editor

mirror of https://github.com/maputnik/editor.git synced 2026-07-30 01:37:27 +00:00

Author	SHA1	Message	Date
dependabot[bot]	f0d850eae8	chore(deps-dev): Bump vite from 7.3.2 to 8.0.8 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 8.0.8. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.0.8 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-20 16:32:06 +00:00
dependabot[bot]	f277b20ab1	chore(deps-dev): Bump typescript from 5.9.3 to 6.0.2 (#1762 ) Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/TypeScript/releases">typescript's releases</a>.</em></p> <blockquote> <h2>TypeScript 6.0</h2> <p>For release notes, check out the <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-6-0/">release announcement blog post</a>.</p> <ul> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=milestone%3A%22TypeScript+6.0.0%22">fixed issues query for TypeScript 6.0.0 (Beta)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=milestone%3A%22TypeScript+6.0.1%22">fixed issues query for TypeScript 6.0.1 (RC)</a>.</li> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=milestone%3A%22TypeScript+6.0.2%22">fixed issues query for TypeScript 6.0.2 (Stable)</a>.</li> </ul> <p>Downloads are available on:</p> <ul> <li><a href="https://www.npmjs.com/package/typescript">npm</a></li> </ul> <h2>TypeScript 6.0 Beta</h2> <p>For release notes, check out the <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-6-0-beta/">release announcement</a>.</p> <ul> <li><a href="https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93&q=milestone%3A%22TypeScript+6.0.0%22+is%3Aclosed+">fixed issues query for Typescript 6.0.0 (Beta)</a>.</li> </ul> <p>Downloads are available on:</p> <ul> <li><a href="https://www.npmjs.com/package/typescript">npm</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/TypeScript/commit/607a22a90d1a5a1b507ce01bb8cd7ec020f954e7"><code>607a22a</code></a> Bump version to 6.0.2 and LKG</li> <li><a href="https://github.com/microsoft/TypeScript/commit/9e72ab71b575e26795d0d9eac3d2d9957beed17c"><code>9e72ab7</code></a> 🤖 Pick PR <a href="https://redirect.github.com/microsoft/TypeScript/issues/63239">#63239</a> (Fix missing lib files in reused pro...) into release-6.0 (#...</li> <li><a href="https://github.com/microsoft/TypeScript/commit/35ff23d4b0cc715691323ebe54f523c16fe6e3a5"><code>35ff23d</code></a> 🤖 Pick PR <a href="https://redirect.github.com/microsoft/TypeScript/issues/63163">#63163</a> (Port anyFunctionType subtype fix an...) into release-6.0 (#...</li> <li><a href="https://github.com/microsoft/TypeScript/commit/e175b69138038953d4e85bf6529afe88d56d8fbe"><code>e175b69</code></a> Bump version to 6.0.1-rc and LKG</li> <li><a href="https://github.com/microsoft/TypeScript/commit/af4caac0e91e838c46b3fdc1c9afacad68800f89"><code>af4caac</code></a> Update LKG</li> <li><a href="https://github.com/microsoft/TypeScript/commit/8efd7e8544d8b35c9b33bca44a3124aa2613bf09"><code>8efd7e8</code></a> Merge remote-tracking branch 'origin/main' into release-6.0</li> <li><a href="https://github.com/microsoft/TypeScript/commit/206ed1a00ffde637d821bbb3172d1488e3d949e8"><code>206ed1a</code></a> Deprecate assert in import() (<a href="https://redirect.github.com/microsoft/TypeScript/issues/63172">#63172</a>)</li> <li><a href="https://github.com/microsoft/TypeScript/commit/e688ac8bc3cbb698c4341ee06401bd6beeb1c4ba"><code>e688ac8</code></a> Update dependencies (<a href="https://redirect.github.com/microsoft/TypeScript/issues/63156">#63156</a>)</li> <li><a href="https://github.com/microsoft/TypeScript/commit/29b300deb56c775f19c2f0528012896e4d1db3e0"><code>29b300d</code></a> Bump the github-actions group across 1 directory with 2 updates (<a href="https://redirect.github.com/microsoft/TypeScript/issues/63205">#63205</a>)</li> <li><a href="https://github.com/microsoft/TypeScript/commit/0c2c7a358297d66df690230deaed8c98e7d77c04"><code>0c2c7a3</code></a> DOM update (<a href="https://redirect.github.com/microsoft/TypeScript/issues/63183">#63183</a>)</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/TypeScript/compare/v5.9.3...v6.0.2">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-20 16:30:36 +00:00
dependabot[bot]	d2e26655bb	chore(deps-dev): Bump stylelint from 17.7.0 to 17.8.0 (#1821 ) Bumps [stylelint](https://github.com/stylelint/stylelint) from 17.7.0 to 17.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/releases">stylelint's releases</a>.</em></p> <blockquote> <h2>17.8.0</h2> <p>It adds 3 new rules and 1 configuration property.</p> <ul> <li>Added: <code>languageOptions.directionality</code> configuration property (<a href="https://redirect.github.com/stylelint/stylelint/issues/8687">#8687</a>) (<a href="https://github.com/sw1tch3roo"><code>@sw1tch3roo</code></a>).</li> <li>Added: <code>property-layout-mappings</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/issues/8687">#8687</a>) (<a href="https://github.com/sw1tch3roo"><code>@sw1tch3roo</code></a>).</li> <li>Added: <code>relative-selector-nesting-notation</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/issues/8730">#8730</a>) (<a href="https://github.com/sw1tch3roo"><code>@sw1tch3roo</code></a>).</li> <li>Added: <code>selector-no-deprecated</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/issues/8694">#8694</a>) (<a href="https://github.com/immitsu"><code>@immitsu</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md">stylelint's changelog</a>.</em></p> <blockquote> <h2>17.8.0 - 2026-04-15</h2> <p>It adds 3 new rules and 1 configuration property.</p> <ul> <li>Added: <code>languageOptions.directionality</code> configuration property (<a href="https://redirect.github.com/stylelint/stylelint/pull/8687">#8687</a>) (<a href="https://github.com/sw1tch3roo"><code>@sw1tch3roo</code></a>).</li> <li>Added: <code>property-layout-mappings</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/pull/8687">#8687</a>) (<a href="https://github.com/sw1tch3roo"><code>@sw1tch3roo</code></a>).</li> <li>Added: <code>relative-selector-nesting-notation</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/pull/8730">#8730</a>) (<a href="https://github.com/sw1tch3roo"><code>@sw1tch3roo</code></a>).</li> <li>Added: <code>selector-no-deprecated</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/pull/8694">#8694</a>) (<a href="https://github.com/immitsu"><code>@immitsu</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stylelint/stylelint/commit/b329c6fb0ee1c8fd530358ab6b7a11a96aa2c616"><code>b329c6f</code></a> Release 17.8.0 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9217">#9217</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/e9a4877f6af134af12f3f79d36c66dddd5a54ea4"><code>e9a4877</code></a> Bump postcss from 8.5.8 to 8.5.9 in the postcss group (<a href="https://redirect.github.com/stylelint/stylelint/issues/9216">#9216</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/0dc0d02659448ec2eff65b5b8e0464baa1350c2d"><code>0dc0d02</code></a> Bump eslint from 10.1.0 to 10.2.0 in the eslint group (<a href="https://redirect.github.com/stylelint/stylelint/issues/9215">#9215</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/4978eaf6f9b38905f845b5fc66fbe1f48cc3f29b"><code>4978eaf</code></a> Document <code>selector-no-deprecated</code> not yet in config (<a href="https://redirect.github.com/stylelint/stylelint/issues/9211">#9211</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/9ca941ed5e14d1b918587531ef0172533c829771"><code>9ca941e</code></a> Add <code>relative-selector-nesting-notation</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/issues/8730">#8730</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/06807ce45638f6a1107e20f01f02ec0392783063"><code>06807ce</code></a> Add <code>selector-no-deprecated</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/issues/8694">#8694</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/16a6090344b085e816f47a30265f732d4f7d5178"><code>16a6090</code></a> Add <code>property-layout-mappings</code> rule (<a href="https://redirect.github.com/stylelint/stylelint/issues/8687">#8687</a>)</li> <li>See full diff in <a href="https://github.com/stylelint/stylelint/compare/17.7.0...17.8.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-20 16:21:00 +00:00
dependabot[bot]	1e94c1f6d9	chore(deps): Bump ol-mapbox-style from 13.4.0 to 13.4.1 (#1819 ) Bumps [ol-mapbox-style](https://github.com/openlayers/ol-mapbox-style) from 13.4.0 to 13.4.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/releases">ol-mapbox-style's releases</a>.</em></p> <blockquote> <h2>v13.4.1</h2> <h2>What's Changed</h2> <ul> <li>Changes for 13.4.0 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1432">openlayers/ol-mapbox-style#1432</a></li> <li>Do not fail on ol versions that don't have Stroke#setOffset() by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1440">openlayers/ol-mapbox-style#1440</a></li> <li>Bump puppeteer from 24.37.5 to 24.40.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1433">openlayers/ol-mapbox-style#1433</a></li> <li>Bump pmtiles-protocol from 1.0.5 to 1.1.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1434">openlayers/ol-mapbox-style#1434</a></li> <li>Bump copy-webpack-plugin from 13.0.1 to 14.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1435">openlayers/ol-mapbox-style#1435</a></li> <li>Bump <code>@rollup/plugin-commonjs</code> from 29.0.0 to 29.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1436">openlayers/ol-mapbox-style#1436</a></li> <li>Bump eslint from 9.39.4 to 10.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1437">openlayers/ol-mapbox-style#1437</a></li> <li>Bump lodash from 4.17.23 to 4.18.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1441">openlayers/ol-mapbox-style#1441</a></li> <li>Bump picomatch by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1438">openlayers/ol-mapbox-style#1438</a></li> <li>Bump webpack from 5.105.2 to 5.105.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1443">openlayers/ol-mapbox-style#1443</a></li> <li>Bump typedoc-plugin-missing-exports from 4.1.2 to 4.1.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1444">openlayers/ol-mapbox-style#1444</a></li> <li>Bump basic-ftp from 5.2.0 to 5.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1448">openlayers/ol-mapbox-style#1448</a></li> <li>Bump follow-redirects from 1.15.6 to 1.16.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1449">openlayers/ol-mapbox-style#1449</a></li> <li>Bump typedoc from 0.28.15 to 0.28.18 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1446">openlayers/ol-mapbox-style#1446</a></li> <li>Bump mocha from 12.0.0-beta-9.2 to 12.0.0-beta-10 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1442">openlayers/ol-mapbox-style#1442</a></li> <li>Bump typescript from 5.9.3 to 6.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1445">openlayers/ol-mapbox-style#1445</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.4.0...v13.4.1">https://github.com/openlayers/ol-mapbox-style/compare/v13.4.0...v13.4.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/blob/main/CHANGELOG.md">ol-mapbox-style's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/6bd88d89b455e0acc96496cd8973f4109706201e"><code>6bd88d8</code></a> Changes for 13.4.1</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/db527b61c1e3f301e473487f062a07a22a681d1e"><code>db527b6</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1445">#1445</a> from openlayers/dependabot/npm_and_yarn/typescript-6...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/03ea572928b3ccc5da1a448c4e7f2b37f6d81d96"><code>03ea572</code></a> Updates for typescript@6</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/6f112970f441959a72a5a63176154e210fafe844"><code>6f11297</code></a> Bump typescript from 5.9.3 to 6.0.2</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/02e75fd5abbd1cf756d50fd14d642290623a31aa"><code>02e75fd</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1442">#1442</a> from openlayers/dependabot/npm_and_yarn/mocha-12.0.0...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/d2bbef74b922a76a2d9c0c4325483e53f93f45c3"><code>d2bbef7</code></a> Update lockfile</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/a4d11ed7a41c255c012e154a28c0eb55ed386d1b"><code>a4d11ed</code></a> Bump mocha from 12.0.0-beta-9.2 to 12.0.0-beta-10</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/cf7cff43b0ac33bc124e8a58ce501e404e96f0bd"><code>cf7cff4</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1446">#1446</a> from openlayers/dependabot/npm_and_yarn/typedoc-0.28.18</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/ce13733161bb2f02809eb1ebe8419f5a3c71ce8b"><code>ce13733</code></a> Bump typedoc from 0.28.15 to 0.28.18</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/46b2b4a5b27692a1ae5e7ee04740d5c3247ba4a7"><code>46b2b4a</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1449">#1449</a> from openlayers/dependabot/npm_and_yarn/follow-redir...</li> <li>Additional commits viewable in <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.4.0...v13.4.1">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-20 16:20:16 +00:00
dependabot[bot]	869cbec10a	chore(deps): Bump github/codeql-action from 4.35.1 to 4.35.2 (#1823 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.35.2</h2> <ul> <li>The undocumented TRAP cache cleanup feature that could be enabled using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the <code>trap-caching: false</code> input to the <code>init</code> Action. <a href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li> <li>The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. <a href="https://redirect.github.com/github/codeql-action/pull/3789">#3789</a></li> <li>Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. <a href="https://redirect.github.com/github/codeql-action/pull/3794">#3794</a></li> <li>Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a href="https://redirect.github.com/github/codeql-action/pull/3807">#3807</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2">2.25.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3823">#3823</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.35.2 - 15 Apr 2026</h2> <ul> <li>The undocumented TRAP cache cleanup feature that could be enabled using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the <code>trap-caching: false</code> input to the <code>init</code> Action. <a href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li> <li>The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. <a href="https://redirect.github.com/github/codeql-action/pull/3789">#3789</a></li> <li>Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. <a href="https://redirect.github.com/github/codeql-action/pull/3794">#3794</a></li> <li>Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a href="https://redirect.github.com/github/codeql-action/pull/3807">#3807</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2">2.25.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3823">#3823</a></li> </ul> <h2>4.35.1 - 27 Mar 2026</h2> <ul> <li>Fix incorrect minimum required Git version for <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a href="https://redirect.github.com/github/codeql-action/pull/3781">#3781</a></li> </ul> <h2>4.35.0 - 27 Mar 2026</h2> <ul> <li>Reduced the minimum Git version required for <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> from 2.38.0 to 2.11.0. <a href="https://redirect.github.com/github/codeql-action/pull/3767">#3767</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1">2.25.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3773">#3773</a></li> </ul> <h2>4.34.1 - 20 Mar 2026</h2> <ul> <li>Downgrade default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3">2.24.3</a> due to issues with a small percentage of Actions and JavaScript analyses. <a href="https://redirect.github.com/github/codeql-action/pull/3762">#3762</a></li> </ul> <h2>4.34.0 - 20 Mar 2026</h2> <ul> <li>Added an experimental change which disables TRAP caching when <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. <a href="https://redirect.github.com/github/codeql-action/pull/3569">#3569</a></li> <li>We are rolling out improved incremental analysis to C/C++ analyses that use build mode <code>none</code>. We expect this rollout to be complete by the end of April 2026. <a href="https://redirect.github.com/github/codeql-action/pull/3584">#3584</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0">2.25.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3585">#3585</a></li> </ul> <h2>4.33.0 - 16 Mar 2026</h2> <ul> <li> <p>Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. <a href="https://redirect.github.com/github/codeql-action/pull/3562">#3562</a></p> <p>To opt out of this change:</p> <ul> <li><strong>Repositories owned by an organization:</strong> Create a custom repository property with the name <code>github-codeql-file-coverage-on-prs</code> and the type "True/false", then set this property to <code>true</code> in the repository's settings. For more information, see <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">Managing custom properties for repositories in your organization</a>. Alternatively, if you are using an advanced setup workflow, you can set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> <li><strong>User-owned repositories using default setup:</strong> Switch to an advanced setup workflow and set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> <li><strong>User-owned repositories using advanced setup:</strong> Set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> </ul> </li> <li> <p>Fixed <a href="https://redirect.github.com/github/codeql-action/issues/3555">a bug</a> which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. <a href="https://redirect.github.com/github/codeql-action/pull/3557">#3557</a></p> </li> <li> <p>The CodeQL Action now loads <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">custom repository properties</a> on GitHub Enterprise Server, enabling the customization of features such as <code>github-codeql-disable-overlay</code> that was previously only available on GitHub.com. <a href="https://redirect.github.com/github/codeql-action/pull/3559">#3559</a></p> </li> <li> <p>Once <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">private package registries</a> can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. <a href="https://redirect.github.com/github/codeql-action/pull/3563">#3563</a></p> </li> <li> <p>Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". <a href="https://redirect.github.com/github/codeql-action/pull/3564">#3564</a></p> </li> <li> <p>A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3570">#3570</a></p> </li> </ul> <h2>4.32.6 - 05 Mar 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/95e58e9a2cdfd71adc6e0353d5c52f41a045d225"><code>95e58e9</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3824">#3824</a> from github/update-v4.35.2-d2e135a73</li> <li><a href="https://github.com/github/codeql-action/commit/6f31bfe060e817d81e938dbec767969d20031e25"><code>6f31bfe</code></a> Update changelog for v4.35.2</li> <li><a href="https://github.com/github/codeql-action/commit/d2e135a73a39154e3a231aeb49163c4661c5b8b1"><code>d2e135a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3823">#3823</a> from github/update-bundle/codeql-bundle-v2.25.2</li> <li><a href="https://github.com/github/codeql-action/commit/60abb65df09fcf213c398e064c8a80db1f15cdaf"><code>60abb65</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/5a0a562209255e956ad8aafcee303294e64eefa2"><code>5a0a562</code></a> Update default bundle to codeql-bundle-v2.25.2</li> <li><a href="https://github.com/github/codeql-action/commit/65216971a11ded447a6b76263d5a144519e5eee1"><code>6521697</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3820">#3820</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/3c45af2dd258e1623af1898da5c86545b514e028"><code>3c45af2</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3821">#3821</a> from github/dependabot/npm_and_yarn/npm-minor-345b93...</li> <li><a href="https://github.com/github/codeql-action/commit/f1c339364c12f922998186ed897e45e3b4ae8874"><code>f1c3393</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/1024fc496c87e944a93e98d8cf2c09e2c7602a30"><code>1024fc4</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/9dd4cfed96030ccdfe1af4daf7a7964322704fed"><code>9dd4cfe</code></a> Bump the npm-minor group across 1 directory with 6 updates</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.35.1&new-version=4.35.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-04-20 16:14:47 +00:00

3 changed files with 671 additions and 901 deletions

									
										.github/workflows/codeql-analysis.yml
									
		+3
		-3
	
												View File
												
				@@ -42,7 +42,7 @@ jobs:

				    # Initializes the CodeQL tools for scanning.

				    - name: Initialize CodeQL

				      uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

				      uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2

				      with:

				        languages: ${{ matrix.language }}

				        # If you wish to specify custom queries, you can do so here or in a config file.

				@@ -53,7 +53,7 @@ jobs:

				    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).

				    # If this step fails, then you should remove it and run the build manually (see below)

				    - name: Autobuild

				      uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

				      uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2

				    # ℹ️ Command-line programs to run using the OS shell.

				    # 📚 https://git.io/JvXDl

				@@ -67,4 +67,4 @@ jobs:

				    #   make release

				    - name: Perform CodeQL Analysis

				      uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

				      uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2

package-lock.json

Generated

+664 -894

View File

File diff suppressed because it is too large Load Diff

									
										package.json
									
		+4
		-4
	
												View File
												
				@@ -62,7 +62,7 @@

				    "maplibre-gl": "^5.23.0",

				    "maputnik-design": "github:maputnik/design#172b06c",

				    "ol": "^10.9.0",

				    "ol-mapbox-style": "^13.4.0",

				    "ol-mapbox-style": "^13.4.1",

				    "pmtiles": "^4.4.1",

				    "prop-types": "^15.8.1",

				    "react": "^19.2.4",

				@@ -140,13 +140,13 @@

				    "postcss": "^8.5.10",

				    "react-hot-loader": "^4.13.1",

				    "sass": "^1.99.0",

				    "stylelint": "^17.7.0",

				    "stylelint": "^17.8.0",

				    "stylelint-config-recommended-scss": "^17.0.1",

				    "stylelint-scss": "^7.0.0",

				    "typescript": "^5.9.3",

				    "typescript": "^6.0.2",

				    "typescript-eslint": "^8.58.2",

				    "uuid": "^13.0.0",

				    "vite": "^7.3.2",

				    "vite": "^8.0.8",

				    "vite-plugin-istanbul": "^8.0.0",

				    "vitest": "^4.1.4"

				  }

Compare commits

5 Commits

136c38ced5 ... f0d850eae8

Compare commits

5 Commits 136c38ced5 ... f0d850eae8

5 Commits

136c38ced5 ... f0d850eae8