editor

mirror of https://github.com/maputnik/editor.git synced 2026-07-30 09:47:28 +00:00

Author	SHA1	Message	Date
dependabot[bot]	cd3ddcdb6d	chore(deps-dev): Bump cypress from 15.11.0 to 15.12.0 Bumps [cypress](https://github.com/cypress-io/cypress) from 15.11.0 to 15.12.0. - [Release notes](https://github.com/cypress-io/cypress/releases) - [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md) - [Commits](https://github.com/cypress-io/cypress/compare/v15.11.0...v15.12.0) --- updated-dependencies: - dependency-name: cypress dependency-version: 15.12.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-23 14:03:22 +00:00
dependabot[bot]	853f815767	chore(deps-dev): Bump @types/color from 4.2.0 to 4.2.1 (#1734 ) Bumps [@types/color](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/color) from 4.2.0 to 4.2.1. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/color">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/color&package-manager=npm_and_yarn&previous-version=4.2.0&new-version=4.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 14:01:54 +00:00
dependabot[bot]	fb37f88f79	chore(deps): Bump ol-mapbox-style from 13.3.0 to 13.4.0 (#1733 ) Bumps [ol-mapbox-style](https://github.com/openlayers/ol-mapbox-style) from 13.3.0 to 13.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/releases">ol-mapbox-style's releases</a>.</em></p> <blockquote> <h2>v13.4.0</h2> <h2>Summary</h2> <ul> <li>New hillshading options</li> <li>Support for the <code>line-offset</code> paint property</li> </ul> <h2>What's Changed</h2> <ul> <li>Changes for v13.2.0 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1387">openlayers/ol-mapbox-style#1387</a></li> <li>feat: prevent redundant font loading requests with font-weight ranges by <a href="https://github.com/spliffone"><code>@spliffone</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1398">openlayers/ol-mapbox-style#1398</a></li> <li>Bump lodash from 4.17.21 to 4.17.23 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1399">openlayers/ol-mapbox-style#1399</a></li> <li>Fix background layer source reuse breaking vector layers by <a href="https://github.com/dleone13-terp"><code>@dleone13-terp</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1400">openlayers/ol-mapbox-style#1400</a></li> <li>Bump qs, body-parser and express by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1393">openlayers/ol-mapbox-style#1393</a></li> <li>Bump typedoc from 0.28.14 to 0.28.15 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1389">openlayers/ol-mapbox-style#1389</a></li> <li>Bump puppeteer from 24.33.1 to 24.34.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1390">openlayers/ol-mapbox-style#1390</a></li> <li>Bump html-webpack-plugin from 5.6.4 to 5.6.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1391">openlayers/ol-mapbox-style#1391</a></li> <li>Bump <code>@maplibre/maplibre-gl-style-spec</code> from 23.3.0 to 24.4.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1388">openlayers/ol-mapbox-style#1388</a></li> <li>Bump <code>@rollup/plugin-node-resolve</code> from 16.0.1 to 16.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1392">openlayers/ol-mapbox-style#1392</a></li> <li>Bump webpack from 5.102.1 to 5.105.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1406">openlayers/ol-mapbox-style#1406</a></li> <li>Bump puppeteer from 24.34.0 to 24.36.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1401">openlayers/ol-mapbox-style#1401</a></li> <li>Bump html-webpack-plugin from 5.6.5 to 5.6.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1403">openlayers/ol-mapbox-style#1403</a></li> <li>Bump mini-css-extract-plugin from 2.9.4 to 2.10.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1405">openlayers/ol-mapbox-style#1405</a></li> <li>Bump rollup from 4.46.2 to 4.56.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1402">openlayers/ol-mapbox-style#1402</a></li> <li>Bump webpack-dev-server from 5.2.2 to 5.2.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1404">openlayers/ol-mapbox-style#1404</a></li> <li>Changes for 13.2.1 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1407">openlayers/ol-mapbox-style#1407</a></li> <li>Better match the visual hillshade appearance of MapLibre by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1409">openlayers/ol-mapbox-style#1409</a></li> <li>Updates for Mapbox compatibility by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1415">openlayers/ol-mapbox-style#1415</a></li> <li>Bump qs from 6.14.1 to 6.14.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1410">openlayers/ol-mapbox-style#1410</a></li> <li>Bump sinon from 21.0.0 to 21.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1411">openlayers/ol-mapbox-style#1411</a></li> <li>Bump css-loader from 7.1.2 to 7.1.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1412">openlayers/ol-mapbox-style#1412</a></li> <li>Bump puppeteer from 24.36.0 to 24.37.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1413">openlayers/ol-mapbox-style#1413</a></li> <li>Bump globals from 16.5.0 to 17.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1414">openlayers/ol-mapbox-style#1414</a></li> <li>Changes for 13.3.0 by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1416">openlayers/ol-mapbox-style#1416</a></li> <li>Raster contrast and alpha fixes; add zoom exaggeration for DEM by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1424">openlayers/ol-mapbox-style#1424</a></li> <li>New hillshading options by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1425">openlayers/ol-mapbox-style#1425</a></li> <li>Isolate text color and halo by <a href="https://github.com/ahocevar"><code>@ahocevar</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1428">openlayers/ol-mapbox-style#1428</a></li> <li>Bump webpack from 5.105.0 to 5.105.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1418">openlayers/ol-mapbox-style#1418</a></li> <li>feat: added line-offset by <a href="https://github.com/ElGreeno"><code>@ElGreeno</code></a> in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1430">openlayers/ol-mapbox-style#1430</a></li> <li>Bump css-loader from 7.1.3 to 7.1.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1419">openlayers/ol-mapbox-style#1419</a></li> <li>Bump proj4 from 2.19.10 to 2.20.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1420">openlayers/ol-mapbox-style#1420</a></li> <li>Bump puppeteer from 24.37.3 to 24.37.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1421">openlayers/ol-mapbox-style#1421</a></li> <li>Bump basic-ftp from 5.1.0 to 5.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1422">openlayers/ol-mapbox-style#1422</a></li> <li>Bump minimatch by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1423">openlayers/ol-mapbox-style#1423</a></li> <li>Bump rollup from 4.57.1 to 4.59.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1426">openlayers/ol-mapbox-style#1426</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/spliffone"><code>@spliffone</code></a> made their first contribution in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1398">openlayers/ol-mapbox-style#1398</a></li> <li><a href="https://github.com/dleone13-terp"><code>@dleone13-terp</code></a> made their first contribution in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1400">openlayers/ol-mapbox-style#1400</a></li> <li><a href="https://github.com/ElGreeno"><code>@ElGreeno</code></a> made their first contribution in <a href="https://redirect.github.com/openlayers/ol-mapbox-style/pull/1430">openlayers/ol-mapbox-style#1430</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.2.0...v13.4.0">https://github.com/openlayers/ol-mapbox-style/compare/v13.2.0...v13.4.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/openlayers/ol-mapbox-style/blob/main/CHANGELOG.md">ol-mapbox-style's changelog</a>.</em></p> <blockquote> <h2>13.4.0</h2> <ul> <li>New hillshading options</li> <li>Support for the <code>line-offset</code> paint property</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/0c53469f003afd099acabee1a74c114d09f5bfc1"><code>0c53469</code></a> Add dist for v13.4.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/83733d0b913f0bdb153432adb2f6d9fbef81c018"><code>83733d0</code></a> Changes for 13.4.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/662df98125db130dc1da627da2dfaa201be30228"><code>662df98</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1426">#1426</a> from openlayers/dependabot/npm_and_yarn/rollup-4.59.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/9d416bbcd474947ab1ed6de1318d0be34cb4bd92"><code>9d416bb</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1423">#1423</a> from openlayers/dependabot/npm_and_yarn/multi-bcbe54...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/45d75ddfc8270faf6008b403d00719390e112919"><code>45d75dd</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1422">#1422</a> from openlayers/dependabot/npm_and_yarn/basic-ftp-5.2.0</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/b46de6350fe30a102410f0b8a6d5436f6d8ba833"><code>b46de63</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1421">#1421</a> from openlayers/dependabot/npm_and_yarn/puppeteer-24...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/8683d0a04e804ee06262e74ff840ecd6b881809f"><code>8683d0a</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1420">#1420</a> from openlayers/dependabot/npm_and_yarn/proj4-2.20.2</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/3681972017804e9bba7200c57a32e8edd14c4b75"><code>3681972</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1419">#1419</a> from openlayers/dependabot/npm_and_yarn/css-loader-7...</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/831993b8a9d8aefe83c91d58c2ab02979875fde1"><code>831993b</code></a> Merge pull request <a href="https://redirect.github.com/openlayers/ol-mapbox-style/issues/1430">#1430</a> from ElGreeno/add-line-offset</li> <li><a href="https://github.com/openlayers/ol-mapbox-style/commit/bfb2c342b5c317812baf0a12b442fcaae04badf9"><code>bfb2c34</code></a> feat: added line-offset</li> <li>Additional commits viewable in <a href="https://github.com/openlayers/ol-mapbox-style/compare/v13.3.0...v13.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ol-mapbox-style&package-manager=npm_and_yarn&previous-version=13.3.0&new-version=13.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 14:01:27 +00:00
dependabot[bot]	9d690ba977	chore(deps): Bump i18next from 25.8.18 to 25.8.20 (#1731 ) Bumps [i18next](https://github.com/i18next/i18next) from 25.8.18 to 25.8.20. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/releases">i18next's releases</a>.</em></p> <blockquote> <h2>v25.8.20</h2> <ul> <li> <ul> <li>fix: <code>getFixedT()</code> selector now resolves namespaces against the effective <code>ns</code> rather than the global init options <a href="https://redirect.github.com/i18next/i18next/issues/2406">#2406</a></li> </ul> </li> </ul> <h2>v25.8.19</h2> <ul> <li>fix: selector API namespace resolution regression for single-string <code>ns</code> and primary namespace in array <a href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a>. Reverts the broad namespace-prefix rewrite from v25.8.15 and replaces it with a targeted fix that only rewrites paths starting with a secondary namespace in a multi-namespace array, matching the type-level contract of <code>GetSource</code></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's changelog</a>.</em></p> <blockquote> <h2>25.8.20</h2> <ul> <li> <ul> <li>fix: <code>getFixedT()</code> selector now resolves namespaces against the effective <code>ns</code> rather than the global init options <a href="https://redirect.github.com/i18next/i18next/issues/2406">2406</a></li> </ul> </li> </ul> <h2>25.8.19</h2> <ul> <li>fix: selector API namespace resolution regression for single-string <code>ns</code> and primary namespace in array <a href="https://redirect.github.com/i18next/i18next/issues/2405">2405</a>. Reverts the broad namespace-prefix rewrite from v25.8.15 and replaces it with a targeted fix that only rewrites paths starting with a secondary namespace in a multi-namespace array, matching the type-level contract of <code>GetSource</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next/commit/037e978f33a2bf8f232bdbbc029a296ca89c4288"><code>037e978</code></a> 25.8.20</li> <li><a href="https://github.com/i18next/i18next/commit/8750f7165c70834774501dab2902d5fc89a49ad6"><code>8750f71</code></a> fix: <code>getFixedT()</code> selector now resolves namespaces against the effective `ns...</li> <li><a href="https://github.com/i18next/i18next/commit/4736b20b16ee08ff38e0bd939ee95e92994a3c2d"><code>4736b20</code></a> jsr update</li> <li><a href="https://github.com/i18next/i18next/commit/160cde565cc9d72997f1575ede32d94e7230a22c"><code>160cde5</code></a> 25.8.19</li> <li><a href="https://github.com/i18next/i18next/commit/88d5145131be3fe98b90567ed26d0d08cd01b2c8"><code>88d5145</code></a> fix <a href="https://redirect.github.com/i18next/i18next/issues/2405">#2405</a> by reverting changes in v25.8.15</li> <li><a href="https://github.com/i18next/i18next/commit/938fd1c8492ff8078af5ee2e5c35c630da12aeb8"><code>938fd1c</code></a> jsr update</li> <li>See full diff in <a href="https://github.com/i18next/i18next/compare/v25.8.18...v25.8.20">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next&package-manager=npm_and_yarn&previous-version=25.8.18&new-version=25.8.20)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 14:00:53 +00:00
dependabot[bot]	e54bf949fc	chore(deps-dev): Bump stylelint from 17.4.0 to 17.5.0 (#1732 ) Bumps [stylelint](https://github.com/stylelint/stylelint) from 17.4.0 to 17.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/releases">stylelint's releases</a>.</em></p> <blockquote> <h2>17.5.0</h2> <p>It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released <a href="https://github.com/stylelint/vscode-stylelint/releases/tag/2.1.0"><code>2.1.0</code></a> of <a href="https://marketplace.visualstudio.com/items?itemName=stylelint.vscode-stylelint">our VS Code extension</a>, which adds 8 new requested features, and our <a href="https://www.npmjs.com/package/@stylelint/language-server">first release</a> of the Stylelint Language Server.</p> <ul> <li>Deprecated: <code>syntax</code> options from <code>declaration-property-value-no-unknown</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9102">#9102</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Added: <code>ignoreMediaFeatureNameValues: {}</code> to <code>media-feature-name-value-no-unknown</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/8976">#8976</a>) (<a href="https://github.com/kovsu"><code>@kovsu</code></a>).</li> <li>Fixed: <code>node_modules</code> not ignored when using <code>codeFilename</code> in Node.js API (<a href="https://redirect.github.com/stylelint/stylelint/issues/9130">#9130</a>) (<a href="https://github.com/adalinesimonian"><code>@adalinesimonian</code></a>).</li> <li>Fixed: <code>Error TS7016</code> for imported <code>css-tree</code> types (<a href="https://redirect.github.com/stylelint/stylelint/issues/9133">#9133</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Fixed: <code>declaration-property-value-keyword-no-deprecated</code> false positives for function arguments (<a href="https://redirect.github.com/stylelint/stylelint/issues/9116">#9116</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Fixed: <code>declaration-property-value-no-unknown</code> false positives for <code>calc-size()</code> containing <code>size</code> keyword (<a href="https://redirect.github.com/stylelint/stylelint/issues/9105">#9105</a>) (<a href="https://github.com/hriztam"><code>@hriztam</code></a>).</li> <li>Fixed: <code>no-descending-specificity</code> & <code>no-duplicate-selectors</code> false negatives for equivalent compound selectors (<a href="https://redirect.github.com/stylelint/stylelint/issues/8977">#8977</a>) (<a href="https://github.com/kovsu"><code>@kovsu</code></a>).</li> <li>Fixed: <code>no-invalid-position-declaration</code> false positives for <code>@mixin</code> and <code>@scope</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9120">#9120</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Fixed: <code>property-no-unknown</code> false negatives for <code>types</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9117">#9117</a>) (<a href="https://github.com/Mouvedia"><code>@Mouvedia</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md">stylelint's changelog</a>.</em></p> <blockquote> <h2>17.5.0 - 2026-03-19</h2> <p>It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released <a href="https://github.com/stylelint/vscode-stylelint/releases/tag/2.1.0"><code>2.1.0</code></a> of <a href="https://marketplace.visualstudio.com/items?itemName=stylelint.vscode-stylelint">our VS Code extension</a>, which adds 8 new requested features, and our <a href="https://www.npmjs.com/package/@stylelint/language-server">first release</a> of the Stylelint Language Server.</p> <ul> <li>Deprecated: <code>syntax</code> options from <code>declaration-property-value-no-unknown</code> (<a href="https://redirect.github.com/stylelint/stylelint/pull/9102">#9102</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Added: <code>ignoreMediaFeatureNameValues: {}</code> to <code>media-feature-name-value-no-unknown</code> (<a href="https://redirect.github.com/stylelint/stylelint/pull/8976">#8976</a>) (<a href="https://github.com/kovsu"><code>@kovsu</code></a>).</li> <li>Fixed: <code>node_modules</code> not ignored when using <code>codeFilename</code> in Node.js API (<a href="https://redirect.github.com/stylelint/stylelint/pull/9130">#9130</a>) (<a href="https://github.com/adalinesimonian"><code>@adalinesimonian</code></a>).</li> <li>Fixed: <code>Error TS7016</code> for imported <code>css-tree</code> types (<a href="https://redirect.github.com/stylelint/stylelint/pull/9133">#9133</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Fixed: <code>declaration-property-value-keyword-no-deprecated</code> false positives for function arguments (<a href="https://redirect.github.com/stylelint/stylelint/pull/9116">#9116</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Fixed: <code>declaration-property-value-no-unknown</code> false positives for <code>calc-size()</code> containing <code>size</code> keyword (<a href="https://redirect.github.com/stylelint/stylelint/pull/9105">#9105</a>) (<a href="https://github.com/hriztam"><code>@hriztam</code></a>).</li> <li>Fixed: <code>no-descending-specificity</code> & <code>no-duplicate-selectors</code> false negatives for equivalent compound selectors (<a href="https://redirect.github.com/stylelint/stylelint/pull/8977">#8977</a>) (<a href="https://github.com/kovsu"><code>@kovsu</code></a>).</li> <li>Fixed: <code>no-invalid-position-declaration</code> false positives for <code>@mixin</code> and <code>@scope</code> (<a href="https://redirect.github.com/stylelint/stylelint/pull/9120">#9120</a>) (<a href="https://github.com/ragini-pandey"><code>@ragini-pandey</code></a>).</li> <li>Fixed: <code>property-no-unknown</code> false negatives for <code>types</code> (<a href="https://redirect.github.com/stylelint/stylelint/pull/9117">#9117</a>) (<a href="https://github.com/Mouvedia"><code>@Mouvedia</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stylelint/stylelint/commit/8d0198af1bfb6a144d8fce9a094754e41c148237"><code>8d0198a</code></a> Release 17.5.0 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9160">#9160</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/3ba50ac3e6e915774a587ff119c0b609b506705e"><code>3ba50ac</code></a> Add <code>ignoreMediaFeatureNameValues: {}</code> to `media-feature-name-value-no-unknow...</li> <li><a href="https://github.com/stylelint/stylelint/commit/77dfd01d01d38711e35e8dead4440df179698808"><code>77dfd01</code></a> Fix <code>no-invalid-position-declaration</code> false positives for <code>@mixin</code> and `@scop...</li> <li><a href="https://github.com/stylelint/stylelint/commit/7cde2d0ccf5547a28a8f7a6be56e505441a6f437"><code>7cde2d0</code></a> Fix <code>declaration-property-value-keyword-no-deprecated</code> false positives for fu...</li> <li><a href="https://github.com/stylelint/stylelint/commit/7b10658abb77a2ab309adca2f077062d80467f3a"><code>7b10658</code></a> Fix <code>declaration-property-value-no-unknown</code> false positives for <code>calc-size()</code>...</li> <li><a href="https://github.com/stylelint/stylelint/commit/e5b9ec7ad4437eae9dd9b2a7677b785dd25c51a3"><code>e5b9ec7</code></a> Deprecate <code>*syntax</code> options from <code>declaration-property-value-no-unknown</code> (<a href="https://redirect.github.com/stylelint/stylelint/issues/9102">#9102</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/5bd2d21e8a6b47f529314284d162e6dcb37ef681"><code>5bd2d21</code></a> Bump css-tree from 3.1.0 to 3.2.1 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9158">#9158</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/995caf4ea7c7fd0e352cdec026a3edd9af6b665f"><code>995caf4</code></a> Bump eslint from 10.0.2 to 10.0.3 in the eslint group (<a href="https://redirect.github.com/stylelint/stylelint/issues/9156">#9156</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/f5f6dddc6b1b4e11dfc701dc40ee4b496252e848"><code>f5f6ddd</code></a> Bump lint-staged from 16.2.7 to 16.3.3 (<a href="https://redirect.github.com/stylelint/stylelint/issues/9159">#9159</a>)</li> <li><a href="https://github.com/stylelint/stylelint/commit/68948180cd615f91baf2bc19d5999be814102f2b"><code>6894818</code></a> Bump the jest group with 2 updates (<a href="https://redirect.github.com/stylelint/stylelint/issues/9157">#9157</a>)</li> <li>Additional commits viewable in <a href="https://github.com/stylelint/stylelint/compare/17.4.0...17.5.0">compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=stylelint&package-manager=npm_and_yarn&previous-version=17.4.0&new-version=17.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-23 14:00:50 +00:00
dependabot[bot]	be1723d275	chore(deps-dev): Bump flatted from 3.3.3 to 3.4.2 (#1729 ) Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7"><code>3bf0909</code></a> 3.4.2</li> <li><a href="https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"><code>885ddcc</code></a> fix CWE-1321</li> <li><a href="https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3"><code>0bdba70</code></a> added flatted-view to the benchmark</li> <li><a href="https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20"><code>2a02dce</code></a> 3.4.1</li> <li><a href="https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416"><code>fba4e8f</code></a> Merge pull request <a href="https://redirect.github.com/WebReflection/flatted/issues/89">#89</a> from WebReflection/python-fix</li> <li><a href="https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7"><code>5fe8648</code></a> added "when in Rome" also a test for PHP</li> <li><a href="https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0"><code>53517ad</code></a> some minor improvement</li> <li><a href="https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f"><code>b3e2a0c</code></a> Fixing recursion issue in Python too</li> <li><a href="https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad"><code>c4b46db</code></a> Add SECURITY.md for security policy and reporting</li> <li><a href="https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988"><code>f86d071</code></a> Create dependabot.yml for version updates</li> <li>Additional commits viewable in <a href="https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flatted&package-manager=npm_and_yarn&previous-version=3.3.3&new-version=3.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/maplibre/maputnik/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-20 14:01:06 +00:00
dependabot[bot]	da98c58df0	chore(deps-dev): Bump typescript-eslint from 8.57.0 to 8.57.1 (#1728 ) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.57.0 to 8.57.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.57.1</h2> <h2>8.57.1 (2026-03-16)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] no report for property on intersection type (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12126">#12126</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Newton Yuan <a href="https://github.com/NewtonYuan"><code>@NewtonYuan</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.57.1 (2026-03-16)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c7c38aa252d7bf6708a225aebedc57686ac33dcd"><code>c7c38aa</code></a> chore(release): publish 8.57.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typescript-eslint&package-manager=npm_and_yarn&previous-version=8.57.0&new-version=8.57.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-20 13:53:03 +00:00
dependabot[bot]	1aaae625eb	chore(deps): Bump maplibre-gl from 5.19.0 to 5.20.2 (#1726 ) Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from 5.19.0 to 5.20.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's releases</a>.</em></p> <blockquote> <h2>v5.20.2</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix update GeoJSON when using diff update by updating geojson-vt package (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7257">#7257</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> </ul> <h2>v5.20.1</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix cannot read properties of undefined (reading 'range') by updating geojson-vt package (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7245">#7245</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix a bug where <code>raster-resampling: nearest</code> was not applied as expected (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7247">#7247</a>) (by <a href="https://github.com/yano-h"><code>@yano-h</code></a>)</li> </ul> <h2>v5.20.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add Etag unmodified support to optimize vector tile reloading (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7074">#7074</a>) (by [<a href="https://github.com/rivkamatan"><code>@rivkamatan</code></a>](<a href="https://github.com/rivkamatan">https://github.com/rivkamatan</a> and <a href="https://github.com/wayofthefuture"><code>@wayofthefuture</code></a>)</li> <li>Add <code>boxZoom.boxZoomEnd</code> option to customize the action after Shift-drag box selection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6397">#6397</a>) (by <a href="https://github.com/itisyb"><code>@itisyb</code></a>)</li> <li>Implement <code>resampling</code> paint property for raster, hillshade, and color-relief layers (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7194">#7074</a>) (by <a href="https://github.com/larsmaxfield"><code>@larsmaxfield</code></a>)</li> <li>Add updateable support for GeoJSON-VT (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7172">#7172</a>) (by <a href="https://github.com/wayofthefuture"><code>@wayofthefuture</code></a> and <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Add example for 3D Tiles using three.js (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7198">#7198</a>) (by <a href="https://github.com/hh-hang"><code>@hh-hang</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix: Distance to tile is calculated incorrectly in globe projection for high pitch angles (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7219">#7219</a>) (by <a href="https://github.com/jtfedd"><code>@jtfedd</code></a>)</li> <li>Fix: Tiles are not cleared when using vector tile source <code>setUrl/setTiles</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7185">#7185</a>) (by <a href="https://github.com/madoci"><code>@madoci</code></a>)</li> <li>Fix: Allow opaque origins ("null") in Actor message filtering (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7047">#7047</a>) (by <a href="https://github.com/pcardinal"><code>@pcardinal</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's changelog</a>.</em></p> <blockquote> <h2>5.20.2</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix update GeoJSON when using diff update by updating geojson-vt package (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7257">#7257</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> </ul> <h2>5.20.1</h2> <h3>🐞 Bug fixes</h3> <ul> <li>Fix cannot read properties of undefined (reading 'range') by updating geojson-vt package (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7245">#7245</a>) (by <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Fix a bug where <code>raster-resampling: nearest</code> was not applied as expected (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7247">#7247</a>) (by <a href="https://github.com/yano-h"><code>@yano-h</code></a>)</li> </ul> <h2>5.20.0</h2> <h3>✨ Features and improvements</h3> <ul> <li>Add Etag unmodified support to optimize vector tile reloading (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7074">#7074</a>) (by [<a href="https://github.com/rivkamatan"><code>@rivkamatan</code></a>](<a href="https://github.com/rivkamatan">https://github.com/rivkamatan</a> and <a href="https://github.com/wayofthefuture"><code>@wayofthefuture</code></a>)</li> <li>Add <code>boxZoom.boxZoomEnd</code> option to customize the action after Shift-drag box selection (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/6397">#6397</a>) (by <a href="https://github.com/itisyb"><code>@itisyb</code></a>)</li> <li>Implement <code>resampling</code> paint property for raster, hillshade, and color-relief layers (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7194">#7074</a>) (by <a href="https://github.com/larsmaxfield"><code>@larsmaxfield</code></a>)</li> <li>Add updateable support for GeoJSON-VT (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7172">#7172</a>) (by <a href="https://github.com/wayofthefuture"><code>@wayofthefuture</code></a> and <a href="https://github.com/HarelM"><code>@HarelM</code></a>)</li> <li>Add example for 3D Tiles using three.js (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7198">#7198</a>) (by <a href="https://github.com/hh-hang"><code>@hh-hang</code></a>)</li> </ul> <h3>🐞 Bug fixes</h3> <ul> <li>Fix: Distance to tile is calculated incorrectly in globe projection for high pitch angles (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7219">#7219</a>) (by <a href="https://github.com/jtfedd"><code>@jtfedd</code></a>)</li> <li>Fix: Tiles are not cleared when using vector tile source <code>setUrl/setTiles</code> (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7185">#7185</a>) (by <a href="https://github.com/madoci"><code>@madoci</code></a>)</li> <li>Fix: Allow opaque origins ("null") in Actor message filtering (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7047">#7047</a>) (by <a href="https://github.com/pcardinal"><code>@pcardinal</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/109fa99ea55c16a26cf8ce294d96bf4b0b93524a"><code>109fa99</code></a> Bump js version to 5.20.2 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7274">#7274</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/44a70ea41ebc5fb08460dd2d6f32fda45277da28"><code>44a70ea</code></a> chore(deps-dev): bump puppeteer from 24.39.0 to 24.39.1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7269">#7269</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/34afdcaed628319a015aef59682272b0b81f0d38"><code>34afdca</code></a> chore(deps): bump <code>@maplibre/geojson-vt</code> from 6.0.2 to 6.0.3 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7270">#7270</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/8dce8fbce0a8d7ef05c1727f821e3db5f8c3079b"><code>8dce8fb</code></a> chore(deps-dev): bump <code>@vitest/eslint-plugin</code> in the vitest group (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7268">#7268</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/ed6aa7159b682fb0269f4ec108c08b8893615fb9"><code>ed6aa71</code></a> Remove unused import 'vi' from raster_style_layer test (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7266">#7266</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/eb88b98ddb9ed88b427f4637a4507f8a548ad48e"><code>eb88b98</code></a> chore(deps-dev): bump puppeteer from 24.38.0 to 24.39.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7264">#7264</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/4dcf61778a72ca2d2aa66faa261185cb730cb5ef"><code>4dcf617</code></a> chore(deps-dev): bump <code>@types/node</code> from 25.4.0 to 25.5.0 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7263">#7263</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/52e6738ea5000bca68266e8876e4e2de7491fc80"><code>52e6738</code></a> chore(deps-dev): bump the vitest group with 4 updates (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7262">#7262</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/38e2bc073b63c02a7826e4a5b5dc1214e255d5bc"><code>38e2bc0</code></a> chore(deps-dev): bump undici from 7.21.0 to 7.24.1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7259">#7259</a>)</li> <li><a href="https://github.com/maplibre/maplibre-gl-js/commit/f293c20bb7317d0c4704434d21d581c2a2a454ba"><code>f293c20</code></a> Bump js version to 5.20.1 (<a href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7256">#7256</a>)</li> <li>Additional commits viewable in <a href="https://github.com/maplibre/maplibre-gl-js/compare/v5.19.0...v5.20.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=5.19.0&new-version=5.20.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-20 13:52:03 +00:00
dependabot[bot]	ea415611a4	chore(deps-dev): Bump i18next-cli from 1.50.1 to 1.50.3 (#1725 ) Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.50.1 to 1.50.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/i18next/i18next-cli/compare/v1.50.2...v1.50.3">1.50.3</a> - 2026-03-16</h2> <ul> <li>Improve <code>status</code> output to distinguish between <strong>untranslated</strong> keys (present in the file with an empty value — needs translation) and <strong>absent</strong> keys (missing from the file entirely — probably structural problem). Both still cause a non-zero exit. Addresses <a href="https://redirect.github.com/i18next/i18next-cli/issues/220">#220</a>.</li> </ul> <h2><a href="https://github.com/i18next/i18next-cli/compare/v1.50.1...v1.50.2">1.50.2</a> - 2026-03-16</h2> <ul> <li>try to address <a href="https://redirect.github.com/i18next/i18next-cli/issues/218">#218</a> by updating <code>i18next-resources-for-ts</code> dependency</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-cli/commit/1770d8c7616e4d328adbe8a980e1862f5414a1ec"><code>1770d8c</code></a> 1.50.3</li> <li><a href="https://github.com/i18next/i18next-cli/commit/77936ea38014335d60ff276e2d73756cd340a70b"><code>77936ea</code></a> improve status output to help distinguish <a href="https://redirect.github.com/i18next/i18next-cli/issues/220">#220</a></li> <li><a href="https://github.com/i18next/i18next-cli/commit/6ea3b097f3a4976e9da59247516f5b302d1388d7"><code>6ea3b09</code></a> 1.50.2</li> <li><a href="https://github.com/i18next/i18next-cli/commit/ee054be255c8bfca54129f026d99aec077c81ef9"><code>ee054be</code></a> try to address <a href="https://redirect.github.com/i18next/i18next-cli/issues/218">#218</a> by updating <code>i18next-resources-for-ts</code> dependency</li> <li>See full diff in <a href="https://github.com/i18next/i18next-cli/compare/v1.50.1...v1.50.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.50.1&new-version=1.50.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-20 13:51:37 +00:00
dependabot[bot]	9be7f9dfb2	chore(deps): Bump github/codeql-action from 4.32.6 to 4.33.0 (#1724 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.6 to 4.33.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.33.0</h2> <ul> <li> <p>Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. <a href="https://redirect.github.com/github/codeql-action/pull/3562">#3562</a></p> <p>To opt out of this change:</p> <ul> <li><strong>Repositories owned by an organization:</strong> Create a custom repository property with the name <code>github-codeql-file-coverage-on-prs</code> and the type "True/false", then set this property to <code>true</code> in the repository's settings. For more information, see <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">Managing custom properties for repositories in your organization</a>. Alternatively, if you are using an advanced setup workflow, you can set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> <li><strong>User-owned repositories using default setup:</strong> Switch to an advanced setup workflow and set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> <li><strong>User-owned repositories using advanced setup:</strong> Set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> </ul> </li> <li> <p>Fixed <a href="https://redirect.github.com/github/codeql-action/issues/3555">a bug</a> which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. <a href="https://redirect.github.com/github/codeql-action/pull/3557">#3557</a></p> </li> <li> <p>The CodeQL Action now loads <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">custom repository properties</a> on GitHub Enterprise Server, enabling the customization of features such as <code>github-codeql-disable-overlay</code> that was previously only available on GitHub.com. <a href="https://redirect.github.com/github/codeql-action/pull/3559">#3559</a></p> </li> <li> <p>Once <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">private package registries</a> can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. <a href="https://redirect.github.com/github/codeql-action/pull/3563">#3563</a></p> </li> <li> <p>Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". <a href="https://redirect.github.com/github/codeql-action/pull/3564">#3564</a></p> </li> <li> <p>A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3570">#3570</a></p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li>Added an experimental change which disables TRAP caching when <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. <a href="https://redirect.github.com/github/codeql-action/pull/3569">#3569</a></li> </ul> <h2>4.33.0 - 16 Mar 2026</h2> <ul> <li> <p>Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. <a href="https://redirect.github.com/github/codeql-action/pull/3562">#3562</a></p> <p>To opt out of this change:</p> <ul> <li><strong>Repositories owned by an organization:</strong> Create a custom repository property with the name <code>github-codeql-file-coverage-on-prs</code> and the type "True/false", then set this property to <code>true</code> in the repository's settings. For more information, see <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">Managing custom properties for repositories in your organization</a>. Alternatively, if you are using an advanced setup workflow, you can set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> <li><strong>User-owned repositories using default setup:</strong> Switch to an advanced setup workflow and set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> <li><strong>User-owned repositories using advanced setup:</strong> Set the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to <code>true</code> in your workflow.</li> </ul> </li> <li> <p>Fixed <a href="https://redirect.github.com/github/codeql-action/issues/3555">a bug</a> which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. <a href="https://redirect.github.com/github/codeql-action/pull/3557">#3557</a></p> </li> <li> <p>The CodeQL Action now loads <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">custom repository properties</a> on GitHub Enterprise Server, enabling the customization of features such as <code>github-codeql-disable-overlay</code> that was previously only available on GitHub.com. <a href="https://redirect.github.com/github/codeql-action/pull/3559">#3559</a></p> </li> <li> <p>Once <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">private package registries</a> can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. <a href="https://redirect.github.com/github/codeql-action/pull/3563">#3563</a></p> </li> <li> <p>Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". <a href="https://redirect.github.com/github/codeql-action/pull/3564">#3564</a></p> </li> <li> <p>A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3570">#3570</a></p> </li> </ul> <h2>4.32.6 - 05 Mar 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3">2.24.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3548">#3548</a></li> </ul> <h2>4.32.5 - 02 Mar 2026</h2> <ul> <li>Repositories owned by an organization can now set up the <code>github-codeql-disable-overlay</code> custom repository property to disable <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis for CodeQL</a>. First, create a custom repository property with the name <code>github-codeql-disable-overlay</code> and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to <code>true</code> to disable improved incremental analysis. For more information, see <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">Managing custom properties for repositories in your organization</a>. This feature is not yet available on GitHub Enterprise Server. <a href="https://redirect.github.com/github/codeql-action/pull/3507">#3507</a></li> <li>Added an experimental change so that when <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. <a href="https://redirect.github.com/github/codeql-action/pull/3487">#3487</a></li> <li>The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. <a href="https://redirect.github.com/github/codeql-action/pull/3515">#3515</a></li> <li>Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. <a href="https://redirect.github.com/github/codeql-action/pull/3516">#3516</a></li> <li>Added an experimental change which lowers the minimum disk space requirement for <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a>, enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. <a href="https://redirect.github.com/github/codeql-action/pull/3498">#3498</a></li> <li>Added an experimental change which allows the <code>start-proxy</code> action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. <a href="https://redirect.github.com/github/codeql-action/pull/3512">#3512</a></li> <li>The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. <a href="https://redirect.github.com/github/codeql-action/pull/3503">#3503</a>, <a href="https://redirect.github.com/github/codeql-action/pull/3504">#3504</a></li> </ul> <h2>4.32.4 - 20 Feb 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.2">2.24.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3493">#3493</a></li> <li>Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">private package registries are configured</a>. This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. <a href="https://redirect.github.com/github/codeql-action/pull/3473">#3473</a></li> <li>When the CodeQL Action is run <a href="https://docs.github.com/en/code-security/how-tos/scan-code-for-vulnerabilities/troubleshooting/troubleshooting-analysis-errors/logs-not-detailed-enough#creating-codeql-debugging-artifacts-for-codeql-default-setup">with debugging enabled in Default Setup</a> and <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">private package registries are configured</a>, the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. <a href="https://redirect.github.com/github/codeql-action/pull/3486">#3486</a></li> <li>Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. <a href="https://redirect.github.com/github/codeql-action/pull/3485">#3485</a></li> <li>Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a <a href="https://github.com/dsp-testing/codeql-cli-nightlies">nightly CodeQL CLI release</a> instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. <a href="https://redirect.github.com/github/codeql-action/pull/3484">#3484</a></li> </ul> <h2>4.32.3 - 13 Feb 2026</h2> <ul> <li>Added experimental support for testing connections to <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">private package registries</a>. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. <a href="https://redirect.github.com/github/codeql-action/pull/3466">#3466</a></li> </ul> <h2>4.32.2 - 05 Feb 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/b1bff81932f5cdfc8695c7752dcee935dcd061c8"><code>b1bff81</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3574">#3574</a> from github/update-v4.32.7-7dd76e6bf</li> <li><a href="https://github.com/github/codeql-action/commit/e682234222f60d9549e37004a04a8f097bbd5798"><code>e682234</code></a> Add changelog entry for <a href="https://redirect.github.com/github/codeql-action/issues/3570">#3570</a></li> <li><a href="https://github.com/github/codeql-action/commit/95be291f41a39216811b3ce1a63a8df71d40d405"><code>95be291</code></a> Bump minor version</li> <li><a href="https://github.com/github/codeql-action/commit/59bcb6025e4788109a6bb8f7ac4ad9c6a8d6beeb"><code>59bcb60</code></a> Update changelog for v4.32.7</li> <li><a href="https://github.com/github/codeql-action/commit/7dd76e6bf79d24133aa649887a6ee01d8b063816"><code>7dd76e6</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3572">#3572</a> from github/mbg/pr-checks/eslint</li> <li><a href="https://github.com/github/codeql-action/commit/e3200e331bf51e47d45a8a5645d2a125c8a8a643"><code>e3200e3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3563">#3563</a> from github/mbg/private-registry/oidc</li> <li><a href="https://github.com/github/codeql-action/commit/4c356c71a28eb968dbcf4fb717211e82f406874f"><code>4c356c7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3570">#3570</a> from github/mbg/repo-props/warn-on-unexpected-props</li> <li><a href="https://github.com/github/codeql-action/commit/b4937c19e53d395cc647fe16c4e00788a4e7ded3"><code>b4937c1</code></a> Only emit one message with accumulated property names</li> <li><a href="https://github.com/github/codeql-action/commit/136b8ab3777165e3ec7a19faa7ef9732ace305da"><code>136b8ab</code></a> Remove <code>cache-dependency-path</code> options as well</li> <li><a href="https://github.com/github/codeql-action/commit/a5aba5952cd5add76ec9f971654d61461a3ac2bd"><code>a5aba59</code></a> Remove <code>package-lock.json</code> that's no longer needed</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/0d579ffd059c29b07949a3cce3983f0780820c98...b1bff81932f5cdfc8695c7752dcee935dcd061c8">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.32.6&new-version=4.33.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-19 13:54:37 +00:00
dependabot[bot]	bb8416791a	chore(deps): Bump slugify from 1.6.6 to 1.6.8 (#1719 ) Bumps [slugify](https://github.com/simov/slugify) from 1.6.6 to 1.6.8. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/simov/slugify/blob/master/CHANGELOG.md">slugify's changelog</a>.</em></p> <blockquote> <h2>Change Log</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/simov/slugify/commit/fbbb8ff5b8f04d6c8048675dd23a09d8343cf62c"><code>fbbb8ff</code></a> 1.6.8</li> <li><a href="https://github.com/simov/slugify/commit/a71a725abe37521d9fc233eb4053c5a19125a531"><code>a71a725</code></a> patch: fix package.json</li> <li><a href="https://github.com/simov/slugify/commit/21b2bfcee111f8b8892861414c9fb27d6b64f440"><code>21b2bfc</code></a> 1.6.7</li> <li><a href="https://github.com/simov/slugify/commit/f1b83a400839054bc16f4900806f7366267517a6"><code>f1b83a4</code></a> fix: change declare module to namespace in slugify.d.ts (<a href="https://redirect.github.com/simov/slugify/issues/206">#206</a>)</li> <li><a href="https://github.com/simov/slugify/commit/b94fedbf53411562aaf7f4d176a29e5669112c06"><code>b94fedb</code></a> CI: add Node 24 (<a href="https://redirect.github.com/simov/slugify/issues/202">#202</a>)</li> <li><a href="https://github.com/simov/slugify/commit/c99c574fcbd3468e380ecbda46a6d157da261d74"><code>c99c574</code></a> Add Node.js 22 to CI & update CI actions (<a href="https://redirect.github.com/simov/slugify/issues/193">#193</a>)</li> <li><a href="https://github.com/simov/slugify/commit/4860d7efd6734af8c716f26cd246aa5b1e503163"><code>4860d7e</code></a> Merge pull request <a href="https://redirect.github.com/simov/slugify/issues/188">#188</a> from stscoundrel/patch-1</li> <li><a href="https://github.com/simov/slugify/commit/6dc0bba401df6d2c4bf231ce79e46847b7f33fa6"><code>6dc0bba</code></a> Run CI in Node.js 20</li> <li><a href="https://github.com/simov/slugify/commit/daab9285fa8869c4b999f4ef50f0e3ca5b7a2129"><code>daab928</code></a> Update changelog</li> <li>See full diff in <a href="https://github.com/simov/slugify/compare/v1.6.6...v1.6.8">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=slugify&package-manager=npm_and_yarn&previous-version=1.6.6&new-version=1.6.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-17 13:53:02 +00:00

3 changed files with 271 additions and 297 deletions

									
										.github/workflows/codeql-analysis.yml
									
		+3
		-3
	
												View File
												
				@@ -42,7 +42,7 @@ jobs:

				    # Initializes the CodeQL tools for scanning.

				    - name: Initialize CodeQL

				      uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6

				      uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0

				      with:

				        languages: ${{ matrix.language }}

				        # If you wish to specify custom queries, you can do so here or in a config file.

				@@ -53,7 +53,7 @@ jobs:

				    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).

				    # If this step fails, then you should remove it and run the build manually (see below)

				    - name: Autobuild

				      uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6

				      uses: github/codeql-action/autobuild@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0

				    # ℹ️ Command-line programs to run using the OS shell.

				    # 📚 https://git.io/JvXDl

				@@ -67,4 +67,4 @@ jobs:

				    #   make release

				    - name: Perform CodeQL Analysis

				      uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6

				      uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0

package-lock.json

Generated

+259 -285

View File

File diff suppressed because it is too large Load Diff

									
										package.json
									
		+9
		-9
	
												View File
												
				@@ -47,7 +47,7 @@

				    "downshift": "^9.3.2",

				    "events": "^3.3.0",

				    "file-saver": "^2.0.5",

				    "i18next": "^25.8.18",

				    "i18next": "^25.8.20",

				    "i18next-browser-languagedetector": "^8.2.1",

				    "i18next-resources-to-backend": "^1.2.1",

				    "json-stringify-pretty-compact": "^4.0.0",

				@@ -59,10 +59,10 @@

				    "lodash.get": "^4.4.2",

				    "lodash.isequal": "^4.5.0",

				    "lodash.throttle": "^4.1.1",

				    "maplibre-gl": "^5.19.0",

				    "maplibre-gl": "^5.20.2",

				    "maputnik-design": "github:maputnik/design#172b06c",

				    "ol": "^10.8.0",

				    "ol-mapbox-style": "^13.3.0",

				    "ol-mapbox-style": "^13.4.0",

				    "pmtiles": "^4.4.0",

				    "prop-types": "^15.8.1",

				    "react": "^19.2.4",

				@@ -76,7 +76,7 @@

				    "react-icons": "^5.6.0",

				    "react-markdown": "^10.1.0",

				    "reconnecting-websocket": "^4.4.0",

				    "slugify": "^1.6.6",

				    "slugify": "^1.6.8",

				    "string-hash": "^1.1.3",

				    "url": "^0.11.4"

				  },

				@@ -105,7 +105,7 @@

				    "@shellygo/cypress-test-utils": "^6.0.6",

				    "@stylistic/eslint-plugin": "^5.10.0",

				    "@types/codemirror": "^5.60.17",

				    "@types/color": "^4.2.0",

				    "@types/color": "^4.2.1",

				    "@types/cors": "^2.8.19",

				    "@types/file-saver": "^2.0.7",

				    "@types/geojson": "^7946.0.16",

				@@ -128,23 +128,23 @@

				    "@vitejs/plugin-react": "^5.1.4",

				    "@vitest/coverage-v8": "^4.1.0",

				    "cors": "^2.8.6",

				    "cypress": "^15.11.0",

				    "cypress": "^15.12.0",

				    "cypress-plugin-tab": "^2.0.0",

				    "eslint": "^10.0.3",

				    "eslint-plugin-react": "^7.37.5",

				    "eslint-plugin-react-hooks": "^7.0.1",

				    "eslint-plugin-react-refresh": "^0.5.2",

				    "i18next-cli": "^1.50.1",

				    "i18next-cli": "^1.50.3",

				    "istanbul": "^0.4.5",

				    "istanbul-lib-coverage": "^3.2.2",

				    "postcss": "^8.5.8",

				    "react-hot-loader": "^4.13.1",

				    "sass": "^1.97.3",

				    "stylelint": "^17.4.0",

				    "stylelint": "^17.5.0",

				    "stylelint-config-recommended-scss": "^17.0.0",

				    "stylelint-scss": "^7.0.0",

				    "typescript": "^5.9.3",

				    "typescript-eslint": "^8.57.0",

				    "typescript-eslint": "^8.57.1",

				    "uuid": "^13.0.0",

				    "vite": "^7.3.1",

				    "vite-plugin-istanbul": "^8.0.0",

Compare commits

11 Commits

3ad70a2df7 ... cd3ddcdb6d

Compare commits

11 Commits 3ad70a2df7 ... cd3ddcdb6d

11 Commits

3ad70a2df7 ... cd3ddcdb6d