <a href="https://redirect.github.com/facebook/react/pull/35485">#35485</a>, <a href="https://redirect.github.com/facebook/react/pull/35380">#35380</a>, <a href="https://redirect.github.com/facebook/react/pull/35063">#35063</a>, <a href="https://redirect.github.com/facebook/react/pull/35060">#35060</a>, <a href="https://redirect.github.com/facebook/react/pull/34676">#34676</a>, <a href="https://redirect.github.com/facebook/react/pull/36917">#36917</a>, <a href="https://redirect.github.com/facebook/react/pull/35337">#35337</a>, <a href="https://redirect.github.com/facebook/react/pull/35520">#35520</a>)</li> <li>Fragment Refs: Add Refs to <code><Fragment /></code> to support composable platform behavior (<a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>, <a href="https://github.com/Dhakshin2007"><code>@Dhakshin2007</code></a>, <a href="https://github.com/chirokas"><code>@chirokas</code></a>, <a href="https://github.com/teamleaderleo"><code>@teamleaderleo</code></a>, <a href="https://github.com/fallintoplace"><code>@fallintoplace</code></a>: <a href="https://redirect.github.com/facebook/react/pull/32465">#32465</a>, <a href="https://redirect.github.com/facebook/react/pull/32613">#32613</a>, <a href="https://redirect.github.com/facebook/react/pull/32619">#32619</a>, <a href="https://redirect.github.com/facebook/react/pull/32654">#32654</a>, <a href="https://redirect.github.com/facebook/react/pull/32660">#32660</a>, <a href="https://redirect.github.com/facebook/react/pull/32682">#32682</a>, <a href="https://redirect.github.com/facebook/react/pull/32722">#32722</a>, <a href="https://redirect.github.com/facebook/react/pull/32813">#32813</a>, <a href="https://redirect.github.com/facebook/react/pull/32814">#32814</a>, <a href="https://redirect.github.com/facebook/react/pull/33056">#33056</a>, <a href="https://redirect.github.com/facebook/react/pull/33058">#33058</a>, <a href="https://redirect.github.com/facebook/react/pull/33093">#33093</a>, <a href="https://redirect.github.com/facebook/react/pull/34069">#34069</a>, <a href="https://redirect.github.com/facebook/react/pull/34103">#34103</a>, <a href="https://redirect.github.com/facebook/react/pull/34544">#34544</a>, <a href="https://redirect.github.com/facebook/react/pull/34545">#34545</a>, <a href="https://redirect.github.com/facebook/react/pull/37062">#37062</a>, <a href="https://redirect.github.com/facebook/react/pull/37061">#37061</a>, <a href="https://redirect.github.com/facebook/react/pull/37060">#37060</a>, <a href="https://redirect.github.com/facebook/react/pull/36047">#36047</a>, <a href="https://redirect.github.com/facebook/react/pull/36010">#36010</a>, <a href="https://redirect.github.com/facebook/react/pull/35642">#35642</a>, <a href="https://redirect.github.com/facebook/react/pull/35641">#35641</a>, <a href="https://redirect.github.com/facebook/react/pull/35637">#35637</a>, <a href="https://redirect.github.com/facebook/react/pull/35630">#35630</a>, <a href="https://redirect.github.com/facebook/react/pull/34935">#34935</a>, <a href="https://redirect.github.com/facebook/react/pull/37457">#37457</a>, <a href="https://redirect.github.com/facebook/react/pull/37408">#37408</a>, <a href="https://redirect.github.com/facebook/react/pull/37326">#37326</a>, <a href="https://redirect.github.com/facebook/react/pull/37251">#37251</a>, <a href="https://redirect.github.com/facebook/react/pull/37171">#37171</a>, <a href="https://redirect.github.com/facebook/react/pull/37169">#37169</a>, <a href="https://redirect.github.com/facebook/react/pull/37168">#37168</a>, <a href="https://redirect.github.com/facebook/react/pull/37167">#37167</a>, <a href="https://redirect.github.com/facebook/react/pull/37166">#37166</a>, <a href="https://redirect.github.com/facebook/react/pull/37165">#37165</a>, <a href="https://redirect.github.com/facebook/react/pull/37164">#37164</a>, <a href="https://redirect.github.com/facebook/react/pull/37163">#37163</a>, <a href="https://redirect.github.com/facebook/react/pull/37162">#37162</a>, <a href="https://redirect.github.com/facebook/react/pull/37161">#37161</a>, <a href="https://redirect.github.com/facebook/react/pull/37160">#37160</a>, <a href="https://redirect.github.com/facebook/react/pull/37125">#37125</a>, <a href="https://redirect.github.com/facebook/react/pull/37063">#37063</a>)</li> </ul> <h2>New React DOM Features</h2> <ul> <li><code>browser()</code>: a new <code>react-dom</code> API that returns a usable which errors during server rendering and resolves in the browser. <code>use(browser())</code> inside a <code><Suspense></code> boundary marks a subtree as browser-only without reporting a recoverable error (<a href="https://github.com/gnoff"><code>@gnoff</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37143">#37143</a>, <a href="https://redirect.github.com/facebook/react/pull/37241">#37241</a>) <ul> <li>Added an <code>onBrowserBailout</code> option to the <code>react-dom/server</code> APIs to observe when a subtree defers to the browser (<a href="https://github.com/gnoff"><code>@gnoff</code></a> <a href="https://redirect.github.com/facebook/react/pull/37193">#37193</a>)</li> </ul> </li> </ul> <h2>Notable changes</h2> <ul> <li>Enable Trusted Types API integration (<a href="https://github.com/rickhanlonii"><code>@rickhanlonii</code></a> <a href="https://redirect.github.com/facebook/react/pull/35816">#35816</a>)</li> <li>Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/37290">#37290</a>)</li> <li>Added a DEV-only warning when a component appears to have been unblocked by calling <code>use()</code> conditionally (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37104">#37104</a>, <a href="https://redirect.github.com/facebook/react/pull/37203">#37203</a>, <a href="https://redirect.github.com/facebook/react/pull/37491">#37491</a>)</li> </ul> <h2>All Changes</h2> <h3>React</h3> <ul> <li>Fast Refresh Fixes <ul> <li>Fix Fast Refresh to find and remount edits to components wrapped behind <code>lazy()</code> (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36965">#36965</a>)</li> <li>Fix Fast Refresh so edits to a <code>memo()</code> comparison function take effect (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36964">#36964</a>)</li> <li>Fix Fast Refresh crash when an edit changes the kind of a component's type (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36963">#36963</a>)</li> <li>Unify hot reload type resolution for Fast Refresh (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36962">#36962</a>)</li> <li>Fix Fast Refresh to remount correctly when an edit changes the component kind (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36950">#36950</a>)</li> <li>Double invoke effects in StrictMode after Fast Refresh (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35962">#35962</a>)</li> </ul> </li> <li>Performance Track Fixes <ul> <li>Prevent crash when accessing <code>$$typeof</code> in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35679">#35679</a>)</li> <li>Handle non-string function names in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35659">#35659</a>)</li> <li>Use minus (<code>-</code>) instead of en dash for removed props in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35649">#35649</a>)</li> <li>Handle arrays with bigints in deep objects in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35648">#35648</a>)</li> <li>Don't enumerate typed array props in Performance Tracks in DEV (<a href="https://github.com/UditDewan"><code>@UditDewan</code></a> <a href="https://redirect.github.com/facebook/react/pull/36913">#36913</a>)</li> <li>Bail out of diffing wide objects and arrays in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/34742">#34742</a>)</li> <li>Clear potentially large performance measures in DEV (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a> <a href="https://redirect.github.com/facebook/react/pull/34803">#34803</a>)</li> <li>Fix missing else branch for renders with no props change in Performance Tracks (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a> <a href="https://redirect.github.com/facebook/react/pull/34837">#34837</a>)</li> </ul> </li> <li>Activity Fixes <ul> <li>Fix <code>useSyncExternalStore</code> missing store mutations that happened while an Activity tree was hidden (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36947">#36947</a>)</li> <li>Hide portal contents when an Activity is hidden (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/35091">#35091</a>)</li> <li>Prevent metadata hoisting in hidden <code><Activity></code> trees (<a href="https://github.com/ronnakamoto"><code>@ronnakamoto</code></a> <a href="https://redirect.github.com/facebook/react/pull/34983">#34983</a>)</li> <li>Prevent errors thrown inside a hidden Activity from escaping to the visible UI (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/35074">#35074</a>)</li> <li>Don't unhide a node if a direct parent Offscreen is still hidden (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a> <a href="https://redirect.github.com/facebook/react/pull/34821">#34821</a>)</li> <li>Don't show internal <code><Offscreen></code> component in error messages (<a href="https://github.com/rickhanlonii"><code>@rickhanlonii</code></a> <a href="https://redirect.github.com/facebook/react/pull/35763">#35763</a>)</li> </ul> </li> <li>Warn in DEV when a component appears to have been unblocked by a conditional <code>use()</code> (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37104">#37104</a>, <a href="https://redirect.github.com/facebook/react/pull/37203">#37203</a>, <a href="https://redirect.github.com/facebook/react/pull/37491">#37491</a>)</li> <li>Render transitions independently instead of entangling them into a single render (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/37290">#37290</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/react/react/blob/main/CHANGELOG.md">react's changelog</a>.</em></p> <blockquote> <h2>19.3.0 (September 9, 2026)</h2> <h3>New React Features</h3> <ul> <li><code><ViewTransition /></code>: Adds <code><ViewTransition /></code> and <code>addTransitionType</code> APIs to power View Transition animations in React (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/gaearon"><code>@gaearon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/31975">#31975</a>, <a href="https://redirect.github.com/facebook/react/pull/31987">#31987</a>, <a href="https://redirect.github.com/facebook/react/pull/31996">#31996</a>, <a href="https://redirect.github.com/facebook/react/pull/31999">#31999</a>, <a href="https://redirect.github.com/facebook/react/pull/32001">#32001</a>, <a href="https://redirect.github.com/facebook/react/pull/32002">#32002</a>, <a href="https://redirect.github.com/facebook/react/pull/32028">#32028</a>, <a href="https://redirect.github.com/facebook/react/pull/32029">#32029</a>, <a href="https://redirect.github.com/facebook/react/pull/32031">#32031</a>, <a href="https://redirect.github.com/facebook/react/pull/32034">#32034</a>, <a href="https://redirect.github.com/facebook/react/pull/32038">#32038</a>, <a href="https://redirect.github.com/facebook/react/pull/32041">#32041</a>, <a href="https://redirect.github.com/facebook/react/pull/32050">#32050</a>, <a href="https://redirect.github.com/facebook/react/pull/32090">#32090</a>, <a href="https://redirect.github.com/facebook/react/pull/32105">#32105</a>, <a href="https://redirect.github.com/facebook/react/pull/32254">#32254</a>, <a href="https://redirect.github.com/facebook/react/pull/32379">#32379</a>, <a href="https://redirect.github.com/facebook/react/pull/32422">#32422</a>, <a href="https://redirect.github.com/facebook/react/pull/32462">#32462</a>, <a href="https://redirect.github.com/facebook/react/pull/32540">#32540</a>, <a href="https://redirect.github.com/facebook/react/pull/32545">#32545</a>, <a href="https://redirect.github.com/facebook/react/pull/32585">#32585</a>, <a href="https://redirect.github.com/facebook/react/pull/32599">#32599</a>, <a href="https://redirect.github.com/facebook/react/pull/32611">#32611</a>, <a href="https://redirect.github.com/facebook/react/pull/32612">#32612</a>, <a href="https://redirect.github.com/facebook/react/pull/32617">#32617</a>, <a href="https://redirect.github.com/facebook/react/pull/32651">#32651</a>, <a href="https://redirect.github.com/facebook/react/pull/32653">#32653</a>, <a href="https://redirect.github.com/facebook/react/pull/32656">#32656</a>, <a href="https://redirect.github.com/facebook/react/pull/32664">#32664</a>, <a href="https://redirect.github.com/facebook/react/pull/32699">#32699</a>, <a href="https://redirect.github.com/facebook/react/pull/32723">#32723</a>, <a href="https://redirect.github.com/facebook/react/pull/32734">#32734</a>, <a href="https://redirect.github.com/facebook/react/pull/32751">#32751</a>, <a href="https://redirect.github.com/facebook/react/pull/32752">#32752</a>, <a href="https://redirect.github.com/facebook/react/pull/32760">#32760</a>, <a href="https://redirect.github.com/facebook/react/pull/32761">#32761</a>, <a href="https://redirect.github.com/facebook/react/pull/32764">#32764</a>, <a href="https://redirect.github.com/facebook/react/pull/32772">#32772</a>, <a href="https://redirect.github.com/facebook/react/pull/32790">#32790</a>, <a href="https://redirect.github.com/facebook/react/pull/32819">#32819</a>, <a href="https://redirect.github.com/facebook/react/pull/32820">#32820</a>, <a href="https://redirect.github.com/facebook/react/pull/32822">#32822</a>, <a href="https://redirect.github.com/facebook/react/pull/32833">#32833</a>, <a href="https://redirect.github.com/facebook/react/pull/32849">#32849</a>, <a href="https://redirect.github.com/facebook/react/pull/33094">#33094</a>, <a href="https://redirect.github.com/facebook/react/pull/33191">#33191</a>, <a href="https://redirect.github.com/facebook/react/pull/33200">#33200</a>, <a href="https://redirect.github.com/facebook/react/pull/33206">#33206</a>, <a href="https://redirect.github.com/facebook/react/pull/33293">#33293</a>, <a href="https://redirect.github.com/facebook/react/pull/33330">#33330</a>, <a href="https://redirect.github.com/facebook/react/pull/33331">#33331</a>, <a href="https://redirect.github.com/facebook/react/pull/33332">#33332</a>, <a href="https://redirect.github.com/facebook/react/pull/33357">#33357</a>, <a href="https://redirect.github.com/facebook/react/pull/33362">#33362</a>, <a href="https://redirect.github.com/facebook/react/pull/33433">#33433</a>, <a href="https://redirect.github.com/facebook/react/pull/33576">#33576</a>, <a href="https://redirect.github.com/facebook/react/pull/34374">#34374</a>, <a href="https://redirect.github.com/facebook/react/pull/34450">#34450</a>, <a href="https://redirect.github.com/facebook/react/pull/34481">#34481</a>, <a href="https://redirect.github.com/facebook/react/pull/34500">#34500</a>, <a href="https://redirect.github.com/facebook/react/pull/34502">#34502</a>, <a href="https://redirect.github.com/facebook/react/pull/34510">#34510</a>, <a href="https://redirect.github.com/facebook/react/pull/34511">#34511</a>, <a href="https://redirect.github.com/facebook/react/pull/34539">#34539</a>, <a href="https://redirect.github.com/facebook/react/pull/35567">#35567</a>, <a href="https://redirect.github.com/facebook/react/pull/35564">#35564</a>, <a href="https://redirect.github.com/facebook/react/pull/35485">#35485</a>, <a href="https://redirect.github.com/facebook/react/pull/35380">#35380</a>, <a href="https://redirect.github.com/facebook/react/pull/35063">#35063</a>, <a href="https://redirect.github.com/facebook/react/pull/35060">#35060</a>, <a href="https://redirect.github.com/facebook/react/pull/34676">#34676</a>, <a href="https://redirect.github.com/facebook/react/pull/36917">#36917</a>, <a href="https://redirect.github.com/facebook/react/pull/35337">#35337</a>, <a href="https://redirect.github.com/facebook/react/pull/35520">#35520</a>)</li> <li>Fragment Refs: Add Refs to <code><Fragment /></code> to support composable platform behavior (<a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>, <a href="https://github.com/Dhakshin2007"><code>@Dhakshin2007</code></a>, <a href="https://github.com/chirokas"><code>@chirokas</code></a>, <a href="https://github.com/teamleaderleo"><code>@teamleaderleo</code></a>, <a href="https://github.com/fallintoplace"><code>@fallintoplace</code></a>: <a href="https://redirect.github.com/facebook/react/pull/32465">#32465</a>, <a href="https://redirect.github.com/facebook/react/pull/32613">#32613</a>, <a href="https://redirect.github.com/facebook/react/pull/32619">#32619</a>, <a href="https://redirect.github.com/facebook/react/pull/32654">#32654</a>, <a href="https://redirect.github.com/facebook/react/pull/32660">#32660</a>, <a href="https://redirect.github.com/facebook/react/pull/32682">#32682</a>, <a href="https://redirect.github.com/facebook/react/pull/32722">#32722</a>, <a href="https://redirect.github.com/facebook/react/pull/32813">#32813</a>, <a href="https://redirect.github.com/facebook/react/pull/32814">#32814</a>, <a href="https://redirect.github.com/facebook/react/pull/33056">#33056</a>, <a href="https://redirect.github.com/facebook/react/pull/33058">#33058</a>, <a href="https://redirect.github.com/facebook/react/pull/33093">#33093</a>, <a href="https://redirect.github.com/facebook/react/pull/34069">#34069</a>, <a href="https://redirect.github.com/facebook/react/pull/34103">#34103</a>, <a href="https://redirect.github.com/facebook/react/pull/34544">#34544</a>, <a href="https://redirect.github.com/facebook/react/pull/34545">#34545</a>, <a href="https://redirect.github.com/facebook/react/pull/37062">#37062</a>, <a href="https://redirect.github.com/facebook/react/pull/37061">#37061</a>, <a href="https://redirect.github.com/facebook/react/pull/37060">#37060</a>, <a href="https://redirect.github.com/facebook/react/pull/36047">#36047</a>, <a href="https://redirect.github.com/facebook/react/pull/36010">#36010</a>, <a href="https://redirect.github.com/facebook/react/pull/35642">#35642</a>, <a href="https://redirect.github.com/facebook/react/pull/35641">#35641</a>, <a href="https://redirect.github.com/facebook/react/pull/35637">#35637</a>, <a href="https://redirect.github.com/facebook/react/pull/35630">#35630</a>, <a href="https://redirect.github.com/facebook/react/pull/34935">#34935</a>, <a href="https://redirect.github.com/facebook/react/pull/37457">#37457</a>, <a href="https://redirect.github.com/facebook/react/pull/37408">#37408</a>, <a href="https://redirect.github.com/facebook/react/pull/37326">#37326</a>, <a href="https://redirect.github.com/facebook/react/pull/37251">#37251</a>, <a href="https://redirect.github.com/facebook/react/pull/37171">#37171</a>, <a href="https://redirect.github.com/facebook/react/pull/37169">#37169</a>, <a href="https://redirect.github.com/facebook/react/pull/37168">#37168</a>, <a href="https://redirect.github.com/facebook/react/pull/37167">#37167</a>, <a href="https://redirect.github.com/facebook/react/pull/37166">#37166</a>, <a href="https://redirect.github.com/facebook/react/pull/37165">#37165</a>, <a href="https://redirect.github.com/facebook/react/pull/37164">#37164</a>, <a href="https://redirect.github.com/facebook/react/pull/37163">#37163</a>, <a href="https://redirect.github.com/facebook/react/pull/37162">#37162</a>, <a href="https://redirect.github.com/facebook/react/pull/37161">#37161</a>, <a href="https://redirect.github.com/facebook/react/pull/37160">#37160</a>, <a href="https://redirect.github.com/facebook/react/pull/37125">#37125</a>, <a href="https://redirect.github.com/facebook/react/pull/37063">#37063</a>)</li> </ul> <h3>New React DOM Features</h3> <ul> <li><code>browser()</code>: a new <code>react-dom</code> API that returns a usable which errors during server rendering and resolves in the browser. <code>use(browser())</code> inside a <code><Suspense></code> boundary marks a subtree as browser-only without reporting a recoverable error (<a href="https://github.com/gnoff"><code>@gnoff</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37143">#37143</a>, <a href="https://redirect.github.com/facebook/react/pull/37241">#37241</a>) <ul> <li>Added an <code>onBrowserBailout</code> option to the <code>react-dom/server</code> APIs to observe when a subtree defers to the browser (<a href="https://github.com/gnoff"><code>@gnoff</code></a> <a href="https://redirect.github.com/facebook/react/pull/37193">#37193</a>)</li> </ul> </li> </ul> <h3>Notable changes</h3> <ul> <li>Enable Trusted Types API integration (<a href="https://github.com/rickhanlonii"><code>@rickhanlonii</code></a> <a href="https://redirect.github.com/facebook/react/pull/35816">#35816</a>)</li> <li>Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/37290">#37290</a>)</li> <li>Added a DEV-only warning when a component appears to have been unblocked by calling <code>use()</code> conditionally (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37104">#37104</a>, <a href="https://redirect.github.com/facebook/react/pull/37203">#37203</a>, <a href="https://redirect.github.com/facebook/react/pull/37491">#37491</a>)</li> </ul> <h3>All Changes</h3> <h4>React</h4> <ul> <li>Fast Refresh Fixes <ul> <li>Fix Fast Refresh to find and remount edits to components wrapped behind <code>lazy()</code> (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36965">#36965</a>)</li> <li>Fix Fast Refresh so edits to a <code>memo()</code> comparison function take effect (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36964">#36964</a>)</li> <li>Fix Fast Refresh crash when an edit changes the kind of a component's type (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36963">#36963</a>)</li> <li>Unify hot reload type resolution for Fast Refresh (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36962">#36962</a>)</li> <li>Fix Fast Refresh to remount correctly when an edit changes the component kind (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36950">#36950</a>)</li> <li>Double invoke effects in StrictMode after Fast Refresh (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35962">#35962</a>)</li> </ul> </li> <li>Performance Track Fixes <ul> <li>Prevent crash when accessing <code>$$typeof</code> in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35679">#35679</a>)</li> <li>Handle non-string function names in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35659">#35659</a>)</li> <li>Use minus (<code>-</code>) instead of en dash for removed props in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35649">#35649</a>)</li> <li>Handle arrays with bigints in deep objects in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35648">#35648</a>)</li> <li>Don't enumerate typed array props in Performance Tracks in DEV (<a href="https://github.com/UditDewan"><code>@UditDewan</code></a> <a href="https://redirect.github.com/facebook/react/pull/36913">#36913</a>)</li> <li>Bail out of diffing wide objects and arrays in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/34742">#34742</a>)</li> <li>Clear potentially large performance measures in DEV (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a> <a href="https://redirect.github.com/facebook/react/pull/34803">#34803</a>)</li> <li>Fix missing else branch for renders with no props change in Performance Tracks (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a> <a href="https://redirect.github.com/facebook/react/pull/34837">#34837</a>)</li> </ul> </li> <li>Activity Fixes <ul> <li>Fix <code>useSyncExternalStore</code> missing store mutations that happened while an Activity tree was hidden (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36947">#36947</a>)</li> <li>Hide portal contents when an Activity is hidden (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/35091">#35091</a>)</li> <li>Prevent metadata hoisting in hidden <code><Activity></code> trees (<a href="https://github.com/ronnakamoto"><code>@ronnakamoto</code></a> <a href="https://redirect.github.com/facebook/react/pull/34983">#34983</a>)</li> <li>Prevent errors thrown inside a hidden Activity from escaping to the visible UI (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/35074">#35074</a>)</li> <li>Don't unhide a node if a direct parent Offscreen is still hidden (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a> <a href="https://redirect.github.com/facebook/react/pull/34821">#34821</a>)</li> <li>Don't show internal <code><Offscreen></code> component in error messages (<a href="https://github.com/rickhanlonii"><code>@rickhanlonii</code></a> <a href="https://redirect.github.com/facebook/react/pull/35763">#35763</a>)</li> </ul> </li> <li>Warn in DEV when a component appears to have been unblocked by a conditional <code>use()</code> (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37104">#37104</a>, <a href="https://redirect.github.com/facebook/react/pull/37203">#37203</a>, <a href="https://redirect.github.com/facebook/react/pull/37491">#37491</a>)</li> <li>Render transitions independently instead of entangling them into a single render (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/37290">#37290</a>)</li> <li>Fix hang when updating a dehydrated boundary inside a hidden tree (<a href="https://github.com/gaearon"><code>@gaearon</code></a> <a href="https://redirect.github.com/facebook/react/pull/37135">#37135</a>)</li> <li>Don't reacquire Host Singletons during dev effect validation (<a href="https://github.com/gnoff"><code>@gnoff</code></a> <a href="https://redirect.github.com/facebook/react/pull/37113">#37113</a>)</li> <li>Only remove properties from Host Singletons on release (<a href="https://github.com/gnoff"><code>@gnoff</code></a> <a href="https://redirect.github.com/facebook/react/pull/37112">#37112</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react/react/commit/2dc7da790d6388b95b83198ca9b588b2ad5f5c0b"><code>2dc7da7</code></a> [test] Bump Jest to 30.4 (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/37382">#37382</a>)</li> <li><a href="https://github.com/react/react/commit/4f9389423b7319e1f7acc3d158c84a8365462748"><code>4f93894</code></a> docs: remove stale parentType param from validateChildKeys JSDoc (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36928">#36928</a>)</li> <li><a href="https://github.com/react/react/commit/dbc37501ffeaf8fec45af5898caf1c3d64ad10bf"><code>dbc3750</code></a> Update required references to GitHub repo (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36752">#36752</a>)</li> <li><a href="https://github.com/react/react/commit/900ae094d85b11c67d53dd14af50a2bda5db4495"><code>900ae09</code></a> [flow] Bump flow to v0.317.0 (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36701">#36701</a>)</li> <li><a href="https://github.com/react/react/commit/fbb137059e4aacfaab1d36516e9b55050b4a0454"><code>fbb1370</code></a> [flow] Bump flow to v0.307.1 (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36199">#36199</a>)</li> <li><a href="https://github.com/react/react/commit/56922cf751fab6c7ab4c12ddbbd15839959fa255"><code>56922cf</code></a> [react-native-renderer] Delete Paper (legacy) renderer (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36285">#36285</a>)</li> <li><a href="https://github.com/react/react/commit/74568e8627aa43469b74f2972f427a209639d0b6"><code>74568e8</code></a> [Flight] Transport <code>AggregateErrors.errors</code> (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36156">#36156</a>)</li> <li><a href="https://github.com/react/react/commit/e66ef6480ecd19c6885f2c06dec34fec1fdc0a98"><code>e66ef64</code></a> [tests] remove withoutStack from assertConsole helpers (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/35498">#35498</a>)</li> <li><a href="https://github.com/react/react/commit/db71391c5c70dc113560d1c23d0b6548604d827f"><code>db71391</code></a> [Fiber] Instrument the lazy initializer thenable in all cases (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/35521">#35521</a>)</li> <li><a href="https://github.com/react/react/commit/3e1abcc8d7083a13adf4774feb0d67ecbe4a2bc4"><code>3e1abcc</code></a> [tests] Require exact error messages in assertConsole helpers (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/35497">#35497</a>)</li> <li>Additional commits viewable in <a href="https://github.com/react/react/commits/v19.3.0/packages/react">compare view</a></li> </ul> </details> <br /> Updates `@types/react` from 19.2.18 to 19.3.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare view</a></li> </ul> </details> <br /> Updates `react-dom` from 19.2.8 to 19.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react-dom's releases</a>.</em></p> <blockquote> <h2>19.3.0 (September 9, 2026)</h2> <p>Below is a list of all new features, APIs, and bug fixes.</p> <p>Read the <a href="https://react.dev/blog/2026/09/09/react-19-3">React 19.3 release post</a> for more information.</p> <h2>New React Features</h2> <ul> <li><code><ViewTransition /></code>: Adds <code><ViewTransition /></code> and <code>addTransitionType</code> APIs to power View Transition animations in React (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/gaearon"><code>@gaearon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/31975">#31975</a>, <a href="https://redirect.github.com/facebook/react/pull/31987">#31987</a>, <a href="https://redirect.github.com/facebook/react/pull/31996">#31996</a>, <a href="https://redirect.github.com/facebook/react/pull/31999">#31999</a>, <a href="https://redirect.github.com/facebook/react/pull/32001">#32001</a>, <a href="https://redirect.github.com/facebook/react/pull/32002">#32002</a>, <a href="https://redirect.github.com/facebook/react/pull/32028">#32028</a>, <a href="https://redirect.github.com/facebook/react/pull/32029">#32029</a>, <a href="https://redirect.github.com/facebook/react/pull/32031">#32031</a>, <a href="https://redirect.github.com/facebook/react/pull/32034">#32034</a>, <a href="https://redirect.github.com/facebook/react/pull/32038">#32038</a>, <a href="https://redirect.github.com/facebook/react/pull/32041">#32041</a>, <a href="https://redirect.github.com/facebook/react/pull/32050">#32050</a>, <a href="https://redirect.github.com/facebook/react/pull/32090">#32090</a>, <a href="https://redirect.github.com/facebook/react/pull/32105">#32105</a>, <a href="https://redirect.github.com/facebook/react/pull/32254">#32254</a>, <a href="https://redirect.github.com/facebook/react/pull/32379">#32379</a>, <a href="https://redirect.github.com/facebook/react/pull/32422">#32422</a>, <a href="https://redirect.github.com/facebook/react/pull/32462">#32462</a>, <a href="https://redirect.github.com/facebook/react/pull/32540">#32540</a>, <a href="https://redirect.github.com/facebook/react/pull/32545">#32545</a>, <a href="https://redirect.github.com/facebook/react/pull/32585">#32585</a>, <a href="https://redirect.github.com/facebook/react/pull/32599">#32599</a>, <a href="https://redirect.github.com/facebook/react/pull/32611">#32611</a>, <a href="https://redirect.github.com/facebook/react/pull/32612">#32612</a>, <a href="https://redirect.github.com/facebook/react/pull/32617">#32617</a>, <a href="https://redirect.github.com/facebook/react/pull/32651">#32651</a>, <a href="https://redirect.github.com/facebook/react/pull/32653">#32653</a>, <a href="https://redirect.github.com/facebook/react/pull/32656">#32656</a>, <a href="https://redirect.github.com/facebook/react/pull/32664">#32664</a>, <a href="https://redirect.github.com/facebook/react/pull/32699">#32699</a>, <a href="https://redirect.github.com/facebook/react/pull/32723">#32723</a>, <a href="https://redirect.github.com/facebook/react/pull/32734">#32734</a>, <a href="https://redirect.github.com/facebook/react/pull/32751">#32751</a>, <a href="https://redirect.github.com/facebook/react/pull/32752">#32752</a>, <a href="https://redirect.github.com/facebook/react/pull/32760">#32760</a>, <a href="https://redirect.github.com/facebook/react/pull/32761">#32761</a>, <a href="https://redirect.github.com/facebook/react/pull/32764">#32764</a>, <a href="https://redirect.github.com/facebook/react/pull/32772">#32772</a>, <a href="https://redirect.github.com/facebook/react/pull/32790">#32790</a>, <a href="https://redirect.github.com/facebook/react/pull/32819">#32819</a>, <a href="https://redirect.github.com/facebook/react/pull/32820">#32820</a>, <a href="https://redirect.github.com/facebook/react/pull/32822">#32822</a>, <a href="https://redirect.github.com/facebook/react/pull/32833">#32833</a>, <a href="https://redirect.github.com/facebook/react/pull/32849">#32849</a>, <a href="https://redirect.github.com/facebook/react/pull/33094">#33094</a>, <a href="https://redirect.github.com/facebook/react/pull/33191">#33191</a>, <a href="https://redirect.github.com/facebook/react/pull/33200">#33200</a>, <a href="https://redirect.github.com/facebook/react/pull/33206">#33206</a>, <a href="https://redirect.github.com/facebook/react/pull/33293">#33293</a>, <a href="https://redirect.github.com/facebook/react/pull/33330">#33330</a>, <a href="https://redirect.github.com/facebook/react/pull/33331">#33331</a>, <a href="https://redirect.github.com/facebook/react/pull/33332">#33332</a>, <a href="https://redirect.github.com/facebook/react/pull/33357">#33357</a>, <a href="https://redirect.github.com/facebook/react/pull/33362">#33362</a>, <a href="https://redirect.github.com/facebook/react/pull/33433">#33433</a>, <a href="https://redirect.github.com/facebook/react/pull/33576">#33576</a>, <a href="https://redirect.github.com/facebook/react/pull/34374">#34374</a>, <a href="https://redirect.github.com/facebook/react/pull/34450">#34450</a>, <a href="https://redirect.github.com/facebook/react/pull/34481">#34481</a>, <a href="https://redirect.github.com/facebook/react/pull/34500">#34500</a>, <a href="https://redirect.github.com/facebook/react/pull/34502">#34502</a>, <a href="https://redirect.github.com/facebook/react/pull/34510">#34510</a>, <a href="https://redirect.github.com/facebook/react/pull/34511">#34511</a>, <a href="https://redirect.github.com/facebook/react/pull/34539">#34539</a>, <a href="https://redirect.github.com/facebook/react/pull/35567">#35567</a>, <a href="https://redirect.github.com/facebook/react/pull/35564">#35564</a>, <a href="https://redirect.github.com/facebook/react/pull/35485">#35485</a>, <a href="https://redirect.github.com/facebook/react/pull/35380">#35380</a>, <a href="https://redirect.github.com/facebook/react/pull/35063">#35063</a>, <a href="https://redirect.github.com/facebook/react/pull/35060">#35060</a>, <a href="https://redirect.github.com/facebook/react/pull/34676">#34676</a>, <a href="https://redirect.github.com/facebook/react/pull/36917">#36917</a>, <a href="https://redirect.github.com/facebook/react/pull/35337">#35337</a>, <a href="https://redirect.github.com/facebook/react/pull/35520">#35520</a>)</li> <li>Fragment Refs: Add Refs to <code><Fragment /></code> to support composable platform behavior (<a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>, <a href="https://github.com/Dhakshin2007"><code>@Dhakshin2007</code></a>, <a href="https://github.com/chirokas"><code>@chirokas</code></a>, <a href="https://github.com/teamleaderleo"><code>@teamleaderleo</code></a>, <a href="https://github.com/fallintoplace"><code>@fallintoplace</code></a>: <a href="https://redirect.github.com/facebook/react/pull/32465">#32465</a>, <a href="https://redirect.github.com/facebook/react/pull/32613">#32613</a>, <a href="https://redirect.github.com/facebook/react/pull/32619">#32619</a>, <a href="https://redirect.github.com/facebook/react/pull/32654">#32654</a>, <a href="https://redirect.github.com/facebook/react/pull/32660">#32660</a>, <a href="https://redirect.github.com/facebook/react/pull/32682">#32682</a>, <a href="https://redirect.github.com/facebook/react/pull/32722">#32722</a>, <a href="https://redirect.github.com/facebook/react/pull/32813">#32813</a>, <a href="https://redirect.github.com/facebook/react/pull/32814">#32814</a>, <a href="https://redirect.github.com/facebook/react/pull/33056">#33056</a>, <a href="https://redirect.github.com/facebook/react/pull/33058">#33058</a>, <a href="https://redirect.github.com/facebook/react/pull/33093">#33093</a>, <a href="https://redirect.github.com/facebook/react/pull/34069">#34069</a>, <a href="https://redirect.github.com/facebook/react/pull/34103">#34103</a>, <a href="https://redirect.github.com/facebook/react/pull/34544">#34544</a>, <a href="https://redirect.github.com/facebook/react/pull/34545">#34545</a>, <a href="https://redirect.github.com/facebook/react/pull/37062">#37062</a>, <a href="https://redirect.github.com/facebook/react/pull/37061">#37061</a>, <a href="https://redirect.github.com/facebook/react/pull/37060">#37060</a>, <a href="https://redirect.github.com/facebook/react/pull/36047">#36047</a>, <a href="https://redirect.github.com/facebook/react/pull/36010">#36010</a>, <a href="https://redirect.github.com/facebook/react/pull/35642">#35642</a>, <a href="https://redirect.github.com/facebook/react/pull/35641">#35641</a>, <a href="https://redirect.github.com/facebook/react/pull/35637">#35637</a>, <a href="https://redirect.github.com/facebook/react/pull/35630">#35630</a>, <a href="https://redirect.github.com/facebook/react/pull/34935">#34935</a>, <a href="https://redirect.github.com/facebook/react/pull/37457">#37457</a>, <a href="https://redirect.github.com/facebook/react/pull/37408">#37408</a>, <a href="https://redirect.github.com/facebook/react/pull/37326">#37326</a>, <a href="https://redirect.github.com/facebook/react/pull/37251">#37251</a>, <a href="https://redirect.github.com/facebook/react/pull/37171">#37171</a>, <a href="https://redirect.github.com/facebook/react/pull/37169">#37169</a>, <a href="https://redirect.github.com/facebook/react/pull/37168">#37168</a>, <a href="https://redirect.github.com/facebook/react/pull/37167">#37167</a>, <a href="https://redirect.github.com/facebook/react/pull/37166">#37166</a>, <a href="https://redirect.github.com/facebook/react/pull/37165">#37165</a>, <a href="https://redirect.github.com/facebook/react/pull/37164">#37164</a>, <a href="https://redirect.github.com/facebook/react/pull/37163">#37163</a>, <a href="https://redirect.github.com/facebook/react/pull/37162">#37162</a>, <a href="https://redirect.github.com/facebook/react/pull/37161">#37161</a>, <a href="https://redirect.github.com/facebook/react/pull/37160">#37160</a>, <a href="https://redirect.github.com/facebook/react/pull/37125">#37125</a>, <a href="https://redirect.github.com/facebook/react/pull/37063">#37063</a>)</li> </ul> <h2>New React DOM Features</h2> <ul> <li><code>browser()</code>: a new <code>react-dom</code> API that returns a usable which errors during server rendering and resolves in the browser. <code>use(browser())</code> inside a <code><Suspense></code> boundary marks a subtree as browser-only without reporting a recoverable error (<a href="https://github.com/gnoff"><code>@gnoff</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37143">#37143</a>, <a href="https://redirect.github.com/facebook/react/pull/37241">#37241</a>) <ul> <li>Added an <code>onBrowserBailout</code> option to the <code>react-dom/server</code> APIs to observe when a subtree defers to the browser (<a href="https://github.com/gnoff"><code>@gnoff</code></a> <a href="https://redirect.github.com/facebook/react/pull/37193">#37193</a>)</li> </ul> </li> </ul> <h2>Notable changes</h2> <ul> <li>Enable Trusted Types API integration (<a href="https://github.com/rickhanlonii"><code>@rickhanlonii</code></a> <a href="https://redirect.github.com/facebook/react/pull/35816">#35816</a>)</li> <li>Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/37290">#37290</a>)</li> <li>Added a DEV-only warning when a component appears to have been unblocked by calling <code>use()</code> conditionally (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37104">#37104</a>, <a href="https://redirect.github.com/facebook/react/pull/37203">#37203</a>, <a href="https://redirect.github.com/facebook/react/pull/37491">#37491</a>)</li> </ul> <h2>All Changes</h2> <h3>React</h3> <ul> <li>Fast Refresh Fixes <ul> <li>Fix Fast Refresh to find and remount edits to components wrapped behind <code>lazy()</code> (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36965">#36965</a>)</li> <li>Fix Fast Refresh so edits to a <code>memo()</code> comparison function take effect (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36964">#36964</a>)</li> <li>Fix Fast Refresh crash when an edit changes the kind of a component's type (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36963">#36963</a>)</li> <li>Unify hot reload type resolution for Fast Refresh (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36962">#36962</a>)</li> <li>Fix Fast Refresh to remount correctly when an edit changes the component kind (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36950">#36950</a>)</li> <li>Double invoke effects in StrictMode after Fast Refresh (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35962">#35962</a>)</li> </ul> </li> <li>Performance Track Fixes <ul> <li>Prevent crash when accessing <code>$$typeof</code> in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35679">#35679</a>)</li> <li>Handle non-string function names in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35659">#35659</a>)</li> <li>Use minus (<code>-</code>) instead of en dash for removed props in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35649">#35649</a>)</li> <li>Handle arrays with bigints in deep objects in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/35648">#35648</a>)</li> <li>Don't enumerate typed array props in Performance Tracks in DEV (<a href="https://github.com/UditDewan"><code>@UditDewan</code></a> <a href="https://redirect.github.com/facebook/react/pull/36913">#36913</a>)</li> <li>Bail out of diffing wide objects and arrays in Performance Tracks (<a href="https://github.com/eps1lon"><code>@eps1lon</code></a> <a href="https://redirect.github.com/facebook/react/pull/34742">#34742</a>)</li> <li>Clear potentially large performance measures in DEV (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a> <a href="https://redirect.github.com/facebook/react/pull/34803">#34803</a>)</li> <li>Fix missing else branch for renders with no props change in Performance Tracks (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a> <a href="https://redirect.github.com/facebook/react/pull/34837">#34837</a>)</li> </ul> </li> <li>Activity Fixes <ul> <li>Fix <code>useSyncExternalStore</code> missing store mutations that happened while an Activity tree was hidden (<a href="https://github.com/sophiebits"><code>@sophiebits</code></a> <a href="https://redirect.github.com/facebook/react/pull/36947">#36947</a>)</li> <li>Hide portal contents when an Activity is hidden (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/35091">#35091</a>)</li> <li>Prevent metadata hoisting in hidden <code><Activity></code> trees (<a href="https://github.com/ronnakamoto"><code>@ronnakamoto</code></a> <a href="https://redirect.github.com/facebook/react/pull/34983">#34983</a>)</li> <li>Prevent errors thrown inside a hidden Activity from escaping to the visible UI (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/35074">#35074</a>)</li> <li>Don't unhide a node if a direct parent Offscreen is still hidden (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a> <a href="https://redirect.github.com/facebook/react/pull/34821">#34821</a>)</li> <li>Don't show internal <code><Offscreen></code> component in error messages (<a href="https://github.com/rickhanlonii"><code>@rickhanlonii</code></a> <a href="https://redirect.github.com/facebook/react/pull/35763">#35763</a>)</li> </ul> </li> <li>Warn in DEV when a component appears to have been unblocked by a conditional <code>use()</code> (<a href="https://github.com/hoxyq"><code>@hoxyq</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/37104">#37104</a>, <a href="https://redirect.github.com/facebook/react/pull/37203">#37203</a>, <a href="https://redirect.github.com/facebook/react/pull/37491">#37491</a>)</li> <li>Render transitions independently instead of entangling them into a single render (<a href="https://github.com/acdlite"><code>@acdlite</code></a> <a href="https://redirect.github.com/facebook/react/pull/37290">#37290</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/react/react/blob/main/CHANGELOG.md">react-dom's changelog</a>.</em></p> <blockquote> <h2>19.3.0 (September 9, 2026)</h2> <h3>New React Features</h3> <ul> <li><code><ViewTransition /></code>: Adds <code><ViewTransition /></code> and <code>addTransitionType</code> APIs to power View Transition animations in React (<a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/gaearon"><code>@gaearon</code></a>: <a href="https://redirect.github.com/facebook/react/pull/31975">#31975</a>, <a href="https://redirect.github.com/facebook/react/pull/31987">#31987</a>, <a href="https://redirect.github.com/facebook/react/pull/31996">#31996</a>, <a href="https://redirect.github.com/facebook/react/pull/31999">#31999</a>, <a href="https://redirect.github.com/facebook/react/pull/32001">#32001</a>, <a href="https://redirect.github.com/facebook/react/pull/32002">#32002</a>, <a href="https://redirect.github.com/facebook/react/pull/32028">#32028</a>, <a href="https://redirect.github.com/facebook/react/pull/32029">#32029</a>, <a href="https://redirect.github.com/facebook/react/pull/32031">#32031</a>, <a href="https://redirect.github.com/facebook/react/pull/32034">#32034</a>, <a href="https://redirect.github.com/facebook/react/pull/32038">#32038</a>, <a href="https://redirect.github.com/facebook/react/pull/32041">#32041</a>, <a href="https://redirect.github.com/facebook/react/pull/32050">#32050</a>, <a href="https://redirect.github.com/facebook/react/pull/32090">#32090</a>, <a href="https://redirect.github.com/facebook/react/pull/32105">#32105</a>, <a href="https://redirect.github.com/facebook/react/pull/32254">#32254</a>, <a href="https://redirect.github.com/facebook/react/pull/32379">#32379</a>, <a href="https://redirect.github.com/facebook/react/pull/32422">#32422</a>, <a href="https://redirect.github.com/facebook/react/pull/32462">#32462</a>, <a href="https://redirect.github.com/facebook/react/pull/32540">#32540</a>, <a href="https://redirect.github.com/facebook/react/pull/32545">#32545</a>, <a href="https://redirect.github.com/facebook/react/pull/32585">#32585</a>, <a href="https://redirect.github.com/facebook/react/pull/32599">#32599</a>, <a href="https://redirect.github.com/facebook/react/pull/32611">#32611</a>, <a href="https://redirect.github.com/facebook/react/pull/32612">#32612</a>, <a href="https://redirect.github.com/facebook/react/pull/32617">#32617</a>, <a href="https://redirect.github.com/facebook/react/pull/32651">#32651</a>, <a href="https://redirect.github.com/facebook/react/pull/32653">#32653</a>, <a href="https://redirect.github.com/facebook/react/pull/32656">#32656</a>, <a href="https://redirect.github.com/facebook/react/pull/32664">#32664</a>, <a href="https://redirect.github.com/facebook/react/pull/32699">#32699</a>, <a href="https://redirect.github.com/facebook/react/pull/32723">#32723</a>, <a href="https://redirect.github.com/facebook/react/pull/32734">#32734</a>, <a href="https://redirect.github.com/facebook/react/pull/32751">#32751</a>, <a href="https://redirect.github.com/facebook/react/pull/32752">#32752</a>, <a href="https://redirect.github.com/facebook/react/pull/32760">#32760</a>, <a href="https://redirect.github.com/facebook/react/pull/32761">#32761</a>, <a href="https://redirect.github.com/facebook/react/pull/32764">#32764</a>, <a href="https://redirect.github.com/facebook/react/pull/32772">#32772</a>, <a href="https://redirect.github.com/facebook/react/pull/32790">#32790</a>, <a href="https://redirect.github.com/facebook/react/pull/32819">#32819</a>, <a href="https://redirect.github.com/facebook/react/pull/32820">#32820</a>, <a href="https://redirect.github.com/facebook/react/pull/32822">#32822</a>, <a href="https://redirect.github.com/facebook/react/pull/32833">#32833</a>, <a href="https://redirect.github.com/facebook/react/pull/32849">#32849</a>, <a href="https://redirect.github.com/facebook/react/pull/33094">#33094</a>, <a href="https://redirect.github.com/facebook/react/pull/33191">#33191</a>, <a href="https://redirect.github.com/facebook/react/pull/33200">#33200</a>, <a href="https://redirect.github.com/facebook/react/pull/33206">#33206</a>, <a href="https://redirect.github.com/facebook/react/pull/33293">#33293</a>, <a href="https://redirect.github.com/facebook/react/pull/33330">#33330</a>, <a href="https://redirect.github.com/facebook/react/pull/33331">#33331</a>, <a href="https://redirect.github.com/facebook/react/pull/33332">#33332</a>, <a href="https://redirect.github.com/facebook/react/pull/33357">#33357</a>, <a href="https://redirect.github.com/facebook/react/pull/33362">#33362</a>, <a href="https://redirect.github.com/facebook/react/pull/33433">#33433</a>, <a href="https://redirect.github.com/facebook/react/pull/33576">#33576</a>, <a href="https://redirect.github.com/facebook/react/pull/34374">#34374</a>, <a href="https://redirect.github.com/facebook/react/pull/34450">#34450</a>, <a href="https://redirect.github.com/facebook/react/pull/34481">#34481</a>, <a href="https://redirect.github.com/facebook/react/pull/34500">#34500</a>, <a href="https://redirect.github.com/facebook/react/pull/34502">#34502</a>, <a href="https://redirect.github.com/facebook/react/pull/34510">#34510</a>, <a href="https://redirect.github.com/facebook/react/pull/34511">#34511</a>, <a href="https://redirect.github.com/facebook/react/pull/34539">#34539</a>, <a href="https://redirect.github.com/facebook/react/pull/35567">#35567</a>, <a href="https://redirect.github.com/facebook/react/pull/35564">#35564</a>, <a href="https://redirect.github.com/facebook/react/pull/35485">#35485</a>, <a href="https://redirect.github.com/facebook/react/pull/35380">#35380</a>, <a href="https://redirect.github.com/facebook/react/pull/35063">#35063</a>, <a href="https://redirect.github.com/facebook/react/pull/35060">#35060</a>, <a href="https://redirect.github.com/facebook/react/pull/34676">#34676</a>, <a href="https://redirect.github.com/facebook/react/pull/36917">#36917</a>, <a href="https://redirect.github.com/facebook/react/pull/35337">#35337</a>, <a href="https://redirect.github.com/facebook/react/pull/35520">#35520</a>)</li> <li>Fragment Refs: Add Refs to <code><Fragment /></code> to support composable platform behavior (<a href="https://github.com/jackpope"><code>@jackpope</code></a>, <a href="https://github.com/sebmarkbage"><code>@sebmarkbage</code></a>, <a href="https://github.com/eps1lon"><code>@eps1lon</code></a>, <a href="https://github.com/Dhakshin2007"><code>@Dhakshin2007</code></a>, <a href="https://github.com/chirokas"><code>@chirokas</code></a>, <a href="https://github.com/teamleaderleo"><code>@teamleaderleo</code></a>, <a href="https://github.com/fallintoplace"><code>@fallintoplace</code></a>: <a href="https://redirect.github.com/facebook/react/pull/32465">#32465</a>, <a href="https://redirect.github.com/facebook/react/pull/32613">#32613</a>, <a href="https://redirect.github.com/facebook/react/pull/32619">#32619</a>, <a href="https://redirect.github.com/facebook/react/pull/32654">#32654</a>, <a href="https://redirect.github.com/facebook/react/pull/32660">#32660</a>, <a href="https://redirect.github.com/facebook/react/pull/32682">#32682</a>, <a href="https://redirect.github.com/facebook/react/pull/32722">#32722</a>, <a href="https://redirect.github.com/facebook/react/pull/32813">#32813</a>, <a href="https://redirect.github.com/facebook/react/pull/32814">#32814</a>, <a href="https://redirect.github.com/facebook/react/pull/33056">#33056</a>, <a href="https://redirect.github.com/facebook/react/pull/33058">#33058</a>, <a href="https://redirect.github.com/facebook/react/pull/33093">#33093</a>, <a href="https://redirect.github.com/facebook/react/pull/34069">#34069</a>, <a href="https://redirect.github.com/facebook/react/pull/34103">#34103</a>, <a href="https://redirect.github.com/facebook/react/pull/34544">#34544</a>, <a href="https://redirect.github.com/facebook/react/pull/34545">#34545</a>, <a href="https://redirect.github.com/facebook/react/pull/37062">#37062</a>, <a href="https://redirect.github.com/facebook/react/pull/37061">#37061</a>, <a href="https://redirect.github.com/facebook/react/pull/37060">#37060</a>, <a href="https://redirect.github.com/facebook/react/pull/36047">#36047</a>, <a href="https://redirect.github.com/facebook/react/pull/36010">#36010</a>, <a href="https://redirect.github.com/facebook/react/pu... _Description has been truncated_ Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-14 13:55:00 +00:00
dependabot[bot]	bebda41aad	chore(deps): Bump maplibre-gl from 6.8.0 to 6.9.0 (#2160 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.8.0 to 6.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.9.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Improved support for drawing the letters of Devanagari, Khmer, Burmese and the other complex scripts and also draws Arabic and Hebrew labels correctly without loading a right-to-left text plugin, which deprecates <code>setRTLTextPlugin</code> and <code>getRTLTextPluginStatus</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8343">#8343</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Read sprite and image pixels back through an <code>OffscreenCanvas</code> where available, removing a main-thread stall of tens of milliseconds on GPU-accelerated browsers when a sprite loads (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8339">#8339</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Skip clipping masks for layers hidden at the current zoom and stop re-binding dynamic buffers on cached vertex array binds, removing redundant WebGL calls every frame (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8369">#8369</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Re-render at most one stale terrain drape per frame and keep drapes that differ only by zoom while the map moves, so a finger lift over terrain no longer re-renders every tile at once (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8368">#8368</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix <code>setStyle()</code> throwing while terrain is still loading because an intermediate render tried to compile a terrain shader before the replacement style initialized its projection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6824">#6824</a>) (by <a href="https://github.com/miakh"><code>@miakh</code></a>)</li> <li>Fix queued GeoJSON <code>updateData</code> property removals throwing after geometry-only updates or retaining previously updated values (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8372">#8372</a>) (by <a href="https://github.com/jokrasno"><code>@jokrasno</code></a>)</li> <li>Treat camera options passed as <code>undefined</code> as not given in <code>jumpTo</code>, <code>easeTo</code> and <code>flyTo</code>; they were coerced to NaN (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8373">#8373</a>) (by <a href="https://github.com/vlumi"><code>@vlumi</code></a>)</li> <li>Fix a <code>Not implemented.</code> error that broke panning and zooming when the projection was changed while the camera was moving, on maps with terrain enabled or a <code>transformCameraUpdate</code> callback (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8351">#8351</a>) (by <a href="https://github.com/lazerg"><code>@lazerg</code></a>)</li> <li>Fix a map created inside a hidden container staying at the <code>400x300</code> fallback size when the container is shown before the resize observer's first notification is delivered (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8277">#8277</a>) (by <a href="https://github.com/spliffone"><code>@spliffone</code></a>)</li> <li>Fix <code>MercatorTransform</code> throwing when it is resized to a zero width, and skip the matrix calculation of every projection while the transform has a zero width or height (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8374">#8374</a>) (by <a href="https://github.com/avosa"><code>@avosa</code></a>)</li> <li>Fix every style update opening a redundant sky and light transition, which kept <code>idle</code> from firing for the transition duration after the map was otherwise done, and could ease the sky and the light on a different curve from the layers (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8348">#8348</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Fix DOM sanitization for iframe and srcdoc (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8396">#8396</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.9.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Improved support for drawing the letters of Devanagari, Khmer, Burmese and the other complex scripts and also draws Arabic and Hebrew labels correctly without loading a right-to-left text plugin, which deprecates <code>setRTLTextPlugin</code> and <code>getRTLTextPluginStatus</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8343">#8343</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Read sprite and image pixels back through an <code>OffscreenCanvas</code> where available, removing a main-thread stall of tens of milliseconds on GPU-accelerated browsers when a sprite loads (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8339">#8339</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Skip clipping masks for layers hidden at the current zoom and stop re-binding dynamic buffers on cached vertex array binds, removing redundant WebGL calls every frame (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8369">#8369</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> <li>Re-render at most one stale terrain drape per frame and keep drapes that differ only by zoom while the map moves, so a finger lift over terrain no longer re-renders every tile at once (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8368">#8368</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix <code>setStyle()</code> throwing while terrain is still loading because an intermediate render tried to compile a terrain shader before the replacement style initialized its projection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6824">#6824</a>) (by <a href="https://github.com/miakh"><code>@miakh</code></a>)</li> <li>Fix queued GeoJSON <code>updateData</code> property removals throwing after geometry-only updates or retaining previously updated values (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8372">#8372</a>) (by <a href="https://github.com/jokrasno"><code>@jokrasno</code></a>)</li> <li>Treat camera options passed as <code>undefined</code> as not given in <code>jumpTo</code>, <code>easeTo</code> and <code>flyTo</code>; they were coerced to NaN (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8373">#8373</a>) (by <a href="https://github.com/vlumi"><code>@vlumi</code></a>)</li> <li>Fix a <code>Not implemented.</code> error that broke panning and zooming when the projection was changed while the camera was moving, on maps with terrain enabled or a <code>transformCameraUpdate</code> callback (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8351">#8351</a>) (by <a href="https://github.com/lazerg"><code>@lazerg</code></a>)</li> <li>Fix a map created inside a hidden container staying at the <code>400x300</code> fallback size when the container is shown before the resize observer's first notification is delivered (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8277">#8277</a>) (by <a href="https://github.com/spliffone"><code>@spliffone</code></a>)</li> <li>Fix <code>Map#project</code> returning an incorrect on-screen point for a location behind the camera. It now returns a point outside the viewport, on the side through which the location left the screen, so DOM markers and popups are moved off-screen as expected. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8292">#8292</a>) (by <a href="https://github.com/schickm"><code>@schickm</code></a>)</li> <li>Fix <code>MercatorTransform</code> throwing when it is resized to a zero width, and skip the matrix calculation of every projection while the transform has a zero width or height (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8374">#8374</a>) (by <a href="https://github.com/avosa"><code>@avosa</code></a>)</li> <li>Fix every style update opening a redundant sky and light transition, which kept <code>idle</code> from firing for the transition duration after the map was otherwise done, and could ease the sky and the light on a different curve from the layers (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8348">#8348</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Fix DOM sanitization for iframe and srcdoc (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8396">#8396</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/f985318d1fa7e01d8b7e32a719aaf91efcb348d4"><code>f985318</code></a> Bump js version to 6.9.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8398">#8398</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/b51d10a7b0bff4ffe4480b9e26b4ebe57461b928"><code>b51d10a</code></a> improve sanitization (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8396">#8396</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/36034010e11c5cf9a9d1f10bcb4b5306dab14ba1"><code>3603401</code></a> chore(deps-dev): bump cssnano from 9.0.2 to 9.0.3 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8390">#8390</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/3e3c447168f00dd82485fa5b27b6e7d90d6f705e"><code>3e3c447</code></a> chore(deps): bump <code>@maplibre/maplibre-gl-style-spec</code> from 26.4.1 to 26.4.2 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8391">#8391</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/ea9f7df5e374a65401ddf388a54158d0b59b2e97"><code>ea9f7df</code></a> chore(deps): bump zensical/zensical from 0.0.59 to 0.0.60 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8392">#8392</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/ce10d220875eac604ee5c646e9b17680d7e182ed"><code>ce10d22</code></a> feat: add bidi support and deprecate RTL plugin (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8343">#8343</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/86901c5b7f638c201928e3e7ccea08200718ff3e"><code>86901c5</code></a> fix: stop re-opening sky and light transitions on every style update (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8350">#8350</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/54dfab1e186e72fc43bc319cab97c5427f80a0f3"><code>54dfab1</code></a> chore(deps-dev): bump <code>@types/node</code> from 26.4.0 to 26.4.1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8352">#8352</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/209e34203b2ac001d022334471182a1d06c5b2b0"><code>209e342</code></a> perf: skip hidden layers before their clipping masks and drop the dynamic buf...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/71a12d8c37a052eec276f3ad93ae8cc5b8a92f15"><code>71a12d8</code></a> fix: skip terrain drawing until replacement projection is ready (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8258">#8258</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.8.0...v6.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.8.0&new-version=6.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-14 13:54:17 +00:00
dependabot[bot]	5822012b87	chore(deps): Bump maplibre-gl from 6.7.0 to 6.8.0 (#2156 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 6.7.0 to 6.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v6.8.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add <code>map.getStyleUrl()</code>, which returns the URL the style was loaded from, or <code>null</code> when the style was given as an object (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7109">#7109</a>) (by <a href="https://github.com/bradymadden97"><code>@bradymadden97</code></a> and <a href="https://github.com/giswqs"><code>@giswqs</code></a>)</li> <li>Sample terrain render-to-texture output through mipmaps with trilinear filtering, so draped layers stop shimmering and aliasing at high pitch (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8328">#8328</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7673">#7673</a>) (by <a href="https://github.com/AveryanAlex"><code>@AveryanAlex</code></a>)</li> <li>Build the <code>Intl.Segmenter</code> instances used for text shaping on first use instead of at import, shaving several milliseconds off loading MapLibre on the main thread (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8337">#8337</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Link shader programs before reading their compile status, so the driver can overlap the compiles and the main thread waits less on shader compilation (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8338">#8338</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Build the default <code>Marker</code> pin once and clone it per marker, so creating many default markers takes roughly half the constructor time (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8340">#8340</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Add SDF rendering support for fill patterns, using <code>fill-color</code> as the foreground color (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7747">#7747</a>) (by <a href="https://github.com/bradymadden97"><code>@bradymadden97</code></a> and <a href="https://github.com/deniial00"><code>@deniial00</code></a>)</li> <li>Warn once when the canvas is clamped to <code>maxCanvasSize</code>, which previously lowered the rendered resolution silently (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8200">#8200</a>) (by <a href="https://github.com/str0kes"><code>@str0kes</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix a marker's popup jumping to another world copy when the marker is moved across the antimeridian on a zoomed-out map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/5655">#5655</a>, <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8326">#8326</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/5956">#5956</a>) (by <a href="https://github.com/yuiseki"><code>@yuiseki</code></a>)</li> <li>Fix terrain drape textures not being refreshed after zoom changes, causing stale rendering at the new zoom level (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8251">#8251</a>) (by <a href="https://github.com/patte"><code>@patte</code></a>)</li> <li>Fix a gap between the sky and the ground at high pitch while globe transitions to mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7382">#7382</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Treat an empty tile response (e.g. HTTP 204) as no data: raster-DEM tiles now load without elevation instead of failing with a <code>dem dimension mismatch</code> error, and empty raster tiles render as transparent (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/1551">#1551</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Validate the <code>before</code> layer in <code>map.moveLayer</code> before reordering, so passing the id of a layer that does not exist leaves the layer order untouched instead of dropping the moved layer out of it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8301">#8301</a>) (by <a href="https://github.com/lazerg"><code>@lazerg</code></a>)</li> <li>Fix visible seams between hillshade tiles when using linear interpolation. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8302">#8302</a>) (by <a href="https://github.com/Turbo87"><code>@Turbo87</code></a>)</li> <li>Fix the map freezing when a render task throws an error (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6093">#6093</a>) (by <a href="https://github.com/UberMouse"><code>@UberMouse</code></a>)</li> <li>Fix <code>getCameraAltitude()</code> returning <code>NaN</code> under <code>globe</code> and <code>vertical-perspective</code>, which disabled marker terrain occlusion and the camera terrain check; the altitude now follows the sphere (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6584">#6584</a>) (by <a href="https://github.com/bigmistqke"><code>@bigmistqke</code></a> and <a href="https://github.com/patte"><code>@patte</code></a>)</li> <li>Draw an elevated symbol on globe when the symbol itself is in view but the ground under it is behind the horizon; occlusion now follows the line of sight to the elevated point (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8253">#8253</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Fix <code>setTiles</code> producing stale tile URLs when <code>loadTile</code> runs in the same frame (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8323">#8323</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a> and <a href="https://github.com/nostrorom"><code>@nostrorom</code></a>)</li> <li>Keep the tile under an elevated symbol from being culled near the horizon, so a symbol with a large <code>symbol-height-offset</code> stays visible until it is behind the planet (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8316">#8316</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>6.8.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add <code>map.getStyleUrl()</code>, which returns the URL the style was loaded from, or <code>null</code> when the style was given as an object (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7109">#7109</a>) (by <a href="https://github.com/bradymadden97"><code>@bradymadden97</code></a> and <a href="https://github.com/giswqs"><code>@giswqs</code></a>)</li> <li>Sample terrain render-to-texture output through mipmaps with trilinear filtering, so draped layers stop shimmering and aliasing at high pitch (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8328">#8328</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7673">#7673</a>) (by <a href="https://github.com/AveryanAlex"><code>@AveryanAlex</code></a>)</li> <li>Build the <code>Intl.Segmenter</code> instances used for text shaping on first use instead of at import, shaving several milliseconds off loading MapLibre on the main thread (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8337">#8337</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Link shader programs before reading their compile status, so the driver can overlap the compiles and the main thread waits less on shader compilation (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8338">#8338</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Build the default <code>Marker</code> pin once and clone it per marker, so creating many default markers takes roughly half the constructor time (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8340">#8340</a>) (by <a href="https://github.com/cherenkov"><code>@cherenkov</code></a>)</li> <li>Add SDF rendering support for fill patterns, using <code>fill-color</code> as the foreground color (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7747">#7747</a>) (by <a href="https://github.com/bradymadden97"><code>@bradymadden97</code></a> and <a href="https://github.com/deniial00"><code>@deniial00</code></a>)</li> <li>Warn once when the canvas is clamped to <code>maxCanvasSize</code>, which previously lowered the rendered resolution silently (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8200">#8200</a>) (by <a href="https://github.com/str0kes"><code>@str0kes</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix a marker's popup jumping to another world copy when the marker is moved across the antimeridian on a zoomed-out map (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/5655">#5655</a>, <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8326">#8326</a>, continues <a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/5956">#5956</a>) (by <a href="https://github.com/yuiseki"><code>@yuiseki</code></a>)</li> <li>Fix terrain drape textures not being refreshed after zoom changes, causing stale rendering at the new zoom level (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8251">#8251</a>) (by <a href="https://github.com/patte"><code>@patte</code></a>)</li> <li>Fix a gap between the sky and the ground at high pitch while globe transitions to mercator (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7382">#7382</a>) (by <a href="https://github.com/birkskyum"><code>@birkskyum</code></a>)</li> <li>Treat an empty tile response (e.g. HTTP 204) as no data: raster-DEM tiles now load without elevation instead of failing with a <code>dem dimension mismatch</code> error, and empty raster tiles render as transparent (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/1551">#1551</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Read the map container's dimensions before mutating it in <code>Map#_setupContainer</code>, avoiding a forced synchronous layout reflow on every map initialization (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8307">#8307</a>) (by <a href="https://github.com/lazerg"><code>@lazerg</code></a>)</li> <li>Validate the <code>before</code> layer in <code>map.moveLayer</code> before reordering, so passing the id of a layer that does not exist leaves the layer order untouched instead of dropping the moved layer out of it (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8301">#8301</a>) (by <a href="https://github.com/lazerg"><code>@lazerg</code></a>)</li> <li>Fix visible seams between hillshade tiles when using linear interpolation. (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8302">#8302</a>) (by <a href="https://github.com/Turbo87"><code>@Turbo87</code></a>)</li> <li>Fix the map freezing when a render task throws an error (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6093">#6093</a>) (by <a href="https://github.com/UberMouse"><code>@UberMouse</code></a>)</li> <li>Fix <code>getCameraAltitude()</code> returning <code>NaN</code> under <code>globe</code> and <code>vertical-perspective</code>, which disabled marker terrain occlusion and the camera terrain check; the altitude now follows the sphere (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6584">#6584</a>) (by <a href="https://github.com/bigmistqke"><code>@bigmistqke</code></a> and <a href="https://github.com/patte"><code>@patte</code></a>)</li> <li>Draw an elevated symbol on globe when the symbol itself is in view but the ground under it is behind the horizon; occlusion now follows the line of sight to the elevated point (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8253">#8253</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Fix <code>setTiles</code> producing stale tile URLs when <code>loadTile</code> runs in the same frame (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/8323">#8323</a>) (by <a href="https://github.com/johncarmack1984"><code>@johncarmack1984</code></a> and <a href="https://github.com/nostrorom"><code>@nostrorom</code></a>)</li> <li>Keep the tile under an elevated symbol from being culled near the horizon, so a symbol with a large <code>symbol-height-offset</code> stays visible until it is behind the planet (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8316">#8316</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/9df21da874e49ee4943aecb3350db9dfd98e7d1b"><code>9df21da</code></a> Bump js version to 6.8.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8371">#8371</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/05302adadc681543ee15ff60290bb70b8348a978"><code>05302ad</code></a> fix: compute pixelsPerMeter in the transform helper so getCameraAltitude() wo...</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/cf1781cb5ea3af00f9f9665649431d89ebd0856e"><code>cf1781c</code></a> test: serve the browser tests' tiles and styles from local fixtures (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8367">#8367</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/055db89755ae902f4a1840308b270bc0313b0784"><code>055db89</code></a> refactor: unify bucket dependency finalization through addFeatures (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8347">#8347</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/045a3ce58615fcb0ac155ac309bf9dbf23d1cbd6"><code>045a3ce</code></a> Warn when the canvas is clamped to maxCanvasSize (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8275">#8275</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/d2d0371abacb40e6b8f3136af1eba5e93deecdb1"><code>d2d0371</code></a> Keep tiles under elevated symbols from being culled near the horizon (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8319">#8319</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/0b33607be5d0ac25844696a7ba2eac1d8ea9dfe3"><code>0b33607</code></a> chore(deps-dev): bump puppeteer from 25.9.0 to 25.10.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8359">#8359</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/86d30b0234131b16d1b77681c946be53f88dc91a"><code>86d30b0</code></a> chore(deps-dev): bump devtools-protocol from 0.0.1687809 to 0.0.1692173 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8354">#8354</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/9a0884f180d7f591323183ff6694af0a2805803e"><code>9a0884f</code></a> chore(deps-dev): bump cspell from 10.2.0 to 10.2.1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8360">#8360</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/3d42c642babf9d31d8fea3967f62c78d1facc2c5"><code>3d42c64</code></a> chore(deps-dev): bump postcss from 8.5.26 to 8.5.28 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/8362">#8362</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v6.7.0...v6.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=6.7.0&new-version=6.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-11 13:55:02 +00:00
dependabot[bot]	06b9130eba	chore(deps-dev): Bump typescript-eslint from 8.69.0 to 8.70.0 (#2155 ) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.69.0 to 8.70.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.70.0</h2> <h2>8.70.0 (2026-09-07)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-generated-empty-object-type] add rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12730">#12730</a>)</li> <li><strong>website:</strong> generate per-page social preview cards (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12734">#12734</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li>use stable release of pnpm 12 (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12808">#12808</a>)</li> <li>update pnpm to 12.3.4 and dedupe Docusaurus packages (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12829">#12829</a>)</li> <li><strong>eslint-plugin:</strong> [member-ordering] don't report fields that read fields declared before them (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12729">#12729</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] no false positive on RHS of a nested logical expression (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12728">#12728</a>)</li> <li><strong>eslint-plugin:</strong> [no-deprecated] report deprecated imported values used in object shorthand properties (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12780">#12780</a>)</li> <li><strong>project-service:</strong> avoid discarded tsserver logs (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12748">#12748</a>)</li> <li><strong>typescript-estree:</strong> clarify the parserOptions.project error message (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12817">#12817</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Barry <a href="https://github.com/barry166"><code>@barry166</code></a></li> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Josh Goldberg</li> <li>Josh Goldberg ✨ <a href="https://github.com/JoshuaKGoldberg"><code>@JoshuaKGoldberg</code></a></li> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>Ulrich Stark <a href="https://github.com/ulrichstark"><code>@ulrichstark</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.70.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.70.0 (2026-09-07)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-deprecated] report deprecated imported values used in object shorthand properties (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12780">#12780</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Ulrich Stark <a href="https://github.com/ulrichstark"><code>@ulrichstark</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.70.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/7ee76085c22e923c0036b8e0733a3ca7dfd82b60"><code>7ee7608</code></a> chore(release): publish 8.70.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4586535ab24d7d5e9b3ba87e4adb8636f9314aca"><code>4586535</code></a> fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.69.0&new-version=8.70.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-11 13:55:00 +00:00
dependabot[bot]	1f475cf715	chore(deps): Bump @maplibre/maplibre-gl-style-spec from 26.4.1 to 26.4.2 (#2154 ) Bumps [@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec) from 26.4.1 to 26.4.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-style-spec/releases">@maplibre/maplibre-gl-style-spec's releases</a>.</em></p> <blockquote> <h2>v26.4.2</h2> <h3>✨ Features and improvements</h3> <ul> <li>Allow negative <code>fill-extrusion-base</code> and <code>fill-extrusion-height</code> values, extruding below ground level (e.g. underground floors) (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1794">#1794</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Add SDK support tracking for SDF fill pattern colorization (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1854">#1854</a>) (by <a href="https://github.com/deniial00"><code>@deniial00</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Validate <code>-transition</code> properties on <code>sky</code> the same way <code>light</code> already does, so <code>sky-color-transition</code> and similar keys no longer report as unknown properties (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1867">#1867</a>) (by <a href="https://github.com/Yasser-Ameur"><code>@Yasser-Ameur</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md">@maplibre/maplibre-gl-style-spec's changelog</a>.</em></p> <blockquote> <h2>26.4.2</h2> <h3>✨ Features and improvements</h3> <ul> <li>Allow negative <code>fill-extrusion-base</code> and <code>fill-extrusion-height</code> values, extruding below ground level (e.g. underground floors) (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1794">#1794</a>) (by <a href="https://github.com/clement-igonet"><code>@clement-igonet</code></a>)</li> <li>Add SDK support tracking for SDF fill pattern colorization (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1854">#1854</a>) (by <a href="https://github.com/deniial00"><code>@deniial00</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Validate <code>-transition</code> properties on <code>sky</code> the same way <code>light</code> already does, so <code>sky-color-transition</code> and similar keys no longer report as unknown properties (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1867">#1867</a>) (by <a href="https://github.com/Yasser-Ameur"><code>@Yasser-Ameur</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/4453d2f4a1e755bc1cbc351103d0cdd9fde72b08"><code>4453d2f</code></a> Bump js version to 26.4.2 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1868">#1868</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/79bc668ac44589b474584589b6c30c9d1d71a9ff"><code>79bc668</code></a> Validate sky transition properties like light does (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1867">#1867</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/487a7ad67e216306ebbd4ffb4d762c7774dce3ad"><code>487a7ad</code></a> build(deps-dev): bump oxfmt from 0.65.0 to 0.66.0 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1862">#1862</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/e5589ff0619251a8824c7e57d7999453b742e8de"><code>e5589ff</code></a> build(deps-dev): bump <code>@types/node</code> from 26.4.0 to 26.4.1 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1863">#1863</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/139dea1e02a5521b421e7816b115b5fdd8065493"><code>139dea1</code></a> build(deps-dev): bump rolldown from 1.2.6 to 1.2.7 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1864">#1864</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/72778539dd53a4d69dcf4b4eee83b73124842de0"><code>7277853</code></a> build(deps-dev): bump <code>@typescript-eslint/eslint-plugin</code> (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1857">#1857</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/e7e13161d94b5094224b3dec388f2c7c2c83bc8e"><code>e7e1316</code></a> build(deps-dev): bump globals from 17.11.0 to 17.12.0 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1858">#1858</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/187f3c3633a9dd5b37148c1ca2686b438f8f7946"><code>187f3c3</code></a> Document SDK support for SDF fill pattern colorization (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1854">#1854</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/d1b5935d9895e6a1b3f554812ba55c4673c3264c"><code>d1b5935</code></a> ci: cancel superseded pull request runs (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1853">#1853</a>)</li> <li><a href="https://github.com/maplibre/maplibre-style-spec/commit/3ae6da3d6592ca765b04ff693dc1e59d57765e46"><code>3ae6da3</code></a> build(deps-dev): bump <code>@humanfs/node</code> from 0.16.6 to 0.16.8 (<a href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1852">#1852</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-style-spec/compare/v26.4.1...v26.4.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@maplibre/maplibre-gl-style-spec&package-manager=npm_and_yarn&previous-version=26.4.1&new-version=26.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-09 13:55:05 +00:00
dependabot[bot]	0a4c1710e2	chore(deps-dev): Bump @playwright/test from 1.62.1 to 1.63.0 (#2150 ) Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.62.1 to 1.63.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/playwright/releases">@playwright/test's releases</a>.</em></p> <blockquote> <h2>v1.63.0</h2> <h2>🔒 Test locks</h2> <p>Tests that access a shared resource — an external service, a global account setting — can now declare a named <code>lock</code>. Tests that share a lock name never run concurrently, across files, workers and <a href="https://playwright.dev/docs/test-projects">projects</a>, while everything else keeps running in parallel:</p> <pre lang="js"><code>test('update user settings', { lock: 'user-settings' }, async ({ page }) => { // never runs at the same time as other tests holding 'user-settings' }); </code></pre> <p>A test can hold multiple locks, and <a href="https://playwright.dev/docs/api/class-test#test-describe">test.describe()</a> accepts a <code>lock</code> for the whole group. Learn more about <a href="https://playwright.dev/docs/test-parallel#test-locks">test locks</a>.</p> <h2>🪟 Locate across frames</h2> <p><a href="https://playwright.dev/docs/api/class-page#page-frame-locator">page.frameLocator()</a> and <a href="https://playwright.dev/docs/api/class-frame#frame-frame-locator">frame.frameLocator()</a> called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:</p> <pre lang="js"><code>// Finds the button in any frame on the page. await page.frameLocator().getByRole('button').click(); </code></pre> <p>The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.</p> <h2>👁️ Visible-only locators</h2> <p>New <a href="https://playwright.dev/docs/api/class-locator#locator-visible">locator.visible()</a> returns a locator that matches only visible elements. It is the recommended replacement for the <code>:visible</code> CSS pseudo-class:</p> <pre lang="js"><code>await page.locator('button').visible().click(); </code></pre> <h2>🧾 Step params and subtitles</h2> <p>Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and <a href="https://playwright.dev/docs/api/class-test#test-step">test.step()</a> accepts <code>subtitle</code> and <code>params</code> options for your own steps:</p> <pre lang="js"><code>await test.step('Login', async () => { // ... }, { subtitle: 'as admin', params: { user: 'admin' } }); </code></pre> <p>Reporters receive them via <a href="https://playwright.dev/docs/api/class-teststep#test-step-subtitle">testStep.subtitle</a> and <a href="https://playwright.dev/docs/api/class-teststep#test-step-params">testStep.params</a>. For Playwright API</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/playwright/commit/1b025d7e20a026371cd5f98ba0cdce48892737c8"><code>1b025d7</code></a> chore: mark v1.63.0 (<a href="https://redirect.github.com/microsoft/playwright/issues/42569">#42569</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/0b9956d2247ce88399c3c46a22c1cc0526acb340"><code>0b9956d</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/42568">#42568</a>): docs(test): mark test.step subtitle option as since v1.63</li> <li><a href="https://github.com/microsoft/playwright/commit/13dbf102b88305ed96b7791a7843246cd75d4dae"><code>13dbf10</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/42552">#42552</a>): docs: release notes for v1.63</li> <li><a href="https://github.com/microsoft/playwright/commit/e93b64ed6f9cf6ac2cc8cb13ad01514b406a7142"><code>e93b64e</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/42566">#42566</a>): feat(test): add subtitle option to test.step (<a href="https://redirect.github.com/microsoft/playwright/issues/42567">#42567</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/2b7a5f2ea1cea04b549c5378498c1b16b6bc6a6f"><code>2b7a5f2</code></a> test: response.body() for content-encoding:identity (<a href="https://redirect.github.com/microsoft/playwright/issues/42537">#42537</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/648a67c7c1261eefe4113cba2d586417d5e3f2f2"><code>648a67c</code></a> fix(mcp): create parent directories for explicitly named files (<a href="https://redirect.github.com/microsoft/playwright/issues/42540">#42540</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/7894f5653e7f253c17aa1638c19f63e0d54d5e0e"><code>7894f56</code></a> docs(mcp): clarify how tool file names are resolved (<a href="https://redirect.github.com/microsoft/playwright/issues/42538">#42538</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/52900a1b99ca51011526afcaf8981970cc1a521a"><code>52900a1</code></a> devops: restore npm publishing from GitHub Actions (<a href="https://redirect.github.com/microsoft/playwright/issues/42550">#42550</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/8c47f596edebd2460895a5953f2ea67f8b884001"><code>8c47f59</code></a> docs(csharp): fix nonexistent method names in guide examples (<a href="https://redirect.github.com/microsoft/playwright/issues/42507">#42507</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/bd6e552a63f8cf9b0da0216f392b8e63a08bf1d2"><code>bd6e552</code></a> chore(video): emit frames with real timestamps, drop frame number quantizatio...</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/playwright/compare/v1.62.1...v1.63.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.62.1&new-version=1.63.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-08 15:00:09 +00:00
dependabot[bot]	1dc80b1313	chore(deps): Bump @codemirror/state from 6.7.3 to 6.7.4 (#2151 ) Bumps [@codemirror/state](https://github.com/codemirror/state) from 6.7.3 to 6.7.4. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/codemirror/state/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/state&package-manager=npm_and_yarn&previous-version=6.7.3&new-version=6.7.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-08 14:58:44 +00:00
dependabot[bot]	139cf07991	chore(deps-dev): Bump stylelint from 17.14.1 to 17.15.0 (#2149 ) [//]: # (dependabot-start) ⚠️ Dependabot is rebasing this PR ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [stylelint](https://github.com/stylelint/stylelint) from 17.14.1 to 17.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/releases">stylelint's releases</a>.</em></p> <blockquote> <h2>17.15.0</h2> <p>It adds 1 new rule and 2 new rule options, and fixes 4 bugs.</p> <ul> <li>Added: <code>selector-no-unmatchable</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/issues/9451">#9451</a>) (<a href="https://github.com/jeddy3"><code>@jeddy3</code></a>).</li> <li>Added: <code>ignoreFunctions: []</code> to <code>color-named</code> and <code>color-no-hex</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9463">#9463</a>) (<a href="https://github.com/jsmitty12"><code>@jsmitty12</code></a>).</li> <li>Fixed: <code>custom-property-no-missing-var-function</code> false positives for anchor positioning (<a href="https://redirect.github.com/stylelint/stylelint/issues/9466">#9466</a>) (<a href="https://github.com/giaBaoJS"><code>@giaBaoJS</code></a>).</li> <li>Fixed: <code>declaration-block-no-redundant-longhand-properties</code> autofix for <code>font</code> shorthand (<a href="https://redirect.github.com/stylelint/stylelint/issues/9402">#9402</a>) (<a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed: <code>declaration-property-max-values</code> false positives for interpolated inline expressions (<a href="https://redirect.github.com/stylelint/stylelint/issues/9437">#9437</a>) (<a href="https://github.com/alexchen-sys"><code>@alexchen-sys</code></a>).</li> <li>Fixed: <code>selector-no-invalid</code> false negatives for pseudo-elements, combinators and nested <code>:has()</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9452">#9452</a>) (<a href="https://github.com/jeddy3"><code>@jeddy3</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md">stylelint's changelog</a>.</em></p> <blockquote> <h2>17.15.0 - 2026-09-04</h2> <p>It adds 1 new rule and 2 new rule options, and fixes 4 bugs.</p> <ul> <li>Added: <code>selector-no-unmatchable</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/pull/9451">#9451</a>) (<a href="https://github.com/jeddy3"><code>@jeddy3</code></a>).</li> <li>Added: <code>ignoreFunctions: []</code> to <code>color-named</code> and <code>color-no-hex</code> (<a href="https://redirect.github.com/stylelint/stylelint/pull/9463">#9463</a>) (<a href="https://github.com/jsmitty12"><code>@jsmitty12</code></a>).</li> <li>Fixed: <code>custom-property-no-missing-var-function</code> false positives for anchor positioning (<a href="https://redirect.github.com/stylelint/stylelint/pull/9466">#9466</a>) (<a href="https://github.com/giaBaoJS"><code>@giaBaoJS</code></a>).</li> <li>Fixed: <code>declaration-block-no-redundant-longhand-properties</code> autofix for <code>font</code> shorthand (<a href="https://redirect.github.com/stylelint/stylelint/pull/9402">#9402</a>) (<a href="https://github.com/sarathfrancis90"><code>@sarathfrancis90</code></a>).</li> <li>Fixed: <code>declaration-property-max-values</code> false positives for interpolated inline expressions (<a href="https://redirect.github.com/stylelint/stylelint/pull/9437">#9437</a>) (<a href="https://github.com/alexchen-sys"><code>@alexchen-sys</code></a>).</li> <li>Fixed: <code>selector-no-invalid</code> false negatives for pseudo-elements, combinators and nested <code>:has()</code> (<a href="https://redirect.github.com/stylelint/stylelint/pull/9452">#9452</a>) (<a href="https://github.com/jeddy3"><code>@jeddy3</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stylelint/stylelint/commit/0547bff875de8d2525a3eca4d6a22847aa6ded60"><code>0547bff</code></a> Release 17.15.0 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9484">#9484</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/ac19a3c04ca20ab57d637f81b57365539c1be84b"><code>ac19a3c</code></a> Fix <code>custom-property-no-missing-var-function</code> false positives for anchor posi...</li> <li><a href="https://github.com/stylelint/stylelint/commit/23947ae80a7229ccf1b13a3907b92b9eeebb9e2d"><code>23947ae</code></a> Bump <code>@humanfs/node</code> from 0.16.6 to 0.16.8 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9480">#9480</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/53c74f78543ea3a317d37378c034532d3d3d6d24"><code>53c74f7</code></a> Bump fast-uri from 3.1.5 to 3.1.7 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9481">#9481</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/26856e6dbd37e474e20bd46c7059be9844b006fe"><code>26856e6</code></a> Bump the jest group across 1 directory with 2 updates (<a href="https://redirect.github.com/stylelint/stylelint/issues/9476">#9476</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/b90ecd83e7cda4606451a09687c1f004488f3a80"><code>b90ecd8</code></a> Bump browserslist from 4.28.4 to 4.28.8 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9479">#9479</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/70072c00e5db6debb3874981892fe25b4bae659a"><code>70072c0</code></a> Add <code>ignoreFunctions: []</code> to <code>color-named</code> and <code>color-no-hex</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9463">#9463</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/f0ac6428795e6b6c3bfb8abc272aa989aa877849"><code>f0ac642</code></a> Bump postcss-import from 16.1.1 to 16.2.0 in the postcss group (<a href="https://redirect.github.com/stylelint/stylelint/issues/9477">#9477</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/fc8db574628d51c8bc12dc7f1e4d2e02bc150457"><code>fc8db57</code></a> Bump globby from 16.2.3 to 16.2.4 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9478">#9478</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/aec96b0b2815e8a4de21a0a1b0560954714f568f"><code>aec96b0</code></a> Bump <code>@csstools/css-syntax-patches-for-csstree</code> from 1.1.8 to 1.1.9 in the csst...</li> <li>Additional commits viewable in <a href="https://github.com/stylelint/stylelint/compare/17.14.1...17.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stylelint&package-manager=npm_and_yarn&previous-version=17.14.1&new-version=17.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-09-08 14:46:16 +00:00