66377f5dcf
Bump version to 3.1.0 ( #1978 )
...
Automated changes by
[create-pull-request](https://github.com/peter-evans/create-pull-request )
GitHub action
Co-authored-by: HarelM <3269297+HarelM@users.noreply.github.com >
2026-07-06 15:28:36 +03:00
fc4a7c5ab9
chore(deps-dev): Bump eslint from 10.5.0 to 10.6.0 ( #1969 )
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.5.0 to 10.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases ">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.6.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67 "><code>b1f9106</code></a>
feat: detect Symbol() and BigInt() in no-constant-binary-expression (<a
href="https://redirect.github.com/eslint/eslint/issues/20981 ">#20981</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f291007cb73f55c09cf3c2aa3a405df379a5c594 "><code>f291007</code></a>
feat: add checkRelationalComparisons to no-constant-binary-expression
(<a
href="https://redirect.github.com/eslint/eslint/issues/20948 ">#20948</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786 "><code>6b05784</code></a>
fix: prefer-exponentiation-operator invalid autofix at statement start
(<a
href="https://redirect.github.com/eslint/eslint/issues/20997 ">#20997</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c "><code>bb9eb2a</code></a>
fix: account for shadowed <code>Boolean</code> in
<code>no-extra-boolean-cast</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21013 ">#21013</a>)
(den$)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8fd8741009a3ed7845c89bfe2fb3eaa2119b2d15 "><code>8fd8741</code></a>
fix: don't report shadowed undefined in <code>radix</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21011 ">#21011</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/5784980ce8ba99556db98907895d82ef49cd0a27 "><code>5784980</code></a>
fix: don't report shadowed undefined in no-throw-literal (<a
href="https://redirect.github.com/eslint/eslint/issues/21010 ">#21010</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9cd1e6de5bad487a9c713bdc9fda5af7ea0babcd "><code>9cd1e6d</code></a>
fix: suppress invalid class suggestion in no-promise-executor-return (<a
href="https://redirect.github.com/eslint/eslint/issues/21008 ">#21008</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d4eb2dc95f17cdf491edca91b7d9caf05b86253f "><code>d4eb2dc</code></a>
fix: don't report shadowed undefined in prefer-promise-reject-errors (<a
href="https://redirect.github.com/eslint/eslint/issues/21006 ">#21006</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/23604646db6d987d01edb8aa5f4d2a88bd4c01d0 "><code>2360464</code></a>
fix: prefer-promise-reject-errors false positives for shadowed Promise
(<a
href="https://redirect.github.com/eslint/eslint/issues/21003 ">#21003</a>)
(den$)</li>
<li><a
href="https://github.com/eslint/eslint/commit/63d52d28de705ec46f328d18166e8b7170b3f024 "><code>63d52d2</code></a>
fix: restore max-classes-per-file report range (<a
href="https://redirect.github.com/eslint/eslint/issues/21002 ">#21002</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7feaff0cfb8d6a6260d3ea56887c9161daf8c700 "><code>7feaff0</code></a>
fix: callback detection logic for IIFEs in max-nested-callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/20979 ">#20979</a>)
(fnx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/399a2ec81bcbcff2c67920db51d9276b20ac1025 "><code>399a2ec</code></a>
fix: don't report inner non-callbacks in
<code>max-nested-callbacks</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20995 ">#20995</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7 "><code>a83683d</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f5449f96c2caabbc1a28b15211873e2f672f5ae5 "><code>f5449f9</code></a>
docs: document userland patterns for global assertionOptions in RuleT…
(<a
href="https://redirect.github.com/eslint/eslint/issues/20986 ">#20986</a>)
(playgirl)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bea49f7b2899ebf708482f977ef2ada41fd2c3f0 "><code>bea49f7</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e5f70f9b06683a887dd0d6dc1cc91a9c9bea816d "><code>e5f70f9</code></a>
docs: update code-path diagrams (<a
href="https://redirect.github.com/eslint/eslint/issues/20984 ">#20984</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8890c2d40880b195b9167735c24ec0cc5de5eb96 "><code>8890c2d</code></a>
docs: add TypeScript config guidance for MCP server (<a
href="https://redirect.github.com/eslint/eslint/issues/20796 ">#20796</a>)
(Pierluigi Lenoci)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3eb3d9b1b5edecc3fcae0519ddba0e3745e889e3 "><code>3eb3d9b</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c5bb59cf613dabafd550227b6adaa9327b1095f5 "><code>c5bb59c</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/eb3c97c776731ce11b28cc99f0271f41b9994701 "><code>eb3c97c</code></a>
docs: fix grammar in prefer-const rule description (<a
href="https://redirect.github.com/eslint/eslint/issues/20983 ">#20983</a>)
(lumir)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e "><code>6a42034</code></a>
ci: run ecosystem tests on main branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20891 ">#20891</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8 "><code>3dbacdb</code></a>
ci: bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21014 ">#21014</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354 "><code>c3abfca</code></a>
chore: correct JSDoc param types in html formatter (<a
href="https://redirect.github.com/eslint/eslint/issues/21018 ">#21018</a>)
(Minseon Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e "><code>a832320</code></a>
ci: split ecosystem tests into separate jobs (<a
href="https://redirect.github.com/eslint/eslint/issues/21001 ">#21001</a>)
(xbinaryx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/27166e78511db526688afc34bbfab1a458405f3f "><code>27166e7</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21005 ">#21005</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/865d76e40107d4fa10a17fc3203b303eb8a88dc3 "><code>865d76e</code></a>
ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (<a
href="https://redirect.github.com/eslint/eslint/issues/20989 ">#20989</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/27a88c9fa7c040f4cd39e5a5e6e2d02441c408ef "><code>27a88c9</code></a>
chore: update dependency markdown-it to v14 in root (<a
href="https://redirect.github.com/eslint/eslint/issues/20994 ">#20994</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/970cea62b295d931a4109abedeb21ba192d3f2be "><code>970cea6</code></a>
chore: update dependency markdown-it to v14 (<a
href="https://redirect.github.com/eslint/eslint/issues/20993 ">#20993</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b482120bacb40204fbf16f3b20be7207057157a5 "><code>b482120</code></a>
chore: update dependency prettier to v3.8.4 (<a
href="https://redirect.github.com/eslint/eslint/issues/20990 ">#20990</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/6993fb3173da84999fc208507b93f523aa657448 "><code>6993fb3</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20985 ">#20985</a>)
(ESLint Bot)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/5d12a0419636abb71628b7e45063a943c454a7c7 "><code>5d12a04</code></a>
10.6.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/f7ca54b138c4ba7b8e65f83b7fe58cc8de50af8b "><code>f7ca54b</code></a>
Build: changelog update for 10.6.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e "><code>6a42034</code></a>
ci: run ecosystem tests on main branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20891 ">#20891</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67 "><code>b1f9106</code></a>
feat: detect Symbol() and BigInt() in no-constant-binary-expression (<a
href="https://redirect.github.com/eslint/eslint/issues/20981 ">#20981</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8 "><code>3dbacdb</code></a>
ci: bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21014 ">#21014</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354 "><code>c3abfca</code></a>
chore: correct JSDoc param types in html formatter (<a
href="https://redirect.github.com/eslint/eslint/issues/21018 ">#21018</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7 "><code>a83683d</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e "><code>a832320</code></a>
ci: split ecosystem tests into separate jobs (<a
href="https://redirect.github.com/eslint/eslint/issues/21001 ">#21001</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786 "><code>6b05784</code></a>
fix: prefer-exponentiation-operator invalid autofix at statement start
(<a
href="https://redirect.github.com/eslint/eslint/issues/20997 ">#20997</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c "><code>bb9eb2a</code></a>
fix: account for shadowed <code>Boolean</code> in
<code>no-extra-boolean-cast</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21013 ">#21013</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.5.0...v10.6.0 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 14:00:04 +00:00
d4f90b9bd7
chore(deps): Bump downshift from 9.3.6 to 9.4.0 ( #1975 )
...
Bumps [downshift](https://github.com/downshift-js/downshift ) from 9.3.6
to 9.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/downshift-js/downshift/releases ">downshift's
releases</a>.</em></p>
<blockquote>
<h2>v9.4.0</h2>
<h1><a
href="https://github.com/downshift-js/downshift/compare/v9.3.6...v9.4.0 ">9.4.0</a>
(2026-06-30)</h1>
<h3>Features</h3>
<ul>
<li>fix React Compiler compatibility. (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1690 ">#1690</a>)
(<a
href="https://github.com/downshift-js/downshift/commit/1bb8b75e506fe807a5c5201a103d1bd128e5a5e2 ">1bb8b75</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/downshift-js/downshift/commit/1bb8b75e506fe807a5c5201a103d1bd128e5a5e2 "><code>1bb8b75</code></a>
feat: fix React Compiler compatibility. (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1690 ">#1690</a>)</li>
<li><a
href="https://github.com/downshift-js/downshift/commit/3c7584b62e900b80b998c2d486c3ff458b30214c "><code>3c7584b</code></a>
docs: fix docs dark mode example contrast (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1694 ">#1694</a>)</li>
<li>See full diff in <a
href="https://github.com/downshift-js/downshift/compare/v9.3.6...v9.4.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 13:52:06 +00:00
aa5693ad6b
chore(deps): Bump i18next from 26.3.3 to 26.3.4 ( #1974 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.3.3 to
26.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.3.4</h2>
<ul>
<li>fix(security): <code>deepExtend</code> (used by
<code>addResourceBundle(..., deep, overwrite)</code>) no longer recurses
into inherited properties. It checked key existence with the
<code>in</code> operator, which walks the prototype chain, so a source
key matching an inherited built-in (e.g. <code>hasOwnProperty</code>,
<code>toString</code>) caused recursion into the shared
<code>Object.prototype</code> function and, with <code>overwrite:
true</code>, could overwrite e.g.
<code>Object.prototype.hasOwnProperty.call</code> with a non-callable
value — corrupting a shared built-in process-wide (DoS). Existence is
now checked with <code>Object.prototype.hasOwnProperty.call</code>, so
such keys are copied as plain own data instead. This complements the
existing <code>__proto__</code>/<code>constructor</code> guard and is
also strictly more correct for an own-property merge. Only affects
applications that pass attacker-controlled data with <code>deep:
true</code> and <code>overwrite: true</code>; no standard
backend/integration does this. Distinct from CVE-2026-48713 /
CVE-2026-48714 (different packages, <code>setPath</code> mechanism).
Thanks to zx (Jace) for the responsible disclosure.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.3.4</h2>
<ul>
<li>fix(security): <code>deepExtend</code> (used by
<code>addResourceBundle(..., deep, overwrite)</code>) no longer recurses
into inherited properties. It checked key existence with the
<code>in</code> operator, which walks the prototype chain, so a source
key matching an inherited built-in (e.g. <code>hasOwnProperty</code>,
<code>toString</code>) caused recursion into the shared
<code>Object.prototype</code> function and, with <code>overwrite:
true</code>, could overwrite e.g.
<code>Object.prototype.hasOwnProperty.call</code> with a non-callable
value — corrupting a shared built-in process-wide (DoS). Existence is
now checked with <code>Object.prototype.hasOwnProperty.call</code>, so
such keys are copied as plain own data instead. This complements the
existing <code>__proto__</code>/<code>constructor</code> guard and is
also strictly more correct for an own-property merge. Only affects
applications that pass attacker-controlled data with <code>deep:
true</code> and <code>overwrite: true</code>; no standard
backend/integration does this. Distinct from CVE-2026-48713 /
CVE-2026-48714 (different packages, <code>setPath</code> mechanism). See
advisory <a
href="https://github.com/i18next/i18next/security/advisories/GHSA-6jcc-5g8w-32mx ">GHSA-6jcc-5g8w-32mx</a>,
CVSS 5.9 (<code>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H</code>).
Thanks to zx (Jace) <a
href="https://github.com/manus-use "><code>@manus-use</code></a> for the
responsible disclosure.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/817ede5146e6d366645982885b0a729861d10a3a "><code>817ede5</code></a>
26.3.4</li>
<li><a
href="https://github.com/i18next/i18next/commit/46d0dd80b505b6b69feccebbe7d9c4fd66c8f85c "><code>46d0dd8</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/642137b7786d83661ec3ee53027798dc4b81d30a "><code>642137b</code></a>
fix(security): prevent deepExtend from recursing into inherited
built-ins</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.3.3...v26.3.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 13:51:06 +00:00
c596006e25
chore(deps-dev): Bump typescript-eslint from 8.62.0 to 8.62.1 ( #1973 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.62.0 to 8.62.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.1</h2>
<h2>8.62.1 (2026-06-29)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] use
suggestion instead of autofix for trailing binary operator (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328 ">#12328</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-boolean-literal-compare] preserve boolean result in
fixer for nullable true comparisons (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365 ">#12365</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
parenthesize object literal at left edge of expression statement (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443 ">#12443</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418 ">#12418</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
<li>mdm317</li>
<li>Patrick Aleite</li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.1 (2026-06-29)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e "><code>3ea32f4</code></a>
chore(release): publish 8.62.1</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 13:49:52 +00:00
99b70a5fe8
chore(deps): Bump cypress-io/github-action from 7.4.0 to 7.4.1 ( #1972 )
...
Bumps
[cypress-io/github-action](https://github.com/cypress-io/github-action )
from 7.4.0 to 7.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/github-action/releases ">cypress-io/github-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.4.1</h2>
<h2><a
href="https://github.com/cypress-io/github-action/compare/v7.4.0...v7.4.1 ">7.4.1</a>
(2026-06-29)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update transient dependency to undici 6.27.0
(<a
href="https://redirect.github.com/cypress-io/github-action/issues/1807 ">#1807</a>)
(<a
href="https://github.com/cypress-io/github-action/commit/fa4a118725a8f001170d49631ea89e5d66fee626 ">fa4a118</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/github-action/commit/fa4a118725a8f001170d49631ea89e5d66fee626 "><code>fa4a118</code></a>
fix(deps): update transient dependency to undici 6.27.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1807 ">#1807</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/a609ff3e0785adbfe6d791246f0753efcac6b430 "><code>a609ff3</code></a>
chore(deps): update dependency cypress to v15.18.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1805 ">#1805</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/f34caf174c7c963934ce4d4a42b693b7948f2b0e "><code>f34caf1</code></a>
chore(deps): update webpack (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1803 ">#1803</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/a96a1cc1cec77938149a3789c30753561583f536 "><code>a96a1cc</code></a>
chore(deps): update tailwindcss monorepo to ^4.3.1 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1802 ">#1802</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/2952a93a95c3b427bcc869bf023eee9ace5da587 "><code>2952a93</code></a>
chore(deps): execute npm audit fix (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1800 ">#1800</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/4affc969de931eeb754601e2f609c5cc8570420d "><code>4affc96</code></a>
chore(deps): update yarn monorepo to v4.17.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1804 ">#1804</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/47646e1836697bfbba7622f189e32efba1b3e7aa "><code>47646e1</code></a>
chore(deps): update actions/checkout to v7 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1797 ">#1797</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/1b202e7fd031e9175e60706cc0b4dea5ac59cb5c "><code>1b202e7</code></a>
chore(deps): update dependency <code>@vercel/ncc</code> to v0.44.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1796 ">#1796</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/345abf6f15f00f50bcc3cc93120d18feea99a356 "><code>345abf6</code></a>
chore(deps): lock file maintenance (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1793 ">#1793</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/e0ea1ad818d933ed2ba225606e39593de003a62e "><code>e0ea1ad</code></a>
chore(deps): update dependency prettier to v3.8.4 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1795 ">#1795</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/github-action/compare/948d67d3074f1bbb6379c8bdbb04e95d2f8e593f...fa4a118725a8f001170d49631ea89e5d66fee626 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 13:51:57 +00:00
84310f1798
chore(deps-dev): Bump postcss from 8.5.15 to 8.5.16 ( #1971 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.15 to
8.5.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/92ccc93ff15bd193491d67fad9763e62d489dfad "><code>92ccc93</code></a>
Release 8.5.16 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/818bdd6043359af773ccc3ca8663053d61a707c8 "><code>818bdd6</code></a>
Update formatting</li>
<li><a
href="https://github.com/postcss/postcss/commit/46e451068ee6160b837865b715cf6972f28fabd5 "><code>46e4510</code></a>
Fix <code>Input#origin()</code> returning incorrect position (<a
href="https://redirect.github.com/postcss/postcss/issues/2036 ">#2036</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/34942ce76c0b0c9ee65b1421017ac71855e722c4 "><code>34942ce</code></a>
Fix tests</li>
<li><a
href="https://github.com/postcss/postcss/commit/d4feed645314ee421edf80ee9ebe453cc75c997f "><code>d4feed6</code></a>
Don't clone root-less child nodes in container constructor (<a
href="https://redirect.github.com/postcss/postcss/issues/2097 ">#2097</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/da323fc8d327a38199a21987dcbf7e27e3bc34f3 "><code>da323fc</code></a>
Revert version update to fix old Node.js on CI</li>
<li><a
href="https://github.com/postcss/postcss/commit/886336919497516df8f140d0fb327bd125e35053 "><code>8863369</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/3828982213fec6bc13d0791b1adf40393be0935e "><code>3828982</code></a>
Preserve node raws when rehydrating a JSON AST (<a
href="https://redirect.github.com/postcss/postcss/issues/2100 ">#2100</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/d1e80b830386b08dcd5b962fd466d1c51f28e82d "><code>d1e80b8</code></a>
Fix Node#rangeBy() ignoring index 0 (<a
href="https://redirect.github.com/postcss/postcss/issues/2091 ">#2091</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/b91e4a63907325d98b75d11fda546bdd91acc608 "><code>b91e4a6</code></a>
Fix Node.js 26 tests</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.15...8.5.16 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for postcss since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 13:51:26 +00:00
4679af47eb
chore(deps): Bump @codemirror/view from 6.43.3 to 6.43.4 ( #1970 )
...
Bumps [@codemirror/view](https://github.com/codemirror/view ) from 6.43.3
to 6.43.4.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 13:51:22 +00:00
bb743a01ee
chore(deps-dev): Bump cypress from 15.17.0 to 15.18.0 ( #1966 )
...
Bumps [cypress](https://github.com/cypress-io/cypress ) from 15.17.0 to
15.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/cypress/releases ">cypress's
releases</a>.</em></p>
<blockquote>
<h2>v15.18.0</h2>
<p>Changelog: <a
href="https://docs.cypress.io/app/references/changelog#15-18-0 ">https://docs.cypress.io/app/references/changelog#15-18-0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/cypress/commit/fa083dbc716f2fd1c50ba505ee9c400366c922f6 "><code>fa083db</code></a>
fix: prevent proxy crash on IPv6 literal hosts in cy.visit (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34146 ">#34146</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/063636c047f63747db9155f9b6dd71874710f0a7 "><code>063636c</code></a>
chore(ci): only install firefox in UI test jobs that target it (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34142 ">#34142</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/02aa75de2afc9632a1d80a0629099125fb16fb58 "><code>02aa75d</code></a>
feat: add removeSRIAttributes config option to strip SRI from
first-party res...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/2d6b11ec3f63c59b1afb563467ceeee889404be0 "><code>2d6b11e</code></a>
chore(deps): bump undici to 6.27.0 for SNYK-JS-UNDICI-17372658 (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34121 ">#34121</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/56759eaef142cf84d4c8e32b430c73adfaf69f1e "><code>56759ea</code></a>
misc: remove the global install warning from cypress install (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34139 ">#34139</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/d47b81db661033eb2ee4cc25851b00609952fa1a "><code>d47b81d</code></a>
chore: resync yarn.lock (shell-quote) (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34145 ">#34145</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/19ac7196b0c04a749524db6f6cca4a23df6f1228 "><code>19ac719</code></a>
chore(ci): remove duplicate test run in npm-webpack-dev-server job (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34141 ">#34141</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/6f96dac9af3caf620381f5fe90141b9c3a939680 "><code>6f96dac</code></a>
docs: document PR title prefixes, changelog, and template requirements
(<a
href="https://redirect.github.com/cypress-io/cypress/issues/34128 ">#34128</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/d70617532c88956b7b412be04ded639d8e941628 "><code>d706175</code></a>
chore: correct misleading WebKit browser debug log message (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34135 ">#34135</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/fb767947ef37a0191c6514a857bf75e648c5859b "><code>fb76794</code></a>
chore: remove no-op CYPRESS_DOWNLOAD_USE_CA environment variable (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34131 ">#34131</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/cypress/compare/v15.17.0...v15.18.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 13:54:34 +00:00
28ceff7b0e
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 25.0.0 to 25.0.1 ( #1965 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 25.0.0 to 25.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v25.0.1</h2>
<h3>🐞 Bug fixes</h3>
<ul>
<li><code>has</code> filter now returns <code>false</code> when a
property exists but is set to <code>undefined</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1712 ">#1712</a>)
(by <a
href="https://github.com/xavierjs "><code>@xavierjs</code></a>)</li>
<li>Fix incorrect replacement suggestion in error messages for mixed
legacy+expression <code>$type</code> filters (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1727 ">#1727</a>,
<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1728 ">#1728</a>)
(by <a
href="https://github.com/ciscorn "><code>@ciscorn</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>25.0.1</h2>
<h3>🐞 Bug fixes</h3>
<ul>
<li><code>has</code> filter now returns <code>false</code> when a
property exists but is set to <code>undefined</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1712 ">#1712</a>)
(by <a
href="https://github.com/xavierjs "><code>@xavierjs</code></a>)</li>
<li>Fix incorrect replacement suggestion in error messages for mixed
legacy+expression <code>$type</code> filters (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1727 ">#1727</a>,
<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1728 ">#1728</a>)
(by <a
href="https://github.com/ciscorn "><code>@ciscorn</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/ef522e45a28e0efafabbebb27197d3440c99fe34 "><code>ef522e4</code></a>
Bump js version to 25.0.1 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1739 ">#1739</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/14e1a146d97f369f7f1903b22f4e4f1848805476 "><code>14e1a14</code></a>
fix: simplify legacy+expression $type filter suggestions (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1728 ">#1728</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/1acc24620e74cf14cbaf187d97ffc467f62e5981 "><code>1acc246</code></a>
Add AI usage note to CONTRIBUTING.md (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1729 ">#1729</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/bc77eda0780c039352e2808a691d046431f5d852 "><code>bc77eda</code></a>
build(deps-dev): bump oxfmt from 0.55.0 to 0.56.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1733 ">#1733</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/936d5ff7f65d9f697e62e6e9c8b16775a34a1171 "><code>936d5ff</code></a>
build(deps-dev): bump eslint-plugin-jsdoc from 63.0.7 to 63.0.10 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1734 ">#1734</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/e57824f3c5c28e3a3dee09f2b8fd49939138dfe5 "><code>e57824f</code></a>
build(deps-dev): bump <code>@typescript-eslint/eslint-plugin</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1732 ">#1732</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/f6256f23ca5d50be24e0861bd44e4a33d04f92c4 "><code>f6256f2</code></a>
build(deps-dev): bump globals from 17.6.0 to 17.7.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1736 ">#1736</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/47e628483b47a68ac0e82a8e4fe684d8efd13659 "><code>47e6284</code></a>
build(deps): bump <code>@mapbox/jsonlint-lines-primitives</code> from
2.0.2 to 2.0.3 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1738 ">#1738</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/d67067c58f126afee866f97531e48e776700d0fd "><code>d67067c</code></a>
build(deps-dev): bump rolldown from 1.1.2 to 1.1.3 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1737 ">#1737</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/f60c345a0f99207212c1fd3981ba9fb93d5a5240 "><code>f60c345</code></a>
build(deps-dev): bump <code>@types/node</code> from 26.0.0 to 26.0.1
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1735 ">#1735</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v25.0.0...v25.0.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 13:53:51 +00:00
b533c9dc24
chore(deps): Bump @codemirror/view from 6.43.1 to 6.43.3 ( #1967 )
...
Bumps [@codemirror/view](https://github.com/codemirror/view ) from 6.43.1
to 6.43.3.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 13:53:07 +00:00
a421a93ca8
chore(deps): Bump i18next from 26.3.1 to 26.3.3 ( #1968 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.3.1 to
26.3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.3.3</h2>
<ul>
<li>fix(types): selector <code>t($ => $.arr, { returnObjects: true,
context })</code> on a JSON array of <strong>heterogeneous</strong>
objects now preserves each element's full shape (e.g. <code>{ transKey1:
string; transKey2: string }[]</code>) instead of collapsing to a union
of partial element types. Two type-level causes: (1)
<code>FilterKeys</code> evaluated the whole array element type at once,
so <code>keyof (A | B)</code> only saw the keys common to every element
— it now distributes over the object union and filters each element
independently; (2) when TypeScript merges mismatched array element types
it injects phantom optional <code>undefined</code> keys (e.g.
<code>transKey1_withContext?: undefined</code> on elements that don't
define it), which the context-detection helpers mistook for real context
variants — they now skip keys typed as <code>undefined</code>. Also adds
a dedicated <code>context</code> + <code>returnObjects: true</code>
selector overload using <code>const Fn</code> +
<code>ReturnType<Fn></code>, so <code>Target</code> is no longer
collapsed to <code>unknown</code> via <code>ApplyTarget</code>. Resolves
Problem 1 of <a
href="https://redirect.github.com/i18next/i18next/issues/2398 ">#2398</a>
(Problem 2 was already fixed on master). Thanks <a
href="https://github.com/sauravgupta-dotcom "><code>@sauravgupta-dotcom</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2438 ">#2438</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2398 ">#2398</a>.</li>
</ul>
<h2>v26.3.2</h2>
<ul>
<li>fix: chained formatters with a parenthesised option that contains
the format separator (e.g. <code>join(separator: ', ')</code>) now work
at <strong>any</strong> position in the chain, not just first.
Previously the comma-in-parens reassembly only repaired
<code>formats[0]</code>, so <code>{{v, uppercase, join(separator: ',
')}}</code> split the <code>join(...)</code> option on the inner comma
and never rejoined it, producing corrupt output. Replaced the
first-position-only repair with a position-independent pass that
re-joins fragments until each open paren closes. Thanks <a
href="https://github.com/spokodev "><code>@spokodev</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2437 ">#2437</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.3.3</h2>
<ul>
<li>fix(types): selector <code>t($ => $.arr, { returnObjects: true,
context })</code> on a JSON array of <strong>heterogeneous</strong>
objects now preserves each element's full shape (e.g. <code>{ transKey1:
string; transKey2: string }[]</code>) instead of collapsing to a union
of partial element types. Two type-level causes: (1)
<code>FilterKeys</code> evaluated the whole array element type at once,
so <code>keyof (A | B)</code> only saw the keys common to every element
— it now distributes over the object union and filters each element
independently; (2) when TypeScript merges mismatched array element types
it injects phantom optional <code>undefined</code> keys (e.g.
<code>transKey1_withContext?: undefined</code> on elements that don't
define it), which the context-detection helpers mistook for real context
variants — they now skip keys typed as <code>undefined</code>. Also adds
a dedicated <code>context</code> + <code>returnObjects: true</code>
selector overload using <code>const Fn</code> +
<code>ReturnType<Fn></code>, so <code>Target</code> is no longer
collapsed to <code>unknown</code> via <code>ApplyTarget</code>. Resolves
Problem 1 of <a
href="https://redirect.github.com/i18next/i18next/issues/2398 ">#2398</a>
(Problem 2 was already fixed on master). Thanks <a
href="https://github.com/sauravgupta-dotcom "><code>@sauravgupta-dotcom</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2438 ">#2438</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2398 ">#2398</a>.</li>
</ul>
<h2>26.3.2</h2>
<ul>
<li>fix: chained formatters with a parenthesised option that contains
the format separator (e.g. <code>join(separator: ', ')</code>) now work
at <strong>any</strong> position in the chain, not just first.
Previously the comma-in-parens reassembly only repaired
<code>formats[0]</code>, so <code>{{v, uppercase, join(separator: ',
')}}</code> split the <code>join(...)</code> option on the inner comma
and never rejoined it, producing corrupt output. Replaced the
first-position-only repair with a position-independent pass that
re-joins fragments until each open paren closes. Thanks <a
href="https://github.com/spokodev "><code>@spokodev</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2437 ">#2437</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/cf7080d363c0bc775681215bba6513a3610dee8b "><code>cf7080d</code></a>
26.3.3</li>
<li><a
href="https://github.com/i18next/i18next/commit/05fd7be281a3c2175da16c9e867a91d95e034889 "><code>05fd7be</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/cc0bd80943eae4f45867abbd78c0ae8dd964bb82 "><code>cc0bd80</code></a>
changelog: 26.3.3 entry for <a
href="https://redirect.github.com/i18next/i18next/issues/2438 ">#2438</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/9cbfa6353b6ab726c42be1e6ed52aab5b0601612 "><code>9cbfa63</code></a>
fix(types): preserve selector returnObjects shape with context (<a
href="https://redirect.github.com/i18next/i18next/issues/2438 ">#2438</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/3b047122f5ad5b99a29f9138bb8542de125c8783 "><code>3b04712</code></a>
26.3.2</li>
<li><a
href="https://github.com/i18next/i18next/commit/fc20f5dd5ae9744045942e135e93dd787e4bc869 "><code>fc20f5d</code></a>
changelog: 26.3.2 entry for <a
href="https://redirect.github.com/i18next/i18next/issues/2437 ">#2437</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/6901e04f07f0eec1848242d8af26509ab5438920 "><code>6901e04</code></a>
fix: reassemble comma-in-parens formatters at any chain position (<a
href="https://redirect.github.com/i18next/i18next/issues/2437 ">#2437</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/6e086281e2ff40e0beabd5a75f94f777332a7304 "><code>6e08628</code></a>
README: mention npx i18next-cli localize as the zero-to-localized
path</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.3.1...v26.3.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 13:52:50 +00:00
27e50795a8
chore(deps-dev): Bump stylelint from 17.13.0 to 17.14.0 ( #1964 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.13.0
to 17.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.14.0</h2>
<p>It fixes 3 bugs, including a false negative one.</p>
<ul>
<li>Fixed: performance of getting module paths (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9354 ">#9354</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: performance by dynamically importing <code>TIMING</code> only
on use (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9356 ">#9356</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>function-calc-no-unspaced-operator</code> false
negatives for unspaced <code>+</code> and <code>-</code> operators
following a <code>*</code> or <code>/</code> operator (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9357 ">#9357</a>)
(<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.14.0 - 2026-06-25</h2>
<p>It fixes 3 bugs, including a false negative one.</p>
<ul>
<li>Fixed: performance of getting module paths (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9354 ">#9354</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: performance by dynamically importing <code>TIMING</code> only
on use (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9356 ">#9356</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>function-calc-no-unspaced-operator</code> false
negatives for unspaced <code>+</code> and <code>-</code> operators
following a <code>*</code> or <code>/</code> operator (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9357 ">#9357</a>)
(<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint/stylelint/commit/f36e1703ecba024bec91953f6134bae3102066ab "><code>f36e170</code></a>
Release 17.14.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9371 ">#9371</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/9334bff61c34a76446bbcedacfaa4aadcbfc3e0a "><code>9334bff</code></a>
Bump actions/checkout from 6.0.3 to 7.0.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9367 ">#9367</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/f73637469133a38df5528811760170a23e6dd269 "><code>f736374</code></a>
Bump npm-run-all2 from 9.0.1 to 9.0.2 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9370 ">#9370</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/78e1b44ed3dd26217d68e7e558115aab2e000645 "><code>78e1b44</code></a>
Bump postcss-selector-parser from 7.1.2 to 7.1.4 in the postcss group
(<a
href="https://redirect.github.com/stylelint/stylelint/issues/9369 ">#9369</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/cab5acda822100659a6abc8c34206189b207e122 "><code>cab5acd</code></a>
Bump eslint from 10.4.1 to 10.5.0 in the eslint group (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9368 ">#9368</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/89b95e1b320f7e46db4440ababbdb23ad26bf6f5 "><code>89b95e1</code></a>
Bump prettier from 3.8.3 to 3.8.4 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9363 ">#9363</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/7ecce9403cfaca6cea7cb5eda85c9e4de1d63f6c "><code>7ecce94</code></a>
Bump cosmiconfig from 9.0.1 to 9.0.2 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9362 ">#9362</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/fa54191ff81168564ebbb1018811fb91b2339d66 "><code>fa54191</code></a>
Bump postcss-selector-parser from 7.1.1 to 7.1.2 in the postcss group
(<a
href="https://redirect.github.com/stylelint/stylelint/issues/9361 ">#9361</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/8c3cf6920f10fde3e715a8a2e00569b688d0381e "><code>8c3cf69</code></a>
Bump <code>@csstools/css-syntax-patches-for-csstree</code> from 1.1.4
to 1.1.5 in the csst...</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/c61d3dbb931e6bad346d60b5fcb1fc7f7a6f90ca "><code>c61d3db</code></a>
Fix performance of getting module paths (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9354 ">#9354</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint/stylelint/compare/17.13.0...17.14.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 13:52:18 +00:00
bc25bfaced
chore(deps): Bump @codemirror/state from 6.6.0 to 6.7.0 ( #1963 )
...
Bumps [@codemirror/state](https://github.com/codemirror/state ) from
6.6.0 to 6.7.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/state/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 13:51:00 +00:00
4d46fb94d5
chore(deps-dev): Bump typescript-eslint from 8.61.1 to 8.62.0 ( #1959 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.61.1 to 8.62.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.0</h2>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json "files" (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444 ">#12444</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li>add "files" to rule-schema-to-typescript-types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12441 ">#12441</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json "files" (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444 ">#12444</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a "><code>54e2857</code></a>
chore(release): publish 8.62.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a "><code>81e4c26</code></a>
feat: remove redundant package.json "files" (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12444 ">#12444</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 13:51:11 +00:00
e23679ac45
chore(deps-dev): Bump uuid from 14.0.0 to 14.0.1 ( #1958 )
...
Bumps [uuid](https://github.com/uuidjs/uuid ) from 14.0.0 to 14.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uuidjs/uuid/releases ">uuid's
releases</a>.</em></p>
<blockquote>
<h2>v14.0.1</h2>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1 ">14.0.1</a>
(2026-06-20)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add types condition to node export for moduleResolution bundler (<a
href="https://redirect.github.com/uuidjs/uuid/issues/961 ">#961</a>) (<a
href="https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e ">27ffae5</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md ">uuid's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1 ">14.0.1</a>
(2026-06-20)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add types condition to node export for moduleResolution bundler (<a
href="https://redirect.github.com/uuidjs/uuid/issues/961 ">#961</a>) (<a
href="https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e ">27ffae5</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/uuidjs/uuid/commit/70177807e9229dfacde2038dc1e722f1828f358a "><code>7017780</code></a>
chore(main): release 14.0.1 (<a
href="https://redirect.github.com/uuidjs/uuid/issues/964 ">#964</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/f2c3e4b513e47968f568ad1bf96417c6924e83a7 "><code>f2c3e4b</code></a>
chore: fix release-please workflow (<a
href="https://redirect.github.com/uuidjs/uuid/issues/963 ">#963</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e "><code>27ffae5</code></a>
fix: add types condition to node export for moduleResolution bundler (<a
href="https://redirect.github.com/uuidjs/uuid/issues/961 ">#961</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/664cb3163531f49d3a5125f732d38724621bfcaa "><code>664cb31</code></a>
Remove outdated security contact information (<a
href="https://redirect.github.com/uuidjs/uuid/issues/959 ">#959</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/d729016037c4e1b09a522f4854a96f4f4add9047 "><code>d729016</code></a>
fix(ci): checkout PR head commit in browser workflow (<a
href="https://redirect.github.com/uuidjs/uuid/issues/957 ">#957</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/89a5ebcc56999fc25c95350f922693b71fb11d32 "><code>89a5ebc</code></a>
Workflows (<a
href="https://redirect.github.com/uuidjs/uuid/issues/948 ">#948</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/196e208db33d568d8d43d5b549d5d0eb3d9b0fbf "><code>196e208</code></a>
chore: fix workflow (<a
href="https://redirect.github.com/uuidjs/uuid/issues/947 ">#947</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/95af4489be459d6ba14d137b6fcd87ffd0953e91 "><code>95af448</code></a>
chore: update workflows (<a
href="https://redirect.github.com/uuidjs/uuid/issues/946 ">#946</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/3b57f95555ab1b8432213264b5eaa318958fb8fe "><code>3b57f95</code></a>
chore: add workflow_dispatch (<a
href="https://redirect.github.com/uuidjs/uuid/issues/944 ">#944</a>)</li>
<li><a
href="https://github.com/uuidjs/uuid/commit/a433096a74e1d1815432fb1bed8115369785a1a9 "><code>a433096</code></a>
chore: add 12.x and 13.x maintenance release branches (<a
href="https://redirect.github.com/uuidjs/uuid/issues/941 ">#941</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 13:51:14 +00:00
2d57829cb9
chore(deps): Bump actions/checkout from 6.0.2 to 7.0.0 ( #1957 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2
to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases ">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>block checking out fork pr for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy "><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454 ">actions/checkout#2454</a></li>
<li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2458 ">actions/checkout#2458</a></li>
<li>Bump flatted from 3.3.1 to 3.4.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2460 ">actions/checkout#2460</a></li>
<li>Bump js-yaml from 4.1.0 to 4.2.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2461 ">actions/checkout#2461</a></li>
<li>Bump <code>@actions/core</code> and
<code>@actions/tool-cache</code> and Remove uuid by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2459 ">actions/checkout#2459</a></li>
<li>upgrade module to esm and update dependencies by <a
href="https://github.com/aiqiaoy "><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2463 ">actions/checkout#2463</a></li>
<li>Bump the minor-npm-dependencies group across 1 directory with 3
updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2462 ">actions/checkout#2462</a></li>
<li>getting ready for checkout v7 release by <a
href="https://github.com/aiqiaoy "><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2464 ">actions/checkout#2464</a></li>
<li>update error wording by <a
href="https://github.com/aiqiaoy "><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2467 ">actions/checkout#2467</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/aiqiaoy "><code>@aiqiaoy</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2454 ">actions/checkout#2454</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0 ">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0 </a></p>
<h2>v6.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Update changelog by <a
href="https://github.com/ericsciple "><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2357 ">actions/checkout#2357</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a
href="https://github.com/yaananth "><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2414 ">actions/checkout#2414</a></li>
<li>Fix checkout init for SHA-256 repositories by <a
href="https://github.com/yaananth "><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2439 ">actions/checkout#2439</a></li>
<li>Update changelog for v6.0.3 by <a
href="https://github.com/yaananth "><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2446 ">actions/checkout#2446</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/yaananth "><code>@yaananth</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2414 ">actions/checkout#2414</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6...v6.0.3 ">https://github.com/actions/checkout/compare/v6...v6.0.3 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md ">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v7.0.0</h2>
<ul>
<li>Block checking out fork PR for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy "><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454 ">actions/checkout#2454</a></li>
<li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2458 ">actions/checkout#2458</a></li>
<li>Bump flatted from 3.3.1 to 3.4.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2460 ">actions/checkout#2460</a></li>
<li>Bump js-yaml from 4.1.0 to 4.2.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2461 ">actions/checkout#2461</a></li>
<li>Bump <code>@actions/core</code> and
<code>@actions/tool-cache</code> and Remove uuid by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2459 ">actions/checkout#2459</a></li>
<li>upgrade module to esm and update dependencies by <a
href="https://github.com/aiqiaoy "><code>@aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2463 ">actions/checkout#2463</a></li>
<li>Bump the minor-npm-dependencies group across 1 directory with 3
updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2462 ">actions/checkout#2462</a></li>
</ul>
<h2>v6.0.3</h2>
<ul>
<li>Fix checkout init for SHA-256 repositories by <a
href="https://github.com/yaananth "><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2439 ">actions/checkout#2439</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a
href="https://github.com/yaananth "><code>@yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2414 ">actions/checkout#2414</a></li>
</ul>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple "><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356 ">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple "><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327 ">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple "><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286 ">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc "><code>@salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248 ">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple "><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301 ">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc "><code>@salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226 ">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple "><code>@ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305 ">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss "><code>@motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971 ">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail "><code>@mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977 ">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells "><code>@benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043 ">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross "><code>@joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044 ">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89 "><code>@nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194 ">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang "><code>@TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224 ">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc "><code>@salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236 ">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3 "><code>@jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941 ">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3 "><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946 ">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy "><code>@orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924 ">actions/checkout#1924</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 "><code>9c091bb</code></a>
update error wording (<a
href="https://redirect.github.com/actions/checkout/issues/2467 ">#2467</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a "><code>1044a6d</code></a>
getting ready for checkout v7 release (<a
href="https://redirect.github.com/actions/checkout/issues/2464 ">#2464</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f "><code>f028218</code></a>
Bump the minor-npm-dependencies group across 1 directory with 3 updates
(<a
href="https://redirect.github.com/actions/checkout/issues/2462 ">#2462</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d "><code>d914b26</code></a>
upgrade module to esm and update dependencies (<a
href="https://redirect.github.com/actions/checkout/issues/2463 ">#2463</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d "><code>537c7ef</code></a>
Bump <code>@actions/core</code> and <code>@actions/tool-cache</code>
and Remove uuid (<a
href="https://redirect.github.com/actions/checkout/issues/2459 ">#2459</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6 "><code>130a169</code></a>
Bump js-yaml from 4.1.0 to 4.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2461 ">#2461</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3 "><code>7d09575</code></a>
Bump flatted from 3.3.1 to 3.4.2 (<a
href="https://redirect.github.com/actions/checkout/issues/2460 ">#2460</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e "><code>0f9f3aa</code></a>
Bump actions/publish-immutable-action (<a
href="https://redirect.github.com/actions/checkout/issues/2458 ">#2458</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7 "><code>f9e715a</code></a>
block checking out fork pr for pull_request_target and workflow_run (<a
href="https://redirect.github.com/actions/checkout/issues/2454 ">#2454</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/df4cb1c069e1874edd31b4311f1884172cec0e10 "><code>df4cb1c</code></a>
Update changelog for v6.0.3 (<a
href="https://redirect.github.com/actions/checkout/issues/2446 ">#2446</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 13:53:27 +00:00
16092ccf1a
chore(deps-dev): Bump typescript-eslint from 8.61.0 to 8.61.1 ( #1955 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.61.0 to 8.61.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.61.1</h2>
<h2>8.61.1 (2026-06-15)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [consistent-indexed-object-style] do
not remove comments when fixing (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12396 ">#12396</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/10577 ">#10577</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
avoid false positive for template literal expressions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12281 ">#12281</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] wrap
object literal in parens when removing TSTypeAssertion in arrow body (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12394 ">#12394</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12393 ">#12393</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-boolean-literal-compare] fix precedence bug in autofix
(<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12413 ">#12413</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-template-expression]
respect ECMAScript line terminators (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12388 ">#12388</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Anas <a
href="https://github.com/anasm266 "><code>@anasm266</code></a></li>
<li>Deftera <a
href="https://github.com/Deftera186 "><code>@Deftera186</code></a></li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
<li>lumir</li>
<li>Sarath Francis <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.61.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.61.1 (2026-06-15)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.61.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/aaad7187b529c4b6ff8088ffd7e948c69c2763b6 "><code>aaad718</code></a>
chore(release): publish 8.61.1</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.1/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-19 13:50:55 +00:00
9c594b46c6
chore(deps): Bump form-data from 4.0.5 to 4.0.6 ( #1954 )
...
Bumps [form-data](https://github.com/form-data/form-data ) from 4.0.5 to
4.0.6.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md ">form-data's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 ">v4.0.6</a>
- 2026-06-12</h2>
<h3>Commits</h3>
<ul>
<li>[Fix] escape CR, LF, and <code>"</code> in field names and
filenames <a
href="https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99 "><code>8dff42c</code></a></li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code>,
<code>auto-changelog</code>, <code>tape</code> <a
href="https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1 "><code>f31d21e</code></a></li>
<li>[Deps] update <code>hasown</code>, <code>mime-types</code> <a
href="https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd "><code>92ae0eb</code></a></li>
<li>[Dev Deps] update <code>js-randomness-predictor</code> <a
href="https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97 "><code>67b0f65</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435 "><code>64190db</code></a>
v4.0.6</li>
<li><a
href="https://github.com/form-data/form-data/commit/92ae0eb5da94d6f01925d5f4fcffb2a1e50ed7cd "><code>92ae0eb</code></a>
[Deps] update <code>hasown</code>, <code>mime-types</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/f31d21ef10bf46e46344c3ee4f99acbef6be43e1 "><code>f31d21e</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code>,
<code>auto-changelog</code>, <code>tape</code></li>
<li><a
href="https://github.com/form-data/form-data/commit/8dff42c6da654ed4e7ad4acb7f8ccd3831217c99 "><code>8dff42c</code></a>
[Fix] escape CR, LF, and <code>"</code> in field names and
filenames</li>
<li><a
href="https://github.com/form-data/form-data/commit/67b0f65c2e0b065a511d42227d35e4d367644e97 "><code>67b0f65</code></a>
[Dev Deps] update <code>js-randomness-predictor</code></li>
<li>See full diff in <a
href="https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 14:00:20 +00:00
9e5a21ce3a
chore(deps-dev): Bump the vitest group with 2 updates ( #1952 )
...
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 )
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">@vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.9</h2>
<h3>🐞 Bug Fixes</h3>
<ul>
<li>Fix <code>importOriginal</code> with optimizer and query import
[backport to v4] - by <strong>Hiroshi Ogawa</strong>, <strong>David
Harris</strong>, <strong>Codex</strong>and <strong>Vladimir</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10546 ">vitest-dev/vitest#10546</a>
<a href="https://github.com/vitest-dev/vitest/commit/a5180190c "><!-- raw
HTML omitted -->(a5180)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Wait for orchestrator readiness before resolving browser sessions
[backport to v4] - by <strong>Vladimir</strong> and <strong>Séamus
O'Connor</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10555 ">vitest-dev/vitest#10555</a>
<a href="https://github.com/vitest-dev/vitest/commit/7fb29651a "><!-- raw
HTML omitted -->(7fb29)<!-- raw HTML omitted --></a></li>
<li>Wait for iframe tester readiness before preparing [backport to v4] -
by <strong>Vladimir</strong> and <strong>Séamus O'Connor</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10497 ">vitest-dev/vitest#10497</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10556 ">vitest-dev/vitest#10556</a>
<a href="https://github.com/vitest-dev/vitest/commit/fbc626c40 "><!-- raw
HTML omitted -->(fbc62)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>mocker</strong>:
<ul>
<li>Hoist vi.mock() for vite-plus/test imports [backport to v4] - by
<strong>Hiroshi Ogawa</strong>, <strong>LongYinan</strong>,
<strong>Claude Opus 4.8</strong> and <strong>Vladimir</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10548 ">vitest-dev/vitest#10548</a>
<a href="https://github.com/vitest-dev/vitest/commit/2c9559c02 "><!-- raw
HTML omitted -->(2c955)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pool</strong>:
<ul>
<li>Prevent test run hang on worker crash [backport to v4] - by
<strong>Ari Perkkiö</strong> and <strong>Jattioui Ismail</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10543 ">vitest-dev/vitest#10543</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10564 ">vitest-dev/vitest#10564</a>
<a href="https://github.com/vitest-dev/vitest/commit/934b0f587 "><!-- raw
HTML omitted -->(934b0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5><a
href="https://github.com/vitest-dev/vitest/compare/v4.1.8...v4.1.9 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a7a61e78c7d0718f00173cff6800a91a344457d4 "><code>a7a61e7</code></a>
chore: release v4.1.9 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8/issues/10598 ">#10598</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/coverage-v8 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vitest` from 4.1.8 to 4.1.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.9</h2>
<h3>🐞 Bug Fixes</h3>
<ul>
<li>Fix <code>importOriginal</code> with optimizer and query import
[backport to v4] - by <strong>Hiroshi Ogawa</strong>, <strong>David
Harris</strong>, <strong>Codex</strong>and <strong>Vladimir</strong> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10546 ">vitest-dev/vitest#10546</a>
<a href="https://github.com/vitest-dev/vitest/commit/a5180190c "><!-- raw
HTML omitted -->(a5180)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>:
<ul>
<li>Wait for orchestrator readiness before resolving browser sessions
[backport to v4] - by <strong>Vladimir</strong> and <strong>Séamus
O'Connor</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10555 ">vitest-dev/vitest#10555</a>
<a href="https://github.com/vitest-dev/vitest/commit/7fb29651a "><!-- raw
HTML omitted -->(7fb29)<!-- raw HTML omitted --></a></li>
<li>Wait for iframe tester readiness before preparing [backport to v4] -
by <strong>Vladimir</strong> and <strong>Séamus O'Connor</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10497 ">vitest-dev/vitest#10497</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10556 ">vitest-dev/vitest#10556</a>
<a href="https://github.com/vitest-dev/vitest/commit/fbc626c40 "><!-- raw
HTML omitted -->(fbc62)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>mocker</strong>:
<ul>
<li>Hoist vi.mock() for vite-plus/test imports [backport to v4] - by
<strong>Hiroshi Ogawa</strong>, <strong>LongYinan</strong>,
<strong>Claude Opus 4.8</strong> and <strong>Vladimir</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10548 ">vitest-dev/vitest#10548</a>
<a href="https://github.com/vitest-dev/vitest/commit/2c9559c02 "><!-- raw
HTML omitted -->(2c955)<!-- raw HTML omitted --></a></li>
</ul>
</li>
<li><strong>pool</strong>:
<ul>
<li>Prevent test run hang on worker crash [backport to v4] - by
<strong>Ari Perkkiö</strong> and <strong>Jattioui Ismail</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10543 ">vitest-dev/vitest#10543</a>
and <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10564 ">vitest-dev/vitest#10564</a>
<a href="https://github.com/vitest-dev/vitest/commit/934b0f587 "><!-- raw
HTML omitted -->(934b0)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5><a
href="https://github.com/vitest-dev/vitest/compare/v4.1.8...v4.1.9 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a7a61e78c7d0718f00173cff6800a91a344457d4 "><code>a7a61e7</code></a>
chore: release v4.1.9 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10598 ">#10598</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/934b0f587cb61d8338d83f525295322692a2db40 "><code>934b0f5</code></a>
fix(pool): prevent test run hang on worker crash (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10543 ">#10543</a>)
[backport to v4] (#...</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/7fb29651afbae2a9b0cefe6c031a9308f168ac60 "><code>7fb2965</code></a>
fix(browser): wait for orchestrator readiness before resolving browser
sessio...</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a5180190c1be7089e3705e3dd9e84fea118d09d3 "><code>a518019</code></a>
fix: fix <code>importOriginal</code> with optimizer and query import
[backport to v4] (#...</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 13:51:33 +00:00
5032a3f3c6
chore(deps-dev): Bump eslint from 10.4.1 to 10.5.0 ( #1950 )
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.4.1 to 10.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases ">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.5.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad "><code>5ca8c52</code></a>
feat: correct stack tracking in max-nested-callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/20973 ">#20973</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c "><code>b565783</code></a>
feat: report no-with violations at the with keyword (<a
href="https://redirect.github.com/eslint/eslint/issues/20971 ">#20971</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684 "><code>2ce032f</code></a>
feat: report max-lines-per-function violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20966 ">#20966</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f "><code>732cb3e</code></a>
feat: report max-nested-callbacks violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20967 ">#20967</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7 "><code>f9c138a</code></a>
feat: report max-depth violations on keywords (<a
href="https://redirect.github.com/eslint/eslint/issues/20943 ">#20943</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bdb496cc0d54b6d0a023aef9abd5f040ccff2101 "><code>bdb496c</code></a>
feat: correct max-depth handling for else-if chains (<a
href="https://redirect.github.com/eslint/eslint/issues/20944 ">#20944</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c29687354a7f96093f57f7d73eecb866ad5e2953 "><code>c296873</code></a>
feat: update error loc in <code>max-statements</code> to function header
(<a
href="https://redirect.github.com/eslint/eslint/issues/20907 ">#20907</a>)
(Taejin Kim)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/8ae1b5b856dc031cd6c701d89a4df7da4772cd56 "><code>8ae1b5b</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/ca7eb90127dcad917188bb1342623f02a272e781 "><code>ca7eb90</code></a>
docs: update Node.js prerequisites to include ICU support (<a
href="https://redirect.github.com/eslint/eslint/issues/20962 ">#20962</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f99b47a6799be25321552402a49303bb06a43fe4 "><code>f99b47a</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/acf03d4eed31d259c7dc62af5b9640629784f7cc "><code>acf03d4</code></a>
docs: clarify precedence of parserOptions over languageOptions (<a
href="https://redirect.github.com/eslint/eslint/issues/20926 ">#20926</a>)
(sethamus)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b18bf58c5ac748415ffffdff2d96980fbd6a57e8 "><code>b18bf58</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20959 ">#20959</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c2d1444df77cb42e5a0b89ab70496879d180a54d "><code>c2d1444</code></a>
refactor: replace areAllSegmentsUnreachable with !isAnySegmentReachable
(<a
href="https://redirect.github.com/eslint/eslint/issues/20951 ">#20951</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/243b8c56014bbbe63771185b0731d8dd4d1316e9 "><code>243b8c5</code></a>
chore: enhance config-rule to support oneOf, anyOf, and nested schemas
(<a
href="https://redirect.github.com/eslint/eslint/issues/20788 ">#20788</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/217b2a91f46137c5ffd693965e71306c4c15ea6b "><code>217b2a9</code></a>
test: add unit tests for ParserService (<a
href="https://redirect.github.com/eslint/eslint/issues/20949 ">#20949</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/72003e781d76bd4ee0d98a6601730d0b829070f9 "><code>72003e7</code></a>
test: add location information to error messages in
<code>max-statements</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20945 ">#20945</a>)
(lumir)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7797c266977b0bc4971aa79721813d480de72cd1 "><code>7797c26</code></a>
refactor: deduplicate isAnySegmentReachable across rules (<a
href="https://redirect.github.com/eslint/eslint/issues/20890 ">#20890</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/67c46fa6e4f34e88cc6bc82f8a0dcc917c65d257 "><code>67c46fa</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20938 ">#20938</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/95d8c7a99f991abd8ab618d0ee2cbd4f58effc29 "><code>95d8c7a</code></a>
chore: update dependency <code>@eslint/json</code> to v2 (<a
href="https://redirect.github.com/eslint/eslint/issues/20934 ">#20934</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/cf9e496205142cd4971b9f98aed85866d1010b9c "><code>cf9e496</code></a>
chore: update <code>@arethetypeswrong/cli</code> to 0.18.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/20933 ">#20933</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/fb6d3960cacc51fc12383fa5ded2382adbf90c1c "><code>fb6d396</code></a>
test: run type tests with TypeScript 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/20868 ">#20868</a>)
(sethamus)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/de3b672a267e32607db04176ce4775664acb3145 "><code>de3b672</code></a>
10.5.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/362a5185134290db696d39f97c9da609ded54040 "><code>362a518</code></a>
Build: changelog update for 10.5.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/5ca8c5278edea1fd84d3ba83d8ea3f52fb3831ad "><code>5ca8c52</code></a>
feat: correct stack tracking in max-nested-callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/20973 ">#20973</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b5657837604fa5e8cf1278074782025cadd34b6c "><code>b565783</code></a>
feat: report no-with violations at the with keyword (<a
href="https://redirect.github.com/eslint/eslint/issues/20971 ">#20971</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2ce032fbc72a1a80c024c084a4f382fb6dece684 "><code>2ce032f</code></a>
feat: report max-lines-per-function violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20966 ">#20966</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/732cb3e09d5b8b809b5f461d118a5d9fdcd6427f "><code>732cb3e</code></a>
feat: report max-nested-callbacks violations at function head (<a
href="https://redirect.github.com/eslint/eslint/issues/20967 ">#20967</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f9c138a0ba7d8e37aed39aef4a3ff1cae8c669f7 "><code>f9c138a</code></a>
feat: report max-depth violations on keywords (<a
href="https://redirect.github.com/eslint/eslint/issues/20943 ">#20943</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8ae1b5b856dc031cd6c701d89a4df7da4772cd56 "><code>8ae1b5b</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/ca7eb90127dcad917188bb1342623f02a272e781 "><code>ca7eb90</code></a>
docs: update Node.js prerequisites to include ICU support (<a
href="https://redirect.github.com/eslint/eslint/issues/20962 ">#20962</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b18bf58c5ac748415ffffdff2d96980fbd6a57e8 "><code>b18bf58</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20959 ">#20959</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.4.1...v10.5.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 13:51:32 +00:00
d7f7207675
chore(deps-dev): Bump sass from 1.100.0 to 1.101.0 ( #1946 )
...
Bumps [sass](https://github.com/sass/dart-sass ) from 1.100.0 to 1.101.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/releases ">sass's
releases</a>.</em></p>
<blockquote>
<h2>Dart Sass 1.101.0</h2>
<p>To install Sass 1.101.0, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/ ">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install ">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<ul>
<li><strong>Potentially breaking bug fix:</strong> The Node package
importer now properly supports resolving import-only variants of Sass
files declared in the <code>exports</code>, <code>sass</code>, and
<code>style</code> fields of <code>package.json</code>. Previously,
these files were ignored even when loaded via <code>@import</code>, so
any code relying on loading module-system-only files this way may
break.</li>
</ul>
<p>See the <a
href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11010 ">full
changelog</a> for changes in earlier releases.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md ">sass's
changelog</a>.</em></p>
<blockquote>
<h2>1.101.0</h2>
<ul>
<li><strong>Potentially breaking bug fix:</strong> The Node package
importer now properly
supports resolving import-only variants of Sass files declared in the
<code>exports</code>, <code>sass</code>, and <code>style</code> fields
of <code>package.json</code>. Previously, these
files were ignored even when loaded via <code>@import</code>, so any
code relying on
loading module-system-only files this way may break.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sass/dart-sass/commit/63b9922f5ddbf34bc742b50949e0ee5c47f4686d "><code>63b9922</code></a>
Load import-only files through package.json <code>exports</code> (<a
href="https://redirect.github.com/sass/dart-sass/issues/2772 ">#2772</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/c7e9947100e8ffdabfe314a4e342595f2bccff35 "><code>c7e9947</code></a>
Migrate from bufbuild/buf-setup-action to bufbuild/buf-action (<a
href="https://redirect.github.com/sass/dart-sass/issues/2773 ">#2773</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/7674a4c29d05c844dcffd40a91e7cf2ac216d524 "><code>7674a4c</code></a>
Bump postcss from 8.5.13 to 8.5.15 in /pkg/sass-parser (<a
href="https://redirect.github.com/sass/dart-sass/issues/2774 ">#2774</a>)</li>
<li>See full diff in <a
href="https://github.com/sass/dart-sass/compare/1.100.0...1.101.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 13:53:16 +00:00
8b3ef5dbfc
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 24.10.0 to 25.0.0 ( #1947 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 24.10.0 to 25.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v25.0.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>⚠️ Change legacy filter expression validation to add suggestions on
invalid expressions (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1709 ">#1709</a>)
(by <a href="https://github.com/HarelM ">HarelM</a>)</li>
<li>Allow global state expressions in <code>fill-layer-opacity</code>
and <code>line-layer-opacity</code>. (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1699 ">#1699</a>)
(by <a
href="https://github.com/CommanderStorm "><code>@CommanderStorm</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>25.0.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>⚠️ Change legacy filter expression validation to add suggestions on
invalid expressions (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1709 ">#1709</a>)
(by <a href="https://github.com/HarelM ">HarelM</a>)</li>
<li>Allow global state expressions in <code>fill-layer-opacity</code>
and <code>line-layer-opacity</code>. (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1699 ">#1699</a>)
(by <a
href="https://github.com/CommanderStorm "><code>@CommanderStorm</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/fd56865d2e93aa3df9dae96f402f46dbedc44388 "><code>fd56865</code></a>
Bump js version to 25.0.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1711 ">#1711</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/ace975a46763df55e8bb9a08e7ec28e7ba30cb76 "><code>ace975a</code></a>
fix: mixed legacy+expression filter handling (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1709 ">#1709</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/cacf925de9a8b675f1810d63785cd32e6dbbfdc4 "><code>cacf925</code></a>
Fix lint warnings (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1710 ">#1710</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/e23008ad6cf4ee613791a6e101c5de6cf4da3dd9 "><code>e23008a</code></a>
build(deps-dev): bump <code>@typescript-eslint/eslint-plugin</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1707 ">#1707</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/52b769dc995136a492cb4e28f96d78c46fa25f7e "><code>52b769d</code></a>
build(deps-dev): bump rolldown from 1.1.0 to 1.1.1 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1708 ">#1708</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/3a3aa9f20e34c2656476a36f45622f24aa78f14f "><code>3a3aa9f</code></a>
build(deps-dev): bump oxfmt from 0.53.0 to 0.54.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1702 ">#1702</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/c612f73496de92ed0c99f4cf55afb9a63570b414 "><code>c612f73</code></a>
build(deps-dev): bump eslint from 10.4.1 to 10.5.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1706 ">#1706</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/a0f540ba7f32d63a76f2bbc32f9348df4ad92f3f "><code>a0f540b</code></a>
build(deps-dev): bump rollup from 4.61.1 to 4.62.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1705 ">#1705</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/53a399099ce1328a3ad19060a0d9fa8c603e14f2 "><code>53a3990</code></a>
build(deps-dev): bump <code>@typescript-eslint/parser</code> from
8.60.1 to 8.61.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1703 ">#1703</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/06ef6d3dd5353056530450f750a33c94639df41b "><code>06ef6d3</code></a>
build(deps-dev): bump semver from 7.8.2 to 7.8.4 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1704 ">#1704</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v24.10.0...v25.0.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 13:52:43 +00:00
71f59ec652
chore(deps-dev): Bump cypress from 15.16.0 to 15.17.0 ( #1948 )
...
Bumps [cypress](https://github.com/cypress-io/cypress ) from 15.16.0 to
15.17.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/cypress/releases ">cypress's
releases</a>.</em></p>
<blockquote>
<h2>v15.17.0</h2>
<p>Changelog: <a
href="https://docs.cypress.io/app/references/changelog#15-17-0 ">https://docs.cypress.io/app/references/changelog#15-17-0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/cypress/commit/b22780a9bb118b86730e22243aba16e25e7a5bed "><code>b22780a</code></a>
chore: Update Chrome (stable) to 149.0.7827.102 and Chrome for Testing
(stabl...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/ada42a7c2f69f19877c089327724d24478219fb3 "><code>ada42a7</code></a>
chore: send standard identity headers on cy-prompt/studio session
requests (#...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/6017154185cd8fbffbae90fde90cea7c78108730 "><code>6017154</code></a>
perf(server): release pending automation requests after response (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34037 ">#34037</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/6be559a1bd4375beb2918a94c26cf7cc5f30d1a8 "><code>6be559a</code></a>
chore: don't redeclare inherited observable Session.name (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34034 ">#34034</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/437a08e149563695b1eb5d91c0c3aaf50712ee14 "><code>437a08e</code></a>
chore: update need help link for auto provision project slug error modal
(<a
href="https://redirect.github.com/cypress-io/cypress/issues/34 ">#34</a>...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/04dd2965f1bf70c06e8b6d380cacaed0860e3667 "><code>04dd296</code></a>
refactor(proxy): request/response interception adapters and wire
middleware (...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/482cd419704a381b9a56778f6431da7b4c1d5a9e "><code>482cd41</code></a>
chore: reporter support for test replay embedding (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34031 ">#34031</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/f3de1b27f194a3d3dc5ad87bce2852e5b253a016 "><code>f3de1b2</code></a>
chore: reorder changelog entries for release by popularity of issue (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34032 ">#34032</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/b60b68f9b83b5f93c49b88c6ca74505f535476f8 "><code>b60b68f</code></a>
misc: warn when a --spec pattern matches no spec files (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34023 ">#34023</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/e0fe6e097f9414175c25cfd6f7264cad497a1526 "><code>e0fe6e0</code></a>
perf: Fix Command Log performance regression on hover (<a
href="https://redirect.github.com/cypress-io/cypress/issues/34029 ">#34029</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/cypress/compare/v15.16.0...v15.17.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 13:51:45 +00:00
50f42d7791
chore(deps): Bump @codemirror/lint from 6.9.6 to 6.9.7 ( #1945 )
...
Bumps [@codemirror/lint](https://github.com/codemirror/lint ) from 6.9.6
to 6.9.7.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/lint/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 13:51:57 +00:00
37ad002184
chore(deps-dev): Bump typescript-eslint from 8.60.1 to 8.61.0 ( #1944 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.60.1 to 8.61.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.61.0</h2>
<h2>8.61.0 (2026-06-08)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>ast-spec:</strong> change type of
<code>UnaryExpression.prefix</code> to always <code>true</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12372 ">#12372</a>)</li>
<li><strong>ast-spec:</strong> tighten types of
<code>ArrowFunction</code>, <code>YieldExpression</code>,
<code>TSTypePredicate</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12373 ">#12373</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>rule-schema-to-typescript-types:</strong> respect ECMAScript
line terminators (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12374 ">#12374</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
<li>lumir</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.61.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.61.0 (2026-06-08)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.61.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/16a5b247affc32af21b695cf96dfd75d7ded50a3 "><code>16a5b24</code></a>
chore(release): publish 8.61.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 13:51:41 +00:00
aa92e8eab4
chore(deps): Bump @codemirror/view from 6.43.0 to 6.43.1 ( #1943 )
...
Bumps [@codemirror/view](https://github.com/codemirror/view ) from 6.43.0
to 6.43.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 13:51:02 +00:00
84885f97ca
chore(deps-dev): Bump stylelint from 17.12.0 to 17.13.0 ( #1940 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.12.0
to 17.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.13.0</h2>
<p>It fixes 3 bugs, including a false negative one.</p>
<ul>
<li>Fixed: <code>declaration-block-no-duplicate-properties</code> false
negatives for interleaved non-consecutive duplicates with <code>ignore:
["consecutive-duplicates(-*)"]</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9324 ">#9324</a>)
(<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed: <code>selector-max-type</code> false positives for nested
selectors (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9319 ">#9319</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Fixed: <code>selector-type-no-unknown</code> false positives for
<code>install</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9308 ">#9308</a>)
(<a
href="https://github.com/Mouvedia "><code>@Mouvedia</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.13.0 - 2026-06-06</h2>
<p>It fixes 3 bugs, including a false negative one.</p>
<ul>
<li>Fixed: <code>declaration-block-no-duplicate-properties</code> false
negatives for interleaved non-consecutive duplicates with <code>ignore:
["consecutive-duplicates(-*)"]</code> (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9324 ">#9324</a>)
(<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed: <code>selector-max-type</code> false positives for nested
selectors (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9319 ">#9319</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Fixed: <code>selector-type-no-unknown</code> false positives for
<code>install</code> (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9308 ">#9308</a>)
(<a
href="https://github.com/Mouvedia "><code>@Mouvedia</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint/stylelint/commit/7fcee2b3155adb43daa2078762a15c2d9a24e69b "><code>7fcee2b</code></a>
Release 17.13.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9342 ">#9342</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/3b7287b2eb88474f63f6d17474e87ba836bf1f43 "><code>3b7287b</code></a>
Refactor to reuse shared utilities (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9337 ">#9337</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/8e889c3394f410916343a5e4c2b372ec514184d0 "><code>8e889c3</code></a>
Bump lint-staged from 17.0.4 to 17.0.5 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9334 ">#9334</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/a74aab46df5a94afa0cf4fddc9faf6eeacf34293 "><code>a74aab4</code></a>
Bump the stylelint-actions group with 5 updates (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9333 ">#9333</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/74c644828b839add46650d67390a0f1094dbcf7a "><code>74c6448</code></a>
Fix <code>declaration-block-no-duplicate-properties</code> false
negatives for interleav...</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/1cd26ac54ed16b92f77487f85b9305ca320f4085 "><code>1cd26ac</code></a>
Skip changeset verification on fork PRs CI (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9331 ">#9331</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/712b9867f7a1fa631813f577d7941686a10d3a58 "><code>712b986</code></a>
Fix vulnerable dependencies via <code>npm audit fix</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9328 ">#9328</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/27196b71dbc255bd612ad26dee40bf276a8123b0 "><code>27196b7</code></a>
Fix CI badge in README.md (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9329 ">#9329</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/179bba2e5a3264f9e96baf3318afdf113ea4f8dc "><code>179bba2</code></a>
Refactor to use <code>@import</code> over <code>@typedef</code> for
simple imports (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9326 ">#9326</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/94eab544e488dddb43829353649da8debd6427b5 "><code>94eab54</code></a>
Document using our PR template (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9327 ">#9327</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint/stylelint/compare/17.12.0...17.13.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 13:51:44 +00:00
404d106b8d
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 24.9.0 to 24.10.0 ( #1937 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 24.9.0 to 24.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v24.10.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Added <code>{line,fill}-layer-opacity</code> paint property. It
applies opacity to the whole layer as a whole layer so overlapping
features change in an uniform way. (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1650 ">#1650</a>)
(by <a
href="https://github.com/CommanderStorm "><code>@CommanderStorm</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>24.10.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Added <code>{line,fill}-layer-opacity</code> paint property. It
applies opacity to the whole layer as a whole layer so overlapping
features change in an uniform way. (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1650 ">#1650</a>)
(by <a
href="https://github.com/CommanderStorm "><code>@CommanderStorm</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/486830b1d830c82d1d7869f8e770d223069914d7 "><code>486830b</code></a>
Bump js version to 24.10.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1698 ">#1698</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/d6ef337ae66714adec18011fa4edb4a6a1c74294 "><code>d6ef337</code></a>
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1688 ">#1688</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/8fd6822309d5a1c45078b06b4fe2ee32a52708d6 "><code>8fd6822</code></a>
feat: add <code>{line,fill}-layer-opacity</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1650 ">#1650</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/11e1c2b3555499ad55f15545e742c443459d8faf "><code>11e1c2b</code></a>
build(deps-dev): bump <code>@types/node</code> from 25.9.1 to 25.9.2
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1695 ">#1695</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/3bd5ed2da2bd6ba27543141bb9abf1882a67b01a "><code>3bd5ed2</code></a>
build(deps-dev): bump rolldown from 1.0.3 to 1.1.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1693 ">#1693</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/b67254d3927ecea0b80e275e8c8ca5f824aee238 "><code>b67254d</code></a>
build(deps-dev): bump rollup from 4.60.4 to 4.61.1 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1696 ">#1696</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/8c8c0e08baff1b3d561d05c6c75ce0557e1329e3 "><code>8c8c0e0</code></a>
build(deps-dev): bump oxfmt from 0.52.0 to 0.53.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1691 ">#1691</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/16505dd2a179fdcb1bcf3a893b8e99e0361a9ff3 "><code>16505dd</code></a>
build(deps-dev): bump semver from 7.8.1 to 7.8.2 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1694 ">#1694</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/31a3a4c580084eab688c95384515a643c6d6be00 "><code>31a3a4c</code></a>
build(deps-dev): bump <code>@typescript-eslint/eslint-plugin</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1692 ">#1692</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/719017ed1e866e020dee16fe11b22c4cd8e53cb2 "><code>719017e</code></a>
build(deps-dev): bump eslint-plugin-jsdoc from 63.0.1 to 63.0.2 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1690 ">#1690</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v24.9.0...v24.10.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 13:51:40 +00:00
a8efa9cb1f
chore(deps): Bump github/codeql-action from 4.36.1 to 4.36.2 ( #1936 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action )
from 4.36.1 to 4.36.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.36.2</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943 ">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937 ">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6 ">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948 ">#3948</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943 ">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937 ">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6 ">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948 ">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894 ">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893 ">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5 ">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926 ">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899 ">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791 ">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892 ">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880 ">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4 ">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881 ">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795 ">#3795</a></li>
<li>The Git version 2.36.0 requirement for improved incremental analysis
now only applies to repositories that contain submodules. <a
href="https://redirect.github.com/github/codeql-action/pull/3789 ">#3789</a></li>
<li>Python analysis on GHES no longer extracts the standard library,
relying instead on models of the standard library. This should result in
significantly faster extraction and analysis times, while the effect on
alerts should be minimal. <a
href="https://redirect.github.com/github/codeql-action/pull/3794 ">#3794</a></li>
<li>Fixed a bug in the validation of OIDC configurations for private
registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3807 ">#3807</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2 ">2.25.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3823 ">#3823</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/8aad20d150bbac5944a9f9d289da16a4b0d87c1e "><code>8aad20d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3949 ">#3949</a>
from github/update-v4.36.2-dcb947ce1</li>
<li><a
href="https://github.com/github/codeql-action/commit/f521b08cd8f468ab193ea950a589cb2e9c869c6a "><code>f521b08</code></a>
Add additional changelog notes</li>
<li><a
href="https://github.com/github/codeql-action/commit/8aeff0ffb7b78582ee0d0e6eebb8140684400d08 "><code>8aeff0f</code></a>
Update changelog for v4.36.2</li>
<li><a
href="https://github.com/github/codeql-action/commit/dcb947ce15976d40ea82935510b2db4872ec124c "><code>dcb947c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3948 ">#3948</a>
from github/update-bundle/codeql-bundle-v2.25.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/c251bcefa178f7780f62f150002acffe3d07fde9 "><code>c251bce</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/62953c18b35f59e28351d2f1e806925aef8b1e3c "><code>62953c1</code></a>
Update default bundle to codeql-bundle-v2.25.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/423b570baf1976cd7a3daeba5d6e9f9b76432f37 "><code>423b570</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3946 ">#3946</a>
from github/dependabot/npm_and_yarn/npm-minor-5d507a...</li>
<li><a
href="https://github.com/github/codeql-action/commit/c35d1b164463ee62a100735382aaaa525c5d3496 "><code>c35d1b1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3947 ">#3947</a>
from github/dependabot/github_actions/dot-github/wor...</li>
<li><a
href="https://github.com/github/codeql-action/commit/cb1a588b02755b176e7b9d033ed4b69312f0e1bd "><code>cb1a588</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3937 ">#3937</a>
from github/robertbrignull/waitForProcessing_backoff</li>
<li><a
href="https://github.com/github/codeql-action/commit/ba47406412c54532b5b4fcfbaf877c9e2382b206 "><code>ba47406</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3943 ">#3943</a>
from github/henrymercer/cache-cli-version-info</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 13:53:23 +00:00
91c9b280ff
chore(deps): Bump i18next from 26.3.0 to 26.3.1 ( #1935 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.3.0 to
26.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.3.1</h2>
<ul>
<li>fix(types): <code>t()</code> with a <code>keyPrefix</code> no longer
pollutes its return type with sibling keys' values. A regression in
26.3.0 — the <code>[Res] extends [never]</code> guards added to
<code>KeysBuilderWithReturnObjects</code> /
<code>KeysBuilderWithoutReturnObjects</code> turned the builders into
deferred conditional types, so <code>KeyPrefix<Ns></code> stopped
resolving to a literal union and <code>keyPrefix</code> inference
widened to the whole namespace. Symptom: <code>useTranslation(ns, {
keyPrefix: 'a.b' })</code> then <code>t('title')</code> would resolve to
<code>'<a.b>.title' | '<other.path>.title' | ...</code>
instead of just the scoped value. Affected every
<code>react-i18next</code> user using <code>keyPrefix</code>. Restored
to the eager 26.2.0 form. The same-namespace conflict handling from <a
href="https://redirect.github.com/i18next/i18next/issues/2434 ">#2434</a>
still works via <code>_DropConflictKeys</code> at the merge layer (in
<code>options.d.ts</code>). Thanks <a
href="https://github.com/aaronrosenthal "><code>@aaronrosenthal</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2436 ">#2436</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.3.1</h2>
<ul>
<li>fix(types): <code>t()</code> with a <code>keyPrefix</code> no longer
pollutes its return type with sibling keys' values. A regression in
26.3.0 — the <code>[Res] extends [never]</code> guards added to
<code>KeysBuilderWithReturnObjects</code> /
<code>KeysBuilderWithoutReturnObjects</code> turned the builders into
deferred conditional types, so <code>KeyPrefix<Ns></code> stopped
resolving to a literal union and <code>keyPrefix</code> inference
widened to the whole namespace. Symptom: <code>useTranslation(ns, {
keyPrefix: 'a.b' })</code> then <code>t('title')</code> would resolve to
<code>'<a.b>.title' | '<other.path>.title' | ...</code>
instead of just the scoped value. Affected every
<code>react-i18next</code> user using <code>keyPrefix</code>. Restored
to the eager 26.2.0 form. The same-namespace conflict handling from <a
href="https://redirect.github.com/i18next/i18next/issues/2434 ">#2434</a>
still works via <code>_DropConflictKeys</code> at the merge layer (in
<code>options.d.ts</code>). Thanks <a
href="https://github.com/aaronrosenthal "><code>@aaronrosenthal</code></a>
(<a
href="https://redirect.github.com/i18next/i18next/pull/2436 ">#2436</a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/7bdb5d70d4142dde36d46ae66f207da304d77fed "><code>7bdb5d7</code></a>
26.3.1</li>
<li><a
href="https://github.com/i18next/i18next/commit/a655e3230d76501852e027033d2dcaba1c14f434 "><code>a655e32</code></a>
changelog: 26.3.1 entry for <a
href="https://redirect.github.com/i18next/i18next/issues/2436 ">#2436</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/57ed81222d0f4ad29633877ca4d76e1f751f7603 "><code>57ed812</code></a>
fix(types): keyPrefix no longer pollutes t() return type with sibling
keys (#...</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.3.0...v26.3.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 13:52:50 +00:00
1b99eb000f
chore(deps): Bump downshift from 9.3.4 to 9.3.6 ( #1934 )
...
Bumps [downshift](https://github.com/downshift-js/downshift ) from 9.3.4
to 9.3.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/downshift-js/downshift/releases ">downshift's
releases</a>.</em></p>
<blockquote>
<h2>v9.3.6</h2>
<h2><a
href="https://github.com/downshift-js/downshift/compare/v9.3.5...v9.3.6 ">9.3.6</a>
(2026-06-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>getHighlightedIndexOnOpen:</strong> remove added check from
migration (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1692 ">#1692</a>)
(<a
href="https://github.com/downshift-js/downshift/commit/69e02d89484e0936bbe026b7ac53caceddd8d26f ">69e02d8</a>)</li>
</ul>
<h2>v9.3.5</h2>
<h2><a
href="https://github.com/downshift-js/downshift/compare/v9.3.4...v9.3.5 ">9.3.5</a>
(2026-06-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>disabled:</strong> remove disabled from spread regression
(<a
href="https://redirect.github.com/downshift-js/downshift/issues/1689 ">#1689</a>)
(<a
href="https://github.com/downshift-js/downshift/commit/63b7e5b8ca776bb2cf778224b67c86123581a775 ">63b7e5b</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/downshift-js/downshift/commit/69e02d89484e0936bbe026b7ac53caceddd8d26f "><code>69e02d8</code></a>
fix(getHighlightedIndexOnOpen): remove added check from migration (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1692 ">#1692</a>)</li>
<li><a
href="https://github.com/downshift-js/downshift/commit/63b7e5b8ca776bb2cf778224b67c86123581a775 "><code>63b7e5b</code></a>
fix(disabled): remove disabled from spread regression (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1689 ">#1689</a>)</li>
<li><a
href="https://github.com/downshift-js/downshift/commit/5a5c07199f45b7abff537309b23335000a08abb3 "><code>5a5c071</code></a>
dev: fix leftover typescript migration issues (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1691 ">#1691</a>)</li>
<li>See full diff in <a
href="https://github.com/downshift-js/downshift/compare/v9.3.4...v9.3.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 13:52:32 +00:00
304bea60f2
chore(deps-dev): Bump stylelint-scss from 7.1.1 to 7.2.0 ( #1932 )
...
Bumps [stylelint-scss](https://github.com/stylelint-scss/stylelint-scss )
from 7.1.1 to 7.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint-scss/stylelint-scss/releases ">stylelint-scss's
releases</a>.</em></p>
<blockquote>
<h2>7.2.0</h2>
<ul>
<li>Added: <code>dollar-variable-no-missing-interpolation</code> autofix
for Sass functions in custom properties (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1287 ">#1287</a>).</li>
<li>Added: <code>declaration-property-value-no-unknown</code> support
for namespaced functions (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1289 ">#1289</a>).</li>
<li>Updated: <code>at-rule-conditional-no-parentheses</code> improve
autofix (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1286 ">#1286</a>).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.1...v7.2.0 ">https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.1...v7.2.0 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint-scss/stylelint-scss/blob/master/CHANGELOG.md ">stylelint-scss's
changelog</a>.</em></p>
<blockquote>
<h1>7.2.0</h1>
<ul>
<li>Added: <code>dollar-variable-no-missing-interpolation</code> autofix
for Sass functions in custom properties (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1287 ">#1287</a>).</li>
<li>Added: <code>declaration-property-value-no-unknown</code> support
for namespaced functions (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1289 ">#1289</a>).</li>
<li>Updated: <code>at-rule-conditional-no-parentheses</code> improve
autofix (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1286 ">#1286</a>).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.1...v7.2.0 ">https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.1...v7.2.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/e7c92d143a99cac7822bc99632f6064037b7a9a9 "><code>e7c92d1</code></a>
7.2.0</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/ecdc3c37fe99119fa37dc0dbd5fa833aad93b393 "><code>ecdc3c3</code></a>
Prepare version 7.2.0 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1301 ">#1301</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/ddffe930d88339827a6dedcfb88d8d3c41539a5f "><code>ddffe93</code></a>
build(deps-dev): bump stylelint from 17.10.0 to 17.12.0 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1300 ">#1300</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/6eb763054361ae49bd521237060903ea9b9efa3a "><code>6eb7630</code></a>
Update Jest to latest version (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1299 ">#1299</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/ac4dffb473979c1d520069242e10f9e052b8be83 "><code>ac4dffb</code></a>
build(deps-dev): bump <code>@lavamoat/allow-scripts</code> from 5.0.1
to 5.0.2 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1298 ">#1298</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/ac1e7faca9d5145b99b985d77aec1a1c18bce0aa "><code>ac1e7fa</code></a>
build(deps): bump <code>@csstools/css-calc</code> from 3.2.0 to 3.2.1
(<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1297 ">#1297</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/b483811b8af2d577a8950b23250257ad0162fdc9 "><code>b483811</code></a>
build(deps-dev): bump postcss from 8.5.14 to 8.5.15 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1295 ">#1295</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/2c8816586fd3b3df8a88e57a10ef5d8684e5c27e "><code>2c88165</code></a>
build(deps-dev): bump lint-staged from 16.4.0 to 17.0.5 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1292 ">#1292</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/f4aea2666ee4840c7cf27245a8379c2f38db0db0 "><code>f4aea26</code></a>
build(deps): bump <code>@csstools/css-syntax-patches-for-csstree</code>
(<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1294 ">#1294</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/db3c20ed4598659e019f4c52cfecaaddb84ca611 "><code>db3c20e</code></a>
build(deps-dev): bump eslint from 10.3.0 to 10.4.0 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1293 ">#1293</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.1...v7.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 13:51:59 +00:00
6a7fcafda3
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 24.8.5 to 24.9.0 ( #1931 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 24.8.5 to 24.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v24.9.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Allow <code>fill-color</code> when <code>fill-pattern</code> is set,
for SDF fill pattern colorization (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1683 ">#1683</a>)
(by <a
href="https://github.com/bradymadden97 "><code>@bradymadden97</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Resolve <code>["global-state", key]</code> to
<code>null</code> instead of <code>undefined</code> when the key is
unset but other global state keys are set (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1531 ">#1531</a>)
(by <a href="https://github.com/SAY-5 "><code>@SAY-5</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>24.9.0</h2>
<h3>✨ Features and improvements</h3>
<ul>
<li>Allow <code>fill-color</code> when <code>fill-pattern</code> is set,
for SDF fill pattern colorization (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1683 ">#1683</a>)
(by <a
href="https://github.com/bradymadden97 "><code>@bradymadden97</code></a>)</li>
</ul>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Resolve <code>["global-state", key]</code> to
<code>null</code> instead of <code>undefined</code> when the key is
unset but other global state keys are set (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1531 ">#1531</a>)
(by <a href="https://github.com/SAY-5 "><code>@SAY-5</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/fa9983745aedbd953ede7821d4c4fbdeb73af9bc "><code>fa99837</code></a>
Bump js version to 24.9.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1686 ">#1686</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/49897e302b0d257f5002235591f38b2be306066a "><code>49897e3</code></a>
fix: resolve global-state to null for unset key when other keys are set
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1684 ">#1684</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/c422204aadc32dd478122820e98fd781c24842e8 "><code>c422204</code></a>
Allow fill-color with fill-pattern for SDF fill pattern colorization (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1683 ">#1683</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/325accc56e5a7a49b804ae4e5c53afe385ff4df6 "><code>325accc</code></a>
build(deps-dev): bump <code>@typescript-eslint/eslint-plugin</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1675 ">#1675</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/1d0a09c6f9f881220c8130b8dc87f9dbc744c5ab "><code>1d0a09c</code></a>
build(deps-dev): bump oxfmt from 0.51.0 to 0.52.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1676 ">#1676</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/785dfddcb7c7b6916c61c3fcbeb3b9812e3a59f2 "><code>785dfdd</code></a>
build(deps-dev): bump rolldown-plugin-dts from 0.25.1 to 0.25.2 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1677 ">#1677</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/cea4a98c297d53eabed5a99d8aa733a3a4dc3da4 "><code>cea4a98</code></a>
build(deps-dev): bump eslint-plugin-jsdoc from 63.0.0 to 63.0.1 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1680 ">#1680</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/c2cd45bdfd9bbd19bf7c154df457e593faf3fd83 "><code>c2cd45b</code></a>
build(deps-dev): bump eslint from 10.4.0 to 10.4.1 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1679 ">#1679</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/ce6439afe000921d7b1ba93c5ad3bf18bc038de3 "><code>ce6439a</code></a>
build(deps-dev): bump <code>@typescript-eslint/parser</code> from
8.59.4 to 8.60.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1678 ">#1678</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/091577834462ae9d606027281a71dac5edef3c61 "><code>0915778</code></a>
build(deps-dev): bump rolldown from 1.0.2 to 1.0.3 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1674 ">#1674</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v24.8.5...v24.9.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-08 13:51:41 +00:00
a267b06586
chore(deps): Bump github/codeql-action from 4.36.0 to 4.36.1 ( #1929 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action )
from 4.36.0 to 4.36.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.36.1</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943 ">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937 ">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6 ">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948 ">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894 ">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893 ">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5 ">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926 ">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899 ">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791 ">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892 ">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880 ">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4 ">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881 ">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795 ">#3795</a></li>
<li>The Git version 2.36.0 requirement for improved incremental analysis
now only applies to repositories that contain submodules. <a
href="https://redirect.github.com/github/codeql-action/pull/3789 ">#3789</a></li>
<li>Python analysis on GHES no longer extracts the standard library,
relying instead on models of the standard library. This should result in
significantly faster extraction and analysis times, while the effect on
alerts should be minimal. <a
href="https://redirect.github.com/github/codeql-action/pull/3794 ">#3794</a></li>
<li>Fixed a bug in the validation of OIDC configurations for private
registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3807 ">#3807</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2 ">2.25.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3823 ">#3823</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/87557b9c84dde89fdd9b10e88954ac2f4248e463 "><code>87557b9</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3940 ">#3940</a>
from github/update-v4.36.1-2a1689ed4</li>
<li><a
href="https://github.com/github/codeql-action/commit/94310119648b77e2153bf970fd244062806781de "><code>9431011</code></a>
Update changelog for v4.36.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/2a1689ed43ccdf7eea07e03a75371ce6801d28e6 "><code>2a1689e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3939 ">#3939</a>
from github/henrymercer/skip-overlay-revert-when-exp...</li>
<li><a
href="https://github.com/github/codeql-action/commit/524532393a46071bdfc81527a811ffa69e16723a "><code>5245323</code></a>
Disable missing diff-ranges fallback when overlay enabled manually</li>
<li><a
href="https://github.com/github/codeql-action/commit/d1eb1207b45130d2edf64a0aa1c93be23510592f "><code>d1eb120</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3933 ">#3933</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/115001ba8d0198846992657731666b08686c8ded "><code>115001b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3934 ">#3934</a>
from github/dependabot/npm_and_yarn/npm-minor-86fb5c...</li>
<li><a
href="https://github.com/github/codeql-action/commit/cef2e7a910879f4626a24b251504bde16bfe4e76 "><code>cef2e7a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3925 ">#3925</a>
from github/dependabot/github_actions/dot-github/wor...</li>
<li><a
href="https://github.com/github/codeql-action/commit/5e6adf70ed0299cdf20f90e4e37ac5dd30ab7501 "><code>5e6adf7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3936 ">#3936</a>
from github/dependabot/npm_and_yarn/tmp-0.2.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/ad170e6c4eaf671895978420267d6cb49b66b706 "><code>ad170e6</code></a>
Merge branch 'main' into
dependabot/github_actions/dot-github/workflows/actio...</li>
<li><a
href="https://github.com/github/codeql-action/commit/6a37b3a57ac457a679b84930a67c233c15f5ac41 "><code>6a37b3a</code></a>
Rebuild</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...87557b9c84dde89fdd9b10e88954ac2f4248e463 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 13:52:01 +00:00
129593dbc8
chore(deps-dev): Bump typescript-eslint from 8.60.0 to 8.60.1 ( #1928 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.60.0 to 8.60.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.60.1</h2>
<h2>8.60.1 (2026-06-01)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> respect ECMAScript line terminators
in ts-comment rules (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12352 ">#12352</a>)</li>
<li><strong>eslint-plugin:</strong> [no-shadow] correct rule to match
ESLint v10 handling (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12182 ">#12182</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>lumir</li>
<li>Nevette Bailey <a
href="https://github.com/nevette-bailey "><code>@nevette-bailey</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.60.1 (2026-06-01)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/4f84a697aedc436559c3ae09b5b357d98b448d68 "><code>4f84a69</code></a>
chore(release): publish 8.60.1</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/1849b530c254fb4f89d7270160f3a998e4acd964 "><code>1849b53</code></a>
chore: typecheck using tsgo (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12139 ">#12139</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 13:50:38 +00:00
5df51d4dc1
chore(deps-dev): Bump the vitest group with 2 updates ( #1924 )
...
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 )
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Updates `@vitest/coverage-v8` from 4.1.7 to 4.1.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">@vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.8</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>:
<ul>
<li>Disable client <code>cdp</code> API when <code>allowWrite/allowExec:
false</code> [backport to v4] - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> and
<strong>Codex</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10450 ">vitest-dev/vitest#10450</a>
<a href="https://github.com/vitest-dev/vitest/commit/e4067b3b1 "><!-- raw
HTML omitted -->(e4067)<!-- raw HTML omitted --></a></li>
<li>Remove orphaned Playwright route when same module is mocked via
multiple ids [backport to v4] - by <a
href="https://github.com/toxik "><code>@toxik</code></a> and <a
href="https://github.com/Zelys-DFKH "><code>@Zelys-DFKH</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10474 ">vitest-dev/vitest#10474</a>
<a href="https://github.com/vitest-dev/vitest/commit/675b4343f "><!-- raw
HTML omitted -->(675b4)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.7...v4.1.8 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/e61f2dd2a0ba0a266c1c5e0334aad3799fee527f "><code>e61f2dd</code></a>
chore: release v4.1.8</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/e4067b3b150005fd42cf75f994300119245806b9 "><code>e4067b3</code></a>
fix(browser): disable client <code>cdp</code> API when
<code>allowWrite/allowExec: false</code> [ba...</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vitest` from 4.1.7 to 4.1.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.8</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>:
<ul>
<li>Disable client <code>cdp</code> API when <code>allowWrite/allowExec:
false</code> [backport to v4] - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> and
<strong>Codex</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10450 ">vitest-dev/vitest#10450</a>
<a href="https://github.com/vitest-dev/vitest/commit/e4067b3b1 "><!-- raw
HTML omitted -->(e4067)<!-- raw HTML omitted --></a></li>
<li>Remove orphaned Playwright route when same module is mocked via
multiple ids [backport to v4] - by <a
href="https://github.com/toxik "><code>@toxik</code></a> and <a
href="https://github.com/Zelys-DFKH "><code>@Zelys-DFKH</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10474 ">vitest-dev/vitest#10474</a>
<a href="https://github.com/vitest-dev/vitest/commit/675b4343f "><!-- raw
HTML omitted -->(675b4)<!-- raw HTML omitted --></a></li>
</ul>
</li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.7...v4.1.8 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/e61f2dd2a0ba0a266c1c5e0334aad3799fee527f "><code>e61f2dd</code></a>
chore: release v4.1.8</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/e4067b3b150005fd42cf75f994300119245806b9 "><code>e4067b3</code></a>
fix(browser): disable client <code>cdp</code> API when
<code>allowWrite/allowExec: false</code> [ba...</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-04 13:51:00 +00:00
7403e3c552
chore(deps): Bump react-router and react-router-dom ( #1923 )
...
Bumps
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router )
and
[react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom ).
These dependencies needed to be updated together.
Updates `react-router` from 6.30.3 to 6.30.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/releases ">react-router's
releases</a>.</em></p>
<blockquote>
<h2>v6.30.4</h2>
<p>See the changelog for release notes: <a
href="https://github.com/remix-run/react-router/blob/v6/CHANGELOG.md#v6304 ">https://github.com/remix-run/react-router/blob/v6/CHANGELOG.md#v6304 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/react-router@6.30.4/packages/react-router/CHANGELOG.md ">react-router's
changelog</a>.</em></p>
<blockquote>
<h2>v6.30.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@remix-run/router@1.23.3 "><code>@remix-run/router@1.23 .3</code></a></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remix-run/react-router/commit/651211cd615a4b3a1d3f6ca8465eedbcac4f146c "><code>651211c</code></a>
Release v6.30.4 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15120 ">#15120</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/f82a6f9a75a1284e33d91241ebe9242001031d9d "><code>f82a6f9</code></a>
Bring new release process into v6 branch (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router/issues/15115 ">#15115</a>)</li>
<li>See full diff in <a
href="https://github.com/remix-run/react-router/commits/react-router@6.30.4/packages/react-router ">compare
view</a></li>
</ul>
</details>
<br />
Updates `react-router-dom` from 6.30.3 to 6.30.4
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/remix-run/react-router/blob/react-router-dom@6.30.4/packages/react-router-dom/CHANGELOG.md ">react-router-dom's
changelog</a>.</em></p>
<blockquote>
<h2>v6.30.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies:
<ul>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/react-router@6.30.4 "><code>react-router@6.30 .4</code></a></li>
<li><a
href="https://github.com/remix-run/react-router/releases/tag/@remix-run/router@1.23.3 "><code>@remix-run/router@1.23 .3</code></a></li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remix-run/react-router/commit/651211cd615a4b3a1d3f6ca8465eedbcac4f146c "><code>651211c</code></a>
Release v6.30.4 (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/15120 ">#15120</a>)</li>
<li><a
href="https://github.com/remix-run/react-router/commit/f82a6f9a75a1284e33d91241ebe9242001031d9d "><code>f82a6f9</code></a>
Bring new release process into v6 branch (<a
href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/15115 ">#15115</a>)</li>
<li>See full diff in <a
href="https://github.com/remix-run/react-router/commits/react-router-dom@6.30.4/packages/react-router-dom ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-04 02:21:57 +00:00
1ad0c9019d
chore(deps): Bump cypress-io/github-action from 7.3.0 to 7.4.0 ( #1922 )
...
Bumps
[cypress-io/github-action](https://github.com/cypress-io/github-action )
from 7.3.0 to 7.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/github-action/releases ">cypress-io/github-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.4.0</h2>
<h1><a
href="https://github.com/cypress-io/github-action/compare/v7.3.0...v7.4.0 ">7.4.0</a>
(2026-06-01)</h1>
<h3>Features</h3>
<ul>
<li><strong>deps:</strong> remove Node.js 25 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1781 ">#1781</a>)
(<a
href="https://github.com/cypress-io/github-action/commit/948d67d3074f1bbb6379c8bdbb04e95d2f8e593f ">948d67d</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/github-action/blob/master/CHANGELOG.md ">cypress-io/github-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>This document gives an overview of changes to the Cypress GitHub
JavaScript Action <a
href="https://github.com/cypress-io/github-action ">cypress-io/github-action</a>.</p>
<p>See <a
href="https://github.com/cypress-io/github-action/releases ">Releases</a>
for full details of changes.</p>
<table>
<thead>
<tr>
<th>Version</th>
<th>Changes</th>
</tr>
</thead>
<tbody>
<tr>
<td>v7.4.0</td>
<td>Examples remove Node.js 25. End of support for Node.js 25.</td>
</tr>
<tr>
<td>v7.3.0</td>
<td>Add parameter <code>expose</code> for <a
href="https://docs.cypress.io/api/cypress-api/expose "><code>Cypress.expose()</code></a>
support</td>
</tr>
<tr>
<td>v7.2.0</td>
<td>Examples remove Node.js 20. End of support for Node.js 20.</td>
</tr>
<tr>
<td>v7.1.0</td>
<td>Add parameter <code>package-manager-cache</code></td>
</tr>
<tr>
<td>v7.0.0</td>
<td>Action runs under Node.js 24 instead of Node.js 20</td>
</tr>
<tr>
<td>v6.10.0</td>
<td>Examples remove Node.js 23. End of support for Node.js 23.</td>
</tr>
<tr>
<td>v6.9.0</td>
<td>Add parameter validation for <code>command</code></td>
</tr>
<tr>
<td>v6.8.0</td>
<td>Examples remove Node.js 18. End of support for Node.js 18.</td>
</tr>
<tr>
<td>v6.7.10</td>
<td>Examples updated to Cypress 14</td>
</tr>
<tr>
<td>v6.7.9</td>
<td>Migrate to <code>@actions/cache@4.0.0</code> for continued access to
GitHub Actions caching services</td>
</tr>
<tr>
<td>v6.7.0</td>
<td>Examples remove Node.js 21. End of support for Node.js 21.</td>
</tr>
<tr>
<td>v6.6.0</td>
<td>Add parameter <code>summary-title</code></td>
</tr>
<tr>
<td>v6.5.0</td>
<td>Examples remove Node.js 16. End of support for Node.js 16.</td>
</tr>
<tr>
<td>v6.4.0</td>
<td>Action adds PR number and URL if available when recording</td>
</tr>
<tr>
<td>v6.3.0</td>
<td>v6 is recommended action version</td>
</tr>
<tr>
<td>v6.2.0</td>
<td>Examples updated to Cypress 13</td>
</tr>
<tr>
<td>v6.1.0</td>
<td>Examples for Cypress 9 archived in action's <a
href="https://github.com/cypress-io/github-action/tree/v5 ">v5</a>
branch</td>
</tr>
<tr>
<td>v6.0.0</td>
<td>Action runs under Node.js 20 instead of Node.js 16</td>
</tr>
<tr>
<td>v5.8.1</td>
<td>Examples remove Node.js 19. End of support for Node.js 19</td>
</tr>
<tr>
<td>v5.8.0</td>
<td>Add GitHub step output <code>resultsUrl</code>. Deprecate
<code>dashboardUrl</code>.</td>
</tr>
<tr>
<td>v5.7.0</td>
<td>Add basic Yarn Modern Plug'n'Play support</td>
</tr>
<tr>
<td>v5.6.2</td>
<td>Examples add Node.js 20. End of support and removal of Node.js 14
examples.</td>
</tr>
<tr>
<td>v5.6.0</td>
<td>Add check for lockfile presence</td>
</tr>
<tr>
<td>v5.5.0</td>
<td>Examples add Yarn Modern</td>
</tr>
<tr>
<td>v5.4.0</td>
<td>Examples add Yarn Classic</td>
</tr>
<tr>
<td>v5.3.0</td>
<td>Add parameter <code>publish-summary</code> (default
<code>true</code>)</td>
</tr>
<tr>
<td>v5.2.0</td>
<td>Examples add Node.js 19</td>
</tr>
<tr>
<td>v5.1.0</td>
<td>Add parameter <code>auto-cancel-after-failures</code></td>
</tr>
<tr>
<td>v5.0.0</td>
<td>Examples add Node.js 18 and remove Node.js 12</td>
</tr>
<tr>
<td>v4.2.2</td>
<td>Dependency on GitHub <code>set-output</code> workflow command
removed</td>
</tr>
<tr>
<td>v4.2.0</td>
<td>Support for <code>pnpm</code> added</td>
</tr>
<tr>
<td>v4.0.0</td>
<td>Support for Cypress 10 and later versions added</td>
</tr>
<tr>
<td>v3</td>
<td>Action runs under Node.js 16 instead of Node.js 12</td>
</tr>
<tr>
<td>v2</td>
<td>Cypress runs using the <a
href="https://on.cypress.io/module-api ">Module API</a></td>
</tr>
<tr>
<td>v1</td>
<td><em>This version is no longer runnable in GitHub due to security
changes.</em></td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/github-action/commit/948d67d3074f1bbb6379c8bdbb04e95d2f8e593f "><code>948d67d</code></a>
feat(deps): remove Node.js 25 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1781 ">#1781</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/2b7e08ae8c9b661a771e3dc864829fb8693cb1af "><code>2b7e08a</code></a>
chore(deps): update dependency node to v24.16.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1777 ">#1777</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/69a0c7c0a5b2c0a81167f0c738897ef3f72d9693 "><code>69a0c7c</code></a>
test: complete cypress@15.16 .0 update (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1778 ">#1778</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/e487d96c701316778ffaea5fccafca4d1ab58f41 "><code>e487d96</code></a>
chore(deps): update node.js to v24.16.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1770 ">#1770</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/5cfba340db24c57a561fe6f3ba8883deffc72d82 "><code>5cfba34</code></a>
chore(deps): update dependency webpack to ^5.107.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1771 ">#1771</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/65ccb9f02c0b9dc4579b4a11398bfd779f4fc377 "><code>65ccb9f</code></a>
chore: add minimum release age and vulnerability alerts to renovate
config (#...</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/5130fef9c331a8525857c7c8eb41a70f366f4a7b "><code>5130fef</code></a>
chore(deps): update dependency cypress to v15.16.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1773 ">#1773</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/e910707b25409dff74381de369cb753872ec2016 "><code>e910707</code></a>
test: exclude Cypress from Yarn Modern npmMinimalAgeGate (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1774 ">#1774</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/984bd80d6ee014c17e5503f1e6924ce8be94e57e "><code>984bd80</code></a>
chore(deps): update yarn to v4.15.0 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1768 ">#1768</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/1c3bb666393340ff658f6dca68f689592d921dfa "><code>1c3bb66</code></a>
chore(deps): update dependency vite to ^8.0.14 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1769 ">#1769</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/github-action/compare/dace029018fcdf86e0df89a31bc3cfa5b32570d8...948d67d3074f1bbb6379c8bdbb04e95d2f8e593f ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-04 02:02:28 +00:00
f9e18fd774
chore(deps): Bump downshift from 9.3.3 to 9.3.4 ( #1921 )
...
Bumps [downshift](https://github.com/downshift-js/downshift ) from 9.3.3
to 9.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/downshift-js/downshift/releases ">downshift's
releases</a>.</em></p>
<blockquote>
<h2>v9.3.4</h2>
<h2><a
href="https://github.com/downshift-js/downshift/compare/v9.3.3...v9.3.4 ">9.3.4</a>
(2026-05-31)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>bring back action props and update the hooks to use TypeScript fully
(<a
href="https://redirect.github.com/downshift-js/downshift/issues/1683 ">#1683</a>)
(<a
href="https://github.com/downshift-js/downshift/commit/b415eea3a9d1744fd706ccb58b8b9a87bd8a98f8 ">b415eea</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/downshift-js/downshift/commit/b415eea3a9d1744fd706ccb58b8b9a87bd8a98f8 "><code>b415eea</code></a>
fix: bring back action props and update the hooks to use TypeScript
fully (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1 ">#1</a>...</li>
<li><a
href="https://github.com/downshift-js/downshift/commit/71cf356f2a417c94894116a8f81b429ec220d346 "><code>71cf356</code></a>
dev: replace cypress with playwright (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1687 ">#1687</a>)</li>
<li><a
href="https://github.com/downshift-js/downshift/commit/cfefe77d8268502f2a40a1c8625772b6f2bb6ed8 "><code>cfefe77</code></a>
docs(useMultipleSelection): remove itemToString prop references (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1684 ">#1684</a>)</li>
<li>See full diff in <a
href="https://github.com/downshift-js/downshift/compare/v9.3.3...v9.3.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-04 02:01:08 +00:00
474cb0b88c
chore(deps-dev): Bump cypress from 15.15.0 to 15.16.0 ( #1918 )
...
Bumps [cypress](https://github.com/cypress-io/cypress ) from 15.15.0 to
15.16.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/cypress/releases ">cypress's
releases</a>.</em></p>
<blockquote>
<h2>v15.16.0</h2>
<p>Changelog: <a
href="https://docs.cypress.io/app/references/changelog#15-16-0 ">https://docs.cypress.io/app/references/changelog#15-16-0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/cypress/commit/22aaf2371462ec13f138fd96c11e8f9f885ed575 "><code>22aaf23</code></a>
chore: bump cypress-example-kitchensink to 6.0.2 for release (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33921 ">#33921</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/448155c6248aadc696c7add55f96c4cc1a01deca "><code>448155c</code></a>
fix(cli): use verbose Listr renderer in CI for install + verify output
(<a
href="https://redirect.github.com/cypress-io/cypress/issues/33890 ">#33890</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/01cd8873d3e2b50279d581407d0ea98168af85fb "><code>01cd887</code></a>
chore: surface wrong-passphrase client cert PEM errors consistently in
OpenSS...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/4534d04c861ef14fbcc06bf7331cc4d8656b977c "><code>4534d04</code></a>
fix: pin <code>@sinonjs/fake-timers</code> type resolution in bundled
sinon types (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33886 ">#33886</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/d7cd85a43d1a64d2388bf4ff0876989e47093213 "><code>d7cd85a</code></a>
refactor(server): convert unit test specs to TypeScript (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33899 ">#33899</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/2d5366d794e642cd8f6d057cfd443b08d72e9476 "><code>2d5366d</code></a>
test: preserve allowCypressEnv in subscription test config rewrites (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33910 ">#33910</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/fcee42556c8145c1a347864feb00e2617ee18db7 "><code>fcee425</code></a>
chore: updating v8 snapshot cache (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33909 ">#33909</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/986c3b2b886bbca3a7b29c1960439c614d70a300 "><code>986c3b2</code></a>
chore: updating v8 snapshot cache (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33903 ">#33903</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/de76502f4d7600126a5c45ed7601ed77468defd2 "><code>de76502</code></a>
chore: Update v8 snapshot cache - linux (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33875 ">#33875</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/247a0333a8a5d97e80079bce65def84a70560c3f "><code>247a033</code></a>
chore: updating v8 snapshot cache (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33901 ">#33901</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/cypress/compare/v15.15.0...v15.16.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-02 17:06:36 +00:00
f15776e982
chore(deps-dev): Bump eslint from 10.4.0 to 10.4.1 ( #1920 )
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.4.0 to 10.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases ">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.1</h2>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/e557467db7496220eebcbe2ac5ea6d38c12bb1ec "><code>e557467</code></a>
fix: update <code>@eslint/plugin-kit</code> version to 0.7.2 (<a
href="https://redirect.github.com/eslint/eslint/issues/20930 ">#20930</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d4ce898796ca22c3b96aa70d3014cb85f4bac1cd "><code>d4ce898</code></a>
fix: propagate failures from delegated commands (<a
href="https://redirect.github.com/eslint/eslint/issues/20917 ">#20917</a>)
(Minh Vu)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f4f3507460bc016b5be979c05d2969793f570cbf "><code>f4f3507</code></a>
fix: prefer-arrow-callback invalid autofix with newline after
<code>async</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20916 ">#20916</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c5bc78b37e08b9054a11f0cc2d81808bb24acb85 "><code>c5bc78b</code></a>
fix: false positive for reference in <code>finally</code> block (<a
href="https://redirect.github.com/eslint/eslint/issues/20655 ">#20655</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/27538c01f5df4e9306f6f4ba867b2dd6307fae59 "><code>27538c0</code></a>
fix: add missing CodePath and CodePathSegment types (<a
href="https://redirect.github.com/eslint/eslint/issues/20853 ">#20853</a>)
(Pixel998)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/61b0add61ffc52665562be7bb96f526690a78b30 "><code>61b0add</code></a>
docs: remove deprecated rule from related rules of
<code>max-params</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20921 ">#20921</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/305d5b91aeac24d36fde42f75625a8f183d4ce43 "><code>305d5b9</code></a>
docs: remove deprecated rules from related rules section (<a
href="https://redirect.github.com/eslint/eslint/issues/20911 ">#20911</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/49b0202d01918b8061720d586dffd7c68047090c "><code>49b0202</code></a>
docs: fix <code>display: none</code> of ad (<a
href="https://redirect.github.com/eslint/eslint/issues/20901 ">#20901</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9067f9492ec998afc5b4f057a477ecf6ebd45e44 "><code>9067f94</code></a>
docs: switch build to Node.js 24 (<a
href="https://redirect.github.com/eslint/eslint/issues/20893 ">#20893</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c91b0417e3420c76807ce1fa2aea76e2de87ab86 "><code>c91b041</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e349265cb37f3ebc837e178e48a725bb782bd870 "><code>e349265</code></a>
docs: clarify semver strings in rule deprecation objects (<a
href="https://redirect.github.com/eslint/eslint/issues/20885 ">#20885</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b0e466b6ab47bfc7de43d8de0c315d8ee83aa584 "><code>b0e466b</code></a>
test: add <code>data</code> property to invalid tests cases for rules
(<a
href="https://redirect.github.com/eslint/eslint/issues/20924 ">#20924</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f78838bc4c86d487e1bcc7cede260c4467721c46 "><code>f78838b</code></a>
test: add CodePath type coverage (<a
href="https://redirect.github.com/eslint/eslint/issues/20904 ">#20904</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/1daa4bd734b79a62e317d0394394a6b38cff49f9 "><code>1daa4bd</code></a>
chore: update <code>eslint-plugin-eslint-comments</code> test data to
latest commit (<a
href="https://redirect.github.com/eslint/eslint/issues/20922 ">#20922</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/002942ce988ea28b78e0a2f3b074081e638b552c "><code>002942c</code></a>
ci: declare contents:read on update-readme workflow (<a
href="https://redirect.github.com/eslint/eslint/issues/20919 ">#20919</a>)
(Arpit Jain)</li>
<li><a
href="https://github.com/eslint/eslint/commit/64bca24e7bed35bc3c864fc625cb2d89eca87d5b "><code>64bca24</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20912 ">#20912</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6d7c832950d5e92499d88e504080661f888f8f56 "><code>6d7c832</code></a>
chore: ignore fflate updates in renovate (<a
href="https://redirect.github.com/eslint/eslint/issues/20908 ">#20908</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b2c86382164d87c6203b78d52068cd6a2a6ffe30 "><code>b2c8638</code></a>
ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (<a
href="https://redirect.github.com/eslint/eslint/issues/20889 ">#20889</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/a9b8d7f74c50211701cfc49710fa541fd91b2aa5 "><code>a9b8d7f</code></a>
chore: increase maxBuffer for ecosystem tests (<a
href="https://redirect.github.com/eslint/eslint/issues/20881 ">#20881</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b702ead5e1ed7cb9f28238a454797662efb37396 "><code>b702ead</code></a>
chore: update ecosystem update PR settings (<a
href="https://redirect.github.com/eslint/eslint/issues/20884 ">#20884</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/507f60e9a78c9a902bc8759f066ae17a1ea6cd81 "><code>507f60e</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20882 ">#20882</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/92f5c5bb6bf3a5d167c8ee53a430833410295c6d "><code>92f5c5b</code></a>
test: add unit test for message-count (<a
href="https://redirect.github.com/eslint/eslint/issues/20878 ">#20878</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/df321080af5758b1fa25e4b9a40e26135642dd6e "><code>df32108</code></a>
chore: add <code>@eslint/markdown</code> and typescript-eslint
ecosystem tests (<a
href="https://redirect.github.com/eslint/eslint/issues/20837 ">#20837</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/327f91d36aa49f2a50ded931d841a16374fd875f "><code>327f91d</code></a>
chore: use includeIgnoreFile internally (<a
href="https://redirect.github.com/eslint/eslint/issues/20876 ">#20876</a>)
(Kirk Waiblinger)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f0dc4bd893fb3a9f44e4ddc3ad7063ffb0beacd3 "><code>f0dc4bd</code></a>
chore: pin fflate@0.8.2 (<a
href="https://redirect.github.com/eslint/eslint/issues/20877 ">#20877</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/0f4bd257a67a082b756de746d9e0c4842ab764ca "><code>0f4bd25</code></a>
ci: run Discord alert for ecosystem test failures (<a
href="https://redirect.github.com/eslint/eslint/issues/20873 ">#20873</a>)
(Copilot)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/4a3d15a99c452c4db2fd56b577fa7597e98ab0c2 "><code>4a3d15a</code></a>
10.4.1</li>
<li><a
href="https://github.com/eslint/eslint/commit/43e7e2bdc5c6cacc535446b7d23c10f780384ba8 "><code>43e7e2b</code></a>
Build: changelog update for 10.4.1</li>
<li><a
href="https://github.com/eslint/eslint/commit/e557467db7496220eebcbe2ac5ea6d38c12bb1ec "><code>e557467</code></a>
fix: update <code>@eslint/plugin-kit</code> version to 0.7.2 (<a
href="https://redirect.github.com/eslint/eslint/issues/20930 ">#20930</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b0e466b6ab47bfc7de43d8de0c315d8ee83aa584 "><code>b0e466b</code></a>
test: add <code>data</code> property to invalid tests cases for rules
(<a
href="https://redirect.github.com/eslint/eslint/issues/20924 ">#20924</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d4ce898796ca22c3b96aa70d3014cb85f4bac1cd "><code>d4ce898</code></a>
fix: propagate failures from delegated commands (<a
href="https://redirect.github.com/eslint/eslint/issues/20917 ">#20917</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f4f3507460bc016b5be979c05d2969793f570cbf "><code>f4f3507</code></a>
fix: prefer-arrow-callback invalid autofix with newline after
<code>async</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20916 ">#20916</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f78838bc4c86d487e1bcc7cede260c4467721c46 "><code>f78838b</code></a>
test: add CodePath type coverage (<a
href="https://redirect.github.com/eslint/eslint/issues/20904 ">#20904</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/61b0add61ffc52665562be7bb96f526690a78b30 "><code>61b0add</code></a>
docs: remove deprecated rule from related rules of
<code>max-params</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20921 ">#20921</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/1daa4bd734b79a62e317d0394394a6b38cff49f9 "><code>1daa4bd</code></a>
chore: update <code>eslint-plugin-eslint-comments</code> test data to
latest commit (<a
href="https://redirect.github.com/eslint/eslint/issues/20 ">#20</a>...</li>
<li><a
href="https://github.com/eslint/eslint/commit/002942ce988ea28b78e0a2f3b074081e638b552c "><code>002942c</code></a>
ci: declare contents:read on update-readme workflow (<a
href="https://redirect.github.com/eslint/eslint/issues/20919 ">#20919</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.4.0...v10.4.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-02 17:06:33 +00:00
60a30a9d41
chore(deps-dev): Bump vite-plugin-istanbul from 9.0.0 to 9.0.1 ( #1917 )
...
Bumps
[vite-plugin-istanbul](https://github.com/iFaxity/vite-plugin-istanbul )
from 9.0.0 to 9.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/iFaxity/vite-plugin-istanbul/releases ">vite-plugin-istanbul's
releases</a>.</em></p>
<blockquote>
<h2>v9.0.1</h2>
<h2><a
href="https://github.com/iFaxity/vite-plugin-istanbul/compare/v9.0.0...v9.0.1 ">9.0.1</a>
(2026-05-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>inline RawSourceMap type to remove external <a
href="https://github.com/types "><code>@types</code></a> dependency from
public types (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/412 ">#412</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/3096e47a11a8a812f24e1ce5b5092f5027147c51 ">3096e47</a>)</li>
</ul>
<h2>v9.0.1-rc.1</h2>
<h2><a
href="https://github.com/iFaxity/vite-plugin-istanbul/compare/v9.0.0...v9.0.1-rc.1 ">9.0.1-rc.1</a>
(2026-05-27)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>inline RawSourceMap type to remove external <a
href="https://github.com/types "><code>@types</code></a> dependency from
public types (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/412 ">#412</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/3096e47a11a8a812f24e1ce5b5092f5027147c51 ">3096e47</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/3096e47a11a8a812f24e1ce5b5092f5027147c51 "><code>3096e47</code></a>
fix: inline RawSourceMap type to remove external <a
href="https://github.com/types "><code>@types</code></a> dependency from
publi...</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/8f5581342df093773a7eb98c91a602d7b8f89dea "><code>8f55813</code></a>
build(deps-dev): bump <code>@types/node</code> from 25.9.0 to 25.9.1
(<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/411 ">#411</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/82d41af6e38e61f61d642b7f235691add5279e63 "><code>82d41af</code></a>
build(deps): bump <code>@babel/generator</code> from 7.29.1 to 7.29.7
(<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/410 ">#410</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/c37ea1888aecc4a88b738b3320cca4910c4d8f88 "><code>c37ea18</code></a>
build(deps-dev): bump <code>@types/node</code> from 25.8.0 to 25.9.0
(<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/408 ">#408</a>)</li>
<li>See full diff in <a
href="https://github.com/iFaxity/vite-plugin-istanbul/compare/v9.0.0...v9.0.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-02 17:05:51 +00:00
5e04840e24
chore(deps-dev): Bump stylelint from 17.11.1 to 17.12.0 ( #1909 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.11.1
to 17.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.12.0</h2>
<p>It fixes 3 bugs, including a false negative one.</p>
<ul>
<li>Fixed: <code>block-no-empty</code> reported range when using
comments (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9294 ">#9294</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Fixed: <code>declaration-property-value-no-unknown</code> false
negatives for custom properties defined in reference files (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9292 ">#9292</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Fixed: <code>value-keyword-layout-mappings</code> false positives
for <code>caption-side</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9293 ">#9293</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.12.0 - 2026-05-20</h2>
<p>It fixes 3 bugs, including a false negative one.</p>
<ul>
<li>Fixed: <code>block-no-empty</code> reported range when using
comments (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9294 ">#9294</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Fixed: <code>declaration-property-value-no-unknown</code> false
negatives for custom properties defined in reference files (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9292 ">#9292</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Fixed: <code>value-keyword-layout-mappings</code> false positives
for <code>caption-side</code> (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9293 ">#9293</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint/stylelint/commit/5830fba903d337f6173fc745300cd457dc6d5f2d "><code>5830fba</code></a>
Release 17.12.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9304 ">#9304</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/49ed06fd9b9fa07c8f7ecb5b230f9a6c30b29655 "><code>49ed06f</code></a>
Bump file-entry-cache from 11.1.2 to 11.1.3 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9302 ">#9302</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/d120212920478149a7e9ddaea98a70a041c8a707 "><code>d120212</code></a>
Bump lint-staged from 16.4.0 to 17.0.4 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9301 ">#9301</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/d33278491dc3d68d1ebca37c9ad239ea879afbc8 "><code>d332784</code></a>
Bump the jest group with 2 updates (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9300 ">#9300</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/d2d4a53279f9c4b7a70901b36ccf1a20834d5da9 "><code>d2d4a53</code></a>
Fix <code>declaration-property-value-no-unknown</code> false negatives
for custom proper...</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/05088f1385d18ca24f1ad8590d4ec85382f81ce2 "><code>05088f1</code></a>
Fix <code>block-no-empty</code> reported range when using comments (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9294 ">#9294</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/757bbcb6cf78209ccea9d4d988a019f7c3e5314e "><code>757bbcb</code></a>
Fix Yarn PnP system test with Node.js v24.15.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9295 ">#9295</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/b06204e56055fab57e02a3d8a3c09d57a4847234 "><code>b06204e</code></a>
Fix <code>value-keyword-layout-mappings</code> false positives for
<code>caption-side</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9293 ">#9293</a>)</li>
<li>See full diff in <a
href="https://github.com/stylelint/stylelint/compare/17.11.1...17.12.0 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-29 17:04:04 +00:00
de0b0ea507
chore(deps-dev): Bump typescript-eslint from 8.59.4 to 8.60.0 ( #1916 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.59.4 to 8.60.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.60.0</h2>
<h2>8.60.0 (2026-05-25)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>rule-tester:</strong> added updates of RuleTester from
upstream (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12291 ">#12291</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li>playground TS version selector is not working (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12326 ">#12326</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12325 ">#12325</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit "><code>@StyleShit</code></a></li>
<li>Vinccool96</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.60.0 (2026-05-25)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.0 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/f891c29de5f3e23f3d8c59cc599d3196e54e9b58 "><code>f891c29</code></a>
chore(release): publish 8.60.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-29 16:55:04 +00:00
48b862446b
chore(deps): Bump i18next from 26.2.0 to 26.3.0 ( #1915 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.2.0 to
26.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.3.0</h2>
<ul>
<li>feat(types): introduce <code>ResourceNamespaceMap</code> — a
separate mergeable augmentation surface for namespace resource types,
designed for monorepos where multiple packages each want to contribute
their own namespaces. Previously, every package had to coordinate on a
single <code>CustomTypeOptions.resources</code> declaration (or fall
back to typing dependency namespaces as <code>any</code>) because
<code>resources</code> is a single property of an interface and
TypeScript reports TS2717 when two declarations of the same property
disagree. The new interface merges naturally across <code>declare module
'i18next'</code> blocks, so each package can ship its own
<code>i18next.d.ts</code> independently. Per-property merge handles
same-namespace contributions from multiple packages, and
same-key/different-literal conflicts are silently dropped to avoid
poisoning <code>t()</code> overload resolution. Fully
backwards-compatible — existing <code>CustomTypeOptions.resources</code>
augmentations continue to work, and both surfaces can coexist. Scalar
options (<code>defaultNS</code>, <code>returnNull</code>,
<code>enableSelector</code>, etc.) still belong on
<code>CustomTypeOptions</code>. Thanks <a
href="https://github.com/sh3xu "><code>@sh3xu</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2434 ">#2434</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2409 ">#2409</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.3.0</h2>
<ul>
<li>feat(types): introduce <code>ResourceNamespaceMap</code> — a
separate mergeable augmentation surface for namespace resource types,
designed for monorepos where multiple packages each want to contribute
their own namespaces. Previously, every package had to coordinate on a
single <code>CustomTypeOptions.resources</code> declaration (or fall
back to typing dependency namespaces as <code>any</code>) because
<code>resources</code> is a single property of an interface and
TypeScript reports TS2717 when two declarations of the same property
disagree. The new interface merges naturally across <code>declare module
'i18next'</code> blocks, so each package can ship its own
<code>i18next.d.ts</code> independently. Per-property merge handles
same-namespace contributions from multiple packages, and
same-key/different-literal conflicts are silently dropped to avoid
poisoning <code>t()</code> overload resolution. Fully
backwards-compatible — existing <code>CustomTypeOptions.resources</code>
augmentations continue to work, and both surfaces can coexist. Scalar
options (<code>defaultNS</code>, <code>returnNull</code>,
<code>enableSelector</code>, etc.) still belong on
<code>CustomTypeOptions</code>. Thanks <a
href="https://github.com/sh3xu "><code>@sh3xu</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2434 ">#2434</a>).
Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2409 ">#2409</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/bdf651c07d4d3a37d616a2c0ec5e954a527fc513 "><code>bdf651c</code></a>
26.3.0</li>
<li><a
href="https://github.com/i18next/i18next/commit/988a3620671dc2ce26591e37b80f2e779935cbf5 "><code>988a362</code></a>
changelog: 26.3.0 entry for <a
href="https://redirect.github.com/i18next/i18next/issues/2434 ">#2434</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/159506c93d90627cff8707660bf82afe36e4f701 "><code>159506c</code></a>
feat(types): introduce ResourceNamespaceMap for monorepo namespace
augmentati...</li>
<li><a
href="https://github.com/i18next/i18next/commit/df68b1f32470bde7fe891086241bfc2df229be7b "><code>df68b1f</code></a>
ci: restore JSR publishing via GitHub Actions OIDC</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.2.0...v26.3.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-29 16:54:22 +00:00
b0c204f060
chore(deps): Bump tmp from 0.2.5 to 0.2.7 ( #1914 )
...
Bumps [tmp](https://github.com/raszi/node-tmp ) from 0.2.5 to 0.2.7.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/raszi/node-tmp/commit/8ea1f37d75c67569e0f151448330d52f7babf211 "><code>8ea1f37</code></a>
Bump up the version</li>
<li><a
href="https://github.com/raszi/node-tmp/commit/8f24f788a356b5d45c9bec894632bd4931338153 "><code>8f24f78</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/raszi/node-tmp/commit/ce787f37aaacccad921ae90990c9da33481fe59c "><code>ce787f3</code></a>
Reject non-string prefix, postfix, template</li>
<li><a
href="https://github.com/raszi/node-tmp/commit/41f71598d03f104a67e0448a7cb9bd4efcdd5980 "><code>41f7159</code></a>
Bump up the version</li>
<li><a
href="https://github.com/raszi/node-tmp/commit/efa4a06f24374797ae32ab2b6ae39b7a611ae429 "><code>efa4a06</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/raszi/node-tmp/commit/7ef2728ce0211b8110b2033dfe62eaf030341acf "><code>7ef2728</code></a>
Check for relative values</li>
<li>See full diff in <a
href="https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 03:08:39 +00:00
d5784dd459
chore(deps-dev): Bump the vitest group with 2 updates ( #1907 )
...
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 )
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Updates `@vitest/coverage-v8` from 4.1.6 to 4.1.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">@vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.7</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><strong>runner</strong>: Limit concurrency per task branch in
addition to per leaf callbacks (backport) - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10384 ">vitest-dev/vitest#10384</a>
<a href="https://github.com/vitest-dev/vitest/commit/4f0f2a1ee "><!-- raw
HTML omitted -->(4f0f2)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.6...v4.1.7 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a09d47236e19fd3151351080c667036ca6164dc4 "><code>a09d472</code></a>
chore: release v4.1.7</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/coverage-v8 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vitest` from 4.1.6 to 4.1.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.7</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><strong>runner</strong>: Limit concurrency per task branch in
addition to per leaf callbacks (backport) - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10384 ">vitest-dev/vitest#10384</a>
<a href="https://github.com/vitest-dev/vitest/commit/4f0f2a1ee "><!-- raw
HTML omitted -->(4f0f2)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.6...v4.1.7 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a09d47236e19fd3151351080c667036ca6164dc4 "><code>a09d472</code></a>
chore: release v4.1.7</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 20:06:17 +00:00
af98101320
chore(deps): Bump github/codeql-action from 4.35.5 to 4.36.0 ( #1911 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action )
from 4.35.5 to 4.36.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.36.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894 ">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893 ">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5 ">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926 ">#3926</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894 ">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893 ">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5 ">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926 ">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899 ">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791 ">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892 ">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880 ">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4 ">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881 ">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795 ">#3795</a></li>
<li>The Git version 2.36.0 requirement for improved incremental analysis
now only applies to repositories that contain submodules. <a
href="https://redirect.github.com/github/codeql-action/pull/3789 ">#3789</a></li>
<li>Python analysis on GHES no longer extracts the standard library,
relying instead on models of the standard library. This should result in
significantly faster extraction and analysis times, while the effect on
alerts should be minimal. <a
href="https://redirect.github.com/github/codeql-action/pull/3794 ">#3794</a></li>
<li>Fixed a bug in the validation of OIDC configurations for private
registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3807 ">#3807</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2 ">2.25.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3823 ">#3823</a></li>
</ul>
<h2>4.35.1 - 27 Mar 2026</h2>
<ul>
<li>Fix incorrect minimum required Git version for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3781 ">#3781</a></li>
</ul>
<h2>4.35.0 - 27 Mar 2026</h2>
<ul>
<li>Reduced the minimum Git version required for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> from 2.38.0 to 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3767 ">#3767</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1 ">2.25.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3773 ">#3773</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/7211b7c8077ea37d8641b6271f6a365a22a5fbfa "><code>7211b7c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3927 ">#3927</a>
from github/update-v4.36.0-ebc2d9e2b</li>
<li><a
href="https://github.com/github/codeql-action/commit/7740f2fb21add1d46278215acea47540db22f022 "><code>7740f2f</code></a>
Update changelog for v4.36.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/ebc2d9e2bc247eec51bee8d4df806c4030eb0761 "><code>ebc2d9e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3926 ">#3926</a>
from github/update-bundle/codeql-bundle-v2.25.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/d1f74b777c95c777bf4f42ce4b250bc916e745c7 "><code>d1f74b7</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/2dc40cec39bdc63d3561d74fa6100cebb0418ff4 "><code>2dc40ce</code></a>
Update default bundle to codeql-bundle-v2.25.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/84498526a009a99c875e83ef4821a8ba52de7c22 "><code>8449852</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3910 ">#3910</a>
from github/henrymercer/repo-size-diff-check</li>
<li><a
href="https://github.com/github/codeql-action/commit/72ac23c6d16b29fbe801e87e3439941558c53094 "><code>72ac23c</code></a>
Update excluded required check list</li>
<li><a
href="https://github.com/github/codeql-action/commit/c5297a28a2c3e6a8062041b58858bd7117cebe37 "><code>c5297a2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3919 ">#3919</a>
from github/henrymercer/workflow-concurrency</li>
<li><a
href="https://github.com/github/codeql-action/commit/8ffeae7d05bc1b914a009d197e64e4f5c9e14503 "><code>8ffeae7</code></a>
CI: Automatically cancel non-generated workflows</li>
<li><a
href="https://github.com/github/codeql-action/commit/f3f52bf568dc44a1069faafa538caa6b1fec40c9 "><code>f3f52bf</code></a>
Revert <code>getErrorMessage</code> import</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/9e0d7b8d25671d64c341c19c0152d693099fb5ba...7211b7c8077ea37d8641b6271f6a365a22a5fbfa ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 20:05:32 +00:00
a32c9a2f0c
chore(deps-dev): Bump sass from 1.99.0 to 1.100.0 ( #1908 )
...
Bumps [sass](https://github.com/sass/dart-sass ) from 1.99.0 to 1.100.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/releases ">sass's
releases</a>.</em></p>
<blockquote>
<h2>Dart Sass 1.100.0</h2>
<p>To install Sass 1.100.0, download one of the packages below and <a
href="https://katiek2.github.io/path-doc/ ">add it to your PATH</a>, or
see <a href="https://sass-lang.com/install ">the Sass website</a> for
full installation instructions.</p>
<h1>Changes</h1>
<ul>
<li>
<p>Writing two compound selectors adjacent to one another without any
whitespace between them, such as <code>[class]a</code>, is now
deprecated. This was always an error in CSS and Sass only supported it
by mistake.</p>
<p>See <a href="https://sass-lang.com/d/adjacent-compounds ">the Sass
website</a> for details.</p>
</li>
</ul>
<p>See the <a
href="https://github.com/sass/dart-sass/blob/master/CHANGELOG.md#11000 ">full
changelog</a> for changes in earlier releases.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sass/dart-sass/blob/main/CHANGELOG.md ">sass's
changelog</a>.</em></p>
<blockquote>
<h2>1.100.0</h2>
<ul>
<li>
<p>Writing two compound selectors adjacent to one another without any
whitespace
between them, such as <code>[class]a</code>, is now deprecated. This was
always an error
in CSS and Sass only supported it by mistake.</p>
<p>See <a href="https://sass-lang.com/d/adjacent-compounds ">the Sass
website</a> for
details.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sass/dart-sass/commit/5fd18c75e31a855476059fb6fb0c6aa829292739 "><code>5fd18c7</code></a>
Bump node engine requirement to >=20.19.0 and chokidar requirement to
^5.0.0 ...</li>
<li><a
href="https://github.com/sass/dart-sass/commit/8c1d984e420d891c9c92ba1afc8b28e70a2afb78 "><code>8c1d984</code></a>
Deprecate adjacent compound selectors (<a
href="https://redirect.github.com/sass/dart-sass/issues/2765 ">#2765</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/8e5f7180b4f3de4281d3454090548c03e9db8135 "><code>8e5f718</code></a>
Bump postcss from 8.5.12 to 8.5.13 in /pkg/sass-parser (<a
href="https://redirect.github.com/sass/dart-sass/issues/2767 ">#2767</a>)</li>
<li><a
href="https://github.com/sass/dart-sass/commit/1447f9b42e89d693ce308bad9cbf8ec3e1db78c4 "><code>1447f9b</code></a>
Bump postcss from 8.5.8 to 8.5.12 in /pkg/sass-parser (<a
href="https://redirect.github.com/sass/dart-sass/issues/2766 ">#2766</a>)</li>
<li>See full diff in <a
href="https://github.com/sass/dart-sass/compare/1.99.0...1.100.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 20:05:18 +00:00
6e1be4dc64
chore(deps): Bump docker/login-action from 4.1.0 to 4.2.0 ( #1912 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from
4.1.0 to 4.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases ">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.0</h2>
<ul>
<li>Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 in <a
href="https://redirect.github.com/docker/login-action/pull/976 ">docker/login-action#976</a></li>
<li>Bump <code>@aws-sdk/client-ecr</code> and
<code>@aws-sdk/client-ecr-public</code> to 3.1050.0 in <a
href="https://redirect.github.com/docker/login-action/pull/960 ">docker/login-action#960</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.86.0 to 0.90.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/970 ">docker/login-action#970</a></li>
<li>Bump brace-expansion from 2.0.1 to 5.0.6 in <a
href="https://redirect.github.com/docker/login-action/pull/993 ">docker/login-action#993</a></li>
<li>Bump fast-xml-builder from 1.1.4 to 1.2.0 in <a
href="https://redirect.github.com/docker/login-action/pull/985 ">docker/login-action#985</a></li>
<li>Bump fast-xml-parser from 5.3.6 to 5.8.0 in <a
href="https://redirect.github.com/docker/login-action/pull/963 ">docker/login-action#963</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 9.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/961 ">docker/login-action#961</a></li>
<li>Bump postcss from 8.5.6 to 8.5.10 in <a
href="https://redirect.github.com/docker/login-action/pull/979 ">docker/login-action#979</a></li>
<li>Bump tar from 6.2.1 to 7.5.15 in <a
href="https://redirect.github.com/docker/login-action/pull/991 ">docker/login-action#991</a></li>
<li>Bump vite from 7.3.1 to 7.3.3 in <a
href="https://redirect.github.com/docker/login-action/pull/986 ">docker/login-action#986</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.1.0...v4.2.0 ">https://github.com/docker/login-action/compare/v4.1.0...v4.2.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/650006c6eb7dba73a995cc03b0b2d7f5ca915bee "><code>650006c</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/960 ">#960</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="https://github.com/docker/login-action/commit/99df1a3f6d65e48177ea57671a50e2242eae4b63 "><code>99df1a3</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/3ab375f324f46da5f6901efeda4be4e2566ebaa2 "><code>3ab375f</code></a>
build(deps): bump the aws-sdk-dependencies group across 1 directory with
2 up...</li>
<li><a
href="https://github.com/docker/login-action/commit/39d85804ae465a1816c68ff58158ec66883981b4 "><code>39d8580</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/970 ">#970</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/login-action/commit/4eefcd33ca7213989697445a78b6730274bfaba6 "><code>4eefcd3</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/56d092c8b3f04006c22f4fc20a2b3d2442caed56 "><code>56d092c</code></a>
build(deps): bump <code>@docker/actions-toolkit</code> from 0.86.0 to
0.90.0</li>
<li><a
href="https://github.com/docker/login-action/commit/e2e31ca87063ae00fd41ad3b9c548dd8ec24c5ff "><code>e2e31ca</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/976 ">#976</a>
from docker/dependabot/npm_and_yarn/actions/core-3.0.1</li>
<li><a
href="https://github.com/docker/login-action/commit/0bced941e843afc786fbfd58b1c6c13ca11e09c9 "><code>0bced94</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/3e75a0f266b07e09777a621d0ca5f4432ef9f10c "><code>3e75a0f</code></a>
build(deps): bump <code>@actions/core</code> from 3.0.0 to 3.0.1</li>
<li><a
href="https://github.com/docker/login-action/commit/365bebd9d646160567ebad47824f026e09ee6970 "><code>365bebd</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/984 ">#984</a>
from docker/dependabot/github_actions/aws-actions/con...</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 20:04:59 +00:00
35296cb1d9
chore(deps-dev): Bump postcss from 8.5.14 to 8.5.15 ( #1906 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.14 to
8.5.15.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.15</h2>
<ul>
<li>Fixed declaration parsing performance (by <a
href="https://github.com/homanp "><code>@homanp</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.15</h2>
<ul>
<li>Fixed declaration parsing performance (by <a
href="https://github.com/homanp "><code>@homanp</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/eae46db765d752cf8f40c4fa2b0b85030079c43d "><code>eae46db</code></a>
Release 8.5.15 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/79508ffa59e42c02056aca61b88bc393c8b516c4 "><code>79508ff</code></a>
Update CI actions</li>
<li><a
href="https://github.com/postcss/postcss/commit/b128e2131288a411c6e28071d0929542c49e74eb "><code>b128e21</code></a>
Speed up declaration parsing by avoiding creating new array on each
token</li>
<li><a
href="https://github.com/postcss/postcss/commit/9825dca02c33cf610e2a842be767468b67fbecf9 "><code>9825dca</code></a>
Fix code format</li>
<li><a
href="https://github.com/postcss/postcss/commit/55789c865281e2be194fa5b4e41dd046be3a2307 "><code>55789c8</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/84fbbe9009cb3cc3bbb4cc3a9b65d468f4844d95 "><code>84fbbe9</code></a>
Install older pnpm action for old Node.js</li>
<li><a
href="https://github.com/postcss/postcss/commit/9f860bd78ec1dbc4f0ae72d693f03f956baa38cb "><code>9f860bd</code></a>
Revert pnpm action for old Node.js</li>
<li><a
href="https://github.com/postcss/postcss/commit/08771986d47359545f502e009763e223b66bfcf6 "><code>0877198</code></a>
Update CI actions</li>
<li><a
href="https://github.com/postcss/postcss/commit/b2d1a335cea818f8b27e5cfb90147648afe3e582 "><code>b2d1a33</code></a>
Fix linter warnings</li>
<li><a
href="https://github.com/postcss/postcss/commit/0700dac92283bc259977dff2743ca74a00f58267 "><code>0700dac</code></a>
Merge pull request <a
href="https://redirect.github.com/postcss/postcss/issues/2088 ">#2088</a>
from rootvector2/add-oss-fuzz-harness</li>
<li>Additional commits viewable in <a
href="https://github.com/postcss/postcss/compare/8.5.14...8.5.15 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 13:57:45 +00:00
1a6dce7355
chore(deps-dev): Bump typescript-eslint from 8.59.3 to 8.59.4 ( #1905 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.59.3 to 8.59.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.59.4</h2>
<h2>8.59.4 (2026-05-18)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-floating-promises] stack
overflow when using recursive types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12294 ">#12294</a>)</li>
<li><strong>project-service:</strong> throw error cause in
<code>getParsedConfigFileFromTSServer</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12321 ">#12321</a>)</li>
<li><strong>typescript-eslint:</strong> export Compatible* types from
typescript-eslint to resolve pnpm TS error (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12340 ">#12340</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit "><code>@StyleShit</code></a></li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
<li>lumir</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.4 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.59.4 (2026-05-18)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>typescript-eslint:</strong> export Compatible* types from
typescript-eslint to resolve pnpm TS error (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12340 ">#12340</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.4 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/ca6ca1431b6d18235297a7e29feb5d98f012dff2 "><code>ca6ca14</code></a>
chore(release): publish 8.59.4</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/4b927c607755b2648d5854b9e928c1dbb2b8e088 "><code>4b927c6</code></a>
fix(typescript-eslint): export Compatible* types from typescript-eslint
to re...</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.4/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 13:57:33 +00:00
4165e810ed
chore(deps-dev): Bump vite-plugin-istanbul from 8.0.0 to 9.0.0 ( #1904 )
...
Bumps
[vite-plugin-istanbul](https://github.com/iFaxity/vite-plugin-istanbul )
from 8.0.0 to 9.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/iFaxity/vite-plugin-istanbul/releases ">vite-plugin-istanbul's
releases</a>.</em></p>
<blockquote>
<h2>v9.0.0</h2>
<h1><a
href="https://github.com/iFaxity/vite-plugin-istanbul/compare/v8.0.0...v9.0.0 ">9.0.0</a>
(2026-05-17)</h1>
<h3>Features</h3>
<ul>
<li>feat!: bump vite peer dependency from >=4 to >=7 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/406 ">#406</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/0118fad569fc5ab60e8ebeef6d9703c355919661 ">0118fad</a>)</li>
<li>feat!: migrate from unbuild/rollup to tsdown/rolldown (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/405 ">#405</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/6c092487b2687789f2bea0c174fa430ab58320bc ">6c09248</a>)</li>
<li>support custom instrumenter option (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/402 ">#402</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/87458e8f1d916d8602abcb81d4d8361890c7d3b8 ">87458e8</a>)</li>
</ul>
<h3>BREAKING CHANGES</h3>
<ul>
<li>Minimum required Vite version is now 7, up from 4.</li>
<li>Replaced unbuild/rollup with tsdown/rolldown.</li>
</ul>
<h2>v9.0.0-rc.2</h2>
<h1><a
href="https://github.com/iFaxity/vite-plugin-istanbul/compare/v9.0.0-rc.1...v9.0.0-rc.2 ">9.0.0-rc.2</a>
(2026-05-17)</h1>
<ul>
<li>feat!: bump vite peer dependency from >=4 to >=7 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/406 ">#406</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/0118fad569fc5ab60e8ebeef6d9703c355919661 ">0118fad</a>)</li>
</ul>
<h3>BREAKING CHANGES</h3>
<ul>
<li>Minimum required Vite version is now 7, up from 4.</li>
</ul>
<h2>v9.0.0-rc.1</h2>
<h1><a
href="https://github.com/iFaxity/vite-plugin-istanbul/compare/v8.0.0...v9.0.0-rc.1 ">9.0.0-rc.1</a>
(2026-05-17)</h1>
<h3>Features</h3>
<ul>
<li>feat!: migrate from unbuild/rollup to tsdown/rolldown (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/405 ">#405</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/6c092487b2687789f2bea0c174fa430ab58320bc ">6c09248</a>)</li>
<li>support custom instrumenter option (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/402 ">#402</a>)
(<a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/87458e8f1d916d8602abcb81d4d8361890c7d3b8 ">87458e8</a>)</li>
</ul>
<h3>BREAKING CHANGES</h3>
<ul>
<li>Replaced unbuild/rollup with tsdown/rolldown.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/0118fad569fc5ab60e8ebeef6d9703c355919661 "><code>0118fad</code></a>
feat!: bump vite peer dependency from >=4 to >=7 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/406 ">#406</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/8755100166daa51eb26592e059ce4069f8bda711 "><code>8755100</code></a>
chore: update node to v24.15.0 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/407 ">#407</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/6c092487b2687789f2bea0c174fa430ab58320bc "><code>6c09248</code></a>
feat!: migrate from unbuild/rollup to tsdown/rolldown (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/405 ">#405</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/7d74fc0ce585458e1462f63dcb54efbfb330559b "><code>7d74fc0</code></a>
build(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/404 ">#404</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/8870c47a91f2e89c0d25052edcf0cf1fef3780b6 "><code>8870c47</code></a>
build(deps): bump pnpm/action-setup from 5 to 6 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/403 ">#403</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/d7770a61a1a0cd0d3631be50f778ef8def8d66f8 "><code>d7770a6</code></a>
Fix/vue sfc template coverage (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/400 ">#400</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/87458e8f1d916d8602abcb81d4d8361890c7d3b8 "><code>87458e8</code></a>
feat: support custom instrumenter option (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/402 ">#402</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/4f458b5e3f2181a3a4705dade617734ac24c0bf0 "><code>4f458b5</code></a>
build(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/401 ">#401</a>)</li>
<li><a
href="https://github.com/iFaxity/vite-plugin-istanbul/commit/cbce7e21d3d2b027df14da2fb2848f12d73076fa "><code>cbce7e2</code></a>
build(deps): bump pnpm/action-setup from 4 to 5 (<a
href="https://redirect.github.com/iFaxity/vite-plugin-istanbul/issues/399 ">#399</a>)</li>
<li>See full diff in <a
href="https://github.com/iFaxity/vite-plugin-istanbul/compare/v8.0.0...v9.0.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 13:56:57 +00:00
30380bc30c
chore(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1 ( #1902 )
...
Bumps
[codecov/codecov-action](https://github.com/codecov/codecov-action ) from
6.0.0 to 6.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/codecov/codecov-action/releases ">codecov/codecov-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: prevent template injection in run: steps (VULN-1652) by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1947 ">codecov/codecov-action#1947</a></li>
<li>chore(release): 6.0.1 by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1949 ">codecov/codecov-action#1949</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v6.0.0...v6.0.1 ">https://github.com/codecov/codecov-action/compare/v6.0.0...v6.0.1 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md ">codecov/codecov-action's
changelog</a>.</em></p>
<blockquote>
<h2>v5.5.2</h2>
<h3>What's Changed</h3>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2 ">https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2 </a></p>
<h2>v5.5.1</h2>
<h3>What's Changed</h3>
<ul>
<li>fix: overwrite pr number on fork by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1871 ">codecov/codecov-action#1871</a></li>
<li>build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1868 ">codecov/codecov-action#1868</a></li>
<li>build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1867 ">codecov/codecov-action#1867</a></li>
<li>fix: update to use local app/ dir by <a
href="https://github.com/thomasrockhu-codecov "><code>@thomasrockhu-codecov</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1872 ">codecov/codecov-action#1872</a></li>
<li>docs: fix typo in README by <a
href="https://github.com/datalater "><code>@datalater</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1866 ">codecov/codecov-action#1866</a></li>
<li>Document a <code>codecov-cli</code> version reference example by <a
href="https://github.com/webknjaz "><code>@webknjaz</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1774 ">codecov/codecov-action#1774</a></li>
<li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1861 ">codecov/codecov-action#1861</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1833 ">codecov/codecov-action#1833</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1 ">https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1 </a></p>
<h2>v5.5.0</h2>
<h3>What's Changed</h3>
<ul>
<li>feat: upgrade wrapper to 0.2.4 by <a
href="https://github.com/jviall "><code>@jviall</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1864 ">codecov/codecov-action#1864</a></li>
<li>Pin actions/github-script by Git SHA by <a
href="https://github.com/martincostello "><code>@martincostello</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1859 ">codecov/codecov-action#1859</a></li>
<li>fix: check reqs exist by <a
href="https://github.com/joseph-sentry "><code>@joseph-sentry</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1835 ">codecov/codecov-action#1835</a></li>
<li>fix: Typo in README by <a
href="https://github.com/spalmurray "><code>@spalmurray</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1838 ">codecov/codecov-action#1838</a></li>
<li>docs: Refine OIDC docs by <a
href="https://github.com/spalmurray "><code>@spalmurray</code></a> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1837 ">codecov/codecov-action#1837</a></li>
<li>build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1829 ">codecov/codecov-action#1829</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0 ">https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0 </a></p>
<h2>v5.4.3</h2>
<h3>What's Changed</h3>
<ul>
<li>build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by
<code>@app/dependabot</code> in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1822 ">codecov/codecov-action#1822</a></li>
<li>fix: OIDC on forks by <a
href="https://github.com/joseph-sentry "><code>@joseph-sentry</code></a>
in <a
href="https://redirect.github.com/codecov/codecov-action/pull/1823 ">codecov/codecov-action#1823</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3 ">https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3 </a></p>
<h2>v5.4.2</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/codecov/codecov-action/commit/e79a6962e0d4c0c17b229090214935d2e33f8354 "><code>e79a696</code></a>
chore(release): 6.0.1 (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1949 ">#1949</a>)</li>
<li><a
href="https://github.com/codecov/codecov-action/commit/51e64229ac331acb0d7f7b17c67423995f991c79 "><code>51e6422</code></a>
fix: prevent template injection in run: steps (VULN-1652) (<a
href="https://redirect.github.com/codecov/codecov-action/issues/1947 ">#1947</a>)</li>
<li>See full diff in <a
href="https://github.com/codecov/codecov-action/compare/57e3a136b779b570ffcdbf80b3bdc90e7fab3de2...e79a6962e0d4c0c17b229090214935d2e33f8354 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 15:07:32 +00:00
18dec18c54
chore(deps): Bump downshift from 9.3.2 to 9.3.3 ( #1901 )
...
Bumps [downshift](https://github.com/downshift-js/downshift ) from 9.3.2
to 9.3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/downshift-js/downshift/releases ">downshift's
releases</a>.</em></p>
<blockquote>
<h2>v9.3.3</h2>
<h2><a
href="https://github.com/downshift-js/downshift/compare/v9.3.2...v9.3.3 ">9.3.3</a>
(2026-05-18)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>docusaurus:</strong> update and fix webpack issue (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1685 ">#1685</a>)
(<a
href="https://github.com/downshift-js/downshift/commit/efe364ece6ef31ab7e421f94936c5c6f8005f3e5 ">efe364e</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/downshift-js/downshift/commit/efe364ece6ef31ab7e421f94936c5c6f8005f3e5 "><code>efe364e</code></a>
fix(docusaurus): update and fix webpack issue (<a
href="https://redirect.github.com/downshift-js/downshift/issues/1685 ">#1685</a>)</li>
<li>See full diff in <a
href="https://github.com/downshift-js/downshift/compare/v9.3.2...v9.3.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-21 15:03:18 +00:00
bfd2b7ce9d
chore(deps-dev): Bump cypress from 15.14.2 to 15.15.0 ( #1890 )
...
Bumps [cypress](https://github.com/cypress-io/cypress ) from 15.14.2 to
15.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/cypress/releases ">cypress's
releases</a>.</em></p>
<blockquote>
<h2>v15.15.0</h2>
<p>Changelog: <a
href="https://docs.cypress.io/app/references/changelog#15-15-0 ">https://docs.cypress.io/app/references/changelog#15-15-0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/cypress/commit/914ad901d9d50e2c744769a445643702ceca774b "><code>914ad90</code></a>
chore: narrow CYPRESS_COMMERCIAL_RECOMMENDATIONS override; deflake
no-branch ...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/1b11ad2663f5e097a3d9c08e4e25d576c2074b05 "><code>1b11ad2</code></a>
chore(ci): commit v8 snapshot updates via GitHub API (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33774 ">#33774</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/0f864f68aa2f2b005b50fc8367c9a6467a57753c "><code>0f864f6</code></a>
internal: cloud-driven app messaging banner (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33757 ">#33757</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/6299c146fb0c5f3aec241a0996eac57a12a924a7 "><code>6299c14</code></a>
chore: Update v8 snapshot cache - windows (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33776 ">#33776</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/b9575f01e99ca24456d06d32a3b354bba84828e8 "><code>b9575f0</code></a>
chore: Update v8 snapshot cache - linux (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33764 ">#33764</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/302747ded21c37debb26ab8a1d42b066283cc76d "><code>302747d</code></a>
fix(server): retry BiDi sessionSubscribe when Firefox connection not
ready (#...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/73a3e0e749dae3b0c80ea78dc2687a07672ee2a1 "><code>73a3e0e</code></a>
fix: serialize ProjectLifecycleManager.refreshLifecycle to avoid IPC
race (<a
href="https://redirect.github.com/cypress-io/cypress/issues/3 ">#3</a>...</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/0f2d3859413656c07ed555a18123e92914f3c426 "><code>0f2d385</code></a>
test(system-tests): add Node.js 26 binary smoke coverage (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33780 ">#33780</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/e08ac5ed711ba44d8aacad7482181e80617f07bb "><code>e08ac5e</code></a>
chore(ci): enable Snyk scans on fork PRs via approval-gated environment
(<a
href="https://redirect.github.com/cypress-io/cypress/issues/33773 ">#33773</a>)</li>
<li><a
href="https://github.com/cypress-io/cypress/commit/e429e13b252f54fb5fe0b877633e22c9e1be1ae9 "><code>e429e13</code></a>
chore: Update v8 snapshot cache - darwin (<a
href="https://redirect.github.com/cypress-io/cypress/issues/33772 ">#33772</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/cypress-io/cypress/compare/v15.14.2...v15.15.0 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 23:49:23 +00:00
4d7b087fff
chore(deps): Bump github/codeql-action from 4.35.4 to 4.35.5 ( #1898 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action )
from 4.35.4 to 4.35.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.35.5</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899 ">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791 ">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892 ">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880 ">#3880</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894 ">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893 ">#3893</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899 ">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791 ">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892 ">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880 ">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4 ">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881 ">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795 ">#3795</a></li>
<li>The Git version 2.36.0 requirement for improved incremental analysis
now only applies to repositories that contain submodules. <a
href="https://redirect.github.com/github/codeql-action/pull/3789 ">#3789</a></li>
<li>Python analysis on GHES no longer extracts the standard library,
relying instead on models of the standard library. This should result in
significantly faster extraction and analysis times, while the effect on
alerts should be minimal. <a
href="https://redirect.github.com/github/codeql-action/pull/3794 ">#3794</a></li>
<li>Fixed a bug in the validation of OIDC configurations for private
registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3807 ">#3807</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2 ">2.25.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3823 ">#3823</a></li>
</ul>
<h2>4.35.1 - 27 Mar 2026</h2>
<ul>
<li>Fix incorrect minimum required Git version for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3781 ">#3781</a></li>
</ul>
<h2>4.35.0 - 27 Mar 2026</h2>
<ul>
<li>Reduced the minimum Git version required for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> from 2.38.0 to 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3767 ">#3767</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1 ">2.25.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3773 ">#3773</a></li>
</ul>
<h2>4.34.1 - 20 Mar 2026</h2>
<ul>
<li>Downgrade default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3 ">2.24.3</a>
due to issues with a small percentage of Actions and JavaScript
analyses. <a
href="https://redirect.github.com/github/codeql-action/pull/3762 ">#3762</a></li>
</ul>
<h2>4.34.0 - 20 Mar 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/9e0d7b8d25671d64c341c19c0152d693099fb5ba "><code>9e0d7b8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3905 ">#3905</a>
from github/update-v4.35.5-d4b485515</li>
<li><a
href="https://github.com/github/codeql-action/commit/6d7d59927c0c7336c1d1247c7e159e79edbf7684 "><code>6d7d599</code></a>
Add changelog entry for <a
href="https://redirect.github.com/github/codeql-action/issues/3899 ">#3899</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/51f7e38c69d3cd7966375fe0ffff19669f22bd14 "><code>51f7e38</code></a>
Update changelog for v4.35.5</li>
<li><a
href="https://github.com/github/codeql-action/commit/d4b485515e8531d7071a39d526213eb5b2e74a11 "><code>d4b4855</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3899 ">#3899</a>
from github/mbg/esbuild/split</li>
<li><a
href="https://github.com/github/codeql-action/commit/127de8117f134e8809c127d53e940b3ffc1db8e9 "><code>127de81</code></a>
Merge remote-tracking branch 'origin/main' into mbg/esbuild/split</li>
<li><a
href="https://github.com/github/codeql-action/commit/7fde13f26ad3f7008e8fe6755cb997b54f7a2f3b "><code>7fde13f</code></a>
Use src + basename in header to avoid issues on Windows</li>
<li><a
href="https://github.com/github/codeql-action/commit/dfa61e7305ed28b74dcc2c68bd665b36751ad933 "><code>dfa61e7</code></a>
Improve pattern matching and error handling</li>
<li><a
href="https://github.com/github/codeql-action/commit/52aafec07347933a26e670390c3f894c5c05e64a "><code>52aafec</code></a>
Import and call <code>runWrapper</code> normally in <code>analyze</code>
tests</li>
<li><a
href="https://github.com/github/codeql-action/commit/0d08c01f7874da2f932e4d4e4d42b1c43be88111 "><code>0d08c01</code></a>
Auto-generate shared bundle</li>
<li><a
href="https://github.com/github/codeql-action/commit/14085a675cb6d8cddc805b946cc1d51e3232a204 "><code>14085a6</code></a>
Auto-generate entry points</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 23:41:58 +00:00
b5339ad273
chore(deps-dev): Bump stylelint from 17.11.0 to 17.11.1 ( #1897 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.11.0
to 17.11.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.11.1</h2>
<p>It fixes 2 bugs.</p>
<ul>
<li>Fixed: <code>node_modules</code> ignore for
<code>codeFilename</code> paths containing a dot-prefixed directory (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9282 ">#9282</a>)
(<a href="https://github.com/tuhtah "><code>@tuhtah</code></a>).</li>
<li>Fixed:
<code>declaration-block-no-redundant-longhand-properties</code> range
for contiguous redundant longhand properties (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9273 ">#9273</a>)
(<a
href="https://github.com/pamelalozano16 "><code>@pamelalozano16</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.11.1 - 2026-05-14</h2>
<p>It fixes 2 bugs.</p>
<ul>
<li>Fixed: <code>node_modules</code> ignore for
<code>codeFilename</code> paths containing a dot-prefixed directory (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9282 ">#9282</a>)
(<a href="https://github.com/tuhtah "><code>@tuhtah</code></a>).</li>
<li>Fixed:
<code>declaration-block-no-redundant-longhand-properties</code> range
for contiguous redundant longhand properties (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9273 ">#9273</a>)
(<a
href="https://github.com/pamelalozano16 "><code>@pamelalozano16</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint/stylelint/commit/e7a3d197d05200be1a92cb74ec962c80996fd845 "><code>e7a3d19</code></a>
Release 17.11.1 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9290 ">#9290</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/63c599204a168ea3204d96e8f14f9f6fa0fe3e66 "><code>63c5992</code></a>
Fix <code>node_modules</code> ignore for <code>codeFilename</code> paths
containing a dot-prefixed ...</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/8b05dabc65cceff85e69d8c7c71b2678a1d4d30f "><code>8b05dab</code></a>
Bump postcss from 8.5.13 to 8.5.14 in the postcss group (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9286 ">#9286</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/2dbc0f0990d7d341379e2d7d04ff502b4c5bb7fe "><code>2dbc0f0</code></a>
Bump eslint from 10.2.1 to 10.3.0 in the eslint group (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9285 ">#9285</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/769b772b1e845f1c796d4d16c75d27cd3ae9c04f "><code>769b772</code></a>
Bump the stylelint-actions group with 5 updates (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9284 ">#9284</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/2e6808604b5ea1248e2cd1de4d39c2f5156333f5 "><code>2e68086</code></a>
Refactor <code>isPlainObject()</code> to drop
<code>is-plain-object</code> dependency (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9280 ">#9280</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/3ea54e8ba817b8dbfafe3c981d611a97f4a26b6a "><code>3ea54e8</code></a>
Add Node.js v26 to test matrix on CI (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9279 ">#9279</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/884b7ebf2c5a166bde59782f43725ca3505e215a "><code>884b7eb</code></a>
Bump fast-uri from 3.1.0 to 3.1.2 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9277 ">#9277</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/f3cd80cc9e1ccdbb7d043e8ce98b4f648d7eec3d "><code>f3cd80c</code></a>
Refactor <code>declaration-block-no-redundant-longhand-properties</code>
rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9275 ">#9275</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/dd1e81d5b77b37f0884f9672493931fe6851a338 "><code>dd1e81d</code></a>
Fix <code>declaration-block-no-redundant-longhand-properties</code>
range for contiguous...</li>
<li>See full diff in <a
href="https://github.com/stylelint/stylelint/compare/17.11.0...17.11.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 23:40:50 +00:00
38c7a70a9f
chore(deps): Bump i18next from 26.1.0 to 26.2.0 ( #1893 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.1.0 to
26.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.2.0</h2>
<ul>
<li>feat(types): new <code>parseInterpolation</code> TypeOption (default
<code>true</code>). When set to <code>false</code> in
<code>CustomTypeOptions</code>, the type-level extractor stops parsing
translation strings for <code>{{variable}}</code> patterns. Required by
<code>i18next-icu</code> users — the default extractor mistakes ICU
MessageFormat nested-brace plurals like <code>{count, plural, one
{{count} row} other {{count} rows}}</code> for an interpolation block
and demands a phantom variable name. The flag is type-only; runtime
interpolation is governed by <code>InterpolationOptions</code> and is
unaffected. Fixes <a
href="https://redirect.github.com/i18next/i18next-icu/issues/85 ">i18next-icu#85</a>.</li>
<li>fix(types): expose <code>enableSelector</code> on
<code>InitOptions</code> so <code>i18next.init({ enableSelector:
'strict' })</code> typechecks without a module augmentation. The runtime
already reads <code>opts?.enableSelector</code> from init options; this
lands the matching type declaration next to the other
selector-resolution knobs. Accepts <code>false | true | 'optimize' |
'strict'</code>. Thanks <a
href="https://github.com/Faithfinder "><code>@Faithfinder</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2431 ">#2431</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.2.0</h2>
<ul>
<li>feat(types): new <code>parseInterpolation</code> TypeOption (default
<code>true</code>). When set to <code>false</code> in
<code>CustomTypeOptions</code>, the type-level extractor stops parsing
translation strings for <code>{{variable}}</code> patterns. Required by
<code>i18next-icu</code> users — the default extractor mistakes ICU
MessageFormat nested-brace plurals like <code>{count, plural, one
{{count} row} other {{count} rows}}</code> for an interpolation block
and demands a phantom variable name. The flag is type-only; runtime
interpolation is governed by <code>InterpolationOptions</code> and is
unaffected. Fixes <a
href="https://redirect.github.com/i18next/i18next-icu/issues/85 ">i18next-icu#85</a>.</li>
<li>fix(types): expose <code>enableSelector</code> on
<code>InitOptions</code> so <code>i18next.init({ enableSelector:
'strict' })</code> typechecks without a module augmentation. The runtime
already reads <code>opts?.enableSelector</code> from init options; this
lands the matching type declaration next to the other
selector-resolution knobs. Accepts <code>false | true | 'optimize' |
'strict'</code>. Thanks <a
href="https://github.com/Faithfinder "><code>@Faithfinder</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2431 ">#2431</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/22fb6ad013c9c069c33086eb3737b4371936d5ce "><code>22fb6ad</code></a>
26.2.0</li>
<li><a
href="https://github.com/i18next/i18next/commit/b640ac41acba1145d2e9e3ed38280dc82b67cc39 "><code>b640ac4</code></a>
feat(types): parseInterpolation flag for ICU-friendly t() typing
(i18next-icu...</li>
<li><a
href="https://github.com/i18next/i18next/commit/0b9debd0f72d30905371e65c02e5a9df5db78e56 "><code>0b9debd</code></a>
changelog: 26.1.1 entry for <a
href="https://redirect.github.com/i18next/i18next/issues/2431 ">#2431</a></li>
<li><a
href="https://github.com/i18next/i18next/commit/50509e4c916c44996e23f01e7bfbceda79b62870 "><code>50509e4</code></a>
fix(types): expose enableSelector on InitOptions (<a
href="https://redirect.github.com/i18next/i18next/issues/2431 ">#2431</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/80b540291cf86d5be6a5bd959db82043b643bb19 "><code>80b5402</code></a>
Enhance Pro Tip in README with i18next-locize-backend plugin link</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.1.0...v26.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 23:40:26 +00:00
b450dd66ec
chore(deps): Bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 ( #1895 )
...
Bumps
[peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages )
from 4.0.0 to 4.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/peaceiris/actions-gh-pages/releases ">peaceiris/actions-gh-pages's
releases</a>.</em></p>
<blockquote>
<h2>actions-github-pages v4.1.0</h2>
<p>See <a
href="https://github.com/peaceiris/actions-gh-pages/blob/v4.0.0/CHANGELOG.md ">CHANGELOG.md</a>
for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>Actions examples: update to modern versions of actions by <a
href="https://github.com/clintonsteiner "><code>@clintonsteiner</code></a>
in <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1117 ">peaceiris/actions-gh-pages#1117</a></li>
<li>chore: update Node runtime and dependencies by <a
href="https://github.com/peaceiris "><code>@peaceiris</code></a> in <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1147 ">peaceiris/actions-gh-pages#1147</a></li>
<li>ci: harden GitHub Actions workflows by <a
href="https://github.com/peaceiris "><code>@peaceiris</code></a> in <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1156 ">peaceiris/actions-gh-pages#1156</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/clintonsteiner "><code>@clintonsteiner</code></a>
made their first contribution in <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1117 ">peaceiris/actions-gh-pages#1117</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/peaceiris/actions-gh-pages/compare/v4.0.0...v4.1.0 ">https://github.com/peaceiris/actions-gh-pages/compare/v4.0.0...v4.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md ">peaceiris/actions-gh-pages's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version ">standard-version</a>
for commit guidelines.</p>
<h1><a
href="https://github.com/peaceiris/actions-gh-pages/compare/v4.0.0...v4.1.0 ">4.1.0</a>
(2026-05-12)</h1>
<h3>chore</h3>
<ul>
<li>add .codex/ (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/94ae2d2c73d9417ae30f61ddead523dc54d56dab ">94ae2d2</a>)</li>
<li>add hasInstallScript true (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/494ec9b2cc029a46119b4e13ff65f91eacbe1cf3 ">494ec9b</a>)</li>
<li>update Node runtime and dependencies (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1147 ">#1147</a>)
(<a
href="https://github.com/peaceiris/actions-gh-pages/commit/954f6bf8259a6185f366f5cf13baee63745e0f79 ">954f6bf</a>),
closes <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1147 ">#1147</a></li>
</ul>
<h3>ci</h3>
<ul>
<li>change automerge to false (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/4b09552702d0b65573696410d4707c765da2630b ">4b09552</a>)</li>
<li>harden GitHub Actions workflows (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1156 ">#1156</a>)
(<a
href="https://github.com/peaceiris/actions-gh-pages/commit/aa0466c1792bb558ed327a96629c4dd4ec390e48 ">aa0466c</a>),
closes <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1156 ">#1156</a></li>
</ul>
<h3>docs</h3>
<ul>
<li>add repository guidelines (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/a1f94b504729eaee11b94d0f21ef5630241e8a52 ">a1f94b5</a>)</li>
<li>bump to v4 from v3 (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/a16b61f0780be556cf97931905d261429ee79342 ">a16b61f</a>)</li>
<li>fix note style (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/0b7567fde6f7517edcc13d8ffa2d89cd8734d47c ">0b7567f</a>)</li>
<li>update versions of actions (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1117 ">#1117</a>)
(<a
href="https://github.com/peaceiris/actions-gh-pages/commit/aa83d0c2cfc3d813560e13068d3152aa21490171 ">aa83d0c</a>),
closes <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1117 ">#1117</a></li>
</ul>
<h1><a
href="https://github.com/peaceiris/actions-gh-pages/compare/v3.9.3...v4.0.0 ">4.0.0</a>
(2024-04-08)</h1>
<h3>build</h3>
<ul>
<li>node 20.11.1 (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/5049354438ced05ab8a5da89ef20fd8efff107c7 ">5049354</a>)</li>
</ul>
<h3>chore</h3>
<ul>
<li>bump node16 to node20 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1067 ">#1067</a>)
(<a
href="https://github.com/peaceiris/actions-gh-pages/commit/4eb285e828117bca26638192c3ed309c622e7bad ">4eb285e</a>),
closes <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1067 ">#1067</a></li>
<li>downgrade engines.npm to 8.0.0 (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/87231bc03a428df52f90a00b3b9e6bef82f7daf9 ">87231bc</a>)</li>
</ul>
<h3>ci</h3>
<ul>
<li>pin node-version to 18 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/981 ">#981</a>)
(<a
href="https://github.com/peaceiris/actions-gh-pages/commit/65ebf11929c082120c54719c87069f0827d2084c ">65ebf11</a>),
closes <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/981 ">#981</a></li>
</ul>
<h3>docs</h3>
<ul>
<li>add Release Strategy (<a
href="https://github.com/peaceiris/actions-gh-pages/commit/67f80d94a1668353e4733223685dcb84340c44b5 ">67f80d9</a>)</li>
<li>fix link to Nuxt github-pages (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/980 ">#980</a>)
(<a
href="https://github.com/peaceiris/actions-gh-pages/commit/88b4d2aa927893f8976712406df9928468be3c88 ">88b4d2a</a>),
closes <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/980 ">#980</a></li>
<li>remove braces in if conditions (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/920 ">#920</a>)
(<a
href="https://github.com/peaceiris/actions-gh-pages/commit/0fbd12244217a1fa04396b8a52d911a436893771 ">0fbd122</a>),
closes <a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/920 ">#920</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/84c30a85c19949d7eee79c4ff27748b70285e453 "><code>84c30a8</code></a>
chore(release): 4.1.0</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/6fa0f50907221d627dfc1f22925e09fc46a95139 "><code>6fa0f50</code></a>
chore(release): Add build assets</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/3b7506a0311b775872374907835d53bcfbbb7464 "><code>3b7506a</code></a>
chore(deps): update dependency trim-newlines to v5 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1158 ">#1158</a>)</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/aa0466c1792bb558ed327a96629c4dd4ec390e48 "><code>aa0466c</code></a>
ci: harden GitHub Actions workflows (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1156 ">#1156</a>)</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/31835fbbe39cd0ffade1ab81fac14a532b529633 "><code>31835fb</code></a>
chore(deps): update actions/labeler action to v6 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1153 ">#1153</a>)</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/f4f1bc416d16988941232658cea5c06368f3373b "><code>f4f1bc4</code></a>
chore(deps): update peaceiris/actions-mdbook action to v2 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1161 ">#1161</a>)</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/a5e49793f6bdcb5cae6355701f7370ac849c8f20 "><code>a5e4979</code></a>
chore(deps): update dependency ubuntu to v24 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1159 ">#1159</a>)</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/6cc3bac1ca327126c11b95063230514c80197c9c "><code>6cc3bac</code></a>
chore(deps): update github/codeql-action action to v4 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1160 ">#1160</a>)</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/0d6e9f4a6f26532ada0e15a7e783b34f9faad71a "><code>0d6e9f4</code></a>
chore(deps): update actions/setup-node action to v6 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1154 ">#1154</a>)</li>
<li><a
href="https://github.com/peaceiris/actions-gh-pages/commit/d70c101088107fa90acab16aa67e6db280eda929 "><code>d70c101</code></a>
chore(deps): update actions/upload-artifact action to v7 (<a
href="https://redirect.github.com/peaceiris/actions-gh-pages/issues/1155 ">#1155</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/peaceiris/actions-gh-pages/compare/4f9cc6602d3f66b9c108549d475ec49e8ef4d45e...84c30a85c19949d7eee79c4ff27748b70285e453 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 23:40:18 +00:00
94a13d2467
chore(deps-dev): Bump eslint from 10.3.0 to 10.4.0 ( #1892 )
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.3.0 to 10.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases ">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/1a45ec596af1dd5f880e6874cb8f24dafb6a7ecf "><code>1a45ec5</code></a>
feat: check sequence expressions in <code>for-direction</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20701 ">#20701</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/450040bd89b989b3531824c6be45feb5fe3d936b "><code>450040b</code></a>
feat: add <code>includeIgnoreFile()</code> to <code>eslint/config</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/20735 ">#20735</a>)
(Kirk Waiblinger)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/544c0c3da589166ad8e5d634f35d3d06701c57be "><code>544c0c3</code></a>
fix: escape code path DOT labels in debug output (<a
href="https://redirect.github.com/eslint/eslint/issues/20866 ">#20866</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6799431203f2579632d0870f98ba132067f4040c "><code>6799431</code></a>
fix: update dependency <code>@eslint/config-helpers</code> to ^0.6.0
(<a
href="https://redirect.github.com/eslint/eslint/issues/20850 ">#20850</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/f078fef5005dceb14fc162aab7c7200e027688dd "><code>f078fef</code></a>
fix: handle non-array deprecated rule replacements (<a
href="https://redirect.github.com/eslint/eslint/issues/20825 ">#20825</a>)
(xbinaryx)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/7e52a7151fb92eec0e0f67fe4e5ddbd1ccce796f "><code>7e52a71</code></a>
docs: add mention of <code>@eslint-react/eslint-plugin</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20869 ">#20869</a>)
(Pavel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/db3468ba746407d7f286f18f7ea9db6df0e3bc08 "><code>db3468b</code></a>
docs: tweak wording around ambiguous CJS-vs-ESM config (<a
href="https://redirect.github.com/eslint/eslint/issues/20865 ">#20865</a>)
(Kirk Waiblinger)</li>
<li><a
href="https://github.com/eslint/eslint/commit/90846643ec6e97d447ae0d831fabe6d17b0a998a "><code>9084664</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9cc73875046e3c4b8313644cbb1e99e26b36bd3f "><code>9cc7387</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3d7b5484407403817aa9071a394d336d8ea96eb5 "><code>3d7b548</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/191ec3c0a3f94ce0f110df761f0b2b8949011ccb "><code>191ec3c</code></a>
docs: Update README (GitHub Actions Bot)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6616856f28fa514a30f87b5539fc100d739a94bf "><code>6616856</code></a>
chore: upgrade knip to v6 (<a
href="https://redirect.github.com/eslint/eslint/issues/20875 ">#20875</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d13b084a3ad02f926e9addaa35fc383759ea5554 "><code>d13b084</code></a>
ci: ensure auto-created PRs run CI (<a
href="https://redirect.github.com/eslint/eslint/issues/20860 ">#20860</a>)
(lumir)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e71c7af86dce9acc1d18cb12d2184309f6841594 "><code>e71c7af</code></a>
ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (<a
href="https://redirect.github.com/eslint/eslint/issues/20862 ">#20862</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/d84393dea170f54191fd20c8268b52c81c0ccd99 "><code>d84393d</code></a>
test: add unit tests for SuppressionsService.applySuppressions() (<a
href="https://redirect.github.com/eslint/eslint/issues/20863 ">#20863</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/24db8cb8e6f07fba667121777a15b1785486be94 "><code>24db8cb</code></a>
test: add tests for SuppressionsService.save() (<a
href="https://redirect.github.com/eslint/eslint/issues/20802 ">#20802</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2ef0549cac4a9537e4c3a26b9f3edd4c99476bf6 "><code>2ef0549</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20857 ">#20857</a>)
(github-actions[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/a4297918d264d229a06cd96051ef9b91c7b86732 "><code>a429791</code></a>
ci: remove <code>eslint-webpack-plugin</code> types integration test (<a
href="https://redirect.github.com/eslint/eslint/issues/20668 ">#20668</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9e37386aa7f2ce220b2ef74a6afbac5f6b3527c5 "><code>9e37386</code></a>
chore: replace <code>recast</code> with range approach in
code-sample-minimizer (<a
href="https://redirect.github.com/eslint/eslint/issues/20682 ">#20682</a>)
(Copilot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/0dd1f9ffc9a07704d46e2a4c8d4ccc0d0908b0c0 "><code>0dd1f9f</code></a>
test: disable warning for
<code>vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20845 ">#20845</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9da3c7bc92d9579f8db19ecb56e718538d09db2b "><code>9da3c7b</code></a>
refactor: remove deprecated <code>meta.language</code> and migrate
<code>meta.dialects</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20716 ">#20716</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/2099ed12a0a74c3d7f0808514362af2499b4fe2b "><code>2099ed1</code></a>
refactor: add <code>meta.defaultOptions</code> to more rules, enable
linting (<a
href="https://redirect.github.com/eslint/eslint/issues/20800 ">#20800</a>)
(xbinaryx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f1dfbc9ca57196de7092e1888cc99427bd6fe06e "><code>f1dfbc9</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20836 ">#20836</a>)
(github-actions[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/c75941390c14728806cd4baef4f6072f6de78318 "><code>c759413</code></a>
ci: bump pnpm/action-setup from 6.0.3 to 6.0.5 (<a
href="https://redirect.github.com/eslint/eslint/issues/20843 ">#20843</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/5b817d6fdc9ae2c35b528dc662b2eca8f40f64aa "><code>5b817d6</code></a>
test: add unit tests for lib/shared/ast-utils (<a
href="https://redirect.github.com/eslint/eslint/issues/20838 ">#20838</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/1c13ae3934c198c494e5958fa3a68b33244ff06a "><code>1c13ae3</code></a>
test: add unit tests for lib/shared/severity (<a
href="https://redirect.github.com/eslint/eslint/issues/20835 ">#20835</a>)
(kuldeep kumar)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/452c4010c07dc2e36fe6ec6a8c48298878e86887 "><code>452c401</code></a>
10.4.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/b6417e8b55c9525070d6e168b485ce6ff21688ed "><code>b6417e8</code></a>
Build: changelog update for 10.4.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/6616856f28fa514a30f87b5539fc100d739a94bf "><code>6616856</code></a>
chore: upgrade knip to v6 (<a
href="https://redirect.github.com/eslint/eslint/issues/20875 ">#20875</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d13b084a3ad02f926e9addaa35fc383759ea5554 "><code>d13b084</code></a>
ci: ensure auto-created PRs run CI (<a
href="https://redirect.github.com/eslint/eslint/issues/20860 ">#20860</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7e52a7151fb92eec0e0f67fe4e5ddbd1ccce796f "><code>7e52a71</code></a>
docs: add mention of <code>@eslint-react/eslint-plugin</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20869 ">#20869</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e71c7af86dce9acc1d18cb12d2184309f6841594 "><code>e71c7af</code></a>
ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (<a
href="https://redirect.github.com/eslint/eslint/issues/20862 ">#20862</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/544c0c3da589166ad8e5d634f35d3d06701c57be "><code>544c0c3</code></a>
fix: escape code path DOT labels in debug output (<a
href="https://redirect.github.com/eslint/eslint/issues/20866 ">#20866</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/db3468ba746407d7f286f18f7ea9db6df0e3bc08 "><code>db3468b</code></a>
docs: tweak wording around ambiguous CJS-vs-ESM config (<a
href="https://redirect.github.com/eslint/eslint/issues/20865 ">#20865</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d84393dea170f54191fd20c8268b52c81c0ccd99 "><code>d84393d</code></a>
test: add unit tests for SuppressionsService.applySuppressions() (<a
href="https://redirect.github.com/eslint/eslint/issues/20863 ">#20863</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/90846643ec6e97d447ae0d831fabe6d17b0a998a "><code>9084664</code></a>
docs: Update README</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.3.0...v10.4.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 23:39:59 +00:00
c999c008b4
chore(deps): Bump @codemirror/view from 6.42.1 to 6.43.0 ( #1891 )
...
Bumps [@codemirror/view](https://github.com/codemirror/view ) from 6.42.1
to 6.43.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-18 23:39:30 +00:00
00b20af1d9
feat(i18n): add Turkish language support and translations ( #1886 )
...
## Launch Checklist
<!-- Thanks for the PR! Feel free to add or remove items from the
checklist. -->
- [x] Briefly describe the changes in this PR.
- [x] Link to related issues.
- [x] Include before/after visuals or gifs if this PR includes visual
changes.
- [x] Write tests for all new functionality.
- [x] Add an entry to `CHANGELOG.md` under the `## main` section.
---------
Co-authored-by: Harel M <harel.mazor@gmail.com >
2026-05-17 07:26:05 +00:00
47a42b3e2f
chore(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 ( #1829 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from
6.3.0 to 6.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases ">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Dependency updates:</h3>
<ul>
<li>Upgrade <a
href="https://github.com/actions "><code>@actions</code></a>
dependencies by <a
href="https://github.com/Copilot "><code>@Copilot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1525 ">actions/setup-node#1525</a></li>
<li>Update Node.js versions in versions.yml and bump package to v6.4.0
by <a
href="https://github.com/priya-kinthali "><code>@priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1533 ">actions/setup-node#1533</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Copilot "><code>@Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1525 ">actions/setup-node#1525</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v6.4.0 ">https://github.com/actions/setup-node/compare/v6...v6.4.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e "><code>48b55a0</code></a>
Update Node.js versions in versions.yml and bump package to v6.4.0 (<a
href="https://redirect.github.com/actions/setup-node/issues/1533 ">#1533</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/ab72c7e7eba0eaa11f8cab0f5679243900c2cac9 "><code>ab72c7e</code></a>
Upgrade <a href="https://github.com/actions "><code>@actions</code></a>
dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1525 ">#1525</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 10:18:58 +03:00
2d418f2bda
chore(deps-dev): Bump typescript-eslint from 8.59.2 to 8.59.3 ( #1889 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.59.2 to 8.59.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.59.3</h2>
<h2>8.59.3 (2026-05-11)</h2>
<p>This was a version bump only, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.3 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.59.3 (2026-05-11)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.3 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/48e13c0261e3cb1bf4f4dfaa462cdb3a56ef7383 "><code>48e13c0</code></a>
chore(release): publish 8.59.3</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/44f9625336841a8ee3eb01a9e02e49b1d7b12648 "><code>44f9625</code></a>
chore(deps): update vitest monorepo to v4.1.5 (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12307 ">#12307</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.3/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 13:52:53 +00:00
54aaabb8cb
chore(deps-dev): Bump stylelint-scss from 7.1.0 to 7.1.1 ( #1888 )
...
Bumps [stylelint-scss](https://github.com/stylelint-scss/stylelint-scss )
from 7.1.0 to 7.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint-scss/stylelint-scss/releases ">stylelint-scss's
releases</a>.</em></p>
<blockquote>
<h2>7.1.1</h2>
<ul>
<li>Fixed: <code>operator-no-unspaced</code> CJS/ESM interop for
<code>postcss-media-query-parser</code> import for Bun compatibility (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1260 ">#1260</a>).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.0...v7.1.1 ">https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.0...v7.1.1 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint-scss/stylelint-scss/blob/master/CHANGELOG.md ">stylelint-scss's
changelog</a>.</em></p>
<blockquote>
<h1>7.1.1</h1>
<ul>
<li>Fixed: <code>operator-no-unspaced</code> CJS/ESM interop for
<code>postcss-media-query-parser</code> import for Bun compatibility (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1260 ">#1260</a>).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.0...v7.1.1 ">https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.0...v7.1.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/d4d7458d0d6eed6cc55cae9c0884c524085d839e "><code>d4d7458</code></a>
7.1.1</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/d8207db26cdf65548a75bb3e49e60e7a9929d3c2 "><code>d8207db</code></a>
Prepare version 7.1.1 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1285 ">#1285</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/801f766bd6b5facaab5ad0d3617131d213ebff2b "><code>801f766</code></a>
Fix CJS/ESM interop for postcss-media-query-parser import (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1260 ">#1260</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/b11563cc0ce8861300080f0a7facbd669d89b803 "><code>b11563c</code></a>
Update declaration-property-value-no-unknown README (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1284 ">#1284</a>)</li>
<li>See full diff in <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.1.0...v7.1.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 13:52:45 +00:00
f56896ca7a
chore(deps-dev): Bump the vitest group with 2 updates ( #1887 )
...
Bumps the vitest group with 2 updates:
[@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 )
and
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Updates `@vitest/coverage-v8` from 4.1.5 to 4.1.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">@vitest/coverage-v8's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.6</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Provide project reference in
<code>ToMatchScreenshotResolvePath</code> - by <a
href="https://github.com/macarie "><code>@macarie</code></a> and <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10138 ">vitest-dev/vitest#10138</a>
<a href="https://github.com/vitest-dev/vitest/commit/31882607c "><!-- raw
HTML omitted -->(31882)<!-- raw HTML omitted --></a></li>
<li>Global <code>sequence.concurrent: true</code> with top-level
<code>test(..., { concurrent: false })</code> + depreacte
<code>sequential</code> test API and options - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a>,
<strong>Codex</strong> and <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10196 ">vitest-dev/vitest#10196</a>
<a href="https://github.com/vitest-dev/vitest/commit/2847dfa2a "><!-- raw
HTML omitted -->(2847d)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>: Simplify orchestrator otel carrier - by
<a href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10285 ">vitest-dev/vitest#10285</a>
<a href="https://github.com/vitest-dev/vitest/commit/18af98cee "><!-- raw
HTML omitted -->(18af9)<!-- raw HTML omitted --></a></li>
</ul>
<h3> 🏎 Performance</h3>
<ul>
<li>Stringify diff objects only once - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10276 ">vitest-dev/vitest#10276</a>
<a href="https://github.com/vitest-dev/vitest/commit/9f7b1528c "><!-- raw
HTML omitted -->(9f7b1)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.5...v4.1.6 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a8fd24c1cad2320b19fcc651413c7d928423bdc1 "><code>a8fd24c</code></a>
chore: release v4.1.6</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vitest` from 4.1.5 to 4.1.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases ">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.6</h2>
<h3> 🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Provide project reference in
<code>ToMatchScreenshotResolvePath</code> - by <a
href="https://github.com/macarie "><code>@macarie</code></a> and <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10138 ">vitest-dev/vitest#10138</a>
<a href="https://github.com/vitest-dev/vitest/commit/31882607c "><!-- raw
HTML omitted -->(31882)<!-- raw HTML omitted --></a></li>
<li>Global <code>sequence.concurrent: true</code> with top-level
<code>test(..., { concurrent: false })</code> + depreacte
<code>sequential</code> test API and options - by <a
href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a>,
<strong>Codex</strong> and <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10196 ">vitest-dev/vitest#10196</a>
<a href="https://github.com/vitest-dev/vitest/commit/2847dfa2a "><!-- raw
HTML omitted -->(2847d)<!-- raw HTML omitted --></a></li>
<li><strong>browser</strong>: Simplify orchestrator otel carrier - by
<a href="https://github.com/hi-ogawa "><code>@hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10285 ">vitest-dev/vitest#10285</a>
<a href="https://github.com/vitest-dev/vitest/commit/18af98cee "><!-- raw
HTML omitted -->(18af9)<!-- raw HTML omitted --></a></li>
</ul>
<h3> 🏎 Performance</h3>
<ul>
<li>Stringify diff objects only once - by <a
href="https://github.com/sheremet-va "><code>@sheremet-va</code></a> in
<a
href="https://redirect.github.com/vitest-dev/vitest/issues/10276 ">vitest-dev/vitest#10276</a>
<a href="https://github.com/vitest-dev/vitest/commit/9f7b1528c "><!-- raw
HTML omitted -->(9f7b1)<!-- raw HTML omitted --></a></li>
</ul>
<h5> <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.5...v4.1.6 ">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/a8fd24c1cad2320b19fcc651413c7d928423bdc1 "><code>a8fd24c</code></a>
chore: release v4.1.6</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/18af98cee1830604d57f6a02bf28f8067cdffc06 "><code>18af98c</code></a>
fix(browser): simplify orchestrator otel carrier (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10285 ">#10285</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/31882607cc67c7bf52ead13a606321ffdb06a857 "><code>3188260</code></a>
feat(browser): provide project reference in
<code>ToMatchScreenshotResolvePath</code> (#...</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 13:52:01 +00:00
2684d9ca16
chore(deps-dev): Bump stylelint-scss from 7.0.0 to 7.1.0 ( #1885 )
...
Bumps [stylelint-scss](https://github.com/stylelint-scss/stylelint-scss )
from 7.0.0 to 7.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint-scss/stylelint-scss/releases ">stylelint-scss's
releases</a>.</em></p>
<blockquote>
<h2>7.1.0</h2>
<ul>
<li>Added: support for <code>postcss-scss</code> in
<code>declaration-nested-properties rule</code> (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1265 ">#1265</a>).</li>
<li>Added: support for <code>postcss-scss</code> in
<code>declaration-nested-properties-no-divided-groups</code> rule (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1263 ">#1263</a>).</li>
<li>Updated: <code>declaration-property-value-no-unknown</code> rule to
be in sync with the latest stylelint version (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1280 ">#1280</a>).</li>
<li>Updated: refactor <code>parseNestedPropRoot</code> utility for
performance and clarity (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1266 ">#1266</a>).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.0.0...v7.1.0 ">https://github.com/stylelint-scss/stylelint-scss/compare/v7.0.0...v7.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint-scss/stylelint-scss/blob/master/CHANGELOG.md ">stylelint-scss's
changelog</a>.</em></p>
<blockquote>
<h1>7.1.0</h1>
<ul>
<li>Added: support for <code>postcss-scss</code> in
<code>declaration-nested-properties rule</code> (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1265 ">#1265</a>).</li>
<li>Added: support for <code>postcss-scss</code> in
<code>declaration-nested-properties-no-divided-groups</code> rule (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1263 ">#1263</a>).</li>
<li>Updated: <code>declaration-property-value-no-unknown</code> rule to
be in sync with the latest stylelint version (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1280 ">#1280</a>).</li>
<li>Updated: refactor <code>parseNestedPropRoot</code> utility for
performance and clarity (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1266 ">#1266</a>).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.0.0...v7.1.0 ">https://github.com/stylelint-scss/stylelint-scss/compare/v7.0.0...v7.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/7834e6723a872603a9de1108bbaf3c7687298b78 "><code>7834e67</code></a>
7.1.0</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/fd3575fe58165aa79ad25530378350108514510f "><code>fd3575f</code></a>
Prepare version 7.1.0 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1283 ">#1283</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/dac6f14e7cb5650185d393a76e7dfad00d760d25 "><code>dac6f14</code></a>
Update contributors list (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1282 ">#1282</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/87da95ec877d17dc8caae61fcdcbae3a910d52f2 "><code>87da95e</code></a>
build(deps-dev): bump stylelint from 17.9.1 to 17.10.0 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1281 ">#1281</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/608192d68e53cbdc2ae32d825c886b5d86a1f5a1 "><code>608192d</code></a>
Update declaration-property-value-no-unknown to be in sync with
stylelint (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1 ">#1</a>...</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/4caa54dd4c98cef4cc437e89c5519f137573f9c2 "><code>4caa54d</code></a>
build(deps-dev): bump eslint from 10.2.1 to 10.3.0 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1279 ">#1279</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/6d9d6b0c55ad7d0c0f318519e2a4f758fd2fbc82 "><code>6d9d6b0</code></a>
build(deps): bump fast-uri from 3.1.0 to 3.1.2 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1278 ">#1278</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/1c799be412720596c893bec95e00f6efe947a0e0 "><code>1c799be</code></a>
build(deps-dev): bump stylelint from 17.6.0 to 17.9.1 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1277 ">#1277</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/dfc462cf3af67693dc20708efdb2875fadf1c928 "><code>dfc462c</code></a>
build(deps-dev): bump prettier from 3.8.1 to 3.8.3 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1276 ">#1276</a>)</li>
<li><a
href="https://github.com/stylelint-scss/stylelint-scss/commit/92df09a8f0f6fe06cd971ad3a9a10e1f49090cee "><code>92df09a</code></a>
build(deps-dev): bump lint-staged from 16.3.2 to 16.4.0 (<a
href="https://redirect.github.com/stylelint-scss/stylelint-scss/issues/1275 ">#1275</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint-scss/stylelint-scss/compare/v7.0.0...v7.1.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 13:51:57 +00:00
e7d195c84d
chore(deps): Bump i18next from 26.0.10 to 26.1.0 ( #1883 )
...
Bumps [i18next](https://github.com/i18next/i18next ) from 26.0.10 to
26.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.1.0</h2>
<ul>
<li>feat: <code>enableSelector: 'strict'</code> (TypeOptions + runtime
option). Opt-in mode that drops the flattened-primary form from
<code>NsResource</code> at the type level — every namespace (primary
included) is exposed only under its own key on <code>$</code>, uniformly
across single- and multi-ns hooks. At runtime, a leading selector path
segment matching the scope's namespace list is always rewritten as a
namespace prefix, including the primary. Eliminates the silent-miss
surface area where <code>t($ => $.primary.foo)</code> typechecks but
doesn't resolve under the default mode (see <a
href="https://redirect.github.com/i18next/i18next/issues/2429 ">#2429</a>).
Backward-compatible: default <code>enableSelector: false | true |
'optimize'</code> behavior is unchanged. Note: strict mode is
incompatible with the <a
href="https://redirect.github.com/i18next/i18next/issues/2405 ">#2405</a>
pattern (keys whose names match sibling namespaces) — those users should
stay on default mode.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.1.0</h2>
<ul>
<li>feat: <code>enableSelector: 'strict'</code> (TypeOptions + runtime
option). Opt-in mode that drops the flattened-primary form from
<code>NsResource</code> at the type level — every namespace (primary
included) is exposed only under its own key on <code>$</code>, uniformly
across single- and multi-ns hooks. At runtime, a leading selector path
segment matching the scope's namespace list is always rewritten as a
namespace prefix, including the primary. Eliminates the silent-miss
surface area where <code>t($ => $.primary.foo)</code> typechecks but
doesn't resolve under the default mode (see <a
href="https://redirect.github.com/i18next/i18next/issues/2429 ">#2429</a>).
Backward-compatible: default <code>enableSelector: false | true |
'optimize'</code> behavior is unchanged. Note: strict mode is
incompatible with the <a
href="https://redirect.github.com/i18next/i18next/issues/2405 ">#2405</a>
pattern (keys whose names match sibling namespaces) — those users should
stay on default mode.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/5af047552bf34622e1aa0aa322997fe0bde0795d "><code>5af0475</code></a>
26.1.0</li>
<li><a
href="https://github.com/i18next/i18next/commit/85c0951550923806b8cb4a21c9cb0f077a6eab1f "><code>85c0951</code></a>
feat: enableSelector: 'strict' — explicit-ns selector mode, no flattened
prim...</li>
<li><a
href="https://github.com/i18next/i18next/commit/8fec684b4e56ccd6b02a364e1b6c2e992bcbd4ee "><code>8fec684</code></a>
docs(types): clarify ExistsFunction note re: narrowing through
wrappers</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.0.10...v26.1.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 13:51:27 +00:00
ef0651204d
chore(deps): Bump systeminformation from 5.31.1 to 5.31.6 ( #1882 )
...
Bumps
[systeminformation](https://github.com/sebhildebrandt/systeminformation )
from 5.31.1 to 5.31.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sebhildebrandt/systeminformation/releases ">systeminformation's
releases</a>.</em></p>
<blockquote>
<h2>v5.31.6</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sebhildebrandt/systeminformation/compare/v5.31.5...v5.31.6 ">https://github.com/sebhildebrandt/systeminformation/compare/v5.31.5...v5.31.6 </a></p>
<h2>v5.31.5</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sebhildebrandt/systeminformation/compare/v5.31.4...v5.31.5 ">https://github.com/sebhildebrandt/systeminformation/compare/v5.31.4...v5.31.5 </a></p>
<h2>v5.31.4</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sebhildebrandt/systeminformation/compare/v5.31.3...v5.31.4 ">https://github.com/sebhildebrandt/systeminformation/compare/v5.31.3...v5.31.4 </a></p>
<h2>v5.31.3</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sebhildebrandt/systeminformation/compare/v5.31.2...v5.31.3 ">https://github.com/sebhildebrandt/systeminformation/compare/v5.31.2...v5.31.3 </a></p>
<h2>v5.31.2</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sebhildebrandt/systeminformation/compare/v5.31.1...v5.31.2 ">https://github.com/sebhildebrandt/systeminformation/compare/v5.31.1...v5.31.2 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md ">systeminformation's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>Major Changes - Version 5</h2>
<h4>New Functions</h4>
<ul>
<li><code>audio()</code> detailed audio information</li>
<li><code>bluetoothDevices()</code> detailed information detected
bluetooth devices</li>
<li><code>dockerImages()</code> detailed information docker images</li>
<li><code>dockerVolumes()</code> detailed information docker
volumes</li>
<li><code>printers()</code> detailed printer information</li>
<li><code>usb()</code> detailed USB information</li>
<li><code>wifiInterfaces()</code> detected Wi-Fi interfaces</li>
<li><code>wifiConnections()</code> active Wi-Fi connections</li>
</ul>
<h4>Breaking Changes</h4>
<p><strong>Be aware</strong>, that the new version 5.x <strong>is NOT
fully backward compatible</strong> to
version 4.x ...</p>
<p>We had to make <strong>several interface changes</strong> to keep
systeminformation as
consistent as possible. We highly
<a href="https://systeminformation.io/changes.html ">recommend to go
through the complete list</a>
and adapt your own code to be again compatible to the new version 5.</p>
<table>
<thead>
<tr>
<th>Function</th>
<th>Old</th>
<th>New (V5)</th>
<th>Comments</th>
</tr>
</thead>
<tbody>
<tr>
<td>unsupported values</td>
<td>-1</td>
<td>null</td>
<td>values which are unknown or<!-- raw HTML omitted -->unsupported on
platform</td>
</tr>
<tr>
<td><code>battery()</code></td>
<td>hasbattery<!-- raw HTML omitted -->cyclecount<!-- raw HTML omitted
-->ischarging<!-- raw HTML omitted -->designedcapacity<!-- raw HTML
omitted -->maxcapacity<!-- raw HTML omitted -->acconnected<!-- raw HTML
omitted -->timeremaining</td>
<td>hasBattery<!-- raw HTML omitted -->cycleCount<!-- raw HTML omitted
-->isCharging<!-- raw HTML omitted -->designedCapacity<!-- raw HTML
omitted -->maxCapacity<!-- raw HTML omitted -->acConnected<!-- raw HTML
omitted -->timeRemaining</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>blockDevices()</code></td>
<td>fstype</td>
<td>fsType</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>cpu()</code></td>
<td>speedmin<!-- raw HTML omitted -->speedmax</td>
<td>speedMin<!-- raw HTML omitted -->speedMax</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>cpu().speed</code><!-- raw HTML omitted
--><code>cpu().speedMin</code><!-- raw HTML omitted
--><code>cpu().speedMax</code></td>
<td>string values</td>
<td>now returning<!-- raw HTML omitted -->numerical values</td>
<td>better value handling</td>
</tr>
<tr>
<td><code>cpuCurrentspeed()</code></td>
<td></td>
<td>cpuCurrentSpeed()</td>
<td>function name changed<!-- raw HTML omitted -->pascalCase
conformity</td>
</tr>
<tr>
<td><code>currentLoad()</code></td>
<td>avgload<!-- raw HTML omitted -->currentload<!-- raw HTML omitted
-->currentload_user<!-- raw HTML omitted -->currentload_system<!-- raw
HTML omitted -->currentload_nice<!-- raw HTML omitted
-->currentload_idle<!-- raw HTML omitted -->currentload_irq<!-- raw HTML
omitted -->raw_currentload</td>
<td>avgLoad<!-- raw HTML omitted -->currentLoad<!-- raw HTML omitted
-->currentLoadUser<!-- raw HTML omitted -->currentLoadSystem<!-- raw
HTML omitted -->currentLoadNice<!-- raw HTML omitted
-->currentLoadIdle<!-- raw HTML omitted -->currentLoadIrq<!-- raw HTML
omitted -->rawCurrentLoad</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>dockerContainerStats()</code></td>
<td>mem_usage<!-- raw HTML omitted -->mem_limit<!-- raw HTML omitted
-->mem_percent<!-- raw HTML omitted -->cpu_percent<!-- raw HTML omitted
-->cpu_stats<!-- raw HTML omitted -->precpu_stats<!-- raw HTML omitted
-->memory_stats</td>
<td>memUsage<!-- raw HTML omitted -->memLimit<!-- raw HTML omitted
-->memPercent<!-- raw HTML omitted -->cpuPercent<!-- raw HTML omitted
-->cpuStats<!-- raw HTML omitted -->precpuStats<!-- raw HTML omitted
-->memoryStats</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>dockerContainerProcesses()</code></td>
<td>pid_host</td>
<td>pidHost</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>graphics().display</code></td>
<td>pixeldepth<!-- raw HTML omitted -->resolutionx<!-- raw HTML omitted
-->resolutiony<!-- raw HTML omitted -->sizex<!-- raw HTML omitted
-->sizey</td>
<td>pixelDepth<!-- raw HTML omitted -->resolutionX<!-- raw HTML omitted
-->resolutionY<!-- raw HTML omitted -->sizeX<!-- raw HTML omitted
-->sizeY</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>networkConnections()</code></td>
<td>localaddress<!-- raw HTML omitted -->localport<!-- raw HTML omitted
-->peeraddress<!-- raw HTML omitted -->peerport</td>
<td>localAddress<!-- raw HTML omitted -->localPort<!-- raw HTML omitted
-->peerAddress<!-- raw HTML omitted -->peerPort</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>networkInterfaces()</code></td>
<td>carrier_changes</td>
<td>carrierChanges</td>
<td>pascalCase conformity</td>
</tr>
<tr>
<td><code>processes()</code></td>
<td>mem_vsz<!-- raw HTML omitted -->mem_rss<!-- raw HTML omitted
-->pcpu<!-- raw HTML omitted -->pcpuu<!-- raw HTML omitted -->pcpus<!--
raw HTML omitted -->pmem</td>
<td>memVsz<!-- raw HTML omitted -->memRss<!-- raw HTML omitted
-->cpu<!-- raw HTML omitted -->cpuu<!-- raw HTML omitted -->cpus<!-- raw
HTML omitted -->mem</td>
<td>pascalCase conformity<!-- raw HTML omitted -->renamed
attributes</td>
</tr>
<tr>
<td><code>processLoad()</code></td>
<td>result as object</td>
<td>result as array of objects</td>
<td>function now allows to provide more than<!-- raw HTML omitted -->one
process (as a comma separated list)</td>
</tr>
<tr>
<td><code>services()</code></td>
<td>pcpu<!-- raw HTML omitted -->pmem</td>
<td>cpu<!-- raw HTML omitted -->mem</td>
<td>renamed attributes</td>
</tr>
<tr>
<td><code>vbox()</code></td>
<td>HPET<!-- raw HTML omitted -->PAE<!-- raw HTML omitted -->APIC<!--
raw HTML omitted -->X2APIC<!-- raw HTML omitted -->ACPI<!-- raw HTML
omitted -->IOAPIC<!-- raw HTML omitted -->biosAPICmode<!-- raw HTML
omitted -->TRC</td>
<td>hpet<!-- raw HTML omitted -->pae<!-- raw HTML omitted -->apic<!--
raw HTML omitted -->x2Apic<!-- raw HTML omitted -->acpi<!-- raw HTML
omitted -->ioApic<!-- raw HTML omitted -->biosApicMode<!-- raw HTML
omitted -->rtc</td>
<td>pascalCase conformity</td>
</tr>
</tbody>
</table>
<h4>Other Improvements and Changes</h4>
<ul>
<li><code>baseboard()</code>: added memMax, memSlots</li>
<li><code>bios()</code>: added language and features (linux)</li>
<li><code>blockDevices()</code> added raid group member (linux)</li>
<li><code>cpu()</code>: extended AMD processor list</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/da1cbf5eb09907cf5c3431f4c9ea441b7a227617 "><code>da1cbf5</code></a>
5.31.6</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/87dbb60f98dd39452bda211da0b6c63e4a7db898 "><code>87dbb60</code></a>
fix: smaller issues</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/1d1bddf81267a3726b1200fa05ebe04b749f8d64 "><code>1d1bddf</code></a>
fix: smaller issues</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/f69576f8da71571a988e7f430b068952c141bea9 "><code>f69576f</code></a>
fix: networkInterfaces() ci wip</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/78624d1567d0410b3b6781caaf2441c4c32a810c "><code>78624d1</code></a>
fix: networkInterfaces() ci</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/ed1cac537c59763301d802ad1b55b4b8581e7553 "><code>ed1cac5</code></a>
5.31.5</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/4dd5aa91492ee4953109135dabab9adbedb9df8e "><code>4dd5aa9</code></a>
netStats() netstat command adaption (mac OS)</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/59360e6e2a4ffd6b02d868716b3091e469be9264 "><code>59360e6</code></a>
5.31.4</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/3ef3f3befc0218c0ac4cdc975ed328f7e5318867 "><code>3ef3f3b</code></a>
diskLayout() USB tahoe compatibility (mac OS)</li>
<li><a
href="https://github.com/sebhildebrandt/systeminformation/commit/8edd13034fe729481cefc264ea20bb033a1a31be "><code>8edd130</code></a>
5.31.3</li>
<li>Additional commits viewable in <a
href="https://github.com/sebhildebrandt/systeminformation/compare/v5.31.1...v5.31.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 00:49:48 +00:00
3d061882f3
Add react group to Dependabot configuration ( #1879 )
...
## Launch Checklist
This groups react dependencies together so that they will pass the
build.
- [x] Briefly describe the changes in this PR.
2026-05-12 15:54:36 +03:00
d393e19d46
chore(deps): Bump ncipollo/release-action from 1.20.0 to 1.21.0 ( #1722 )
...
Bumps
[ncipollo/release-action](https://github.com/ncipollo/release-action )
from 1.20.0 to 1.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ncipollo/release-action/releases ">ncipollo/release-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.21.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump jest-circus from 29.7.0 to 30.2.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/557 ">ncipollo/release-action#557</a></li>
<li>Bump typescript from 5.8.3 to 5.9.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/556 ">ncipollo/release-action#556</a></li>
<li>Bump actions/setup-node from 4 to 5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/551 ">ncipollo/release-action#551</a></li>
<li>Bump <code>@types/node</code> from 22.15.29 to 24.6.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/555 ">ncipollo/release-action#555</a></li>
<li>Bump actions/setup-node from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/559 ">ncipollo/release-action#559</a></li>
<li>Bump ts-jest from 29.3.4 to 29.4.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/561 ">ncipollo/release-action#561</a></li>
<li>Bump <code>@biomejs/biome</code> from 1.9.4 to 2.3.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/564 ">ncipollo/release-action#564</a></li>
<li>Bump <code>@types/node</code> from 24.6.1 to 24.9.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/563 ">ncipollo/release-action#563</a></li>
<li>Bump js-yaml from 3.14.1 to 3.14.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/567 ">ncipollo/release-action#567</a></li>
<li>Bump glob from 11.0.3 to 11.1.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/568 ">ncipollo/release-action#568</a></li>
<li>Bump actions/checkout from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/569 ">ncipollo/release-action#569</a></li>
<li>Bump <code>@biomejs/biome</code> from 2.3.2 to 2.3.8 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/575 ">ncipollo/release-action#575</a></li>
<li>Bump glob from 11.1.0 to 13.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/573 ">ncipollo/release-action#573</a></li>
<li>Bump <code>@octokit/types</code> from 13.10.0 to 16.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/577 ">ncipollo/release-action#577</a></li>
<li>Bump <code>@biomejs/biome</code> from 2.3.8 to 2.3.10 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/578 ">ncipollo/release-action#578</a></li>
<li>Bump <code>@actions/core</code> from 1.11.1 to 2.0.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/579 ">ncipollo/release-action#579</a></li>
<li>Bump <code>@types/node</code> from 24.10.1 to 25.0.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/580 ">ncipollo/release-action#580</a></li>
<li>Bump <code>@biomejs/biome</code> from 2.3.10 to 2.3.13 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/586 ">ncipollo/release-action#586</a></li>
<li>Bump <code>@types/node</code> from 25.0.3 to 25.1.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/583 ">ncipollo/release-action#583</a></li>
<li>Bump to core-3.0.0, move to vitest, support ESM modules by <a
href="https://github.com/ncipollo "><code>@ncipollo</code></a> in <a
href="https://redirect.github.com/ncipollo/release-action/pull/587 ">ncipollo/release-action#587</a></li>
<li>Bump <code>@actions/github</code> from 6.0.1 to 9.0.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/585 ">ncipollo/release-action#585</a></li>
<li>Bump glob from 13.0.0 to 13.0.6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/592 ">ncipollo/release-action#592</a></li>
<li>Bump <code>@biomejs/biome</code> from 2.3.13 to 2.4.4 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/ncipollo/release-action/pull/591 ">ncipollo/release-action#591</a></li>
<li>Fixes <a
href="https://redirect.github.com/ncipollo/release-action/issues/593 ">#593</a>
Pass commitish into release notes request when present by <a
href="https://github.com/ncipollo "><code>@ncipollo</code></a> in <a
href="https://redirect.github.com/ncipollo/release-action/pull/594 ">ncipollo/release-action#594</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ncipollo/release-action/compare/v1...v1.21.0 ">https://github.com/ncipollo/release-action/compare/v1...v1.21.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ncipollo/release-action/commit/339a81892b84b4eeb0f6e744e4574d79d0d9b8dd "><code>339a818</code></a>
preparing release 1.21.0</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/df172335574c196a8b2bd986fd39e686bbe7e4d6 "><code>df17233</code></a>
Resolve pnpm audit results</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/813e94245931b11c412f933d6fd5a9fd47043555 "><code>813e942</code></a>
Update release script</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/7df3a0e74942335847f3d882f61b7cd0fdac6942 "><code>7df3a0e</code></a>
Update sheepit to use pnpm</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/caacf56b56ba217c4eaf0a9deb59dbcdd12abfcd "><code>caacf56</code></a>
Fixes <a
href="https://redirect.github.com/ncipollo/release-action/issues/595 ">#595</a>
Bump to node 24</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/c074b5e19fd155e5f9800d3c3284f1b6298aa41f "><code>c074b5e</code></a>
Fixes <a
href="https://redirect.github.com/ncipollo/release-action/issues/593 ">#593</a>
Pass commitish into release notes request when present (<a
href="https://redirect.github.com/ncipollo/release-action/issues/594 ">#594</a>)</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/9e0366240f9b5d12cdd6a1237b070a31c8484b12 "><code>9e03662</code></a>
Bump <code>@biomejs/biome</code> from 2.3.13 to 2.4.4 (<a
href="https://redirect.github.com/ncipollo/release-action/issues/591 ">#591</a>)</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/5b4b1954b0af460493d725e2d6ab001a3fbb0455 "><code>5b4b195</code></a>
Bump glob from 13.0.0 to 13.0.6 (<a
href="https://redirect.github.com/ncipollo/release-action/issues/592 ">#592</a>)</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/89bab4d0a786b1d8c582ff85606edc1d68164af5 "><code>89bab4d</code></a>
debug build</li>
<li><a
href="https://github.com/ncipollo/release-action/commit/00cbfdc96043eb37dba8ad7a881b913586e97afa "><code>00cbfdc</code></a>
Bump <code>@actions/github</code> from 6.0.1 to 9.0.0 (<a
href="https://redirect.github.com/ncipollo/release-action/issues/585 ">#585</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ncipollo/release-action/compare/b7eabc95ff50cbeeedec83973935c8f306dfcd0b...339a81892b84b4eeb0f6e744e4574d79d0d9b8dd ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-12 12:41:26 +00:00
775634e1be
chore(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 ( #1878 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action )
from 4.35.3 to 4.35.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.35.4</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4 ">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881 ">#3881</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4 ">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881 ">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795 ">#3795</a></li>
<li>The Git version 2.36.0 requirement for improved incremental analysis
now only applies to repositories that contain submodules. <a
href="https://redirect.github.com/github/codeql-action/pull/3789 ">#3789</a></li>
<li>Python analysis on GHES no longer extracts the standard library,
relying instead on models of the standard library. This should result in
significantly faster extraction and analysis times, while the effect on
alerts should be minimal. <a
href="https://redirect.github.com/github/codeql-action/pull/3794 ">#3794</a></li>
<li>Fixed a bug in the validation of OIDC configurations for private
registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3807 ">#3807</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2 ">2.25.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3823 ">#3823</a></li>
</ul>
<h2>4.35.1 - 27 Mar 2026</h2>
<ul>
<li>Fix incorrect minimum required Git version for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3781 ">#3781</a></li>
</ul>
<h2>4.35.0 - 27 Mar 2026</h2>
<ul>
<li>Reduced the minimum Git version required for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> from 2.38.0 to 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3767 ">#3767</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1 ">2.25.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3773 ">#3773</a></li>
</ul>
<h2>4.34.1 - 20 Mar 2026</h2>
<ul>
<li>Downgrade default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3 ">2.24.3</a>
due to issues with a small percentage of Actions and JavaScript
analyses. <a
href="https://redirect.github.com/github/codeql-action/pull/3762 ">#3762</a></li>
</ul>
<h2>4.34.0 - 20 Mar 2026</h2>
<ul>
<li>Added an experimental change which disables TRAP caching when <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> is enabled, since improved incremental analysis
supersedes TRAP caching. This will improve performance and reduce
Actions cache usage. We expect to roll this change out to everyone in
March. <a
href="https://redirect.github.com/github/codeql-action/pull/3569 ">#3569</a></li>
<li>We are rolling out improved incremental analysis to C/C++ analyses
that use build mode <code>none</code>. We expect this rollout to be
complete by the end of April 2026. <a
href="https://redirect.github.com/github/codeql-action/pull/3584 ">#3584</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0 ">2.25.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3585 ">#3585</a></li>
</ul>
<h2>4.33.0 - 16 Mar 2026</h2>
<ul>
<li>Upcoming change: Starting April 2026, the CodeQL Action will skip
collecting file coverage information on pull requests to improve
analysis performance. File coverage information will still be computed
on non-PR analyses. Pull request analyses will log a warning about this
upcoming change. <a
href="https://redirect.github.com/github/codeql-action/pull/3562 ">#3562</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/68bde559dea0fdcac2102bfdf6230c5f70eb485e "><code>68bde55</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3885 ">#3885</a>
from github/update-v4.35.4-803d9e8c3</li>
<li><a
href="https://github.com/github/codeql-action/commit/9739ad2d182c072da0d01a6887f7f39620f71b1e "><code>9739ad2</code></a>
Update changelog for v4.35.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/803d9e8c3ca8b0dd2029a1da3b541a18b6bfb076 "><code>803d9e8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3883 ">#3883</a>
from github/mbg/test/macro-wrapper</li>
<li><a
href="https://github.com/github/codeql-action/commit/0fd9c7d1358a7404e46ed8165f12262f56bd1434 "><code>0fd9c7d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3882 ">#3882</a>
from github/dependabot/github_actions/dot-github/wor...</li>
<li><a
href="https://github.com/github/codeql-action/commit/922d6fb888d665134eb982b150b8912dbd48e21a "><code>922d6fb</code></a>
Use <code>makeMacro</code> instead of <code>test.macro</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/df77e87896689b5c736433984c5df14d86c63d56 "><code>df77e87</code></a>
Update test macro snippet</li>
<li><a
href="https://github.com/github/codeql-action/commit/6e3f985e4fc409a188c7701b68c4dec158c9ced3 "><code>6e3f985</code></a>
Add wrapper for <code>test.macro</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/e7a347dfb1bfb7a858347623fcb4f650effca6b5 "><code>e7a347d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3881 ">#3881</a>
from github/update-bundle/codeql-bundle-v2.25.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/17eabb2500031486a71e00ecbcb72c73804a6c9f "><code>17eabb2</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/aaef09c48db2dd7f0100363de1785963a34cd706 "><code>aaef09c</code></a>
Bump ruby/setup-ruby</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/e46ed2cbd01164d986452f91f178727624ae40d7...68bde559dea0fdcac2102bfdf6230c5f70eb485e ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 21:42:56 +00:00
e0ca04f07f
chore(deps): Bump i18next from 26.0.8 to 26.0.10 ( #1876 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps [i18next](https://github.com/i18next/i18next ) from 26.0.8 to
26.0.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases ">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.0.10</h2>
<ul>
<li>feat: <code>getFixedT</code> accepts a fourth optional
<code>fixedOpts</code> argument carrying <code>scopeNs</code> — the full
namespace list the bound <code>t</code> was created for. The selector
API uses <code>scopeNs</code> to detect when a path's first segment is a
namespace prefix, <strong>without</strong> changing resolution scope.
Resolution still uses the bound <code>ns</code> (a single primary string
in the typical react-i18next setup), so plain <code>t('key')</code>
lookups stay isolated to the primary namespace exactly as before — only
<code>t($ => $.secondaryNs.foo)</code> selectors now route correctly
under <code>useTranslation([nsA, nsB])</code>. Fixes the runtime side of
<a
href="https://redirect.github.com/i18next/i18next/issues/2429 ">#2429</a>
for the <code>react-i18next</code> default-<code>nsMode</code> case. The
4th argument is opt-in: existing 3-arg <code>getFixedT(lng, ns,
keyPrefix)</code> callers see no behavior change.</li>
</ul>
<h2>v26.0.9</h2>
<ul>
<li>fix(types): unformatted interpolation values are now typed as
<code>string | number</code> (was <code>string</code>). i18next
stringifies values at runtime, so requiring callers to wrap numbers in
<code>String(...)</code> for plain <code>{{var}}</code> placeholders was
unnecessary friction — and could mask the real problem when a non-string
value was passed alongside multiple interpolation slots (the
<code>t()</code> overload resolution would fall through to the 3-arg
form and report a confusing "not assignable to string" error
against the options object). Typed format specifiers like <code>{{x,
number}}</code>, <code>{{x, currency}}</code>, <code>{{x,
datetime}}</code>, etc. keep their precise types; this only relaxes the
no-format default. The <code>count</code> variable remains
<code>number</code>-only</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md ">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.0.10</h2>
<ul>
<li>feat: <code>getFixedT</code> accepts a fourth optional
<code>fixedOpts</code> argument carrying <code>scopeNs</code> — the full
namespace list the bound <code>t</code> was created for. The selector
API uses <code>scopeNs</code> to detect when a path's first segment is a
namespace prefix, <strong>without</strong> changing resolution scope.
Resolution still uses the bound <code>ns</code> (a single primary string
in the typical react-i18next setup), so plain <code>t('key')</code>
lookups stay isolated to the primary namespace exactly as before — only
<code>t($ => $.secondaryNs.foo)</code> selectors now route correctly
under <code>useTranslation([nsA, nsB])</code>. Fixes the runtime side of
<a
href="https://redirect.github.com/i18next/i18next/issues/2429 ">#2429</a>
for the <code>react-i18next</code> default-<code>nsMode</code> case. The
4th argument is opt-in: existing 3-arg <code>getFixedT(lng, ns,
keyPrefix)</code> callers see no behavior change.</li>
</ul>
<h2>26.0.9</h2>
<ul>
<li>fix(types): unformatted interpolation values are now typed as
<code>string | number</code> (was <code>string</code>). i18next
stringifies values at runtime, so requiring callers to wrap numbers in
<code>String(...)</code> for plain <code>{{var}}</code> placeholders was
unnecessary friction — and could mask the real problem when a non-string
value was passed alongside multiple interpolation slots (the
<code>t()</code> overload resolution would fall through to the 3-arg
form and report a confusing "not assignable to string" error
against the options object). Typed format specifiers like <code>{{x,
number}}</code>, <code>{{x, currency}}</code>, <code>{{x,
datetime}}</code>, etc. keep their precise types; this only relaxes the
no-format default. The <code>count</code> variable remains
<code>number</code>-only</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/61eaf5be1025f91ec75beb2674e14c9bd94e5a33 "><code>61eaf5b</code></a>
26.0.10</li>
<li><a
href="https://github.com/i18next/i18next/commit/47fd92f8aaa6c403b521f1b39e46e060b62e8855 "><code>47fd92f</code></a>
feat: getFixedT 4th-arg scopeNs decouples selector ns-detection from
resoluti...</li>
<li><a
href="https://github.com/i18next/i18next/commit/caf33f61963e634a73baba735157ac50a9a282e5 "><code>caf33f6</code></a>
26.0.9</li>
<li><a
href="https://github.com/i18next/i18next/commit/eed0146d959f1f283a9a260a3ddb9e773bcb678c "><code>eed0146</code></a>
fix(types): relax unformatted interpolation values to <code>string |
number</code></li>
<li><a
href="https://github.com/i18next/i18next/commit/170fb0a9e40f0e0d4b1d7f2056a4b1efe253325f "><code>170fb0a</code></a>
Modernize locize.com URLs and refresh UTM tags</li>
<li>See full diff in <a
href="https://github.com/i18next/i18next/compare/v26.0.8...v26.0.10 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 21:41:22 +00:00
ec12a2153e
chore(deps): Bump react-i18next from 17.0.6 to 17.0.7 ( #1873 )
...
Bumps [react-i18next](https://github.com/i18next/react-i18next ) from
17.0.6 to 17.0.7.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md ">react-i18next's
changelog</a>.</em></p>
<blockquote>
<h2>17.0.7</h2>
<ul>
<li>feat: <code>useTranslation([nsA, nsB, ...])</code> now passes its
full namespace list to <code>getFixedT</code> via the new
<code>scopeNs</code> opt (requires <code>i18next</code> ≥ v26.0.10).
This makes selector calls with a secondary-namespace prefix resolve
correctly under default <code>nsMode</code>: <code>t($ =>
$.nsB.foo)</code> previously missed silently because the bound
<code>ns</code> was the primary string only and i18next's selector
rewrite needed an array. Resolution semantics are unchanged — plain
<code>t('key')</code> lookups still stay isolated to the primary
namespace by default; use <code>nsMode: 'fallback'</code> to opt into
multi-ns fallback resolution as before. Fixes <a
href="https://redirect.github.com/i18next/i18next/issues/2429 ">i18next#2429</a>
for <code>useTranslation</code>-based callers.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/react-i18next/commit/5e892a27a78b243b5c2eb3691da76ea1daa41b65 "><code>5e892a2</code></a>
17.0.7</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/c8f4c6b564d8c03526ced9eac1d5cc34a49c49b1 "><code>c8f4c6b</code></a>
feat: useTranslation([nsA,nsB]) routes selector secondary-ns prefix via
getFi...</li>
<li><a
href="https://github.com/i18next/react-i18next/commit/084f9a650b371b520dce17781e6b2d885b316955 "><code>084f9a6</code></a>
Modernize locize.com URLs and refresh UTM tags</li>
<li>See full diff in <a
href="https://github.com/i18next/react-i18next/compare/v17.0.6...v17.0.7 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 21:40:37 +00:00
50dbdd6714
chore(deps): Bump @codemirror/view from 6.41.1 to 6.42.1 ( #1871 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps [@codemirror/view](https://github.com/codemirror/view ) from 6.41.1
to 6.42.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/view/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 21:40:25 +00:00
927fdd9942
chore(deps): Bump @codemirror/lint from 6.9.5 to 6.9.6 ( #1872 )
...
Bumps [@codemirror/lint](https://github.com/codemirror/lint ) from 6.9.5
to 6.9.6.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/codemirror/lint/commits ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 21:40:08 +00:00
7f9c7d29f2
chore(deps): Bump fast-uri from 3.1.0 to 3.1.2 ( #1869 )
...
Bumps [fast-uri](https://github.com/fastify/fast-uri ) from 3.1.0 to
3.1.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases ">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.2</h2>
<h2>⚠️ Security Release</h2>
<ul>
<li>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc ">https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc </a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Handle malformed fragment decoding as a parse error by <a
href="https://github.com/mcollina "><code>@mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/171 ">fastify/fast-uri#171</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.1...v3.1.2 ">https://github.com/fastify/fast-uri/compare/v3.1.1...v3.1.2 </a></p>
<h2>v3.1.1</h2>
<h2>⚠️ Security Release</h2>
<ul>
<li>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6 ">https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6 </a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/148 ">fastify/fast-uri#148</a></li>
<li>build(deps): bump actions/checkout from 4 to 5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/149 ">fastify/fast-uri#149</a></li>
<li>chore(.npmrc): ignore scripts by <a
href="https://github.com/Fdawgs "><code>@Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/150 ">fastify/fast-uri#150</a></li>
<li>build(deps-dev): remove <code>@fastify/pre-commit</code> by <a
href="https://github.com/Fdawgs "><code>@Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/151 ">fastify/fast-uri#151</a></li>
<li>build(deps): bump actions/setup-node from 4 to 5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/152 ">fastify/fast-uri#152</a></li>
<li>ci(ci): add concurrency config by <a
href="https://github.com/Fdawgs "><code>@Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/153 ">fastify/fast-uri#153</a></li>
<li>build(deps): bump actions/setup-node from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/154 ">fastify/fast-uri#154</a></li>
<li>build(deps): bump actions/checkout from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/156 ">fastify/fast-uri#156</a></li>
<li>chore(license): standardise license notice by <a
href="https://github.com/Fdawgs "><code>@Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/159 ">fastify/fast-uri#159</a></li>
<li>style: remove trailing whitespace by <a
href="https://github.com/Fdawgs "><code>@Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/161 ">fastify/fast-uri#161</a></li>
<li>ci: remove unused github files by <a
href="https://github.com/Tony133 "><code>@Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/162 ">fastify/fast-uri#162</a></li>
<li>chore: update readme by <a
href="https://github.com/Tony133 "><code>@Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/164 ">fastify/fast-uri#164</a></li>
<li>build(deps): bump
fastify/workflows/.github/workflows/plugins-ci-package-manager.yml from
5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/165 ">fastify/fast-uri#165</a></li>
<li>build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml
from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/166 ">fastify/fast-uri#166</a></li>
<li>build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fast-uri/pull/167 ">fastify/fast-uri#167</a></li>
<li>ci: add lock-threads workflow by <a
href="https://github.com/Fdawgs "><code>@Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fast-uri/pull/169 ">fastify/fast-uri#169</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Tony133 "><code>@Tony133</code></a> made
their first contribution in <a
href="https://redirect.github.com/fastify/fast-uri/pull/162 ">fastify/fast-uri#162</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.1 ">https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/commit/919dd8ea7689fcc220d0d9b71307f5095e723ef9 "><code>919dd8e</code></a>
Bumped v3.1.2</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/c65ba573714af6b8e19e481d9444c27bc4355d07 "><code>c65ba57</code></a>
fixup: linting</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/6c86c17c3d76fb93aa3700ec6c0fa00faeb97293 "><code>6c86c17</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/a95158ad308df4d92bbde4eba699ce5165e9f796 "><code>a95158a</code></a>
Handle malformed fragment decoding without throwing (<a
href="https://redirect.github.com/fastify/fast-uri/issues/171 ">#171</a>)</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/cea547c91c6aae610041b17b75792ca4aa035a6d "><code>cea547c</code></a>
Bumped v3.1.1</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/876ce79b662c3e5015e4e7dffe6f37752ad34f35 "><code>876ce79</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/dcdf690b71a7bb3a19887ada65a9ab160d83bcc0 "><code>dcdf690</code></a>
ci: add lock-threads workflow (<a
href="https://redirect.github.com/fastify/fast-uri/issues/169 ">#169</a>)</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/c860e6589b1ac346f66e114b4eadb9613768108c "><code>c860e65</code></a>
build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (<a
href="https://redirect.github.com/fastify/fast-uri/issues/167 ">#167</a>)</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/9b4c6dc82fde0ca44e674403ece9185d85bb6d5f "><code>9b4c6dc</code></a>
build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (<a
href="https://redirect.github.com/fastify/fast-uri/issues/166 ">#166</a>)</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/85d09a9f7aa76b32c2bb005a90a71e144c361d24 "><code>85d09a9</code></a>
build(deps): bump
fastify/workflows/.github/workflows/plugins-ci-package-mana...</li>
<li>Additional commits viewable in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/maplibre/maputnik/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-09 02:25:06 +00:00
b2eca214c9
chore(deps): Bump cypress-io/github-action from 7.1.10 to 7.3.0 ( #1868 )
...
Bumps
[cypress-io/github-action](https://github.com/cypress-io/github-action )
from 7.1.10 to 7.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/github-action/releases ">cypress-io/github-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.3.0</h2>
<h1><a
href="https://github.com/cypress-io/github-action/compare/v7.2.0...v7.3.0 ">7.3.0</a>
(2026-05-05)</h1>
<h3>Features</h3>
<ul>
<li>add <code>expose</code> input for Cypress.expose() API (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1749 ">#1749</a>)
(<a
href="https://github.com/cypress-io/github-action/commit/dace029018fcdf86e0df89a31bc3cfa5b32570d8 ">dace029</a>)</li>
</ul>
<h2>v7.2.0</h2>
<h1><a
href="https://github.com/cypress-io/github-action/compare/v7.1.10...v7.2.0 ">7.2.0</a>
(2026-05-04)</h1>
<h3>Features</h3>
<ul>
<li><strong>deps:</strong> remove Node.js 20 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1747 ">#1747</a>)
(<a
href="https://github.com/cypress-io/github-action/commit/b7a7441d775af8f8b9d19945c10dd689a51dba68 ">b7a7441</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cypress-io/github-action/blob/master/CHANGELOG.md ">cypress-io/github-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>This document gives an overview of changes to the Cypress GitHub
JavaScript Action <a
href="https://github.com/cypress-io/github-action ">cypress-io/github-action</a>.</p>
<p>See <a
href="https://github.com/cypress-io/github-action/releases ">Releases</a>
for full details of changes.</p>
<table>
<thead>
<tr>
<th>Version</th>
<th>Changes</th>
</tr>
</thead>
<tbody>
<tr>
<td>v7.3.0</td>
<td>Add parameter <code>expose</code> for <a
href="https://docs.cypress.io/api/cypress-api/expose "><code>Cypress.expose()</code></a>
support</td>
</tr>
<tr>
<td>v7.2.0</td>
<td>Examples remove Node.js 20. End of support for Node.js 20.</td>
</tr>
<tr>
<td>v7.1.0</td>
<td>Add parameter <code>package-manager-cache</code></td>
</tr>
<tr>
<td>v7.0.0</td>
<td>Action runs under Node.js 24 instead of Node.js 20</td>
</tr>
<tr>
<td>v6.10.0</td>
<td>Examples remove Node.js 23. End of support for Node.js 23.</td>
</tr>
<tr>
<td>v6.9.0</td>
<td>Add parameter validation for <code>command</code></td>
</tr>
<tr>
<td>v6.8.0</td>
<td>Examples remove Node.js 18. End of support for Node.js 18.</td>
</tr>
<tr>
<td>v6.7.10</td>
<td>Examples updated to Cypress 14</td>
</tr>
<tr>
<td>v6.7.9</td>
<td>Migrate to <code>@actions/cache@4.0.0</code> for continued access to
GitHub Actions caching services</td>
</tr>
<tr>
<td>v6.7.0</td>
<td>Examples remove Node.js 21. End of support for Node.js 21.</td>
</tr>
<tr>
<td>v6.6.0</td>
<td>Add parameter <code>summary-title</code></td>
</tr>
<tr>
<td>v6.5.0</td>
<td>Examples remove Node.js 16. End of support for Node.js 16.</td>
</tr>
<tr>
<td>v6.4.0</td>
<td>Action adds PR number and URL if available when recording</td>
</tr>
<tr>
<td>v6.3.0</td>
<td>v6 is recommended action version</td>
</tr>
<tr>
<td>v6.2.0</td>
<td>Examples updated to Cypress 13</td>
</tr>
<tr>
<td>v6.1.0</td>
<td>Examples for Cypress 9 archived in action's <a
href="https://github.com/cypress-io/github-action/tree/v5 ">v5</a>
branch</td>
</tr>
<tr>
<td>v6.0.0</td>
<td>Action runs under Node.js 20 instead of Node.js 16</td>
</tr>
<tr>
<td>v5.8.1</td>
<td>Examples remove Node.js 19. End of support for Node.js 19</td>
</tr>
<tr>
<td>v5.8.0</td>
<td>Add GitHub step output <code>resultsUrl</code>. Deprecate
<code>dashboardUrl</code>.</td>
</tr>
<tr>
<td>v5.7.0</td>
<td>Add basic Yarn Modern Plug'n'Play support</td>
</tr>
<tr>
<td>v5.6.2</td>
<td>Examples add Node.js 20. End of support and removal of Node.js 14
examples.</td>
</tr>
<tr>
<td>v5.6.0</td>
<td>Add check for lockfile presence</td>
</tr>
<tr>
<td>v5.5.0</td>
<td>Examples add Yarn Modern</td>
</tr>
<tr>
<td>v5.4.0</td>
<td>Examples add Yarn Classic</td>
</tr>
<tr>
<td>v5.3.0</td>
<td>Add parameter <code>publish-summary</code> (default
<code>true</code>)</td>
</tr>
<tr>
<td>v5.2.0</td>
<td>Examples add Node.js 19</td>
</tr>
<tr>
<td>v5.1.0</td>
<td>Add parameter <code>auto-cancel-after-failures</code></td>
</tr>
<tr>
<td>v5.0.0</td>
<td>Examples add Node.js 18 and remove Node.js 12</td>
</tr>
<tr>
<td>v4.2.2</td>
<td>Dependency on GitHub <code>set-output</code> workflow command
removed</td>
</tr>
<tr>
<td>v4.2.0</td>
<td>Support for <code>pnpm</code> added</td>
</tr>
<tr>
<td>v4.0.0</td>
<td>Support for Cypress 10 and later versions added</td>
</tr>
<tr>
<td>v3</td>
<td>Action runs under Node.js 16 instead of Node.js 12</td>
</tr>
<tr>
<td>v2</td>
<td>Cypress runs using the <a
href="https://on.cypress.io/module-api ">Module API</a></td>
</tr>
<tr>
<td>v1</td>
<td><em>This version is no longer runnable in GitHub due to security
changes.</em></td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cypress-io/github-action/commit/dace029018fcdf86e0df89a31bc3cfa5b32570d8 "><code>dace029</code></a>
feat: add <code>expose</code> input for Cypress.expose() API (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1749 ">#1749</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/b7a7441d775af8f8b9d19945c10dd689a51dba68 "><code>b7a7441</code></a>
feat(deps): remove Node.js 20 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1747 ">#1747</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/66d3cedb6331a074e047750e78c70b82b853b2ec "><code>66d3ced</code></a>
chore(deps): lock file maintenance (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1748 ">#1748</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/b9f9a99294b3312f3437592eaecd347901843b48 "><code>b9f9a99</code></a>
chore(deps): update eslint (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1746 ">#1746</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/81583aec5063eac9d65a1ab88a108b2ec152843c "><code>81583ae</code></a>
chore(deps): update dependency cypress to v15.14.2 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1745 ">#1745</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/911b44aa974f55133b3d12538187afe75f31e00d "><code>911b44a</code></a>
chore(deps): update dependency webpack-cli to v7 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1742 ">#1742</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/da54419dc0ca820bdfdde7a21fd5c6a922d44c93 "><code>da54419</code></a>
chore(renovate): disable pnpm version updates in actions (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1743 ">#1743</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/10b3f5091bcaadff13ba7118946b969474e2826d "><code>10b3f50</code></a>
chore(renovate): disable pnpm/action-setup updates (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1739 ">#1739</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/8cbd2f496dd0857efb146b45002782d987290a14 "><code>8cbd2f4</code></a>
chore(renovate): restrict cypress/browsers to <25 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1740 ">#1740</a>)</li>
<li><a
href="https://github.com/cypress-io/github-action/commit/3aebf9a8215ebd24e2b14be2581165d81b920954 "><code>3aebf9a</code></a>
test(deps): update vite in examples to 8.0.10 (<a
href="https://redirect.github.com/cypress-io/github-action/issues/1741 ">#1741</a>)</li>
<li>See full diff in <a
href="https://github.com/cypress-io/github-action/compare/c495c3ddffba403ba11be95fffb67e25203b3799...dace029018fcdf86e0df89a31bc3cfa5b32570d8 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 13:54:25 +00:00
c785afbf64
chore(deps-dev): Bump postcss from 8.5.13 to 8.5.14 ( #1867 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.13 to
8.5.14.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.14</h2>
<ul>
<li>Fixed custom syntax regression (by <a
href="https://github.com/43081j "><code>@43081j</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.14</h2>
<ul>
<li>Fixed custom syntax regression (by <a
href="https://github.com/43081j "><code>@43081j</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/3ec13948ae0006e1bde2dfb545346341ac8b2dcf "><code>3ec1394</code></a>
Release 8.5.14 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/f2bb827b20b591080977412555aa3e5baf588620 "><code>f2bb827</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/d75953d60854ad835fd21dde0b11081522341020 "><code>d75953d</code></a>
Merge pull request <a
href="https://redirect.github.com/postcss/postcss/issues/2084 ">#2084</a>
from 43081j/raw-raws-rawing</li>
<li><a
href="https://github.com/postcss/postcss/commit/68bd2139b5dcaf5a682bc2e8826d8557be2d1480 "><code>68bd213</code></a>
fix: always call <code>raw</code> to retrieve raw values</li>
<li>See full diff in <a
href="https://github.com/postcss/postcss/compare/8.5.13...8.5.14 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 13:52:49 +00:00
9b9e440554
chore(deps-dev): Bump stylelint from 17.10.0 to 17.11.0 ( #1866 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.10.0
to 17.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.11.0</h2>
<p>It adds 2 features, including a <code>loader</code> property to
<code>referenceFiles: {}</code> for when the order of appearance in the
reference styles matters.</p>
<ul>
<li>Added: <code>loader</code> to experimental <code>referenceFiles:
{}</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9251 ">#9251</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Added: <code>autofixed</code> to the result object (<a
href="https://redirect.github.com/stylelint/stylelint/issues/8771 ">#8771</a>)
(<a href="https://github.com/Rob "><code>@Rob</code></a>--W).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.11.0 - 2026-05-05</h2>
<p>It adds 2 features, including a <code>loader</code> property to
<code>referenceFiles: {}</code> for when the order of appearance in the
reference styles matters.</p>
<ul>
<li>Added: <code>loader</code> to experimental <code>referenceFiles:
{}</code> (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9251 ">#9251</a>)
(<a
href="https://github.com/romainmenke "><code>@romainmenke</code></a>).</li>
<li>Added: <code>autofixed</code> to the result object (<a
href="https://redirect.github.com/stylelint/stylelint/pull/8771 ">#8771</a>)
(<a href="https://github.com/Rob--W "><code>@Rob--W</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint/stylelint/commit/e176acfb995aa7d8b6841cc514976187333c55e8 "><code>e176acf</code></a>
Release 17.11.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9271 ">#9271</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/769e791a0389c34983862609da94006c12ccd4a3 "><code>769e791</code></a>
Require owner review for <code>.npmrc</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9270 ">#9270</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/c0c362c375a9ef6b105fbb25ed01e86a214c733e "><code>c0c362c</code></a>
Harden <code>npm install</code> security (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9269 ">#9269</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/823fdfca02c14a2fa3a0eb03afbd2f48cb25ac34 "><code>823fdfc</code></a>
Add <code>autofixed</code> to the result object (<a
href="https://redirect.github.com/stylelint/stylelint/issues/8771 ">#8771</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/c19e627e47b9527d47d18c2c8c9b57d460ae2a54 "><code>c19e627</code></a>
Bump vulnerable dependencies via <code>npm audit fix</code> (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9267 ">#9267</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/2ce046f96dd1ae70b7d7936cfc0b3dafd29dd784 "><code>2ce046f</code></a>
Bump string-width from 8.2.0 to 8.2.1 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9266 ">#9266</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/a895cddf1ec7d2dd281b6365d739f5492967af56 "><code>a895cdd</code></a>
Bump the stylelint-actions group with 4 updates (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9265 ">#9265</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/1757a823b3acd9090f77a75866e66c8e9700c77a "><code>1757a82</code></a>
Configure Dependabot to group Stylelint actions (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9264 ">#9264</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/34918a424b6dd9be75b335b9e3e1fb19591d26da "><code>34918a4</code></a>
Add Dependency Review to CI (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9263 ">#9263</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/70c1f2db5a73c4b00fecdaa1c5de2113f1d25667 "><code>70c1f2d</code></a>
Add <code>loader</code> to experimental <code>referenceFiles: {}</code>
(<a
href="https://redirect.github.com/stylelint/stylelint/issues/9251 ">#9251</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint/stylelint/compare/17.10.0...17.11.0 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 13:52:41 +00:00
7657411e57
chore(deps-dev): Bump typescript-eslint from 8.59.1 to 8.59.2 ( #1865 )
...
Bumps
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint )
from 8.59.1 to 8.59.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases ">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.59.2</h2>
<h2>8.59.2 (2026-05-04)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unsafe-type-assertion] handle
crash on recursive template literal types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12150 ">#12150</a>)</li>
<li><strong>eslint-plugin:</strong> [no-deprecated] object destructuring
values should be treated as declarations (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12292 ">#12292</a>)</li>
<li><strong>rule-tester:</strong> add TypeScript as a peer dependency
(<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12288 ">#12288</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Dariusz Czajkowski</li>
<li>Dima Barabash</li>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger "><code>@kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.2 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md ">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.59.2 (2026-05-04)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.59.2 ">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning ">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases ">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/2ec35f1760aade4df4c631d76d78c7ed5e136333 "><code>2ec35f1</code></a>
chore(release): publish 8.59.2</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/typescript-eslint ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 13:52:25 +00:00
5862d81a81
chore(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 ( #1767 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.3.0
to 6.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases ">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Add go-download-base-url input for custom Go distributions by <a
href="https://github.com/gdams "><code>@gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/721 ">actions/setup-go#721</a></li>
</ul>
<h3>Dependency update</h3>
<ul>
<li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/727 ">actions/setup-go#727</a></li>
</ul>
<h3>Documentation update</h3>
<ul>
<li>Rearrange README.md, add advanced-usage.md by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/724 ">actions/setup-go#724</a></li>
<li>Fix Microsoft build of Go link by <a
href="https://github.com/gdams "><code>@gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/734 ">actions/setup-go#734</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/gdams "><code>@gdams</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/721 ">actions/setup-go#721</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v6.4.0 ">https://github.com/actions/setup-go/compare/v6...v6.4.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-go/commit/4a3601121dd01d1626a1e23e37211e3254c1c06c "><code>4a36011</code></a>
docs: fix Microsoft build of Go link (<a
href="https://redirect.github.com/actions/setup-go/issues/734 ">#734</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/8f19afcc704763637be6b1718da0af52ca05785d "><code>8f19afc</code></a>
feat: add go-download-base-url input for custom Go distributions (<a
href="https://redirect.github.com/actions/setup-go/issues/721 ">#721</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/27fdb267c15a8835f1ead03dfa07f89be2bb741a "><code>27fdb26</code></a>
Bump minimatch from 3.1.2 to 3.1.5 (<a
href="https://redirect.github.com/actions/setup-go/issues/727 ">#727</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/def8c394e3ad351a79bc93815e4a585520fe993b "><code>def8c39</code></a>
Rearrange README.md, add advanced-usage.md (<a
href="https://redirect.github.com/actions/setup-go/issues/724 ">#724</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 17:12:36 +03:00
58c84f510b
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 24.8.4 to 24.8.5 ( #1862 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 24.8.4 to 24.8.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v24.8.5</h2>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Added missing exported types (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1638 ">#1638</a>)
(by <a
href="https://github.com/scottg521 "><code>@scottg521</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>24.8.5</h2>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Added missing exported types (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1638 ">#1638</a>)
(by <a
href="https://github.com/scottg521 "><code>@scottg521</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/52a69cae4355d17352640d33e2d0c1328e6acfbe "><code>52a69ca</code></a>
Bump js version to 24.8.5 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1639 ">#1639</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/c9501632a8f436d8d3aab8e382dbe6bdf450b566 "><code>c950163</code></a>
add missing imports and exports to index.ts (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1638 ">#1638</a>)</li>
<li>See full diff in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v24.8.4...v24.8.5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 17:12:09 +03:00
93596b3540
feat: add drag and drop support to Upload Style area ( #1852 )
...
## Feat: Add drag and drop support to Upload Style area
Closes #911
---
### Problem
The Upload Style area only supported click-to-upload. Users could not
drag and drop a JSON file directly onto it.
### Fix
Added `onDragOver` and `onDrop` event handlers to the Upload Style area.
The dropped file is passed to the existing file reading logic already
used by the Upload button. A visual highlight is shown when dragging
over the area.
2026-05-06 17:11:17 +03:00
a588f3e08c
chore(deps-dev): Bump stylelint from 17.9.1 to 17.10.0 ( #1863 )
...
Bumps [stylelint](https://github.com/stylelint/stylelint ) from 17.9.1 to
17.10.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/releases ">stylelint's
releases</a>.</em></p>
<blockquote>
<h2>17.10.0</h2>
<p>It adds 3 rules and fixes 4 bugs. You can use the
<code>*-layout-mappings</code> rules to enforce logical or physical
properties, units and keywords.</p>
<ul>
<li>Added: <code>selector-no-invalid</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9232 ">#9232</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>unit-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9229 ">#9229</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>value-keyword-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9233 ">#9233</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: inconsistent error messages when module is not found (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9260 ">#9260</a>)
(<a
href="https://github.com/ybiquitous "><code>@ybiquitous</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false negatives for
property names in declaration values (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9222 ">#9222</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false positives for
<code>@page</code> properties (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9223 ">#9223</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>selector-pseudo-class-no-unknown</code> false positives
for nested <code>webkit-scrollbar</code> part (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9259 ">#9259</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md ">stylelint's
changelog</a>.</em></p>
<blockquote>
<h2>17.10.0 - 2026-05-03</h2>
<p>It adds 3 rules and fixes 4 bugs. You can use the
<code>*-layout-mappings</code> rules to enforce logical or physical
properties, units and keywords.</p>
<ul>
<li>Added: <code>selector-no-invalid</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9232 ">#9232</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>unit-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9229 ">#9229</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Added: <code>value-keyword-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9233 ">#9233</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: inconsistent error messages when module is not found (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9260 ">#9260</a>)
(<a
href="https://github.com/ybiquitous "><code>@ybiquitous</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false negatives for
property names in declaration values (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9222 ">#9222</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>property-layout-mappings</code> false positives for
<code>@page</code> properties (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9223 ">#9223</a>)
(<a href="https://github.com/jeddy3 "><code>@jeddy3</code></a>).</li>
<li>Fixed: <code>selector-pseudo-class-no-unknown</code> false positives
for nested <code>webkit-scrollbar</code> part (<a
href="https://redirect.github.com/stylelint/stylelint/pull/9259 ">#9259</a>)
(<a href="https://github.com/rkdfx "><code>@rkdfx</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/stylelint/stylelint/commit/b04c024a2c6c74b3aea6c1c77b1389d0668c400a "><code>b04c024</code></a>
Release 17.10.0 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9261 ">#9261</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/7a38078c699510957db19820ab18c20fcf2e1159 "><code>7a38078</code></a>
Fix <code>selector-pseudo-class-no-unknown</code> false positives for
nested `webkit-scr...</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/b25cd12aa87a307bcb2aa7b9e77808f1649fad57 "><code>b25cd12</code></a>
Add <code>value-keyword-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9233 ">#9233</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/da89ffec66bf8c703ce0ba6317032c59a0e2123c "><code>da89ffe</code></a>
Fix inconsistent error messages when module is not found (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9260 ">#9260</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/04a958d8852646bea569704bbd755793dbebd160 "><code>04a958d</code></a>
Add <code>unit-layout-mappings</code> rule (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9229 ">#9229</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/53da23e4dffd9898344dda9bf1de60f7dc691fa0 "><code>53da23e</code></a>
Bump postcss from 8.5.9 to 8.5.13 (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9249 ">#9249</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/3993951052b7d631bc5fce0a34dd6c6b31980ef6 "><code>3993951</code></a>
Fix <code>property-layout-mappings</code> false negatives for property
names in declarat...</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/89b3f0d1c0f6756722a81be16aab74e0605691f2 "><code>89b3f0d</code></a>
Bump typescript from 6.0.2 to 6.0.3 in the typescript group (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9257 ">#9257</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/6e5e4da1e2a369be6bd141736c287d1b8d7f31a6 "><code>6e5e4da</code></a>
Bump eslint from 10.2.0 to 10.2.1 in the eslint group (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9255 ">#9255</a>)</li>
<li><a
href="https://github.com/stylelint/stylelint/commit/1540320c65a1481c21e40d67a4693b00eb9d9086 "><code>1540320</code></a>
Bump <code>@changesets/cli</code> from 2.30.0 to 2.31.0 in the
changesets group (<a
href="https://redirect.github.com/stylelint/stylelint/issues/9254 ">#9254</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/stylelint/stylelint/compare/17.9.1...17.10.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-06 13:54:42 +00:00
bea46c8ff9
chore(deps): Bump @maplibre/maplibre-gl-style-spec from 24.8.3 to 24.8.4 ( #1861 )
...
Bumps
[@maplibre/maplibre-gl-style-spec](https://github.com/maplibre/maplibre-style-spec )
from 24.8.3 to 24.8.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/releases ">@maplibre/maplibre-gl-style-spec's
releases</a>.</em></p>
<blockquote>
<h2>v24.8.4</h2>
<h3>✨ Features and improvements</h3>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Replace rw with node:fs. Resolves <a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1625 ">#1625</a>
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1635 ">#1635</a>)
(by <a
href="https://github.com/birkskyum "><code>@birkskyum</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/maplibre/maplibre-style-spec/blob/main/CHANGELOG.md ">@maplibre/maplibre-gl-style-spec's
changelog</a>.</em></p>
<blockquote>
<h2>24.8.4</h2>
<h3>✨ Features and improvements</h3>
<h3>🐞 Bug fixes</h3>
<ul>
<li>Replace rw with node:fs. Resolves <a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1625 ">#1625</a>
(<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/pull/1635 ">#1635</a>)
(by <a
href="https://github.com/birkskyum "><code>@birkskyum</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/d8de455c073d3063d3138e3b0882ee362af23916 "><code>d8de455</code></a>
Bump js version to 24.8.4 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1636 ">#1636</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/f3b9cca44f65e2205adf1b9c58a7c46585307b10 "><code>f3b9cca</code></a>
fix: replace rw with node:fs (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1635 ">#1635</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/c3d8059309ca92074f00999a836f1f1d5867c1fe "><code>c3d8059</code></a>
build(deps-dev): bump globals from 17.5.0 to 17.6.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1634 ">#1634</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/8e7724efb4a826ad8431b5a6260558be15c225a8 "><code>8e7724e</code></a>
build(deps-dev): bump <code>@typescript-eslint/eslint-plugin</code> (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1632 ">#1632</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/15d6c4cbfa7873bcaef0cbb992e1fbed579ece73 "><code>15d6c4c</code></a>
build(deps-dev): bump rolldown-plugin-dts from 0.24.0 to 0.24.1 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1629 ">#1629</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/530bf91d4e336eaf935c45e86103e084013bcedd "><code>530bf91</code></a>
build(deps-dev): bump eslint from 10.2.1 to 10.3.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1631 ">#1631</a>)</li>
<li><a
href="https://github.com/maplibre/maplibre-style-spec/commit/fcca06cee0f2d5ed0f8597b1194b69e8e14d817a "><code>fcca06c</code></a>
build(deps-dev): bump oxfmt from 0.46.0 to 0.47.0 (<a
href="https://redirect.github.com/maplibre/maplibre-style-spec/issues/1630 ">#1630</a>)</li>
<li>See full diff in <a
href="https://github.com/maplibre/maplibre-style-spec/compare/v24.8.3...v24.8.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 13:54:05 +00:00
bf99253391
chore(deps-dev): Bump eslint from 10.2.1 to 10.3.0 ( #1855 )
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.2.1 to 10.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases ">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.3.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/379571a975f2b24d88037b9de2e72ec61d004130 "><code>379571a</code></a>
feat: add suggestions for no-unused-private-class-members (<a
href="https://redirect.github.com/eslint/eslint/issues/20773 ">#20773</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b6ae5cf07b9b51802367539cb24b245b61eaa37c "><code>b6ae5cf</code></a>
fix: handle unavailable require cache (<a
href="https://redirect.github.com/eslint/eslint/issues/20812 ">#20812</a>)
(Simon Podlipsky)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6fb3685bcbe9a6f72fd7dfb9129686b6fb96b0bd "><code>6fb3685</code></a>
fix: rule suggestions cause continuation in class body (<a
href="https://redirect.github.com/eslint/eslint/issues/20787 ">#20787</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/32cc7ab4ec653ce89da92deb5c40a9f4fc707fe5 "><code>32cc7ab</code></a>
docs: fix typos in docs and comments (<a
href="https://redirect.github.com/eslint/eslint/issues/20809 ">#20809</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7f479376a2fa463d823ab762db6bb37ce8d2ee8f "><code>7f47937</code></a>
docs: Update README (GitHub Actions Bot)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/d32235ec19ceea211fa86452afa383ca05f5c2f9 "><code>d32235e</code></a>
ci: use pnpm in <code>eslint-flat-config-utils</code> type integration
test (<a
href="https://redirect.github.com/eslint/eslint/issues/20826 ">#20826</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3ffb14ea517de750ed1181579ef844af342e4096 "><code>3ffb14e</code></a>
chore: clean up typos in comments and JSDoc (<a
href="https://redirect.github.com/eslint/eslint/issues/20821 ">#20821</a>)
(Pixel998)</li>
<li><a
href="https://github.com/eslint/eslint/commit/22eb58a21cbde2fbd53a1fae99453d408672de50 "><code>22eb58a</code></a>
chore: add missing continue-on-error to ecosystem-tests.yml (<a
href="https://redirect.github.com/eslint/eslint/issues/20818 ">#20818</a>)
(Josh Goldberg ✨ )</li>
<li><a
href="https://github.com/eslint/eslint/commit/88bf0024cb36caebf2880516d9a1f81aa75dafe2 "><code>88bf002</code></a>
ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/20815 ">#20815</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/97c8c330beae9557ad24e19f94eebc8d08d1a722 "><code>97c8c33</code></a>
chore: update ilshidur/action-discord action to v0.4.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/20811 ">#20811</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/2f58136dd47364a4cae7054a64f7bf1e79693813 "><code>2f58136</code></a>
chore: pin peter-evans/create-pull-request action to 5f6978f (<a
href="https://redirect.github.com/eslint/eslint/issues/20810 ">#20810</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/77add7f1bc91ed17bba3be3289928a9146c5f5a1 "><code>77add7f</code></a>
chore: add initial ecosystem plugin tests workflow (<a
href="https://redirect.github.com/eslint/eslint/issues/19643 ">#19643</a>)
(Josh Goldberg ✨ )</li>
<li><a
href="https://github.com/eslint/eslint/commit/4023b55490fae55e464fe35530ef038cdf5d79a5 "><code>4023b55</code></a>
test: Add unit tests for SuppressionsService.prune() (<a
href="https://redirect.github.com/eslint/eslint/issues/20797 ">#20797</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/54080dad4f77bb39a1a843933d4ff3a2b7c175e2 "><code>54080da</code></a>
test: add unit tests for ForkContext (<a
href="https://redirect.github.com/eslint/eslint/issues/20778 ">#20778</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f0e2bcc4bf19253aaebfbd7df87824b0ca4a151f "><code>f0e2bcc</code></a>
test: add unit tests for SuppressionsService.suppress() method (<a
href="https://redirect.github.com/eslint/eslint/issues/20765 ">#20765</a>)
(kuldeep kumar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a7f0b94743a99bcdf8d07cff15ffbfa6a6c5f927 "><code>a7f0b94</code></a>
chore: update dependency prettier to v3.8.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/20782 ">#20782</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/7bf93d9e79f6dbf77242cbb9a9b8be834730fccd "><code>7bf93d9</code></a>
chore: update TypeScript to v6 (<a
href="https://redirect.github.com/eslint/eslint/issues/20677 ">#20677</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b42dd72e76e7f90e7f0be9458288d93353052adc "><code>b42dd72</code></a>
ci: bump pnpm/action-setup from 6.0.0 to 6.0.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/20781 ">#20781</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/2b252be80f362cca7be3326a6dbe958680fdfe9a "><code>2b252be</code></a>
test: add unit tests for IdGenerator (<a
href="https://redirect.github.com/eslint/eslint/issues/20775 ">#20775</a>)
(kuldeep kumar)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/78892043a36da4aa7640b59c99344b00c181048a "><code>7889204</code></a>
10.3.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/5b69b4fce4dc407c8e960eba638b5a3409c4f1fd "><code>5b69b4f</code></a>
Build: changelog update for 10.3.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/d32235ec19ceea211fa86452afa383ca05f5c2f9 "><code>d32235e</code></a>
ci: use pnpm in <code>eslint-flat-config-utils</code> type integration
test (<a
href="https://redirect.github.com/eslint/eslint/issues/20826 ">#20826</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b6ae5cf07b9b51802367539cb24b245b61eaa37c "><code>b6ae5cf</code></a>
fix: handle unavailable require cache (<a
href="https://redirect.github.com/eslint/eslint/issues/20812 ">#20812</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3ffb14ea517de750ed1181579ef844af342e4096 "><code>3ffb14e</code></a>
chore: clean up typos in comments and JSDoc (<a
href="https://redirect.github.com/eslint/eslint/issues/20821 ">#20821</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6fb3685bcbe9a6f72fd7dfb9129686b6fb96b0bd "><code>6fb3685</code></a>
fix: rule suggestions cause continuation in class body (<a
href="https://redirect.github.com/eslint/eslint/issues/20787 ">#20787</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/22eb58a21cbde2fbd53a1fae99453d408672de50 "><code>22eb58a</code></a>
chore: add missing continue-on-error to ecosystem-tests.yml (<a
href="https://redirect.github.com/eslint/eslint/issues/20818 ">#20818</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/88bf0024cb36caebf2880516d9a1f81aa75dafe2 "><code>88bf002</code></a>
ci: bump pnpm/action-setup from 6.0.1 to 6.0.3 (<a
href="https://redirect.github.com/eslint/eslint/issues/20815 ">#20815</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/379571a975f2b24d88037b9de2e72ec61d004130 "><code>379571a</code></a>
feat: add suggestions for no-unused-private-class-members (<a
href="https://redirect.github.com/eslint/eslint/issues/20773 ">#20773</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/97c8c330beae9557ad24e19f94eebc8d08d1a722 "><code>97c8c33</code></a>
chore: update ilshidur/action-discord action to v0.4.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/20811 ">#20811</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.2.1...v10.3.0 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 17:56:58 +00:00
077a2073eb
chore(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 ( #1860 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action )
from 4.35.2 to 4.35.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.35.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837 ">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850 ">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853 ">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852 ">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3 ">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865 ">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795 ">#3795</a></li>
<li>The Git version 2.36.0 requirement for improved incremental analysis
now only applies to repositories that contain submodules. <a
href="https://redirect.github.com/github/codeql-action/pull/3789 ">#3789</a></li>
<li>Python analysis on GHES no longer extracts the standard library,
relying instead on models of the standard library. This should result in
significantly faster extraction and analysis times, while the effect on
alerts should be minimal. <a
href="https://redirect.github.com/github/codeql-action/pull/3794 ">#3794</a></li>
<li>Fixed a bug in the validation of OIDC configurations for private
registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3807 ">#3807</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2 ">2.25.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3823 ">#3823</a></li>
</ul>
<h2>4.35.1 - 27 Mar 2026</h2>
<ul>
<li>Fix incorrect minimum required Git version for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3781 ">#3781</a></li>
</ul>
<h2>4.35.0 - 27 Mar 2026</h2>
<ul>
<li>Reduced the minimum Git version required for <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> from 2.38.0 to 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3767 ">#3767</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1 ">2.25.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3773 ">#3773</a></li>
</ul>
<h2>4.34.1 - 20 Mar 2026</h2>
<ul>
<li>Downgrade default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3 ">2.24.3</a>
due to issues with a small percentage of Actions and JavaScript
analyses. <a
href="https://redirect.github.com/github/codeql-action/pull/3762 ">#3762</a></li>
</ul>
<h2>4.34.0 - 20 Mar 2026</h2>
<ul>
<li>Added an experimental change which disables TRAP caching when <a
href="https://redirect.github.com/github/roadmap/issues/1158 ">improved
incremental analysis</a> is enabled, since improved incremental analysis
supersedes TRAP caching. This will improve performance and reduce
Actions cache usage. We expect to roll this change out to everyone in
March. <a
href="https://redirect.github.com/github/codeql-action/pull/3569 ">#3569</a></li>
<li>We are rolling out improved incremental analysis to C/C++ analyses
that use build mode <code>none</code>. We expect this rollout to be
complete by the end of April 2026. <a
href="https://redirect.github.com/github/codeql-action/pull/3584 ">#3584</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0 ">2.25.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3585 ">#3585</a></li>
</ul>
<h2>4.33.0 - 16 Mar 2026</h2>
<ul>
<li>
<p>Upcoming change: Starting April 2026, the CodeQL Action will skip
collecting file coverage information on pull requests to improve
analysis performance. File coverage information will still be computed
on non-PR analyses. Pull request analyses will log a warning about this
upcoming change. <a
href="https://redirect.github.com/github/codeql-action/pull/3562 ">#3562</a></p>
<p>To opt out of this change:</p>
<ul>
<li><strong>Repositories owned by an organization:</strong> Create a
custom repository property with the name
<code>github-codeql-file-coverage-on-prs</code> and the type
"True/false", then set this property to <code>true</code> in
the repository's settings. For more information, see <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization ">Managing
custom properties for repositories in your organization</a>.
Alternatively, if you are using an advanced setup workflow, you can set
the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable
to <code>true</code> in your workflow.</li>
<li><strong>User-owned repositories using default setup:</strong> Switch
to an advanced setup workflow and set the
<code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to
<code>true</code> in your workflow.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/e46ed2cbd01164d986452f91f178727624ae40d7 "><code>e46ed2c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3867 ">#3867</a>
from github/update-v4.35.3-8c6e48dbe</li>
<li><a
href="https://github.com/github/codeql-action/commit/b73d1d163446ca5e62b96698027210ab41df6a4a "><code>b73d1d1</code></a>
Add changelog entry for <a
href="https://redirect.github.com/github/codeql-action/issues/3853 ">#3853</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/24e0bb00a931e2a5edb703ce3b22a70f3a3e800b "><code>24e0bb0</code></a>
Reorder changelog entries</li>
<li><a
href="https://github.com/github/codeql-action/commit/ec298daba71cf7592feacbd1c0887cddc0659f62 "><code>ec298da</code></a>
Update changelog for v4.35.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/8c6e48dbe051ceb3015c19554831af1b43275f46 "><code>8c6e48d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3865 ">#3865</a>
from github/update-bundle/codeql-bundle-v2.25.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/719098349ea5beae8aa364bf9b71ff1c8d937df2 "><code>7190983</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/2bb209555a024d051f6271c8a846b402497f9445 "><code>2bb2095</code></a>
Update default bundle to codeql-bundle-v2.25.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/7851e55dc3be31ec4bcc3ef98453de2cb306e698 "><code>7851e55</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3850 ">#3850</a>
from github/mbg/private-registry/cloudsmith-gcp</li>
<li><a
href="https://github.com/github/codeql-action/commit/262a15f6cf4c7a43d6a38ad76392e5e2d4977751 "><code>262a15f</code></a>
Add generic non-printable chars test for OIDC configs</li>
<li><a
href="https://github.com/github/codeql-action/commit/a6109b1c07173a53ece3d179a925ff9644d1fabd "><code>a6109b1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3853 ">#3853</a>
from github/mbg/start-proxy/improved-checks</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...e46ed2cbd01164d986452f91f178727624ae40d7 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-04 17:50:09 +00:00
github-actions[bot]
dependabot[bot]
Cihad GÜNDOĞDU
Harel M
Kanish Jeba Mathew M