Compare commits

...

9 Commits

Author SHA1 Message Date
dependabot[bot] 022d362930 chore(deps-dev): Bump vite from 7.3.1 to 8.0.3
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 8.0.3.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.3/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-06 22:14:50 +00:00
dependabot[bot] 8b553998b2 chore(deps-dev): Bump vite from 7.3.1 to 7.3.2 (#1789)
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
from 7.3.1 to 7.3.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>v7.3.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v7.3.1...v7.3.2">7.3.2</a>
(2026-04-06)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li>avoid path traversal with optimize deps sourcemap handler (<a
href="https://redirect.github.com/vitejs/vite/issues/22161">#22161</a>)
(<a
href="https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7">09d8c90</a>)</li>
<li>backport <a
href="https://redirect.github.com/vitejs/vite/issues/22159">#22159</a>,
apply server.fs check to env transport (<a
href="https://redirect.github.com/vitejs/vite/issues/22162">#22162</a>)
(<a
href="https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1">19db0f2</a>)</li>
<li>check <code>server.fs</code> after stripping query as well (<a
href="https://redirect.github.com/vitejs/vite/issues/22160">#22160</a>)
(<a
href="https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6">f8103cc</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/cc383e07b66d4c5a9768fcb570e0af812cb8d999"><code>cc383e0</code></a>
release: v7.3.2</li>
<li><a
href="https://github.com/vitejs/vite/commit/09d8c903bde12fee2710314d3b42bc789c686df7"><code>09d8c90</code></a>
fix: avoid path traversal with optimize deps sourcemap handler (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22161">#22161</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/f8103cc946f137a54e395fe3f5d08e8209231ed6"><code>f8103cc</code></a>
fix: check <code>server.fs</code> after stripping query as well (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22160">#22160</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/19db0f29c3a3ac4e64cc95c270716c77fd223ad1"><code>19db0f2</code></a>
fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22159">#22159</a>,
apply server.fs check to env transport (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22162">#22162</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v7.3.2/packages/vite">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=7.3.1&new-version=7.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 22:13:22 +00:00
dependabot[bot] accc21dc78 chore(deps): Bump cypress-io/github-action from 7.1.8 to 7.1.9 (#1787)
Bumps
[cypress-io/github-action](https://github.com/cypress-io/github-action)
from 7.1.8 to 7.1.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/github-action/releases">cypress-io/github-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.9</h2>
<h2><a
href="https://github.com/cypress-io/github-action/compare/v7.1.8...v7.1.9">7.1.9</a>
(2026-03-31)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update vulnerable transient dependencies (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1714">#1714</a>)
(<a
href="https://github.com/cypress-io/github-action/commit/783cb3f07983868532cabaedaa1e6c00ff4786a8">783cb3f</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/github-action/commit/783cb3f07983868532cabaedaa1e6c00ff4786a8"><code>783cb3f</code></a>
fix(deps): update vulnerable transient dependencies (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1714">#1714</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/68be0d46e386460c28d16735c7a55a5bb5047ecd"><code>68be0d4</code></a>
test: set defaultBrowser to chrome (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1713">#1713</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/9ef8654c3d966ea7c04cdc33fe6a5f5c07454e91"><code>9ef8654</code></a>
chore(deps): update cypress/browsers docker tag to v24.14.1 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1712">#1712</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/1f17f4ac947d942da37b22b8facda4a39e6deab4"><code>1f17f4a</code></a>
chore(deps): update dependency cypress to v15.13.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1710">#1710</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/7490f8fdee4c0c3d5cc977277123f96e46274432"><code>7490f8f</code></a>
chore(deps): update dependency webpack-dev-server to ^5.2.3 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1708">#1708</a>)</li>
<li>See full diff in <a
href="https://github.com/cypress-io/github-action/compare/4c06c48f3ffea349b7189aa06dfcda47a9fa7b92...783cb3f07983868532cabaedaa1e6c00ff4786a8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cypress-io/github-action&package-manager=github_actions&previous-version=7.1.8&new-version=7.1.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 13:52:57 +00:00
dependabot[bot] 97725242c1 chore(deps): Bump docker/login-action from 4.0.0 to 4.1.0 (#1786)
Bumps [docker/login-action](https://github.com/docker/login-action) from
4.0.0 to 4.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<ul>
<li>Fix scoped Docker Hub cleanup path when registry is omitted by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/945">docker/login-action#945</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1020.0 in <a
href="https://redirect.github.com/docker/login-action/pull/930">docker/login-action#930</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.77.0 to 0.86.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/932">docker/login-action#932</a>
<a
href="https://redirect.github.com/docker/login-action/pull/936">docker/login-action#936</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
href="https://redirect.github.com/docker/login-action/pull/952">docker/login-action#952</a></li>
<li>Bump fast-xml-parser from 5.3.4 to 5.3.6 in <a
href="https://redirect.github.com/docker/login-action/pull/942">docker/login-action#942</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/login-action/pull/944">docker/login-action#944</a></li>
<li>Bump glob from 10.3.12 to 10.5.0 in <a
href="https://redirect.github.com/docker/login-action/pull/940">docker/login-action#940</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/login-action/pull/949">docker/login-action#949</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 8.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/937">docker/login-action#937</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/login-action/pull/958">docker/login-action#958</a></li>
<li>Bump minimatch from 3.1.2 to 3.1.5 in <a
href="https://redirect.github.com/docker/login-action/pull/941">docker/login-action#941</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/login-action/pull/948">docker/login-action#948</a></li>
<li>Bump undici from 6.23.0 to 6.24.1 in <a
href="https://redirect.github.com/docker/login-action/pull/938">docker/login-action#938</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.0.0...v4.1.0">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/4907a6ddec9925e35a0a9e82d7399ccc52663121"><code>4907a6d</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/930">#930</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="https://github.com/docker/login-action/commit/1e233e691a8881d7f35ca7c2d5dfaaed80b39636"><code>1e233e6</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/6c24ead68057f18c30c808a431f0b85dc25663cb"><code>6c24ead</code></a>
build(deps): bump the aws-sdk-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/ee034d70944e3546349cd24295914f139342f1e6"><code>ee034d7</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/958">#958</a>
from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/1527209db9734bd2352a2dc1a63d79c9aa5358bb"><code>1527209</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/937">#937</a>
from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li>
<li><a
href="https://github.com/docker/login-action/commit/d39362aba4d72f8d9d93e0962119840690133e1b"><code>d39362a</code></a>
build(deps): bump lodash from 4.17.23 to 4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/a6f092b568105cbb6d9deb7e55e0a4c5c1025fce"><code>a6f092b</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/60953f0bed2120ec69659d271fe18d34bc069779"><code>60953f0</code></a>
build(deps): bump the proxy-agent-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/62c688590fb4ab6c6e89a217ced0a7b2ddcf1340"><code>62c6885</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/936">#936</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/login-action/commit/102c0e672992d2e992c89b6f4808d65a353b5a1a"><code>102c0e6</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.0.0&new-version=4.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 13:52:47 +00:00
dependabot[bot] 93d947aa95 chore(deps-dev): Bump i18next-cli from 1.51.5 to 1.51.6 (#1788)
Bumps [i18next-cli](https://github.com/i18next/i18next-cli) from 1.51.5
to 1.51.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next-cli/blob/main/CHANGELOG.md">i18next-cli's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/i18next/i18next-cli/compare/v1.51.5...v1.51.6">1.51.6</a>
- 2026-04-03</h2>
<ul>
<li>Add <code>getT</code> and <code>useT</code> to the default
<code>useTranslationNames</code> so that
<code>next-i18next</code> v16 App Router hooks are recognized out of the
box.
Keys from <code>useT('ns')</code> and <code>await getT('ns')</code> are
now correctly
extracted into the specified namespace instead of falling back to
<code>defaultNS</code>.
Fixes <a
href="https://redirect.github.com/i18next/i18next-cli/issues/232">#232</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next-cli/commit/2828baf61fb9a153ca2b802d6b145c11bb82eedf"><code>2828baf</code></a>
1.51.6</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/0d6e5930f6971cb8f783f7387240b7365a17b8a2"><code>0d6e593</code></a>
ts dep update</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/0f6f5b3148f22ad64997ad367b65924d74851f9d"><code>0f6f5b3</code></a>
Add <code>getT</code> and <code>useT</code> to the default
<code>useTranslationNames</code> so that `next-i18n...</li>
<li><a
href="https://github.com/i18next/i18next-cli/commit/274164840fba66c2c37db8997c1ae37cbf04a099"><code>2741648</code></a>
reproduce <a
href="https://redirect.github.com/i18next/i18next-cli/issues/231">#231</a></li>
<li>See full diff in <a
href="https://github.com/i18next/i18next-cli/compare/v1.51.5...v1.51.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=i18next-cli&package-manager=npm_and_yarn&previous-version=1.51.5&new-version=1.51.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 13:52:28 +00:00
dependabot[bot] 076f905273 chore(deps): Bump @codemirror/view from 6.40.0 to 6.41.0 (#1784)
Bumps [@codemirror/view](https://github.com/codemirror/view) from 6.40.0
to 6.41.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/codemirror/view/blob/main/CHANGELOG.md"><code>@​codemirror/view</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>6.41.0 (2026-04-01)</h2>
<h3>Bug fixes</h3>
<p>Fix an issue where <code>EditorView.posAtCoords</code> could
incorrectly return a position near a higher element on the line, in
mixed-font-size lines.</p>
<p>Expand the workaround for the Webkit bug that causes nonexistent
selections to stay visible to be active on non-Safari Webkit
browsers.</p>
<h3>New features</h3>
<p>The new <code>EditorView.cursorScrollMargin</code> facet can now be
used to configure the extra space used when scrolling the cursor into
view.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/codemirror/view/commit/a0a5ed946cfdfde61dcf33b131d551136378ccf9"><code>a0a5ed9</code></a>
Mark version 6.41.0</li>
<li><a
href="https://github.com/codemirror/view/commit/c834ebf424e309170ad3d1959d79ab90c093bcd9"><code>c834ebf</code></a>
Enable the workaround for ghost selections in all forms of Webkit</li>
<li><a
href="https://github.com/codemirror/view/commit/49d72c43f61adc935277d7a0cfdf0203123c0814"><code>49d72c4</code></a>
Improve posAtCoords in non-uniform height lines</li>
<li><a
href="https://github.com/codemirror/view/commit/4935d2495f7fa04dd07a7290a53f51e68b348fa7"><code>4935d24</code></a>
Make the margin used when scrolling the cursor into view
configurable</li>
<li><a
href="https://github.com/codemirror/view/commit/ed7d6253a04e95d3cb121510c72eadb46e1c3ba1"><code>ed7d625</code></a>
Remove duplicated slash in forum url in README</li>
<li><a
href="https://github.com/codemirror/view/commit/c3770d3f0a761e730ce5ae85526f90255f0be3d4"><code>c3770d3</code></a>
Fix forum link in readme</li>
<li>See full diff in <a
href="https://github.com/codemirror/view/compare/6.40.0...6.41.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@codemirror/view&package-manager=npm_and_yarn&previous-version=6.40.0&new-version=6.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 13:52:12 +00:00
dependabot[bot] 64930ad109 chore(deps): Bump maplibre-gl from 5.21.1 to 5.22.0 (#1785)
Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) from
5.21.1 to 5.22.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/releases">maplibre-gl's
releases</a>.</em></p>
<blockquote>
<h2>v5.22.0</h2>
<h3> Features and improvements</h3>
<ul>
<li>Make <code>line-cap</code>, <code>line-miter-limit</code>, and
<code>line-round-limit</code> data-driven properties, allowing
per-feature values (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7351">#7351</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>GPU performance optimization: early culling of transparent symbols
in vertex shaders (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7364">#7364</a>)
(by <a
href="https://github.com/xavierjs"><code>@​xavierjs</code></a>)</li>
<li>Add example showing how to measure map performance using built-in
events (<code>load</code>, <code>idle</code>, <code>render</code>) (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7077">#7077</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>UX: Clarify error message language so if layout and paint properties
are confused in <code>setPaintProperty</code> or
<code>setLayoutProperty</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/6954">#6954</a>)
(by <a
href="https://github.com/Willjfield"><code>@​Willjfield</code></a> and
<a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix startup crash caused by a stale async style load completing
after the style was cleared or replaced (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7377">#7377</a>)</li>
<li>Make <code>fitBounds</code> and <code>fitScreenCoordinates</code>
respect the <code>zoomSnap</code> map option by snapping the zoom level
down to keep bounds fully visible (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7332">#7332</a>
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Make <code>jumpTo</code>, <code>easeTo</code>, and
<code>flyTo</code> respect the <code>zoomSnap</code> map option by
snapping the zoom level to the nearest valid increment (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7333">#7333</a>
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Fix <code>setState</code> crash when switching styles while globe
projection is active (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7314">#7314</a>)
(by <a
href="https://github.com/ashwinuae"><code>@​ashwinuae</code></a>)</li>
<li>Prevent crashes when calling <code>map.remove()</code> immediately
after creation by canceling in-flight style URL loads (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7368">#7368</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Fixed symbol collision flickering by adding tolerance to GridIndex
AABB comparison (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7360">#7360</a>)
(by <a
href="https://github.com/kkokkojeong"><code>@​kkokkoejong</code></a>)</li>
<li>Fix <code>fitBounds</code> ignoring <code>maxZoom</code> option in
<code>vertical-perspective</code> projection (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7372">#7372</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Prevent stale async style loads from completing after style clear
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7378">#7378</a>)
(by <a
href="https://github.com/Lievesley"><code>@​Lievesley</code></a>)</li>
<li>Fix broken example for <code>fill-pattern</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7326">#7326</a>)
(by <a href="https://github.com/k-yle"><code>@​k-yle</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md">maplibre-gl's
changelog</a>.</em></p>
<blockquote>
<h2>5.22.0</h2>
<h3> Features and improvements</h3>
<ul>
<li>Make <code>line-cap</code>, <code>line-miter-limit</code>, and
<code>line-round-limit</code> data-driven properties, allowing
per-feature values (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7351">#7351</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>GPU performance optimization: early culling of transparent symbols
in vertex shaders (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7364">#7364</a>)
(by <a
href="https://github.com/xavierjs"><code>@​xavierjs</code></a>)</li>
<li>Add example showing how to measure map performance using built-in
events (<code>load</code>, <code>idle</code>, <code>render</code>) (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7077">#7077</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>UX: Clarify error message language so if layout and paint properties
are confused in <code>setPaintProperty</code> or
<code>setLayoutProperty</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/6954">#6954</a>)
(by <a
href="https://github.com/Willjfield"><code>@​Willjfield</code></a> and
<a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Fix startup crash caused by a stale async style load completing
after the style was cleared or replaced (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7377">#7377</a>)</li>
<li>Make <code>fitBounds</code> and <code>fitScreenCoordinates</code>
respect the <code>zoomSnap</code> map option by snapping the zoom level
down to keep bounds fully visible (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7332">#7332</a>
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Make <code>jumpTo</code>, <code>easeTo</code>, and
<code>flyTo</code> respect the <code>zoomSnap</code> map option by
snapping the zoom level to the nearest valid increment (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7333">#7333</a>
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Fix <code>setState</code> crash when switching styles while globe
projection is active (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7314">#7314</a>)
(by <a
href="https://github.com/ashwinuae"><code>@​ashwinuae</code></a>)</li>
<li>Prevent crashes when calling <code>map.remove()</code> immediately
after creation by canceling in-flight style URL loads (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7368">#7368</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Fixed symbol collision flickering by adding tolerance to GridIndex
AABB comparison (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7360">#7360</a>)
(by <a
href="https://github.com/kkokkojeong"><code>@​kkokkoejong</code></a>)</li>
<li>Fix <code>fitBounds</code> ignoring <code>maxZoom</code> option in
<code>vertical-perspective</code> projection (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7372">#7372</a>)
(by <a
href="https://github.com/CommanderStorm"><code>@​CommanderStorm</code></a>)</li>
<li>Prevent stale async style loads from completing after style clear
(<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7378">#7378</a>)
(by <a
href="https://github.com/Lievesley"><code>@​Lievesley</code></a>)</li>
<li>Fix broken example for <code>fill-pattern</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/pull/7326">#7326</a>)
(by <a href="https://github.com/k-yle"><code>@​k-yle</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/48caed8321a8e90b4579f37a08219df2c4e590ae"><code>48caed8</code></a>
Bump js version to 5.22.0 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7391">#7391</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/c3da26652dd33a9c3b23e2534026891e900d9bd8"><code>c3da266</code></a>
increase the linking (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7393">#7393</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/d74e957f1d8d08e54b2f4ab555d87e5d60247b75"><code>d74e957</code></a>
fix: add and remove a map right after the other (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7368">#7368</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/de06a24767e9160c413f308f0ed1b7a68cecb5f1"><code>de06a24</code></a>
chore(deps): bump <code>@​maplibre/maplibre-gl-style-spec</code> from
24.7.0 to 24.8.1 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7388">#7388</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/fb151e4aea65fda06800a8b51813743de043bb3c"><code>fb151e4</code></a>
feat: Clarify error message language so if layout and paint properties
are co...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/7951eec48b7cad54a5ec82e68921234c2d3c9a5c"><code>7951eec</code></a>
feat(line): implement data driven styling for
`line-{cap,round-limit,miter-li...</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/914cde4776e5abdc08ff96048f4d97a8670c0484"><code>914cde4</code></a>
chore(deps-dev): bump typescript from 5.9.3 to 6.0.2 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7357">#7357</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/a84c293506757cc4311714584133c06b8d18d932"><code>a84c293</code></a>
chore(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code> (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7389">#7389</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/931199b45118c52ead30043ab5054e7e51769018"><code>931199b</code></a>
chore(deps-dev): bump cssnano from 7.1.3 to 7.1.4 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7387">#7387</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-gl-js/commit/44c25c14e8c52569e99c1b98ab068b970420dda8"><code>44c25c1</code></a>
chore(deps-dev): bump canvas from 3.2.2 to 3.2.3 (<a
href="https://redirect.github.com/maplibre/maplibre-gl-js/issues/7386">#7386</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-gl-js/compare/v5.21.1...v5.22.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=maplibre-gl&package-manager=npm_and_yarn&previous-version=5.21.1&new-version=5.22.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 13:52:07 +00:00
dependabot[bot] 60e571e88d chore(deps): Bump slugify from 1.6.8 to 1.6.9 (#1783)
Bumps [slugify](https://github.com/simov/slugify) from 1.6.8 to 1.6.9.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/simov/slugify/blob/master/CHANGELOG.md">slugify's
changelog</a>.</em></p>
<blockquote>
<h3>v1.6.9 (2026-04-01)</h3>
<ul>
<li><a
href="https://redirect.github.com/simov/slugify/pull/171">#171</a> fix:
correct CommonJS export for &quot;module&quot;: &quot;node16&quot; + ESM
(171) (<a
href="https://github.com/karlhorky"><code>@​karlhorky</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/simov/slugify/commits">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~joshuakgoldberg">joshuakgoldberg</a>, a new
releaser for slugify since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=slugify&package-manager=npm_and_yarn&previous-version=1.6.8&new-version=1.6.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 13:51:42 +00:00
dependabot[bot] a857114c00 chore(deps-dev): Bump sass from 1.98.0 to 1.99.0 (#1782)
Bumps [sass](https://github.com/sass/dart-sass) from 1.98.0 to 1.99.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/releases">sass's
releases</a>.</em></p>
<blockquote>
<h2>Dart Sass 1.99.0</h2>
<p>To install Sass 1.99.0, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<ul>
<li>
<p>Add support for parent selectors (<code>&amp;</code>) at the root of
the document. These are emitted as-is in the CSS output, where they're
interpreted as <a
href="https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Selectors/Nesting_selector#using_outside_nested_rule">the
scoping root</a>.</p>
</li>
<li>
<p>User-defined functions named <code>calc</code> or <code>clamp</code>
are no longer forbidden. If such a function exists without a namespace
in the current module, it will be used instead of the built-in
<code>calc()</code> or <code>clamp()</code> function.</p>
</li>
<li>
<p>User-defined functions whose names begin with <code>-</code> and end
with <code>-expression</code>, <code>-url</code>, <code>-and</code>,
<code>-or</code>, or <code>-not</code> are no longer forbidden. These
were originally intended to match vendor prefixes, but in practice no
vendor prefixes for these functions ever existed in real browsers.</p>
</li>
<li>
<p>User-defined functions named <code>EXPRESSION</code>,
<code>URL</code>, and <code>ELEMENT</code>, those that begin with
<code>-</code> and end with <code>-ELEMENT</code>, as well as the same
names with some lowercase letters are now deprecated, These are names
conflict with plain CSS functions that have special syntax.</p>
<p>See <a href="https://sass-lang.com/d/function-name">the Sass
website</a> for details.</p>
</li>
<li>
<p>In a future release, calls to functions whose names begin with
<code>-</code> and end with <code>-expression</code> and
<code>-url</code> will no longer have special parsing. For now, these
calls are deprecated if their behavior will change in the future.</p>
<p>See <a href="https://sass-lang.com/d/function-name">the Sass
website</a> for details.</p>
</li>
<li>
<p>Calls to functions whose names begin with <code>-</code> and end with
<code>-progid:...</code> are deprecated.</p>
<p>See <a href="https://sass-lang.com/d/function-name">the Sass
website</a> for details.</p>
</li>
</ul>
<p>See the <a
href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#1990">full
changelog</a> for changes in earlier releases.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md">sass's
changelog</a>.</em></p>
<blockquote>
<h2>1.99.0</h2>
<ul>
<li>
<p>Add support for parent selectors (<code>&amp;</code>) at the root of
the document. These are
emitted as-is in the CSS output, where they're interpreted as <a
href="https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Selectors/Nesting_selector#using_outside_nested_rule">the
scoping
root</a>.</p>
</li>
<li>
<p>User-defined functions named <code>calc</code> or <code>clamp</code>
are no longer forbidden. If
such a function exists without a namespace in the current module, it
will be
used instead of the built-in <code>calc()</code> or <code>clamp()</code>
function.</p>
</li>
<li>
<p>User-defined functions whose names begin with <code>-</code> and end
with <code>-expression</code>,
<code>-url</code>, <code>-and</code>, <code>-or</code>, or
<code>-not</code> are no longer forbidden. These were
originally intended to match vendor prefixes, but in practice no vendor
prefixes for these functions ever existed in real browsers.</p>
</li>
<li>
<p>User-defined functions named <code>EXPRESSION</code>,
<code>URL</code>, and <code>ELEMENT</code>, those that
begin with <code>-</code> and end with <code>-ELEMENT</code>, as well as
the same names with some
lowercase letters are now deprecated, These are names conflict with
plain CSS
functions that have special syntax.</p>
<p>See <a href="https://sass-lang.com/d/function-name">the Sass
website</a> for details.</p>
</li>
<li>
<p>In a future release, calls to functions whose names begin with
<code>-</code> and end
with <code>-expression</code> and <code>-url</code> will no longer have
special parsing. For now,
these calls are deprecated if their behavior will change in the
future.</p>
<p>See <a href="https://sass-lang.com/d/function-name">the Sass
website</a> for details.</p>
</li>
<li>
<p>Calls to functions whose names begin with <code>-</code> and end with
<code>-progid:...</code> are
deprecated.</p>
<p>See <a href="https://sass-lang.com/d/function-name">the Sass
website</a> for details.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sass/dart-sass/commit/83c39fec93ab0dc183a46cff2bc468999ce53e20"><code>83c39fe</code></a>
Support the top-level parent selector (<a
href="https://redirect.github.com/sass/dart-sass/issues/2758">#2758</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/ec85871864ca16f8045e66ad329bd462e791bfa1"><code>ec85871</code></a>
Bump EndBug/add-and-commit from 9 to 10 (<a
href="https://redirect.github.com/sass/dart-sass/issues/2756">#2756</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/a604acd19ad2ce31ef2efe9aa5950b0c5fcc74a9"><code>a604acd</code></a>
[Function Name] Implement changes (<a
href="https://redirect.github.com/sass/dart-sass/issues/2731">#2731</a>)</li>
<li>See full diff in <a
href="https://github.com/sass/dart-sass/compare/1.98.0...1.99.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sass&package-manager=npm_and_yarn&previous-version=1.98.0&new-version=1.99.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 13:51:12 +00:00
4 changed files with 651 additions and 920 deletions
+2 -2
View File
@@ -118,7 +118,7 @@ jobs:
node-version-file: '.nvmrc'
- run: npm ci
- name: Cypress run
uses: cypress-io/github-action@4c06c48f3ffea349b7189aa06dfcda47a9fa7b92 # v7.1.8
uses: cypress-io/github-action@783cb3f07983868532cabaedaa1e6c00ff4786a8 # v7.1.9
with:
build: npm run build
start: npm run start
@@ -142,7 +142,7 @@ jobs:
node-version-file: '.nvmrc'
- run: npm ci
- name: Cypress run
uses: cypress-io/github-action@4c06c48f3ffea349b7189aa06dfcda47a9fa7b92 # v7.1.8
uses: cypress-io/github-action@783cb3f07983868532cabaedaa1e6c00ff4786a8 # v7.1.9
with:
build: docker build -t maputnik .
start: docker run --rm --network host maputnik --port=8888
+1 -1
View File
@@ -45,7 +45,7 @@ jobs:
steps:
- name: Login to GitHub Container Registry
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
with:
registry: ghcr.io
username: ${{ github.actor }}
+642 -911
View File
File diff suppressed because it is too large Load Diff
+6 -6
View File
@@ -30,7 +30,7 @@
"@codemirror/lint": "^6.9.5",
"@codemirror/state": "^6.6.0",
"@codemirror/theme-one-dark": "^6.1.3",
"@codemirror/view": "^6.40.0",
"@codemirror/view": "^6.41.0",
"@dnd-kit/core": "^6.3.1",
"@dnd-kit/sortable": "^10.0.0",
"@dnd-kit/utilities": "^3.2.2",
@@ -59,7 +59,7 @@
"lodash.get": "^4.4.2",
"lodash.isequal": "^4.5.0",
"lodash.throttle": "^4.1.1",
"maplibre-gl": "^5.21.1",
"maplibre-gl": "^5.22.0",
"maputnik-design": "github:maputnik/design#172b06c",
"ol": "^10.8.0",
"ol-mapbox-style": "^13.4.0",
@@ -76,7 +76,7 @@
"react-icons": "^5.6.0",
"react-markdown": "^10.1.0",
"reconnecting-websocket": "^4.4.0",
"slugify": "^1.6.8",
"slugify": "^1.6.9",
"string-hash": "^1.1.3",
"url": "^0.11.4"
},
@@ -134,19 +134,19 @@
"eslint-plugin-react": "^7.37.5",
"eslint-plugin-react-hooks": "^7.0.1",
"eslint-plugin-react-refresh": "^0.5.2",
"i18next-cli": "^1.51.5",
"i18next-cli": "^1.51.6",
"istanbul": "^0.4.5",
"istanbul-lib-coverage": "^3.2.2",
"postcss": "^8.5.8",
"react-hot-loader": "^4.13.1",
"sass": "^1.98.0",
"sass": "^1.99.0",
"stylelint": "^17.6.0",
"stylelint-config-recommended-scss": "^17.0.0",
"stylelint-scss": "^7.0.0",
"typescript": "^5.9.3",
"typescript-eslint": "^8.58.0",
"uuid": "^13.0.0",
"vite": "^7.3.1",
"vite": "^8.0.3",
"vite-plugin-istanbul": "^8.0.0",
"vitest": "^4.1.2"
}